Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://mtb-repo.pages.dev/

Overview

General Information

Sample URL:	https://mtb-repo.pages.dev/
Analysis ID:	1408726
Infos:

Detection

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

HTML page contains hidden email address

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 4268 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=1996,i,10392077466193736227,16724924904900396291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6456 --field-trial-handle=1996,i,10392077466193736227,16724924904900396291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7116 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6524 --field-trial-handle=1996,i,10392077466193736227,16724924904900396291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6456 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mtb-repo.pages.dev/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://mtb-repo.pages.dev/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://mtb-repo.pages.dev/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://mtb-repo.pages.dev/mtb_files/mtb-equalhousinglender.svg	Avira URL Cloud: Label: phishing
Source: https://mtb-repo.pages.dev/mtb_files/saved_resource.html	Avira URL Cloud: Label: phishing

Multi AV Scanner detection for domain / URL

Source: mtb-repo.pages.dev

Virustotal: Detection: 12%

Multi AV Scanner detection for submitted file

Source: https://mtb-repo.pages.dev/

Virustotal: Detection: 17%

Phishing

HTML page contains hidden email address

Source: https://m.mtb.com/Enrollment	HTTP Parser: 8.L8@....y..r...Ib.&..+r
Source: https://m.mtb.com/Enrollment	HTTP Parser: 8.L8@....y..r...Ib.&..+r

Source: https://mtb-repo.pages.dev/login

HTTP Parser: Iframe src: ./mtb_files/saved_resource.html

Source: https://mtb-repo.pages.dev/login

HTTP Parser: Number of links: 0

Source: https://mtb-repo.pages.dev/login

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www3.mtb.com/home-page

HTTP Parser: Base64 decoded: https://www3.mtb.com:443

Source: https://mtb-repo.pages.dev/login

HTTP Parser: Title: Welcome to Online Banking | M&T Bank does not match URL

Source: https://mtb-repo.pages.dev/login

HTTP Parser: <input type="password" .../> found

Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3&co=aHR0cHM6Ly93d3czLm10Yi5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=invisible&cb=c8l0hwixplg5	HTTP Parser: No favicon
Source: https://www3.mtb.com/personal-banking/online-mobile-services	HTTP Parser: No favicon
Source: https://www3.mtb.com/personal-banking/online-mobile-services	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3&co=aHR0cHM6Ly93d3czLm10Yi5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=invisible&cb=kjlgubngf9bq	HTTP Parser: No favicon

Source: https://mtb-repo.pages.dev/login

HTTP Parser: No <meta name="author".. found

Source: https://mtb-repo.pages.dev/login

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.199.50.2:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.199.50.2:443 -> 192.168.2.4:49754 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 54.156.2.105
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: mtb-repo.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-1PX0Jpt0.css HTTP/1.1Host: mtb-repo.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mtb-repo.pages.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://mtb-repo.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mtb_files/saved_resource.html HTTP/1.1Host: mtb-repo.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://mtb-repo.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-ewIPLFCo.js HTTP/1.1Host: mtb-repo.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mtb-repo.pages.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://mtb-repo.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mtb_files/mtb-logo.svg HTTP/1.1Host: mtb-repo.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mtb-repo.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mtb_files/mtb-equalhousinglender.svg HTTP/1.1Host: mtb-repo.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mtb-repo.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mtb_files/mtb-entrust.svg HTTP/1.1Host: mtb-repo.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mtb-repo.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mtb_files/saved_resource HTTP/1.1Host: mtb-repo.pages.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mtb-repo.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mtb_files/mtb-logo.svg HTTP/1.1Host: mtb-repo.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mtb_files/mtb-equalhousinglender.svg HTTP/1.1Host: mtb-repo.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mtb_files/mtb-entrust.svg HTTP/1.1Host: mtb-repo.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Documents/html/homepage/favicon.ico HTTP/1.1Host: asset.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mtb-repo.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /Documents/html/homepage/favicon.ico HTTP/1.1Host: asset.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /home-page HTTP/1.1Host: www.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /home-page HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/mtb-web/clientlibs/clientlib-base.css HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/axp-common/clientlibs/vendor.js HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/axp-common/components/content/disclosure/v1/disclosure/clientlib-header.js HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-book.woff HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www3.mtb.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-light.woff HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www3.mtb.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-medium.woff HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www3.mtb.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-bold.otf HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www3.mtb.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/experience-fragments/mtb-web/info-icon-exp-fragment/info-icon-experience-fragment-2/_jcr_content/root/columns/col_1/image.coreimg.png/1601342332140/green-logo.png HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.sync.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/experience-fragments/mtb-web/homepage-body-experience-fragment/personal3/_jcr_content/root/columns/col_2/columns/col_1/image.coreimg.png/1708525986921/top-10-sba-logo-2022.png HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/experience-fragments/mtb-web/info-icon-exp-fragment/info-icon-experience-fragment-2/_jcr_content/root/columns/col_1/image.coreimg.png/1601342332140/green-logo.png HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/experience-fragments/mtb-web/homepage-body-experience-fragment/personal3/_jcr_content/root/columns/col_2/columns/col_2/image_copy_copy.coreimg.png/1708525802608/greenwich-bestbrand-logo-2022.png HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/icons/mtb-icon-mortgage-2c-cmyk.png HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/experience-fragments/mtb-web/homepage-body-experience-fragment/personal3/_jcr_content/root/columns/col_2/columns/col_1/image.coreimg.png/1708525986921/top-10-sba-logo-2022.png HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/scripts/fe_utilities_axp.js HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/experience-fragments/mtb-web/homepage-body-experience-fragment/personal3/_jcr_content/root/columns/col_2/columns/col_2/image_copy_copy.coreimg.png/1708525802608/greenwich-bestbrand-logo-2022.png HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/icons/mtb-icon-mortgage-2c-cmyk.png HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/scripts/fe_utilities_axp.css HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/scripts/alert_scripts/alert_new_design.css HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/scripts/alert_scripts/allAlertobject.js HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/scripts/status.js HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/scripts/charReplace.js HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/mtb-web/clientlibs/clientlib-base.js HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/scripts/mtbank-prod.js HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session
Source: global traffic	HTTP traffic detected: GET /v1/p HTTP/1.1Host: aiq-in.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.210.js?utv=ut4.51.202308231951 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.40.js?utv=ut4.51.202309082106 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.41.js?utv=ut4.51.202309082106 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/spanish/es-language-icon.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379669
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.42.js?utv=ut4.51.202106282113 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.43.js?utv=ut4.51.202006232100 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/personal-home-page/mom-daughter-couch-desktop.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379669
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/shareholder-letter/2024-shareholder-letter-art-desktop.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379669
Source: global traffic	HTTP traffic detected: GET /m2/mtb/mbox/json?mbox=target-global-mbox&mboxSession=982bceee196b4711901768c5d35728f4&mboxPC=&mboxPage=95c765057f464bf290004888157cb13b&mboxRid=46f004b8035b4814899fcb244e9933cb&mboxVersion=1.8.3&mboxCount=1&mboxTime=1710381408801&mboxHost=www3.mtb.com&mboxURL=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&mboxReferrer=&browserHeight=907&browserWidth=1280&browserTimeOffset=60&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_property=f7ba4290-5c00-8608-2ad1-5fc4576548bf&zipCodeCookie=&geoRegionCookie=&entity.categoryId=home-page&user.categoryId=home-page&loginClickedCookie=&mbox3rdPartyId= HTTP/1.1Host: mtb.tt.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www3.mtb.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/personal-home-page/convenience-section-image1.png HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379669
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.44.js?utv=ut4.51.202309082106 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.46.js?utv=ut4.51.202309082106 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.47.js?utv=ut4.51.202106282113 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.70.js?utv=ut4.51.202302282213 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.76.js?utv=ut4.51.202309082106 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/diversity-inclusion/50-50-volunteer.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379669
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.190.js?utv=ut4.51.202309150258 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/lending-calculator-1440x650.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
Source: global traffic	HTTP traffic detected: GET /i/8032d93d154e4517e5e5e20fa9c27d7b.js HTTP/1.1Host: ob.segreencolumn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.214.js?utv=ut4.51.202311032118 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/spotlight/mtb-hp-spotlight-whm.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/spanish/es-language-icon.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/personal-home-page/mom-daughter-couch-desktop.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/shareholder-letter/2024-shareholder-letter-art-desktop.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/personal-home-page/convenience-section-image1.png HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.215.js?utv=ut4.51.202304242124 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/diversity-inclusion/50-50-volunteer.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
Source: global traffic	HTTP traffic detected: GET /m2/mtb/mbox/json?mbox=target-global-mbox&mboxSession=982bceee196b4711901768c5d35728f4&mboxPC=&mboxPage=95c765057f464bf290004888157cb13b&mboxRid=46f004b8035b4814899fcb244e9933cb&mboxVersion=1.8.3&mboxCount=1&mboxTime=1710381408801&mboxHost=www3.mtb.com&mboxURL=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&mboxReferrer=&browserHeight=907&browserWidth=1280&browserTimeOffset=60&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_property=f7ba4290-5c00-8608-2ad1-5fc4576548bf&zipCodeCookie=&geoRegionCookie=&entity.categoryId=home-page&user.categoryId=home-page&loginClickedCookie=&mbox3rdPartyId= HTTP/1.1Host: mtb.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/main/prod/utag.224.js?utv=ut4.51.202312122232 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/ytc.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3&co=aHR0cHM6Ly93d3czLm10Yi5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=invisible&cb=c8l0hwixplg5 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/lending-calculator-1440x650.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/spotlight/mtb-hp-spotlight-whm.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
Source: global traffic	HTTP traffic detected: GET /qscripts/quantum-mtb.js HTTP/1.1Host: cdn.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/293418718495934?v=2.9.149&r=stable&domain=www3.mtb.com&hme=8b8eb2472f555e54a8b57f2b720f9bd3b1bc6aed031525376dd772ba51107995&ex_m=63%2C107%2C95%2C99%2C54%2C3%2C89%2C62%2C14%2C87%2C80%2C45%2C47%2C153%2C156%2C167%2C163%2C164%2C166%2C26%2C90%2C46%2C69%2C165%2C148%2C151%2C160%2C161%2C168%2C116%2C13%2C44%2C172%2C171%2C118%2C16%2C30%2C33%2C1%2C37%2C58%2C59%2C60%2C64%2C84%2C15%2C12%2C86%2C83%2C82%2C96%2C98%2C32%2C97%2C27%2C23%2C149%2C152%2C125%2C25%2C9%2C10%2C11%2C5%2C6%2C22%2C19%2C20%2C50%2C55%2C57%2C67%2C91%2C24%2C68%2C8%2C7%2C72%2C42%2C18%2C93%2C92%2C17%2C74%2C79%2C41%2C40%2C78%2C34%2C36%2C77%2C49%2C75%2C29%2C38%2C66%2C0%2C85%2C4%2C81%2C73%2C76%2C2%2C31%2C56%2C35%2C94%2C39%2C71%2C61%2C100%2C53%2C52%2C28%2C88%2C51%2C48%2C43%2C70%2C65%2C21%2C101 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10087193.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www3.mtb.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10108773.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www3.mtb.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=eb8739fc-85bf-4705-8e1c-d3d391190c7d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ce9a527c-4201-486e-8c81-c51017e646de&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=eb8739fc-85bf-4705-8e1c-d3d391190c7d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ce9a527c-4201-486e-8c81-c51017e646de&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spx?dxver=4.0.0&shaid=34249&tdr=&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&cb=42205510116200300 HTTP/1.1Host: dx.mountain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct?id=40173&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1710377811956&hl=1&op=0&ag=300509663&rand=930900207112600627151968957212880781022186171791009110850075551602210670150808968161&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=W1siZWYiLDI1NThdLFsxMiwie1wiY3R4XCI6XCJ3ZWJnbFwiLFwidlwiOlwiZ29vZ2xlIGluYy4gKGdvb2dsZSlcIixcInJcIjpcImFuZ2xlIChnb29nbGUsIHZ1bGthbiAxLjMuMCAoc3dpZnRzaGFkZXIgZGV2aWNlIChzdWJ6ZXJvKSAoMHgwMDAwYzBkZSkpLCBzd2lmdHNoYWRlciBkcml2ZXIpXCIsXCJzbHZcIjpcIndlYmdsIGdsc2wgZXMgMS4wIChvcGVuZ2wgZXMgZ2xzbCBlcyAxLjAgY2hyb21pdW0pXCIsXCJndmVyXCI6XCJ3ZWJnbCAxLjAgKG9wZW5nbCBlcyAyLjAgY2hyb21pdW0pXCIsXCJndmVuXCI6XCJ3ZWJraXRcIixcImJlblwiOjYsXCJ3Z2xcIjoxLFwiZ3JlblwiOlwid2Via2l0IHdlYmdsXCIsXCJzZWZcIjozNjk4NTE4NzEwLFwic2VjXCI6XCJcIn0iXSxbImNiIiwiMCwwLDEsMCwzLDAsMCwwLDAsNSwwLDAsMTAsOCwwLDAsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDY1LDEsMCwwLDEsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMTMsMCwwLDAsMCwwLDAsMSwzLDAiXSxbLTEsIi0iXSxbLTIsIjI2LGQ0SE9YVlBYN2ZOak5iMUt1N2NXOWdURzgydlFWSTZBbTlneUZBQWlIa1R5REJmTW1YWGlpcGhFRG94Y2IwRmpDWTBBM0dOdURlSkZkWlhkb3k1VzMvNTg1cXBiVXc1Y3RQZnYiXSxbLTMsIltcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIl0iXSxbLTQsIi0iXSxbLTUsIi0iXSxbLTYsIntcIndcIjpbXCIwXCIsXCJVdGlsc1wiLFwiY3VzdG9tRXZlbnRzT2JqZWN0XCIsXCJjb29raWVzVXRpbHNcIixcIm1vZGFsT2JqZWN0XCIsXCJ0ZWFsaXVtVXRpbHNcIixcIkhhc2h0YWJsZVwiLFwic3RhcnRzV2l0aFwiLFwiRG9tRGF0YUNvbGxlY3Rpb25cIixcIklFX0ZpbmdlclByaW50XCIsXCJNb3ppbGxhX0ZpbmdlclByaW50XCIsXCJPcGVyYV9GaW5nZXJQcmludFwiLFwiVGltZXJcIixcImdldFJhbmRvbVBvcnRcIixcIlByb3h5Q29sbGVjdG9yXCIsXCJCbGFja2JlcnJ5TG9jYXRpb25Db2xsZWN0b3JcIixcImRldGVjdEZpZWxkc1wiLFwiU0VQXCIsXCJQQUlSXCIsXCJERVZcIixcIkZpbmdlclByaW50XCIsXCJ1cmxFbmNvZGVcIixcImVuY29kZV9kZXZpY2VwcmludFwiLFwiZGVjb2RlX2RldmljZXByaW50XCIsXCJwb3N0X2RldmljZXByaW50XCIsXCJwb3N0X2ZpbmdlcnByaW50c1wiLFwiYWRkX2RldmljZXByaW50XCIsXCJmb3JtX2FkZF9kYXRhXCIsXCJmb3JtX2FkZF9kZXZpY2VwcmludFwiLFwiSFRNTDVcIixcIkJMQUNLQkVSUllcIixcIlVOREVGSU5FRFwiLFwiR0VPX0xPQ0FUSU9OX0RFRkFVTFRfU1RSVUNUXCIsXCJnZW9Mb2NhdG9yXCIsXCJnZW9Mb2NhdG9yU3RhdHVzXCIsXCJkZXRlY3REZXZpY2VDb2xsZWN0aW9uQVBJTW9kZVwiLFwiaW5pdFwiLFwic3RhcnRDb2xsZWN0aW9uXCIsXCJzdG9wQ29sbGVjdGlvblwiLFwiZ2V0R2VvbG9jYXRpb25TdHJ1Y3RcIixcIkhUTUw1TG9jYXRpb25Db2xsZWN0b3JcIixcIlVJRXZlbnRDb2xsZWN0b3JcIixcIkludGVyYWN0aW9uRWxlbWVudFwiLFwiVUlFbGVtZW50TGlzdFwiLFwiYWN0aXZlWERldGVjdFwiLFwic3RyaXBJbGxlZ2FsQ2hhcnNcIixcInN0cmlwRnVsbFBhdGhcIixcIkJyb3dzZXJEZXRlY3RcIixcImNvbnZlcnRUaW1lc3RhbXBUb0dNVFwiLFwiZ2V0VGltZXN0YW1wSW5NaWxsaXNcIl0sXCJuXCI6W10sXCJkXCI6W119Il0sWy03LCItIl0sWy04LCItIl0sWy05LCIrIl0sWy0xMCwiLSJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltcImRlc2NyaXB0aW9uXCJdfSJdLFstMTIsIm51bGwiXSxbLTEzLCItIl0sWy0xNCwiLSJdLFstMTUsIi0iXSxbLTE2LCIwIl0sWy0xNywiNCJdLFstMTgsIlswLDAsMCwxXSJdLFstMTksIlswLDAsMCwwLDAsMCwxLDI0LDI0LFwiLVwiLDEyODAsOTg0LDEyOD
Source: global traffic	HTTP traffic detected: GET /td/rul/948713993?random=1710377812268&cv=11&fst=1710377812268&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10087193.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wi/config/10108773.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/948713993/?random=1710377812268&cv=11&fst=1710377812268&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /is HTTP/1.1Host: 54.156.2.105Connection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www3.mtb.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Thu%2C%2014%20Mar%202024%2000%3A56%3A52%20GMT&n=-1&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium%2Cgtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10087193&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&tagmgr=tealium%2Cgtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium%2Cgtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/v77SiQbcxtK1O5ek11TdloiB5zZ00UAxE3PsP-319e4.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3&co=aHR0cHM6Ly93d3czLm10Yi5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=invisible&cb=c8l0hwixplg5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=eb8739fc-85bf-4705-8e1c-d3d391190c7d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ce9a527c-4201-486e-8c81-c51017e646de&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=08022923-6d5c-4a53-a3f5-ff7758503d68
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=eb8739fc-85bf-4705-8e1c-d3d391190c7d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ce9a527c-4201-486e-8c81-c51017e646de&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_5UBAyvKoxs+QXpDa5ElW/A=="
Source: global traffic	HTTP traffic detected: GET /signals/config/290387871401930?v=2.9.149&r=stable&domain=www3.mtb.com&hme=8b8eb2472f555e54a8b57f2b720f9bd3b1bc6aed031525376dd772ba51107995&ex_m=63%2C107%2C95%2C99%2C54%2C3%2C89%2C62%2C14%2C87%2C80%2C45%2C47%2C153%2C156%2C167%2C163%2C164%2C166%2C26%2C90%2C46%2C69%2C165%2C148%2C151%2C160%2C161%2C168%2C116%2C13%2C44%2C172%2C171%2C118%2C16%2C30%2C33%2C1%2C37%2C58%2C59%2C60%2C64%2C84%2C15%2C12%2C86%2C83%2C82%2C96%2C98%2C32%2C97%2C27%2C23%2C149%2C152%2C125%2C25%2C9%2C10%2C11%2C5%2C6%2C22%2C19%2C20%2C50%2C55%2C57%2C67%2C91%2C24%2C68%2C8%2C7%2C72%2C42%2C18%2C93%2C92%2C17%2C74%2C79%2C41%2C40%2C78%2C34%2C36%2C77%2C49%2C75%2C29%2C38%2C66%2C0%2C85%2C4%2C81%2C73%2C76%2C2%2C31%2C56%2C35%2C94%2C39%2C71%2C61%2C100%2C53%2C52%2C28%2C88%2C51%2C48%2C43%2C70%2C65%2C21%2C101%2C173%2C175%2C108%2C130%2C134%2C114%2C169%2C209%2C145%2C102%2C131%2C154%2C141%2C105%2C210%2C147%2C106%2C128%2C121%2C109 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=37dfbd8ee84e00126beec432ed4f8b9e9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46a56a82b9eec47679c796e092818c5871d61eb72bffeb1ba131be20ecca7478c31db6bda508e1547f77303fd1f564c2acf503ed79ffca8328828bf7d8557ec4b7274a7d43169230121e118f58109ac5d6ead83c6771e217dcf965d78c9df014b3545700015a7902c7e7d17c7ab1f28cef2ea2b93e745711b3eb7b4e7c1d965b4cfd95cbf539e513a67cdee9fb2a465c18ee26c963406d1fa9b7a4c42a2623bac990678fc86ae668500f845b6980a870d97dd75d66071d2d964d27a8f95afb48cf1be5d78e87ce9e6e5710e69e9ce23c1e317a1595455824f5084ccc3d8c6ff943dc46a88c5e7da29a03c7a74dc381ca5d4df0e2790b020e541f0900dce21e13d524c50cb26af0acc87f63ff8c978c616a7d79cda6d894a127fef5f541d3e457dd3a766b753dfc18b64fdde69bdde6cdf81c8f07688bcf174603ed0a9110495f70d5a23fae7e538e043cef856fdfd3cae6ee26d8759bf1dd7a83fdb1327e4ac8e673f3f620b360a400aabe18c6eda1eaa4c4e432ae4a946df981a10e3bbd9bea071c4ede4919aeafbb4121b2ef15587a858698243661cd06b5c7072f20ade2d1884959839ed23ad4ddcad5edfa41fda3e567532086e1282c1e3da3c78529d104494cda5f2e6af0672c9f7e220cc957a0ebaba00207bbdd4800233bd3584419e1de23f9815dcc012f9a457b3ecc280dc2d059dbe581cfa32e2c7a2b704de2c62040fff055f42f3e7069de614d68bcf99109cfbd8605f731ee163c950fd0ceddf7b9c335f33156f3f6deb538e813049ab2f9df6e73fd8d35fcc2926ed0376259fe8d21648ae2cb79c1ada1b235f09ef6a3e88aecb7a94146dcfc701abdec1eddf01891f472815ee6574118e9a0d5bbe20f5a78254cfa1b0510e27fb34771a0e99460ca5cca3&cri=HmumvR8fU1&ts=766&cb=1710377812722 HTTP/1.1Host: obs.segreencolumn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3&co=aHR0cHM6Ly93d3czLm10Yi5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=invisible&cb=c8l0hwixplg5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /tr/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377812859&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fa981a&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377812859&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fa981a&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/948713993/?random=1710377812268&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqzMKuIekrv2g2EyjjtOF4TFh3o-SUHQ&random=255017323&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=mtbank/main/202402142352&cb=1710377813666 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/875517505?random=1710377813697&cv=11&fst=1710377813697&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/875517505/?random=1710377813676&cv=11&fst=1710377813676&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/rul/875517505?random=1710377813720&cv=11&fst=1710377813720&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /is HTTP/1.1Host: 54.156.2.105Connection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/875517505/?random=1710377813697&cv=11&fst=1710377813697&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /signals/config/1994534667524888?v=2.9.149&r=stable&domain=www3.mtb.com&hme=8b8eb2472f555e54a8b57f2b720f9bd3b1bc6aed031525376dd772ba51107995&ex_m=63%2C107%2C95%2C99%2C54%2C3%2C89%2C62%2C14%2C87%2C80%2C45%2C47%2C153%2C156%2C167%2C163%2C164%2C166%2C26%2C90%2C46%2C69%2C165%2C148%2C151%2C160%2C161%2C168%2C116%2C13%2C44%2C172%2C171%2C118%2C16%2C30%2C33%2C1%2C37%2C58%2C59%2C60%2C64%2C84%2C15%2C12%2C86%2C83%2C82%2C96%2C98%2C32%2C97%2C27%2C23%2C149%2C152%2C125%2C25%2C9%2C10%2C11%2C5%2C6%2C22%2C19%2C20%2C50%2C55%2C57%2C67%2C91%2C24%2C68%2C8%2C7%2C72%2C42%2C18%2C93%2C92%2C17%2C74%2C79%2C41%2C40%2C78%2C34%2C36%2C77%2C49%2C75%2C29%2C38%2C66%2C0%2C85%2C4%2C81%2C73%2C76%2C2%2C31%2C56%2C35%2C94%2C39%2C71%2C61%2C100%2C53%2C52%2C28%2C88%2C51%2C48%2C43%2C70%2C65%2C21%2C101%2C173%2C175%2C108%2C130%2C134%2C114%2C169%2C209%2C145%2C102%2C131%2C154%2C141%2C105%2C210%2C147%2C106%2C128%2C121%2C109 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377813856&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=66a7a0&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377813856&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=66a7a0&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377812859&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fa981a&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10087193&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&tagmgr=tealium%2Cgtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377812859&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fa981a&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Thu%2C%2014%20Mar%202024%2000%3A56%3A52%20GMT&n=-1&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium%2Cgtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium%2Cgtm HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=HmumvR8fU1&ts=766&cb=1710377812722 HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /st?ga_tracking_id=G-ZTNQ6ZK8T0&ga_client_id=1166952759.1710377814&shpt=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22ga_client_id%22%3A%221166952759.1710377814%22%2C%22shpt%22%3A%22M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank%22%2C%22dcm_cid%22%3A%221166952759.1710377814%22%2C%22mntnis%22%3A%22y6%2F4gjwN%2Bt2Zv6fZL3kOwkJTACfroGv6%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1166952759.1710377814&available_ga=%5B%7B%22id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22sess_id%22%3A%221710377813%22%7D%5D&hardcoded_ga=G-ZTNQ6ZK8T0&dxver=4.0.0&shaid=34249&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&cb=42205510116200300&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue%2Ctealium%3Dtrue HTTP/1.1Host: px.mountain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/948713993/?random=1710377812268&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqzMKuIekrv2g2EyjjtOF4TFh3o-SUHQ&random=255017323&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/875517505/?random=1710377813676&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqgy5rmkimJrar-2BaQRjf-DYFJHjEDaISnnSK4zP4dJZDZcAO&random=3200907923&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/875517505/?random=1710377813697&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeRcobpVsm9ieYD9QFoJNC0hsBQXQGzOnWLiYT2cz-JZRun5w&random=1555305866&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /tr/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814597&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fea200&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/875517505/?random=2102459353&cv=11&fst=1710377813720&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CNeK_tCruN6AmQEST0NoRUk4SjNGcndZUTFPQ2p2Y2pvLS1EUkFSSW1BTXN5bnJCejI0MG5oaFBUZ2pPOWZWWURUUldhRlNEd0lEWVpTWXE3SEF6Umt2Z0l6YW8aWENoQUk4SjNGcndZUTlQYnI5NXJ3eWRRNEVpNEEyeXFqa3U5amptUi1LWEpUUnRUa2FtXzhIOHhaVXNfQlhFazRaRlhGUURMWVVEeFJUT1hoYXlkMG9tVEIiEwj7-IPxxfKEAxVgGmgIHV_fDw4yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmmL2kgA4hpYjBCrLZZrHwdtX4Ej4-AO_TqNJKJ28a0994FiU5BUq_GrX1s
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814597&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fea200&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source=navigation-source, triggerReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814598&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=32473f&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814598&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=32473f&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&rl=&if=false&ts=1710377814599&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&rl=&if=false&ts=1710377814599&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /tr/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377813856&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=66a7a0&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377813856&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=66a7a0&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814597&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fea200&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/875517505/?random=1710377813676&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqgy5rmkimJrar-2BaQRjf-DYFJHjEDaISnnSK4zP4dJZDZcAO&random=3200907923&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814597&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fea200&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814598&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=32473f&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/875517505/?random=2102459353&cv=11&fst=1710377813720&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CNeK_tCruN6AmQEST0NoRUk4SjNGcndZUTFPQ2p2Y2pvLS1EUkFSSW1BTXN5bnJCejI0MG5oaFBUZ2pPOWZWWURUUldhRlNEd0lEWVpTWXE3SEF6Umt2Z0l6YW8aWENoQUk4SjNGcndZUTlQYnI5NXJ3eWRRNEVpNEEyeXFqa3U5amptUi1LWEpUUnRUa2FtXzhIOHhaVXNfQlhFazRaRlhGUURMWVVEeFJUT1hoYXlkMG9tVEIiEwj7-IPxxfKEAxVgGmgIHV_fDw4yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&cid=CAQSKQB7FLtqsKdJwIEQCzWMtod9ZRFaPjJRmOkU97Y6hGUUMhprsSTzvoOn&random=3676200842 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /gs HTTP/1.1Host: gs.mountain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guid=c0f80a26-e19d-11ee-bc79-65977b46ee41
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /tr/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&rl=&if=false&ts=1710377814599&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814598&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=32473f&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&rl=&if=false&ts=1710377814599&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/875517505/?random=1710377813697&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeRcobpVsm9ieYD9QFoJNC0hsBQXQGzOnWLiYT2cz-JZRun5w&random=1555305866&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/875517505/?random=2102459353&cv=11&fst=1710377813720&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CNeK_tCruN6AmQEST0NoRUk4SjNGcndZUTFPQ2p2Y2pvLS1EUkFSSW1BTXN5bnJCejI0MG5oaFBUZ2pPOWZWWURUUldhRlNEd0lEWVpTWXE3SEF6Umt2Z0l6YW8aWENoQUk4SjNGcndZUTlQYnI5NXJ3eWRRNEVpNEEyeXFqa3U5amptUi1LWEpUUnRUa2FtXzhIOHhaVXNfQlhFazRaRlhGUURMWVVEeFJUT1hoYXlkMG9tVEIiEwj7-IPxxfKEAxVgGmgIHV_fDw4yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&cid=CAQSKQB7FLtqsKdJwIEQCzWMtod9ZRFaPjJRmOkU97Y6hGUUMhprsSTzvoOn&random=3676200842 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /st?ga_tracking_id=G-ZTNQ6ZK8T0&ga_client_id=1166952759.1710377814&shpt=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22ga_client_id%22%3A%221166952759.1710377814%22%2C%22shpt%22%3A%22M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank%22%2C%22dcm_cid%22%3A%221166952759.1710377814%22%2C%22mntnis%22%3A%22y6%2F4gjwN%2Bt2Zv6fZL3kOwkJTACfroGv6%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1166952759.1710377814&available_ga=%5B%7B%22id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22sess_id%22%3A%221710377813%22%7D%5D&hardcoded_ga=G-ZTNQ6ZK8T0&dxver=4.0.0&shaid=34249&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue%2Ctealium%3Dtrue&cb=1710377815866695&shguid=79d58da8-d206-337a-b886-f6229ccac695&shgts=1710377816764 HTTP/1.1Host: px.mountain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guid=c0f80a26-e19d-11ee-bc79-65977b46ee41
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/icon-global-nav-help.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/icon-global-nav-locations.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/icon-global-nav-search.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/icon-global-nav-hamburger-menu.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/logos/favicon.ico.transform/32x32/image.png HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/home-pageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/icon-global-nav-help.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/icon-global-nav-locations.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/icon-global-nav-search.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/icon-global-nav-hamburger-menu.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/logos/favicon.ico.transform/32x32/image.png HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /Login/LoginHelp HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377817746&z=1&S=0&N=0&P=0 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377818547&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=310b529105cc4cce21502298401306db HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /TSPD/?type=18 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/Login/LoginHelpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS01e71088028=01fe6ed147e995f1969612607291575c939203d3776781db003e99e60a297ce8ddf5f2079478e7c3a21bbe6bc607db448eabd1c4b1; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; TSba0bc889027=0856addebbab2000dc662b86e1a85b59e6167ee5c644a1b147977346039c955899ccb704839aafae08ecbd3a56113000abbd31a099400167d849aa5815d7b5db453c9b4f2935df3cd77facbac4e6109b279ddd0b3167adedbd6a91fe51d39159
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377818549&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=9 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/Login/LoginHelpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS01e71088028=01fe6ed147e995f1969612607291575c939203d3776781db003e99e60a297ce8ddf5f2079478e7c3a21bbe6bc607db448eabd1c4b1; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; TSba0bc889027=0856addebbab2000dc662b86e1a85b59e6167ee5c644a1b147977346039c955899ccb704839aafae08ecbd3a56113000abbd31a099400167d849aa5815d7b5db453c9b4f2935df3cd77facbac4e6109b279ddd0b3167adedbd6a91fe51d39159
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=17 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/Login/LoginHelpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS01e71088028=01fe6ed147e995f1969612607291575c939203d3776781db003e99e60a297ce8ddf5f2079478e7c3a21bbe6bc607db448eabd1c4b1; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; TSba0bc889027=0856addebbab2000dc662b86e1a85b59e6167ee5c644a1b147977346039c955899ccb704839aafae08ecbd3a56113000abbd31a099400167d849aa5815d7b5db453c9b4f2935df3cd77facbac4e6109b279ddd0b3167adedbd6a91fe51d39159
Source: global traffic	HTTP traffic detected: GET /ruxitagentjs_ICA2NVfghjqrux_10285240307101407.js HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/Login/LoginHelpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS01e71088028=01fe6ed147e995f1969612607291575c939203d3776781db003e99e60a297ce8ddf5f2079478e7c3a21bbe6bc607db448eabd1c4b1; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; TSba0bc889027=0856addebbab2000dc662b86e1a85b59e6167ee5c644a1b147977346039c955899ccb704839aafae08ecbd3a56113000abbd31a099400167d849aa5815d7b5db453c9b4f2935df3cd77facbac4e6109b279ddd0b3167adedbd6a91fe51d39159
Source: global traffic	HTTP traffic detected: GET /r/simple-layout-responsive/css.mtb?v=08292023024500 HTTP/1.1Host: resources.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0
Source: global traffic	HTTP traffic detected: GET /Assets/img/mtb-logo.svg HTTP/1.1Host: resources.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0
Source: global traffic	HTTP traffic detected: GET /Assets/img/mtb-equalhousinglender.svg HTTP/1.1Host: resources.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0
Source: global traffic	HTTP traffic detected: GET /Assets/js/tealium_prod.js HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/Login/LoginHelpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS01e71088028=01fe6ed147e995f1969612607291575c939203d3776781db003e99e60a297ce8ddf5f2079478e7c3a21bbe6bc607db448eabd1c4b1; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; TSba0bc889027=0856addebbab2000dc662b86e1a85b59e6167ee5c644a1b147977346039c955899ccb704839aafae08ecbd3a56113000abbd31a099400167d849aa5815d7b5db453c9b4f2935df3cd77facbac4e6109b279ddd0b3167adedbd6a91fe51d39159
Source: global traffic	HTTP traffic detected: GET /mtb/hash-check HTTP/1.1Host: rl.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377820089&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1159&N=5&P=1 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Assets/img/mtb-entrust.svg HTTP/1.1Host: resources.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS019299a7=019f8203fda106037d4083032921c931b2efa1ffef72d7d8e843b36d67ccf0f355dee3fce94880f6ad90ed6fd72a1bd8d40bccf5d9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TSf60233d5027=08affc4e07ab2000684a094b5267a23989368eb8831314f019508980beabdaa03ed97107dd7f313408106f76aa1130004ce6a61be8b1ee33ed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2
Source: global traffic	HTTP traffic detected: GET /r/simple-layout-responsive/js.mtb?v=08292023024500 HTTP/1.1Host: resources.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS019299a7=019f8203fda106037d4083032921c931b2efa1ffef72d7d8e843b36d67ccf0f355dee3fce94880f6ad90ed6fd72a1bd8d40bccf5d9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TSf60233d5027=08affc4e07ab2000684a094b5267a23989368eb8831314f019508980beabdaa03ed97107dd7f313408106f76aa1130004ce6a61be8b1ee33ed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2
Source: global traffic	HTTP traffic detected: GET /Assets/img/mtb-logo.svg HTTP/1.1Host: resources.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS019299a7=019f8203fda106037d4083032921c931b2efa1ffef72d7d8e843b36d67ccf0f355dee3fce94880f6ad90ed6fd72a1bd8d40bccf5d9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TSf60233d5027=08affc4e07ab2000684a094b5267a23989368eb8831314f019508980beabdaa03ed97107dd7f313408106f76aa1130004ce6a61be8b1ee33ed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2
Source: global traffic	HTTP traffic detected: GET /Assets/img/mtb-equalhousinglender.svg HTTP/1.1Host: resources.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS019299a7=019f8203fda106037d4083032921c931b2efa1ffef72d7d8e843b36d67ccf0f355dee3fce94880f6ad90ed6fd72a1bd8d40bccf5d9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TSf60233d5027=08affc4e07ab2000684a094b5267a23989368eb8831314f019508980beabdaa03ed97107dd7f313408106f76aa1130004ce6a61be8b1ee33ed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2
Source: global traffic	HTTP traffic detected: GET /Assets/img/mtb-entrust.svg HTTP/1.1Host: resources.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS019299a7=019f8203fda106037d4083032921c931b2efa1ffef72d7d8e843b36d67ccf0f355dee3fce94880f6ad90ed6fd72a1bd8d40bccf5d9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TSf60233d5027=08affc4e07ab200010dbf5550a51a1f423f8015068e67648deb8a2a1341c2f6c6971f73d5e0c13ff08dc3338651130007a715b3495119fabed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2
Source: global traffic	HTTP traffic detected: GET /Assets/js/kessel-client-prod.js HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/Login/LoginHelpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TS01e71088028=01fe6ed1477be012843846709038886df69d4bdfbd6781db003e99e60a297ce8ddf5f207943903f875d1f0e14369e91e519c4a8386; TSba0bc889027=0856addebbab2000ffb23391c6bfb2d37c73048263f74bc140279732071b398210c9d2c7f758ebd108e89e77f7113000904d246224008094360b22461a046adc64355a4b60780ab9a686d3255c481b6e223f7141cb89cd3589b2126d07f41eec
Source: global traffic	HTTP traffic detected: GET /Assets/scripts/kessel-help.js HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/Login/LoginHelpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TS01e71088028=01fe6ed1477be012843846709038886df69d4bdfbd6781db003e99e60a297ce8ddf5f207943903f875d1f0e14369e91e519c4a8386; TSba0bc889027=0856addebbab2000ffb23391c6bfb2d37c73048263f74bc140279732071b398210c9d2c7f758ebd108e89e77f7113000904d246224008094360b22461a046adc64355a4b60780ab9a686d3255c481b6e223f7141cb89cd3589b2126d07f41eec; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; rxvt=1710379621901\|1710377821892
Source: global traffic	HTTP traffic detected: GET /assets/fonts/mandtbaltoweb-medium.woff HTTP/1.1Host: resources.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://onlinebanking.mtb.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://resources.mtb.com/r/simple-layout-responsive/css.mtb?v=08292023024500Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/mandtbaltoweb-book.woff HTTP/1.1Host: resources.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://onlinebanking.mtb.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://resources.mtb.com/r/simple-layout-responsive/css.mtb?v=08292023024500Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/fonts/mandtpg-iconfont.woff HTTP/1.1Host: resources.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://onlinebanking.mtb.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://resources.mtb.com/r/simple-layout-responsive/css.mtb?v=08292023024500Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/olb-legacy/prod/utag.js HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377822964&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1603&N=12&P=2 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377823614&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=913&N=1 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /TSPD/?type=20 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://onlinebanking.mtb.com/Login/LoginHelpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; TSba0bc889027=0856addebbab20008131eefbaea33abe6f418498d7c4d7ea50d5671da183f52bcfc0413237977c95082124d6171130002e5ebfdd1e2e69fe8791c862e1589a8059fe71956a7f4cd5da0bffc4ce6468789c1f5e845b2d54ff01cb0bc1b5b7b21d; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=11 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/TSPD/?type=20Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; TSba0bc889027=0856addebbab2000960c032f97ab0a53871ea33a518f53bd553274d2c53f5ba65a095621a3f4efd90811ea1c881130007a7b2f09aac9ca31e5bd056d836537b03a634ca0b8fe45621e74648b209f36bd31e629222ac5ea9d401f055d50e7cac9
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=12 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/TSPD/?type=20Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; TSba0bc889027=0856addebbab2000960c032f97ab0a53871ea33a518f53bd553274d2c53f5ba65a095621a3f4efd90811ea1c881130007a7b2f09aac9ca31e5bd056d836537b03a634ca0b8fe45621e74648b209f36bd31e629222ac5ea9d401f055d50e7cac9
Source: global traffic	HTTP traffic detected: GET /scripts/prod/crossdomain.html HTTP/1.1Host: 1.b406929acabac9b095f124c81bdfcf57f.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/prod/crossdomain.html HTTP/1.1Host: 1.c81358859121583b7adf2ace89cb39f44.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/prod/crossdomain.html HTTP/1.1Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1Host: 1.c81358859121583b7adf2ace89cb39f44.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1Host: 1.b406929acabac9b095f124c81bdfcf57f.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14?type=13 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://onlinebanking.mtb.com/TSPD/?type=20Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; TSba0bc889027=0856addebbab2000960c032f97ab0a53871ea33a518f53bd553274d2c53f5ba65a095621a3f4efd90811ea1c881130007a7b2f09aac9ca31e5bd056d836537b03a634ca0b8fe45621e74648b209f36bd31e629222ac5ea9d401f055d50e7cac9; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000074=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf507e000eaa04cffa9aebb95faeae191e4bf7e04b242b0b07c33c54334cdc605844f366ae905cee74b334920b58d4dd930ca177fdd33710e615957b6be538e716d4a3564fb37309
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=mufasa HTTP/1.1Host: wup-5d65a0ab.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14?type=14 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://onlinebanking.mtb.com/TSPD/?type=20Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS5075d88f071=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14:087392baf504a800ca7cfb090ffa2d61c465d276e864737563fe1fa355e51564adfaa6681290605687471ce298dc92eefd331a0dfbf083dea943b01823e02a0fb30ef230c05a16128ba8d664d3e5e3c487785641921ad448569b73790d588becf0756260e8db733f2291d38f75bac56ba4e1c5ab06b6fef2d71c3c097afe8c7b17b086b2613a094177dd98dbd897a1f6142333c248cc9fee4571385fabf3a813ee15366c67ac2cf06426113508e6d354; utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856a
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14?type=13 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS5075d88f071=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14:087392baf504a800ca7cfb090ffa2d61c465d276e864737563fe1fa355e51564adfaa6681290605687471ce298dc92eefd331a0dfbf083dea943b01823e02a0fb30ef230c05a16128ba8d664d3e5e3c487785641921ad448569b73790d588becf0756260e8db733f2291d38f75bac56ba4e1c5ab06b6fef2d71c3c097afe8c7b17b086b2613a094177dd98dbd897a1f6142333c248cc9fee4571385fabf3a813ee15366c67ac2cf06426113508e6d354; utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; TSba0bc889027=0856addebbab2000960c032f97ab0a53871ea33a518f53bd553274d2c53f5ba65a095621a3f4efd90811ea1c881130007a7b2f09aac9ca31e5bd056d836537b03a634ca0b8fe45621e74648b209f36bd31e629222ac5ea9d401f055d50e7cac9; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-1
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377828527&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1833&N=16&P=3 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=mufasa HTTP/1.1Host: wup-5d65a0ab.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377830067&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=1041&N=2 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&bp=3&app=893c324bd7e5ac65&crc=4091269084&en=zgefxirc&end=1 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf509d0008f97aa1a4e8c7c8f128e314aa8b7710a410e89400dd4bb27c7aae7141ce59440e5735300d2d24c7df2540e7b2dd8d52a7c9c1ad01f1fc6728be86de4ad26211028791386d66f93ed01a10746fd242048b6b12da8071c8ba0bc6818a63e0e059c3f9c55546292c81cf0c0a90265e8ef6f1e550868441afae37cd9b33f2947febbc
Source: global traffic	HTTP traffic detected: GET /utag/mtbank/olb-legacy/prod/utag.8.js?utv=ut4.51.202212232259 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /TSPD/?type=22 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Security-Request: requiredx-dtpc: 4$377821888_974h7vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://onlinebanking.mtb.com/Login/LoginHelpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS5075d88f071=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14:087392baf504a800ca7cfb090ffa2d61c465d276e864737563fe1fa355e51564adfaa6681290605687471ce298dc92eefd331a0dfbf083dea943b01823e02a0fb30ef230c05a16128ba8d664d3e5e3c487785641921ad448569b73790d588becf0756260e8db733f2291d38f75bac56ba4e1c5ab06b6fef2d71c3c097afe8c7b17b086b2613a094177dd98dbd897a1f6142333c248cc9fee4571385fabf3a813ee15366c67ac2cf06426113508e6d354; utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf509d0008f97aa1a4e8c7c8f128e314aa8b7710a410e89400dd4bb27c7aae7141ce59440e5735300d2d24c7df2540e7b2dd8d52a7c9c1ad01f1fc
Source: global traffic	HTTP traffic detected: GET /Documents/html/homepage/favicon.ico HTTP/1.1Host: asset.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h7vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /qscripts/quantum-mtb.js HTTP/1.1Host: cdn.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"171035041707217096569823831710316802438"
Source: global traffic	HTTP traffic detected: GET /TSPD/?type=22 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS5075d88f071=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14:087392baf504a800ca7cfb090ffa2d61c465d276e864737563fe1fa355e51564adfaa6681290605687471ce298dc92eefd331a0dfbf083dea943b01823e02a0fb30ef230c05a16128ba8d664d3e5e3c487785641921ad448569b73790d588becf0756260e8db733f2291d38f75bac56ba4e1c5ab06b6fef2d71c3c097afe8c7b17b086b2613a094177dd98dbd897a1f6142333c248cc9fee4571385fabf3a813ee15366c67ac2cf06426113508e6d354; utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=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
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377833947&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1968&N=17&P=4 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/990489911?random=1710377835159&cv=11&fst=1710377835159&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&hn=www.googleadservices.com&frm=0&tiba=Help%20with%20UserId%20or%20Passcode%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/990489911/?random=1710377835159&cv=11&fst=1710377835159&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&hn=www.googleadservices.com&frm=0&tiba=Help%20with%20UserId%20or%20Passcode%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377834432&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&S=0&N=0&P=0 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377834434&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=c2a85cad10e441c0cf7a2312b2d52fa4 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377834632&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=1182&N=3 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377835114&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=mufasa HTTP/1.1Host: wup-5d65a0ab.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/990489911/?random=1710377835159&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&frm=0&tiba=Help%20with%20UserId%20or%20Passcode%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqXxzSwY80AGtf901wcKZG14Qd5_fn8aObE7ImkdqPOLoFoYNA&random=3783927305&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://onlinebanking.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/990489911/?random=1710377835159&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&frm=0&tiba=Help%20with%20UserId%20or%20Passcode%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqXxzSwY80AGtf901wcKZG14Qd5_fn8aObE7ImkdqPOLoFoYNA&random=3783927305&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377835775&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1169&N=5&P=1 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&bp=3&app=893c324bd7e5ac65&crc=88002536&en=zgefxirc&end=1 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=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; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e0
Source: global traffic	HTTP traffic detected: GET /Enrollment/Enroll HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf509d0008f97aa1a4e8c7c8f128e314aa8b7710a410e89400dd4bb27c7aae7141ce59440e5735300d2d24c7df2540e7b2dd8d52a7c9c1ad01f1fc6728be86de4ad26211028791386d66f93ed01a10746fd242048b6b12da8071c8ba0bc6818a63e0e059c3f9c55546292c81cf0c0a90265e8ef6f1e550868441afae37cd9b33f2947febbc2fea0b2331dad13ed433be4f7e2830136a443ca0cc2d6e75f5b860e3385836b608793c83d3c189208f09db84764797c53973439a4f1fedc5f72977454f4ce5b450a2bed8a5235efaf34516dfaa3e27a; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b24
Source: global traffic	HTTP traffic detected: GET /mtb/hash-check HTTP/1.1Host: rl.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Enrollment HTTP/1.1Host: m.mtb.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /assets/css/foundation-all.css HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be
Source: global traffic	HTTP traffic detected: GET /assets/css/mtb.css HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be
Source: global traffic	HTTP traffic detected: GET /TSPD/?type=18 HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=17 HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be
Source: global traffic	HTTP traffic detected: GET /ruxitagentjs_ICA2NVfhqru_10285240307101407.js HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be
Source: global traffic	HTTP traffic detected: GET /assets/img/mtb-logo.svg HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be
Source: global traffic	HTTP traffic detected: GET /assets/img/mtb-equalhousinglender.svg HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20009d3c304f23bc1170c60fa05affea7582c0e2d90d37e88592b69a102248f6548008ebac0a861130004259e856014adf76815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
Source: global traffic	HTTP traffic detected: GET /assets/img/mtb-entrust.svg HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab200015a3532df2a3d4d9400b0f8a47c82271846aef8b7232c9e9af380f1811a457c608fe4dce4b113000f27990bd7063fa28815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
Source: global traffic	HTTP traffic detected: GET /assets/img/mtb-logo.svg HTTP/1.1Host: m.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab200015a3532df2a3d4d9400b0f8a47c82271846aef8b7232c9e9af380f1811a457c608fe4dce4b113000f27990bd7063fa28815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
Source: global traffic	HTTP traffic detected: GET /assets/fonts/mandtbaltoweb-book.woff HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://m.mtb.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://m.mtb.com/assets/css/mtb.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; TS1b6f618f027=0856addebbab200013fac294aba977be1ad2e90d26629a8030c61d984715e1f23b6d9126f3b2feba0801a651451130000b20a75016d2d80c815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
Source: global traffic	HTTP traffic detected: GET /assets/fonts/mandtpg-iconfont.woff HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://m.mtb.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://m.mtb.com/assets/css/mtb.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; TS1b6f618f027=0856addebbab200013fac294aba977be1ad2e90d26629a8030c61d984715e1f23b6d9126f3b2feba0801a651451130000b20a75016d2d80c815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
Source: global traffic	HTTP traffic detected: GET /scripts/jquery-3.3.1.js HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
Source: global traffic	HTTP traffic detected: GET /assets/img/mtb-equalhousinglender.svg HTTP/1.1Host: m.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
Source: global traffic	HTTP traffic detected: GET /scripts/foundation.js HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892
Source: global traffic	HTTP traffic detected: GET /assets/js/tealium_prod.js HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892
Source: global traffic	HTTP traffic detected: GET /assets/img/mtb-entrust.svg HTTP/1.1Host: m.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; TS1b6f618f027=0856addebbab200013fac294aba977be1ad2e90d26629a8030c61d984715e1f23b6d9126f3b2feba0801a651451130000b20a75016d2d80c815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
Source: global traffic	HTTP traffic detected: GET /scripts/Moe/errorMsg.js HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892
Source: global traffic	HTTP traffic detected: GET /scripts/Moe/mtb-app.js HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892
Source: global traffic	HTTP traffic detected: GET /scripts/Moe/formInputValidations.js HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; TS1b6f618f027=0856addebbab200013fac294aba977be1ad2e90d26629a8030c61d984715e1f23b6d9126f3b2feba0801a651451130000b20a75016d2d80c815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
Source: global traffic	HTTP traffic detected: GET /scripts/Moe/Enrollment/enrollment.js HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; TS43d740f8029=0856addebbab2800a1f192b5520f6861a6633bf421be429b71d07eeeb1588ed47a1c6fd7c6833c909a5e23c291fa2b8e; TS1b6f618f027=0856addebbab20001d91b8740f497fef2e06dba1a52772c2bd742971c552230022855fd41e6aabb008ed73a001113000fe64fdc2dcecda4d35356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377839946&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1556&N=14&P=2 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=mufasa HTTP/1.1Host: wup-5d65a0ab.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /TSPD/?type=20 HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; TS43d740f8029=0856addebbab28003ee8931a721d2c5b46382b9ba9355f7babf62432529345cd184e7921c0f067feecea2a83aedf0c1d; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS1b6f618f027=0856addebbab2000bafc01cf581547ed4033476b5262de1a7dea7e6349c62b3a9e6b5f60e685f7ce08970ff7f6113000be971cc6cd813c5635356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f
Source: global traffic	HTTP traffic detected: GET /td/rul/990489911?random=1710377841052&cv=11&fst=1710377841052&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fm.mtb.com%2FEnrollment&hn=www.googleadservices.com&frm=0&tiba=Enroll%20in%20Online%20Banking%20-%20Select%20Account%20Type%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://m.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/990489911/?random=1710377841052&cv=11&fst=1710377841052&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fm.mtb.com%2FEnrollment&hn=www.googleadservices.com&frm=0&tiba=Enroll%20in%20Online%20Banking%20-%20Select%20Account%20Type%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377840585&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=770&N=1 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=11 HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/TSPD/?type=20Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; TS1b6f618f027=0856addebbab2000c640e92ee60f3564dfdc9592f76b9542e0e8ec2f33e8d9dc11d01fa4c137d29e08dcec22451130006a60e6af40f23d052828129d8a962027178d1395c20ae09d105a7a39796fa8abea927d2c2cdce964b17d4478d155fc50
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=12 HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.mtb.com/TSPD/?type=20Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; TS1b6f618f027=0856addebbab2000c640e92ee60f3564dfdc9592f76b9542e0e8ec2f33e8d9dc11d01fa4c137d29e08dcec22451130006a60e6af40f23d052828129d8a962027178d1395c20ae09d105a7a39796fa8abea927d2c2cdce964b17d4478d155fc50
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/990489911/?random=1710377841052&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fm.mtb.com%2FEnrollment&frm=0&tiba=Enroll%20in%20Online%20Banking%20-%20Select%20Account%20Type%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq98vi3XQMFrKMbqDHzWzb2W11nP-6BYb7XZHj_ZeUpPIeKpsW&random=3236588903&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://m.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/990489911/?random=1710377841052&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fm.mtb.com%2FEnrollment&frm=0&tiba=Enroll%20in%20Online%20Banking%20-%20Select%20Account%20Type%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq98vi3XQMFrKMbqDHzWzb2W11nP-6BYb7XZHj_ZeUpPIeKpsW&random=3236588903&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /TSPD/?type=22 HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://m.mtb.com/EnrollmentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; TS1b6f618f027=0856addebbab2000c640e92ee60f3564dfdc9592f76b9542e0e8ec2f33e8d9dc11d01fa4c137d29e08dcec22451130006a60e6af40f23d052828129d8a962027178d1395c20ae09d105a7a39796fa8abea927d2c2cdce964b17d4478d155fc50; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h2vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28
Source: global traffic	HTTP traffic detected: GET /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&bp=3&app=893c324bd7e5ac65&crc=2683548852&en=zgefxirc&end=1 HTTP/1.1Host: onlinebanking.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf509d0008f97aa1a4e8c7c8f128e314aa8b7710a410e89400dd4bb27c7aae7141ce59440e5735300d2d24c7df2540e7b2dd8d52a7c9c1ad01f1fc6728be86de4ad26211028791386d66f93ed01a10746fd242048b6b12da8071c8ba0bc6818a63e0e059c3f9c55546292c81cf0c0a90265e8ef6f1e550868441afae37cd9b33f2947febbc2fea0b2331dad13ed433be4f7e2830136a443ca0cc2d6e75f5b860e3385836b608793c83d3c189208f09db84764797c53973439a4f1fedc5f72977454f4ce5b450a2bed8a5235efaf34516dfaa3e27a; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b242190a3fdfd7654cb892c1310b61e0147d82c5f80da2ac49c4eafa9553f9a43651ef1de954d42f6a58a4bdd0abdb2ea688; TSPD_101=0856addebbab28008a357d933abb3f8f3533bae03e725db219f09d6369d774922e240476d43f16e0ea5747418e1ea555087ba6c53205180049a6bcdc37ebec3bee757dcfe761509665cb42d8d2431f12; utag_main_
Source: global traffic	HTTP traffic detected: GET /TSPD/?type=22 HTTP/1.1Host: m.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS1b6f618f027=0856addebbab2000ca6b3d81d4b7d1af00a8e02af1029fa8f8f93fd02afafc314affe4adcb6657eb084de9399b113000cb74280ed75ed9d7ac2285ceab533bd1e581c347ef487a3ce7d6d70ad53d508459454afe92ea77f410c3e0627194b85f
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f5?type=13 HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://m.mtb.com/TSPD/?type=20Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS1b6f618f027=0856addebbab2000ca6b3d81d4b7d1af00a8e02af1029fa8f8f93fd02afafc314affe4adcb6657eb084de9399b113000cb74280ed75ed9d7ac2285ceab533bd1e581c347ef487a3ce7d6d70ad53d508459454afe92ea77f410c3e0627194b85f; TS00000000074=0856addebbab280072a33922b87f447f08effaae550a015479
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f5?type=13 HTTP/1.1Host: m.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS00000000076=0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f508a7d7394009d000f3aa4fa72efdc2d6b59cd1f38b72eccc5e03e3755fb50596ff9def923c5f4b7c2bee4bb41c5183177565622d22cdc22c3ed3c97a20bfdabed3281e18cafafee159f81a0d8c0b7dd5f81b3fbe3fbf1898c597a4bd8b5453bd6673d010300fef3b9cd9a57785c4685d97adb0cbb8d7be10137d825dfb380a2156305b3a887978cb73bc8a48b1559cb406cda56fbeead985f6b4b0e79ca46b382d75268f802b912e6d3d5
Source: global traffic	HTTP traffic detected: GET /TSPD/0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f5?type=14 HTTP/1.1Host: m.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://m.mtb.com/TSPD/?type=20Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TS43d740f8071=0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f5:08a7d7394004a800db19551b54ecadadc465d276e864737563fe1fa355e51564adfaa6681290605687471ce298dc92eefd331a0dfbf083dea943b01823e02a0fb30ef230c05a16128ba8d664d3e5e3c487785641921ad448569b73790d588becf0756260e8db733f2291d38f75bac56ba4e1c5ab06b6fef2d71c3c097afe8c7b17b086b2613a094177dd98dbd897a1f6142333c248cc9fee4571385fabf3a813ee15366c67ac2cf06426113508e6d354; utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803
Source: global traffic	HTTP traffic detected: GET /personal-banking/online-mobile-services HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fm.mtb.com%2FEnrollment&bp=3&app=ea7c4b59f27d43eb&crc=87346429&en=zgefxirc&end=1 HTTP/1.1Host: m.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS00000000076=0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f508a7d7394009d000f3aa4fa72efdc2d6b59cd1f38b72eccc5e03e3755fb5
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap.css HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377844198&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=d42c3223c95341ab614d46a28fe8595e HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377844196&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&S=0&N=0&P=0 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap-components.css HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/mtb-web/clientlibs/clientlib-bootstrap.css HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap.js HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/mtb_logo_white.svg HTTP/1.1Host: www.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap-components.js HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/mtb_logo_white.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/ehl.png HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377844959&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=2105&N=18&P=5 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/woman-laptop-hero-pink-shirt.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377845112&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/wcm-asset/documents/html/homepage/images/assets/icon-phone-dark-green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377844947&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=847&N=2 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/online-and-mobile-services/icon-move-money.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/online-and-mobile-services/icon_coins.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/mtb_logo_green.svg HTTP/1.1Host: www.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/online-and-mobile-services/icon_devices.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_location_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/scripts/fe_utilities.js HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/scripts/tealiumComponentCode.js HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /m2/mtb/mbox/json?mbox=target-global-mbox&mboxSession=982bceee196b4711901768c5d35728f4&mboxPC=982bceee196b4711901768c5d35728f4.34_0&mboxPage=83fb3c1c290c4447be6936716aaf9742&mboxRid=fced150c6e93476e9906fecf9771b7df&mboxVersion=1.8.3&mboxCount=1&mboxTime=1710381446412&mboxHost=www3.mtb.com&mboxURL=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&mboxReferrer=&browserHeight=907&browserWidth=1280&browserTimeOffset=60&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_property=f7ba4290-5c00-8608-2ad1-5fc4576548bf&zipCodeCookie=&geoRegionCookie=&entity.categoryId=personal-banking%2Conline-mobile-services&user.categoryId=personal-banking%2Conline-mobile-services&loginClickedCookie=&mbox3rdPartyId= HTTP/1.1Host: mboxedge34.tt.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www3.mtb.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-semilight.woff HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www3.mtb.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www3.mtb.com/etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap-components.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/scripts/fe_utilities.css HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/mtb_logo_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_msgbox_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_plus_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_lock_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_facebook_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_twitter_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_linkedin_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/guy-on-phone-green-bg.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/pub-lp/banner-check.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3&co=aHR0cHM6Ly93d3czLm10Yi5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=invisible&cb=kjlgubngf9bq HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/zelle-color-convenience-logo.png HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/faq-component.png HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/personal-home-page/deposit-checks.png HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/personal-home-page/android-ios.png HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/personal-home-page/track-your-spending.png HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/icon-search-green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap-components.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "32ad004436155ec972bc50e6238b5b67"If-Modified-Since: Thu, 27 Oct 2022 18:55:37 GMT
Source: global traffic	HTTP traffic detected: GET /spx?dxver=4.0.0&shaid=34249&tdr=&plh=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&cb=55960873835234740 HTTP/1.1Host: dx.mountain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guid=c0f80a26-e19d-11ee-bc79-65977b46ee41
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/mtb_logo_white.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /personal-banking/online-mobile-services HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/ehl.png HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/wcm-asset/documents/html/homepage/images/assets/icon-phone-dark-green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /tr/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377849513&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=431bc3&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=9110447352330543%2C3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377846067&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=1325&N=4 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377846062&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1157&N=5&P=1 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /is HTTP/1.1Host: 18.210.229.244Connection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www3.mtb.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mtb/hash-check HTTP/1.1Host: rl.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/online-and-mobile-services/icon-move-money.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=e93ed9a0-d247-4b43-9df0-5837f620e6d0&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=19df694f-4070-4cbc-b3b1-7531989d2106&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_5UBAyvKoxs+QXpDa5ElW/A=="
Source: global traffic	HTTP traffic detected: GET /td/rul/948713993?random=1710377850003&cv=11&fst=1710377850003&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
Source: global traffic	HTTP traffic detected: GET /m2/mtb/mbox/json?mbox=target-global-mbox&mboxSession=982bceee196b4711901768c5d35728f4&mboxPC=982bceee196b4711901768c5d35728f4.34_0&mboxPage=83fb3c1c290c4447be6936716aaf9742&mboxRid=fced150c6e93476e9906fecf9771b7df&mboxVersion=1.8.3&mboxCount=1&mboxTime=1710381446412&mboxHost=www3.mtb.com&mboxURL=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&mboxReferrer=&browserHeight=907&browserWidth=1280&browserTimeOffset=60&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_property=f7ba4290-5c00-8608-2ad1-5fc4576548bf&zipCodeCookie=&geoRegionCookie=&entity.categoryId=personal-banking%2Conline-mobile-services&user.categoryId=personal-banking%2Conline-mobile-services&loginClickedCookie=&mbox3rdPartyId= HTTP/1.1Host: mboxedge34.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/online-and-mobile-services/icon_coins.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377849513&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=431bc3&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=9110447352330543%2C3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/online-and-mobile-services/icon_devices.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /client/v3.1/web/wup?cid=mufasa HTTP/1.1Host: wup-5d65a0ab.us.v2.we-stats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=e93ed9a0-d247-4b43-9df0-5837f620e6d0&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=19df694f-4070-4cbc-b3b1-7531989d2106&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=08022923-6d5c-4a53-a3f5-ff7758503d68
Source: global traffic	HTTP traffic detected: GET /ct?id=40173&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1710377849374&hl=1&op=0&ag=300509663&rand=039167918211825692209190281822906515871721721876095212061057089825222820180102626127&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Thu%2C%2014%20Mar%202024%2000%3A57%3A29%20GMT&n=-1&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10087193&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&tagmgr=tealium HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
Source: global traffic	HTTP traffic detected: GET /tr/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377850381&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=8d7516&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/948713993/?random=1710377850003&cv=11&fst=1710377850003&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377850381&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=8d7516&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source;navigation-source, triggerReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/woman-laptop-hero-pink-shirt.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_location_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /tr/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852348&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=1d9f67&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C9110447352330543%2C3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852348&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=1d9f67&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C9110447352330543%2C3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger=navigation-sourceReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/mtb_logo_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_msgbox_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06
Source: global traffic	HTTP traffic detected: GET /tr/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852353&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=e992f5&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852353&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=e992f5&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source;navigation-source, triggerReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_plus_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06
Source: global traffic	HTTP traffic detected: GET /tr/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&rl=&if=false&ts=1710377852354&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_facebook_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=37dfbd8ee84e00126beec432ed4f8f9f9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46a56a82b9eec47679c796e092818c5871d61eb72bffeb1ba131be20ecca7478c31db6bda508e1547f77303fd1f564c2acf503ed79ffca8328828bf7d8557ec4b7274a7d43169230121e118f58109ac5d6ead83c6771e217dcf965d78c9df014b3545700015a7902c7e7d17c7ab1f28cef2ea2b93e745711b3eb7b4e7c1d965b4cfd90eee559f596f65cee99bb7f13191d9e039c5335cd6f0cb2a4a1ffe606bfa990678fc86ae668500f845b6980a870d97dd75d66071d2d964d27a8f95afb48cf1be5d78e87ce9e6e5690476ff8c3dc1e85fe114185a8e030d9a8f8fc6caf0827fc727d095bb8f37ff7b6b208f792c85d4df0e21d7a82bf84fa7834a9566a27102130f9e64ee439cc6ee27f8b0098752a78f9c8334c019536ebd06421d3e5979c3ab73a442c48cdf64e5d025fc9a6c82c2e8f47a9ce6f54d673ec6a95247cfbc0c5914ffe1ee74ae28c4f840fdb77fc120f964cb17ad40c5a22ec61b21e2a79764383a691d2b0c5d17a9e68b64d306a5595c157b8be8168ac65c75aaaad5a8bd72c3eae5fc85ffa8f94a4d34fe4198b25d698340631ddf654f6d7eb427bd7c72cbebc1609669d72589b72dcdb80f91670e3d3d037c139ec8f8c6357b559904589cd3d9b9acd750039aaca07b96cf1e67ca8657653deb9bcb573fb620845f9c1de4379a13c5cc6289e133a4e5d188ff041887b73d11906ab4cef5f2428e6626171b956f4250b2a45887ed15d4e5d29e3198f0d074516a1de434de67c247ae932dd36b17334b287c61e05d8f813052be67c4aeeb68ddbb08e62732f246057bc8be8e023ffc6de7cc508c153b6b27a0296ec6f6c562cb4b2cced457f0a382acd10683020b4040a52e7a0c8e9a0d40a868b2bcd32786d3ec0d416ee237711a0ece0b42a6c4bb5a039a6b71d3949b538989f8dd5322a622e4443907de442263c78f4712de94f1dce3ae01be79f52cc72fc1931095aeea2136e8825cd0c7fdcb84818a926719d5b872479169c356de0bac&cri=skuHn8DrGl&ts=2103&cb=1710377851477 HTTP/1.1Host: obs.segreencolumn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&rl=&if=false&ts=1710377852354&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /td/rul/875517505?random=1710377852917&cv=11&fst=1710377852917&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
Source: global traffic	HTTP traffic detected: GET /td/rul/875517505?random=1710377853057&cv=11&fst=1710377853057&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/875517505/?random=1710377852690&cv=11&fst=1710377852690&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_lock_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/875517505/?random=1710377852917&cv=11&fst=1710377852917&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_twitter_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/svg/icon_linkedin_green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/guy-on-phone-green-bg.jpg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/948713993/?random=1710377850003&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqxJKr39xzdIs6ePeC4BlngANdJMFEIsv0fU8ZTGKUcEwrQ2fX&random=3758022400&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/pub-lp/banner-check.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/faq-component.png HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/personal-home-page/deposit-checks.png HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/zelle-color-convenience-logo.png HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/personal-home-page/android-ios.png HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/875517505/?random=1710377852690&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNx60R0dtaYwl8YqhICxdLYoHx-X-L9nAncQTwuT-Ro_7kH3P&random=906024691&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/icon-search-green.svg HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=e93ed9a0-d247-4b43-9df0-5837f620e6d0&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=19df694f-4070-4cbc-b3b1-7531989d2106&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=08022923-6d5c-4a53-a3f5-ff7758503d68
Source: global traffic	HTTP traffic detected: GET /content/dam/mtb-web/images/personal-home-page/track-your-spending.png HTTP/1.1Host: www3.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=e93ed9a0-d247-4b43-9df0-5837f620e6d0&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=19df694f-4070-4cbc-b3b1-7531989d2106&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_5UBAyvKoxs+QXpDa5ElW/A=="
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377849513&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=431bc3&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=9110447352330543%2C3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/875517505/?random=569208666&cv=11&fst=1710377853057&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMu-1ra2qOjfGRJPQ2hFSThKM0Zyd1lRMU9DanZjam8tLURSQVJJbUFNc3luckJ6MjQwbmhoUFRnak85ZlZZRFRSV2FGU0R3SURZWlNZcTdIQXpSa3ZnSXphbxpYQ2hBSThKM0Zyd1lROVBicjk1cnd5ZFE0RWk0QTJ5cWprbll0ckNuaEdSeFY3SmlyTEtVcERpeElsOEsxNV9tLTd5SmNNajlBWnZia25raDdTelliZUxFdyITCKq624PG8oQDFckl0AQdS_8DHjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
Source: global traffic	HTTP traffic detected: GET /v1/p HTTP/1.1Host: aiq-in.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /tr/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377849513&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=431bc3&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=9110447352330543%2C3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/875517505/?random=1710377852917&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqRSBicCHg_SchU3gm9kxo6DFjWIFDoxf5PR6dxX4k2U2SWj_e&random=1822853294&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /tr/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377850381&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=8d7516&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852353&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=e992f5&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&d=Thu%2C%2014%20Mar%202024%2000%3A57%3A29%20GMT&n=-1&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
Source: global traffic	HTTP traffic detected: GET /tr/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&rl=&if=false&ts=1710377852354&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tr/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852348&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=1d9f67&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C9110447352330543%2C3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=skuHn8DrGl&ts=2103&cb=1710377851477 HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10087193&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&tagmgr=tealium HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/948713993/?random=1710377850003&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqxJKr39xzdIs6ePeC4BlngANdJMFEIsv0fU8ZTGKUcEwrQ2fX&random=3758022400&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /sp.pl?a=10000&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium HTTP/1.1Host: sp.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852348&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=1d9f67&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C9110447352330543%2C3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377850381&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=8d7516&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852353&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=e992f5&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&rl=&if=false&ts=1710377852354&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ps_n=0
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/875517505/?random=1710377852690&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNx60R0dtaYwl8YqhICxdLYoHx-X-L9nAncQTwuT-Ro_7kH3P&random=906024691&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/875517505/?random=1710377852917&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqRSBicCHg_SchU3gm9kxo6DFjWIFDoxf5PR6dxX4k2U2SWj_e&random=1822853294&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377853582&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1392&N=9&P=2 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/875517505/?random=569208666&cv=11&fst=1710377853057&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMu-1ra2qOjfGRJPQ2hFSThKM0Zyd1lRMU9DanZjam8tLURSQVJJbUFNc3luckJ6MjQwbmhoUFRnak85ZlZZRFRSV2FGU0R3SURZWlNZcTdIQXpSa3ZnSXphbxpYQ2hBSThKM0Zyd1lROVBicjk1cnd5ZFE0RWk0QTJ5cWprbll0ckNuaEdSeFY3SmlyTEtVcERpeElsOEsxNV9tLTd5SmNNajlBWnZia25raDdTelliZUxFdyITCKq624PG8oQDFckl0AQdS_8DHjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI&is_vtc=1&cid=CAQSKQB7FLtqWjlv5Cz-Emj3mPWUoy-30QxpYc7nmefNSMlllMPKir3h4H2F&random=2140994703 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /st?ga_tracking_id=G-ZTNQ6ZK8T0&ga_client_id=1166952759.1710377814&shpt=Online%20%26%20Mobile%20Banking%20Services%20%20%7C%20M%26T%20Bank&ga_info=%7B%22status%22%3A%22One%20of%20the%20required%20properties%20not%20evaluated%20(mntnis%2C%20ga_tracking_id%2C%20ga_client_id%2C%20shpt).%22%2C%22ga_tracking_id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22ga_client_id%22%3A%221166952759.1710377814%22%2C%22shpt%22%3A%22Online%20%26%20Mobile%20Banking%20Services%20%20%7C%20M%26T%20Bank%22%2C%22dcm_cid%22%3A%221166952759.1710377814%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getClientIdByCookie%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%7D&dcm_cid=1166952759.1710377814&available_ga=%5B%7B%22id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22sess_id%22%3A%221710377813%22%7D%5D&hardcoded_ga=G-ZTNQ6ZK8T0&dxver=4.0.0&shaid=34249&plh=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&cb=55960873835234740&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue%2Ctealium%3Dtrue HTTP/1.1Host: px.mountain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guid=c0f80a26-e19d-11ee-bc79-65977b46ee41; tt=H4sIAAAAAAAAAKtWKlOyMqoFAP609q8HAAAA
Source: global traffic	HTTP traffic detected: GET /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fm.mtb.com%2FEnrollment&bp=3&app=ea7c4b59f27d43eb&crc=1977812690&en=zgefxirc&end=1 HTTP/1.1Host: m.mtb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS00000000076=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
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/875517505/?random=569208666&cv=11&fst=1710377853057&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMu-1ra2qOjfGRJPQ2hFSThKM0Zyd1lRMU9DanZjam8tLURSQVJJbUFNc3luckJ6MjQwbmhoUFRnak85ZlZZRFRSV2FGU0R3SURZWlNZcTdIQXpSa3ZnSXphbxpYQ2hBSThKM0Zyd1lROVBicjk1cnd5ZFE0RWk0QTJ5cWprbll0ckNuaEdSeFY3SmlyTEtVcERpeElsOEsxNV9tLTd5SmNNajlBWnZia25raDdTelliZUxFdyITCKq624PG8oQDFckl0AQdS_8DHjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI&is_vtc=1&cid=CAQSKQB7FLtqWjlv5Cz-Emj3mPWUoy-30QxpYc7nmefNSMlllMPKir3h4H2F&random=2140994703 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377854436&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=739&N=1 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www3.mtb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www3.mtb.com/personal-banking/online-mobile-servicesAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377856220&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&S=0&N=0&P=0 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377856223&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=2b3f03e8da0f4b8a2a693f4916b10bf6 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377856867&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377857501&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1153&N=5&P=1 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mtb/hash-check HTTP/1.1Host: rl.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377858952&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1970&N=21&P=3 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377859601&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=905&N=2 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.segreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377861224&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1554&N=12&P=2 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377861877&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=730&N=1 HTTP/1.1Host: mtb-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_349.2.dr, chromecache_245.2.dr	String found in binary or memory: <a data-speedbump-enabled="true" aria-label="Facebook" href="https://www.facebook.com/MandTBank" class="footer-social-link"> equals www.facebook.com (Facebook)
Source: chromecache_349.2.dr, chromecache_245.2.dr	String found in binary or memory: <a data-speedbump-enabled="true" aria-label="LinkedIn" href="https://www.linkedin.com/company/m%26t-bank" class="footer-social-link"> equals www.linkedin.com (Linkedin)
Source: chromecache_245.2.dr	String found in binary or memory: "https://www.facebook.com/MandTBank", equals www.facebook.com (Facebook)
Source: chromecache_245.2.dr	String found in binary or memory: "https://www.linkedin.com/company/m&t-bank", equals www.linkedin.com (Linkedin)
Source: chromecache_245.2.dr	String found in binary or memory: "https://www.youtube.com/channel/UCP_euyMh-Ase06MuFPGn4XQ", equals www.youtube.com (Youtube)
Source: chromecache_406.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_235.2.dr	String found in binary or memory: <a target="_self" id="bs_ctaBtn-1595819053" data-component-id="bs_ctaBtn-1595819053" class="btn btn-icon w-100 mtb-font-size-16 rounded-0 position-relative " href="https://www.linkedin.com/company/m%26t-bank" aria-label="Visit M&T Bank's LinkedIn page" data-btn-style="btn-icon" data-bs-toggle="modal" data-bs-target="#speedbump-modal" data-tag-type="clickAction" data-speedbump="true"> equals www.linkedin.com (Linkedin)
Source: chromecache_235.2.dr	String found in binary or memory: <a target="_self" id="bs_ctaBtn-457227527" data-component-id="bs_ctaBtn-457227527" class="btn btn-icon w-100 mtb-font-size-16 rounded-0 position-relative " href="https://www.facebook.com/MandTBank" aria-label="Visit M&T Bank's Facebook page" data-btn-style="btn-icon" data-bs-toggle="modal" data-bs-target="#speedbump-modal" data-tag-type="clickAction" data-speedbump="true"> equals www.facebook.com (Facebook)
Source: chromecache_313.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=uB(a,c,e);L(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return L(122),!0;if(d&&f){for(var m=db(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},xB=function(){var a=[],b=function(c){return Ia(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_313.2.dr	String found in binary or memory: f\|\|g.length\|\|h.length))return;var n={lh:d,jh:e,kh:f,Vh:g,Wh:h,He:m,yb:b},p=l.YT,q=function(){ED(n)};if(p)return p.ready&&p.ready(q),b;var r=l.onYouTubeIframeAPIReady;l.onYouTubeIframeAPIReady=function(){r&&r();q()};C(function(){for(var t=z.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(HD(w,"iframe_api")\|\|HD(w,"player_api"))return b}for(var x=z.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!yD&&FD(x[B],n.He))return Jc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_313.2.dr, chromecache_413.2.dr, chromecache_402.2.dr, chromecache_434.2.dr, chromecache_442.2.dr, chromecache_456.2.dr	String found in binary or memory: return b}vD.D="internal.enableAutoEventOnTimer";var xc=da(["data-gtm-yt-inspected-"]),wD=["www.youtube.com","www.youtube-nocookie.com"],xD,yD=!1; equals www.youtube.com (Youtube)
Source: chromecache_313.2.dr	String found in binary or memory: var KC=function(a,b,c,d,e){var f=Bz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Bz("fsl","nv.ids",[]):Bz("fsl","ids",[]);if(!g.length)return!0;var h=xz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);L(121);if("https://www.facebook.com/tr/"===m)return L(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Jy(h,Ky(b, equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: mtb-repo.pages.dev

Source: unknown

HTTP traffic detected: POST /v1/p HTTP/1.1Host: aiq-in.mtb.comConnection: keep-aliveContent-Length: 978sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www3.mtb.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www3.mtb.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 14 Mar 2024 00:56:37 GMTContent-Type: text/plainContent-Length: 18Connection: closeX-Request-Id: a2dfc01f-86cc-4279-b243-b78e28e8bdadStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 14 Mar 2024 00:57:02 GMTContent-Type: text/plain; charset=utf-8Content-Length: 15Connection: closeVary: OriginX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=15724800; includeSubDomainsAccess-Control-Allow-Methods: *Access-Control-Allow-Credentials: true
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 14 Mar 2024 00:57:19 GMTContent-Type: text/plain; charset=utf-8Content-Length: 15Connection: closeVary: OriginX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=15724800; includeSubDomainsAccess-Control-Allow-Methods: *Access-Control-Allow-Credentials: true
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 14 Mar 2024 00:57:32 GMTContent-Type: text/plain; charset=utf-8Content-Length: 15Connection: closeVary: OriginX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=15724800; includeSubDomainsAccess-Control-Allow-Methods: *Access-Control-Allow-Credentials: true
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 14 Mar 2024 00:57:35 GMTContent-Type: text/plainContent-Length: 18Connection: closeX-Request-Id: 036548c9-6aab-4c4c-86cf-d7efeb235defStrict-Transport-Security: max-age=15724800; includeSubDomains
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html;charset=utf-8Content-Length: 130300Connection: closeAccept-Ranges: bytesCache-Control: max-age=3600Cache-Control: no-cache="set-cookie"Content-Disposition: inlineDate: Thu, 14 Mar 2024 00:56:12 GMTETag: "1fcfc-6139217a0ba2e"Last-Modified: Wed, 13 Mar 2024 22:14:02 GMTServer: ApacheStrict-Transport-Security: max-age=31536000; includeSubdomains; preloadX-Content-Type-Options: nosniffX-Dispatcher: dispatcher2useast1-28503851X-Frame-Options: SAMEORIGINX-Vhost: publishVary: Accept-EncodingX-Cache: Error from cloudfrontVia: 1.1 babb61789095288ef1d09146c15e7f1e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: JFK50-P2X-Amz-Cf-Id: qhnYZm0osymvsQnMl9tgw7-zUCFUXCp5UpwQNcqnO21O03Fr9olMwQ==Age: 85Permissions-Policy: browsing-topics=()
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 14 Mar 2024 00:57:40 GMTContent-Type: text/plain; charset=utf-8Content-Length: 15Connection: closeVary: OriginX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=15724800; includeSubDomainsAccess-Control-Allow-Methods: *Access-Control-Allow-Credentials: true

Source: chromecache_285.2.dr	String found in binary or memory: http://chir.ag/projects/name-that-color/
Source: chromecache_344.2.dr	String found in binary or memory: http://datatables.net/license
Source: chromecache_344.2.dr	String found in binary or memory: http://datatables.net/license/mit
Source: chromecache_344.2.dr	String found in binary or memory: http://datatables.net/tn/
Source: chromecache_245.2.dr	String found in binary or memory: http://ir.mtb.com/
Source: chromecache_303.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_245.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_245.2.dr	String found in binary or memory: http://schema.org/
Source: chromecache_245.2.dr	String found in binary or memory: http://schema.org/ImageObject
Source: chromecache_268.2.dr	String found in binary or memory: http://typesupply.com/licenseBaltoBold
Source: chromecache_268.2.dr	String found in binary or memory: http://typesupply.com/licenseBaltoBoldCopyright
Source: chromecache_268.2.dr	String found in binary or memory: http://typesupply.comType
Source: chromecache_285.2.dr, chromecache_344.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_344.2.dr	String found in binary or memory: http://www.datatables.net
Source: chromecache_248.2.dr, chromecache_265.2.dr, chromecache_387.2.dr, chromecache_267.2.dr, chromecache_380.2.dr, chromecache_318.2.dr, chromecache_307.2.dr, chromecache_237.2.dr	String found in binary or memory: http://www.day.com/dam/1.0
Source: chromecache_444.2.dr, chromecache_375.2.dr	String found in binary or memory: https://##utag_subscription_name##.quantummetric.com/#/users/search?
Source: chromecache_475.2.dr	String found in binary or memory: https://18.210.229.244/is
Source: chromecache_361.2.dr	String found in binary or memory: https://54.156.2.105/is
Source: chromecache_413.2.dr, chromecache_402.2.dr, chromecache_434.2.dr, chromecache_442.2.dr, chromecache_456.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_413.2.dr, chromecache_402.2.dr, chromecache_434.2.dr, chromecache_442.2.dr, chromecache_456.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_245.2.dr	String found in binary or memory: https://apps.apple.com/us/app/m-t-mobile-banking/id397761931
Source: chromecache_349.2.dr, chromecache_455.2.dr, chromecache_245.2.dr	String found in binary or memory: https://asset.mtb.com/Documents/html/ESign.htm
Source: chromecache_405.2.dr, chromecache_455.2.dr, chromecache_379.2.dr	String found in binary or memory: https://asset.mtb.com/Documents/html/homepage/favicon.ico
Source: chromecache_303.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_303.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_303.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_303.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_303.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_303.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_303.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_303.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_303.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_303.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_313.2.dr, chromecache_413.2.dr, chromecache_402.2.dr, chromecache_434.2.dr, chromecache_442.2.dr, chromecache_456.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_271.2.dr	String found in binary or memory: https://cdn.quantummetric.com/helpers/blank
Source: chromecache_317.2.dr, chromecache_433.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_317.2.dr, chromecache_433.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_444.2.dr, chromecache_375.2.dr	String found in binary or memory: https://collect.tealiumiq.com/vdata/i.gif?
Source: chromecache_436.2.dr, chromecache_274.2.dr, chromecache_245.2.dr	String found in binary or memory: https://commercialservices.mtb.com/auth/forgot-password.html
Source: chromecache_349.2.dr	String found in binary or memory: https://commercialservices.mtb.com/auth/index.html
Source: chromecache_299.2.dr, chromecache_328.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_466.2.dr	String found in binary or memory: https://customer.jrni.com/?client=mtbank
Source: chromecache_303.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_317.2.dr, chromecache_433.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_317.2.dr, chromecache_433.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_317.2.dr, chromecache_433.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_235.2.dr	String found in binary or memory: https://digitalambassador.mtb.com/en/course/start/public-enroll-in-digital-banking/emulator-public-e
Source: chromecache_235.2.dr	String found in binary or memory: https://digitalambassador.mtb.com/en/home
Source: chromecache_303.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_303.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_245.2.dr	String found in binary or memory: https://filecache.mediaroom.com/mr5mr_mtbank/177606/UWIRGB.jpg
Source: chromecache_258.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_303.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_303.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_303.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_303.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_303.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_435.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_258.2.dr	String found in binary or memory: https://github.com/necolas/normalize.css/blob/master/LICENSE.md)
Source: chromecache_271.2.dr	String found in binary or memory: https://github.com/nodeca/pako/blob/master/LICENSE
Source: chromecache_249.2.dr, chromecache_258.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_249.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_456.2.dr	String found in binary or memory: https://google.com
Source: chromecache_456.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_401.2.dr, chromecache_300.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/875517505/?random
Source: chromecache_456.2.dr	String found in binary or memory: https://googlesyndication.com
Source: chromecache_303.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_303.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_303.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_303.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_303.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_303.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_303.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_303.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_351.2.dr, chromecache_235.2.dr	String found in binary or memory: https://ir.mtb.com
Source: chromecache_349.2.dr, chromecache_245.2.dr	String found in binary or memory: https://ir.mtb.com/
Source: chromecache_303.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_303.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_435.2.dr	String found in binary or memory: https://jqueryvalidation.org/
Source: chromecache_303.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_303.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_245.2.dr	String found in binary or memory: https://locations.mtb.com
Source: chromecache_349.2.dr, chromecache_466.2.dr, chromecache_245.2.dr	String found in binary or memory: https://locations.mtb.com/
Source: chromecache_245.2.dr	String found in binary or memory: https://locations.mtb.com/search
Source: chromecache_327.2.dr	String found in binary or memory: https://log-5d65a0ab.us.v2.we-stats.com/api/v1/sendLogs
Source: chromecache_235.2.dr	String found in binary or memory: https://m.mtb.com/Enrollment
Source: chromecache_379.2.dr	String found in binary or memory: https://m.mtb.com/assets/css/foundation-all.css
Source: chromecache_379.2.dr	String found in binary or memory: https://m.mtb.com/assets/css/mtb.css
Source: chromecache_379.2.dr	String found in binary or memory: https://m.mtb.com/scripts/Moe/errorMsg.js
Source: chromecache_379.2.dr	String found in binary or memory: https://m.mtb.com/scripts/Moe/formInputValidations.js
Source: chromecache_379.2.dr	String found in binary or memory: https://m.mtb.com/scripts/Moe/mtb-app.js
Source: chromecache_379.2.dr	String found in binary or memory: https://m.mtb.com/scripts/foundation.js
Source: chromecache_379.2.dr	String found in binary or memory: https://m.mtb.com/scripts/jquery-3.3.1.js
Source: chromecache_455.2.dr	String found in binary or memory: https://mtb.com/olb-accessibility
Source: chromecache_349.2.dr	String found in binary or memory: https://mtb.com/olb-enroll
Source: chromecache_349.2.dr	String found in binary or memory: https://myaccountviewonline.com/
Source: chromecache_466.2.dr	String found in binary or memory: https://nao.mtb.com
Source: chromecache_351.2.dr, chromecache_235.2.dr	String found in binary or memory: https://nao.mtb.com/open/checking/ez-choice-checking/account-ownership-selection
Source: chromecache_351.2.dr, chromecache_235.2.dr	String found in binary or memory: https://nao.mtb.com/open/checking/my-choice-plus-interest/account-ownership-selection
Source: chromecache_351.2.dr, chromecache_235.2.dr	String found in binary or memory: https://nao.mtb.com/open/checking/my-choice-premium/account-ownership-selection
Source: chromecache_351.2.dr, chromecache_235.2.dr	String found in binary or memory: https://nao.mtb.com/open/checking/my-way-banking/account-ownership-selection
Source: chromecache_245.2.dr	String found in binary or memory: https://newsroom.mtb.com/2024-03-05-In-Annual-Letter
Source: chromecache_467.2.dr	String found in binary or memory: https://ob.segreencolumn.com/i/8032d93d154e4517e5e5e20fa9c27d7b.js
Source: chromecache_379.2.dr	String found in binary or memory: https://onlinebanking.mtb.com
Source: chromecache_349.2.dr	String found in binary or memory: https://onlinebanking.mtb.com/Login/LoginHelp
Source: chromecache_349.2.dr	String found in binary or memory: https://onlinebanking.mtb.com/Login/MTBSignOn
Source: chromecache_456.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_313.2.dr, chromecache_413.2.dr, chromecache_402.2.dr, chromecache_434.2.dr, chromecache_442.2.dr, chromecache_456.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_433.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_245.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.mtb.mbanking.sc.retail.prod&hl=en
Source: chromecache_303.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_303.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_303.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_303.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_303.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_303.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_303.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_433.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_405.2.dr	String found in binary or memory: https://resources.mtb.com/Assets/img/mtb-entrust.svg
Source: chromecache_405.2.dr	String found in binary or memory: https://resources.mtb.com/Assets/img/mtb-equalhousinglender.svg
Source: chromecache_405.2.dr	String found in binary or memory: https://resources.mtb.com/Assets/img/mtb-logo.svg
Source: chromecache_405.2.dr	String found in binary or memory: https://resources.mtb.com/r/simple-layout-responsive/css.mtb?v=08292023024500
Source: chromecache_405.2.dr	String found in binary or memory: https://resources.mtb.com/r/simple-layout-responsive/js.mtb?v=08292023024500
Source: chromecache_480.2.dr, chromecache_382.2.dr	String found in binary or memory: https://s.yimg.com/wi/ytc.js
Source: chromecache_437.2.dr, chromecache_351.2.dr, chromecache_349.2.dr, chromecache_235.2.dr, chromecache_245.2.dr	String found in binary or memory: https://schedule.mtb.com/service
Source: chromecache_245.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_303.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_251.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_313.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_313.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_433.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_317.2.dr, chromecache_433.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_317.2.dr, chromecache_433.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_317.2.dr, chromecache_433.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_351.2.dr, chromecache_349.2.dr, chromecache_235.2.dr, chromecache_245.2.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.js
Source: chromecache_351.2.dr, chromecache_349.2.dr, chromecache_235.2.dr, chromecache_245.2.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.sync.js
Source: chromecache_334.2.dr, chromecache_428.2.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.js
Source: chromecache_313.2.dr, chromecache_413.2.dr, chromecache_402.2.dr, chromecache_434.2.dr, chromecache_442.2.dr, chromecache_456.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_245.2.dr	String found in binary or memory: https://twitter.com/MandT_Bank
Source: chromecache_351.2.dr, chromecache_349.2.dr, chromecache_235.2.dr, chromecache_245.2.dr	String found in binary or memory: https://twitter.com/mandt_bank
Source: chromecache_303.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_303.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a
Source: chromecache_436.2.dr, chromecache_349.2.dr, chromecache_274.2.dr, chromecache_245.2.dr	String found in binary or memory: https://webinfoplus.mandtbank.com/cashplus/
Source: chromecache_349.2.dr	String found in binary or memory: https://weborders.brinksinc.com/
Source: chromecache_327.2.dr	String found in binary or memory: https://wup-5d65a0ab.us.v2.we-stats.com/client/v3/web/wup?cid=mufasa
Source: chromecache_317.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_349.2.dr	String found in binary or memory: https://www.centresuite.com/Centre/Public/Logon/Index?ReturnUrl=%2fCentre%3fsite%3d2129&site=2129
Source: chromecache_463.2.dr, chromecache_306.2.dr	String found in binary or memory: https://www.dynatrace.com/company/trust-center/customers/reports/
Source: chromecache_456.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_366.2.dr, chromecache_257.2.dr, chromecache_392.2.dr, chromecache_449.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/875517505/?random
Source: chromecache_429.2.dr, chromecache_427.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/948713993/?random
Source: chromecache_472.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/990489911/?random
Source: chromecache_351.2.dr, chromecache_349.2.dr, chromecache_235.2.dr, chromecache_245.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3
Source: chromecache_497.2.dr, chromecache_317.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_456.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_456.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_383.2.dr, chromecache_322.2.dr, chromecache_498.2.dr, chromecache_292.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: chromecache_474.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=##utag_measurement_id##
Source: chromecache_317.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__.
Source: chromecache_497.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js
Source: chromecache_351.2.dr, chromecache_349.2.dr, chromecache_235.2.dr, chromecache_245.2.dr	String found in binary or memory: https://www.linkedin.com/company/m%26t-bank
Source: chromecache_245.2.dr	String found in binary or memory: https://www.linkedin.com/company/m&t-bank
Source: chromecache_313.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_349.2.dr, chromecache_245.2.dr	String found in binary or memory: https://www.mtb.com
Source: chromecache_351.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.mtb.com/content/dam/mtb-web/images/mtb_logo_green.svg
Source: chromecache_351.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.mtb.com/content/dam/mtb-web/images/mtb_logo_white.svg
Source: chromecache_405.2.dr, chromecache_455.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.mtb.com/equalhousinglender
Source: chromecache_405.2.dr, chromecache_455.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.mtb.com/fdic
Source: chromecache_405.2.dr, chromecache_455.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.mtb.com/help-center/policies/terms-of-use
Source: chromecache_405.2.dr, chromecache_455.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.mtb.com/home-page
Source: chromecache_375.2.dr	String found in binary or memory: https://www.mtb.com/log-in
Source: chromecache_405.2.dr, chromecache_455.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.mtb.com/olb-entrust
Source: chromecache_455.2.dr	String found in binary or memory: https://www.mtb.com/olb-personalsite
Source: chromecache_455.2.dr	String found in binary or memory: https://www.mtb.com/olbsecurity
Source: chromecache_349.2.dr, chromecache_405.2.dr, chromecache_455.2.dr, chromecache_245.2.dr, chromecache_379.2.dr	String found in binary or memory: https://www.mtb.com/privacy
Source: chromecache_349.2.dr	String found in binary or memory: https://www.mtbsupplierpay.com/UserLogin/UserLogin.do?ino=mtb
Source: chromecache_271.2.dr	String found in binary or memory: https://www.quantummetric.com/legal/eula
Source: chromecache_271.2.dr	String found in binary or memory: https://www.quantummetric.com/legal/patents/.
Source: chromecache_349.2.dr	String found in binary or memory: https://www.youraccessone.com/1590mtb
Source: chromecache_245.2.dr	String found in binary or memory: https://www.youtube.com/channel/UCP_euyMh-Ase06MuFPGn4XQ
Source: chromecache_313.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_245.2.dr	String found in binary or memory: https://www3.mtb.com
Source: chromecache_245.2.dr	String found in binary or memory: https://www3.mtb.com/about-mt
Source: chromecache_245.2.dr	String found in binary or memory: https://www3.mtb.com/business/business-banking
Source: chromecache_245.2.dr	String found in binary or memory: https://www3.mtb.com/careers
Source: chromecache_245.2.dr	String found in binary or memory: https://www3.mtb.com/commercial
Source: chromecache_445.2.dr	String found in binary or memory: https://www3.mtb.com/content/dam/mtb-web/scripts/mtbank-prod.js
Source: chromecache_351.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www3.mtb.com/content/dam/mtb-web/wcm-asset/documents/html/esign.htm
Source: chromecache_455.2.dr	String found in binary or memory: https://www3.mtb.com/homepage/explore-the-m-and-t-bank-help-center/digital-services-agreement.html
Source: chromecache_245.2.dr	String found in binary or memory: https://www3.mtb.com/personal-banking
Source: chromecache_455.2.dr	String found in binary or memory: https://www3.mtb.com/personal-banking/online-mobile-services
Source: chromecache_351.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www3.mtb.com/personal/online-and-mobile.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923

Source: unknown	HTTPS traffic detected: 23.199.50.2:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.199.50.2:443 -> 192.168.2.4:49754 version: TLS 1.2

Source: classification engine

Classification label: mal76.phis.win@29/467@136/51

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=1996,i,10392077466193736227,16724924904900396291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mtb-repo.pages.dev/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6456 --field-trial-handle=1996,i,10392077466193736227,16724924904900396291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6524 --field-trial-handle=1996,i,10392077466193736227,16724924904900396291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=1996,i,10392077466193736227,16724924904900396291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6456 --field-trial-handle=1996,i,10392077466193736227,16724924904900396291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6524 --field-trial-handle=1996,i,10392077466193736227,16724924904900396291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_430.2.dr

Binary or memory string: background-image: url(data:image/png;base64,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);

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://mtb-repo.pages.dev/	100%	Avira URL Cloud	phishing
https://mtb-repo.pages.dev/	17%	Virustotal		Browse
https://mtb-repo.pages.dev/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
obs.segreencolumn.com	0%	Virustotal		Browse
platform.twitter.map.fastly.net	0%	Virustotal		Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal		Browse
ob.segreencolumn.com	0%	Virustotal		Browse
log-5d65a0ab.us.v2.we-stats.com	0%	Virustotal		Browse
spdc-global.pbp.gysm.yahoodns.net	0%	Virustotal		Browse
wup-5d65a0ab.us.v2.we-stats.com	0%	Virustotal		Browse
mtb-repo.pages.dev	13%	Virustotal		Browse
adobetarget.data.adobedc.net	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
https://px.mountain.com/st?ga_tracking_id=G-ZTNQ6ZK8T0&ga_client_id=1166952759.1710377814&shpt=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22ga_client_id%22%3A%221166952759.1710377814%22%2C%22shpt%22%3A%22M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank%22%2C%22dcm_cid%22%3A%221166952759.1710377814%22%2C%22mntnis%22%3A%22y6%2F4gjwN%2Bt2Zv6fZL3kOwkJTACfroGv6%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1166952759.1710377814&available_ga=%5B%7B%22id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22sess_id%22%3A%221710377813%22%7D%5D&hardcoded_ga=G-ZTNQ6ZK8T0&dxver=4.0.0&shaid=34249&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&cb=42205510116200300&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue%2Ctealium%3Dtrue	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	0%	Avira URL Cloud	safe
https://mtb-repo.pages.dev/mtb_files/mtb-equalhousinglender.svg	100%	Avira URL Cloud	phishing
https://mtb-repo.pages.dev/mtb_files/saved_resource.html	100%	Avira URL Cloud	phishing
https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	0%	Virustotal		Browse
https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	0%	Virustotal		Browse
https://dx.mountain.com/spx?dxver=4.0.0&shaid=34249&tdr=&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&cb=42205510116200300	0%	Avira URL Cloud	safe
https://gs.mountain.com/gs	0%	Avira URL Cloud	safe
https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__.	0%	Avira URL Cloud	safe
https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	0%	Avira URL Cloud	safe
https://gs.mountain.com/gs	0%	Virustotal		Browse
https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
ob.segreencolumn.com	18.238.80.12	true	false	0%, Virustotal, Browse	unknown
obs.segreencolumn.com	54.83.110.109	true	false	0%, Virustotal, Browse	unknown
cdn.quantummetric.com	172.67.20.158	true	false		high
wup-5d65a0ab.us.v2.we-stats.com	52.141.217.134	true	false	0%, Virustotal, Browse	unknown
mtb-app.quantummetric.com	34.72.33.225	true	false		high
resources.gslb.mtb.com	192.216.61.78	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
platform.twitter.map.fastly.net	199.232.36.157	true	false	0%, Virustotal, Browse	unknown
spdc-global.pbp.gysm.yahoodns.net	76.13.32.146	true	false	0%, Virustotal, Browse	unknown
log-5d65a0ab.us.v2.we-stats.com	52.238.253.184	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	142.251.16.156	true	false		high
d3q5vj014p5nip.cloudfront.net	13.225.214.11	true	false		high
mtb-repo.pages.dev	172.66.47.152	true	false	13%, Virustotal, Browse	unknown
adobetarget.data.adobedc.net	63.140.39.117	true	false	0%, Virustotal, Browse	unknown
scontent.xx.fbcdn.net	31.13.71.7	true	false		high
rl.quantummetric.com	34.66.3.160	true	false		high
onlinebanking.gslb.mtb.com	24.75.29.69	true	false		high
t.co	104.244.42.197	true	false		high
d9siiz948zdql.cloudfront.net	108.139.29.70	true	false		high
d3lyk6mjwds9ox.cloudfront.net	54.230.163.72	true	false		high
d3hspktnnoy2e3.cloudfront.net	13.225.214.59	true	false		high
www.google.com	142.250.80.4	true	false		high
px.mountain.com	35.81.173.170	true	false		unknown
star-mini.c10r.facebook.com	157.240.241.35	true	false		high
m.mtb.com	24.75.29.68	true	false		high
s.twitter.com	104.244.42.131	true	false		high
dx.mountain.com	44.209.137.118	true	false		unknown
gs.mountain.com	34.212.4.35	true	false		unknown
analytics-alv.google.com	216.239.32.181	true	false		high
googleads.g.doubleclick.net	142.251.40.130	true	false		high
ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com	23.20.189.8	true	false		high
td.doubleclick.net	142.251.40.226	true	false		high
d3o2xc4936wvmh.cloudfront.net	18.164.116.52	true	false		high
edge.gycpi.b.yahoodns.net	69.147.82.61	true	false		unknown
dzfq4ouujrxm8.cloudfront.net	18.164.116.55	true	false		high
aiq-in.mtb.com	34.67.98.25	true	false		high
sp.analytics.yahoo.com	unknown	unknown	false		high
static.ads-twitter.com	unknown	unknown	false		unknown
1.c81358859121583b7adf2ace89cb39f44.com	unknown	unknown	false		unknown
mtb.tt.omtrdc.net	unknown	unknown	false		unknown
resources.mtb.com	unknown	unknown	false		high
www.facebook.com	unknown	unknown	false		high
asset.mtb.com	unknown	unknown	false		high
1.a79ab95c1589a13f8a4cab612bc71f9f7.com	unknown	unknown	false		unknown
www.linkedin.com	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
px.ads.linkedin.com	unknown	unknown	false		high
www3.mtb.com	unknown	unknown	false		high
s.yimg.com	unknown	unknown	false		high
analytics.twitter.com	unknown	unknown	false		high
onlinebanking.mtb.com	unknown	unknown	false		high
1.b406929acabac9b095f124c81bdfcf57f.com	unknown	unknown	false		unknown
snap.licdn.com	unknown	unknown	false		high
analytics.google.com	unknown	unknown	false		high
www.mtb.com	unknown	unknown	false		high
tags.tiqcdn.com	unknown	unknown	false		high
mboxedge34.tt.omtrdc.net	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www3.mtb.com/content/dam/mtb-web/images/spotlight/mtb-hp-spotlight-whm.jpg	false		high
https://m.mtb.com/assets/css/foundation-all.css	false		high
https://mtb-repo.pages.dev/mtb_files/mtb-equalhousinglender.svg	false	Avira URL Cloud: phishing	unknown
https://onlinebanking.mtb.com/TSPD/0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14?type=14	false		high
https://onlinebanking.mtb.com/TSPD/0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14?type=13	false		high
https://mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377846067&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=1325&N=4	false		high
https://www3.mtb.com/content/dam/mtb-web/scripts/status.js	false		high
about:blank	false	Avira URL Cloud: safe	low
https://mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377835775&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1169&N=5&P=1	false		high
https://m.mtb.com/rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fm.mtb.com%2FEnrollment&bp=3&app=ea7c4b59f27d43eb&crc=87346429&en=zgefxirc&end=1	false		high
https://www3.mtb.com/content/dam/mtb-web/scripts/fe_utilities.css	false		high
https://m.mtb.com/scripts/Moe/mtb-app.js	false		high
https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Thu%2C%2014%20Mar%202024%2000%3A56%3A52%20GMT&n=-1&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium%2Cgtm	false		high
https://www.facebook.com/tr/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377849513&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=431bc3&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=9110447352330543%2C3625895447511716%2C3109015925860109&rqm=GET	false		high
https://mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377854436&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=739&N=1	false		high
https://www.facebook.com/tr/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377813856&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=66a7a0&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=GET	false		high
https://www3.mtb.com/content/dam/mtb-web/images/online-and-mobile-services/icon-move-money.svg	false		high
https://resources.mtb.com/r/simple-layout-responsive/js.mtb?v=08292023024500	false		high
https://m.mtb.com/TSPD/?type=18	false		high
https://m.mtb.com/ruxitagentjs_ICA2NVfhqru_10285240307101407.js	false		high
https://resources.mtb.com/Assets/img/mtb-entrust.svg	false		high
https://px.mountain.com/st?ga_tracking_id=G-ZTNQ6ZK8T0&ga_client_id=1166952759.1710377814&shpt=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22ga_client_id%22%3A%221166952759.1710377814%22%2C%22shpt%22%3A%22M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank%22%2C%22dcm_cid%22%3A%221166952759.1710377814%22%2C%22mntnis%22%3A%22y6%2F4gjwN%2Bt2Zv6fZL3kOwkJTACfroGv6%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1166952759.1710377814&available_ga=%5B%7B%22id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22sess_id%22%3A%221710377813%22%7D%5D&hardcoded_ga=G-ZTNQ6ZK8T0&dxver=4.0.0&shaid=34249&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&cb=42205510116200300&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue%2Ctealium%3Dtrue	false	Avira URL Cloud: safe	unknown
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377813856&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=66a7a0&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=FGET	false		high
https://onlinebanking.mtb.com/Assets/js/tealium_prod.js	false		high
https://mtb-repo.pages.dev/mtb_files/saved_resource.html	false	Avira URL Cloud: phishing	unknown
https://rl.quantummetric.com/mtb/hash-check	false		high
https://m.mtb.com/TSPD/?type=20	false		high
https://m.mtb.com/TSPD/?type=22	false		high
https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.43.js?utv=ut4.51.202006232100	false		high
https://analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=eb8739fc-85bf-4705-8e1c-d3d391190c7d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ce9a527c-4201-486e-8c81-c51017e646de&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29	false		high
https://www3.mtb.com/content/dam/mtb-web/logos/favicon.ico.transform/32x32/image.png	false		high
https://mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377834432&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&S=0&N=0&P=0	false		high
https://aiq-in.mtb.com/v1/p	false		high
https://www.google.com/pagead/1p-user-list/948713993/?random=1710377812268&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqzMKuIekrv2g2EyjjtOF4TFh3o-SUHQ&random=255017323&rmt_tld=0&ipr=y	false		high
https://www.google.com/pagead/1p-user-list/875517505/?random=1710377813697&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeRcobpVsm9ieYD9QFoJNC0hsBQXQGzOnWLiYT2cz-JZRun5w&random=1555305866&rmt_tld=0&ipr=y	false		high
https://onlinebanking.mtb.com/TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=17	false		high
https://mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377818547&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=310b529105cc4cce21502298401306db	false		high
https://www3.mtb.com/content/dam/mtb-web/images/icon-search-green.svg	false		high
https://www3.mtb.com/content/dam/mtb-web/images/personal-home-page/android-ios.png	false		high
https://onlinebanking.mtb.com/TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=12	false		high
https://www3.mtb.com/content/dam/mtb-web/images/personal-home-page/deposit-checks.png	false		high
https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www3.mtb.com/content/dam/mtb-web/wcm-asset/documents/html/homepage/images/assets/icon-phone-dark-green.svg	false		high
https://onlinebanking.mtb.com/rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&bp=3&app=893c324bd7e5ac65&crc=88002536&en=zgefxirc&end=1	false		high
https://www3.mtb.com/content/dam/mtb-web/images/svg/icon_lock_green.svg	false		high
https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377859601&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=905&N=2	false		high
https://www3.mtb.com/content/dam/mtb-web/images/svg/icon_location_green.svg	false		high
https://onlinebanking.mtb.com/TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=11	false		high
https://www3.mtb.com/etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-light.woff	false		high
https://www3.mtb.com/content/dam/mtb-web/images/icon-global-nav-help.svg	false		high
https://mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377818549&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0	false		high
https://www.google.com/recaptcha/api.js?render=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3	false		high
https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.215.js?utv=ut4.51.202304242124	false		high
https://www3.mtb.com/etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-medium.woff	false		high
https://www.facebook.com/tr/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377850381&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=8d7516&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=GET	false		high
https://onlinebanking.mtb.com/Login/LoginHelp	false		high
https://mtb-repo.pages.dev/login	false		unknown
https://www.google.com/pagead/1p-user-list/875517505/?random=1710377852917&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqRSBicCHg_SchU3gm9kxo6DFjWIFDoxf5PR6dxX4k2U2SWj_e&random=1822853294&rmt_tld=0&ipr=y	false		high
https://www3.mtb.com/content/dam/mtb-web/images/zelle-color-convenience-logo.png	false		high
https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://dx.mountain.com/spx?dxver=4.0.0&shaid=34249&tdr=&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&cb=42205510116200300	false	Avira URL Cloud: safe	unknown
https://t.co/i/adsct?bci=3&eci=2&event_id=eb8739fc-85bf-4705-8e1c-d3d391190c7d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ce9a527c-4201-486e-8c81-c51017e646de&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29	false		high
https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.76.js?utv=ut4.51.202309082106	false		high
https://mtb-app.quantummetric.com/?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377857501&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1153&N=5&P=1	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377849513&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=431bc3&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=9110447352330543%2C3625895447511716%2C3109015925860109&rqm=FGET	false		high
https://gs.mountain.com/gs	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://s.yimg.com/wi/config/10087193.json	false		high
https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.210.js?utv=ut4.51.202308231951	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_303.2.dr	false		high
https://newsroom.mtb.com/2024-03-05-In-Annual-Letter	chromecache_245.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_249.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_303.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_317.2.dr, chromecache_433.2.dr	false		high
http://www.datatables.net	chromecache_344.2.dr	false		high
https://support.google.com/recaptcha	chromecache_433.2.dr	false		high
https://jsperf.com/getall-vs-sizzle/2	chromecache_303.2.dr	false		high
http://schema.org/ImageObject	chromecache_245.2.dr	false		high
https://mtb.com/olb-accessibility	chromecache_455.2.dr	false		high
https://commercialservices.mtb.com/auth/forgot-password.html	chromecache_436.2.dr, chromecache_274.2.dr, chromecache_245.2.dr	false		high
https://sizzlejs.com/	chromecache_303.2.dr	false		high
https://www3.mtb.com	chromecache_245.2.dr	false		high
https://www3.mtb.com/business/business-banking	chromecache_245.2.dr	false		high
https://nao.mtb.com/open/checking/my-way-banking/account-ownership-selection	chromecache_351.2.dr, chromecache_235.2.dr	false		high
https://www.google.com/pagead/1p-user-list/990489911/?random	chromecache_472.2.dr, chromecache_404.2.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_303.2.dr	false		high
https://www.dynatrace.com/company/trust-center/customers/reports/	chromecache_463.2.dr, chromecache_306.2.dr	false		high
http://datatables.net/license	chromecache_344.2.dr	false		high
https://cloud.google.com/contact	chromecache_317.2.dr, chromecache_433.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_303.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__.	chromecache_317.2.dr, chromecache_433.2.dr	false	Avira URL Cloud: safe	low
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_303.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_317.2.dr, chromecache_433.2.dr	false		high
https://github.com/eslint/eslint/issues/3229	chromecache_303.2.dr	false		high
https://getbootstrap.com/)	chromecache_258.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_317.2.dr, chromecache_433.2.dr	false		high
https://www3.mtb.com/about-mt	chromecache_245.2.dr	false		high
https://www.mtb.com	chromecache_349.2.dr, chromecache_245.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_303.2.dr	false		high
https://www.mtb.com/help-center/policies/terms-of-use	chromecache_405.2.dr, chromecache_455.2.dr, chromecache_379.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
54.230.163.72	d3lyk6mjwds9ox.cloudfront.net	United States		16509	AMAZON-02US	false
54.83.110.109	obs.segreencolumn.com	United States		14618	AMAZON-AESUS	false
34.67.98.25	aiq-in.mtb.com	United States		139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
157.240.241.35	star-mini.c10r.facebook.com	United States		32934	FACEBOOKUS	false
34.72.33.225	mtb-app.quantummetric.com	United States		15169	GOOGLEUS	false
142.251.40.132	unknown	United States		15169	GOOGLEUS	false
23.20.189.8	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com	United States		14618	AMAZON-AESUS	false
34.66.3.160	rl.quantummetric.com	United States		139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
142.250.80.4	www.google.com	United States		15169	GOOGLEUS	false
142.251.40.130	googleads.g.doubleclick.net	United States		15169	GOOGLEUS	false
24.75.29.69	onlinebanking.gslb.mtb.com	United States		16490	MTBUS	false
13.225.214.59	d3hspktnnoy2e3.cloudfront.net	United States		16509	AMAZON-02US	false
24.75.29.68	m.mtb.com	United States		16490	MTBUS	false
142.250.80.100	unknown	United States		15169	GOOGLEUS	false
216.239.32.181	analytics-alv.google.com	United States		15169	GOOGLEUS	false
104.244.42.133	unknown	United States		13414	TWITTERUS	false
35.81.173.170	px.mountain.com	United States		237	MERIT-AS-14US	false
76.13.32.146	spdc-global.pbp.gysm.yahoodns.net	United States		26101	YAHOO-3US	false
104.244.42.131	s.twitter.com	United States		13414	TWITTERUS	false
192.216.61.78	resources.gslb.mtb.com	United States		12134	MTBUS	false
172.66.47.152	mtb-repo.pages.dev	United States		13335	CLOUDFLARENETUS	false
199.232.36.157	platform.twitter.map.fastly.net	United States		54113	FASTLYUS	false
18.164.116.52	d3o2xc4936wvmh.cloudfront.net	United States		3	MIT-GATEWAYSUS	false
44.209.137.118	dx.mountain.com	United States		14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
31.13.71.7	scontent.xx.fbcdn.net	Ireland		32934	FACEBOOKUS	false
52.141.217.134	wup-5d65a0ab.us.v2.we-stats.com	United States		8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.164.116.55	dzfq4ouujrxm8.cloudfront.net	United States		3	MIT-GATEWAYSUS	false
108.139.29.6	unknown	United States		16509	AMAZON-02US	false
34.212.4.35	gs.mountain.com	United States		16509	AMAZON-02US	false
18.238.80.12	ob.segreencolumn.com	United States		16509	AMAZON-02US	false
172.66.44.104	unknown	United States		13335	CLOUDFLARENETUS	false
54.156.2.105	unknown	United States		14618	AMAZON-AESUS	false
69.147.82.61	edge.gycpi.b.yahoodns.net	United States		14779	INKTOMI-LAWSONUS	false
31.13.71.36	unknown	Ireland		32934	FACEBOOKUS	false
142.251.16.156	stats.g.doubleclick.net	United States		15169	GOOGLEUS	false
142.251.40.226	td.doubleclick.net	United States		15169	GOOGLEUS	false
52.238.253.184	log-5d65a0ab.us.v2.we-stats.com	United States		8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.210.229.244	unknown	United States		14618	AMAZON-AESUS	false
172.67.20.158	cdn.quantummetric.com	United States		13335	CLOUDFLARENETUS	false
3.227.190.204	unknown	United States		14618	AMAZON-AESUS	false
63.140.39.15	unknown	United States		4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
13.225.214.11	d3q5vj014p5nip.cloudfront.net	United States		16509	AMAZON-02US	false
104.244.42.67	unknown	United States		13414	TWITTERUS	false
63.140.39.117	adobetarget.data.adobedc.net	United States		4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
104.244.42.197	t.co	United States		13414	TWITTERUS	false
142.250.81.228	unknown	United States		15169	GOOGLEUS	false
108.139.29.36	unknown	United States		16509	AMAZON-02US	false
108.139.29.70	d9siiz948zdql.cloudfront.net	United States		16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1408726
Start date and time:	2024-03-14 01:55:24 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mtb-repo.pages.dev/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@29/467@136/51
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.mtb.com/home-page Browse: https://onlinebanking.mtb.com/Login/LoginHelp Browse: https://onlinebanking.mtb.com/Enrollment/Enroll Browse: https://www3.mtb.com/personal-banking/online-mobile-services

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.195, 142.250.176.206, 142.251.16.84, 34.104.35.123, 142.251.40.170, 142.250.80.74, 142.251.32.106, 142.251.40.234, 142.250.80.10, 142.251.35.170, 142.250.80.106, 142.250.72.106, 142.251.40.202, 142.251.41.10, 142.250.81.234, 142.250.80.42, 142.251.40.106, 142.251.40.138, 142.250.176.202, 142.250.64.106, 20.114.59.183, 23.40.179.166, 23.40.179.152, 23.40.179.169, 23.40.179.142, 23.40.179.181, 192.229.211.108, 20.242.39.171, 20.3.187.198, 142.251.40.99, 142.250.64.74, 142.250.65.202, 142.250.65.170, 142.250.65.234, 13.107.21.200, 204.79.197.200, 23.57.90.111, 23.57.90.105, 142.251.41.8, 13.107.42.14, 142.251.40.131, 142.251.32.98, 142.250.65.163, 142.250.176.195, 142.251.40.206
Excluded domains from analysis (whitelisted): www.googleadservices.com, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, bat.bing.com, update.googleapis.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, dual-a-0001.a-msedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, od.linkedin.edgesuite.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, bat-bing-com.a-0001.a-msedge.net, edgedl.me.gvt1.com, clients.l.google.com, a1916.dscg2.akamai.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 235

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5211), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	151069
Entropy (8bit):	5.188693111665544
Encrypted:	false
SSDEEP:	1536:SDllgZIZDZmRJFMeMw3GJtY1XN/x44PTyq11JIB0Fdjvug6:SDlaiD+11Jx44PTjw
MD5:	555A4C77E91CDEDD86200D60E16F3BC2
SHA1:	23599A039CD6FB812DE0AF9E258973EA5B7658C8
SHA-256:	B7C0C31AF2A32850EC57762F4FED3D8EFB06A038993F54A35C5E5E644BB87A0B
SHA-512:	1B38ED2D3B382ECB74CECBECDF068616B0C0242D463ED65C3ECD4E8B81E24A14CCF9D5FC2817BC9E415384AC7BA79BA8B841A5B56B2343E7A95F9AC7FBBCD65C
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/personal-banking/online-mobile-services
Preview:	<!DOCTYPE HTML>.<html>.<head>..<meta charset="UTF-8"/>..<title>Online & Mobile Banking Services \| M&T Bank</title>..<meta name="description" content="Enroll in M&T Bank's Online & Mobile Banking services to easily and conveniently manage your finances from your mobile device, tablet or computer."/>..<meta name="keywords" content="digital banking,online banking,mobile banking,mobile app,m&t mobile banking,m&t online banking,m&t online,m and t online,mobile banking app,online mobile banking,mobile bank accounts,m&t bank app,bank digitally,bank anytime,bank anywhere,online account access,mobile account access,digital account access,manage my accounts,manage my account online,manage my account mobile,access my money,access my accounts,move money,money management,make payments online,financial tools,digital options,top features,digital features,enroll online,enroll in online banking,enroll mobile,enroll in mobile banking,enroll in digital banking,Web ban

Chrome Cache Entry: 236

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3227), with no line terminators
Category:	downloaded
Size (bytes):	3227
Entropy (8bit):	5.126059073717022
Encrypted:	false
SSDEEP:	48:h6Fac7OxwusRHHHD2dLkmttJ75cEC8Xn7LrKWkI8aWNrTQsHa5eaL/3VMGb55csJ:hiSqbQgmokN5fLNDJ
MD5:	9EE48A4DA9C402E8A23AD085FB71F28F
SHA1:	F0C59306D6313F9BEE02B53CA8903991BD24BFD7
SHA-256:	9CDAD69A4B967C882C3D8E9CB054E7334B7F8870E96427A5D20AE2D17EFF2622
SHA-512:	2C25A0BA0B95622DA682D5F1D238C77A3858D621655ECF352BD49BE5FA7D92C6417410ACCF16F50E039FE1C2863C575FA725C23A6F3587AC95A061E53B90E6D3
Malicious:	false
Reputation:	low
URL:	https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
Preview:	var cdwpb=function(t){var a={};function __webpack_require__(e){if(a[e])return a[e].exports;var r=a[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}return __webpack_require__.m=t,__webpack_require__.c=a,__webpack_require__.d=function(e,r,t){__webpack_require__.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},__webpack_require__.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},__webpack_require__.t=function(r,e){if(1&e&&(r=__webpack_require__(r)),8&e)return r;if(4&e&&"object"==typeof r&&r&&r.__esModule)return r;var t=Object.create(null);if(__webpack_require__.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:r}),2&e&&"string"!=typeof r)for(var a in r)__webpack_require__.d(t,a,function(e){return r[e]}.bind(null,a));return t},__webpack_require__.n=function(e){var r=e&&e.__esModule?function getDef

Chrome Cache Entry: 237

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 83, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9422
Entropy (8bit):	7.262726451353614
Encrypted:	false
SSDEEP:	192:yfk1fsCxwNenKy84/C8JirkdHnV6CMNuOYS5pmnSbV6OynmWoE61hokKMdhPmy1/:yM5uysOP6/pFfWtGoxMB1/
MD5:	6EA62E1D82AF2E27D7661B0C5F90B53B
SHA1:	104898133A8123F72A011673403815B7B94412C3
SHA-256:	CAB73FB1F71A5BFAE2E952C05850D3092260D62737B8F25EE7519135FD1EDBAD
SHA-512:	C45267A62C5C60DA53789B3425C01EE37CD4B3509B58FA76BE99853032D52F2AFAF610BB6FB31A0949391521DA822ED4BD24FC28F7EFD9DE708C050685E4DF66
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......S.....W..J...5iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2020-04-10T16:23:51.503Z". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Comments="Software: Adobe ImageReady XML:com.adobe.xmp: <?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:x

Chrome Cache Entry: 238

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Thu%2C%2014%20Mar%202024%2000%3A57%3A29%20GMT&n=-1&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 239

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9524)
Category:	downloaded
Size (bytes):	26269
Entropy (8bit):	4.921213206809901
Encrypted:	false
SSDEEP:	192:PgFnNojImVVMgqKIulg8LJq5lg8LJEvlLxXxl68Jg/8l68JgrYlljLWfFEiKuuRg:PkNsImVVMgqKJy2MPSLXHl8o1yt13UMD
MD5:	FCE0A1EEFD5FBE7B4DB683EBE6EF51B2
SHA1:	516A22D83D6B61F52F4D1DBB9E1B0AF11DC21C39
SHA-256:	B8DC00B0FB0BE614E9517B511574FD61DE0437B3BD483FA3892E2B7C297E64B6
SHA-512:	2550B8134B5845D8F76DCFA2089204DA4D98454E70E3C83570D9E8D5525F2A5EC3D584764949BA8D0BA82CB9AC0CF520F19197AD4C3547A302BAAB6BBBCFE02F
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.41.js?utv=ut4.51.202309082106
Preview:	//tealium universal tag - utag.41 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved..var uetq=uetq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{

Chrome Cache Entry: 240

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1440x650, components 3
Category:	dropped
Size (bytes):	99062
Entropy (8bit):	7.838108637718474
Encrypted:	false
SSDEEP:	1536:wHE+gm6/H4QVApSrwIlBF1xcyOc7pATco5zOdXbyxnbIDGl0:wEm6f4Q8IvxcV8o5zeXblGl0
MD5:	1B04D2B352A06662954F38522F2596AF
SHA1:	F33145BD443F5DEA9975E2AA5245C48DB6B5889A
SHA-256:	BF1C3D3C93EDB5011E8F8B9002275C4BA13F028B733C089D7528CD51DFF4C63A
SHA-512:	95A0725E1375B8AD63E52D08596646021BD3CA29A09F27915FBE4FD0B4352B04BB96E0C362000078FBC2831DC586CFC4F85364D5EE578A4BCFCE2B923EF41463
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...Njm.5..NjkP.[.P....QE..@.......O.-Qs@..d....i.......c.......U....U..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...+..~.W....+......e.h.>?......o...J.n.aU^.@.j......gV...\|_...2..O.v.

Chrome Cache Entry: 241

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1663
Entropy (8bit):	7.83291333788029
Encrypted:	false
SSDEEP:	24:8XNIPEAEwO+M/dNFkH6TY3p6w3Od5W5QWqEZXwTc+kPZUDivT7:o7pndN868Z/GhcX2c+UU23
MD5:	F9CF99B0792B7C4B4B0E77A55A0BC57A
SHA1:	3A3677A774C33E6050D14727EC88AF58270038DF
SHA-256:	D3031F393F481E7FF2B1C3B5687898027C555769B16BF8022D665F35B38E53AC
SHA-512:	0DB408E514B5DB69E135C749E19B9E6ABBB90B5F496CFCF9FAC83007D605BD29CD59FD86B21612FCE550E15EABE7E39C67A25A78904F7EF64F24F903082E6E44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...K...K.....8Nz....FIDATx..Z.u.0......k.{G......#d._..=BG....#p.....@. HQJ.W..{\|.%...>....{._?.l.y...^.....oq.~..&..y:7...u.0..F....t..0^.].k....s.V8...=`.8.l.(.)ff..L.9...fL=,X.+n..;...J.5.\|w\..1K.p...w..*.$g.......Y[..{{z...t...Y.;.&.4.....`....H.!.U.......~t+yR.=X...Y.;@:.......y...(..e/O..5..a.Am..v.x7..q.~.QZR..Bp..~...uj.b..$A...p......~.3@..d....l.....\.0(...0....J.....T&A...]....uo.......wP./.$@...w.r.%`qV.\1...K....4Xr.k..w.R.w.V.v....k..+...!Y.....V.}..N...T...y.X.>.....`..X...5f.`..-...;.e.u).J..>......?......2.{;>X.+...a)..>..K.e...9...\..H[.......%.`.~..j.^\........%.q@.\...VT...9n..U..\|%...a........j...^{Y....j.[3.<<~0..?.;...Gs{4...>^.Do?...<......<..`..{.:.=..a~.U..}1.f'..v.s.54.>.....@...L>...F.9..A...q...n3po..}.\-..]...y..6..p..X.......9.....?..1h.\..'.\.F ... a.E.. ZXd+XIVN...eH.......A`....C........:(t.o....3.g..,z.\|.%....f-X.].y.nd.%....#.D.qo.../.K.....m..\|.X..X.P.@..w..[.5.:_EfH.(f.g...7.A....cV.;.W..

Chrome Cache Entry: 242

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 77343, version 1.0
Category:	downloaded
Size (bytes):	77343
Entropy (8bit):	7.994364639855848
Encrypted:	true
SSDEEP:	1536:w/iC5rALO/Sbl0L49FS86faZpWhBfglKXMNpoTY3zxy9H8AXey:NC5kLOcl0y6faZcMNpt02AOy
MD5:	8112A39A0B6A154756A81F73AD0D957A
SHA1:	6764C857EC8ED030A69CDC00BECB87A9BE974961
SHA-256:	80E665EC4280A6597533152F999C0F0581592E36FF0935CFEEC62ACCED5666F3
SHA-512:	F0878A0E39D3AEB8E36AA527FFBD091BE824AA277F1478F3AB807BCA9F9B7775971E16DD5AEA4F862156D62FB18B9AC4DD6462B42D70459F17D12B099FF7FB9D
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-semilight.woff
Preview:	wOFF..............7\|......,.................GPOS......'Z...bB7.PGSUB..(@..._...2....LTSH.......)...'....OS/2.......X...`j...cmap..-D........Z..cvt ..3h...P...P...2fpgm..1D.......s.Y.7gasp................glyf..8........4...hdmx......%u..Z.E.."head.......6...6..6.hhea.......!...$....hmtx...h...7....Tal.loca..3....H...HO..:maxp....... ... .;..name...........Q.s..post................prep..2H.......O.H.y........C7.._.<....................8...1................x.c`d``............X.2.E...2..R.a........#.Z...a...............q....x.c`fbc.c`e``.a.f....B3.2.3.300q.0..2111300.3 ..........L.Z......3.W``...c\|..H)0...c...x..]L.e......!...H ...^....2xm0...KJ.we..t....Z.r6...5...:..N<.h..E........yb.Z..w=<.{.....o....}.........V...k...........=*v?..?.A....ZwU..I.}B.0(..Uz..Q...j.H...gU./..v....J.~...r.J....{~R...y...\|1.+.R..^...C.E5<....h.'`...S.D..4..vb...P....$.g5.>P....Z..........1F.&......CZ....i=by.c.E..E.2v...,..1..\e.q.hi.B%.6......(.).kj..w{.9.#..9.....O.9..w].{..(g..;...

Chrome Cache Entry: 243

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (352), with CRLF line terminators
Category:	downloaded
Size (bytes):	9301
Entropy (8bit):	5.3027899172019675
Encrypted:	false
SSDEEP:	192:8uINSbeAG5YEoRgaxStR26l2RuuWQIAVp4Q6yIO3O/:8lNV5Y5Rgax/uuWQ5p4NyIYu
MD5:	45B42265432A5C20C94F7D21B96E8D49
SHA1:	ABD4D669ACFD59811687AE1A04B8E1F08E0D8A1B
SHA-256:	BD814698F23FDCCF58FB4FFD1EE88B2CBBAD57607725EADD7B54BD9F962196CA
SHA-512:	C26A28DDDF1998D91AC0290409EAB50A8E867C1C69A8788C559295CCD63038DD465ED4CB37E6B1195054086DEBCB96BA0E2A513B37DD1742073B1DBB24B7ED23
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/scripts/fe_utilities.js
Preview:	var inAuthorEnv = function(){ return /^axp\-author\-[a-z]{2,}\.mtb\.com/.test(window.location.hostname) };..var inAuthorEnvEditing = function(){ return (inAuthorEnv && /^\/editor.html/.test(window.location.pathname)) };......function jsonArrayQuery(q,f,w){..../....w == leave undefined and passed function will run when all are done \| true then....sample call \| jsonArrayQuery("select from ['productData']['Rates'] where [MinAmount == '10000',MinFico == '680']","doThis".false\|true);....max ref = '>'....min ref = '<'.../...if(q){....var cond = "x['"+q.match(/where \[.+?\]/gi)[0].replace(/where/gi,"").trim().replace(/[\[\]]/gi,"").replace(/where/gi,"").trim().replace(/[\[\]]/gi,"").replace(/\,/gi," && x['").replace(/ == /gi, "'] == " ).replace(/ > /gi, "'] > " ).replace(/ < /gi, "'] < " ).replace(/ >= /gi, "'] >= " ).replace(/ <= /gi, "'] <= " ).replace(/ != /gi, "'] != " );....w = w \|\| true;....console.log("Query: "+q);......console.log("Condition: "+ cond);........var getJson = function

Chrome Cache Entry: 244

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3639
Entropy (8bit):	4.099070039517418
Encrypted:	false
SSDEEP:	48:CKluCgoEpw5PLalCPXuCB2m8LITso1HZOhc82gnlUWw8sJMpPRE5RKrdJPA1P:BoNaUsY7MhZOhcRWXJp+KrbIx
MD5:	5C863A31408C3E2C9E7381AA77EE3A86
SHA1:	C7B7D56DD3D3372097DD958573201E16C6FD2008
SHA-256:	4C508AE0CD33BCA9839A701F97AEF16787F35DB6CF587396B21113E7D2FBF5A9
SHA-512:	8E83F7192BC7BF88F77A63781E5792172AFF0879E828D4B8DF38B1CB374CB0F94A45B75E30ECFC74921FCE8DE71FE34C67260EB7D0B5F28A69A104374CB523FF
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/mtb_logo_white.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 240.9 45.54"><defs><style>.cls-1{fill:#fff;fill-rule:evenodd;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M4.9,4.34H0v-2c.3,0,.6-.1.9-.1H12.6c.8,0,1.1.4,1.4,1.1,3.5,9.1,7.1,18.2,10.7,27.3.1.3.3.6.6,1.3,3.9-10.1,7.7-19.8,11.6-29.6H50v2H45.2c0,.6-.1,1-.1,1.4v36.4c0,1.2.4,1.6,1.5,1.5a24.32,24.32,0,0,1,2.7,0v1.8H32.6v-1.9h3.3c.6,0,.9-.2.9-.9V10.24c0-.1-.1-.1-.2-.5l-.7,1.4c-4.1,10.7-8.2,21.4-12.2,32.1-.3.7-.5,1.3-1.4,1.2s-1.2-.5-1.5-1.3c-4.1-10.7-8.3-21.5-12.5-32.2-.1-.4-.4-.7-.5-1.1-.1,0-.2.1-.3.1,0,.4-.1.8-.1,1.3v30.7c0,1.2.3,1.7,1.5,1.6s2.5,0,3.9,0v1.8H1v-1.8a24.32,24.32,0,0,1,2.7,0c1.1.1,1.3-.3,1.3-1.4V4.34Z"/><path class="cls-1" d="M132,11.54v8.1c0,.7.1,1.2,1,1.2,4.6-.1,9.2-.1,13.8-.3a8.5,8.5,0,0,0,5.6-2.3,9.82,9.82,0,0,0,1.8-11.1c-1.8-3.6-5.1-4.8-8.7-4.9-4.1-.2-8.3,0-12.4-.1-.8,0-1.1.3-1.1,1.1v8.3Zm0,21.1v8.7c0,.7.1,1.2,1,1.2,4.8-.1,9.7,0,14.5-.3,3-.2,5.8-1.3,7.5-3.

Chrome Cache Entry: 245

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1145), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	153777
Entropy (8bit):	5.304805159853178
Encrypted:	false
SSDEEP:	1536:JgG5zOD07hfbP4keWkeeAUKpowuRNDllgZIZDZmRJFMeMw3GJtY1Xn:JT5zNgDlaiD+113
MD5:	5A04062293274B167B5CEBE565725988
SHA1:	B4FC6EAB7E9C4175510B551DD11E107A4466B2F2
SHA-256:	298F9DA7137C01391B726376F8CCABF8DCC1C027BF1E6729D8DCE0B5FC9DC49A
SHA-512:	5B5EC01F05C306778BD72F6D07D92D30361553D6E5B2B95373955A7677068BF07BDAA9ED01D32E2D18943364DCA91DA930857F883FFB5B6012E1BE07E00BC56F
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/home-page
Preview:	<!DOCTYPE HTML>.<html lang="en">..<head>..<meta charset="UTF-8"/>..<title>M&T Bank - Personal & Business Banking, Mortgages, & More \| M&T Bank</title>..<meta name="description" content="With a community bank approach, M&T Bank helps people reach their personal and business goals with banking, mortgage, loan and investment services."/>....<meta name="template" content="mtb---home-template"/>..<meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1"/>..<meta property="article:published_time" content="2024-03-05T14:36:58+0000"/>..<meta property="article:modified_time" content="2024-01-07T17:43:51+0000"/>......<link rel="appple-touch-icon" sizes="57x57" href="/content/dam/mtb-web/logos/favicon.ico.transform/57x57/image.png" type="image/png"/>.<link rel="appple-touch-icon" sizes="60x60" href="/content/dam/mtb-web/logos/favicon.ico.transform/60x60/image.png" type="image/png"/>.<link rel="appple-touch-icon" sizes="72x72" href="/content/dam/mtb-w

Chrome Cache Entry: 246

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37529)
Category:	downloaded
Size (bytes):	186513
Entropy (8bit):	5.328351713993548
Encrypted:	false
SSDEEP:	1536:9UGl+Drviyb2/80s9PEIHeiRBockvg4o2GHmsxQwDOM/15tA2A7hbN3RAIfLZMpJ:FArqyiqPeinfklo2lMOM/15apN+W2
MD5:	AD105D94D4ECCA1763A19B8C314DCA09
SHA1:	4EF9ABED7BBB6A867AE4A87B67FB25A5BB1CB2F4
SHA-256:	F4A1726EA02BDE227F24936417F76EFFEF8332AEF2B1ED5E06C423DE1A78E4B4
SHA-512:	6100B313EB4CC741966F06DC8660E913C92CEB1727947B2C6A43119EB2C83F5CBBF299100025707304828DDA235F393F71C6C0D7736932401D4B7AB06672D045
Malicious:	false
Reputation:	low
URL:	https://mtb-repo.pages.dev/assets/index-ewIPLFCo.js
Preview:	function od(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!Array.isArray(r)){for(const l in r)if(l!=="default"&&!(l in e)){const i=Object.getOwnPropertyDescriptor(r,l);i&&Object.defineProperty(e,l,i.get?i:{enumerable:!0,get:()=>r[l]})}}}return Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const l of document.querySelectorAll('link[rel="modulepreload"]'))r(l);new MutationObserver(l=>{for(const i of l)if(i.type==="childList")for(const o of i.addedNodes)o.tagName==="LINK"&&o.rel==="modulepreload"&&r(o)}).observe(document,{childList:!0,subtree:!0});function n(l){const i={};return l.integrity&&(i.integrity=l.integrity),l.referrerPolicy&&(i.referrerPolicy=l.referrerPolicy),l.crossOrigin==="use-credentials"?i.credentials="include":l.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function r(l){if(l

Chrome Cache Entry: 247

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 4476, version 1.0
Category:	downloaded
Size (bytes):	4476
Entropy (8bit):	7.868375490517073
Encrypted:	false
SSDEEP:	96:A1DWHPXfagrGPC3cv/iXbBSPAVvIXP48+ZGzheSvoiMFQBvX/+dJelH5G:A1DGPPa0GvkNSPBf4bGtiGBf+Jep5G
MD5:	3D6954603A429ED594F95832EA0F61EF
SHA1:	D605E95A303707C84383F0FD9C572E5FA746F2C7
SHA-256:	FD93EAF767B66C353ACD87AD85CF4BED76538886804C67A0D6A4145503598A88
SHA-512:	0B4EE4DD0CF9FA43BB9A8383FD1E92B3B93654073D7AA59D58B48F4277C04422A7A05C72346B092F946E3025D73C95F5142C397F60CAD244826365A3E4492A33
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/assets/fonts/mandtpg-iconfont.woff
Preview:	wOFF.......\|.......$........................GSUB.......;...T .%zOS/2...D...A...V?$K.cmap...........L..glyf...x.........}.Whead.......3...6...Lhhea...P.......$....hmtx...p............loca.......J...JO.J.maxp........... .:..name.......^.....JL.post...X...".......x.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d>.8.......i...C..f\|.`....e`ef....\S..^2.Tb~..F1.b`.. 9..".T...x...[R.1....$..D......u. .\...U`...0U_...IM.{.s`b_.`.a..w..?..7...V..........3?.\|.....{3....%+..G.x.5.......\|.c..c...yM.oVc..I...}........U8..N...B..PT..'...N.tQ8g.N...G...p.P..(...n........]B.V.p.P.i(.9.n.........D.p_...0....R....x...{l...~....<..g.N.;.v.v....I.&mZJi....I.D...2!`.l..h;..t..1.F74.?.jeC..i.iBb.@..6...3L....wv...i......}.....>3..C.I.13..d+h......9...=...;.0.y92_...T.......x.N.S..\.<...=...]...i...<.....[.{......ak...+#.2......DNpZ"......GJw.G..8...q.Wg.qq.....C.._..u8..........\.M.d@T.b.?..Jp...q.;......6.xi..tI..$y.Q.^\.r...d_...._zs.D<...j..C.n...QX.q...d...v-..U;

Chrome Cache Entry: 248

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 83, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9422
Entropy (8bit):	7.262726451353614
Encrypted:	false
SSDEEP:	192:yfk1fsCxwNenKy84/C8JirkdHnV6CMNuOYS5pmnSbV6OynmWoE61hokKMdhPmy1/:yM5uysOP6/pFfWtGoxMB1/
MD5:	6EA62E1D82AF2E27D7661B0C5F90B53B
SHA1:	104898133A8123F72A011673403815B7B94412C3
SHA-256:	CAB73FB1F71A5BFAE2E952C05850D3092260D62737B8F25EE7519135FD1EDBAD
SHA-512:	C45267A62C5C60DA53789B3425C01EE37CD4B3509B58FA76BE99853032D52F2AFAF610BB6FB31A0949391521DA822ED4BD24FC28F7EFD9DE708C050685E4DF66
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/personal-home-page/track-your-spending.png
Preview:	.PNG........IHDR.......S.....W..J...5iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2020-04-10T16:23:51.503Z". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Comments="Software: Adobe ImageReady XML:com.adobe.xmp: <?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:x

Chrome Cache Entry: 249

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58940)
Category:	downloaded
Size (bytes):	59219
Entropy (8bit):	5.157361916965591
Encrypted:	false
SSDEEP:	768:pZTlSOLQenVa+Shd413pjWxkRfFdAZTVUzRWQHWxBVm7MT09XAPtThvBEwU8TtL4:p5fkVf5Lw9eEZeqlr
MD5:	259E416EF6833BE43801B8B68A93B008
SHA1:	19080C3B817985336AAB5E1CE6925C99803F2EFD
SHA-256:	70C3D690BDC5CE3B9A1527C46044989A3176E610882FA99F4523E75BC395BCCE
SHA-512:	3AF0603FD03624182245A77F98CDFA9A4CD749768913D04420436754499E65D213BF04F4F719F12ED4F8B709026BC9BF96831B3C7B2F3E5D13F25446541C2395
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap.js
Preview:	/!. Bootstrap v5.1.3 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("@popperjs/core")):"function"==typeof define&&define.amd?define(["@popperjs/core"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e(t.Popper)}(this,(function(t){"use strict";function e(t){if(t&&t.__esModule)return t;const e=Object.create(null);if(t)for(const i in t)if("default"!==i){const s=Object.getOwnPropertyDescriptor(t,i);Object.defineProperty(e,i,s.get?s:{enumerable:!0,get:()=>t[i]})}return e.default=t,Object.freeze(e)}const i=e(t),s="transitionend",n=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.includes("#")&&!i.startsWith("#")&&(i=`#${

Chrome Cache Entry: 250

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 251

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2654)
Category:	downloaded
Size (bytes):	12080
Entropy (8bit):	5.50958915030519
Encrypted:	false
SSDEEP:	192:aUFnNojImVVMFx4i47tR/4W4gxBxggWSTyTEAyNIM+xpdeK3oooaoy8SXuE9WNLe:aYNsImVVMOAgtO3M+xDeKn9XuEE/0Jj
MD5:	F75AC8C96FB9C754BDF5A99AE7B1F37B
SHA1:	830B36D3162BA02DD02A2DC2DB0CF58BCBF9D078
SHA-256:	2BD613F39B6033431DE31F78A8396E44205DC092806BB18019BEE8BA0D2E18EC
SHA-512:	09A0D3B91CD3AFB435B57BBD21F9D93159274994318D822759DA8B01D2BD7EDD69B2666EDE998C97866CF4FD9F2B9AF781277586BF46AD56D45ACB6CBB1A764E
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.44.js?utv=ut4.51.202309082106
Preview:	//tealium universal tag - utag.44 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved..var _linkedin=_linkedin\|\|{};window._linkedin_data_partner_ids=window._linkedin_data_partner_ids\|\|[];try{(function(id,loader){var u={id:id};var md5;utag.globals=utag.globals\|\|{};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src"

Chrome Cache Entry: 252

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 253

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	230
Entropy (8bit):	4.9256138414720825
Encrypted:	false
SSDEEP:	6:tI9mc4sl3URFfI45SdgIe7LRdEX0UW3p5Adbp5CY:t41kF5MdgIe7dd+tWPs/CY
MD5:	916635D10512AE6A1840614A895DCD38
SHA1:	DB175DE4C42281BB4D239C57D1B95B8E75C529EC
SHA-256:	D58EB2802F72D0C6B1D944A1335E8FB914AF44B51FE16097AAD994C15B8CFBAD
SHA-512:	17EDA2352BB4EB7EA124BCFD1D69D5A06DB5F4F0E81CCACBF100F704F3ED456367B74DCA54440860E351B996752F33FC87B900CDD4BEFA7E4A2E5090B85F35DE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 11.99" fill="#767676"><path d="M8.09 0L0 4.6v1.67h1.24v5.72h13.5V6.27H16V4.65zm-5.2 4.79l5.2-3.06 5.1 3.06v5.74H2.88zm2.43 2.18h5.39v-1.4H5.32zm0 2.1h5.39v-1.4H5.32z"/></svg>

Chrome Cache Entry: 254

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49252)
Category:	downloaded
Size (bytes):	49255
Entropy (8bit):	5.4592573644278835
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7q2gh0CKUxETWUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8qxKg:TPJi0LUxEyyv0StEZ/Bd8RNIfxZ
MD5:	27967ECEC126D236F410C2354F0D5D0C
SHA1:	188CE15F6D4333E9F822E94ADD463E44A207924D
SHA-256:	85A881FBA590AC097D83E7D5397C82C99D9538AC482AF8F10A3E5886393CFC85
SHA-512:	3B53C3E49224B2DF25B46E5F08A97B4E6B2B664186CBC8D77A4D6C2A561981B1AB4D52BE0A0D0CA8F4C73AA0D711AF4FF0A66AE5130E2B4E66B9E3D0E37AC7B0
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 255

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	858
Entropy (8bit):	4.863125797238017
Encrypted:	false
SSDEEP:	24:t41CnWhvgU800b9IPQTbW6lA5b+jUuOMtuOD:Cawl8f9IPQHW/FS7tpD
MD5:	FF2869AA87985769B8F4EB8685803521
SHA1:	46CBF4942B7B95481C4580D81681F63F917E613A
SHA-256:	11D8A6CC9A9C047FD67747F9E8AB47765B84841543DC9B91515FB33CB694BAFD
SHA-512:	34E47A3E67C8018B8D2C0AECAF07FEFEBF1AD9A748FDC8AFA9C7DDB17164A91F6652C1C2CF79959C590AC91D8D97123241E711B37F2FB459B2DDB48CAD88CFF3
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 193 193"><defs><style>.cls-1{fill:#007856;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><circle class="cls-1" cx="96.5" cy="96.5" r="96.5"/><path class="cls-2" d="M70.25,79H50.54a1.6,1.6,0,0,0-1.6,1.61v63.29a1.6,1.6,0,0,0,1.6,1.61H70.25a1.6,1.6,0,0,0,1.61-1.61V80.59A1.6,1.6,0,0,0,70.25,79Z"/><path class="cls-2" d="M60.4,47.51a13,13,0,1,0,13,13A13,13,0,0,0,60.4,47.51Z"/><path class="cls-2" d="M120.37,77.44A23.26,23.26,0,0,0,103,84.68V80.59a1.6,1.6,0,0,0-1.6-1.61H82.55a1.61,1.61,0,0,0-1.61,1.61v63.29a1.61,1.61,0,0,0,1.61,1.61H102.2a1.6,1.6,0,0,0,1.6-1.61V112.53c0-10.57,2.85-14.66,10.22-14.66,8,0,8.67,6.59,8.67,15.2v30.81a1.6,1.6,0,0,0,1.6,1.61H144a1.61,1.61,0,0,0,1.61-1.61V109.15C145.61,93.47,142.58,77.44,120.37,77.44Z"/></g></g></svg>

Chrome Cache Entry: 256

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 936, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	87544
Entropy (8bit):	7.771203416784361
Encrypted:	false
SSDEEP:	1536:A2aHfDb4sMd4JsBI2GGtzVSE3xHoiNEtfdTzYK8x6vtZLrVsx9kTNl7:A2ebBJsW2zz0qxI+EtfdTzYQb/l7
MD5:	3E3E25B8CDB668DA7C113A4D2DC29245
SHA1:	6E88AF943648241223340349D69CA2CBC248E604
SHA-256:	E54FB701404DBFDF89C833056445FFD3CD1A635770755ECF58D6633171EAD3D2
SHA-512:	A713AA998FAED389032114B67F4D72CE6E26C02D629FAE203B284F40B71FDDB05E0FFA0027B7FEEC5B3B52C6583AD749E24DC54B37551A0C02077F92A381784D
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/experience-fragments/mtb-web/homepage-body-experience-fragment/personal3/_jcr_content/root/columns/col_2/columns/col_2/image_copy_copy.coreimg.png/1708525802608/greenwich-bestbrand-logo-2022.png
Preview:	.PNG........IHDR..............{YN....IDATx...g..e.....>.~.....Y..C..3.9J.dPP.s..D.bBQ0 .H.$..I..JN.3.s...[Ok..a....:..k=k..}......T..?................................................................................................................................................................................................................................................................................................................................................ <,Y.0...w.x...`0.....`0..........".\........`0.....`0......]:E.....I9.......`0.....`0B3...... ..`0.....`0... .....w...`0.....`0.............`0.....`...J..B?.n...`0.....`0..F..._}%c............B_CC......0......................c..O.............................. `.`7. .:........ .....".........................W.. ...@.........3... ..........Qx....I9........ ..`\t.0.L..f..?.Oe.....R..\D...... L....e......l6..b................. ......Err.HIIq......&...A......... .....7..P.......h6...../A......... p....]sD..!...[.

Chrome Cache Entry: 257

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2329), with no line terminators
Category:	downloaded
Size (bytes):	2329
Entropy (8bit):	5.856747988513104
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08aRkSRQZOfAKm6:wsbSUtJfxrqLWWWdV6j1uRkQz
MD5:	648C18B9A5C91911BB7A50B5AB63EF63
SHA1:	B388998B3EC68EF37A424CEE3B221D3A8EF6A792
SHA-256:	84BF85DA8AEEF2C6AF1C236664957E56D8457C7567486CCC32D348AD54E7C5C5
SHA-512:	870EDD0C83CC0E6513C8DFA12BE997B69B8294D53F5C7AC9E784F109FD605952F351FE04AD24A09A13BDDDEF5F6DF4BD6D53E4753224384DE26EA575E65410AC
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/875517505/?random=1710377852690&cv=11&fst=1710377852690&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 258

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52539)
Category:	downloaded
Size (bytes):	546887
Entropy (8bit):	4.992571787507223
Encrypted:	false
SSDEEP:	6144:ot/pz600I4BFtbpjy02B2i8pz600I4fwpjy02B2iCtrpz600I4futBpjy02B2iB:dytfDlB
MD5:	FF8DBE068C369F9D550BCB817C2B683D
SHA1:	D59B8CC874BEBB077E676D03D56689AB0975F4A6
SHA-256:	C45C8E1A83ECF9E23244D02A78A04C633786001D4A1BE5F3DB1AF1922585C7A1
SHA-512:	E76F5D5C4C35002C94617A7D040D688B0335CEC5DECF60EF4E7408FC696A510F74D5331520D958EC1B5BA3F1C24356EA96C7A844A8C23652878F63FD4889862F
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap.css
Preview:	/!. Bootstrap Grid v5.1.3 (https://getbootstrap.com/). * Copyright 2011-2021 The Bootstrap Authors. * Copyright 2011-2021 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;--bs-danger-rgb:220,53,69;--bs-lig

Chrome Cache Entry: 259

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 75 x 75, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1663
Entropy (8bit):	7.83291333788029
Encrypted:	false
SSDEEP:	24:8XNIPEAEwO+M/dNFkH6TY3p6w3Od5W5QWqEZXwTc+kPZUDivT7:o7pndN868Z/GhcX2c+UU23
MD5:	F9CF99B0792B7C4B4B0E77A55A0BC57A
SHA1:	3A3677A774C33E6050D14727EC88AF58270038DF
SHA-256:	D3031F393F481E7FF2B1C3B5687898027C555769B16BF8022D665F35B38E53AC
SHA-512:	0DB408E514B5DB69E135C749E19B9E6ABBB90B5F496CFCF9FAC83007D605BD29CD59FD86B21612FCE550E15EABE7E39C67A25A78904F7EF64F24F903082E6E44
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/experience-fragments/mtb-web/homepage-body-experience-fragment/personal3/_jcr_content/root/columns/col_2/columns/col_1/image.coreimg.png/1708525986921/top-10-sba-logo-2022.png
Preview:	.PNG........IHDR...K...K.....8Nz....FIDATx..Z.u.0......k.{G......#d._..=BG....#p.....@. HQJ.W..{\|.%...>....{._?.l.y...^.....oq.~..&..y:7...u.0..F....t..0^.].k....s.V8...=`.8.l.(.)ff..L.9...fL=,X.+n..;...J.5.\|w\..1K.p...w..*.$g.......Y[..{{z...t...Y.;.&.4.....`....H.!.U.......~t+yR.=X...Y.;@:.......y...(..e/O..5..a.Am..v.x7..q.~.QZR..Bp..~...uj.b..$A...p......~.3@..d....l.....\.0(...0....J.....T&A...]....uo.......wP./.$@...w.r.%`qV.\1...K....4Xr.k..w.R.w.V.v....k..+...!Y.....V.}..N...T...y.X.>.....`..X...5f.`..-...;.e.u).J..>......?......2.{;>X.+...a)..>..K.e...9...\..H[.......%.`.~..j.^\........%.q@.\...VT...9n..U..\|%...a........j...^{Y....j.[3.<<~0..?.;...Gs{4...>^.Do?...<......<..`..{.:.=..a~.U..}1.f'..v.s.54.>.....@...L>...F.9..A...q...n3po..}.\-..]...y..6..p..X.......9.....?..1h.\..'.\.F ... a.E.. ZXd+XIVN...eH.......A`....C........:(t.o....3.g..,z.\|.%....f-X.].y.nd.%....#.D.qo.../.K.....m..\|.X..X.P.@..w..[.5.:_EfH.(f.g...7.A....cV.;.W..

Chrome Cache Entry: 260

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1655
Entropy (8bit):	4.898812232282903
Encrypted:	false
SSDEEP:	12:A4myc+VyeVLkawz5qNJWJafNhgkerWVfVC9rMReSisQZVd7zxx45QdYyKsId7mY0:HmycWkOsQokIHvxx2QmxtA1Xm320mH
MD5:	69343D9DCCE5B1EBE56595355BFC8203
SHA1:	F65412156C2A2DBBE4F5BD861B4CA77552D7552C
SHA-256:	349FCBC04454DF744FD82C5E90F76CC8D7D406DAAD8A3CE2733228EA97362B7A
SHA-512:	AA475F307FCB6CAD4B14FF67AD72FE3153B1EEDC12C1541D7ECF2E7ADD2A8B3664B004F3C1B49C2735A91AC74E4C2FC5A2BD093F915A2ECFCFC3D4308FB74553
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/scripts/charReplace.js
Preview:	function replaceCharInTitle(){...var charReplace = [{...."print": ".",...."hexa": ".",...."html": "Á"...}, {...."print": ".",...."hexa": ".",...."html": "á"...}, {...."print": ".",...."hexa": ".",...."html": "É"...}, {...."print": ".",...."hexa": ".",...."html": "é"...}, {...."print": ".",...."hexa": ".",...."html": "Í"...}, {...."print": ".",...."hexa": ".",...."html": "í"...}, {...."print": ".",...."hexa": ".",...."html": "Ñ"...}, {...."print": ".",...."hexa": ".",...."html": "ñ"...}, {...."print": ".",...."hexa": ".",...."html": "Ó"...}, {...."print": ".",...."hexa": ".",...."html": "ó"...}, {...."print": ".",...."hexa": ".",...."html": "Ú"...}, {...."print": ".",...."hexa": ".",...."html": "ú"...}, {...."print": ".",...."hexa": ".",...."html": "Ü"...}, {...."print": ".",...."hexa": ".",...."html": "ü"...}, {...."print": ".",...."hexa": ".",...."html": "«

Chrome Cache Entry: 261

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 219, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1959
Entropy (8bit):	7.7269292313382145
Encrypted:	false
SSDEEP:	48:G37WAJuNIlpjiLti17r+/COD/hX1aYQnvOH1O3I:N/el5icZmphXUYQnvqO4
MD5:	8EB8405EC6E9E761EA45321B2A180AB5
SHA1:	E220FF9FA0D83C5416FD7860621C39B71B756B23
SHA-256:	D37A24BA2D508B82283588651C66D6412271FD8A358A4E00FDD97028A3BE79B3
SHA-512:	4D1A49947F3CF856ADB220DE2C8F6771D3945EFB451D0165C3EA3970F6CC9DC215163C8CED757A26F15A674AD4F4D2428D5F49E073D69880473A99A36B9656F3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............s.\|....]PLTE.....B..B..B..B..B..B..B.i9.i9.i9.i9..B..B.i9.i9.i9.i9.i9.i9..B..B..B..B..B.i9.i9.i9.i9..B.i9.......tRNS.f..D...w.33.."..D..Uw".f..UH..!....orNT..w.....IDATx..kC.0...E.d."........[.K.&mW.~....y.....7-WUU==.k.7.......Z/.U...8&..B...e@.oTE......K....o.......=MF./.o.......x.......&.z..`...G..1z.u5$.....e.P.1.w...i.y/d...b...}..?}-..K....}..N..<.j..;$.....:..VC.9{............F...M_......i5i....F.... ...../.....&.,.f..7.P./gO.7ot.,..k.a...nlr."...[.>\.I;.B%7.k.9...>8t-;.B$7...'!.....L`...........B.D..a.....Cv+.......>-..........o.-.6y.......QV....@G..]......j..cK.V.....m......js....f...vREV....v...L............v.sTti..:..Ca..3t2;.f. ......g...I.\|..Z7.n..........Q.....v.en ..`).......~%....K3.....#_..,ft.Uo.2..~.Ln...[N..N._..Dw`.P.C....k...V6tWv>}.!S.Bwg..../.0.;.s.5.x...9.Ni....Ci.&s....w....f...&K3....PM..jt.E..3.&J3...R.>ib<..E'.D.>V.9P..m.i,.y<.$8..w"...*....?).y.v....YQl.....iv.]3Z...X.}

Chrome Cache Entry: 262

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	557
Entropy (8bit):	5.525513260787853
Encrypted:	false
SSDEEP:	12:TMHdwNMuNi/nzVW/KYf3UoJKHZhwTx4DWhi8s:2dluNAALfE15hMx4
MD5:	8BFA2029047333603AE4FC0752D62AC6
SHA1:	309389A0D3FAB9C6D685B1492B0044B94F888C66
SHA-256:	C66A977BFB81313D7313A9F20D683EA271620851AA89487805B0E91C4FA73A9D
SHA-512:	C65BD8E40336FB799582ACC4B522DC009EA16271CFA76B5953BB4B0DCC120BA600592A2480F1C3C9633F9631D2339C2B3DEFF28F60AB7FFC503C77FEB19123EF
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/svg/icon_msgbox_green.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 58 58" style="enable-background:new 0 0 58 58;" xml:space="preserve">..<style type="text/css">....st0{fill:#007856;}..</style>..<path class="st0" d="M16.2,42.6h34.6c2.6,0,4.7-2.2,4.7-4.7V5.6C55.6,3,53.4,1,50.8,1H6C3.4,1,1.2,3.1,1.2,5.7V38v4.6V55l13-12.3...L16.2,42.6z"/>..</svg>..

Chrome Cache Entry: 263

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2830
Entropy (8bit):	4.728732702945523
Encrypted:	false
SSDEEP:	48:4fomtRvI7zI0nNOCDO7OIBOyEmg7f0QOhkkgQ/HKG5qYCv0abx:a3E7c0sCyarRm88L2kFfv5q9Rbx
MD5:	A763A6E01BAE7564520C90B28D3B0EB5
SHA1:	E08CD6CAC332487C77D44E034F5A5C5D57F375C0
SHA-256:	860987064539323669A8309203AF95C176FFBB2CE5545D7A60B790741C41B277
SHA-512:	3EDF15BAE645CF3EDB74F662599B651C8693E5AA393AB7A1884D85F55BD6BDD86982C9097BEEBBD3D2409337C72880AE9D955108CD5EBAC86FBA41875CD14EBB
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/scripts/Moe/errorMsg.js
Preview:	..var errorMsg = {.. PAIConfirmEligble: "Please confirm your eligibility before continuing.",.. FieldBlank: function (x) { return x + " is required." },.. SecurtyAnswerBlank: function (n) { return " Answer to Security Question "+n+" is required." },.. BadFormat: function (l, x) { return l + " must be in "+x+" format." },.. NoSpecialChars: function (l) { return l + " cannot have special characters." },.. MaxChars: function (l, n) { return l + " cannot have more than " + n + " characters." },.. MinChars: function (l, n) { return l + " must have a minimum of " + n + " characters." },.. MinCharsAnswers: function (l, n) { return l + " must include a minimum of " + n + " characters."},.. WTSSOStart: "User ID cannot begin with 'WTSSO'.",.. PasscodeUCase: "Passcode must include at least one UPPER case letter.",.. PasscodeLCase: "Passcode must include at least one lower case letter.",.. PasscodeULCase: "Passcode must include at least one UPPER and one

Chrome Cache Entry: 264

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 265

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 83, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5235
Entropy (8bit):	7.333185650997289
Encrypted:	false
SSDEEP:	96:PvXkucJNWNCxwYenbnYdei6sYfiSRfPnSbVSdX5uG2MqmxefHgSPx12I648IbXQn:Pfk1fsCxwYenkbY/NnSbVSxyPD2z48tn
MD5:	1314C26C1DB30595DEABC7E7CE73A143
SHA1:	E0697C410E75838981EC13D1F64D9885C58B95CF
SHA-256:	AC2A3FAD1DF522EAEBC212276131CEC5EED994C3C8CF129707710430BB5246C0
SHA-512:	AF46036A62D4ADCDA1CF5328850499656F94D6CE41C09C4A430268312434B46D6AD13C77D91A3FA05B818B2A3FAEC638F8C6E67D357A9C350C3D72DF71CFC5C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......S.....W..J....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2020-04-10T16:23:36.886Z". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Comments="Software: Adobe ImageReady XML:com.adobe.xmp: <?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpme

Chrome Cache Entry: 266

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17280)
Category:	downloaded
Size (bytes):	17875
Entropy (8bit):	5.651863892664677
Encrypted:	false
SSDEEP:	384:MwP+1VscppktWU4jkgus4TIMjXilB02aWO5eaex1X5jmY1FEUur:wscpkt/fIswBHZaeH57Ar
MD5:	B1446B9FFFE2C4CB28BBA7AE4C10B361
SHA1:	687A693116CC2884D3F23A01DBFDF64FA82225A6
SHA-256:	BFBED28906DCC6D2B53B97A4D754DD968881E73674D140311373EC3FEDF5F5EE
SHA-512:	2A774188F103D6C311C288BA66312D02750EC41F6F4C033E4FD6FB2B8DE146E6D829FFF30C67D11B631571DAA2B3AFB6DF14EC43C03E6C86A9B07703E62B3927
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/v77SiQbcxtK1O5ek11TdloiB5zZ00UAxE3PsP-319e4.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var Q=this\|\|self,R=function(C,y){if(!(C=(y=Q.trustedTypes,null),y)\|\|!y.createPolicy)return C;try{C=y.createPolicy("bg",{createHTML:n,createScript:n,createScriptURL:n})}catch(k){Q.console&&Q.console.error(k.message)}return C},n=function(C){return C};(0,eval)(function(C,y){return(y=R())&&1===C.eval(y.createScript("1"))?function(k){return y.createScript(k)}:function(k){return""+k}}(Q)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var CU=function(C,y){function Q(){this.J=(this.n=0,[])}return[function(n){y.Rp(n),C.Rp(n)},(C=((Q.prototype.zL=function(){if(0===this.n)return[0,0];return[(this.J.sort(function(n,L){return n-L}),this).n,this.J[this.J.length>>1]]},Q).prototype.Rp=function(n,L){50>(this.n++,this).J.length?this.J.push(n):(L=Math.floor(Math.random()*this.n),50>L&&(this.J[L]=n))},y=new Q,new Q),function(n){return C=(n=y.zL

Chrome Cache Entry: 267

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 83, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7379
Entropy (8bit):	7.633169814103444
Encrypted:	false
SSDEEP:	192:Pfk1fsCxwMenkbYFTnSbVqfBGBUbGIYOFplmXA5baxjtE:PM5sFzGBdIYObluA5baxO
MD5:	EBA33F328E6CECBA4E9A123A8CCB6873
SHA1:	38BF3F58D9F61B1F9C903028B7B0B3CD527133F8
SHA-256:	6CA07131DBACC8C13BB8995350CAA65D0AE83E838E6B115086F8B4BFDA1E73EE
SHA-512:	4C6447B28C567EFE99ED1199DDB3D5B6268FB04278731BB8D2C5E47C60C1D5E9644D804DEEB5A6B12C2A2C5C0B9289E591966D1913801BC45AD49284CF92C961
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/personal-home-page/android-ios.png
Preview:	.PNG........IHDR.......S.....W..J....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2020-04-10T16:23:41.844Z". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Comments="Software: Adobe ImageReady XML:com.adobe.xmp: <?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpme

Chrome Cache Entry: 268

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenType font data
Category:	downloaded
Size (bytes):	140400
Entropy (8bit):	5.108810483860195
Encrypted:	false
SSDEEP:	1536:rP39pg3XRcivgR5L4pyoeB1fxryQ0dAQzQTfzmNqgrvh8WxpjGPF8z/zpXGrgnAR:r/9pg3+ivIavRhNEWDL+
MD5:	B072D698CA621D891F7D8A17DB9B1650
SHA1:	C83BDC35FCF63213574581F1143B0F9856AC6A3C
SHA-256:	37A6A27982C5D2025134A372A055452B7FE5E7798E11C524A8437B9DEA616BD3
SHA-512:	ABCA1ED4A0B996D5A5894591DBB76DD30D218C42EA604A9EFA3350F0834F55DC018E65E1D244D448DDC685A39BA6F259FDFF5229382C745198BF08853315EC9A
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-bold.otf
Preview:	OTTO.......0CFF ..'2......=GPOS}.....e.....GSUB0.B....H....OS/2l.... ...`cmap...........head...w.......6hhea...........$hmtx..P9.......~maxp.#P.........namey..........Upost.......`... ..........=J_.<........................ ......................B..............................P..#.....9.X.......X...K...X...^...0............................TPSP... ....B...... .............. ..... ...........4.............4...........>...........E...........4.........7.Z.....................(..........................................................E2............F...........F<..........FA.........hFE..........F...........F..........F...........F..........nF...........Gg.........PG{..........G...........G..........G..........*G..........dH..........:........................Copyright 2013 Type Supply LLC. All rights reserved.Balto BoldRegular1.000;TPSP;Balto-BoldVersion 1.000;PS 1.0;hotconv 1.0.70;makeotf.lib2.5.5900Balto-BoldBalto is a trademark of Type Supply LLC.Type SupplyTal Leminghttp://typ

Chrome Cache Entry: 269

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1143x936, components 3
Category:	dropped
Size (bytes):	35941
Entropy (8bit):	7.676169688347568
Encrypted:	false
SSDEEP:	768:p445H1AchiwVnef0T9VoYJ15Ksb3vtJB+XgdwM:p1H11nOAMYncsr5+wWM
MD5:	C039D276048F907AE089ACA27E5BAFC2
SHA1:	8F289482059C3916735754DF29F4B38825F77AFA
SHA-256:	D07F9791EC5F56EB6BB614CB03035F7E7FEF8928BA85FD8AF5C62BF747E93487
SHA-512:	093EE28162C2B7AA0AFF740D2F1E16A6FED02AC3B1304F2EECFFCBB4085A8BA4EDD071C5C8C115F81A7B5C31DB92A9E3072A9328BD300EC9D6998E1D7A9313C1
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.............-http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.0-c000 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F9B54F2B015511ED914CC70D88F25953" xmpMM:InstanceID="xmp.iid:F9B54F2A015511ED914CC70D88F25953" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0F890FB38D9911EB8B10DB8E84C7CB4A" stRef:documentID="xmp.did:0F890FB48D9911EB8B10DB8E84C7CB4A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.........................#....#"....."'.#!!#.''.030.'>>AA>>AAAAAAAAAAAAAAA................!....!1!!$!!1>-''''->8;333;8AA>>AAAAA

Chrome Cache Entry: 270

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6007)
Category:	downloaded
Size (bytes):	80086
Entropy (8bit):	5.298873681863866
Encrypted:	false
SSDEEP:	1536:ZiLRHDfczmwKHwXp20yBs4W3TZld/2c83CuWt7b+IG:v6wKyDyBtWPd/ak2
MD5:	CBB333B2B751101CDB84522B53E3EA5C
SHA1:	86E74FF30D42B14FA24F71EBB6BC436A51FB161E
SHA-256:	D19AB607D3E5E64A562F3A20A962EA65B8D968FA0132E6B5FE5B3D86F8E18D2A
SHA-512:	F47384CCBE12B98073ECA181A5A04C341DEF286BC447195F75D2E6FCA12EBDD2118D706F16A1540BC89B642D8F218401C694C38EB900ED749DB358870FFDB79D
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.sync.js
Preview:	//tealium universal tag - utag.sync ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved..window.targetPageParams=function(){function readCookieValue(name){var nameEQ=name+"=";var ca=document.cookie.split(';');for(var i=0;i<ca.length;i++){var c=ca[i];while(c.charAt(0)==' ')c=c.substring(1,c.length);if(c.indexOf(nameEQ)==0)return c.substring(nameEQ.length,c.length);}.return"";}.return{"at_property":"f7ba4290-5c00-8608-2ad1-5fc4576548bf","zipCodeCookie":readCookieValue("GeoZipCode"),"geoRegionCookie":readCookieValue("GeoRegion"),"entity.categoryId":window.location.pathname.substr(1).replace(/\//g,',').replace('.html',''),"user.categoryId":window.location.pathname.substr(1).replace(/\//g,',').replace('.html',''),"loginClickedCookie":readCookieValue("LoginClicked"),"mbox3rdPartyId":readCookieValue("TLMWebID"),};}.window.adobe=window.adobe\|\|{},window.adobe.target=function(){"use strict";function n(){}.function t(n){if(null===n\|\|void 0===n)throw new TypeError("Object.assig

Chrome Cache Entry: 271

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3066)
Category:	downloaded
Size (bytes):	411757
Entropy (8bit):	5.565890666485103
Encrypted:	false
SSDEEP:	12288:zsDuzXG+H3d207kLQ1Kk/fv8URVQKKh96zUlIJ64Uh:euzXG+H3d207kLQ1Kk/fvdVQKKh96zUv
MD5:	D22318C63090555EE5D6ED1F7E6EAFC6
SHA1:	DE28B1D5A8B8878D3C3C11041A424B363C641845
SHA-256:	C3A3DC4CBCB52B0ABFD3032E96AF0263D496E6A0E7482D743D1EBBF19C181440
SHA-512:	DA0A8843AFD2253B943DCA4A5C428AD6557DEC6A50FF4A518576C6CF2C8D580E53F818EBA72E0C43876785335A2FEFC891E1A1FD396A05E6658688CDB6FBFC21
Malicious:	false
Reputation:	low
URL:	https://cdn.quantummetric.com/qscripts/quantum-mtb.js
Preview:	/* Copyright 2015-2023 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula t2 df85e50d5ce082da388f295c6c221844566fe002 /./ Copyright Pako by Vitaly Puzrin and Andrei Tuputcyn https://github.com/nodeca/pako/blob/master/LICENSE */.(function() {.var setInterval = window['__zone_symbol__setInterval'] \|\| window.setInterval;.var clearInterval = window['__zone_symbol__clearInterval'] \|\| window.clearInterval;.var setTimeout = window['__zone_symbol__setTimeout'] \|\| window.setTimeout;.var console = window['console'];.var clearTimeout = window['__zone_symbol__clearTimeout'] \|\| window.clearTimeout;.var MutationObserver = window['__zone_symbol__MutationObserver'] \|\| window.MutationObserver;.var queueMicrotask = window['__zone_symbol__queueMicrotask'] \|\| window.queueMicrotask;.var Promise = window['__zone_symbol__Promise'] \|\| window.Promise; 'use strict';function aa(a){var b=0;return functi

Chrome Cache Entry: 272

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1152
Entropy (8bit):	4.54883244660136
Encrypted:	false
SSDEEP:	24:t41CnWhvgU800bBlW09hEwzjuzXlrvuRNzV9n0bSuO91WImjD:Cawl8fBBRjeJv679n0bP
MD5:	ADE554F91E52849605C30A8072E25E97
SHA1:	69EF930D2C4592A1D2213372E2752DE77F3B0A64
SHA-256:	D01D4D65754E63146D58C815FAA0F5E2B0857FE47374DD34D742632E9B34C283
SHA-512:	53CF4EC17E5512594E748519F68BE70ABCCDAB36C19708F33B6DEE778D22390D33B496BAD832DD00E38ED5ABD89ADF14F70254071E635EB9252969136361FF56
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/svg/icon_twitter_green.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 193 193"><defs><style>.cls-1{fill:#007856;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><circle class="cls-1" cx="96.5" cy="96.5" r="96.5"/><path class="cls-2" d="M146,63.89A38.3,38.3,0,0,1,139,66.26,22,22,0,0,0,144.77,57h0a1.15,1.15,0,0,0-1.7-1.34h0a39.05,39.05,0,0,1-10.77,4.43,3.23,3.23,0,0,1-.67.11,3,3,0,0,1-1.91-.73A22.08,22.08,0,0,0,115.13,54a23.08,23.08,0,0,0-7,1.08A21.23,21.23,0,0,0,93.78,70.49a23,23,0,0,0-.52,8.09.68.68,0,0,1-.2.62.84.84,0,0,1-.62.26h-.1A57.7,57.7,0,0,1,52.58,58.22h0a1.16,1.16,0,0,0-1.91.15h0a22.11,22.11,0,0,0,3.56,26.81,20,20,0,0,1-5-2h0a1.14,1.14,0,0,0-1.7,1h0a22.07,22.07,0,0,0,12.89,20.32H59.9a18.73,18.73,0,0,1-3.71-.36h0a1.13,1.13,0,0,0-1.29,1.49h0a22.19,22.19,0,0,0,17.48,15.06,40.56,40.56,0,0,1-22.79,6.91H47.07a1.69,1.69,0,0,0-1.65,1.29,1.65,1.65,0,0,0,.82,1.9A60.55,60.55,0,0,0,76.66,139a61.36,61.36,0,0,0,26-5.51,58.3,58.3,0,0,0,19-14.24,62.57

Chrome Cache Entry: 273

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3682
Entropy (8bit):	4.126204660036401
Encrypted:	false
SSDEEP:	96:GyHzgK2Oy3YDF8oWfWPKNPUJXuN6umuI4:c3krWOi9UJXuN3C4
MD5:	D22E8DB2016665CDB32713EB29A3A62B
SHA1:	A37F1D9E9EB6D117B2E9B9C8AA4D2C2F2B217C55
SHA-256:	9C49DAC4667FA294A2DFCD63D4CD4080C9B33B41D1C818131669DFAC46DE2D1D
SHA-512:	838EE51B1D8C387F6AEEA028FC7B7F0DDD46393EDA8DFBACFC744F6ED0AD2C8093B474E8F9EAFEDDACB95BDC5776293E5BB9950E31043D81526D00DF5956CDC5
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/icon-global-nav-search.svg
Preview:	<svg width="37" height="46" viewBox="0 0 37 46" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M4.38997 43.2761C6.03397 43.2761 7.32997 42.3881 7.32997 40.9961C7.32997 39.8441 6.64597 39.0281 4.82197 38.5241L3.90997 38.2721C2.79397 37.9721 2.37397 37.4681 2.37397 36.6881C2.37397 35.8121 3.05797 35.1641 4.41397 35.1641C5.57797 35.1641 6.27397 35.8601 6.48997 37.0121L7.18597 36.8681C6.92197 35.4041 5.94997 34.5401 4.41397 34.5401C2.57797 34.5401 1.59397 35.5241 1.59397 36.7361C1.59397 37.8881 2.26597 38.6081 3.72997 39.0161L4.62997 39.2681C6.03397 39.6641 6.52597 40.1801 6.52597 41.0441C6.52597 42.0281 5.60197 42.6281 4.38997 42.6281C3.02197 42.6281 2.09797 42.0041 1.84597 40.4441L1.13797 40.6001C1.40197 42.3881 2.55397 43.2761 4.38997 43.2761ZM11.0838 43.2761C12.0318 43.2761 13.0518 42.7601 13.5438 41.6441L12.9198 41.3801C12.4278 42.3281 11.8038 42.7001 11.0958 42.7001C9.87182 42.7001 9.07982 41.6921 9.07982 40.2521V40.1921H13.6158V40.0601C13.6158 38.2361 12.7158 37.0721 11.04

Chrome Cache Entry: 274

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2362
Entropy (8bit):	5.31552518244965
Encrypted:	false
SSDEEP:	48:Yft4+42sZrE+39Hi/3qW8gER/Jfgwi2EaCOCJIZt/AxDIsQGMBoSQ2Nh0K72e6hW:Mt4/rP8Vh0v25ZaQAuK72Lur
MD5:	4312E88FFB3BD2E7D0008CC953B550FB
SHA1:	4A4DAA569D2D4B6AF95BED70684A0244CD9A63A2
SHA-256:	750704E96530EB85CF9F9225026A4870409EE599EABC4E7A12DF8D1D3F5FB58C
SHA-512:	45E66BB0C1BE591D95901F5E7AF9215C0238D4F18340B9D6CFBC423FBD0BCDAC3EE92EB041C03AA25E91404D3DE3976FDE8F6AD8647EB5AF7C1640DEA45B8D54
Malicious:	false
Reputation:	low
Preview:	{"sessionId":"982bceee196b4711901768c5d35728f4","tntId":"982bceee196b4711901768c5d35728f4.34_0","offers":[{"responseTokens":{"experience.id":"0","activity.name":"Commercial Script","geo.city":"new york","activity.id":"137460","geo.state":"new york","experience.name":"Experience A","geo.zip":"10118","profile.isFirstSession":"true","geo.country":"united states","geo.mobileCarrier":"none","profile.WebID":"none","profile.geozip":"","profile.activeActivities":"226738,226806,137460","geo.dma":"new york","profile.lastCustomerType":"retail","profile.categoryAffinities":["home-page","online-mobile-services","personal-banking"],"profile.isNewSession":"false","profile.georegion":"","profile.EmployeeIP":"Non-employee IP"},"actions":[{"action":"customCode","selector":"HEAD","content":"<script>\n $('.login-form.-personal-business label.login-field-placeholder').eq(1).html('Passcode');\n \n $('a.login-link').eq(0).html('Help with User ID or Passcode');\n \n try {\n $(document).ready(function

Chrome Cache Entry: 275

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	788
Entropy (8bit):	5.375877884099894
Encrypted:	false
SSDEEP:	12:TMHdwNMuNi/nzVW/KYf3UWQy8WRNoy8HZh+7tpOvitHqz/L1CQbq:2dluNAALfEOd85h+L5RgCZ
MD5:	DA9A3A337A2249CB172F9B0459EB4A9A
SHA1:	D9F93362439A3F182341BB7A7158748E88CF7B9A
SHA-256:	2A5A27287DF0EA741067AB07CDD87519F149B9443851A7408610009E677C6980
SHA-512:	FA6134A5563B48571B5D146B7DED790C766DE2FFC44A79F5C50E372576EB9EC0CB3E1C6FDF7EF0C97797B9097AA2367C6F329F7F4C654D8025274493716F609B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 395.7 395.7" style="enable-background:new 0 0 395.7 395.7;" xml:space="preserve">..<style type="text/css">....st0{fill:#007856;}..</style>..<g>...<path class="st0" d="M197.8,9.9c-71.9,0-130.5,58.5-130.5,130.5c0,69.2,118.4,231,123.4,237.9l4.7,6.4c0.6,0.8,1.4,1.2,2.3,1.2....c0.9,0,1.8-0.4,2.4-1.2l4.7-6.4c5-6.9,123.4-168.6,123.4-237.9C328.3,68.4,269.8,9.9,197.8,9.9z M197.8,93.6....c25.8,0,46.7,21,46.7,46.7c0,25.8-21,46.7-46.7,46.7c-25.8,0-46.7-21-46.7-46.7C151.1,114.6,172.1,93.6,197.8,93.6z"/>..</g>..</svg>..

Chrome Cache Entry: 276

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	20043
Entropy (8bit):	4.8625611482201405
Encrypted:	false
SSDEEP:	384:srMR9zpPhXzQGDGPYhLx3goBxGMHYWHyjy/+KJ3r:io9zZhjQGDxhLx3guHYWHyjy/+KJ3r
MD5:	75A05E7AD3518116CC1BA4DA1CCDF674
SHA1:	95148CF7C3B8C114A741DAF4F7CEF74639ED46B2
SHA-256:	596DF70596000911DB713A29AB08726E708163569E8E0A3AA093210935035827
SHA-512:	BCE95616D1171F3101EF24D0EF6D21D5CEF10335B46EBBAD5774F0D6F3CA217BD842DFB470EF236C3C98AEEFD4C355A2A2CFE055B087BD6786FD24E906B6EFF7
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap-components.js
Preview:	function sortObjectArrayByKey(a){..if(a){...k = Object.keys(a[0])[0];...var p = prompt("Sort by on of the following: \r\n" + (Object.keys(a[0]).join(" \| ")),Object.keys(a[0])[0]);...if(p){... k = p.trim();... return a.sort(function(a,b) {. if(a[k] < b[k]){return -1}. });...} else {... return a.sort(function(a,b) {. if(a[k] < b[k]){return -1}. });...}..}.}.. function ajaxGetRequest(u,f){ //u = url to hit \| f = function to do after. .try {. ..var Http = new XMLHttpRequest();. ..var url = u;. ..Http.open("GET", url,false);. ..Http.send();. ..if (Http.readyState === 4 && f == undefined){. .. return Http.response;. ..} if (Http.readyState === 4 && f){. .. window[f](Http.response);. ..}. .} catch(err){. . return "";. .}. }.var isViewMode = function(){ return document.querySelector("body[data-wcmmode='view']") != undefined }.function getSearchResults(kw,cid){. kw = kw != undefined ? kw.replace(/[^a-z0-9& ]/gi,"") : ""

Chrome Cache Entry: 277

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 64318, version 1.0
Category:	downloaded
Size (bytes):	64318
Entropy (8bit):	7.993144470716114
Encrypted:	true
SSDEEP:	1536:28OdL6GL/lzNg34+BPE42aEUsEgx794VgxuR27p/:qx6ylzNgXBsmsEgVu0p/
MD5:	B245A55F7E33E1CF4D2477570936EF84
SHA1:	12BF1C1EDA6DB246778F7C343ACEBBAAD8FA36F4
SHA-256:	B391B55F950528937BEEE7687717A4AEF81196817834F1C93B099713FF738FBC
SHA-512:	52303BDB1A193FDEC98F139447B6ACF17DC51EC36B5DCCB06B9796B57222E81A09F89E9A012AC9AFB0D26F9F93CBA73121051AFCB8276A4834A96A3ABFBEB7A5
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-medium.woff
Preview:	wOFF.......>...................z............GPOS...T..).......`.GSUB...d..._...2....LTSH...........'...jOS/2...$...X...`jh.fVDMX.......x.......acmap............Z..cvt ..#....^...^....fpgm..!........s.Y.7gasp...@.........u..glyf..(.......l4....hdmx...8...T..-P.[..head.......6...6...Bhhea.......!...$....hmtx...\|...2......_.loca..$D...H...H_P..maxp....... ... .;..name...........E~d+;post...d............prep.."....R......J............_.<...........G.......2...)................x.c`d``...........Y,...".I..............#.X..._...............+....x.c`fRc......X.......f,a.g.e``.fgfaebbbf```g@.!............;100.b....0.$...i..R`.......x..Kh\U.....%i&1}.4.d...W.Z.....e..(.Q...P..Eh.h.6..A.....j.J..Q..(.....B\|,\|....c.]$0..;..C.B\....;.\|.%._.f...P.k.V.B;.....%...+.G........h..i....n\...\|?.c.........>wZ=....>W...m.\.rv...o......F?...'U..%5np.A..a.K.........../#. .Wx..{..r_p....S&.A..u....[H..#...j..Typ....lq0....emG...5...{SY.@....B.R.y...JkE.Z.}.....4...cn...N)m1'6.\|.oq.6

Chrome Cache Entry: 278

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 687 x 503, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8289
Entropy (8bit):	7.707209125618184
Encrypted:	false
SSDEEP:	192:kdpizLlsUJKD0lb+tjBNQqadvdqA4X6NigSUwp3LGBI:OSLA4lydBNtevdqL1PUwZT
MD5:	3414C47DF7E01FAEC317C5F3BA3D6CFA
SHA1:	473D35724709172A1E4E846154276F39E78737C2
SHA-256:	DDA51F036C8A5ABEB1F291147C0325D3B6EFF98BD846F4F87218586B67BF75EF
SHA-512:	34832C8A86936E9B429EDF3B436796CA2E84BC6954FAA1CE7FEA08C57561A51B0D47297D79BF43D6555BC112A8C06643571A23E17480F091573C4E16D489A357
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............T......pHYs...#...#.x.?v.. .IDATx...An.W.......;.w z.f.......K+...Q+.=......A.....=..I..D..'.)Y.2....D\|.P...I1......0........a..K.0..y-...Bk...]....._xy..c..0...O......k..u.ug.0\|.Z.....`.1m=...............1y..Q..'1m}..........<..+..b..~.....u.8^....W.G.........~~....+x.o;n....c..[........v]w:......L^.6...Q..W#.....\|.R.`3&......Y.u/..I`L..2.),.=.W.....h5.....a8.......p.{...r.ga...X..+....].V80......+.W.5[..LE..@0y....u.......'.+`.L^..k..1m}Z.x=..._..A......U?......+.7....Tl.z...0(7..Ex..g...\.e.O...%.^..h..1m.af..Vl.l...._..^..."..p`Vj..'...v.z.C...{.;..#.........\..,.m;k#....+0;.........v]w:..M...`.&.....Fp.]k....l.f......i.xG..c..5..J.^..fR80.v...0......s%...E..+..V..,..Z@9.+P....b..P..[@91m..\w.Z.ui..P..+P.....r.S.e.u..L^....ui..Si+..b.e.u..L^..b..B.?.S..R.H...Hk.p@p..S..@f&.@J..[K.a]...._. ...HE.@:m..a....B.986.....?.....Zo....0y.............g....Z.........8..W. ".\j.*....Z..L.....Z..Z..+..C0y.&..u.....1y.&....].W..

Chrome Cache Entry: 279

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3227), with no line terminators
Category:	downloaded
Size (bytes):	3227
Entropy (8bit):	5.126059073717022
Encrypted:	false
SSDEEP:	48:h6Fac7OxwusRHHHD2dLkmttJ75cEC8Xn7LrKWkI8aWNrTQsHa5eaL/3VMGb55csJ:hiSqbQgmokN5fLNDJ
MD5:	9EE48A4DA9C402E8A23AD085FB71F28F
SHA1:	F0C59306D6313F9BEE02B53CA8903991BD24BFD7
SHA-256:	9CDAD69A4B967C882C3D8E9CB054E7334B7F8870E96427A5D20AE2D17EFF2622
SHA-512:	2C25A0BA0B95622DA682D5F1D238C77A3858D621655ECF352BD49BE5FA7D92C6417410ACCF16F50E039FE1C2863C575FA725C23A6F3587AC95A061E53B90E6D3
Malicious:	false
Reputation:	low
URL:	https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
Preview:	var cdwpb=function(t){var a={};function __webpack_require__(e){if(a[e])return a[e].exports;var r=a[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}return __webpack_require__.m=t,__webpack_require__.c=a,__webpack_require__.d=function(e,r,t){__webpack_require__.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},__webpack_require__.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},__webpack_require__.t=function(r,e){if(1&e&&(r=__webpack_require__(r)),8&e)return r;if(4&e&&"object"==typeof r&&r&&r.__esModule)return r;var t=Object.create(null);if(__webpack_require__.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:r}),2&e&&"string"!=typeof r)for(var a in r)__webpack_require__.d(t,a,function(e){return r[e]}.bind(null,a));return t},__webpack_require__.n=function(e){var r=e&&e.__esModule?function getDef

Chrome Cache Entry: 280

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1349
Entropy (8bit):	4.193398232602312
Encrypted:	false
SSDEEP:	24:t41lFt9unBfUGOhNmaFQ1vP+nr+c90wSpWXNeT7eYFUCFTY94/s7Hi:CR9JJbmaW1vHcZSpWS7eoUGU9+
MD5:	9A569AD20708D7453D89FE6C72E7FCDC
SHA1:	60B6A41620583484642F7C826FAF8E3C879A6374
SHA-256:	B2EF3BD17AA6BC2DAA7B1209F7848B30C64F3068E43162B09A216639AB430CE5
SHA-512:	593BBBA69EE4B582001515DFC425CB306D5B8A10895FAA48F366934DA79AB12770C8D4F6034DF647B8853CF94560D41B467708BE674D4392B06D08701B0D99C1
Malicious:	false
Reputation:	low
URL:	https://mtb-repo.pages.dev/mtb_files/mtb-entrust.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 634.7 148.5" fill="#767676"><path d="M0 146.2h84v-37.7H43.2V92.1h37V54.5h-37V40.2H84V2.5H0m160.9 29.6c-13.8 0-24.6 11.4-28.6 23.5l-.4-.5 1.1-20.7H91.5v111.7H133V92.4c0-11.4.6-19 8.7-19 7 0 7.6 6.8 7.6 16.3v56.5h41.5V72.5c-.1-20.1-6-40.4-29.9-40.4zm145.6 24.1l-.4-.4 2.3-21.4h-61.2V9.8h-41.5v24.7h-11.9v33.2h11.9v78.5h41.5V67.7h19.5v78.5h41.5v-45.3c0-11.6 1.9-26.4 17.4-26.4 2.9 0 7.8 2.1 11.6 4V32.1c-15.4-.6-26 10.4-30.7 24.1zm96.3 38.3c0 13.6-.8 19.3-8.2 19.3-7.2 0-8-5.9-8-19.3V34.4h-41.5v65.8c0 30.5 17.4 48.3 49.5 48.3 30.5 0 49.8-15.2 49.8-48.3V34.4h-41.5v60.1zm99.4-17.1c-4.4-1.7-12.5-4.7-12.5-10.4 0-3.6 3.1-5.5 6.1-5.5 7 0 12.5 5.5 17.4 9.9l14.2-30.3a73.6 73.6 0 0 0-34.1-9.1c-26 0-44.9 14.6-44.9 37.7 0 19 12.9 27.5 29.2 33.2 7.2 2.5 10.8 4.8 10.8 8.9 0 4-4.5 5.7-8 5.7-7.6 0-15.9-6.4-20.7-11.6l-15.2 30.9a79.2 79.2 0 0 0 40.2 11.6c23.1 0 44.7-14 44.7-39.2-.1-18-12.1-26.1-27.2-31.8zm84.9-67.6h-41.5v24.6h-11.9v33.3h11.9v78.5h41.5V67.7h1

Chrome Cache Entry: 281

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	58513
Entropy (8bit):	5.062343785672048
Encrypted:	false
SSDEEP:	768:3wHlrp0q4OHhQsko3dH3yip2Bx1pVNJ4Gprh3bx4x8SemMIKECxq4sK:3cXyiMPE4sK
MD5:	BFBBDEBF9F8C0F345E35CAFBB5CA67A8
SHA1:	6FBBA08EF0E8BB369E949D5C41439D82C68DDC9C
SHA-256:	956D0EB15A9941927501407C829FE40A986E95C272C34619DE48475A466E2B5A
SHA-512:	A863F0D81E2EDFCA3A49C673ABD3E4F3845BDF6E5A328AEF15E9DE88EC185908E1753686C9A19B23E8F0CD77BE6FE548AA86AD8C9B95D0EBBF42A3F1AAF216D6
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap-components.css
Preview:	:root {. /Base Colors/. --color-white:#ffffff;. --color-primary:#007856;. --color-secondary:#80bc00;. --color-tertiary:#ffd03e;. --color-business:#095686;. --color-black:#000000;. --color-beige:#ebecdc;. --color-gold: #FFD03E;. --color-true-black:#000000;. --color-dark-gray:#363636;. --color-mid-gray:#555555;. --color-light-gray:#d8d8d8;. --color-light-gray2:#cfcfcf;. --color-lighter-gray:#f4f4f4;. --color-hero:#f4f4f4;. --color-hero-dark:var(--color-true-black);. --color-form-text:#6a6265;. --color-form-label:var(--color-mid-gray);. --color-form-background:var(--color-lighter-gray);. --color-top-nav grad:linear-gradient(180deg, #589A45 0%, #3D7D57 51.04%, #2B7858 100%);. --color-community-focus:linear-gradient(145.52deg, #82B235 3.74%, #347E49 18%, #357E49 43.08%, #297256 70.62%, #23644C 98.16%);. --bs-primary-rgb: 0,120,86;. --bs-secondary-rgb: 128,188,0;. --color-accent-1: #ffb300;. --tab-btn-active: v

Chrome Cache Entry: 282

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	980
Entropy (8bit):	5.343179247762611
Encrypted:	false
SSDEEP:	24:2dluNA6LfE315wyUv/vFUrsDe0OhJOPoNyXJih:cuA+fE315wyU9UrsiN1Ech
MD5:	31465646A60E38C1D583E989C4575213
SHA1:	3B49577A09A02FFB46471301DC573530F22A9EB1
SHA-256:	97DDE6AF7F1E3BAE6220881EFE213794F1922CEF1F66CFDDACEFA1E9CF01D6F3
SHA-512:	A1B508D826C63C440154BEAB3865E52E495557817B9E972A603515F32509A1FA530D86640934C7D0D61E2263BB6336B58F9AE430931DE61BABE200AC2FCC3DFC
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/svg/icon_facebook_green.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 310 310" style="enable-background:new 0 0 310 310;" xml:space="preserve">..<style type="text/css">....st0{fill:#007856;}....st1{fill:#FFFFFF;}..</style>..<circle class="st0" cx="156" cy="152.3" r="147.3"/>..<g id="XMLID_1_">...<path id="XMLID_2_" class="st1" d="M107.3,159h22.6v93c0,1.8,1.5,3.3,3.3,3.3h38.3c1.8,0,3.3-1.5,3.3-3.3v-92.5h26....c1.7,0,3.1-1.3,3.3-2.9l3.9-34.2c0.1-0.9-0.2-1.9-0.8-2.6c-0.6-0.7-1.5-1.1-2.5-1.1h-29.9V97.1c0-6.5,3.5-9.7,10.4-9.7....c1,0,19.6,0,19.6,0c1.8,0,3.3-1.5,3.3-3.3V52.6c0-1.8-1.5-3.3-3.3-3.3h-26.9c-0.2,0-0.6,0-1.2,0c-4.7,0-20.9,0.9-33.8,12.7....c-14.2,13.1-12.2,28.8-11.8,31.5v25.1h-23.7c-1.8,0-3.3,1.5-3.3,3.3v33.8C104,157.5,105.5,159,107.3,159z"/>..</g>..</svg>..

Chrome Cache Entry: 283

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 284

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4070
Entropy (8bit):	3.9550740658195562
Encrypted:	false
SSDEEP:	96:55JvUCcPzoBJ6l4CCjAz0/dCJJBbK7iIxYSG9R:5Qx8BYdCjAz0/UYiIxYSG9R
MD5:	2D5E99ADDBD1E6DC95F20A44F98061F6
SHA1:	E29DD23E310EADDB731466E0F7A6431CD1BFDCE8
SHA-256:	B2493339703121B6A52253A56137030327C8B5925609F1C2226CF938BE8894D3
SHA-512:	94B951419065884014115FC67B2A254D70BFBE0A348AA6F08709306636E1BF7B41684F5FB1FBCD86CDA2C7DE6A6D795178B3031D437D3D8EFBC98AA5B371019F
Malicious:	false
Reputation:	low
Preview:	<svg width="63" height="46" viewBox="0 0 63 46" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M29.8136 27.4112C28.8423 26.0144 27.6237 24.2685 26.105 22.1734C24.2683 19.5545 23.0498 17.7736 22.467 16.8657C21.6193 15.5563 21.0542 14.4563 20.754 13.5484C20.4538 12.6929 20.3125 11.6454 20.3125 10.4756C20.3125 8.58999 20.7893 6.84406 21.7253 5.2378C22.7142 3.63154 24.0211 2.35701 25.6105 1.39675C27.2352 0.488861 29.0012 0 30.9085 0C32.8158 0 34.5818 0.471402 36.2065 1.39675C37.8312 2.35701 39.1204 3.63154 40.0917 5.2378C41.0277 6.84406 41.5045 8.58999 41.5045 10.4756C41.5045 11.6454 41.3632 12.6755 41.063 13.5659C40.7628 14.4389 40.18 15.5563 39.35 16.8832C38.7672 17.7561 37.5487 19.537 35.712 22.1559L32.0034 27.3937C31.7562 27.7429 31.3853 27.9175 30.9085 27.9175C30.4317 27.9175 30.0608 27.7429 29.7959 27.3937L29.8136 27.4112ZM30.9085 15.7134C32.3743 15.7134 33.6105 15.1896 34.6524 14.177C35.712 13.1294 36.2065 11.9073 36.2065 10.4756C36.2065 9.02648 35.6767 7.80432 34.6524 6.7

Chrome Cache Entry: 285

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1334)
Category:	downloaded
Size (bytes):	434979
Entropy (8bit):	4.993757544083663
Encrypted:	false
SSDEEP:	12288:5eM86XvNzOYNx2g6xfZmfUoYBWeB/XWaBq:qfZmfUFWcW7
MD5:	7475228B6F7589022E5B32E35E6AB1C1
SHA1:	0B42A9681BF83A3FC5CC2A4679F1610FC22A5A0E
SHA-256:	8E36F036BE3313F66918B7F296388C199468B0FFB75D3F8908CD04F58D966964
SHA-512:	5C3C367A73DA815709D6EB0374F0B1B875B44629DD04B7CF607C636F15722A3321931B977E445E61381FC04DDA10AEFFC165E0776D44DE049B1B20659C1CCB88
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/mtb-web/clientlibs/clientlib-base.css
Preview:	/. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. /./* @define image /..cmp-image__image {. width: 100%;.}../. * Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software.

Chrome Cache Entry: 286

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x475, components 3
Category:	downloaded
Size (bytes):	93613
Entropy (8bit):	7.9809332069346315
Encrypted:	false
SSDEEP:	1536:gTCGj08QeB+Qa7DV33EiyWw/F3siyAw+UsuJPs831WVdQSKdZZTP8QaNVIsbJ:ghw8Qq9a7GiyWwRJyA3uJb31WVdPmPP6
MD5:	10F1A17AA428C8110AAFD638DBB58EDA
SHA1:	B323327ADDD89F303556E6D54C8D810A1AC09B79
SHA-256:	DC79353A89F84486576456E49D9E722B01B6B3882D26F01919EB3185AAD206A5
SHA-512:	3E7E11BBFD90F76911F7A5C5FD5E383F45E610C78E8AB0B909BBA4BF7879F2B489F745610D02780ABB9AFC9692450BC974C6928AFC1AFDC5ECE2CB9F0F0CBCDE
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/diversity-inclusion/50-50-volunteer.jpg
Preview:	......Exif..II*.................Ducky.......E......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:77462874947911EEBA10B425DBC72A80" xmpMM:InstanceID="xmp.iid:77462873947911EEBA10B425DBC72A80" xmp:CreatorTool="Adobe Photoshop 2023 Windows"> <xmpMM:DerivedFrom stRef:instanceID="7650D960A4B5EFB82B8D183AF1C5A617" stRef:documentID="7650D960A4B5EFB82B8D183AF1C5A617"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................................

Chrome Cache Entry: 287

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15329)
Category:	downloaded
Size (bytes):	68620
Entropy (8bit):	5.436511978589077
Encrypted:	false
SSDEEP:	768:soYw5SY6nYUYARGj+DYfq5j1OYlW9F7iZZZcY8Z02LKVYKYLyY6ic6oInDNtZQCj:R7z6n9rEqJ1OaKTZ02LKVlEyGtCCXIDY
MD5:	DA6FCF3733C37B7A7C2C2855174FAE90
SHA1:	F23ED8CD9148704D83A01139A2ED2A6BA80201DC
SHA-256:	075A28EC89D714959838D6A30B97171F46A758F09CEC48288871A5A357899D3D
SHA-512:	E7764051FD92982546BF0F7C2FABF8A7CBC3ABFCCD039FB8AB31CA8C20663C8191A77810C107CE78290009D1E48FC85F8E8FE0D8DD55D4FA13F7E8B94D4BCA8D
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/293418718495934?v=2.9.149&r=stable&domain=www3.mtb.com&hme=8b8eb2472f555e54a8b57f2b720f9bd3b1bc6aed031525376dd772ba51107995&ex_m=63%2C107%2C95%2C99%2C54%2C3%2C89%2C62%2C14%2C87%2C80%2C45%2C47%2C153%2C156%2C167%2C163%2C164%2C166%2C26%2C90%2C46%2C69%2C165%2C148%2C151%2C160%2C161%2C168%2C116%2C13%2C44%2C172%2C171%2C118%2C16%2C30%2C33%2C1%2C37%2C58%2C59%2C60%2C64%2C84%2C15%2C12%2C86%2C83%2C82%2C96%2C98%2C32%2C97%2C27%2C23%2C149%2C152%2C125%2C25%2C9%2C10%2C11%2C5%2C6%2C22%2C19%2C20%2C50%2C55%2C57%2C67%2C91%2C24%2C68%2C8%2C7%2C72%2C42%2C18%2C93%2C92%2C17%2C74%2C79%2C41%2C40%2C78%2C34%2C36%2C77%2C49%2C75%2C29%2C38%2C66%2C0%2C85%2C4%2C81%2C73%2C76%2C2%2C31%2C56%2C35%2C94%2C39%2C71%2C61%2C100%2C53%2C52%2C28%2C88%2C51%2C48%2C43%2C70%2C65%2C21%2C101
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 288

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	4.607168656288094
Encrypted:	false
SSDEEP:	3:qVv/ZSGKHjJDeIeAlGKA+KWRIJaGNEXW0YEjg8WAEtvp9FvNGL:qF/sGe6QcjWR0NNEXW0YGWAEdp/QL
MD5:	28E4C083B27A1C4CCCF6942CBF1C76D9
SHA1:	2127B3E3528F963FF28BD4E131931954C22CCCAF
SHA-256:	223745AA4E949F9D7704D4C6AB7F627E72886B0031C4588FEF1EE96F71D8B32E
SHA-512:	B778D5E233513DD5E2671949234FEE0BE84048090C9BBC89F045DC7F27638E79F9D32707FD11E33B26587094323842483CF3086D902135CCFD8AFE6B482768CF
Malicious:	false
Reputation:	low
URL:	https://mtb-repo.pages.dev/mtb_files/saved_resource
Preview:	<html>. <head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. </head>. <body></body>.</html>.

Chrome Cache Entry: 289

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2249
Entropy (8bit):	4.864538444353015
Encrypted:	false
SSDEEP:	48:5qPwI40wlEySOT8FKQKnH5omaybDU+GCG5vFHPay0/G5v+XM:5owI40wlEVOTpQKnZomfDU+Gtzvw/G5X
MD5:	2BD96525445EA9DCFD2B12E750081920
SHA1:	E0FB1636779662E08E17A16B040B5CC25A4FB08D
SHA-256:	B5C4F84863E8DAE702E1FE95AFDE0694076E896B6DCA5B895749BFCF2736BA68
SHA-512:	A847BA972B009B3AA99BCFBA4C4A37D2238D1FE751E8D47AD2AE3155F11120FBE8F7750E900E909A7A6B8795179361B6364E458C59CBEBE20C7CAA8458F019ED
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/scripts/alert_scripts/alert_new_design.css
Preview:	.header-wrapper {.. z-index: 10;..}.....header.aem-GridColumn > .alert-banner {.. z-index: 9;.. position: absolute;.. transition: margin-top 1s;...opacity:0;..}.....header.aem-GridColumn > .alert-banner._open {.. margin-top: 0;...display:block;..}.....alert-banner-item,...login-alerts-item {.. background-color: #ffffff;.. border-left: 7px solid #ffb300;.. position:relative;..}.....login-alerts-item {.. border: 1px solid #ffb300;.. border-left: 7px solid #ffb300;.. border-radius: 5px;..}.....alert-banner-item-text p,...login-alert-text p {.. color: #000000;.. font-size: 1rem;.. text-align: left;...line-height: 1.3;..}.....alert-banner-item-text p ,...login-alert-text p {.. font: inherit;.. color: inherit;.. background-color: transparent;..}.....alert-banner-item-text p a,...login-alert-text p a,...alert-login-messages > .login-alerts > .login-alerts-item > .login-alert-text a {.. color:#007856; ..}.....alert-banner-item:before,

Chrome Cache Entry: 290

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 291

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18187), with no line terminators
Category:	downloaded
Size (bytes):	18187
Entropy (8bit):	5.347759003709589
Encrypted:	false
SSDEEP:	384:s40C/Y3uOOpp9W89rzOv4m8Avx2kjEhNgyyuek:VjOOp281UsAlErPyud
MD5:	5C6ED25DCE803FD84288922B8928409E
SHA1:	3CCC10546AE12F160BACAC1E9E422AF091EA4A41
SHA-256:	480B06B23E574B4BF386FDE1A91145A4171F97AEB5EE800E4BE1850F29B1AD91
SHA-512:	FE9265D2E6EA4ACB7E0A87E08BEDFAF48BCBAD62BB7A86E73F9AE21C8437AF3334D2A9733C6BC47A12BBF54F97EC79271CB5300F90231614F407599D1B4C05E5
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/ytc.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){"use strict";function r(){if("undefined"==typeof TextEncoder){window.Tex

Chrome Cache Entry: 292

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1502)
Category:	downloaded
Size (bytes):	12140
Entropy (8bit):	5.143845971027843
Encrypted:	false
SSDEEP:	192:aRFnNojImVVMyK3TXXUcgbRmYa0+GH1/DJU3UfNmT5Qad9FMjnAuXBw4kI5Balls:a3NsImVVMyKDJgFAo/NU3UqZCfjL
MD5:	00B32B44D58510A747E128F4738ABAA5
SHA1:	289A088219E1ED5BF10AB31776287528DBCDEA46
SHA-256:	4C6D7644B73BF6D33B2FE703FD38CC5FCBE28183A9A2871DFACA4C1A42F073C8
SHA-512:	CAA57DAA68AD4A7B913685A698E0020CC0ED7E839B10D6ACC31590EC6B71578AFBF6E28AD56670ADF871FA804376B0B8B4A265D36D9A471A8B204F20FB95BAA4
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.190.js?utv=ut4.51.202309150258
Preview:	//tealium universal tag - utag.190 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.globals=utag.globals\|\|{};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},

Chrome Cache Entry: 293

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 4776, version 1.0
Category:	downloaded
Size (bytes):	4776
Entropy (8bit):	7.883017242733648
Encrypted:	false
SSDEEP:	96:QrbFQBWywJKjrbajhfEw7zimzan1E2dti/+J1Ez0QBX/PYTCD:Qr2BWVJKjS9fZ7Y14/SEH1ITW
MD5:	AC13691B89191D11D0E5577EB3CF3D53
SHA1:	0126FA82C0AB022E61B5DE74F1FE3E204A905A7B
SHA-256:	108D16421AE2FF7FC5157D507DC5B1BF7F62140BA58CF3C723B1F2B7E74C21DF
SHA-512:	803860B6427CF6C439AD90C425E786348B8BE2B73CB87AF72268A27B90A69083ADC3AA907FE12810C6FCB036990EC6472A93E8293DA0754B53955FFD6558B71D
Malicious:	false
Reputation:	low
URL:	https://resources.mtb.com/assets/fonts/mandtpg-iconfont.woff
Preview:	wOFF........................................GSUB.......;...T .%zOS/2...D...A...V?$K.cmap...........Z{../glyf...x............head...<...3...6....hhea...p.......$....hmtx................loca.......L...LO.Ubmaxp........... .;..name.......^.....JL.post...\|.......+..x.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d>.8.......i...C..f\|.`....e`ef....\S..^2.Tf~..F1.b`.. 9....V...x....m.1.....!7B..N..G...<...3U.9f...g......'...`.e..w..?..7v..V..........m>q.)g...K.\...%7.r.=.<..3/...;....o.l.}...4.e5.].....8.JQQy(a..A.P8-...E%.p.(.......F..Q8}....7.....-A.psP.C(.&....7.....C...p.Q..(.N..).7.......o.ULx..8}p.W..{O.J.....%K...O....vm'..'.4..:.b;_.@....zm..B....t...hK..c....dH..!)s.nn..........b...V.l................r..E.h.sr......ly..o.o.h.~m.......p......V....a..Z...j..Nb...%....<...[.[ep90q.....3.:.qd.n..p.NS..:i.I..7....x.d.^\|.:..ga.....r..W........>..>..._=........n.&...r......X??k}.z...s...^.....%O..i\?..x...J.q........zV..P..b...dayz.dw..

Chrome Cache Entry: 294

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	230
Entropy (8bit):	4.9256138414720825
Encrypted:	false
SSDEEP:	6:tI9mc4sl3URFfI45SdgIe7LRdEX0UW3p5Adbp5CY:t41kF5MdgIe7dd+tWPs/CY
MD5:	916635D10512AE6A1840614A895DCD38
SHA1:	DB175DE4C42281BB4D239C57D1B95B8E75C529EC
SHA-256:	D58EB2802F72D0C6B1D944A1335E8FB914AF44B51FE16097AAD994C15B8CFBAD
SHA-512:	17EDA2352BB4EB7EA124BCFD1D69D5A06DB5F4F0E81CCACBF100F704F3ED456367B74DCA54440860E351B996752F33FC87B900CDD4BEFA7E4A2E5090B85F35DE
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/assets/img/mtb-equalhousinglender.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 11.99" fill="#767676"><path d="M8.09 0L0 4.6v1.67h1.24v5.72h13.5V6.27H16V4.65zm-5.2 4.79l5.2-3.06 5.1 3.06v5.74H2.88zm2.43 2.18h5.39v-1.4H5.32zm0 2.1h5.39v-1.4H5.32z"/></svg>

Chrome Cache Entry: 295

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 296

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/sp.pl?a=10000&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10087193&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&tagmgr=tealium
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 297

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2085
Entropy (8bit):	4.947603560208806
Encrypted:	false
SSDEEP:	48:cK0jDpFcrqOCdynN0yYbq5Ssbd6PzHzLClgem:cdFcrqOCdq2dlPznP
MD5:	F932C905A378D94EB3F6DB08AEEACC32
SHA1:	337F69931BD7ED8B36B997E6A998ABF882871101
SHA-256:	F781D0152789F46589733A63F1124DC1BAE53F997E3D75BB3B1B5E9D894E8540
SHA-512:	B6C3750815BBB8DD37285EF1D9755ED5A12C76E469CC6989066CDE6C26E4A281266AFBF1E66199878FDF471D171A061EE94A08650B6556C7D57C3E8E9F699339
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="64px" height="64px" viewBox="0 0 64 64" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>icon_coins</title>. <g id="icon_coins" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round">. <g id="Group" transform="translate(2.000000, 2.000000)" stroke-width="2">. <g id="accounting-coins">. <circle id="Oval" stroke="#007856" cx="40.4104" cy="19.6" r="19.5"></circle>. <path d="M20.978,20.9676 C12.8584322,20.3890693 5.23374596,24.9150818 1.85319903,32.3200789 C-1.5273479,39.725076 0.0475716506,48.4509146 5.80352855,54.2068715 C11.5594854,59.9628283 20.285324,61.5377479 27.6903211,58.157201 C35.0953182,54.776654 39.6213307,47.1519678 39.0428,39.0324" id="Shape" stroke="#80BC00"></path>. <line x1="18.3104" y1="33.9" x2="18.3104" y2="31.3" id="Shape" stroke="#80BC00"></lin

Chrome Cache Entry: 298

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.452819531114783
Encrypted:	false
SSDEEP:	3:Hl:F
MD5:	C3154BDE4C7AA8182DF55FDD430A0AAD
SHA1:	35B068D01F21A6946F7D191757D5899033DD2678
SHA-256:	F90573A1A982990777475E3E855DBC39DC11E2736DD4CFBD5D50F95336B5D37A
SHA-512:	B3D7BE6824DBC2DA331E2604D221DB7779B3B747D452DF621345EA306339484CB6F7CAC483D3258DA6DB14F87AF686F520ACC2B48D2826398CD784F8ED585CCA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmeH8M07OvgmxIFDfdAGAg=?alt=proto
Preview:	CgkKBw33QBgIGgA=

Chrome Cache Entry: 299

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2654)
Category:	downloaded
Size (bytes):	22670
Entropy (8bit):	5.389202694644382
Encrypted:	false
SSDEEP:	384:KdRRNsImVVMAAgtO3M+xXGKSndO4adUPd94Hdh47xcC7pS3rGp5f:GRRKV5pOc1Av2H+DWK+SKp5f
MD5:	386A20E7FBD77404D0AFD70E0615F46B
SHA1:	7F634244D6814C21F1738A49FD8F8AEA412809F1
SHA-256:	1D17C9BEF5EAAE0C3B393EA151430A17255560CB907E5AD78B541DD1DDC2F57B
SHA-512:	8F2A8160C469C9A2B279CBB55E07E7D981DD6F38CE142778FF1C612D5BE632B0C207615C15020614E4DFB4FA46627FAF4C576DDBDCE26BCA2E175DD83E99332D
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.40.js?utv=ut4.51.202309082106
Preview:	//tealium universal tag - utag.40 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved..(function(f){if(f.fbq)return;var n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments);};if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version="2.0";n.queue=[];n.agent="tmtealium";})(window);try{(function(id,loader){var u={"id":id},md5;utag.o[loader].sender[id]=u;utag.globals=utag.globals\|\|{};if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.c

Chrome Cache Entry: 300

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3089), with no line terminators
Category:	downloaded
Size (bytes):	3089
Entropy (8bit):	5.994749149464988
Encrypted:	false
SSDEEP:	96:wsbSUtJfxrqLWWWdV6j1wEWM8dZb39OkP:JrPWwwFWM8n3D
MD5:	9F0AF4864D514A32292C5F43273DCD86
SHA1:	2CD14671CD7BB80F1A35A912F080555F9B9F0ACC
SHA-256:	4CB2313E34EBAC3678B8286A579CFBBBCF959D4B0835501936C7EEA985BB80D2
SHA-512:	672107DB334C7A8B1079BEB4EDD0216CCC440C4519C76F298C30746066F98B65C7F84349B067C43475738FD11A077A05EFE227A66BB1AC146963EF0056187038
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/875517505/?random=1710377853057&cv=11&fst=1710377853057&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 301

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 67671, version 1.0
Category:	downloaded
Size (bytes):	67671
Entropy (8bit):	7.993457738975815
Encrypted:	true
SSDEEP:	1536:I1Houj8hOAJ9XPNV1t+/tSJhJaPnQCsq4rpYQbyLy:Idoi8/L1tktSJqPnQOUyLy
MD5:	6CD469E8613D82D4D07834A5CA7745F0
SHA1:	95347BA0A03D27E1AA91BC17C937D8AEFE53E6FF
SHA-256:	4029A5A081992259F4E529190B49DBBA893931DA4E843DD203449F1B9A4509D2
SHA-512:	A8467B45909EFCA7EF65DF6507ABAAC32F0F12C3F896DC9EE15A6FAE8CB0A4A30A0ADBB75E9541FB576CF796AC823C6502BD89234B88FD5D440F0939C84D06C9
Malicious:	false
Reputation:	low
URL:	https://resources.mtb.com/assets/fonts/mandtbaltoweb-book.woff
Preview:	wOFF.......W...................w............GPOS...X...%...&P..[GSUB......._...2....LTSH...........'q..OS/2.......X...`j...VDMX.......{.....\.cmap..0.........Z..cvt ..6....D...D....fpgm..4........s.Y.7glyf..;8...f....&yk.hdmx...$..%q..Z...].head.......6...6....hhea.......!...$....hmtx...h...(....uWk.loca..6....H...H.M~.maxp....... ... .;.Jname..........?\...post...\|............prep..5..........U1............._.<...................&.../................x.c`d``............X.2.E...2..+..........#.X..._....................x.c`f.c..............f,apgtf``.fefaebbbf```g@.!............;100.a....0.$...i..R`...~...x..OlTU..{.....v..S.C;...R,RZ..2.R..H."Tb..P$.Q.7$..1&..Z....uCw....&.FV(..b.FCS...{.S. .~.........sF.K..R......\|..O....;...t.T.Q....P..FYw......w..q....w...5..c.........D.._...=..p.....w............Y..y..7.....h....k....._U....o.@.E?.9.....qZ..#.:......'....:..2..o.m.}.2....m...~.<'t.{Y.n.\|Zf.t/i...}.>...Q...W.E.{t^.u~.;.*.!.............=O\Fk.w..:w].6...d.

Chrome Cache Entry: 302

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 936, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	87544
Entropy (8bit):	7.771203416784361
Encrypted:	false
SSDEEP:	1536:A2aHfDb4sMd4JsBI2GGtzVSE3xHoiNEtfdTzYK8x6vtZLrVsx9kTNl7:A2ebBJsW2zz0qxI+EtfdTzYQb/l7
MD5:	3E3E25B8CDB668DA7C113A4D2DC29245
SHA1:	6E88AF943648241223340349D69CA2CBC248E604
SHA-256:	E54FB701404DBFDF89C833056445FFD3CD1A635770755ECF58D6633171EAD3D2
SHA-512:	A713AA998FAED389032114B67F4D72CE6E26C02D629FAE203B284F40B71FDDB05E0FFA0027B7FEEC5B3B52C6583AD749E24DC54B37551A0C02077F92A381784D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............{YN....IDATx...g..e.....>.~.....Y..C..3.9J.dPP.s..D.bBQ0 .H.$..I..JN.3.s...[Ok..a....:..k=k..}......T..?................................................................................................................................................................................................................................................................................................................................................ <,Y.0...w.x...`0.....`0..........".\........`0.....`0......]:E.....I9.......`0.....`0B3...... ..`0.....`0... .....w...`0.....`0.............`0.....`...J..B?.n...`0.....`0..F..._}%c............B_CC......0......................c..O.............................. `.`7. .:........ .....".........................W.. ...@.........3... ..........Qx....I9........ ..`\t.0.L..f..?.Oe.....R..\D...... L....e......l6..b................. ......Err.HIIq......&...A......... .....7..P.......h6...../A......... p....]sD..!...[.

Chrome Cache Entry: 303

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	322405
Entropy (8bit):	5.206902445553876
Encrypted:	false
SSDEEP:	6144:2Ea6/iLY8CvPokFFr2QFbP+s3JPL2ymp896ZhY1vRUk2YpHe4hzbQSA4Z4uQ:dCQFbPLjG89DRlTHe8bQSJZ4uQ
MD5:	9C5A48BD789473F18B8BF7BD777371F9
SHA1:	F84D9237854640F2B0CC554B816C17D11376AF5A
SHA-256:	6EF98EF294D03000D904D5F868598DC98667A0D00338CEE40B3080A9D725D1CD
SHA-512:	C35311ACD6DFA3E9DC7AC0CF5132626BC4E7740BCF717CFD541086B438BE9306140399F5F5A9DB85DF1B9A26C5A8EB7AE3D39CBA526CFECEBBD5E40397BE8AC4
Malicious:	false
Reputation:	low
URL:	https://resources.mtb.com/r/simple-layout-responsive/js.mtb?v=08292023024500
Preview:	/!.. jQuery JavaScript Library v3.3.1.. * https://jquery.com/.. .. Includes Sizzle.js.. * https://sizzlejs.com/.. .. Copyright JS Foundation and other contributors.. * Released under the MIT license.. * https://jquery.org/license.. .. Date: 2018-01-20T17:24Z.. */..( function( global, factory ) {....."use strict";.....if ( typeof module === "object" && typeof module.exports === "object" ) {......// For CommonJS and CommonJS-like environments where a proper `window`....// is present, execute the factory and get jQuery.....// For environments that do not have a `window` with a `document`....// (such as Node.js), expose a factory as module.exports.....// This accentuates the need for the creation of a real `window`.....// e.g. var jQuery = require("jquery")(window);....// See ticket #14549 for more info.....module.exports = global.document ?.....factory( global, true ) :.....function( w ) {......if ( !w.document ) {.......throw new Error( "jQuery requires a window with a docume

Chrome Cache Entry: 304

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2039
Entropy (8bit):	4.072281108290705
Encrypted:	false
SSDEEP:	48:Cq9UQCR0AvA3SrVzrc5rMFoPFVxpgvxJdxcwyjjRl5FVcFlOsvq:x9UQC253SrVnYM2tV7ebxcw6jRlVcFQd
MD5:	F2B901CF895852A0866FE4A16C7F1730
SHA1:	C4240AF1EC798477B4E65A185DDBB1B038817DA4
SHA-256:	5F5B0D9F678FE446631A33A4CBBE891A01B0ED972143702E67AE6617367096AC
SHA-512:	6199A217ECD4FDDDFF9221D6571069421D7308A150B42A0D9049615DCA4FD50BA977E4613E43BD5ECEFCA7CE3DEEB46AB18D7D1765C2C3E8020A12C1AC82C8C2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 182 33" fill="#FFF"><path d="M112.16 15.72c3.66-.83 6.02-3.47 6.02-7.51 0-4.91-3.2-8.2-9.82-8.2h-10.7v32.44h11.07c6.9 0 10.61-3.24 10.61-8.76 0-4.41-2.64-7.23-7.18-7.97zM99.7 1.68h8.62c5.24 0 7.74 2.55 7.74 6.67s-2.5 6.63-7.74 6.63H99.7V1.68zm8.94 29.1H99.7V16.64h8.94c5.79 0 8.57 2.64 8.57 7.04 0 4.45-2.78 7.1-8.57 7.1zm22.33-21.41c-4.26 0-7.32 2.36-8.43 5.79l1.76.56c1.16-3.2 3.57-4.77 6.67-4.77 3.89 0 6.12 1.85 6.12 6.72v1.3l-2.97.14c-9.96.32-12.79 3.43-12.79 7.37 0 4.03 3.24 6.53 7.55 6.53 3.8 0 6.72-1.81 8.2-5.05v4.5h1.95V18.13c.01-6.07-2.96-8.76-8.06-8.76zm6.12 14.32c0 4.31-3.06 7.74-7.97 7.74-3.43 0-5.79-1.99-5.79-4.96 0-3.15 2.18-5.65 10.89-5.93l2.87-.09v3.24zm16.08-14.32c-4.12 0-7.18 2.64-8.57 6.3V9.92h-1.99v22.52h1.99v-11.3c0-5.98 3.34-10.1 8.2-10.1 3.8 0 5.75 2.27 5.75 6.72v14.69h1.99V17.34c0-4.82-2.6-7.97-7.37-7.97zm19.33 9.4l8.1-8.85h-2.4l-12.1 13.35V.01h-1.99v32.43h1.99v-6.76l5.1-5.52 8.43 12.28h2.27M63.24 8.75h1.98s-.02-

Chrome Cache Entry: 305

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	230
Entropy (8bit):	4.9256138414720825
Encrypted:	false
SSDEEP:	6:tI9mc4sl3URFfI45SdgIe7LRdEX0UW3p5Adbp5CY:t41kF5MdgIe7dd+tWPs/CY
MD5:	916635D10512AE6A1840614A895DCD38
SHA1:	DB175DE4C42281BB4D239C57D1B95B8E75C529EC
SHA-256:	D58EB2802F72D0C6B1D944A1335E8FB914AF44B51FE16097AAD994C15B8CFBAD
SHA-512:	17EDA2352BB4EB7EA124BCFD1D69D5A06DB5F4F0E81CCACBF100F704F3ED456367B74DCA54440860E351B996752F33FC87B900CDD4BEFA7E4A2E5090B85F35DE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 11.99" fill="#767676"><path d="M8.09 0L0 4.6v1.67h1.24v5.72h13.5V6.27H16V4.65zm-5.2 4.79l5.2-3.06 5.1 3.06v5.74H2.88zm2.43 2.18h5.39v-1.4H5.32zm0 2.1h5.39v-1.4H5.32z"/></svg>

Chrome Cache Entry: 306

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2058)
Category:	downloaded
Size (bytes):	199816
Entropy (8bit):	5.637872486887113
Encrypted:	false
SSDEEP:	3072:jdNx2eOjfkoeM/oM7i9kRG5jbB9ytSmkG/Q9G+a05iv05SXXg+H:JOjfvJRMvB9ytSmfK0Mi8mQM
MD5:	A23923C6F7DA2A169C63D5D4723C8348
SHA1:	B48D124A3A6F9A8B1771E1FA9D9393E20BEAB433
SHA-256:	D5CC7F5B6268B9E7D7E9ACD1BD1E1B41DBEB5BB40AD9F972E22AB01CFADB2DEC
SHA-512:	49759D16D23EF912C35EC7E18F3DB271AE6DA8C2E16324EB36F91B1CA0DF191DEB59EDD170FF30EF103569BE8FA799136130179BDFA05621BB57251379FFB0DE
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/ruxitagentjs_ICA2NVfhqru_10285240307101407.js
Preview:	/. Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ /.(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ba=-1!==document.cookie.indexOf("__dTCookie");document.cookie="".concat("__dTCookie","=").concat("1","; expires=Thu, 01-Jan-1970 00:00:01 GMT");return Ba}function gb(){return void 0===hb.dialogArguments?navigator.cookieEnabled\|\|Ka():Ka()}function ib(){var Ba;if(gb()){var Ia=hb.dT_,Va=null===Ia\|\|void 0===Ia?void 0:Ia.platformPrefix;if(!Ia\|\|Va){var La=null===Ia\|\|void 0===Ia?void 0:Ia.minAgentVersion;.La&&"10285240307101407"<La+""?window.console.log("[CookiePrefix/initConfig] Min agent version detected, and javascript agent is older - the javascript agent will not be initialized!"):(La=(Ba={},Ba.cfg="#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",Ba.iCE=gb,Ba.platformCookieOffset=null===Ia\|\|void 0===Ia?void 0:Ia.platformCookieOffset,Ba),Va&&(La

Chrome Cache Entry: 307

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 83, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7379
Entropy (8bit):	7.633169814103444
Encrypted:	false
SSDEEP:	192:Pfk1fsCxwMenkbYFTnSbVqfBGBUbGIYOFplmXA5baxjtE:PM5sFzGBdIYObluA5baxO
MD5:	EBA33F328E6CECBA4E9A123A8CCB6873
SHA1:	38BF3F58D9F61B1F9C903028B7B0B3CD527133F8
SHA-256:	6CA07131DBACC8C13BB8995350CAA65D0AE83E838E6B115086F8B4BFDA1E73EE
SHA-512:	4C6447B28C567EFE99ED1199DDB3D5B6268FB04278731BB8D2C5E47C60C1D5E9644D804DEEB5A6B12C2A2C5C0B9289E591966D1913801BC45AD49284CF92C961
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......S.....W..J....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2020-04-10T16:23:41.844Z". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Comments="Software: Adobe ImageReady XML:com.adobe.xmp: <?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpme

Chrome Cache Entry: 308

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/875517505?random=1710377813720&cv=11&fst=1710377813720&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Preview:	<html></html>

Chrome Cache Entry: 309

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	532
Entropy (8bit):	4.783022817074058
Encrypted:	false
SSDEEP:	12:8BLbMEfPJs5bfW5vmFAwmIrqsO9y1AFM8O0FFQyNH+YQ:8BzXKUvmng6AiGFQyZVQ
MD5:	A89D839E9A82CC791AB42708E3CE8C57
SHA1:	6DA18F9D27C28AF47689E1E38118676B726DD49B
SHA-256:	D07447922C08CB2B732FE9CDBC1ED50D97E53CDBF47EB27682966C2D8A349129
SHA-512:	EA36469732F275E797851D150AB3F4D58225CF3F7253AED7A9754A2A7B90ED0FE03E4A2E319A7237E8448EBB2871E3A8BE41D98BA22B885BCA369AD7FF6100C2
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/scripts/fe_utilities_axp.css
Preview:	.alert-banner {.. position: relative;.. padding: 0.75em;...z-index: 20;.. box-shadow: 1px 2px 5px 0 #00000040;..}.....alert-banner * > p:first-child {.. margin-top: 0;..}.....login-alerts-item-cf {.. display: flex;..}.....login-alert-text {.. flex-grow: 1;.. padding-left: 1.5em;..}.....alert-banner * > p:last-child {.. margin-bottom: 0;..}.....login-alerts-item-cf .icon-close {.. background-color: transparent;.. border: 0;.. color: #007856;.. cursor:pointer;.. transform: scaleX(1.25);..}

Chrome Cache Entry: 310

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x650, components 3
Category:	dropped
Size (bytes):	76857
Entropy (8bit):	7.654280949728706
Encrypted:	false
SSDEEP:	1536:O54sr7BfY6YYLv5D8XBCJqmrRhfrvQLUTzk0Y8j4+Dw7FIB:APBlh8xCJqmrPQL4zBY8jqFIB
MD5:	4919A82E1F2E075F6779147743E171D6
SHA1:	DDBC2C7ED0C9F3E945A08B135DDE94FF935776A0
SHA-256:	A1F2D3DE9072054A94ED111AD1D7006F8BA54FE45794C41E3A06B04998820877
SHA-512:	8D7A843B86F02E13A21B08569D88581A70D03D1287010162A011C7446E4D53EE45D0EC0A3D90598B5838D276DFA452788EFFAC078DD5F98B5EE6EE7EF0124B71
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......5......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:cca5d5e6-41fb-d443-9479-430b8296c413" xmpMM:DocumentID="xmp.did:B9660655C11511EE85589ABC8FE4DA03" xmpMM:InstanceID="xmp.iid:B9660654C11511EE85589ABC8FE4DA03" xmp:CreatorTool="Adobe Photoshop 24.0 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:500e572b-2cf9-0148-85ee-bc06f7bf686b" stRef:documentID="adobe:docid:photoshop:3aba1142-3937-004d-9d92-0c6b3b604157"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Chrome Cache Entry: 311

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4070
Entropy (8bit):	3.9550740658195562
Encrypted:	false
SSDEEP:	96:55JvUCcPzoBJ6l4CCjAz0/dCJJBbK7iIxYSG9R:5Qx8BYdCjAz0/UYiIxYSG9R
MD5:	2D5E99ADDBD1E6DC95F20A44F98061F6
SHA1:	E29DD23E310EADDB731466E0F7A6431CD1BFDCE8
SHA-256:	B2493339703121B6A52253A56137030327C8B5925609F1C2226CF938BE8894D3
SHA-512:	94B951419065884014115FC67B2A254D70BFBE0A348AA6F08709306636E1BF7B41684F5FB1FBCD86CDA2C7DE6A6D795178B3031D437D3D8EFBC98AA5B371019F
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/icon-global-nav-locations.svg
Preview:	<svg width="63" height="46" viewBox="0 0 63 46" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M29.8136 27.4112C28.8423 26.0144 27.6237 24.2685 26.105 22.1734C24.2683 19.5545 23.0498 17.7736 22.467 16.8657C21.6193 15.5563 21.0542 14.4563 20.754 13.5484C20.4538 12.6929 20.3125 11.6454 20.3125 10.4756C20.3125 8.58999 20.7893 6.84406 21.7253 5.2378C22.7142 3.63154 24.0211 2.35701 25.6105 1.39675C27.2352 0.488861 29.0012 0 30.9085 0C32.8158 0 34.5818 0.471402 36.2065 1.39675C37.8312 2.35701 39.1204 3.63154 40.0917 5.2378C41.0277 6.84406 41.5045 8.58999 41.5045 10.4756C41.5045 11.6454 41.3632 12.6755 41.063 13.5659C40.7628 14.4389 40.18 15.5563 39.35 16.8832C38.7672 17.7561 37.5487 19.537 35.712 22.1559L32.0034 27.3937C31.7562 27.7429 31.3853 27.9175 30.9085 27.9175C30.4317 27.9175 30.0608 27.7429 29.7959 27.3937L29.8136 27.4112ZM30.9085 15.7134C32.3743 15.7134 33.6105 15.1896 34.6524 14.177C35.712 13.1294 36.2065 11.9073 36.2065 10.4756C36.2065 9.02648 35.6767 7.80432 34.6524 6.7

Chrome Cache Entry: 312

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	15822
Entropy (8bit):	7.9575799002181
Encrypted:	false
SSDEEP:	384:RCuVI4IrVf3dZRDmmGGjuEQeFmmOg52gbm:RdlOV/hmm3juEQeTK
MD5:	652A2382A1D4D1159BFFE5DD9C77877D
SHA1:	84B893FD39255950601DA0C8D65735D28E775892
SHA-256:	ACFA0CC8B42493333D9032C79E4D91D7BBDD40995A283A3945075DA6FB2F3CFB
SHA-512:	81D0806D8D2657E623F91824D44DC33F4D5375B96A1768B64C741E5A2CB02D443236F565763C38E651003BF81F4603569F506A5571B95CC05859E1D9D58517FB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...,........"....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:4CE2F5850C98E41191D88808CA6C83CE" xmpMM:DocumentID="xmp.did:089565F0984011E4B903D8EB7B2BD9E5" xmpMM:InstanceID="xmp.iid:089565EF984011E4B903D8EB7B2BD9E5" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4CE2F5850C98E41191D88808CA6C83CE" stRef:documentID="xmp.did:4CE2F5850C98E41191D88808CA6C83CE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.3....9.IDATx..].\|...?';$...g ..H..KPP..EQDf..Z[....

Chrome Cache Entry: 313

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18182)
Category:	downloaded
Size (bytes):	319072
Entropy (8bit):	5.5540472894591915
Encrypted:	false
SSDEEP:	6144:U4x1GnBIuUmapMKDZaLyFvD9+61w21eR7K:9qB3UmapTNr
MD5:	CB73F7A0918C2F7CBBDFAA1942C1E014
SHA1:	4A2501E47D96BDC3ADD44A3690065A00D259B0B6
SHA-256:	DC3625A809FDA6753BA30B00696A82A80E95C1A95774ADFA882287259EEA7B00
SHA-512:	9AD7F8720F71D01ADAC8B681C23ED2198DE33397912FBD230C6A86497F061166DAE2E55AC817769F8F87E01C95875B92335451300B4794EDF51BFD8846B811DF
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-ZTNQ6ZK8T0&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"8",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":48,"vtp_rules":["list","mandtbank\\.com"],"tag_id":16},{"function":"__ogt_ip_mark","priority":38,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":18},{"function":"__ogt_referral_exclusion","priority":38,"vtp_includeConditions":["list","federate\\.mandtbank\\.com"],"tag_id":19},{"function":"__ogt_1p_data_v2","priority":38,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SE

Chrome Cache Entry: 314

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/sp.pl?a=10000&d=Thu%2C%2014%20Mar%202024%2000%3A56%3A52%20GMT&n=-1&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium%2Cgtm
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 315

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/990489911?random=1710377835159&cv=11&fst=1710377835159&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&hn=www.googleadservices.com&frm=0&tiba=Help%20with%20UserId%20or%20Passcode%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 316

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2085
Entropy (8bit):	4.947603560208806
Encrypted:	false
SSDEEP:	48:cK0jDpFcrqOCdynN0yYbq5Ssbd6PzHzLClgem:cdFcrqOCdq2dlPznP
MD5:	F932C905A378D94EB3F6DB08AEEACC32
SHA1:	337F69931BD7ED8B36B997E6A998ABF882871101
SHA-256:	F781D0152789F46589733A63F1124DC1BAE53F997E3D75BB3B1B5E9D894E8540
SHA-512:	B6C3750815BBB8DD37285EF1D9755ED5A12C76E469CC6989066CDE6C26E4A281266AFBF1E66199878FDF471D171A061EE94A08650B6556C7D57C3E8E9F699339
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/online-and-mobile-services/icon_coins.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="64px" height="64px" viewBox="0 0 64 64" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>icon_coins</title>. <g id="icon_coins" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round">. <g id="Group" transform="translate(2.000000, 2.000000)" stroke-width="2">. <g id="accounting-coins">. <circle id="Oval" stroke="#007856" cx="40.4104" cy="19.6" r="19.5"></circle>. <path d="M20.978,20.9676 C12.8584322,20.3890693 5.23374596,24.9150818 1.85319903,32.3200789 C-1.5273479,39.725076 0.0475716506,48.4509146 5.80352855,54.2068715 C11.5594854,59.9628283 20.285324,61.5377479 27.6903211,58.157201 C35.0953182,54.776654 39.6213307,47.1519678 39.0428,39.0324" id="Shape" stroke="#80BC00"></path>. <line x1="18.3104" y1="33.9" x2="18.3104" y2="31.3" id="Shape" stroke="#80BC00"></lin

Chrome Cache Entry: 317

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (569)
Category:	downloaded
Size (bytes):	513686
Entropy (8bit):	5.708485144795057
Encrypted:	false
SSDEEP:	6144:I5yBhvtossZ83R0i4jGbit+yhypxIylDtetHhvXCU0g4+yB+ZE4I:I7ZiNyVye341N
MD5:	5A8547555D71E5846135A48DCC7EC3DC
SHA1:	BDF99D0037D631CA1D24EFA343781F55A11AFB05
SHA-256:	7A01932ABC324CBDF143534BD8DC0E665E045A2AE8A0D234D24F2D3AD9EBC619
SHA-512:	863D425B41D6B439618CCD38D5EA46D5AD6CF3C145A476E0A8596903CFAAC4A2D04D40F5CD4F92AC74BDD73DFAAEC9F4661C6A71116DFC78B6A41F7D3BD801E6
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 318

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 348 x 441, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	229468
Entropy (8bit):	7.987690749698196
Encrypted:	false
SSDEEP:	6144:JYsZ46pMzDegTfmoGtN3+uaLoX3zqrZDbvhxaLNWrq7z:JYa4igeQ4NOpoX32rR+LNOG
MD5:	70AD94B75DFD85EDF2838FF874064EE0
SHA1:	CB039EE7E3891762FF9A18A39F876EAF84049DC2
SHA-256:	6D22EAC589D45BCC1B34CE347A26AD1B1B9B30AE2C395744E0BEACEA2D083D5F
SHA-512:	5EBA9C879452AB1F2DBCF24142CCB86DE6036CE71D3E1793DFC3E54C77FC4CF5E01BBD1AA5D76DB6F297519B15FE7B757A8114EB6EBB4F960587465C8A8A45A8
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/personal-home-page/convenience-section-image1.png
Preview:	.PNG........IHDR...\................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2020-04-16T22:06:11.750Z". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Comments="XML:com.adobe.xmp: <?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-

Chrome Cache Entry: 319

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/config/10087193.json
Preview:	{}

Chrome Cache Entry: 320

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1555), with no line terminators
Category:	downloaded
Size (bytes):	1555
Entropy (8bit):	4.989572246619229
Encrypted:	false
SSDEEP:	48:hxyt8UM79Ovwxsh89wxs8Fxyt8UM79Ovwxsh89wxs8GrFTewKGwC:bU8UO9OYOh86OYU8UO9OYOh86OBrFT51
MD5:	29F2F007E70C723C5B62258CFF989E33
SHA1:	1100616D25AFAE5C50685E8E9CEF0E6742F5563D
SHA-256:	422B962AFF597C5ACA5F9C3AA114FCEA7F3FDA6ABCAD9584510B36B3EECD0F09
SHA-512:	F83CEC046A3EAC9B9FB33831C8CAEDEA32E4B4CB21436C77AED4BC3C81460FA21FB336507E5F62CB2AA62AAA4B89F183C911E271F1E4094C1BFC267D4B5681F2
Malicious:	false
Reputation:	low
URL:	https://px.mountain.com/st?ga_tracking_id=G-ZTNQ6ZK8T0&ga_client_id=1166952759.1710377814&shpt=Online%20%26%20Mobile%20Banking%20Services%20%20%7C%20M%26T%20Bank&ga_info=%7B%22status%22%3A%22One%20of%20the%20required%20properties%20not%20evaluated%20(mntnis%2C%20ga_tracking_id%2C%20ga_client_id%2C%20shpt).%22%2C%22ga_tracking_id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22ga_client_id%22%3A%221166952759.1710377814%22%2C%22shpt%22%3A%22Online%20%26%20Mobile%20Banking%20Services%20%20%7C%20M%26T%20Bank%22%2C%22dcm_cid%22%3A%221166952759.1710377814%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getClientIdByCookie%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%7D&dcm_cid=1166952759.1710377814&available_ga=%5B%7B%22id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22sess_id%22%3A%221710377813%22%7D%5D&hardcoded_ga=G-ZTNQ6ZK8T0&dxver=4.0.0&shaid=34249&plh=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&cb=55960873835234740&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue%2Ctealium%3Dtrue
Preview:	(function(){var c="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t.textContent=e:t.text=g,e=document.getElementsByTagName(\'script\'),e=Number(e.length)-1,(e=document.getElementsByTagName(\'script\')[e]).parentNode.insertBefore(t,e)}();";var a="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t

Chrome Cache Entry: 321

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1003
Entropy (8bit):	5.074973783684035
Encrypted:	false
SSDEEP:	24:2dvA6LfE4E5hQxrSkpVnIpQKAMRuo9xjcgj:cvA+fE4E5hQVXpVIpQQuo92gj
MD5:	DCCB46253CD76C57D5140301379E0103
SHA1:	85FD9AB50A83195B4EBF6F46EE279A578E17344C
SHA-256:	489F8E84A07712B0E5593C1E30EF7DC3BD3B6047BCCF4C23924FD7009A65D666
SHA-512:	A60CE2769961788A1C4E74CB17E9603C41885EFC1984A48F3565CB8576C9484333D0CA3A43A0B7DCA2C29A6A18537D08D12501099B6CA041998E7C0629A3654D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 26 25" style="enable-background:new 0 0 26 25;" xml:space="preserve">..<style type="text/css">....st0{fill:#007856;}..</style>..<path class="st0" d="M3.1,0C4,0,4.7,0.7,4.7,0.7C6,2.2,6.5,3.5,6.5,3.5c0.6,1.4,0.2,2.3,0.2,2.3C6.6,6.4,6,7.1,6,7.1...C5.8,7.4,5.4,7.8,5.4,7.8C5.2,8.7,5.5,9.5,5.5,9.5C6.1,10.8,7,11.8,7,11.8c0.8,0.9,3.3,3.3,3.3,3.3s2.4,2.4,3.3,3.2...c0,0,1,0.9,2.3,1.4c0,0,0.8,0.3,2,0.1c0,0,0.3-0.1,0.7-0.5c0,0,0.7-0.6,1.3-0.7c0,0,0.9-0.5,2.4,0.2c0,0,1.3,0.5,2.9,1.7...c0,0,0.8,0.6,0.7,1.5c0,0-0.1,0.6-0.6,1.2c0,0-1.4,1.9-4,1.7c0,0-2.4,0.1-5.4-1.5c0,0-1.7-0.7-4.5-2.8c0,0-0.8-0.6-3.6-3.5...c-2.8-2.8-3.5-3.6-3.5-3.6c-2.2-2.4-2.8-4-2.8-4c-1.7-2.9-1.6-5.1-1.6-5.1c0-2.6,1.8-3.9,1.8-3.9C2.4,0.2,3.1,0,3.1,0z"/>..</svg

Chrome Cache Entry: 322

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1502)
Category:	downloaded
Size (bytes):	12128
Entropy (8bit):	5.143759658592915
Encrypted:	false
SSDEEP:	192:lRFnNojImVVMyK3TXXUcgbRmYa0+GH0lxJT3UaHNmT5Qad9FMjnAuXBw4xI5Balb:l3NsImVVMyKDJgFAzlbT3UaSZCkjU
MD5:	C7581C8E02EA7B333319A1F3178F94CE
SHA1:	0AD52A8C6321C7847A59BD296255F0C6B3E6B2E2
SHA-256:	C4AE894F543FB891F884E655698DDAFE9542A9B71DE539FDA73C8BC0285EAE36
SHA-512:	34CD14E008362D6B0F01233CE59C5E63EBEBAAF0D790FC7E6C1147E3CABECC2AB60DA3B12C76E222709135C90F05E20FE6FD2BA9DEF4ECB2658A3B5A4CDEB8B6
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.76.js?utv=ut4.51.202309082106
Preview:	//tealium universal tag - utag.76 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.globals=utag.globals\|\|{};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},f

Chrome Cache Entry: 323

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1616
Entropy (8bit):	5.028596479174886
Encrypted:	false
SSDEEP:	24:2dKN+PLd24eaxMwhll5p6HdwlBQF9lrGG8okY8ohgBeN8ohgBean8oLIwZ1022ow:cK0jdCGGJkYJDNJDanJL37dAdsEJ1/
MD5:	D30E53390EBCFCAF8494FDA1F2F93922
SHA1:	1A7405F2F1991465B4FE6CE234D5AE82F93EE9B6
SHA-256:	8AB1A6F79BB5DDB52F109FCC5B8DBDBA54AAEC692702912603662ACB31664A1D
SHA-512:	23CA0208A8F66DCB72750D99D687DC8C644EB55338B49EC8761C7F62AC7DC0CBE030EF1EB2CF4040BC23224CC185A93FCDF915597BC0406A95309AD469F629F5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="64px" height="64px" viewBox="0 0 64 64" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>icon_move money</title>. <g id="icon_move-money" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round">. <g id="Group-4" transform="translate(6.000000, 0.000000)" stroke-width="2">. <g id="cash-payment-bill" transform="translate(0.000000, 17.670608)" stroke="#007856">. <rect id="Rectangle-path" x="0.966095238" y="0.444444444" width="51.4285714" height="27.4285714" rx="0.5"></rect>. <line x1="37.1100952" y1="0.444444444" x2="52.3946667" y2="12.4444444" id="Shape"></line>. <line x1="39.2666667" y1="27.8730159" x2="52.3946667" y2="15.8730159" id="Shape"></line>. <line x1="0.966095238" y1="15.8730159" x2="14.0906667" y2="27.8730159" id="Shape"></line>.

Chrome Cache Entry: 324

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	251309
Entropy (8bit):	5.1281815646119915
Encrypted:	false
SSDEEP:	3072:EXbTy1EnmJ4bzwHBB8/KtIr2ZtKgYvPuRY7a9kH3UUd1QTmJEn6dJmgXHGpwzSV9:0Um/23
MD5:	1274CDF912BC08F053A2DD3B642F70DB
SHA1:	5813EB8779D1DE0D5553FCC8787EFE6D0AF61DDB
SHA-256:	B0835A718B6417C36A4E6F156CE3809A1C9BB0CDE52195C1E217FDF8C84CF270
SHA-512:	D8FD1BD4ECC23363C354703FBD7DDA4AA1599A5AC6BC5FCA5E9FD7D0F65DBCB77AD40CD958803764B324C5E615CCBB089CE4882954A893AC0A814D715A150063
Malicious:	false
Reputation:	low
URL:	https://mtb-repo.pages.dev/assets/index-1PX0Jpt0.css
Preview:	@charset "UTF-8";.loader{width:48px;height:48px;border:5px solid #007856;border-bottom-color:transparent;border-radius:50%;display:inline-block;box-sizing:border-box;animation:rotation 1s linear infinite}@keyframes rotation{0%{transform:rotate(0)}to{transform:rotate(360deg)}}.loader-container{position:fixed;top:0;height:100vh;width:100vw;background-color:#00000032;display:flex;align-items:center;justify-content:center}@media print,screen and (min-width:36em){.reveal,.reveal.tiny,.reveal.small,.reveal.large{right:auto;left:auto;margin:0 auto}}html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monos

Chrome Cache Entry: 325

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	230
Entropy (8bit):	4.9256138414720825
Encrypted:	false
SSDEEP:	6:tI9mc4sl3URFfI45SdgIe7LRdEX0UW3p5Adbp5CY:t41kF5MdgIe7dd+tWPs/CY
MD5:	916635D10512AE6A1840614A895DCD38
SHA1:	DB175DE4C42281BB4D239C57D1B95B8E75C529EC
SHA-256:	D58EB2802F72D0C6B1D944A1335E8FB914AF44B51FE16097AAD994C15B8CFBAD
SHA-512:	17EDA2352BB4EB7EA124BCFD1D69D5A06DB5F4F0E81CCACBF100F704F3ED456367B74DCA54440860E351B996752F33FC87B900CDD4BEFA7E4A2E5090B85F35DE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 11.99" fill="#767676"><path d="M8.09 0L0 4.6v1.67h1.24v5.72h13.5V6.27H16V4.65zm-5.2 4.79l5.2-3.06 5.1 3.06v5.74H2.88zm2.43 2.18h5.39v-1.4H5.32zm0 2.1h5.39v-1.4H5.32z"/></svg>

Chrome Cache Entry: 326

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1473
Entropy (8bit):	4.381350537716321
Encrypted:	false
SSDEEP:	24:tAd2Zu/dkHGSdkHRJRSdkHcGid6agCtUMp0GQnA6xjSPIroREwCySmPtum5RV9zA:qcIUl2KgqrQA6YPvRJZlumHV9zCukV
MD5:	BAA94A4A3579B083238E95BB192E964B
SHA1:	448E73B3E57DFC5D9EE2FE2C5F6EA67FBD7F647C
SHA-256:	93408940D1F3117F4684536D8EFB0C77C24CD7806EB01B2127CE3925554F09CC
SHA-512:	EB5C8AC5FBE5CBBCE9D0EFD864ECBD80DDE5EEDC71A806DA33968B86C403EF90856C0A8870B06EE122F15ACA7286C5B533D219D3803D1DCA55E70E77E5B2A0D7
Malicious:	false
Reputation:	low
Preview:	<svg width="42" height="46" viewBox="0 0 42 46" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="42" height="4.72662" fill="white"/>.<rect y="12.0314" width="42" height="4.72662" fill="white"/>.<rect y="23.2034" width="42" height="4.72662" fill="white"/>.<path d="M8.86386 43.1081V35.5241L11.6959 43.1081H12.4399L15.2839 35.5121V43.1081H16.0399V34.7081H14.8879L12.0919 42.2441L9.28386 34.7081H8.14386V43.1081H8.86386ZM20.1758 43.2761C21.1238 43.2761 22.1438 42.7601 22.6358 41.6441L22.0118 41.3801C21.5198 42.3281 20.8958 42.7001 20.1878 42.7001C18.9638 42.7001 18.1718 41.6921 18.1718 40.2521V40.1921H22.7078V40.0601C22.7078 38.2361 21.8078 37.0721 20.1398 37.0721C18.4838 37.0721 17.4158 38.3561 17.4158 40.1441V40.1921C17.4158 42.0281 18.4958 43.2761 20.1758 43.2761ZM20.1398 37.6361C21.2558 37.6361 21.8678 38.3801 21.9518 39.6521H18.1958C18.3638 38.4521 19.1078 37.6361 20.1398 37.6361ZM24.6811 43.1081V40.1321C24.6811 38.6681 25.4731 37.6721 26.6851 37.6721C27.6211 37.6721 28.0651

Chrome Cache Entry: 327

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64202)
Category:	downloaded
Size (bytes):	810218
Entropy (8bit):	5.228266495120578
Encrypted:	false
SSDEEP:	6144:n/wKIMwhPgAOxZgky0u+MPBuaIsTa6mnpVX8bvd1KrPCycwzkTdKRX0cIxZPAYxH:n/wBPZPA8
MD5:	615E50B9624268E543B97AE2A644B3A1
SHA1:	33221FA9AD6E7D33226B76A4E3AC832A68C32522
SHA-256:	B5E20330E545FDF0F22D8B389331E0BC1E2FE0002F54E3F29266E4A9FC790F91
SHA-512:	7A1211CE2319606BB5B81C234F022E6958B73FB58E0D1296D70C0DD86314A7E77CC759FD5B09798A74053CA35D9C7430A49B61A5CA3BA931154879396D0B36D3
Malicious:	false
Reputation:	low
URL:	https://onlinebanking.mtb.com/Assets/js/kessel-client-prod.js
Preview:	/* dd: 2023-08-18__17-37-44 */.!function(e){"use strict";self.cdApi={_eventListeners:{},onMessage:function(e){var t=cdApi._eventListeners[e.data.type];.//If there are no listeners we abort at this point.if(t)for(var n=0;n<t.length;n++)t[n](e.data.event)},listenToEvents:function(){window.addEventListener?window.addEventListener("message",cdApi.onMessage,!0):window.attachEvent("onmessage",cdApi.onMessage)},getConfigurations:function(e){var t,n,s={};s.wupServerURL="https://wup-5d65a0ab.us.v2.we-stats.com/client/v3/web/wup?cid=mufasa",s.logServerURL="https://log-5d65a0ab.us.v2.we-stats.com/api/v1/sendLogs",s.enableFramesProcessing=!0,s.workerUrl=(t="cdWorkerUrl",((n=document.getElementsByName(t)[0])?n.getAttribute("content"):"")\|\|""),s.useUrlWorker=!1,s.enableCustomElementsProcessing=!0,s.clientSettings={enableFlush:!0},e(s)},addEventListener:function(e,t){var n=cdApi._eventListeners[e];n\|\|(n=[],cdApi._eventListeners[e]=n),n.push(t)},removeEventListener:function(e,t){var n=cdApi._eventList

Chrome Cache Entry: 328

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2654)
Category:	downloaded
Size (bytes):	22670
Entropy (8bit):	5.3897011565226345
Encrypted:	false
SSDEEP:	384:3RRNsImVVMAAgtO3M+xXGKSVdO4adUPd94Hdh47xcC7i83rup5h:3RRKV5pOcHAv2H+DWKR8yp5h
MD5:	1A029694D85BE1602E0E97A30BCEECD0
SHA1:	F87EA5F012B05C3DF2DC8DA38FFB4D32F15B3A8C
SHA-256:	5B2136D1D81252B45D86F6D8AFA5C3FEE204961D1D1C21440CE53992935CE976
SHA-512:	56D8E1AC93DF97F960692EF35D56A63431E67BB70FD771C5DEF5A284FC868CF2C1BA81D82F38C5610F6E317949C63FD6E5572B6B7A47E5D667314481C3024E55
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.46.js?utv=ut4.51.202309082106
Preview:	//tealium universal tag - utag.46 ut4.0.202402142352, Copyright 2024 Tealium.com Inc. All Rights Reserved..(function(f){if(f.fbq)return;var n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments);};if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version="2.0";n.queue=[];n.agent="tmtealium";})(window);try{(function(id,loader){var u={"id":id},md5;utag.o[loader].sender[id]=u;utag.globals=utag.globals\|\|{};if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.c

Chrome Cache Entry: 329

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2344)
Category:	downloaded
Size (bytes):	2345
Entropy (8bit):	5.705109197154774
Encrypted:	false
SSDEEP:	48:dwIQiTPhbiCmE2JcLm5GyCyDtwo2X4luKcZ8n4BrKFsLdcIkbDvkZkJk2kkBN5IF:5dAcL7LyeoHlS8nK9LdJqIeu2hB44CLV
MD5:	E544A058AD7647FEDAF1359DBF10F6B7
SHA1:	88F2110761F2CCD3428455205B1DC218A235F661
SHA-256:	04F4577F31088C9C0DB16A8F507CBC8555FE1A8A7040262024C3A57ABE54D9B1
SHA-512:	C81CB466E2F5CBD42C50A77B6D4CF6177017EB766077F5ADB963BE6A19D977C78ED1558AC09FFE07CA1712399E417662CFD23E922BB8C20B3EE964A3728D61E2
Malicious:	false
Reputation:	low
URL:	https://px.mountain.com/st?ga_tracking_id=G-ZTNQ6ZK8T0&ga_client_id=1166952759.1710377814&shpt=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22ga_client_id%22%3A%221166952759.1710377814%22%2C%22shpt%22%3A%22M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank%22%2C%22dcm_cid%22%3A%221166952759.1710377814%22%2C%22mntnis%22%3A%22y6%2F4gjwN%2Bt2Zv6fZL3kOwkJTACfroGv6%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1166952759.1710377814&available_ga=%5B%7B%22id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22sess_id%22%3A%221710377813%22%7D%5D&hardcoded_ga=G-ZTNQ6ZK8T0&dxver=4.0.0&shaid=34249&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&cb=42205510116200300&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue%2Ctealium%3Dtrue
Preview:	eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]\|\|e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('(b(){e(8 2==\'6\')2={};2.s=b(c){e(8 2.g!=\'6\'){c()}E{e(8 2.a==\'6\'){2.a=[]}2.a.B(c)}};2.x=b(){3 4=5.p("7");4.o="l/m";4.y="j://G";3 d=5.h("7");3 i=w(d.k)-1;3 9=5.h("7")[i];9.n.t(4,9);2.q=D(2.z,F)};2.z=b(){e(8 2.g!=\'6\'){C(2.q)}A(2.a.k>0){3 c=2.a.M();c()}};3 r=b(){3 4=5.p(\'7\');4.o=\'l/m\';3 g=(8 2.g!=\'6\'?2.g():\'v\');3 f=(8 2.f!=\'6\'?2.f():\'v\');3 u=\'N&L=\'+g+\'&H=\'+f;4.y=(\'j:\'==5.I.J?\'j://\':\'K://\')+u;3 d=5.h(\'7\');3 i=w(d.k)-1;3 9=5.h(\'7\')[i];9.n.t(4,9)};2.s(r);2.x()})();',50,50,'\|\|irongate\|var\|st\|document\|undefined\|script\|typeof\|scpt\|gcb\|function\|callback\|list\|if\|gt\|\|getElementsByTagName\|last\|https\|length\|text\|javascript\|parentNode\|type\|creat

Chrome Cache Entry: 330

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 138661
Category:	downloaded
Size (bytes):	34890
Entropy (8bit):	7.993582819055428
Encrypted:	true
SSDEEP:	768:kPBHw/WzCXX2ZOMgx2pN91eYQJHIyfGRbs4kOVXIUBKc9:kZHwf2kxw5XQJ9fGRuoVQI
MD5:	53A0D1EBC3AAAB4DAD47FD292A711650
SHA1:	059CE0B5809CBA07A5497A5EAB81C4FD41F83976
SHA-256:	904806A72BD124D6003DB98FD1F89DB33471FF50464B51170325C8220D0C9411
SHA-512:	B6CC2B1DF6D0E1352B63D65DE9E81055D5D92088F16433168DABA3721D9875A191728AA7E3AE425733DDE1903176336AF8B884D46FF7EBF0050FDCFA85C11A7F
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=17
Preview:	...........is.H.(....RT{.....XI..3.q..._.'....a.2mS.E. /....d&..I....N..r...../_..oW_....................}..~X.n-.......b..............c.......g......]....\|...g.].\|...c{.}........_.Cw0.Q.e......''s;?.N......>....].]X...=.......\_=\......f.~..^.n.-.....Y.39u...E&.,..4.</.<7.......0..{....A....7Rx...B~..;...:..<\....;6.%..l....}.n.........fc[..G@Q..O`HPQ87.sQ.gV........~.C...]...7O..m....os..M...~K..{.........lhA.4.....f/n.....(N.P......k......@o....>.=.."........w.....k.@S....b.CA..%t.M...l ....p8...[...*...En./....\.,.....e\|6.........O..\^;g>\|u.dCo...2[X....N....W....i.nY..=....~...gnozz.y^..........}5.r.......]....z....I.....od_>..d]....].zg..p[=..f.F.r.g.5..N....e....s..2..v.~.6..9`...5..e....A.%...}y.P.........b...r............)..m..-.l....g6\Vh......vg...&..m..B..o..}iR.^........x..w.h.7.....bA.m.._...9....2.~$...C.^....d..~.e..N.......\.+S.<^.py.a$....&..=..:....T.3.3.%G...}Y.......>.....%....O,.._....b...K.?.....>........4.d..I.$..o..d.

Chrome Cache Entry: 331

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2039
Entropy (8bit):	4.072281108290705
Encrypted:	false
SSDEEP:	48:Cq9UQCR0AvA3SrVzrc5rMFoPFVxpgvxJdxcwyjjRl5FVcFlOsvq:x9UQC253SrVnYM2tV7ebxcw6jRlVcFQd
MD5:	F2B901CF895852A0866FE4A16C7F1730
SHA1:	C4240AF1EC798477B4E65A185DDBB1B038817DA4
SHA-256:	5F5B0D9F678FE446631A33A4CBBE891A01B0ED972143702E67AE6617367096AC
SHA-512:	6199A217ECD4FDDDFF9221D6571069421D7308A150B42A0D9049615DCA4FD50BA977E4613E43BD5ECEFCA7CE3DEEB46AB18D7D1765C2C3E8020A12C1AC82C8C2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 182 33" fill="#FFF"><path d="M112.16 15.72c3.66-.83 6.02-3.47 6.02-7.51 0-4.91-3.2-8.2-9.82-8.2h-10.7v32.44h11.07c6.9 0 10.61-3.24 10.61-8.76 0-4.41-2.64-7.23-7.18-7.97zM99.7 1.68h8.62c5.24 0 7.74 2.55 7.74 6.67s-2.5 6.63-7.74 6.63H99.7V1.68zm8.94 29.1H99.7V16.64h8.94c5.79 0 8.57 2.64 8.57 7.04 0 4.45-2.78 7.1-8.57 7.1zm22.33-21.41c-4.26 0-7.32 2.36-8.43 5.79l1.76.56c1.16-3.2 3.57-4.77 6.67-4.77 3.89 0 6.12 1.85 6.12 6.72v1.3l-2.97.14c-9.96.32-12.79 3.43-12.79 7.37 0 4.03 3.24 6.53 7.55 6.53 3.8 0 6.72-1.81 8.2-5.05v4.5h1.95V18.13c.01-6.07-2.96-8.76-8.06-8.76zm6.12 14.32c0 4.31-3.06 7.74-7.97 7.74-3.43 0-5.79-1.99-5.79-4.96 0-3.15 2.18-5.65 10.89-5.93l2.87-.09v3.24zm16.08-14.32c-4.12 0-7.18 2.64-8.57 6.3V9.92h-1.99v22.52h1.99v-11.3c0-5.98 3.34-10.1 8.2-10.1 3.8 0 5.75 2.27 5.75 6.72v14.69h1.99V17.34c0-4.82-2.6-7.97-7.37-7.97zm19.33 9.4l8.1-8.85h-2.4l-12.1 13.35V.01h-1.99v32.43h1.99v-6.76l5.1-5.52 8.43 12.28h2.27M63.24 8.75h1.98s-.02-

Chrome Cache Entry: 332

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wi/config/10108773.json
Preview:	{}

Chrome Cache Entry: 333

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	47660
Entropy (8bit):	5.032263800256115
Encrypted:	false
SSDEEP:	768:N+qBStxxzzkafFKjpSDqfdD9IDDYhDJTDJJK0v6uYPWdFlwiInC/FAPR3pbE4+L8:utKjR/O
MD5:	03F44F6280298F9896FD4085CFAAFB96
SHA1:	46BC5C46F44BDB23D1308DCB1F39B042FB8E0FD8
SHA-256:	2C8B818D9735B1310240D8A87761EBA57C749F2840F3484E936EDC6F770B801B
SHA-512:	CAB96DDEC618ADE1DE2F6848E70E5E763461E7CDF87521FDC44C009EA43177727F0C0B896DBC5E4C29D55214734AD67A5DAF29241E66B0ED5313BBFFA6B1A1F3
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/scripts/Moe/Enrollment/enrollment.js
Preview:	var timer;..var exittimer;..var changeFocusToAnswer = true;..var validate = {.. AccountNumber: function (element) { validateAccountNumber(element) },.. SSN: function (element) { validateSSN(element) },.. CompanyTaxId: function (element) { validateTaxid(element) },.. DateOfBirth: function (element) { validateDob(element) },.. SecurityPin: function (element) { validateSecurityPin(element) },.. FirstName: function (element) { validateName(element) },.. LastName: function (element) { validateName(element) },.. CompanyName: function (element) { validateCompanyName(element) },.. UserId: function (element) { validateUserID(element) },.. Passcode: function (element) { validatePasscode(element) },.. ConfirmPasscode: function (element) { validateConfirmPasscode(element) },.. EmailAddress: function (element) { validateEmailAddress(element) },.. SecurityAnswer1: function (element) { validateSecurityAnswer(element) },.. SecurityAnswer2: function (element) {

Chrome Cache Entry: 334

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	262
Entropy (8bit):	5.082325215503522
Encrypted:	false
SSDEEP:	6:5blF6d/gPUnhdjWVggO9lrBuWchtRWRyM3ANfn:5yY8nhxyYetRWRfwB
MD5:	77399BBA5B35ACE044FBB122E8A30D22
SHA1:	F4166EBCA7A71BE2784E41902F3C6A409CD73B65
SHA-256:	53E992EB26BF6E0D778118E1F4118BDEB4A10AE0EA90F353F4CA3FCE53A2BDA2
SHA-512:	379543DE501E82114C8BE32F7C2BB63D5D5EAA4BCF5129C46E64800F238E330C8EAC0B97EFED536D00066F3359BF1C7523253F379089DC59FE90B69DC48C775A
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/assets/js/tealium_prod.js
Preview:	.(function(a,b,c,d){.. a = 'https://tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.js';.. b=document;c='script';d=b.createElement(c);d.src=a;d.type='text/java'+c;d.async=true;.. a=b.getElementsByTagName(c)[0];a.parentNode.insertBefore(d,a);..})();..

Chrome Cache Entry: 335

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 427218
Category:	downloaded
Size (bytes):	122337
Entropy (8bit):	7.9976709727461035
Encrypted:	true
SSDEEP:	3072:kk2B/ojQYVjSMWPnNwfJ+bu/CYns4fTrOSpIN3n4pcYF:kXB/okZ8+S/HaSpmX4iYF
MD5:	B644C9F5108B40E0171AF474FCD0563A
SHA1:	FB2B99E71AE8F259D7650D1501A653BA9410484F
SHA-256:	A30292B87443F4C283A654C58A050E673B73E3A8FD49E90B67F6F52D62423AC7
SHA-512:	2DD67108A8FBE340BEF21013736EBBA849447F18F4F4FF5166520F37F8A23FE63A175BD122A01D90314892823F66718B75048E7E91A224FF812C9D5F2844058B
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=11
Preview:	...........k..H.(.]..N.x...C.#..d91wn.+Aw...b.t...;.K.............D...^,....`<N........z............-.>...._>.{....F...y..Y.........0.O...v.x........_...c{7.[t.....?L...h.c..........^&..Uw..}........r..q....?\|....~\|......M.7.m....G.<:.{....i.}:....L..........[.....O.R.5.nJ.e..y.&....7......i......$..%4L-\|...I.h.~.A.7.N.A'...qb.o.=.8.I~.a..g...aRe...1.F...E....!AE...x.-.i...&.'.=}+.[W.7.S...ZN..5&..hq_.:t.R.U..f..f..y.c.a..(V..F_m..Y...%4.&]..;.>,..{.b.....9....S...8..]>...ex.............C+`...7.q.L...q..M.WmT.i^..}.7.lv..sP>rC....s.)?...8.....*Y<.>.~....~...q..1...5.7......Nc.t..Z.......?...\|.\O."Os.l..>...N...W../l..M.........D....?N......fg...- .#l/...}.f=.P....no.p.-.U;}...w.?<.........J...)..b{....?...._..^.....U.#f..e4b..y.....x...S......v....l...yt...5...?.....%.r..ea;.E.<....Y.G.._.......g..w...x...&ar...g.%....p'y.......>...._.._..O.Z..~......[...;.._...3....6...r......... ....&......Fq...6.v.n7....M.&..<s\%...J.h\.....<.....iQ.r^M

Chrome Cache Entry: 336

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2379
Entropy (8bit):	4.829587702273304
Encrypted:	false
SSDEEP:	48:tLrIlh5hvYi1fdr4RbX0t0wPcMqux/s8Y0iRs:tm8i1fdkRbX0t0wUMqux/E0iRs
MD5:	F08A2DCDEE6B33B1B77C2D085E427D96
SHA1:	57CE9110CDC8FF99533FD59D5DF0E46FA9D23E62
SHA-256:	873C8D09B7DC8DA369132E741CBE7E5843AA228F191165FE4B5B24BABDA94C19
SHA-512:	E6CAC0EB5B7E2D79902D457E08A0E0BDC76598FEE38D9EF2B505F3F4AC4B55B86D9A88B9046938B51D0236168BCB27DE17A605CE7C7A0DCD2FC6A0617C37C179
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/axp-common/components/content/disclosure/v1/disclosure/clientlib-header.js
Preview:	var disclosures = {..findDisclosures: function() {...var $numberedDisclosures = $( ".numbered-disclosures" );...var $unnumberedDisclosures = $( ".unnumbered-disclosures" );...var $disclosureTitle = $( ".disclosure-title" );...var $disclosures = $( "div[data-disclosure-id]" );...var disclosureKVP = {};...var disclosureNumber = 1;....// clear the disclosures...$numberedDisclosures.html( "" );...$unnumberedDisclosures.html( "" );....//find all disclosure and add to map...$disclosures.each( function () {....var $this = $( this );....var disclosureId = $this.data( "disclosure-id" );....var disclosure = $this.html();....disclosureKVP[ disclosureId ] = disclosure;...} );....if ( $disclosures.length > 0 ) {... $(".disclosure-wrapper").removeClass("_hidden")...}....//do the right thing with the the disclosure title based on the number of disclosures on the page...switch ( Object.keys( disclosureKVP ).length ) {....case 0:.....$disclosureTitle.html( "" );.....break;....case 1:.....$disclosure

Chrome Cache Entry: 337

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=66618&time=1710377812190&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page
Preview:	{}

Chrome Cache Entry: 338

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	259098
Entropy (8bit):	5.143611299821998
Encrypted:	false
SSDEEP:	3072:C+bTy1EnmJ4bzwHBB8/KtIr2ZtKgYvPuRY7a9kH3UUd1QTmJEn6dJmgXHGpwzSVf:A0222
MD5:	C6A2A28F74B476F5444F752383AD870C
SHA1:	C3D77A0F69F1F55E9FFA24799D06B62A714C2465
SHA-256:	58E1F9B6898A00101A5241E6524FCA06FBAB5ABC06F1B0B52E4C0A6CEAE70BF8
SHA-512:	54AC4885A0A4173B3413C1684B1417CFCA7B027B9E2A2E3A21391DD01E6700FC705F2B68BDBDE437B4347B06799CD7B24680F8BE1A62C4A0850612CB97611238
Malicious:	false
Reputation:	low
URL:	https://resources.mtb.com/r/simple-layout-responsive/css.mtb?v=08292023024500
Preview:	@charset "UTF-8";@media print,screen and (min-width:36em){.reveal,.reveal.tiny,.reveal.small,.reveal.large{right:auto;left:auto;margin:0 auto}}html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}button,[type="button"],[type="reset"],[type="submit"]{-webkit

Chrome Cache Entry: 339

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 340

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 556 x 629, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	511124
Entropy (8bit):	7.998631840130318
Encrypted:	true
SSDEEP:	12288:kpL7Z/q+okEgzh35Rko3gixsv0sHJbjzHml/kDMsA:kJ7ZikRzh35Rko3B+rHml8DMsA
MD5:	64E4C107A64320C9C5D206261DBFF46F
SHA1:	7D300077A41E7DD189D529966551DD58E89714C2
SHA-256:	D49445031649D11B4D57F5DD83E366980D48ADC0DE7F84BBD72566BA2B76CD31
SHA-512:	2B555747FCE9637C6CC19C7F14556FC8C281B637AB3650C43FEF95DB64278652E4D9BA5246BC28936C15C93F36DEB94F3D2010914109AF54F9CE5FE3BA3501ED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...u.....u.<.....gAMA......a....8eXIfMM........i...........................,...........u..........@.IDATx...%Ir.w...D.....`.b.'...w..K3rI.]............G..~..7...j..h.Q..Dzxx.{xx.........p8<..u...@..`w.W.hM...D...0..6..`$.[J.+..\.N....../,~.....`.....K..Iw....5.T.........no.W77................f4...<.g4...2^.>...?..GO....\|..O'P ....w..z.....a3.\.,?>?}:].'#.<..77.W.....2..'..>...G...d<;....l0.@s4.........pa.."m..E.....:C...[s.%t. .48.E...~..HU{....[-..9...........I./~#............l...@..}n....^8D.6.$...~.........._.{j.p.N.@.a2..N...t>....a{...6..f..,N&.....Yw..J>....v.[.:.bG....QF.<$..z.....~....K... lwk........G.jp8<.P...& I.oL..0..w#~.........a.........................l.<;]....l../..b.....l6;_....\|<..g..\|.X.....d..X8JB..".2n..6..`..0b.>........vp...........J...J......)E..J.R..Z$.;..,........0.%;..=.6...w..wg..f..^o...0.5...{.Q.v.....(...1..............$..,!Z....F.jL.....}..o.'....H.F..7..By.y..p']..v......pB.7..\|....K.....

Chrome Cache Entry: 341

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2236
Entropy (8bit):	4.03247489420685
Encrypted:	false
SSDEEP:	48:7eHj85Ox/evXhi9WAdr9dMV2ZaeL8Id9CmCdYVyCGq4xHUnzTH:KHj8Sevs0AdZs2dBd94Eydx8
MD5:	401F2AA30DACA46465A48F007E42D17A
SHA1:	8A6A9A765897914C6889ED16D4370DE277ED5745
SHA-256:	82134EA271CA7BA724D3B891A4A71C6F610FE9F2BCD6F02C08A2EFF0D6E71C69
SHA-512:	20F64ABAC810027C16BF2589B93FD430DC645398360F83BFD4835E93693D332A193B29D2502A874C028DEAD797C010A972A37B7008C419BB48B6E2D9CF789FFF
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/icon-global-nav-help.svg
Preview:	<svg width="28" height="46" viewBox="0 0 28 46" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0 13.9675C0 21.6845 6.25044 27.9349 13.9675 27.9349C21.6845 27.9349 27.9349 21.6845 27.9349 13.9675C27.9349 6.25044 21.6845 0 13.9675 0C6.25044 0 0 6.25044 0 13.9675ZM9.30583 10.7724C9.30583 8.45032 11.0518 6.47741 13.3215 6.16315C15.6261 5.84888 17.826 7.28054 18.4545 9.51534C19.0831 11.7501 17.9657 14.1071 15.8356 15.0325C15.3991 15.242 15.1372 15.661 15.1372 16.115C15.1372 16.761 14.6135 17.2847 13.9675 17.2847C13.3215 17.2847 12.7977 16.761 12.7977 16.0975C12.7977 14.7008 13.6183 13.4786 14.8928 12.9024C15.9404 12.4136 16.5165 11.2438 16.2023 10.109C15.888 9.00902 14.8055 8.29318 13.6532 8.45032C12.5009 8.62491 11.6454 9.58517 11.6454 10.7549C11.6454 11.4009 11.1216 11.9247 10.4756 11.9247C9.82961 11.9247 9.30583 11.4009 9.30583 10.7549V10.7724ZM12.2215 20.375C12.2215 19.3973 13.0072 18.6291 13.9675 18.6291C14.9277 18.6291 15.7134 19.3973 15.7134 20.375C15.7134 21.3353 14.9277

Chrome Cache Entry: 342

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x600, components 3
Category:	downloaded
Size (bytes):	101773
Entropy (8bit):	7.979802688680865
Encrypted:	false
SSDEEP:	3072:KUTBRTxWBLuFUc9A7adn5MoBUSEzF0HKegGp8VmtOV:KUTBRlWZEzdn5MoBFEzFKKegOOq0
MD5:	DEE96F112AE55BA175B743083FA495C9
SHA1:	C5BCB3FA3308728A28CF504A5FE4F9A8F23E39A4
SHA-256:	A71CD5A95B56580D0D549E5DB3074F2E1CA7A5C5C12CB489997F4239DE88EDB5
SHA-512:	DC552A8BCD453370EC5CF96B20E94D10B3456CB8D444FDA24123940AA74B7B9F21DE1C2991644B153CB8C981597E315A1229D60F44BBD5E6B52BC773CE1D83D8
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/spotlight/mtb-hp-spotlight-whm.jpg
Preview:	......JFIF.....H.H......ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C........................................................ "..".......C.......................................................................X.X..".........................................b.........................!.1A.."Qa.2q..#BR...b....$3Cr..%St......45u....'67es.&TUV....DFd..Ecfv.................................;........................!1A.."Q2aq.......3R..#B..$..4.Sr.............?..l.Lk.. <..Y...c\|h=q..,....y.o...\|m...n......b.r....... .Y..I&..F rc./5."....C.'.....(.=.5T..W.WW3`G/R>...".

Chrome Cache Entry: 343

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2783)
Category:	downloaded
Size (bytes):	31820
Entropy (8bit):	5.320462246193639
Encrypted:	false
SSDEEP:	768:so/MPceY1M9WU9Yw5pxBMY/Y3YO5QYZYqYHYNO0aivfQO3poqHXb:RJeUwT7XHMwuvC43WE
MD5:	0ABD0371B590628DDFC4A6421F546F34
SHA1:	074A9096936589A674E1EEFF50D6713EF0EA4585
SHA-256:	B9BD26A27B09552E263B59F0ADD340E5EEA64BB9E1EFAFFB68A361309C0C61C8
SHA-512:	6DC3EF54C1E5E1A623B947C63628A544E9DE003DDDC4942BB14AA6A43B7D81AEC199F4EF3FE8A583BAEE58FC00B5CDBDCA310B38C1EBD9EB92EE4AEEE0704935
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/1994534667524888?v=2.9.149&r=stable&domain=www3.mtb.com&hme=8b8eb2472f555e54a8b57f2b720f9bd3b1bc6aed031525376dd772ba51107995&ex_m=63%2C107%2C95%2C99%2C54%2C3%2C89%2C62%2C14%2C87%2C80%2C45%2C47%2C153%2C156%2C167%2C163%2C164%2C166%2C26%2C90%2C46%2C69%2C165%2C148%2C151%2C160%2C161%2C168%2C116%2C13%2C44%2C172%2C171%2C118%2C16%2C30%2C33%2C1%2C37%2C58%2C59%2C60%2C64%2C84%2C15%2C12%2C86%2C83%2C82%2C96%2C98%2C32%2C97%2C27%2C23%2C149%2C152%2C125%2C25%2C9%2C10%2C11%2C5%2C6%2C22%2C19%2C20%2C50%2C55%2C57%2C67%2C91%2C24%2C68%2C8%2C7%2C72%2C42%2C18%2C93%2C92%2C17%2C74%2C79%2C41%2C40%2C78%2C34%2C36%2C77%2C49%2C75%2C29%2C38%2C66%2C0%2C85%2C4%2C81%2C73%2C76%2C2%2C31%2C56%2C35%2C94%2C39%2C71%2C61%2C100%2C53%2C52%2C28%2C88%2C51%2C48%2C43%2C70%2C65%2C21%2C101%2C173%2C175%2C108%2C130%2C134%2C114%2C169%2C209%2C145%2C102%2C131%2C154%2C141%2C105%2C210%2C147%2C106%2C128%2C121%2C109
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 344

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	400917
Entropy (8bit):	5.307096258232212
Encrypted:	false
SSDEEP:	12288:BkZTm2BbNie+ibNie+iWNie+iDOHatTrTz:AN3+ibN3+iWN3+iDOHatTvz
MD5:	17DC39190A80C2DD203D586FBDBAA7EC
SHA1:	798F6CFB8B402492CC869B0D7B96973798327DB9
SHA-256:	6AC3E27B2C24B374266C1E676F778B50EFA460ADCFA66168480DC213ED9ECF2A
SHA-512:	28FD2ED200E358CA1F4A4DCF118638F1F6C126006AE98A51C209AFF9DFFB0E52EABDECDA4547590C03D261BFE23CB141C7A46DC557CC7781161019D27B6B3F48
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/mtb-web/clientlibs/clientlib-base.js
Preview:	/******************************************************************************. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ******************************************************************************/.if (window.Element && !Element.prototype.closest) {. // eslint valid-jsdoc: "off". Element.prototype.closest =. function(s) {. "use strict";. var matches = (this.document \|\| this.ownerDocument).querySelectorAll(s);.

Chrome Cache Entry: 345

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 636x473, components 3
Category:	downloaded
Size (bytes):	47067
Entropy (8bit):	7.9402712505309445
Encrypted:	false
SSDEEP:	768:xoYs487S7j5yWoEIDR7l3z6MREK65NP1GL1dpLhZDeU+20q7m2c7Y5ucc9oeBJf1:2Ys48mxRUDRdxEKmO1nLeUF0q7Zc7Y4l
MD5:	98EABCB002E917D9B0522448CEF0DEAA
SHA1:	5A881B6AD2867C30EE727308B77CE0D39B09665C
SHA-256:	848A8F5130A9180D852C9D7EE9D7FAB24B225E902FAE4DF3C53F0FFD287FFB88
SHA-512:	CE380760E954DA9AE1491C001E33308083F9C0E54919905A98B0115A0C97F801A66FDB24D2B85D00EAF115057EDCFD0A1912ACA09FFEB97059747D0CFEE4C28B
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/shareholder-letter/2024-shareholder-letter-art-desktop.jpg
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................'.....0"$.'92<;8276?GZL?CUD67NkOU]`efe=KownbvZcea...C...........aA7Aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa........\|..".......................................C.......................!.1A.Q."aq.2..#B...3R...4r.$Cb...5S.%c.s.................................2........................!1A."Q.2aq..#B...3...RS.............?...4.......$.*X..d.T..@.fO\|U.b...b.`.S.y.G".......d.{".x..O..".....-!B..Sb...I.......W..f.RD.9L......wb.h..8...O.J$...c....z..).sP..S.....1Q..0.e.x.

Chrome Cache Entry: 346

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2176
Entropy (8bit):	5.217102098455038
Encrypted:	false
SSDEEP:	48:NsZ0ZJs/NDMgvgItgFLtodsemGBUQt+tdUzqKwMYRjCZ3M5pA1J8FKIo4:+Z0ZG14gvgItgF5DemuUaifY2+4
MD5:	F5BD0D4C3368E1703BC0E28CD6F87CFE
SHA1:	7C006FA693C89C8F103E427C14EF3E0FCABA404B
SHA-256:	F093D5AA01F8E0AB3BB5A1D1ECF4F6605BD58255A8167BC20FB00FD2273C9DAF
SHA-512:	88479808DBE1EE3F452FBA7F8D0C018450068355714B4D302E7CAD7EE3AC95EED44E2E324C7C9376D8ACCE45764A30E6AD9175AAE7DAC5D4D33C4A577C4F21E3
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/scripts/fe_utilities_axp.js
Preview:	.function createPageAlertBanner(){...if( document.querySelectorAll(".alert-banner")[0] == undefined){....var alertBanner = document.createElement("div");....alertBanner.classList.add("alert-banner");....document.querySelectorAll(".header, .header-wrapper")[0].parentElement.prepend(alertBanner);...}..}....function getAXPPageAlertHtml(){...return "<div class='alert-banner-item-cf' data-expire='[[alertDateEnd]]'> <div class='alert-banner-item-text' tabindex='0'>[[alertCopy]]</div> <button onclick='closeAXPCFAlert(this)' class='alert-banner-item-close' aria-label='Alert Banner Close Button'>X</button></div>";..}....function getAXPLoginAlertHtml(){...return "<div class='login-alerts-item-cf' data-alert-index='0' data-expire='[[alertDateEnd]]'> <div class='login-alert-text'>[[alertCopy]]</div> <button onclick='closeAXPCFAlert(this)' class='icon-close' aria-label='Close Alert'>X</button></div> ";..}....function getPageFromFile(){...try {........var myPg = window.location.pathname.replace(

Chrome Cache Entry: 347

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 687 x 503, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8289
Entropy (8bit):	7.707209125618184
Encrypted:	false
SSDEEP:	192:kdpizLlsUJKD0lb+tjBNQqadvdqA4X6NigSUwp3LGBI:OSLA4lydBNtevdqL1PUwZT
MD5:	3414C47DF7E01FAEC317C5F3BA3D6CFA
SHA1:	473D35724709172A1E4E846154276F39E78737C2
SHA-256:	DDA51F036C8A5ABEB1F291147C0325D3B6EFF98BD846F4F87218586B67BF75EF
SHA-512:	34832C8A86936E9B429EDF3B436796CA2E84BC6954FAA1CE7FEA08C57561A51B0D47297D79BF43D6555BC112A8C06643571A23E17480F091573C4E16D489A357
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/ehl.png
Preview:	.PNG........IHDR..............T......pHYs...#...#.x.?v.. .IDATx...An.W.......;.w z.f.......K+...Q+.=......A.....=..I..D..'.)Y.2....D\|.P...I1......0........a..K.0..y-...Bk...]....._xy..c..0...O......k..u.ug.0\|.Z.....`.1m=...............1y..Q..'1m}..........<..+..b..~.....u.8^....W.G.........~~....+x.o;n....c..[........v]w:......L^.6...Q..W#.....\|.R.`3&......Y.u/..I`L..2.),.=.W.....h5.....a8.......p.{...r.ga...X..+....].V80......+.W.5[..LE..@0y....u.......'.+`.L^..k..1m}Z.x=..._..A......U?......+.7....Tl.z...0(7..Ex..g...\.e.O...%.^..h..1m.af..Vl.l...._..^..."..p`Vj..'...v.z.C...{.;..#.........\..,.m;k#....+0;.........v]w:..M...`.&.....Fp.]k....l.f......i.xG..c..5..J.^..fR80.v...0......s%...E..+..V..,..Z@9.+P....b..P..[@91m..\w.Z.ui..P..+P.....r.S.e.u..L^....ui..Si+..b.e.u..L^..b..B.?.S..R.H...Hk.p@p..S..@f&.@J..[K.a]...._. ...HE.@:m..a....B.986.....?.....Zo....0y.............g....Z.........8..W. ".\j.*....Z..L.....Z..Z..+..C0y.&..u.....1y.&....].W..

Chrome Cache Entry: 348

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1616
Entropy (8bit):	5.028596479174886
Encrypted:	false
SSDEEP:	24:2dKN+PLd24eaxMwhll5p6HdwlBQF9lrGG8okY8ohgBeN8ohgBean8oLIwZ1022ow:cK0jdCGGJkYJDNJDanJL37dAdsEJ1/
MD5:	D30E53390EBCFCAF8494FDA1F2F93922
SHA1:	1A7405F2F1991465B4FE6CE234D5AE82F93EE9B6
SHA-256:	8AB1A6F79BB5DDB52F109FCC5B8DBDBA54AAEC692702912603662ACB31664A1D
SHA-512:	23CA0208A8F66DCB72750D99D687DC8C644EB55338B49EC8761C7F62AC7DC0CBE030EF1EB2CF4040BC23224CC185A93FCDF915597BC0406A95309AD469F629F5
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/online-and-mobile-services/icon-move-money.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="64px" height="64px" viewBox="0 0 64 64" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>icon_move money</title>. <g id="icon_move-money" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round">. <g id="Group-4" transform="translate(6.000000, 0.000000)" stroke-width="2">. <g id="cash-payment-bill" transform="translate(0.000000, 17.670608)" stroke="#007856">. <rect id="Rectangle-path" x="0.966095238" y="0.444444444" width="51.4285714" height="27.4285714" rx="0.5"></rect>. <line x1="37.1100952" y1="0.444444444" x2="52.3946667" y2="12.4444444" id="Shape"></line>. <line x1="39.2666667" y1="27.8730159" x2="52.3946667" y2="15.8730159" id="Shape"></line>. <line x1="0.966095238" y1="15.8730159" x2="14.0906667" y2="27.8730159" id="Shape"></line>.

Chrome Cache Entry: 349

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (450), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	130300
Entropy (8bit):	5.294964411122427
Encrypted:	false
SSDEEP:	1536:IG5zbBwuRlwuRns7HDllgZIZDZmRJFMeMw3GJtY1Xf:r5zGDlaiD+11P
MD5:	121D7FCADEC65C312B704FBC4249EBAA
SHA1:	5D01E675E88D69E44C60F2BC6C7D050F230119D1
SHA-256:	26CE9045CBCEC3D74DE999B1FF8681B7745D98B0C896F424EF92CB4DE3631202
SHA-512:	4F7999F6F8568113EE10957A7CF536422D010E90FA4FB9B7A1859F6B2BA5C81C31C3C18E74EC4B6AE76A4E4DFF1730E8DFBE69A5A8329707F9760952874CCDC9
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/favicon.ico
Preview:	<!DOCTYPE HTML>.<html lang="en">..<head>..<meta charset="UTF-8"/>..<title>404</title>......<meta name="template" content="content-page"/>..<meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1"/>..<meta property="article:published_time" content="2023-12-26T16:49:30+0000"/>..<meta property="article:modified_time" content="2022-04-28T14:28:42+0000"/>....<meta name="robots" content="noindex,nofollow"/>..<link rel="appple-touch-icon" sizes="57x57" href=".transform/57x57/image.png" type="image/png"/>.<link rel="appple-touch-icon" sizes="60x60" href=".transform/60x60/image.png" type="image/png"/>.<link rel="appple-touch-icon" sizes="72x72" href=".transform/72x72/image.png" type="image/png"/>.<link rel="appple-touch-icon" sizes="76x76" href=".transform/76x76/image.png" type="image/png"/>.<link rel="appple-touch-icon" sizes="114x114" href=".transform/114x114/image.png" type="image/png"/>.<link rel="appple-touch-icon" sizes="120x120" href=".transform/120x120/image.

Chrome Cache Entry: 350

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1555), with no line terminators
Category:	downloaded
Size (bytes):	1555
Entropy (8bit):	4.989572246619229
Encrypted:	false
SSDEEP:	48:hxyt8UM79Ovwxsh89wxs8Fxyt8UM79Ovwxsh89wxs8GrFTewKGwC:bU8UO9OYOh86OYU8UO9OYOh86OBrFT51
MD5:	29F2F007E70C723C5B62258CFF989E33
SHA1:	1100616D25AFAE5C50685E8E9CEF0E6742F5563D
SHA-256:	422B962AFF597C5ACA5F9C3AA114FCEA7F3FDA6ABCAD9584510B36B3EECD0F09
SHA-512:	F83CEC046A3EAC9B9FB33831C8CAEDEA32E4B4CB21436C77AED4BC3C81460FA21FB336507E5F62CB2AA62AAA4B89F183C911E271F1E4094C1BFC267D4B5681F2
Malicious:	false
Reputation:	low
URL:	https://px.mountain.com/st?ga_tracking_id=G-ZTNQ6ZK8T0&ga_client_id=1166952759.1710377814&shpt=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22ga_client_id%22%3A%221166952759.1710377814%22%2C%22shpt%22%3A%22M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank%22%2C%22dcm_cid%22%3A%221166952759.1710377814%22%2C%22mntnis%22%3A%22y6%2F4gjwN%2Bt2Zv6fZL3kOwkJTACfroGv6%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1166952759.1710377814&available_ga=%5B%7B%22id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22sess_id%22%3A%221710377813%22%7D%5D&hardcoded_ga=G-ZTNQ6ZK8T0&dxver=4.0.0&shaid=34249&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue%2Ctealium%3Dtrue&cb=1710377815866695&shguid=79d58da8-d206-337a-b886-f6229ccac695&shgts=1710377816764
Preview:	(function(){var c="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t.textContent=e:t.text=g,e=document.getElementsByTagName(\'script\'),e=Number(e.length)-1,(e=document.getElementsByTagName(\'script\')[e]).parentNode.insertBefore(t,e)}();";var a="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking:\\\'\\\'};} catch (e) {}})();\',t=document.createElement(\'script\');t.type=\'text/javascript\',document.createElement(\'canvas\').getContext?t.innerText?t.innerText=e:t

Chrome Cache Entry: 351

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5211), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	151069
Entropy (8bit):	5.188693111665544
Encrypted:	false
SSDEEP:	1536:SDllgZIZDZmRJFMeMw3GJtY1XN/x44PTyq11JIB0Fdjvug6:SDlaiD+11Jx44PTjw
MD5:	555A4C77E91CDEDD86200D60E16F3BC2
SHA1:	23599A039CD6FB812DE0AF9E258973EA5B7658C8
SHA-256:	B7C0C31AF2A32850EC57762F4FED3D8EFB06A038993F54A35C5E5E644BB87A0B
SHA-512:	1B38ED2D3B382ECB74CECBECDF068616B0C0242D463ED65C3ECD4E8B81E24A14CCF9D5FC2817BC9E415384AC7BA79BA8B841A5B56B2343E7A95F9AC7FBBCD65C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML>.<html>.<head>..<meta charset="UTF-8"/>..<title>Online & Mobile Banking Services \| M&T Bank</title>..<meta name="description" content="Enroll in M&T Bank's Online & Mobile Banking services to easily and conveniently manage your finances from your mobile device, tablet or computer."/>..<meta name="keywords" content="digital banking,online banking,mobile banking,mobile app,m&t mobile banking,m&t online banking,m&t online,m and t online,mobile banking app,online mobile banking,mobile bank accounts,m&t bank app,bank digitally,bank anytime,bank anywhere,online account access,mobile account access,digital account access,manage my accounts,manage my account online,manage my account mobile,access my money,access my accounts,move money,money management,make payments online,financial tools,digital options,top features,digital features,enroll online,enroll in online banking,enroll mobile,enroll in mobile banking,enroll in digital banking,Web ban

Chrome Cache Entry: 352

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	32
Entropy (8bit):	4.5
Encrypted:	false
SSDEEP:	3:vCXtxXSHkn:Yr
MD5:	3F66B38C81551807705F213EF9950EF0
SHA1:	43DB56B56A95C53C6AACE15062A96D5CF484EBCC
SHA-256:	6DE5A19E9F01C4DA2864690D9CBE84B966043132B855B06FD127E59DD7593773
SHA-512:	9E3F33E726E9DC2B482767BA142046F15BAEE8021F06C0A9EC80CB60E77EA58037DCA69A77D5581E624F0A53F008EF6DA2AD35F87FA0B1E62D2B7DD2DE594148
Malicious:	false
Reputation:	low
Preview:	UHbqgrMCq/FiSLv5vxkrwvnvb6UoJzlW

Chrome Cache Entry: 353

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x600, components 3
Category:	dropped
Size (bytes):	101773
Entropy (8bit):	7.979802688680865
Encrypted:	false
SSDEEP:	3072:KUTBRTxWBLuFUc9A7adn5MoBUSEzF0HKegGp8VmtOV:KUTBRlWZEzdn5MoBFEzFKKegOOq0
MD5:	DEE96F112AE55BA175B743083FA495C9
SHA1:	C5BCB3FA3308728A28CF504A5FE4F9A8F23E39A4
SHA-256:	A71CD5A95B56580D0D549E5DB3074F2E1CA7A5C5C12CB489997F4239DE88EDB5
SHA-512:	DC552A8BCD453370EC5CF96B20E94D10B3456CB8D444FDA24123940AA74B7B9F21DE1C2991644B153CB8C981597E315A1229D60F44BBD5E6B52BC773CE1D83D8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C........................................................ "..".......C.......................................................................X.X..".........................................b.........................!.1A.."Qa.2q..#BR...b....$3Cr..%St......45u....'67es.&TUV....DFd..Ecfv.................................;........................!1A.."Q2aq.......3R..#B..$..4.Sr.............?..l.Lk.. <..Y...c\|h=q..,....y.o...\|m...n......b.r....... .Y..I&..F rc./5."....C.'.....(.=.5T..W.WW3`G/R>...".

Chrome Cache Entry: 354

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/948713993?random=1710377812268&cv=11&fst=1710377812268&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 355

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1349
Entropy (8bit):	4.193398232602312
Encrypted:	false
SSDEEP:	24:t41lFt9unBfUGOhNmaFQ1vP+nr+c90wSpWXNeT7eYFUCFTY94/s7Hi:CR9JJbmaW1vHcZSpWS7eoUGU9+
MD5:	9A569AD20708D7453D89FE6C72E7FCDC
SHA1:	60B6A41620583484642F7C826FAF8E3C879A6374
SHA-256:	B2EF3BD17AA6BC2DAA7B1209F7848B30C64F3068E43162B09A216639AB430CE5
SHA-512:	593BBBA69EE4B582001515DFC425CB306D5B8A10895FAA48F366934DA79AB12770C8D4F6034DF647B8853CF94560D41B467708BE674D4392B06D08701B0D99C1
Malicious:	false
Reputation:	low
URL:	https://resources.mtb.com/Assets/img/mtb-entrust.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 634.7 148.5" fill="#767676"><path d="M0 146.2h84v-37.7H43.2V92.1h37V54.5h-37V40.2H84V2.5H0m160.9 29.6c-13.8 0-24.6 11.4-28.6 23.5l-.4-.5 1.1-20.7H91.5v111.7H133V92.4c0-11.4.6-19 8.7-19 7 0 7.6 6.8 7.6 16.3v56.5h41.5V72.5c-.1-20.1-6-40.4-29.9-40.4zm145.6 24.1l-.4-.4 2.3-21.4h-61.2V9.8h-41.5v24.7h-11.9v33.2h11.9v78.5h41.5V67.7h19.5v78.5h41.5v-45.3c0-11.6 1.9-26.4 17.4-26.4 2.9 0 7.8 2.1 11.6 4V32.1c-15.4-.6-26 10.4-30.7 24.1zm96.3 38.3c0 13.6-.8 19.3-8.2 19.3-7.2 0-8-5.9-8-19.3V34.4h-41.5v65.8c0 30.5 17.4 48.3 49.5 48.3 30.5 0 49.8-15.2 49.8-48.3V34.4h-41.5v60.1zm99.4-17.1c-4.4-1.7-12.5-4.7-12.5-10.4 0-3.6 3.1-5.5 6.1-5.5 7 0 12.5 5.5 17.4 9.9l14.2-30.3a73.6 73.6 0 0 0-34.1-9.1c-26 0-44.9 14.6-44.9 37.7 0 19 12.9 27.5 29.2 33.2 7.2 2.5 10.8 4.8 10.8 8.9 0 4-4.5 5.7-8 5.7-7.6 0-15.9-6.4-20.7-11.6l-15.2 30.9a79.2 79.2 0 0 0 40.2 11.6c23.1 0 44.7-14 44.7-39.2-.1-18-12.1-26.1-27.2-31.8zm84.9-67.6h-41.5v24.6h-11.9v33.3h11.9v78.5h41.5V67.7h1

Chrome Cache Entry: 356

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=66618&time=1710377849667&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services
Preview:	{}

Chrome Cache Entry: 357

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	858
Entropy (8bit):	4.863125797238017
Encrypted:	false
SSDEEP:	24:t41CnWhvgU800b9IPQTbW6lA5b+jUuOMtuOD:Cawl8f9IPQHW/FS7tpD
MD5:	FF2869AA87985769B8F4EB8685803521
SHA1:	46CBF4942B7B95481C4580D81681F63F917E613A
SHA-256:	11D8A6CC9A9C047FD67747F9E8AB47765B84841543DC9B91515FB33CB694BAFD
SHA-512:	34E47A3E67C8018B8D2C0AECAF07FEFEBF1AD9A748FDC8AFA9C7DDB17164A91F6652C1C2CF79959C590AC91D8D97123241E711B37F2FB459B2DDB48CAD88CFF3
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/svg/icon_linkedin_green.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 193 193"><defs><style>.cls-1{fill:#007856;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><circle class="cls-1" cx="96.5" cy="96.5" r="96.5"/><path class="cls-2" d="M70.25,79H50.54a1.6,1.6,0,0,0-1.6,1.61v63.29a1.6,1.6,0,0,0,1.6,1.61H70.25a1.6,1.6,0,0,0,1.61-1.61V80.59A1.6,1.6,0,0,0,70.25,79Z"/><path class="cls-2" d="M60.4,47.51a13,13,0,1,0,13,13A13,13,0,0,0,60.4,47.51Z"/><path class="cls-2" d="M120.37,77.44A23.26,23.26,0,0,0,103,84.68V80.59a1.6,1.6,0,0,0-1.6-1.61H82.55a1.61,1.61,0,0,0-1.61,1.61v63.29a1.61,1.61,0,0,0,1.61,1.61H102.2a1.6,1.6,0,0,0,1.6-1.61V112.53c0-10.57,2.85-14.66,10.22-14.66,8,0,8.67,6.59,8.67,15.2v30.81a1.6,1.6,0,0,0,1.6,1.61H144a1.61,1.61,0,0,0,1.61-1.61V109.15C145.61,93.47,142.58,77.44,120.37,77.44Z"/></g></g></svg>

Chrome Cache Entry: 358

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	5.5594176602712535
Encrypted:	false
SSDEEP:	48:Oph8X4vmTzKq6tF79m/edTDje5ev5g9Oso:Out8W0XjeUvYRo
MD5:	F6DC287D9906ADE202D47C5B7F891352
SHA1:	691ED8494AE231AD6F880C4190284C4777F801CC
SHA-256:	4C8C5AE170DA70FF56F3B7C5D674000CE451194E3C91EF1D6023890722D3D0CB
SHA-512:	214FBD73242F71968130092F75E7332A0F779C2E4CBC2A7D3A3A4CEA4C17E4E310E4829B557FF84BB0373A97D9F66A51DEDB16D0B6DE1EF7EE792D5B3DC1B021
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/scripts/fe_utilities.css
Preview:	/ADDING FDIC BOX/..[data-component-id^='bs_disclosure'] b.boxed {.. display: block;.. border: 1px solid #000000;.. padding: 0.75em;..}..../FIX FOE DISCLOSURE LINE SPACING/..[data-component-id^='bs_disclosure'] p {.. line-height: 1.15;..}....[data-component-id^='bs_disclosure'] [data-key='d769'] p {.. margin-bottom: 1rem;..}..../* HIDE NAV LINKS WITH NULL DESTINATION /..nav.mtb-nav2 > a[href="null"] {.. display: none !important;..}..../BG COLOR FIXES/...bg-gold{...background-color: var(--color-gold);..}.....bg-secondary{.. background-color: var(--color-secondary) !important;..}.....bg-light-gray{...background-color: var(--color-light-gray);..} .....bg-light-gray2{...background-color: var(--color-light-gray2);..}....[data-wcmmode="view"] .componentSliderWrapper:not([data-sliderindex="0"]) > :first-child {...transition: all 0s;..}..../COMPONENT SLIDER STUFF START/..[data-wcmmode="view"] .componentSliderWrapper > *:first-child {....transition: transform 0s !i

Chrome Cache Entry: 359

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/948713993?random=1710377850003&cv=11&fst=1710377850003&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 360

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1312
Entropy (8bit):	5.098595818873659
Encrypted:	false
SSDEEP:	24:2d8df83LIjeaxM2liVf8/a1K1itrARKq//k0T4QShlloT02ZKQShlls/4o:c8eboFgnp8k0TtdZFz
MD5:	2AEEF916416B88C3B5A46C225DA65B0C
SHA1:	A5C3BC7CA572992BE8CE895CE33C37FB2F5DF463
SHA-256:	50D953DE8E245B07DC2E1905612DDA04668C570D39494712BDC8D94166D0CA69
SHA-512:	30B7D72AB40D2F793985DB507D9EFF743B0983CE5804712C5F649AFC60BCB2FF4F41AEAE1D4071182CE562817D6B32C83867DBD447F98EBF461EB4FEC98C00C4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="88px" height="88px" viewBox="0 0 88 88" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Checkmark Icon Copy</title>. <g id="Version-3-Fixed" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Business-Banking-Welcome---Desktop" transform="translate(-180.000000, -1737.000000)">. <g id="Check-1" transform="translate(120.000000, 1693.000000)">. <g id="Checkmark-Icon-Copy" transform="translate(62.000000, 46.000000)">. <path d="M84,42 C84,65.1962732 65.1962732,84 42,84 C18.8037268,84 0,65.1962732 0,42 C0,18.8037268 18.8037268,0 42,0 C65.1962732,0 84,18.8037268 84,42" id="Fill-1" fill="#FEFEFE"></path>. <path d="M83,42 C83,65.1954136 64.4206444,84 41.5,84 C18.5793556,84 0,65.1954136 0,42 C0,18.8045864 18.5793556,0 41.5,0 C64.4206444,0 83,18.8045864 83,42 Z" id="Stroke-3" stroke="#008164" strok

Chrome Cache Entry: 361

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2988)
Category:	downloaded
Size (bytes):	29966
Entropy (8bit):	4.387325437908746
Encrypted:	false
SSDEEP:	384:JS8to9Pu6ByDic4DhVfqwuXp4FbPfa7eFD4hYkc:JbtoZu6By+DDhFRuXp4FbPf8G0Ykc
MD5:	3931952EDAEAC4ECFBCEC805CCB39A5F
SHA1:	72A783B2B73398782AA07F181F0F006EEC06C8E8
SHA-256:	63694B8B3EB0AB3DF4877BC4188BDCAC954185BEABC67F5263C2F72BAC15CB62
SHA-512:	97DEE8A7F1DE6F9D23D0AAE9711A842136A268BCD4846902B5F85026843AD17016E2AB43D062157EE33817DF2FBA1A56FCE184C66269C906953AC9D49DCF3D4A
Malicious:	false
Reputation:	low
URL:	https://dx.mountain.com/spx?dxver=4.0.0&shaid=34249&tdr=&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&cb=42205510116200300
Preview:	var dcm_cid,dcm_tid,dcm_gid;!function(){try{var d=document.cookie.split("_ga")[1].split(";")[0].split(".");dcm_cid=d[2]+"."+d[3],dcm_tid=ga.getAll()[0].b.data.values[":trackingId"];d=document.cookie.split("_gid")[1].split(";")[0].split(".");dcm_gid=d[2]+"."+d[3]}catch(d){}}();(function() {.. var mntnis;. async function fwto(resource, options = {}) {. const {. timeout = 1000. } = options;. const controller = new AbortController();. const id = setTimeout(() => controller.abort(), timeout);. try {. const response = await fetch(resource, {. ...options,. signal: controller.signal. });. clearTimeout(id);. if(response != undefined && response != null) {. return response.text();. } else {. return undefined;. }. } catch (fe) {. clearTimeout(id);. return undefined;. }. }.. fwto("

Chrome Cache Entry: 362

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57596), with no line terminators
Category:	downloaded
Size (bytes):	57596
Entropy (8bit):	5.405573199272715
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zgnSJpksMsNo5/M:buMdAVNiTF94zgnSJpksMp5/M
MD5:	32AD004436155EC972BC50E6238B5B67
SHA1:	9B2CDB645C2FA5B98A9D05DCDCA521FED4A17B7B
SHA-256:	CF7FCC9F75C8717897BFAEF72F303FAB423CE1B70C98512AEB3677E4AF988DEE
SHA-512:	7F3165DD7D6E3136448504918F92B91FC18FAFC5F83F7FEC9D07C8089953D920BF5EA908E4BFCFCAB0824D9BDCC5C9026A6763F3658E5D714A4B2E794F4380CF
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 363

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1884
Entropy (8bit):	4.751292108670339
Encrypted:	false
SSDEEP:	24:2dV2GRLHcySpeaxM2JSS4eIxWW3ovDrTFo6taoWc1AI6aCq3/FwALNMAHuVMQNMn:cU6HYvDrT4oWc1AbzmNduGQN9ui590
MD5:	BB158BF94B527F234951614B5D7F56AE
SHA1:	E8E29459BAC715694E65B37454719A72964236A3
SHA-256:	7499AEABEAEC2141EB24969619174E22263C858D46B42DAEED97A6A27C35035D
SHA-512:	D72C140EE66A35C1F65804CB9346F53D25D2AEB5E1904A1CAFE4BE18C295E7F17D375ABE55CFB55A4B8B392809C789B0654968A9D71B88741263CD122DAA6DEC
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/spanish/es-language-icon.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="47px" height="46px" viewBox="0 0 47 46" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Spanish Language Icon@3x</title>. <g id="Spanish-Icon-Option-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Artboard" transform="translate(-27.000000, -16.000000)">. <g id="Spanish-Language-Icon" transform="translate(28.000000, 17.000000)">. <g id="Group-2">. <g id="language-icon-es" stroke="#FFFFFF" stroke-width="1.73333333">. <line x1="13" y1="0" x2="13" y2="26" id="Path"></line>. <line x1="0" y1="13" x2="26" y2="13" id="Path"></line>. <ellipse id="Oval" stroke-linecap="square" cx="13" cy="13" rx="7.4282" ry="13"></ellipse>. <line x1="2.002" y1="6.06666667" x2="23.998" y2="6.06666667" id="Path"></line>.

Chrome Cache Entry: 364

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/sp.pl?a=10000&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10087193&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&tagmgr=tealium%2Cgtm
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 365

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21842
Entropy (8bit):	7.880618412501832
Encrypted:	false
SSDEEP:	384:eRjnvlH7aaqky0LIMHKyN2RAMesm2FR1fFv1KUHRam+gT9V7BcCMyAlpZ:Sjn17aEy0Uix2RAMemR1Tkm+gT77BcCu
MD5:	1E1D02E141E89A4C45D9C0AA5530BC3A
SHA1:	970E63270CE5FD36C51C3B25724B7B37F014F760
SHA-256:	4AB56BFC693E75FBC52DE80072DCBCD412EFE057DCC099C9B718FB6F85EE129B
SHA-512:	144E8C43FC0FA9B358D71E486C36FE7D3746E1F8A557A1AF6D17832FF8105FB10E92FB86F89D3BAAFCA1572DBC76EF8BA6C7363C6989B6B23BF13AAF4A133D53
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/experience-fragments/mtb-web/info-icon-exp-fragment/info-icon-experience-fragment-2/_jcr_content/root/columns/col_1/image.coreimg.png/1601342332140/green-logo.png
Preview:	.PNG........IHDR...X.........4.....U.IDATx...XTG......k.]c..{.B..{.....K[..Ko".."..(.1.XbL.g...io....73ww..d....{.y@..3....3.P....................................................................................................................................................................................................................................................................................................................................................................................................................................jG.P...[....v+.Z.{..{...M.]..&.R,.....c.....QA..(..........a........^.......-.32V..s.D.L.. ....A.p.......j.. ..I.X.....9...RX.g..FO.[.F/Q..Y_/4........?.>y.}...6.j...pw..Y`}.&=....WX...........~?./....{...Du7l....J...(...k.....=.....P.....h..UjR.u\|.Mf.th...c..?.:...a..<...dt.s...X.).>...{...z0...bVN.....\|uN.J.;..K...d.$.g...........<}h......Rm.Z.G.i.:+>..z?...'.5z...e.R......&E......3.+.....WF`=D..Zy.e.......O..g.

Chrome Cache Entry: 366

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2341), with no line terminators
Category:	downloaded
Size (bytes):	2341
Entropy (8bit):	5.875291175051124
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08KRTSRQbI7KBKdt6:wsbSUtJfxrqLWWWdV6j1ORTQSgc
MD5:	B065CFB8BD446E246422F90DC29C119D
SHA1:	CBDA62D641B72FD9E5DF74163F9E7DC552FF0C32
SHA-256:	841D0572050572B4CEC2FCC0A4E973167BBF49E7CE5B6A59B6EE0AC68AF0C69D
SHA-512:	8B3B6E8577EC9A3563042EA44401D5286908543FBB3B5444BB5E6AE593D1BDFD56A039AD2EDC5AD43B7C918613D79AF7CF3B19ABC2FD050F4A69590F1A7905FD
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/875517505/?random=1710377813676&cv=11&fst=1710377813676&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 367

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Rn:R
MD5:	7BC0EE636B3B83484FC3B9348863BD22
SHA1:	EBBFFB7D7EA5362A22BFA1BAB0BFDEB1617CD610
SHA-256:	A2C2339691FC48FBD14FB307292DFF3E21222712D9240810742D7DF0C6D74DFB
SHA-512:	4D094B64124366530E7E327B1AD5D06C0FD1CEB96387D6A143E9F561C2F9FF7CA9D68E7C23B8B14AAB5309C202A8DCED9A38D950662A50984D2841577293CD64
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=mtbank/main/202402142352&cb=1710377813666
Preview:	//

Chrome Cache Entry: 368

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 53065
Category:	downloaded
Size (bytes):	37876
Entropy (8bit):	7.99158419117331
Encrypted:	true
SSDEEP:	768:q7B0BIAt4EfWokqpA6LuzSBgiSbiMI1WniFW73a4xoiIjng:q7u+AjfaqpA6L3BgZQW3afhng
MD5:	145712F1144416E403C7BB6A8AC5D8A4
SHA1:	AA26F72681BF87678EC571BD0C36E9BC5509FC97
SHA-256:	B18EB48737D6E17C9FD42481AC5DCDE4E1F9BD567B548E7E2B8D1CE938E21C50
SHA-512:	3770D68BB36B23B0AADF7A6F210CD3ECD213CC9E22D83DD7B1FB7BC04719C306DEA47D41135ABB9A32E04D1A0E363D9CA3CB60A4E411E7BA34234E36EC0DCFDD
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=12
Preview:	...............J.%.~...N.aO'Z.}.HH.Jd./mh.5c..C..[...[VV.@.xD./_+..`.S..I:...?...X.qN..Oy.'......`.."\..Ok.!...~.0........Z76A...k..j......?..N.y...-m.^....3.......M.o.....j._.h....OC...,..p.ok0.E..-.....r........~....D...]38..vE\|yW.............?}.....\|...........?~..?..;..._..G.......^.o.Z.........:f...i................_.............[\...6.....L~...................?C.........#...I.._..........I.bi.?.u..........a..t.....~..E..S...'.R..u\|.R2........t....8.......\..-.{:..#..<.G.)h.:.a.G....5....?..;........5..?)?..~......./.i.v......=..&...N........4...S...1.b.......s...H1..g......{..o.OC..~.oE...y...../.....s./Oa...u._n......o....7..1I.$........._..{.m.n...?:m......_~.c~.........%......Q._....?~.ZZ.A.tu7.............!........w..6.._.....G,...........yP....U}%3....u.].......KaiTerZg..2i.g......J......J.lu.lL[.._..#..!.....QA{.yV..._.xl4.0.H.?.l.....+t.......}.>...N?....D.....:..~K......M.....^.W...x.3....)T...)..e.V:...I.....f..K.f.E..i

Chrome Cache Entry: 369

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2236
Entropy (8bit):	4.03247489420685
Encrypted:	false
SSDEEP:	48:7eHj85Ox/evXhi9WAdr9dMV2ZaeL8Id9CmCdYVyCGq4xHUnzTH:KHj8Sevs0AdZs2dBd94Eydx8
MD5:	401F2AA30DACA46465A48F007E42D17A
SHA1:	8A6A9A765897914C6889ED16D4370DE277ED5745
SHA-256:	82134EA271CA7BA724D3B891A4A71C6F610FE9F2BCD6F02C08A2EFF0D6E71C69
SHA-512:	20F64ABAC810027C16BF2589B93FD430DC645398360F83BFD4835E93693D332A193B29D2502A874C028DEAD797C010A972A37B7008C419BB48B6E2D9CF789FFF
Malicious:	false
Reputation:	low
Preview:	<svg width="28" height="46" viewBox="0 0 28 46" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M0 13.9675C0 21.6845 6.25044 27.9349 13.9675 27.9349C21.6845 27.9349 27.9349 21.6845 27.9349 13.9675C27.9349 6.25044 21.6845 0 13.9675 0C6.25044 0 0 6.25044 0 13.9675ZM9.30583 10.7724C9.30583 8.45032 11.0518 6.47741 13.3215 6.16315C15.6261 5.84888 17.826 7.28054 18.4545 9.51534C19.0831 11.7501 17.9657 14.1071 15.8356 15.0325C15.3991 15.242 15.1372 15.661 15.1372 16.115C15.1372 16.761 14.6135 17.2847 13.9675 17.2847C13.3215 17.2847 12.7977 16.761 12.7977 16.0975C12.7977 14.7008 13.6183 13.4786 14.8928 12.9024C15.9404 12.4136 16.5165 11.2438 16.2023 10.109C15.888 9.00902 14.8055 8.29318 13.6532 8.45032C12.5009 8.62491 11.6454 9.58517 11.6454 10.7549C11.6454 11.4009 11.1216 11.9247 10.4756 11.9247C9.82961 11.9247 9.30583 11.4009 9.30583 10.7549V10.7724ZM12.2215 20.375C12.2215 19.3973 13.0072 18.6291 13.9675 18.6291C14.9277 18.6291 15.7134 19.3973 15.7134 20.375C15.7134 21.3353 14.9277

Chrome Cache Entry: 370

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	15822
Entropy (8bit):	7.9575799002181
Encrypted:	false
SSDEEP:	384:RCuVI4IrVf3dZRDmmGGjuEQeFmmOg52gbm:RdlOV/hmm3juEQeTK
MD5:	652A2382A1D4D1159BFFE5DD9C77877D
SHA1:	84B893FD39255950601DA0C8D65735D28E775892
SHA-256:	ACFA0CC8B42493333D9032C79E4D91D7BBDD40995A283A3945075DA6FB2F3CFB
SHA-512:	81D0806D8D2657E623F91824D44DC33F4D5375B96A1768B64C741E5A2CB02D443236F565763C38E651003BF81F4603569F506A5571B95CC05859E1D9D58517FB
Malicious:	false
Reputation:	low
URL:	https://asset.mtb.com/Documents/html/homepage/favicon.ico
Preview:	.PNG........IHDR...,...,........"....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:4CE2F5850C98E41191D88808CA6C83CE" xmpMM:DocumentID="xmp.did:089565F0984011E4B903D8EB7B2BD9E5" xmpMM:InstanceID="xmp.iid:089565EF984011E4B903D8EB7B2BD9E5" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4CE2F5850C98E41191D88808CA6C83CE" stRef:documentID="xmp.did:4CE2F5850C98E41191D88808CA6C83CE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.3....9.IDATx..].\|...?';$...g ..H..KPP..EQDf..Z[....

Chrome Cache Entry: 371

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450), with CRLF line terminators
Category:	downloaded
Size (bytes):	86929
Entropy (8bit):	5.289492706499139
Encrypted:	false
SSDEEP:	1536:aLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6ta:+kn6x2xe9NK6nC6E
MD5:	378087A64E1394FC51F300BB9C11878C
SHA1:	0C3192B500A4FD550E483CF77A49806A5872185B
SHA-256:	4FE68FA216176E6D1F4580E924BAFECC9F519984ECC06B1A840A08B0D88C95DE
SHA-512:	9A2C70516EA0C8C37C7F072F214DE0AFD5DDEB643C6B5D3FA8ADE3EF8D2CE40BDF8B1B1194BAD296E9075562701EE7DAE48B18144B1CD2D735328BE5A3ACCBE6
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/scripts/jquery-3.3.1.js
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)}

Chrome Cache Entry: 372

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3642
Entropy (8bit):	4.095780547380282
Encrypted:	false
SSDEEP:	48:CfcluCgoEpw5PLalCPXuCB2m8LITso1HZOhc82gnlUWw8sJMpPRE5RKrdJPA1P:ZoNaUsY7MhZOhcRWXJp+KrbIx
MD5:	64162792F9EC147554540ED572424594
SHA1:	E2BD6A8D112140A7E723344513148CE79B660448
SHA-256:	F705816329CFA4F34A2AA866E59B94FBA75628D0FFF1BD61450E0C2B9DD5DC15
SHA-512:	D4DF4E7F0273CD826A13812186A2FE10920E7D778FC6ADF82A1349C7B6399F9A2D1072238F77F307EF091C3029796976EC36DB2BCA0B51C1721A90DD51D1C2C9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 240.9 45.54"><defs><style>.cls-1{fill:#007856;fill-rule:evenodd;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M4.9,4.34H0v-2c.3,0,.6-.1.9-.1H12.6c.8,0,1.1.4,1.4,1.1,3.5,9.1,7.1,18.2,10.7,27.3.1.3.3.6.6,1.3,3.9-10.1,7.7-19.8,11.6-29.6H50v2H45.2c0,.6-.1,1-.1,1.4v36.4c0,1.2.4,1.6,1.5,1.5a24.32,24.32,0,0,1,2.7,0v1.8H32.6v-1.9h3.3c.6,0,.9-.2.9-.9V10.24c0-.1-.1-.1-.2-.5l-.7,1.4c-4.1,10.7-8.2,21.4-12.2,32.1-.3.7-.5,1.3-1.4,1.2s-1.2-.5-1.5-1.3c-4.1-10.7-8.3-21.5-12.5-32.2-.1-.4-.4-.7-.5-1.1-.1,0-.2.1-.3.1,0,.4-.1.8-.1,1.3v30.7c0,1.2.3,1.7,1.5,1.6s2.5,0,3.9,0v1.8H1v-1.8a24.32,24.32,0,0,1,2.7,0c1.1.1,1.3-.3,1.3-1.4V4.34Z"/><path class="cls-1" d="M132,11.54v8.1c0,.7.1,1.2,1,1.2,4.6-.1,9.2-.1,13.8-.3a8.5,8.5,0,0,0,5.6-2.3,9.82,9.82,0,0,0,1.8-11.1c-1.8-3.6-5.1-4.8-8.7-4.9-4.1-.2-8.3,0-12.4-.1-.8,0-1.1.3-1.1,1.1v8.3Zm0,21.1v8.7c0,.7.1,1.2,1,1.2,4.8-.1,9.7,0,14.5-.3,3-.2,5.8-1.3,7.5

Chrome Cache Entry: 373

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 67671, version 1.0
Category:	downloaded
Size (bytes):	67671
Entropy (8bit):	7.993457738975815
Encrypted:	true
SSDEEP:	1536:I1Houj8hOAJ9XPNV1t+/tSJhJaPnQCsq4rpYQbyLy:Idoi8/L1tktSJqPnQOUyLy
MD5:	6CD469E8613D82D4D07834A5CA7745F0
SHA1:	95347BA0A03D27E1AA91BC17C937D8AEFE53E6FF
SHA-256:	4029A5A081992259F4E529190B49DBBA893931DA4E843DD203449F1B9A4509D2
SHA-512:	A8467B45909EFCA7EF65DF6507ABAAC32F0F12C3F896DC9EE15A6FAE8CB0A4A30A0ADBB75E9541FB576CF796AC823C6502BD89234B88FD5D440F0939C84D06C9
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/assets/fonts/mandtbaltoweb-book.woff
Preview:	wOFF.......W...................w............GPOS...X...%...&P..[GSUB......._...2....LTSH...........'q..OS/2.......X...`j...VDMX.......{.....\.cmap..0.........Z..cvt ..6....D...D....fpgm..4........s.Y.7glyf..;8...f....&yk.hdmx...$..%q..Z...].head.......6...6....hhea.......!...$....hmtx...h...(....uWk.loca..6....H...H.M~.maxp....... ... .;.Jname..........?\...post...\|............prep..5..........U1............._.<...................&.../................x.c`d``............X.2.E...2..+..........#.X..._....................x.c`f.c..............f,apgtf``.fefaebbbf```g@.!............;100.a....0.$...i..R`...~...x..OlTU..{.....v..S.C;...R,RZ..2.R..H."Tb..P$.Q.7$..1&..Z....uCw....&.FV(..b.FCS...{.S. .~.........sF.K..R......\|..O....;...t.T.Q....P..FYw......w..q....w...5..c.........D.._...=..p.....w............Y..y..7.....h....k....._U....o.@.E?.9.....qZ..#.:......'....:..2..o.m.}.2....m...~.<'t.{Y.n.\|Zf.t/i...}.>...Q...W.E.{t^.u~.;.*.!.............=O\Fk.w..:w].6...d.

Chrome Cache Entry: 374

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2039
Entropy (8bit):	4.072281108290705
Encrypted:	false
SSDEEP:	48:Cq9UQCR0AvA3SrVzrc5rMFoPFVxpgvxJdxcwyjjRl5FVcFlOsvq:x9UQC253SrVnYM2tV7ebxcw6jRlVcFQd
MD5:	F2B901CF895852A0866FE4A16C7F1730
SHA1:	C4240AF1EC798477B4E65A185DDBB1B038817DA4
SHA-256:	5F5B0D9F678FE446631A33A4CBBE891A01B0ED972143702E67AE6617367096AC
SHA-512:	6199A217ECD4FDDDFF9221D6571069421D7308A150B42A0D9049615DCA4FD50BA977E4613E43BD5ECEFCA7CE3DEEB46AB18D7D1765C2C3E8020A12C1AC82C8C2
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/assets/img/mtb-logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 182 33" fill="#FFF"><path d="M112.16 15.72c3.66-.83 6.02-3.47 6.02-7.51 0-4.91-3.2-8.2-9.82-8.2h-10.7v32.44h11.07c6.9 0 10.61-3.24 10.61-8.76 0-4.41-2.64-7.23-7.18-7.97zM99.7 1.68h8.62c5.24 0 7.74 2.55 7.74 6.67s-2.5 6.63-7.74 6.63H99.7V1.68zm8.94 29.1H99.7V16.64h8.94c5.79 0 8.57 2.64 8.57 7.04 0 4.45-2.78 7.1-8.57 7.1zm22.33-21.41c-4.26 0-7.32 2.36-8.43 5.79l1.76.56c1.16-3.2 3.57-4.77 6.67-4.77 3.89 0 6.12 1.85 6.12 6.72v1.3l-2.97.14c-9.96.32-12.79 3.43-12.79 7.37 0 4.03 3.24 6.53 7.55 6.53 3.8 0 6.72-1.81 8.2-5.05v4.5h1.95V18.13c.01-6.07-2.96-8.76-8.06-8.76zm6.12 14.32c0 4.31-3.06 7.74-7.97 7.74-3.43 0-5.79-1.99-5.79-4.96 0-3.15 2.18-5.65 10.89-5.93l2.87-.09v3.24zm16.08-14.32c-4.12 0-7.18 2.64-8.57 6.3V9.92h-1.99v22.52h1.99v-11.3c0-5.98 3.34-10.1 8.2-10.1 3.8 0 5.75 2.27 5.75 6.72v14.69h1.99V17.34c0-4.82-2.6-7.97-7.37-7.97zm19.33 9.4l8.1-8.85h-2.4l-12.1 13.35V.01h-1.99v32.43h1.99v-6.76l5.1-5.52 8.43 12.28h2.27M63.24 8.75h1.98s-.02-

Chrome Cache Entry: 375

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4032)
Category:	downloaded
Size (bytes):	41164
Entropy (8bit):	5.424532191901861
Encrypted:	false
SSDEEP:	768:zz9AwzpiW2xSMwyRFUY4UYNkZkzA0xDjUWxROmvxhilKVCHD5AqQ:f9Awzp32xLzzt4tNkZJ0xD40R7VV6yb
MD5:	329EFE7A3EDED17EA31B4198F085A8E2
SHA1:	70284223805B78F3609F171616D086DEAF50ED3D
SHA-256:	1D97DDF1DB6022C95651401B95F865656DB767CF03CD612B00E419DE11984C53
SHA-512:	8B4EE54AD564D59ACEAB6FEA190FDD7E05883EB8BE97140743F382B59654447F96884C815E8EDCFC0B7675DEAB0ED7CAE52AF6E32B08BA40A8C974005B3EF1FB
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202311162210, Copyright 2023 Tealium.com Inc. All Rights Reserved..var utag_condload=false;window.__tealium_twc_switch=false;if(typeof utag=="undefined"&&!utag_condload){var utag={id:"mtbank.olb-legacy",o:{},sender:{},send:{},rpt:{ts:{a:new Date()}},dbi:[],db_log:[],loader:{q:[],lc:0,f:{},p:0,ol:0,wq:[],lq:[],bq:{},bk:{},rf:0,ri:0,rp:0,rq:[],ready_q:[],sendq:{"pending":0},run_ready_q:function(){for(var i=0;i<utag.loader.ready_q.length;i++){utag.DB("READY_Q:"+i);try{utag.loader.ready_q[i]()}catch(e){utag.DB(e)};}},lh:function(a,b,c){a=""+location.hostname;b=a.split(".");c=(/\.co\.\|\.com\.\|\.org\.\|\.edu\.\|\.net\.\|\.asn\.\|\...\.jp$/.test(a))?3:2;return b.splice(b.length-c,c).join(".");},WQ:function(a,b,c,d,g){utag.DB('WQ:'+utag.loader.wq.length);try{if(utag.udoname&&utag.udoname.indexOf(".")<0){utag.ut.merge(utag.data,window[utag.udoname],0);}.if(utag.cfg.load_rules_at_wait){utag.handler.LR(utag.data);}}catch(e){utag.DB(e)};d=0;g=[];for(a=0;a<ut

Chrome Cache Entry: 376

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 377

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.853983828113341
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKOSyMZrHwJYgWaee:PLKdXNQKOSphwugL
MD5:	E43ED69C73D3D702C3E4533A337D5A1A
SHA1:	88BAA0D1308FB899F418628F69394B9583BE9B34
SHA-256:	54D175FBB376B467B47A444346899169D7F8FFF30CC0DD3895C98CB647329AFD
SHA-512:	B38690F1A677251738641C4E3F3DE4184CCFA516EA900707E9B462D1D69839431D177DEC833CCD8A967587D9C0ADF333F1D9A519E3C2658022CFBAA1FFAE8884
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js');

Chrome Cache Entry: 378

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 66170, version 1.0
Category:	downloaded
Size (bytes):	66170
Entropy (8bit):	7.99148187403838
Encrypted:	true
SSDEEP:	1536:11757u2MtOeMXMs2VhUnurR2YufI6tB6mo+b:1dpu2MOeaCVhU0RYd6mo+b
MD5:	2C232501B80100AC5022CB84380A6DF4
SHA1:	79898C6B15D379850157A7B44D55D8694EB54B1F
SHA-256:	18C9C9A98B2A0DE85FB63E8FC0FBF0DD575B45D76CFDD22220F4C7D9CAF0B99A
SHA-512:	5E30D384A6BEA096863AC023A1DA2AC0B18DE4C4C4EC84DD4F7202F66E3AF3AEED16B337C6953C4C9E8494F4384B5415E062CD80EABB4552ADCFA944E9AFAA3B
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-light.woff
Preview:	wOFF.......z.......X...........v............GPOS......'....bI~.{GSUB......._...2....LTSH...........'B...OS/2.......X...`i..\|VDMX.......t.....j.cmap../.........Z..cvt ..5....J...J....fpgm..3........s.Y.7glyf..:8...+..W.;.m.hdmx......$x..Z..7.head.......6...6....hhea.......!...$.a..hmtx...h...1....2ik9loca..5....H...Hsw..maxp....... ... .;..name...d.......B...Upost...@...........prep..4............g.........X.._.<...................,...3.s..............x.c`d``...........{Y...".I.....I........#.X..._....................x.c`f...........`../.f,ePg.e``.fafaebbbf```g@.!............;100/d8...0.$...i..R`....>..x..mH^e....}.i...M.K....:......Bnh.z......Y.Q.......C...B...C....#....Ec..X....~..>....0...>............k..T.KU._U.;..}.[}.J...=.......W.)_.N.......zu.?u._.j..-...h......=.M<.....T..3.+.!5..Y_.._.rt.."U....@W.*....1....wA..1......4N..X.\|.n.......:.N..a.J...1N.,.=a......7...w.4z.o..F.C.......2.......ew.F.<..w..nS...)..e.wK.G.].[..-.]Gw.,.q.-..N/s..Y..>R.?.M.k....

Chrome Cache Entry: 379

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (941), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	18126
Entropy (8bit):	5.293067114592975
Encrypted:	false
SSDEEP:	192:PIlYLuD24ySylykC5YDSjsjBxs9vnMv6T8e5klIqEZr2lFqkWziZWvH6:PIlYLuC4yFykPss7slnMzeDDkOoWv6
MD5:	88165618E2FF2312FB7478214FB977BC
SHA1:	71B2A01ADC985BCBA359046457940F3AB7F840E9
SHA-256:	1CEE820897C50625E7AE2B5D943E0F840EF5DEB75A4D0305960291597A15CD4B
SHA-512:	17F1B3117D4ED52BBFFC793E56849C277E6667E47675784C1A0A4B8EE7ED334CF7722BB7683CB7C668BF908734403FFCF02AF43E897284A691237E5BE663E232
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/Enrollment
Preview:	..<!doctype html>..<html lang="en" class="__sticky-footer">..<head>..<script type="text/javascript">..(function(){..window["loaderConfig"] = "/TSPD/?type=20";..})();....</script>....<script type="text/javascript" src="/TSPD/?type=18"></script>....<script type="text/javascript">..(function(){..window.NWDX=!!window.NWDX;try{(function(){(function z_(){var s=!1;function _(s){for(var _=0;s--;)_+=l(document.documentElement,null);return _}function l(s,_){var O="vi";_=_\|\|new L;return Sz(s,function(s){s.setAttribute("data-"+O,_.O5());return l(s,_)},null)}function L(){this.IO=1;this.Lo=0;this.lj=this.IO;this.il=null;this.O5=function(){this.il=this.Lo+this.lj;if(!isFinite(this.il))return this.reset(),this.O5();this.Lo=this.lj;this.lj=this.il;this.il=null;return this.lj};this.reset=function(){this.IO++;this.Lo=0;this.lj=this.IO}}var O=!1;.function zz(s,_){var l=document.createElement(s);_=_\|\|document.body;_.appendChild(l);l&&l.style&&(l.style.display="none")}function Zz(_,l){l=l\|\|_;var L="\|";funct

Chrome Cache Entry: 380

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 348 x 441, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	229468
Entropy (8bit):	7.987690749698196
Encrypted:	false
SSDEEP:	6144:JYsZ46pMzDegTfmoGtN3+uaLoX3zqrZDbvhxaLNWrq7z:JYa4igeQ4NOpoX32rR+LNOG
MD5:	70AD94B75DFD85EDF2838FF874064EE0
SHA1:	CB039EE7E3891762FF9A18A39F876EAF84049DC2
SHA-256:	6D22EAC589D45BCC1B34CE347A26AD1B1B9B30AE2C395744E0BEACEA2D083D5F
SHA-512:	5EBA9C879452AB1F2DBCF24142CCB86DE6036CE71D3E1793DFC3E54C77FC4CF5E01BBD1AA5D76DB6F297519B15FE7B757A8114EB6EBB4F960587465C8A8A45A8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2020-04-16T22:06:11.750Z". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Comments="XML:com.adobe.xmp: <?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-

Chrome Cache Entry: 381

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1440x650, components 3
Category:	downloaded
Size (bytes):	99062
Entropy (8bit):	7.838108637718474
Encrypted:	false
SSDEEP:	1536:wHE+gm6/H4QVApSrwIlBF1xcyOc7pATco5zOdXbyxnbIDGl0:wEm6f4Q8IvxcV8o5zeXblGl0
MD5:	1B04D2B352A06662954F38522F2596AF
SHA1:	F33145BD443F5DEA9975E2AA5245C48DB6B5889A
SHA-256:	BF1C3D3C93EDB5011E8F8B9002275C4BA13F028B733C089D7528CD51DFF4C63A
SHA-512:	95A0725E1375B8AD63E52D08596646021BD3CA29A09F27915FBE4FD0B4352B04BB96E0C362000078FBC2831DC586CFC4F85364D5EE578A4BCFCE2B923EF41463
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/personal-home-page/mom-daughter-couch-desktop.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...Njm.5..NjkP.[.P....QE..@.......O.-Qs@..d....i.......c.......U....U..(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...+..~.W....+......e.h.>?......o...J.n.aU^.@.j......gV...\|_...2..O.v.

Chrome Cache Entry: 382

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (855)
Category:	downloaded
Size (bytes):	3993
Entropy (8bit):	5.1929458948885445
Encrypted:	false
SSDEEP:	96:EGeShXq80Qns9Inac4S+YYlzqyvjGUGFTfyO2fVIOOU:EGeSYys9I4zqyoKO2fVIOOU
MD5:	6A27E663482A2E07E1C59A49FA8B8D4A
SHA1:	B83E643E8F0A9A60D977829150BC3C90DB86545C
SHA-256:	A933931BC97EE4FF187084307AF1861F8A4BE3B1018417B1992FA376F5AAB190
SHA-512:	42875FB7EF60DB3692475832E290A9140DD341D69A11D5779E5363FC01D7704539B2D6836342522C16B49F8AB2787365B55B7C6AFA66EF9D660A9FC352EE2BCC
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.42.js?utv=ut4.51.202106282113
Preview:	//tealium universal tag - utag.42 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved..var dotq=dotq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;u.ev={"view":1,"link":1};u.initialized=false;u.scriptrequested=false;u.queue=[];u.map={};u.extend=[];u.send=function(utag_event,data_layer){if(u.ev[utag_event]\|\|u.ev.all!==undefined){utag.DB("send:42");utag.DB(data_layer);var a,b,c,d;a=utag_event;b=data_layer;u.data={base_url:"https://s.yimg.com/wi/ytc.js",projectId:"10000",pixelId:"10108773",coloId:"SP",qstrings:{},tagid:"",et:"custom",ec:"",ea:"",el:"",ev:"",gv:"",product_id:[],timestamp:"",advertiser_id:""};utag.DB("send:42:EXTENSIONS");utag.DB(data_layer);for(var mapping_key in utag.loader.GV(u.map)){if(data_layer[mapping_key]!==undefined&&data_layer[mapping_key]!==""){var destinations=u.map[mapping_key].split(",");for(var i=0;i<destinations.length;i++){u.data[destinations[i]]=data_layer[mapping_key];}}}.utag.DB("send:42:MAPPINGS");utag.DB(u

Chrome Cache Entry: 383

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1502)
Category:	downloaded
Size (bytes):	11791
Entropy (8bit):	5.141012196143746
Encrypted:	false
SSDEEP:	192:sbFnNojImVVMyK3TXXUcgbRmYa0+GH7CjxC8f3UzNOT5Qad9FMjnAuXBu4P5BalY:slNsImVVMyKDJgFACow8f3UiZCLjV
MD5:	059D82EC7480E5B4097C28AE7EA4DA81
SHA1:	AD6E70FE5B168E87E3A6586AAA4E7BF4A192BD27
SHA-256:	426ED7ACCA0014971F68D93C72C912AEA95E3546F036DDA0D4CF850B3F959F62
SHA-512:	C815051E0EB19F31304BA6F3E3CB219D1F29C7A750830AB4EB9BF7DAFF25ADC9BA459AD8728255745E804CDA641F27AAEA884B02D8070D94D20CDC0D171A6ADE
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.8.js?utv=ut4.51.202212232259
Preview:	//tealium universal tag - utag.8 ut4.0.202311162210, Copyright 2023 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechang

Chrome Cache Entry: 384

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/875517505?random=1710377852917&cv=11&fst=1710377852917&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 385

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	557
Entropy (8bit):	5.525513260787853
Encrypted:	false
SSDEEP:	12:TMHdwNMuNi/nzVW/KYf3UoJKHZhwTx4DWhi8s:2dluNAALfE15hMx4
MD5:	8BFA2029047333603AE4FC0752D62AC6
SHA1:	309389A0D3FAB9C6D685B1492B0044B94F888C66
SHA-256:	C66A977BFB81313D7313A9F20D683EA271620851AA89487805B0E91C4FA73A9D
SHA-512:	C65BD8E40336FB799582ACC4B522DC009EA16271CFA76B5953BB4B0DCC120BA600592A2480F1C3C9633F9631D2339C2B3DEFF28F60AB7FFC503C77FEB19123EF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 58 58" style="enable-background:new 0 0 58 58;" xml:space="preserve">..<style type="text/css">....st0{fill:#007856;}..</style>..<path class="st0" d="M16.2,42.6h34.6c2.6,0,4.7-2.2,4.7-4.7V5.6C55.6,3,53.4,1,50.8,1H6C3.4,1,1.2,3.1,1.2,5.7V38v4.6V55l13-12.3...L16.2,42.6z"/>..</svg>..

Chrome Cache Entry: 386

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 9488
Category:	downloaded
Size (bytes):	3248
Entropy (8bit):	7.930452119546587
Encrypted:	false
SSDEEP:	48:XbP1FMEjJwzl+UjrFWc4uuJUW9z4RumRQF9Nk+r/EwwFbmNWw4KmMlYu7TtMA56e:rP1KEjJqdsc0JvM9o9fpwFa09Ij7TWNe
MD5:	AC839D03ECC942C02C37D84144318EDD
SHA1:	7CBC479C56EF39158985A19024F6F5D703D4E66D
SHA-256:	8C4C2FAE5279738659B56BFB3D1AABB4C752A2868241C9EC6AFA991ED081090E
SHA-512:	97929D23241683E6C8A65E465D37A1764C71D248CBF0B517D985B35F8DB019F7A9346A55B396EA68674CAA41DF22F65682681298E358102BEADF910502022A95
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/TSPD/?type=18
Preview:	...........ZmS.F..._...J...]......r.S....2X....,y.........@.....#.4........r..\|..?~.g.........A..,/.l....~.J0.4_...>...V.....F.......PO.Q.-V....<.o>.)].r..z.N.......\+X"..D.OY?L...q.~..........vqT..we...7e....r~..LXr4q4.YG2....5..Uy..G.....n..6.]~..wr.......:...+..E.f..~V.5[f.NM.u%...Sl@.b...5..Y.\|W....f..<..w:..~{..T<..k.^.6....t^....4T..\|.......m.\\|..............M..-..6..G..j..;..VZ.r.!....$$..Q.......G@.m...X.%..fa......c........W.M..8.g....zC.W ....%.+}2...Y\....n.km.o.,.-.......(."-.Y^...y.`...f...u....z..b.u.].)......W<.7.l...........9+V..E...\|../?..A..l.++..E.V...fY.......P .Dw.b.O.>......[b......._J...BKt}w....h......3FD....%Cg...j}pZ......;.;k......b...>......u.T.0.#M..l.W.F..).B.+...//.....~.q.P.............?lk..@\.P..5....,3..W....TlTES.4.~..[...}9...9...4..[?1..%b..F^..c.Y..4.[M#..z:3.p5}.S....>..D....V+.i.....!..z.%...:>..dJ..mH.\|...x;.C..........'......P%..M.E..........[.2....a.>\|.UuV...D.....#..QY".n.'g.!..S...`v..+F.X^.].

Chrome Cache Entry: 387

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 83, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5235
Entropy (8bit):	7.333185650997289
Encrypted:	false
SSDEEP:	96:PvXkucJNWNCxwYenbnYdei6sYfiSRfPnSbVSdX5uG2MqmxefHgSPx12I648IbXQn:Pfk1fsCxwYenkbY/NnSbVSxyPD2z48tn
MD5:	1314C26C1DB30595DEABC7E7CE73A143
SHA1:	E0697C410E75838981EC13D1F64D9885C58B95CF
SHA-256:	AC2A3FAD1DF522EAEBC212276131CEC5EED994C3C8CF129707710430BB5246C0
SHA-512:	AF46036A62D4ADCDA1CF5328850499656F94D6CE41C09C4A430268312434B46D6AD13C77D91A3FA05B818B2A3FAEC638F8C6E67D357A9C350C3D72DF71CFC5C5
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/personal-home-page/deposit-checks.png
Preview:	.PNG........IHDR.......S.....W..J....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2020-04-10T16:23:36.886Z". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Comments="Software: Adobe ImageReady XML:com.adobe.xmp: <?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpme

Chrome Cache Entry: 388

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21842
Entropy (8bit):	7.880618412501832
Encrypted:	false
SSDEEP:	384:eRjnvlH7aaqky0LIMHKyN2RAMesm2FR1fFv1KUHRam+gT9V7BcCMyAlpZ:Sjn17aEy0Uix2RAMemR1Tkm+gT77BcCu
MD5:	1E1D02E141E89A4C45D9C0AA5530BC3A
SHA1:	970E63270CE5FD36C51C3B25724B7B37F014F760
SHA-256:	4AB56BFC693E75FBC52DE80072DCBCD412EFE057DCC099C9B718FB6F85EE129B
SHA-512:	144E8C43FC0FA9B358D71E486C36FE7D3746E1F8A557A1AF6D17832FF8105FB10E92FB86F89D3BAAFCA1572DBC76EF8BA6C7363C6989B6B23BF13AAF4A133D53
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X.........4.....U.IDATx...XTG......k.]c..{.B..{.....K[..Ko".."..(.1.XbL.g...io....73ww..d....{.y@..3....3.P....................................................................................................................................................................................................................................................................................................................................................................................................................................jG.P...[....v+.Z.{..{...M.]..&.R,.....c.....QA..(..........a........^.......-.32V..s.D.L.. ....A.p.......j.. ..I.X.....9...RX.g..FO.[.F/Q..Y_/4........?.>y.}...6.j...pw..Y`}.&=....WX...........~?./....{...Du7l....J...(...k.....=.....P.....h..UjR.u\|.Mf.th...c..?.:...a..<...dt.s...X.).>...{...z0...bVN.....\|uN.J.;..K...d.$.g...........<}h......Rm.Z.G.i.:+>..z?...'.5z...e.R......&E......3.+.....WF`=D..Zy.e.......O..g.

Chrome Cache Entry: 389

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1473
Entropy (8bit):	4.381350537716321
Encrypted:	false
SSDEEP:	24:tAd2Zu/dkHGSdkHRJRSdkHcGid6agCtUMp0GQnA6xjSPIroREwCySmPtum5RV9zA:qcIUl2KgqrQA6YPvRJZlumHV9zCukV
MD5:	BAA94A4A3579B083238E95BB192E964B
SHA1:	448E73B3E57DFC5D9EE2FE2C5F6EA67FBD7F647C
SHA-256:	93408940D1F3117F4684536D8EFB0C77C24CD7806EB01B2127CE3925554F09CC
SHA-512:	EB5C8AC5FBE5CBBCE9D0EFD864ECBD80DDE5EEDC71A806DA33968B86C403EF90856C0A8870B06EE122F15ACA7286C5B533D219D3803D1DCA55E70E77E5B2A0D7
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/icon-global-nav-hamburger-menu.svg
Preview:	<svg width="42" height="46" viewBox="0 0 42 46" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="42" height="4.72662" fill="white"/>.<rect y="12.0314" width="42" height="4.72662" fill="white"/>.<rect y="23.2034" width="42" height="4.72662" fill="white"/>.<path d="M8.86386 43.1081V35.5241L11.6959 43.1081H12.4399L15.2839 35.5121V43.1081H16.0399V34.7081H14.8879L12.0919 42.2441L9.28386 34.7081H8.14386V43.1081H8.86386ZM20.1758 43.2761C21.1238 43.2761 22.1438 42.7601 22.6358 41.6441L22.0118 41.3801C21.5198 42.3281 20.8958 42.7001 20.1878 42.7001C18.9638 42.7001 18.1718 41.6921 18.1718 40.2521V40.1921H22.7078V40.0601C22.7078 38.2361 21.8078 37.0721 20.1398 37.0721C18.4838 37.0721 17.4158 38.3561 17.4158 40.1441V40.1921C17.4158 42.0281 18.4958 43.2761 20.1758 43.2761ZM20.1398 37.6361C21.2558 37.6361 21.8678 38.3801 21.9518 39.6521H18.1958C18.3638 38.4521 19.1078 37.6361 20.1398 37.6361ZM24.6811 43.1081V40.1321C24.6811 38.6681 25.4731 37.6721 26.6851 37.6721C27.6211 37.6721 28.0651

Chrome Cache Entry: 390

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	788
Entropy (8bit):	5.375877884099894
Encrypted:	false
SSDEEP:	12:TMHdwNMuNi/nzVW/KYf3UWQy8WRNoy8HZh+7tpOvitHqz/L1CQbq:2dluNAALfEOd85h+L5RgCZ
MD5:	DA9A3A337A2249CB172F9B0459EB4A9A
SHA1:	D9F93362439A3F182341BB7A7158748E88CF7B9A
SHA-256:	2A5A27287DF0EA741067AB07CDD87519F149B9443851A7408610009E677C6980
SHA-512:	FA6134A5563B48571B5D146B7DED790C766DE2FFC44A79F5C50E372576EB9EC0CB3E1C6FDF7EF0C97797B9097AA2367C6F329F7F4C654D8025274493716F609B
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/svg/icon_location_green.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 395.7 395.7" style="enable-background:new 0 0 395.7 395.7;" xml:space="preserve">..<style type="text/css">....st0{fill:#007856;}..</style>..<g>...<path class="st0" d="M197.8,9.9c-71.9,0-130.5,58.5-130.5,130.5c0,69.2,118.4,231,123.4,237.9l4.7,6.4c0.6,0.8,1.4,1.2,2.3,1.2....c0.9,0,1.8-0.4,2.4-1.2l4.7-6.4c5-6.9,123.4-168.6,123.4-237.9C328.3,68.4,269.8,9.9,197.8,9.9z M197.8,93.6....c25.8,0,46.7,21,46.7,46.7c0,25.8-21,46.7-46.7,46.7c-25.8,0-46.7-21-46.7-46.7C151.1,114.6,172.1,93.6,197.8,93.6z"/>..</g>..</svg>..

Chrome Cache Entry: 391

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1349
Entropy (8bit):	4.193398232602312
Encrypted:	false
SSDEEP:	24:t41lFt9unBfUGOhNmaFQ1vP+nr+c90wSpWXNeT7eYFUCFTY94/s7Hi:CR9JJbmaW1vHcZSpWS7eoUGU9+
MD5:	9A569AD20708D7453D89FE6C72E7FCDC
SHA1:	60B6A41620583484642F7C826FAF8E3C879A6374
SHA-256:	B2EF3BD17AA6BC2DAA7B1209F7848B30C64F3068E43162B09A216639AB430CE5
SHA-512:	593BBBA69EE4B582001515DFC425CB306D5B8A10895FAA48F366934DA79AB12770C8D4F6034DF647B8853CF94560D41B467708BE674D4392B06D08701B0D99C1
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/assets/img/mtb-entrust.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 634.7 148.5" fill="#767676"><path d="M0 146.2h84v-37.7H43.2V92.1h37V54.5h-37V40.2H84V2.5H0m160.9 29.6c-13.8 0-24.6 11.4-28.6 23.5l-.4-.5 1.1-20.7H91.5v111.7H133V92.4c0-11.4.6-19 8.7-19 7 0 7.6 6.8 7.6 16.3v56.5h41.5V72.5c-.1-20.1-6-40.4-29.9-40.4zm145.6 24.1l-.4-.4 2.3-21.4h-61.2V9.8h-41.5v24.7h-11.9v33.2h11.9v78.5h41.5V67.7h19.5v78.5h41.5v-45.3c0-11.6 1.9-26.4 17.4-26.4 2.9 0 7.8 2.1 11.6 4V32.1c-15.4-.6-26 10.4-30.7 24.1zm96.3 38.3c0 13.6-.8 19.3-8.2 19.3-7.2 0-8-5.9-8-19.3V34.4h-41.5v65.8c0 30.5 17.4 48.3 49.5 48.3 30.5 0 49.8-15.2 49.8-48.3V34.4h-41.5v60.1zm99.4-17.1c-4.4-1.7-12.5-4.7-12.5-10.4 0-3.6 3.1-5.5 6.1-5.5 7 0 12.5 5.5 17.4 9.9l14.2-30.3a73.6 73.6 0 0 0-34.1-9.1c-26 0-44.9 14.6-44.9 37.7 0 19 12.9 27.5 29.2 33.2 7.2 2.5 10.8 4.8 10.8 8.9 0 4-4.5 5.7-8 5.7-7.6 0-15.9-6.4-20.7-11.6l-15.2 30.9a79.2 79.2 0 0 0 40.2 11.6c23.1 0 44.7-14 44.7-39.2-.1-18-12.1-26.1-27.2-31.8zm84.9-67.6h-41.5v24.6h-11.9v33.3h11.9v78.5h41.5V67.7h1

Chrome Cache Entry: 392

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2332), with no line terminators
Category:	downloaded
Size (bytes):	2332
Entropy (8bit):	5.858557657929915
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt083RNaSRQZOfYKW06:wsbSUtJfxrqLWWWdV6j1TRNaQM
MD5:	C429090F638358F8BC8C241395A5537B
SHA1:	0125A9BEE39FCB23457E0E01E4FA07943801C6BD
SHA-256:	351E1010EA866CC8AEABD8C93A51F8B2B8A961ECC5E390B025580405DAF999E2
SHA-512:	828EC7DF081244DE75A4C614F249C843B5CE8CE44F815273F93006042160C0DF32F65AE78D130D1513DBB93CEE1C3D94600B5EE2C6357E1542137A46F957D14E
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/875517505/?random=1710377852917&cv=11&fst=1710377852917&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 393

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2392
Entropy (8bit):	4.921279958271143
Encrypted:	false
SSDEEP:	48:cK0j0xA09J2J1e4Hocpr3J4nZJlJJLJpQDtQI1x:c0xjfS9InNnmJX
MD5:	F7A8C8E0B985DA44B804D5B300BE2BA3
SHA1:	DDD1EF46A018F7E29BA21FFE326A6C971EBD75D8
SHA-256:	8F4FE69C9E8381E804C98C661C5668EF738141085131DB24AA1F2B588C7AC900
SHA-512:	D6A349A9612BA3935AD205A7102001CBA3DC5CC8B121831C7875F6151A3C00FD9519D29963369AC356A8EEB5FE10EF4BC9E90498FD035EC8D1D03262B6CD16C8
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/online-and-mobile-services/icon_devices.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="64px" height="64px" viewBox="0 0 64 64" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>icon_devices</title>. <g id="icon_devices" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round">. <g id="Group-3" transform="translate(0.000000, 6.000000)" stroke-width="2">. <g id="phone-action-disable" transform="translate(42.378378, 12.972973)" stroke="#80BC00">. <rect id="Rectangle-path" x="0.772200772" y="0.810810811" width="20.0772201" height="37.2972973" rx="2"></rect>. <line x1="20.8494208" y1="31.6216216" x2="0.772200772" y2="31.6216216" id="Shape"></line>. <line x1="20.8494208" y1="7.2972973" x2="0.772200772" y2="7.2972973" id="Shape"></line>. </g>. <g id="desktop-monitor" stroke="#077E5A">. <path d="M34.9561736,37.2702703 L3.0

Chrome Cache Entry: 394

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.538909765557392
Encrypted:	false
SSDEEP:	3:iKR+8oUbxn:iKM8oqn
MD5:	354CEB4237CD8E1618D6547207E6AE3D
SHA1:	C93EB0B7FD6953112F5E93A478D633DBF2B08448
SHA-256:	775BA5BAC59407F4B19ABAF36F79315AB955D1917EAA01BAAB9ED413F6580536
SHA-512:	D9A26FA30ACB2A1A6637D088CF1F5075EA5101264150A755FC537C438ED00890FA7D888E35A5DB3FDF9E597329CD477AE3C136B5F1D29251CA61574E7D17B4D5
Malicious:	false
Reputation:	low
URL:	https://54.156.2.105/is
Preview:	y6/4gjwN+t2Zv6fZL3kOwkJTACfroGv6

Chrome Cache Entry: 395

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 556 x 629, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	511124
Entropy (8bit):	7.998631840130318
Encrypted:	true
SSDEEP:	12288:kpL7Z/q+okEgzh35Rko3gixsv0sHJbjzHml/kDMsA:kJ7ZikRzh35Rko3B+rHml8DMsA
MD5:	64E4C107A64320C9C5D206261DBFF46F
SHA1:	7D300077A41E7DD189D529966551DD58E89714C2
SHA-256:	D49445031649D11B4D57F5DD83E366980D48ADC0DE7F84BBD72566BA2B76CD31
SHA-512:	2B555747FCE9637C6CC19C7F14556FC8C281B637AB3650C43FEF95DB64278652E4D9BA5246BC28936C15C93F36DEB94F3D2010914109AF54F9CE5FE3BA3501ED
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/faq-component.png
Preview:	.PNG........IHDR...,...u.....u.<.....gAMA......a....8eXIfMM........i...........................,...........u..........@.IDATx...%Ir.w...D.....`.b.'...w..K3rI.]............G..~..7...j..h.Q..Dzxx.{xx.........p8<..u...@..`w.W.hM...D...0..6..`$.[J.+..\.N....../,~.....`.....K..Iw....5.T.........no.W77................f4...<.g4...2^.>...?..GO....\|..O'P ....w..z.....a3.\.,?>?}:].'#.<..77.W.....2..'..>...G...d<;....l0.@s4.........pa.."m..E.....:C...[s.%t. .48.E...~..HU{....[-..9...........I./~#............l...@..}n....^8D.6.$...~.........._.{j.p.N.@.a2..N...t>....a{...6..f..,N&.....Yw..J>....v.[.:.bG....QF.<$..z.....~....K... lwk........G.jp8<.P...& I.oL..0..w#~.........a.........................l.<;]....l../..b.....l6;_....\|<..g..\|.X.....d..X8JB..".2n..6..`..0b.>........vp...........J...J......)E..J.R..Z$.;..,........0.%;..=.6...w..wg..f..^o...0.5...{.Q.v.....(...1..............$..,!Z....F.jL.....}..o.'....H.F..7..By.y..p']..v......pB.7..\|....K.....

Chrome Cache Entry: 396

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm3BOhRZfuRihIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 397

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2039
Entropy (8bit):	4.072281108290705
Encrypted:	false
SSDEEP:	48:Cq9UQCR0AvA3SrVzrc5rMFoPFVxpgvxJdxcwyjjRl5FVcFlOsvq:x9UQC253SrVnYM2tV7ebxcw6jRlVcFQd
MD5:	F2B901CF895852A0866FE4A16C7F1730
SHA1:	C4240AF1EC798477B4E65A185DDBB1B038817DA4
SHA-256:	5F5B0D9F678FE446631A33A4CBBE891A01B0ED972143702E67AE6617367096AC
SHA-512:	6199A217ECD4FDDDFF9221D6571069421D7308A150B42A0D9049615DCA4FD50BA977E4613E43BD5ECEFCA7CE3DEEB46AB18D7D1765C2C3E8020A12C1AC82C8C2
Malicious:	false
Reputation:	low
URL:	https://resources.mtb.com/Assets/img/mtb-logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 182 33" fill="#FFF"><path d="M112.16 15.72c3.66-.83 6.02-3.47 6.02-7.51 0-4.91-3.2-8.2-9.82-8.2h-10.7v32.44h11.07c6.9 0 10.61-3.24 10.61-8.76 0-4.41-2.64-7.23-7.18-7.97zM99.7 1.68h8.62c5.24 0 7.74 2.55 7.74 6.67s-2.5 6.63-7.74 6.63H99.7V1.68zm8.94 29.1H99.7V16.64h8.94c5.79 0 8.57 2.64 8.57 7.04 0 4.45-2.78 7.1-8.57 7.1zm22.33-21.41c-4.26 0-7.32 2.36-8.43 5.79l1.76.56c1.16-3.2 3.57-4.77 6.67-4.77 3.89 0 6.12 1.85 6.12 6.72v1.3l-2.97.14c-9.96.32-12.79 3.43-12.79 7.37 0 4.03 3.24 6.53 7.55 6.53 3.8 0 6.72-1.81 8.2-5.05v4.5h1.95V18.13c.01-6.07-2.96-8.76-8.06-8.76zm6.12 14.32c0 4.31-3.06 7.74-7.97 7.74-3.43 0-5.79-1.99-5.79-4.96 0-3.15 2.18-5.65 10.89-5.93l2.87-.09v3.24zm16.08-14.32c-4.12 0-7.18 2.64-8.57 6.3V9.92h-1.99v22.52h1.99v-11.3c0-5.98 3.34-10.1 8.2-10.1 3.8 0 5.75 2.27 5.75 6.72v14.69h1.99V17.34c0-4.82-2.6-7.97-7.37-7.97zm19.33 9.4l8.1-8.85h-2.4l-12.1 13.35V.01h-1.99v32.43h1.99v-6.76l5.1-5.52 8.43 12.28h2.27M63.24 8.75h1.98s-.02-

Chrome Cache Entry: 398

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1143x936, components 3
Category:	downloaded
Size (bytes):	35941
Entropy (8bit):	7.676169688347568
Encrypted:	false
SSDEEP:	768:p445H1AchiwVnef0T9VoYJ15Ksb3vtJB+XgdwM:p1H11nOAMYncsr5+wWM
MD5:	C039D276048F907AE089ACA27E5BAFC2
SHA1:	8F289482059C3916735754DF29F4B38825F77AFA
SHA-256:	D07F9791EC5F56EB6BB614CB03035F7E7FEF8928BA85FD8AF5C62BF747E93487
SHA-512:	093EE28162C2B7AA0AFF740D2F1E16A6FED02AC3B1304F2EECFFCBB4085A8BA4EDD071C5C8C115F81A7B5C31DB92A9E3072A9328BD300EC9D6998E1D7A9313C1
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/guy-on-phone-green-bg.jpg
Preview:	......Exif..II*.................Ducky.............-http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.0-c000 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:F9B54F2B015511ED914CC70D88F25953" xmpMM:InstanceID="xmp.iid:F9B54F2A015511ED914CC70D88F25953" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0F890FB38D9911EB8B10DB8E84C7CB4A" stRef:documentID="xmp.did:0F890FB48D9911EB8B10DB8E84C7CB4A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.........................#....#"....."'.#!!#.''.030.'>>AA>>AAAAAAAAAAAAAAA................!....!1!!$!!1>-''''->8;333;8AA>>AAAAA

Chrome Cache Entry: 399

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1003
Entropy (8bit):	5.074973783684035
Encrypted:	false
SSDEEP:	24:2dvA6LfE4E5hQxrSkpVnIpQKAMRuo9xjcgj:cvA+fE4E5hQVXpVIpQQuo92gj
MD5:	DCCB46253CD76C57D5140301379E0103
SHA1:	85FD9AB50A83195B4EBF6F46EE279A578E17344C
SHA-256:	489F8E84A07712B0E5593C1E30EF7DC3BD3B6047BCCF4C23924FD7009A65D666
SHA-512:	A60CE2769961788A1C4E74CB17E9603C41885EFC1984A48F3565CB8576C9484333D0CA3A43A0B7DCA2C29A6A18537D08D12501099B6CA041998E7C0629A3654D
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/wcm-asset/documents/html/homepage/images/assets/icon-phone-dark-green.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 26 25" style="enable-background:new 0 0 26 25;" xml:space="preserve">..<style type="text/css">....st0{fill:#007856;}..</style>..<path class="st0" d="M3.1,0C4,0,4.7,0.7,4.7,0.7C6,2.2,6.5,3.5,6.5,3.5c0.6,1.4,0.2,2.3,0.2,2.3C6.6,6.4,6,7.1,6,7.1...C5.8,7.4,5.4,7.8,5.4,7.8C5.2,8.7,5.5,9.5,5.5,9.5C6.1,10.8,7,11.8,7,11.8c0.8,0.9,3.3,3.3,3.3,3.3s2.4,2.4,3.3,3.2...c0,0,1,0.9,2.3,1.4c0,0,0.8,0.3,2,0.1c0,0,0.3-0.1,0.7-0.5c0,0,0.7-0.6,1.3-0.7c0,0,0.9-0.5,2.4,0.2c0,0,1.3,0.5,2.9,1.7...c0,0,0.8,0.6,0.7,1.5c0,0-0.1,0.6-0.6,1.2c0,0-1.4,1.9-4,1.7c0,0-2.4,0.1-5.4-1.5c0,0-1.7-0.7-4.5-2.8c0,0-0.8-0.6-3.6-3.5...c-2.8-2.8-3.5-3.6-3.5-3.6c-2.2-2.4-2.8-4-2.8-4c-1.7-2.9-1.6-5.1-1.6-5.1c0-2.6,1.8-3.9,1.8-3.9C2.4,0.2,3.1,0,3.1,0z"/>..</svg

Chrome Cache Entry: 400

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2878x904, components 3
Category:	downloaded
Size (bytes):	137918
Entropy (8bit):	7.437698543991211
Encrypted:	false
SSDEEP:	3072:ymiR+OYpDl5wrAS3d9grD2Mh+/hpAUNCGhArXL:ymiR+QAS34juTvNDe7L
MD5:	46C886B0FD4BF57A47ADBDA6D2746970
SHA1:	A4E8E19E4FA2878C901AE0D3EDA420531E193005
SHA-256:	10E467A6C8EE9754DAD4B459B72C4E7D26D4E1E0F6E039AB9B1785E4291CF0E5
SHA-512:	0019F9953247997DACA29E5ED4434A458EF3092D35467DCD285BC4853015A4E2D235EFBA6C71AE1B15E5237EBCF4BF573F371D9BCFB7557F02E2DBB7478A78EC
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/woman-laptop-hero-pink-shirt.jpg
Preview:	......Exif..II*.................Ducky.......<.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmpMM:InstanceID="xmp.iid:55C534508D9911EBB7AC94CBADDEAFB5" xmpMM:DocumentID="xmp.did:55C534518D9911EBB7AC94CBADDEAFB5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:55C5344E8D9911EBB7AC94CBADDEAFB5" stRef:documentID="xmp.did:55C5344F8D9911EBB7AC94CBADDEAFB5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 401

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3095), with no line terminators
Category:	downloaded
Size (bytes):	3095
Entropy (8bit):	6.01151272970231
Encrypted:	false
SSDEEP:	96:wsbSUtJfxrqLWWWdV6j1gEWTSBdzb3Wh/l:JrPWww1WTSBp3K/l
MD5:	FB3B01198CD89208872E858028320259
SHA1:	4FB2BCD3EDB06E9136721260C19F3A7C158AEA53
SHA-256:	7F52827B89A89AF484E673139EB3600A01A334DF8206A2A90BE4DFBF548749DC
SHA-512:	13B519918295544EDFA68DF569A83CCBFC5F9FE4F420601B82F0B89A5E2A8E860212332462871948DB3AC895C8E7DA9754C7EE2E992A483D278D1B14F552BA44
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/875517505/?random=1710377813720&cv=11&fst=1710377813720&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 402

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	217719
Entropy (8bit):	5.542721529405515
Encrypted:	false
SSDEEP:	3072:3ZkupDb7GKuwuyrx828RZspUWiQg74BJBEEYEtaDJFvW+excBAu:J1Gnwuy0apUW5ZtaDJFvD0+
MD5:	76772283E06F4BC66D68AA15ABCEA6FB
SHA1:	D71CAB972B2E222175694F305FD2AA497F5AF560
SHA-256:	C7FDD9B37525D28BBCD569549A3BAFC83B3BAA4B5CC94A5EE713C5C3EA143752
SHA-512:	332AA54F146F32F41030B0BA0FAC914C0FBA0C9E6FFC85DCF0E0D88DB585F63EEE90D76B3AEFD828F632FF1F384B227CFD43A900B47F0B8E50E36FAD54C0F3D1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-875517505
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":13,"vtp_instanceDestinationId":"AW-875517505","tag_id":7},{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ads_first","priority":2,"vtp_instanceDestinationId":"AW-875517505","tag_id":8},{"function":"__rep","vtp_containerId":"AW-875517505","vtp_remoteConfig":["map","enhanced_conversions",["map","CGZLCObs46YDEMGsvaED",["map","enhanced_conversions_mode","manual","enhanced_conversions_automatic_settings",["map"]],"z814CJLS5KYDEMGsvaED",["map","enhanced_conversions_mode","manual","enhanced_conversions_automatic_settings",[

Chrome Cache Entry: 403

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	downloaded
Size (bytes):	9884
Entropy (8bit):	5.061754902861081
Encrypted:	false
SSDEEP:	192:GbFnNojImVVMbFt1y1h1I1q1e1ju1nTYRQbYF1mYv1fYZ1cbYdIb43UHNzmojiy2:GlNsImVVMbF1s3U+Ee
MD5:	7383F6CBBA6840ACE0AC7B283C425195
SHA1:	963D1736A57EDAE1A8C675289E1953E5463042E1
SHA-256:	E6D1D30D8CD0A96D261B8A0E526653031EB14B244349A2AB1CCECA88B5894DB9
SHA-512:	D04FF2DDF78711859D2BAF13D81C48E0A34C975FA15AD9D9963CE8471414EFB97528987BD1A117319DEBA6A608CE7175E253643038D3BECAD75EA35722EB8750
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.43.js?utv=ut4.51.202006232100
Preview:	//tealium universal tag - utag.43 ut4.0.202402142352, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechan

Chrome Cache Entry: 404

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2311), with no line terminators
Category:	downloaded
Size (bytes):	2311
Entropy (8bit):	5.860666700752217
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08CULZSYQrXP6VOKXqIH6:wsbSUtJfxrqLWWWdV6j12ULZlWSe
MD5:	3956A7F6DF0648B5661C1692F615B5ED
SHA1:	C428550CB84D0E47C5E152E8D65B9942C5FDEF21
SHA-256:	6AD9DE923658897DBBA02F2A3E9D3C05294FCCA9D0CB63F50288F3BA91277EC2
SHA-512:	0ED1A0CA77485EDF6E5ADB0C21A7B3A245A85A1CE6011D5E5746A81A5EAAD2D3E0AA92BA1BC6AD1EEF9DBA4924D52B0F0A63967D28F2B23D1C5431F9DBE984C6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/990489911/?random=1710377835159&cv=11&fst=1710377835159&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&hn=www.googleadservices.com&frm=0&tiba=Help%20with%20UserId%20or%20Passcode%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 405

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (946), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	16726
Entropy (8bit):	5.538719916825391
Encrypted:	false
SSDEEP:	384:EAXfiuysea9IlYLuC4yFykPss7slnMiOaz1:ECXysea9IAF9PsswlnMiOax
MD5:	07A5F8FC6DE04B0C4EFA7508AC37CFBF
SHA1:	DC78D67A248EA9C1ECA76F08A0AECAED72E45F78
SHA-256:	4FD5FFFF3E4EE2D79612E2C1CEBEAD9C12A8A92B1DFE83D8E775C4F8048D5D60
SHA-512:	551E5B3E7E15CDA9D02F725C2E6BB610AEE6FEF3B9464CAC9976BB4ED8B3E8C57516C82825F2B57B67C5ADB4DD8B1868DB04185E1C4233759AD06E6F6668AA74
Malicious:	false
Reputation:	low
URL:	https://onlinebanking.mtb.com/Login/LoginHelp
Preview:	..<!DOCTYPE HTML>..<html lang="en" class="__sticky-footer __sticky-footer--links">..<head>..<script type="text/javascript">..(function(){..window["loaderConfig"] = "/TSPD/?type=20";..})();....</script>....<script type="text/javascript" src="/TSPD/?type=18"></script>....<script type="text/javascript">..(function(){..window.NWDX=!!window.NWDX;try{(function(){(function(){var z={decrypt:function(z){try{return JSON.parse(function(z){z=z.split("l");var s="";for(var _=0;_<z.length;++_)s+=String.fromCharCode(z[_]);return s}(z))}catch(_){}}};return z={configuration:z.decrypt("123l34l97l99l116l105l118l101l34l58l34l110l111l34l44l34l100l101l98l117l103l103l105l110l103l34l58l34l110l111l34l44l34l109l111l100l117l108l101l49l34l58l34l101l110l97l98l108l101l100l34l44l34l109l111l100l117l108l101l50l34l58l34l101l110l97l98l108l101l100l34l44l34l109l111l100l117l108l101l51l34l58l34l101l110l97l98l108l101l100l34l44l34l109l111l100l117l108l101l52l34l58l34l101l110l97l98l108l101l100l34l125")}})();.var sz=32;try{var _z

Chrome Cache Entry: 406

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	221085
Entropy (8bit):	5.45562108732843
Encrypted:	false
SSDEEP:	3072:b74WN0ZwFwncVuB0bteuvQ+AMPpgArl0xYu5GKnabJ:b7hWZSDC0bvQQGArHu5GKnal
MD5:	0904AEF4333E8E2BAF3AF10B0B7B35E0
SHA1:	AC177423B5EDD565BA99A8A0ABAF75133D463BFC
SHA-256:	85267FA4A3E908D0C2778FC27BF13B384D2353C2D12E8D4C78982A3CFAA9636E
SHA-512:	F0DB87FAC5C5BCF2B70A02942E2B1CB754F5CD0446C2C0BF38F52BB96A1CB6C77591FFBA4360B8D4910F509D0A4B805CBC8507BFB6C1D5B0B80936880738B5A0
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 407

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	842
Entropy (8bit):	7.621914736199469
Encrypted:	false
SSDEEP:	24:T6Dk35KzFZ77+RIfefy0Nmn/8k6/Sk+xZuZuzl:ApZ77+KGlNmnkk6/10
MD5:	BB90A4AE36322D887347D2F45861E810
SHA1:	235A731571F44A4001D6405D48C92164CD4328AE
SHA-256:	66E4AA69769971116030515799C022549C3772BF27BD52E2259EF4851F55EB10
SHA-512:	456A0907767440A6775501ACAB6E4DE91B47AFE4A30EC002BE9A98ABCEAC43040D6C896EDBC5B1B91D6324347D9268F5771842384B45EDEA8AF59427D1AE7A57
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx..IL.Q....G..1......(.hL4^41Q......Y... F...P...@...De.UCi...P ,...&P....).SZTn\.....gy..g.....C...D..`..n./..9...z.....fs3j.."=..E. 76p........._;`dn...Ked.Z........N....Y.-..w....L.x\|.vy....vE!.W..s.f...$...M).5...[...&..$........._e2.....)..\|3.Hp.P.&...2...gt..........&.....u\..........O..Y....@...Q....h.5:..Y&8@N..R...........}..5..........gb.n...a.gw3..043....Q......O.....f.....$.W[.R...<...5n..o....`ba.B.Ud./9.VlV0..B.[.....Wv.......13....9\)..d..8@..0K.3.....C...W..9....M..(\V..>...Q...P.}.h........d....O2....wQ.......\.^SD.c..X.Z7..v........V..\..j^..y...$k..6g...\.r..0.....eW\|0U7:......g,Z......B.UV.V.....v..-.=.+................D..#}H.>.G..a.. .....Y ....=....35....2.?Q...3.p\|~..C.....u.}.)yk..........4..!V[..u%n....V.7..D..@......J.......IEND.B`.

Chrome Cache Entry: 408

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	263
Entropy (8bit):	4.357931446431556
Encrypted:	false
SSDEEP:	3:IKHpRBEBc2LGRNaPFiR2MGr147RYogeMkSTXnlreWFLyuPYfFFteLhM3vFFQLGMT:ZULf09GrC7mxJbnQWpyuPS+2dZppe
MD5:	93ED36BEDD8079CD1EF27EB047279CFF
SHA1:	455BB906B3DBD6CAADBB69F5F1EE05D52A07E5B2
SHA-256:	A53088781071700F1D0E54DDA3F2238511135C1D92E3056FDD97FF0B86E8AFC4
SHA-512:	B2FDE71B5572967CF6E4EC81729CF0CC211F5DE61FBF17775478BCFDDCD7A97D7DEEB3619CC2DAE5CA00BEB3A3ED6E738147BF83A76D334F9603C8F4021D99D9
Malicious:	false
Reputation:	low
URL:	https://onlinebanking.mtb.com/Assets/scripts/kessel-help.js
Preview:	.$(document).ready(function () {.. $(document).on("click",.. 'form .kessel-flush',.. function (event) {.. event.preventDefault();.. cdApi.client.flush();.. $(this).submit();.. });.. //end of ready..});

Chrome Cache Entry: 409

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65469)
Category:	downloaded
Size (bytes):	218303
Entropy (8bit):	5.238952823437955
Encrypted:	false
SSDEEP:	1536:ehlD+omd/kReGtBp86iQT9HDBVPOkrRyczFtviNuQuo02hTfkdhtZYr1scHKmuqv:xo8W0bQZHHcczbQuo0ekhQoU
MD5:	5AF36A1626FD8E96104CCD986927C6D7
SHA1:	849E005F75BB4710F32A2D0EC4F8DEDA924FEDEF
SHA-256:	5325E3CBC782527221C429D7EC59F9E0B35A20BFCA8E0530F8A6BD88F5AD6A8C
SHA-512:	C5B4E1F46A6F614B241B33D7088E424D8D3214A9AB219633555DA70AA0329D464E737D81098AA0623D9061D06FF4B1E302080B6BB064E4EF9F2316EBEB71E035
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/scripts/mtbank-prod.js
Preview:	/! For license information please see analytics.js.LICENSE.txt /.(()=>{var t,e,n={2228:(t,e,n)=>{"use strict";n.d(e,{v4:()=>a});for(var r,i=256,o=[];i--;)o[i]=(i+256).toString(16).substring(1);function a(){var t,e=0,n="";if(!r\|\|i+16>256){for(r=Array(e=256);e--;)r[e]=256*Math.random()\|0;e=i=0}for(;e<16;e++)t=r[i+e],n+=6==e?o[15&t\|64]:8==e?o[63&t\|128]:o[t],1&e&&e>1&&e<11&&(n+="-");return i++,n}},9236:(t,e,n)=>{"use strict";n.r(e),n.d(e,{Analytics:()=>Z});var r,i=n(8298);function o(t){return"string"==typeof t}function a(t){return"number"==typeof t}function u(t){return"function"==typeof t}function s(t){return"object"===Object.prototype.toString.call(t).slice(8,-1).toLowerCase()}function c(t,e,n,r){var i,a=[t,e,n,r],c=s(t)?t.event:t;if(!c\|\|!o(c))throw new Error("Event missing");var l=s(t)?null!==(i=t.properties)&&void 0!==i?i:{}:s(e)?e:{},f={};return s(e)&&!u(n)&&(f=null!=n?n:{}),s(t)&&!u(e)&&(f=null!=e?e:{}),[c,l,f,a.find(u)]}function l(t,e,n,r,i){var a,c,l=null,f=null,p=[t,e,n,r,i],h=p.

Chrome Cache Entry: 410

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 411

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 412

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 413

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	221671
Entropy (8bit):	5.547477439588322
Encrypted:	false
SSDEEP:	3072:nPkupDb7GKuwuRrx8j8RZspUWiQg74BJBEEYEtaDJFvW+exciAu:P1GnwuR3apUW5ZtaDJFvD0l
MD5:	D81C6F51EE7E400BC8891571C1C18F35
SHA1:	7A61790132F89C0F061ADFF53906E87D8D7E806C
SHA-256:	98B72C5D9AFECD2FD06B0DC4A9A7E124DFE579BF82AE85E79C2F0555A89E4A90
SHA-512:	DC705A8C5B13F2082BAE6FE9EECF9334A9A45944D7207BBDBF7A32946CF05B0A6E3975370FBA16321C3D360CADFB514045E08E21AE09E00FE252D551DA8FE01C
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-948713993
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":14,"vtp_instanceDestinationId":"AW-948713993","tag_id":8},{"function":"__ogt_1p_data_v2","priority":4,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":true,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_isEnabled":true,"vtp_autoAddressEnabled":true,"vtp_regionV

Chrome Cache Entry: 414

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	422
Entropy (8bit):	5.108721726862372
Encrypted:	false
SSDEEP:	6:tI9mc4sl3fAaguB1DZ+BNUomHqiLUMdkKiEZ59e5e5LHtSHv3lnYLHtSHv3lnBuE:t41fAYz+4vg4ZNJHCv3lnmHCv3lnB25i
MD5:	239427494FCD41DCFA63A2596F854DF8
SHA1:	EAEA4027B9B3FC2C5A2BCF51A697A38837076A78
SHA-256:	4DDEE91FEAC8B2CAD4B1523677A7EB934985226E222AB46C914F7D18EA38416E
SHA-512:	1DEDEBF0A980C709445622307F19FFD56293384AA63DDB10422E8155A6B9755649E9128465F9E6ABCE2BFE0A960797B4BDCE4317C7B75BB7648C9D6E04DBD4A8
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/svg/icon_plus_green.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 87 87"><defs><style>.cls-1{fill:#007b56;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><circle class="cls-1" cx="43.5" cy="43.5" r="43.5"/><rect class="cls-2" x="37" y="25" width="13" height="37"/><rect class="cls-2" x="37" y="25" width="13" height="37" transform="translate(87 0) rotate(90)"/></g></g></svg>

Chrome Cache Entry: 415

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	980
Entropy (8bit):	5.343179247762611
Encrypted:	false
SSDEEP:	24:2dluNA6LfE315wyUv/vFUrsDe0OhJOPoNyXJih:cuA+fE315wyU9UrsiN1Ech
MD5:	31465646A60E38C1D583E989C4575213
SHA1:	3B49577A09A02FFB46471301DC573530F22A9EB1
SHA-256:	97DDE6AF7F1E3BAE6220881EFE213794F1922CEF1F66CFDDACEFA1E9CF01D6F3
SHA-512:	A1B508D826C63C440154BEAB3865E52E495557817B9E972A603515F32509A1FA530D86640934C7D0D61E2263BB6336B58F9AE430931DE61BABE200AC2FCC3DFC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 310 310" style="enable-background:new 0 0 310 310;" xml:space="preserve">..<style type="text/css">....st0{fill:#007856;}....st1{fill:#FFFFFF;}..</style>..<circle class="st0" cx="156" cy="152.3" r="147.3"/>..<g id="XMLID_1_">...<path id="XMLID_2_" class="st1" d="M107.3,159h22.6v93c0,1.8,1.5,3.3,3.3,3.3h38.3c1.8,0,3.3-1.5,3.3-3.3v-92.5h26....c1.7,0,3.1-1.3,3.3-2.9l3.9-34.2c0.1-0.9-0.2-1.9-0.8-2.6c-0.6-0.7-1.5-1.1-2.5-1.1h-29.9V97.1c0-6.5,3.5-9.7,10.4-9.7....c1,0,19.6,0,19.6,0c1.8,0,3.3-1.5,3.3-3.3V52.6c0-1.8-1.5-3.3-3.3-3.3h-26.9c-0.2,0-0.6,0-1.2,0c-4.7,0-20.9,0.9-33.8,12.7....c-14.2,13.1-12.2,28.8-11.8,31.5v25.1h-23.7c-1.8,0-3.3,1.5-3.3,3.3v33.8C104,157.5,105.5,159,107.3,159z"/>..</g>..</svg>..

Chrome Cache Entry: 416

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 9488
Category:	downloaded
Size (bytes):	3248
Entropy (8bit):	7.930452119546587
Encrypted:	false
SSDEEP:	48:XbP1FMEjJwzl+UjrFWc4uuJUW9z4RumRQF9Nk+r/EwwFbmNWw4KmMlYu7TtMA56e:rP1KEjJqdsc0JvM9o9fpwFa09Ij7TWNe
MD5:	AC839D03ECC942C02C37D84144318EDD
SHA1:	7CBC479C56EF39158985A19024F6F5D703D4E66D
SHA-256:	8C4C2FAE5279738659B56BFB3D1AABB4C752A2868241C9EC6AFA991ED081090E
SHA-512:	97929D23241683E6C8A65E465D37A1764C71D248CBF0B517D985B35F8DB019F7A9346A55B396EA68674CAA41DF22F65682681298E358102BEADF910502022A95
Malicious:	false
Reputation:	low
URL:	https://onlinebanking.mtb.com/TSPD/?type=18
Preview:	...........ZmS.F..._...J...]......r.S....2X....,y.........@.....#.4........r..\|..?~.g.........A..,/.l....~.J0.4_...>...V.....F.......PO.Q.-V....<.o>.)].r..z.N.......\+X"..D.OY?L...q.~..........vqT..we...7e....r~..LXr4q4.YG2....5..Uy..G.....n..6.]~..wr.......:...+..E.f..~V.5[f.NM.u%...Sl@.b...5..Y.\|W....f..<..w:..~{..T<..k.^.6....t^....4T..\|.......m.\\|..............M..-..6..G..j..;..VZ.r.!....$$..Q.......G@.m...X.%..fa......c........W.M..8.g....zC.W ....%.+}2...Y\....n.km.o.,.-.......(."-.Y^...y.`...f...u....z..b.u.].)......W<.7.l...........9+V..E...\|../?..A..l.++..E.V...fY.......P .Dw.b.O.>......[b......._J...BKt}w....h......3FD....%Cg...j}pZ......;.;k......b...>......u.T.0.#M..l.W.F..).B.+...//.....~.q.P.............?lk..@\.P..5....,3..W....TlTES.4.~..[...}9...9...4..[?1..%b..F^..c.Y..4.[M#..z:3.p5}.S....>..D....V+.i.....!..z.%...:>..dJ..mH.\|...x;.C..........'......P%..M.E..........[.2....a.>\|.UuV...D.....#..QY".n.'g.!..S...`v..+F.X^.].

Chrome Cache Entry: 417

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1349
Entropy (8bit):	4.193398232602312
Encrypted:	false
SSDEEP:	24:t41lFt9unBfUGOhNmaFQ1vP+nr+c90wSpWXNeT7eYFUCFTY94/s7Hi:CR9JJbmaW1vHcZSpWS7eoUGU9+
MD5:	9A569AD20708D7453D89FE6C72E7FCDC
SHA1:	60B6A41620583484642F7C826FAF8E3C879A6374
SHA-256:	B2EF3BD17AA6BC2DAA7B1209F7848B30C64F3068E43162B09A216639AB430CE5
SHA-512:	593BBBA69EE4B582001515DFC425CB306D5B8A10895FAA48F366934DA79AB12770C8D4F6034DF647B8853CF94560D41B467708BE674D4392B06D08701B0D99C1
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 634.7 148.5" fill="#767676"><path d="M0 146.2h84v-37.7H43.2V92.1h37V54.5h-37V40.2H84V2.5H0m160.9 29.6c-13.8 0-24.6 11.4-28.6 23.5l-.4-.5 1.1-20.7H91.5v111.7H133V92.4c0-11.4.6-19 8.7-19 7 0 7.6 6.8 7.6 16.3v56.5h41.5V72.5c-.1-20.1-6-40.4-29.9-40.4zm145.6 24.1l-.4-.4 2.3-21.4h-61.2V9.8h-41.5v24.7h-11.9v33.2h11.9v78.5h41.5V67.7h19.5v78.5h41.5v-45.3c0-11.6 1.9-26.4 17.4-26.4 2.9 0 7.8 2.1 11.6 4V32.1c-15.4-.6-26 10.4-30.7 24.1zm96.3 38.3c0 13.6-.8 19.3-8.2 19.3-7.2 0-8-5.9-8-19.3V34.4h-41.5v65.8c0 30.5 17.4 48.3 49.5 48.3 30.5 0 49.8-15.2 49.8-48.3V34.4h-41.5v60.1zm99.4-17.1c-4.4-1.7-12.5-4.7-12.5-10.4 0-3.6 3.1-5.5 6.1-5.5 7 0 12.5 5.5 17.4 9.9l14.2-30.3a73.6 73.6 0 0 0-34.1-9.1c-26 0-44.9 14.6-44.9 37.7 0 19 12.9 27.5 29.2 33.2 7.2 2.5 10.8 4.8 10.8 8.9 0 4-4.5 5.7-8 5.7-7.6 0-15.9-6.4-20.7-11.6l-15.2 30.9a79.2 79.2 0 0 0 40.2 11.6c23.1 0 44.7-14 44.7-39.2-.1-18-12.1-26.1-27.2-31.8zm84.9-67.6h-41.5v24.6h-11.9v33.3h11.9v78.5h41.5V67.7h1

Chrome Cache Entry: 418

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1349
Entropy (8bit):	4.193398232602312
Encrypted:	false
SSDEEP:	24:t41lFt9unBfUGOhNmaFQ1vP+nr+c90wSpWXNeT7eYFUCFTY94/s7Hi:CR9JJbmaW1vHcZSpWS7eoUGU9+
MD5:	9A569AD20708D7453D89FE6C72E7FCDC
SHA1:	60B6A41620583484642F7C826FAF8E3C879A6374
SHA-256:	B2EF3BD17AA6BC2DAA7B1209F7848B30C64F3068E43162B09A216639AB430CE5
SHA-512:	593BBBA69EE4B582001515DFC425CB306D5B8A10895FAA48F366934DA79AB12770C8D4F6034DF647B8853CF94560D41B467708BE674D4392B06D08701B0D99C1
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 634.7 148.5" fill="#767676"><path d="M0 146.2h84v-37.7H43.2V92.1h37V54.5h-37V40.2H84V2.5H0m160.9 29.6c-13.8 0-24.6 11.4-28.6 23.5l-.4-.5 1.1-20.7H91.5v111.7H133V92.4c0-11.4.6-19 8.7-19 7 0 7.6 6.8 7.6 16.3v56.5h41.5V72.5c-.1-20.1-6-40.4-29.9-40.4zm145.6 24.1l-.4-.4 2.3-21.4h-61.2V9.8h-41.5v24.7h-11.9v33.2h11.9v78.5h41.5V67.7h19.5v78.5h41.5v-45.3c0-11.6 1.9-26.4 17.4-26.4 2.9 0 7.8 2.1 11.6 4V32.1c-15.4-.6-26 10.4-30.7 24.1zm96.3 38.3c0 13.6-.8 19.3-8.2 19.3-7.2 0-8-5.9-8-19.3V34.4h-41.5v65.8c0 30.5 17.4 48.3 49.5 48.3 30.5 0 49.8-15.2 49.8-48.3V34.4h-41.5v60.1zm99.4-17.1c-4.4-1.7-12.5-4.7-12.5-10.4 0-3.6 3.1-5.5 6.1-5.5 7 0 12.5 5.5 17.4 9.9l14.2-30.3a73.6 73.6 0 0 0-34.1-9.1c-26 0-44.9 14.6-44.9 37.7 0 19 12.9 27.5 29.2 33.2 7.2 2.5 10.8 4.8 10.8 8.9 0 4-4.5 5.7-8 5.7-7.6 0-15.9-6.4-20.7-11.6l-15.2 30.9a79.2 79.2 0 0 0 40.2 11.6c23.1 0 44.7-14 44.7-39.2-.1-18-12.1-26.1-27.2-31.8zm84.9-67.6h-41.5v24.6h-11.9v33.3h11.9v78.5h41.5V67.7h1

Chrome Cache Entry: 419

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/875517505?random=1710377813697&cv=11&fst=1710377813697&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 420

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	230
Entropy (8bit):	4.9256138414720825
Encrypted:	false
SSDEEP:	6:tI9mc4sl3URFfI45SdgIe7LRdEX0UW3p5Adbp5CY:t41kF5MdgIe7dd+tWPs/CY
MD5:	916635D10512AE6A1840614A895DCD38
SHA1:	DB175DE4C42281BB4D239C57D1B95B8E75C529EC
SHA-256:	D58EB2802F72D0C6B1D944A1335E8FB914AF44B51FE16097AAD994C15B8CFBAD
SHA-512:	17EDA2352BB4EB7EA124BCFD1D69D5A06DB5F4F0E81CCACBF100F704F3ED456367B74DCA54440860E351B996752F33FC87B900CDD4BEFA7E4A2E5090B85F35DE
Malicious:	false
Reputation:	low
URL:	https://mtb-repo.pages.dev/mtb_files/mtb-equalhousinglender.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 11.99" fill="#767676"><path d="M8.09 0L0 4.6v1.67h1.24v5.72h13.5V6.27H16V4.65zm-5.2 4.79l5.2-3.06 5.1 3.06v5.74H2.88zm2.43 2.18h5.39v-1.4H5.32zm0 2.1h5.39v-1.4H5.32z"/></svg>

Chrome Cache Entry: 421

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	230
Entropy (8bit):	4.9256138414720825
Encrypted:	false
SSDEEP:	6:tI9mc4sl3URFfI45SdgIe7LRdEX0UW3p5Adbp5CY:t41kF5MdgIe7dd+tWPs/CY
MD5:	916635D10512AE6A1840614A895DCD38
SHA1:	DB175DE4C42281BB4D239C57D1B95B8E75C529EC
SHA-256:	D58EB2802F72D0C6B1D944A1335E8FB914AF44B51FE16097AAD994C15B8CFBAD
SHA-512:	17EDA2352BB4EB7EA124BCFD1D69D5A06DB5F4F0E81CCACBF100F704F3ED456367B74DCA54440860E351B996752F33FC87B900CDD4BEFA7E4A2E5090B85F35DE
Malicious:	false
Reputation:	low
URL:	https://resources.mtb.com/Assets/img/mtb-equalhousinglender.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 11.99" fill="#767676"><path d="M8.09 0L0 4.6v1.67h1.24v5.72h13.5V6.27H16V4.65zm-5.2 4.79l5.2-3.06 5.1 3.06v5.74H2.88zm2.43 2.18h5.39v-1.4H5.32zm0 2.1h5.39v-1.4H5.32z"/></svg>

Chrome Cache Entry: 422

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	631
Entropy (8bit):	4.811471571333258
Encrypted:	false
SSDEEP:	12:TMHdNZhK1t1NwLgFQRoyT0a/H1hfoJOQJKAQK40/HLZGIFgc0pRPjxUN/+:2d/E1HNwLgFQBT0a/H1xoMQJKKX/HX0B
MD5:	EC1050B05C3A7A5A4AA8C5C1CBDAFD1A
SHA1:	94E1859808BAEE1B47F2B143E6936FDF6B94F2E7
SHA-256:	89C679258FAE3AE528B4BE6B49698CCE90EDBE2A752A006852A585C0D30769B1
SHA-512:	61AB9DABBD286B0F4875BFD05E2C5EF420384FCF55EACB926DA5E5465496EC6BE1384719D0B63E727E382A9AD9F3CBCA3B28ACA6AB3CAD4D92C1FFA9EC97307D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 53.28 55.72">. <defs>. <style>. .cls-1 {. stroke-width: 5px;. }.. .cls-1, .cls-2 {. fill: none;. stroke: #007856;. stroke-miterlimit: 10;. }.. .cls-2 {. stroke-linecap: round;. stroke-width: 8px;. }. </style>. </defs>. <g id="Layer_1-2" data-name="Layer 1">. <g>. <circle class="cls-1" cx="23.04" cy="23.04" r="20.54"/>. <polyline class="cls-2" points="37.9 40.34 44.2 46.64 49.28 51.72"/>. </g>. </g>.</svg>

Chrome Cache Entry: 423

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3682
Entropy (8bit):	4.126204660036401
Encrypted:	false
SSDEEP:	96:GyHzgK2Oy3YDF8oWfWPKNPUJXuN6umuI4:c3krWOi9UJXuN3C4
MD5:	D22E8DB2016665CDB32713EB29A3A62B
SHA1:	A37F1D9E9EB6D117B2E9B9C8AA4D2C2F2B217C55
SHA-256:	9C49DAC4667FA294A2DFCD63D4CD4080C9B33B41D1C818131669DFAC46DE2D1D
SHA-512:	838EE51B1D8C387F6AEEA028FC7B7F0DDD46393EDA8DFBACFC744F6ED0AD2C8093B474E8F9EAFEDDACB95BDC5776293E5BB9950E31043D81526D00DF5956CDC5
Malicious:	false
Reputation:	low
Preview:	<svg width="37" height="46" viewBox="0 0 37 46" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M4.38997 43.2761C6.03397 43.2761 7.32997 42.3881 7.32997 40.9961C7.32997 39.8441 6.64597 39.0281 4.82197 38.5241L3.90997 38.2721C2.79397 37.9721 2.37397 37.4681 2.37397 36.6881C2.37397 35.8121 3.05797 35.1641 4.41397 35.1641C5.57797 35.1641 6.27397 35.8601 6.48997 37.0121L7.18597 36.8681C6.92197 35.4041 5.94997 34.5401 4.41397 34.5401C2.57797 34.5401 1.59397 35.5241 1.59397 36.7361C1.59397 37.8881 2.26597 38.6081 3.72997 39.0161L4.62997 39.2681C6.03397 39.6641 6.52597 40.1801 6.52597 41.0441C6.52597 42.0281 5.60197 42.6281 4.38997 42.6281C3.02197 42.6281 2.09797 42.0041 1.84597 40.4441L1.13797 40.6001C1.40197 42.3881 2.55397 43.2761 4.38997 43.2761ZM11.0838 43.2761C12.0318 43.2761 13.0518 42.7601 13.5438 41.6441L12.9198 41.3801C12.4278 42.3281 11.8038 42.7001 11.0958 42.7001C9.87182 42.7001 9.07982 41.6921 9.07982 40.2521V40.1921H13.6158V40.0601C13.6158 38.2361 12.7158 37.0721 11.04

Chrome Cache Entry: 424

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/sp.pl?a=10000&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 425

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1884
Entropy (8bit):	4.751292108670339
Encrypted:	false
SSDEEP:	24:2dV2GRLHcySpeaxM2JSS4eIxWW3ovDrTFo6taoWc1AI6aCq3/FwALNMAHuVMQNMn:cU6HYvDrT4oWc1AbzmNduGQN9ui590
MD5:	BB158BF94B527F234951614B5D7F56AE
SHA1:	E8E29459BAC715694E65B37454719A72964236A3
SHA-256:	7499AEABEAEC2141EB24969619174E22263C858D46B42DAEED97A6A27C35035D
SHA-512:	D72C140EE66A35C1F65804CB9346F53D25D2AEB5E1904A1CAFE4BE18C295E7F17D375ABE55CFB55A4B8B392809C789B0654968A9D71B88741263CD122DAA6DEC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="47px" height="46px" viewBox="0 0 47 46" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Spanish Language Icon@3x</title>. <g id="Spanish-Icon-Option-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Artboard" transform="translate(-27.000000, -16.000000)">. <g id="Spanish-Language-Icon" transform="translate(28.000000, 17.000000)">. <g id="Group-2">. <g id="language-icon-es" stroke="#FFFFFF" stroke-width="1.73333333">. <line x1="13" y1="0" x2="13" y2="26" id="Path"></line>. <line x1="0" y1="13" x2="26" y2="13" id="Path"></line>. <ellipse id="Oval" stroke-linecap="square" cx="13" cy="13" rx="7.4282" ry="13"></ellipse>. <line x1="2.002" y1="6.06666667" x2="23.998" y2="6.06666667" id="Path"></line>.

Chrome Cache Entry: 426

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	422
Entropy (8bit):	5.108721726862372
Encrypted:	false
SSDEEP:	6:tI9mc4sl3fAaguB1DZ+BNUomHqiLUMdkKiEZ59e5e5LHtSHv3lnYLHtSHv3lnBuE:t41fAYz+4vg4ZNJHCv3lnmHCv3lnB25i
MD5:	239427494FCD41DCFA63A2596F854DF8
SHA1:	EAEA4027B9B3FC2C5A2BCF51A697A38837076A78
SHA-256:	4DDEE91FEAC8B2CAD4B1523677A7EB934985226E222AB46C914F7D18EA38416E
SHA-512:	1DEDEBF0A980C709445622307F19FFD56293384AA63DDB10422E8155A6B9755649E9128465F9E6ABCE2BFE0A960797B4BDCE4317C7B75BB7648C9D6E04DBD4A8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 87 87"><defs><style>.cls-1{fill:#007b56;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><circle class="cls-1" cx="43.5" cy="43.5" r="43.5"/><rect class="cls-2" x="37" y="25" width="13" height="37"/><rect class="cls-2" x="37" y="25" width="13" height="37" transform="translate(87 0) rotate(90)"/></g></g></svg>

Chrome Cache Entry: 427

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2332), with no line terminators
Category:	downloaded
Size (bytes):	2332
Entropy (8bit):	5.850973503851226
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08H7wSYFQZOfYKl6:wsbSUtJfxrqLWWWdV6j177wLFc
MD5:	6AAA4342F74F43D67F911BD5ABBD3E55
SHA1:	7BFE24830C90C34860C3736E3EE322EE283ABCF1
SHA-256:	731911B0FC4EB3B1B63D4AD24DA7D8391E2BEC335AB2971E1889745039608E22
SHA-512:	F71B4871743097EC7A1197DBDDFA30A8F73B302DA1D7DA32D8124DFB8FC3EFAA0C74A9EB8CFE4B7A850B2E11F9A4B0A38786F4E9047E5D56D92152535A25A68D
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/948713993/?random=1710377850003&cv=11&fst=1710377850003&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 428

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	307
Entropy (8bit):	5.13126171177122
Encrypted:	false
SSDEEP:	6:5blF6d/gPUnhdjWVggO9lrBuWchtRWWW1CRRW3ukyM3ANfn:5yY8nhxyYetRWWW1uRW3ukfwB
MD5:	6CAB7150291C8CB24191BC92C73A487E
SHA1:	DD4CBD99CC921486EC7A27525FD66B6A2D3CCC55
SHA-256:	E585E536633D98C846579082B6AEAD897AE524FF8A71E5852D60D129E8FC2AC4
SHA-512:	23C5FF3B3C613FE1C9AB816BD09BE3E72FB908A0616FCE648773B6AE00DA745A36AEBF81CC48FFEAECA1BEC381700AA650551AA7575478D5E85C352A84283CB5
Malicious:	false
Reputation:	low
URL:	https://onlinebanking.mtb.com/Assets/js/tealium_prod.js
Preview:	.(function(a,b,c,d){.. a = 'https://tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.js';.. b=document;c='script';d=b.createElement(c);d.src=a;d.type='text/java'+c;d.async=true;.. a=b.getElementsByTagName(c)[1];if(a==null){a=b.getElementsByTagName(c)[0];};a.parentNode.insertBefore(d,a);..})();..

Chrome Cache Entry: 429

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2324), with no line terminators
Category:	downloaded
Size (bytes):	2324
Entropy (8bit):	5.846592875983376
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08J7hSYFQbI7KJyU6:wsbSUtJfxrqLWWWdV6j1t7hLFSQ
MD5:	74659D2C0B07381495298BE1E881A876
SHA1:	67A7E742C7EC216712AA502415384EE78A31B9CD
SHA-256:	FD295BDDC5D86D0D65F1C31AF73905ECEB011579A5957086DB1F372CC5D6A05B
SHA-512:	47556B67ACA4E3974D7A412087473FD1EB4B81B04754C1F8AD992497086B55DD748C0556FA02F4275442D6A2A200D8D9AF8908CC7569C2B775F79CFFB6E5AD03
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/948713993/?random=1710377812268&cv=11&fst=1710377812268&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 430

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1590), with CRLF line terminators
Category:	downloaded
Size (bytes):	69424
Entropy (8bit):	4.842004184828232
Encrypted:	false
SSDEEP:	768:hy8YdohMNL1oqfUTrUS9gf4RY7i366Zd+E:hy8YdnR10US9gfgY7i366ZJ
MD5:	358E755113A52352EF03028056F4A864
SHA1:	E75FD6613DC54937E660CEE008B6D3D36D309105
SHA-256:	BC81B6DC948BF10EC968A420B32B46B8C21E67D3823133D46307BACBD94D27E2
SHA-512:	713807B919AD026AEDF9AE6B00931C4E432CC6F35F51DB112CF633E29BEEEF84964DC9B6A5C7F7F9E68637787E5D3EC9E28225C51C65559BFECD66582D74B74F
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/assets/css/mtb.css
Preview:	.m-icon, .mtb-formcheckbox label::after, .mtb-formcheckbox label::before, .mtb-formradio label::after, .mtb-formradio label::before {.. font-family: "M&T PG Custom Font" !important;.. display: inline-block;.. speak: none;.. font-style: normal;.. font-weight: 400;.. font-variant: normal;.. text-transform: none;.. line-height: 1;.. -webkit-font-smoothing: antialiased;.. -moz-osx-font-smoothing: grayscale..}.....grid-x__padded.grid-margin-x {.. margin-left: .5rem;.. margin-right: .5rem..}.....grid-x__padded.grid-padding-x {.. padding-left: .5rem;.. padding-right: .5rem..}.....mtb-section {.. background-color: #efefef;.. padding: .6875rem 1rem .6875rem 1rem;.. color: #333;.. text-decoration: none;.. width: 100%;.. display: -webkit-box;.. display: -webkit-flex;.. display: -ms-flexbox;.. display: flex;.. -webkit-box-align: center;.. -webkit-align-items: center;.. -ms-flex-align: center;.. align-items: center..}.

Chrome Cache Entry: 431

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 432

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 138661
Category:	downloaded
Size (bytes):	34890
Entropy (8bit):	7.993582819055428
Encrypted:	true
SSDEEP:	768:kPBHw/WzCXX2ZOMgx2pN91eYQJHIyfGRbs4kOVXIUBKc9:kZHwf2kxw5XQJ9fGRuoVQI
MD5:	53A0D1EBC3AAAB4DAD47FD292A711650
SHA1:	059CE0B5809CBA07A5497A5EAB81C4FD41F83976
SHA-256:	904806A72BD124D6003DB98FD1F89DB33471FF50464B51170325C8220D0C9411
SHA-512:	B6CC2B1DF6D0E1352B63D65DE9E81055D5D92088F16433168DABA3721D9875A191728AA7E3AE425733DDE1903176336AF8B884D46FF7EBF0050FDCFA85C11A7F
Malicious:	false
Reputation:	low
URL:	https://onlinebanking.mtb.com/TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=17
Preview:	...........is.H.(....RT{.....XI..3.q..._.'....a.2mS.E. /....d&..I....N..r...../_..oW_....................}..~X.n-.......b..............c.......g......]....\|...g.].\|...c{.}........_.Cw0.Q.e......''s;?.N......>....].]X...=.......\_=\......f.~..^.n.-.....Y.39u...E&.,..4.</.<7.......0..{....A....7Rx...B~..;...:..<\....;6.%..l....}.n.........fc[..G@Q..O`HPQ87.sQ.gV........~.C...]...7O..m....os..M...~K..{.........lhA.4.....f/n.....(N.P......k......@o....>.=.."........w.....k.@S....b.CA..%t.M...l ....p8...[...*...En./....\.,.....e\|6.........O..\^;g>\|u.dCo...2[X....N....W....i.nY..=....~...gnozz.y^..........}5.r.......]....z....I.....od_>..d]....].zg..p[=..f.F.r.g.5..N....e....s..2..v.~.6..9`...5..e....A.%...}y.P.........b...r............)..m..-.l....g6\Vh......vg...&..m..B..o..}iR.^........x..w.h.7.....bA.m.._...9....2.~$...C.^....d..~.e..N.......\.+S.<^.py.a$....&..=..:....T.3.3.%G...}Y.......>.....%....O,.._....b...K.?.....>........4.d..I.$..o..d.

Chrome Cache Entry: 433

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (569)
Category:	downloaded
Size (bytes):	513686
Entropy (8bit):	5.708485144795057
Encrypted:	false
SSDEEP:	6144:I5yBhvtossZ83R0i4jGbit+yhypxIylDtetHhvXCU0g4+yB+ZE4I:I7ZiNyVye341N
MD5:	5A8547555D71E5846135A48DCC7EC3DC
SHA1:	BDF99D0037D631CA1D24EFA343781F55A11AFB05
SHA-256:	7A01932ABC324CBDF143534BD8DC0E665E045A2AE8A0D234D24F2D3AD9EBC619
SHA-512:	863D425B41D6B439618CCD38D5EA46D5AD6CF3C145A476E0A8596903CFAAC4A2D04D40F5CD4F92AC74BDD73DFAAEC9F4661C6A71116DFC78B6A41F7D3BD801E6
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 434

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	217745
Entropy (8bit):	5.542756932660082
Encrypted:	false
SSDEEP:	3072:3ZkupDb7GKuwuZrx820RZspUWiQg74BJBEEYEtaDJFvW+eAcBAg:J1GnwuZMapUW5ZtaDJFvD/Q
MD5:	EB618F6E43809158ECCA7F824C1ACCF2
SHA1:	842980DC0B34370E924F6875C73CE8024ABDA889
SHA-256:	39B90582B60B444BF5D9B78E3BF175770B5BB259672395F25EDA4E16724BAF2F
SHA-512:	5F612712647D55D02A19B437C78D8001CB807D3DDDA4E716070AF3AB707F7820F4967C73867EBA4227CDD4AE826819CAEE865CC40A64DF7A9925AB135D427F07
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-875517505&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":13,"vtp_instanceDestinationId":"AW-875517505","tag_id":7},{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ads_first","priority":2,"vtp_instanceDestinationId":"AW-875517505","tag_id":8},{"function":"__rep","vtp_containerId":"AW-875517505","vtp_remoteConfig":["map","enhanced_conversions",["map","CGZLCObs46YDEMGsvaED",["map","enhanced_conversions_mode","manual","enhanced_conversions_automatic_settings",["map"]],"z814CJLS5KYDEMGsvaED",["map","enhanced_conversions_mode","manual","enhanced_conversions_automatic_settings",[

Chrome Cache Entry: 435

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53751)
Category:	downloaded
Size (bytes):	242353
Entropy (8bit):	5.468891373035753
Encrypted:	false
SSDEEP:	6144:Jhi8eGRXufsr5zQ47GKuh5tEyQ3Hx2NieePiq:3iURXm05d3kNie+iq
MD5:	C58E04B134C40AFB417957F4A3F84474
SHA1:	0218CA714AC24E5443CB8E5418E0619473684BAD
SHA-256:	7146E4EDDA9B9A7502B1B6935983787C3BBA8A34A95CEBDE1577409A9E33CD54
SHA-512:	DC182D1766A038E8A0359F2CD1FD4EB71492613A75E8245D9E0C5CEC7515CE33C790EF959017A6F30EFCEAF47E07753700B77B7323FE7CA98DC1D0753AEB8CF3
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/axp-common/clientlibs/vendor.js
Preview:	var Utils;.if (!Utils) {..Utils = {};.}..Utils.urlManipulation = {...../*.. separate the url into an object that contains uri and query string parameters.. * ex. (nao.mtb.com?zipcode=12345) => {uri: 'nao.mtb.com', queryString: 'zipcode=12345'}.. .. @param url String.. * @returns {{queryString: string, uri: string}}.. /..separateURL: function (url) {...'use strict';......var urlArray = url.split('?');...var uri = urlArray[0];...var query = urlArray.length === 2 ? urlArray[1] : undefined;...return {....uri: uri,....queryString: query...};..},..../.. Takes in a String or Object with a queryString paremter and returns a key/value pair of the query.. * (nao.mtb.com?zipcode=12345) => {zipcode: '12345'}.. * {uri: 'nao.mtb.com', queryString: 'zipcode=12345'} => {zipcode: '12345'}.. .. @param url.. */..getQueryObject: function (url) {...'use strict';......var query = {};...var urlObject = url;......if (typeof url === "string") {....urlObject = Utils.urlManipulation.separateURL(url

Chrome Cache Entry: 436

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2362
Entropy (8bit):	5.31552518244965
Encrypted:	false
SSDEEP:	48:Yft4+42sZrE+39Hi/3qW8gER/Jfgwi2EaCOCJIZt/AxDIsQGMBoSQ2Nh0K72e6hW:Mt4/rP8Vh0v25ZaQAuK72Lur
MD5:	4312E88FFB3BD2E7D0008CC953B550FB
SHA1:	4A4DAA569D2D4B6AF95BED70684A0244CD9A63A2
SHA-256:	750704E96530EB85CF9F9225026A4870409EE599EABC4E7A12DF8D1D3F5FB58C
SHA-512:	45E66BB0C1BE591D95901F5E7AF9215C0238D4F18340B9D6CFBC423FBD0BCDAC3EE92EB041C03AA25E91404D3DE3976FDE8F6AD8647EB5AF7C1640DEA45B8D54
Malicious:	false
Reputation:	low
URL:	https://mboxedge34.tt.omtrdc.net/m2/mtb/mbox/json?mbox=target-global-mbox&mboxSession=982bceee196b4711901768c5d35728f4&mboxPC=982bceee196b4711901768c5d35728f4.34_0&mboxPage=83fb3c1c290c4447be6936716aaf9742&mboxRid=fced150c6e93476e9906fecf9771b7df&mboxVersion=1.8.3&mboxCount=1&mboxTime=1710381446412&mboxHost=www3.mtb.com&mboxURL=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&mboxReferrer=&browserHeight=907&browserWidth=1280&browserTimeOffset=60&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_property=f7ba4290-5c00-8608-2ad1-5fc4576548bf&zipCodeCookie=&geoRegionCookie=&entity.categoryId=personal-banking%2Conline-mobile-services&user.categoryId=personal-banking%2Conline-mobile-services&loginClickedCookie=&mbox3rdPartyId=
Preview:	{"sessionId":"982bceee196b4711901768c5d35728f4","tntId":"982bceee196b4711901768c5d35728f4.34_0","offers":[{"responseTokens":{"experience.id":"0","activity.name":"Commercial Script","geo.city":"new york","activity.id":"137460","geo.state":"new york","experience.name":"Experience A","geo.zip":"10118","profile.isFirstSession":"true","geo.country":"united states","geo.mobileCarrier":"none","profile.WebID":"none","profile.geozip":"","profile.activeActivities":"226738,226806,137460","geo.dma":"new york","profile.lastCustomerType":"retail","profile.categoryAffinities":["home-page","online-mobile-services","personal-banking"],"profile.isNewSession":"false","profile.georegion":"","profile.EmployeeIP":"Non-employee IP"},"actions":[{"action":"customCode","selector":"HEAD","content":"<script>\n $('.login-form.-personal-business label.login-field-placeholder').eq(1).html('Passcode');\n \n $('a.login-link').eq(0).html('Help with User ID or Passcode');\n \n try {\n $(document).ready(function

Chrome Cache Entry: 437

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3321
Entropy (8bit):	5.212886692162673
Encrypted:	false
SSDEEP:	48:44CdnLikK64BlEmI4OPlI1s0fjpNGA76+A467lBMnyBI:EK64BlRHVsc6+b67lB+J
MD5:	21226CE70ACF30DF068F74E93BAC8C8A
SHA1:	06957201A8D2023AB385F646698199CD0E95671C
SHA-256:	A47A966267E0A529A2224227E8D9FDCAD625B03DA2B2920E1967621CA395586A
SHA-512:	ADAF8AC81FA8975231EF84E76300D815E21287A01D1F2812C004771E30A448E5CCDC68F4DC25F75973F49C02C1651B56034EB9E6DD6C804DAED91467F6703500
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/scripts/tealiumComponentCode.js
Preview:	//START FORM CODE..function tealiumWithFormSuccess(){...try{....utag.link({.....tealium_event: document.querySelector("#tealiumEvent").value,.....customLinkName: document.querySelector("#customLinkName").value,.....componentName: document.querySelector("#componentName").value,.....componentGuid: $('#aemformid').val()....});........}catch(err){}..}....function tealiumWithFormFail(){...try{....utag.link({.....tealium_event: document.querySelector("#tealiumEvent").value,.....customLinkName: document.querySelector("#customLinkName").value,.....componentName: document.querySelector("#componentName").value,.....componentGuid: 'Server error'....});........}catch(err){}..}....//END FORM CODE....//START BUTTON CODE..function fireAnalyticsEvent(b) {....if ($ctaButtonTagType === 'off') {.....return;....}....var $ctaButtonComponent = b.parentElement;....var $ctaButtonLink = b;....var $ctaButtonId = $ctaButtonLink.attributes['id'].value;....var $ctaButtonLinkText = document.querySelector("[data-com

Chrome Cache Entry: 438

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 67671, version 1.0
Category:	downloaded
Size (bytes):	67671
Entropy (8bit):	7.993457738975815
Encrypted:	true
SSDEEP:	1536:I1Houj8hOAJ9XPNV1t+/tSJhJaPnQCsq4rpYQbyLy:Idoi8/L1tktSJqPnQOUyLy
MD5:	6CD469E8613D82D4D07834A5CA7745F0
SHA1:	95347BA0A03D27E1AA91BC17C937D8AEFE53E6FF
SHA-256:	4029A5A081992259F4E529190B49DBBA893931DA4E843DD203449F1B9A4509D2
SHA-512:	A8467B45909EFCA7EF65DF6507ABAAC32F0F12C3F896DC9EE15A6FAE8CB0A4A30A0ADBB75E9541FB576CF796AC823C6502BD89234B88FD5D440F0939C84D06C9
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-book.woff
Preview:	wOFF.......W...................w............GPOS...X...%...&P..[GSUB......._...2....LTSH...........'q..OS/2.......X...`j...VDMX.......{.....\.cmap..0.........Z..cvt ..6....D...D....fpgm..4........s.Y.7glyf..;8...f....&yk.hdmx...$..%q..Z...].head.......6...6....hhea.......!...$....hmtx...h...(....uWk.loca..6....H...H.M~.maxp....... ... .;.Jname..........?\...post...\|............prep..5..........U1............._.<...................&.../................x.c`d``............X.2.E...2..+..........#.X..._....................x.c`f.c..............f,apgtf``.fefaebbbf```g@.!............;100.a....0.$...i..R`...~...x..OlTU..{.....v..S.C;...R,RZ..2.R..H."Tb..P$.Q.7$..1&..Z....uCw....&.FV(..b.FCS...{.S. .~.........sF.K..R......\|..O....;...t.T.Q....P..FYw......w..q....w...5..c.........D.._...=..p.....w............Y..y..7.....h....k....._U....o.@.E?.9.....qZ..#.:......'....:..2..o.m.}.2....m...~.<'t.{Y.n.\|Zf.t/i...}.>...Q...W.E.{t^.u~.;.*.!.............=O\Fk.w..:w].6...d.

Chrome Cache Entry: 439

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 52, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2167
Entropy (8bit):	6.2456491726492045
Encrypted:	false
SSDEEP:	48:9x1D5TNvpqq/LHvz0rwk+oDU4r6pn2vp1pBIh+JS:9xKiHL0K2hS
MD5:	FEFA7114F6F692AA0C77A46038C6EC63
SHA1:	9F17780417344EDCA37C91A05090296B35F43693
SHA-256:	4B10875381B86B03A126A8A42696DEE961EAF5D09DF5BC30DDA8623A59F3D62E
SHA-512:	C46E9ADAC494B10E3D716F01CA6DE88B094A19A4EAC2E21E5E5DFFDA4C508A5F2006A8AE96E759447098112F8CD48ABE56789214F856CEEE8583F6F0E55006DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......4.....u.......PLTE.....U.......$..$U.$..$..I..IU.I..I..m..mU.m..m......U...........U...........U..........U......$..$.U$..$..$$.$$U$$.$$.$I.$IU$I.$I.$m.$mU$m.$m.$..$.U$..$..$..$.U$..$..$..$.U$.$..$..$.U$..$..I..I.UI..I..I$.I$UI$.I$.II.IIUII.II.Im.ImUIm.Im.I..I.UI..I..I..I.UI..I..I..I.UI.I..I..I.UI..I..m..m.Um..m..m$.m$Um$.m$.mI.mIUmI.mI.mm.mmUmm.mm.m..m.Um..m..m..m.Um..m..m..m.Um.m..m..m.Um..m.......U.......$..$U.$..$..I..IU.I..I..m..mU.m..m......U...........U...........U..........U...........U.......$..$U.$..$..I..IU.I..I..m..mU.m..m......U...........U...........U..........U...........U.......$..$U.$..$..I..IU.I..I..m..mU.m..m....U.......U.........U..........U...........U.......$..$U.$..$..I..IU.I..I..m..mU.m..m......U...........U...........U..........U.......n.....tRNS...................................................................................................................................................................................

Chrome Cache Entry: 440

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (838)
Category:	downloaded
Size (bytes):	3799
Entropy (8bit):	5.2473705737367915
Encrypted:	false
SSDEEP:	96:U1lVREPwK9p2uW+QJUG/NzIjHUcYfs12+4uTb46BFMqbeXCzBYeqoH:U1lM4Kv3G/NzIZ/46jMqNzOeXH
MD5:	20CF1DED6FD43147DD0D48034CE0DC90
SHA1:	3E9C7ECDDAE4DFD92B6B5927CA88EAD38E02E2C9
SHA-256:	D0E6387139CC862A6CFC7C0A934DCE571ABEB2D0BF875096727284A4877132A2
SHA-512:	F3299AEB3DB7B94030264B7BE74A59A91ED690632D1F1240F5060150D8BECD208E89CA5E0819F2A94068402A8B80367D7E65B671DB920B76CBA27088F6E736A5
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.215.js?utv=ut4.51.202304242124
Preview:	//tealium universal tag - utag.215 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;u.ev={"view":1};u.map={"mntn_conv":"order_id"};u.extend=[function(a,b,c,d,e,f,g){if(1){d=b['pageName'];if(typeof d=='undefined')return;c=[{'':''}];var m=false;for(e=0;e<c.length;e++){for(f in utag.loader.GV(c[e])){if(d.toString().indexOf(f)>-1){b['mntn_conv']=c[e][f];m=true};};if(m)break};if(!m)b['mntn_conv']='';}}];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==undefined){var c,d,e,f,g;u.data={"base_url":"","acct":"34249","additional":"","shadditional":"","order_id":"","order_subtotal":"","product_id":[],"product_quantity":[],"product_unit_price":[]};for(c=0;c<u.extend.length;c++){try{d=u.extend[c](a,b);if(d==false)return}catch(e){}};c=[];for(d in utag.loader.GV(u.map)){if(b[d]!==undefined&&b[d]!==""){e=u.map[d].split(",");for(f=0;f<e.length;f++){u.data[e[f]]=b[d];}}}.u.data.order_id=u.data.order_id\|\|b._corder;u.data.ord

Chrome Cache Entry: 441

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6704
Entropy (8bit):	4.877543913473269
Encrypted:	false
SSDEEP:	96:MlPQJQRpExKsOU+O+8F/0MeqfN8MxD+rjQVJa15jk9UU+:MlPQJQLExKPBCbKQVJafjk9UU+
MD5:	72A86E37A4850F9CD49F9FB4B9254155
SHA1:	20436A4E237634B0D275A0505C32B3AF207F07B2
SHA-256:	7EE0D9D921E70514DF8EDCA29441700B1F0471F179824BC0FFA775C5C950C581
SHA-512:	0B071CE76C4F47C1C19C9B4593DE2305216DA496D9D4CFD7CDF1514B2C94FE2854CB7BBD3FD40A4E332B6B342CB12C99790D9EC31BC171AD7B39A46120DDEED0
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/etc.clientlibs/mtb-web/clientlibs/clientlib-bootstrap.css
Preview:	@font-face {. font-family: 'Balto-Book';. src: url("clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-book.woff") format("woff"); }..@font-face {. font-family: 'Balto-Light';. src: url("clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-light.woff") format("woff"); }..@font-face {. font-family: 'Balto-Medium';. src: url("clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-medium.woff") format("woff"); }..@font-face {. font-family: 'Balto-Semi-Light';. src: url("clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-semilight.woff") format("woff"); }..@font-face {. font-family: 'Balto-Bold';. src: url("clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-bold.otf") format("opentype"); }...body {. background-color: var(--color-lighter-gray);.}../* Desktop text styling */.h1, .h1 {. font-family: Balto-Light, sans-serif;. font-size: 3.125rem;. line-height: 3.4375rem;. font-weight: 300;. letter-spacing: 0

Chrome Cache Entry: 442

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	223889
Entropy (8bit):	5.542147017514713
Encrypted:	false
SSDEEP:	3072:3ZkupDb7GKuwuyrV8e0RZspUWiQg74BJBiKEYEtaD2FvW+e5cBss:J1Gnwuy8apUW5AFtaD2FvD2o
MD5:	F95A748BF4E8249F2FC84D86661C0AE8
SHA1:	69A9A0FD66A9034C7CF17B81BE0E37B0CC5B90C4
SHA-256:	977E1FA4CB1DEB1DE4927A40F6E74E2AF6FB7BFB050A7F73D2052D26190CA127
SHA-512:	F2A6A8EA535C434322862FCED1CC82DD06984C5ED6EAE95A7332CFEDA852812005FC0890BCD2BD9FB5619907E2BE6D3EAD19618976E6D236473F5624104FAEF1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-875517505&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":13,"vtp_instanceDestinationId":"AW-875517505","tag_id":7},{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ads_first","priority":2,"vtp_instanceDestinationId":"AW-875517505","tag_id":8},{"function":"__rep","vtp_containerId":"AW-875517505","vtp_remoteConfig":["map","enhanced_conversions",["map","CGZLCObs46YDEMGsvaED",["map","enhanced_conversions_mode","manual","enhanced_conversions_automatic_settings",["map"]],"z814CJLS5KYDEMGsvaED",["map","enhanced_conversions_mode","manual","enhanced_conversions_automatic_settings",[

Chrome Cache Entry: 443

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	14257
Entropy (8bit):	4.9419591565618965
Encrypted:	false
SSDEEP:	192:Nzd0U2E26mf0SosctQ6FJefGmDFKXwePfCrHPZQZmZpnZ6Zy8yz+/2HpumJIXE3v:RuSEHWGZQZmZpnZ6ZIz+/z1l5Uf
MD5:	5427B19AFC0D62D47A3E34F462B15D95
SHA1:	A0F90ED887038D8B74CAFCA2E984C812A7C46F9A
SHA-256:	EF59EA77A1C481278DED0BBAB5EFF463F15829FD8FBA16BD4CF0A889886F8B3E
SHA-512:	50E62A7179D41711E757BA6782CDE48BEADCD650843D703E9680F7CE0F8B2A336F9F4F081C5F11F7E6334641778AD75C0896A5324B220F08276EC03F7C64E21E
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/scripts/Moe/formInputValidations.js
Preview:	.var watcher;..$(document).ready(function () {....});....function fixforNullorUndefined(stringVal) {.. return (stringVal == null \|\| stringVal == undefined) ? "" : stringVal;..}....function isBlank(stringVal) {.. var stringVal = fixforNullorUndefined(stringVal);.. return stringVal.length == 0 ? true : false;..}....function hasMinchars(stringVal, minNumofChars) {.. var stringVal = fixforNullorUndefined(stringVal);.. return (String(stringVal).length >= minNumofChars) ? true : false;..}....function hasSpecialChars(stringVal, regxcharAllowed) {.. var rg = new RegExp(String("[^a-z0-9" + nonAlphaNumCharAllowed + "]+"), "gi");.. return rg.test(o);..}....function hasSpaces(stringVal) {.. return /\s/g.test(stringVal);..}....function hasLetters(stringVal) {.. return /[a-z]/ig.test(stringVal);..}....function hasNumbers(stringVal) {.. return /[0-9]/ig.test(stringVal);..}....function hasLettersorNumbers(stringval) {.. return /[a-z0-9]+/i.test(stringval);..}..functi

Chrome Cache Entry: 444

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1689)
Category:	downloaded
Size (bytes):	5961
Entropy (8bit):	5.243544065666255
Encrypted:	false
SSDEEP:	96:PTbR1QEnN5ejImVB/b1ybFfBdJQHJwib5IH0JUJPDdw/Sviw/he2S/dQJUbARpyw:bbFnNojImVVMbFpXQpwQ5ISSPiKa2S/A
MD5:	424341DFA8849987A2AE988F212FFD72
SHA1:	D3E52E7A1184BDAE99B7BCDEB8A2A62579FEB91B
SHA-256:	C35882D7845487B343DF4680612898CF9970B41D0B9E9A38C0A1B8AAF6552205
SHA-512:	5BDB76BAB5ABFF52DBF7E283C18FD20FF737D75D32B506532620EED2903FDC6D316B4C5B9D5AD010ED0B1C87E6B228DB0E330548D35A4DA1DEA899CDCFFA9EEE
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.70.js?utv=ut4.51.202302282213
Preview:	//tealium universal tag - utag.70 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechan

Chrome Cache Entry: 445

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (28168)
Category:	downloaded
Size (bytes):	71913
Entropy (8bit):	5.516582169520441
Encrypted:	false
SSDEEP:	1536:7+j9Awvp32xLzzt4tNkZJ0xD40JtmHpbketFTWCvQei:8uxOVoHpbketwEQr
MD5:	3F4ACDB8749C24DB8FC76CBFF668B24A
SHA1:	02CBB6DBA90DFA888FA5A9C9E3E486AEC5BAC083
SHA-256:	375F919EC7876814ECD552E9296714487692CC4735EC702264462CD6824175BC
SHA-512:	4C9812B12244E0BD4D6493114D9A4E24B4E69641D5E42E06F90A6B37F4D2C72277127BE9F5939D54FD4F722887E6E0FE45F205421C51E25E52ED31F58E4B85D2
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.js
Preview:	//tealium universal tag - utag.loader ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved..var utag_condload=false;try{(function(){function ul(src,a,b){a=document;b=a.createElement('script');b.language='javascript';b.type='text/javascript';b.src=src;a.getElementsByTagName('head')[0].appendChild(b)};var match=(""+document.cookie).match("(^\|;\\s)utag_env_mtbank_main=(\/\/tags\.tiqcdn\.com\/utag\/mtbank\/[a-z0-9\\.-]{1,30}\\/[^\\s;]*)");if(match){if(match[2].indexOf("/prod/")===-1){var s=match[2];while(s.indexOf("%")!=-1){s=decodeURIComponent(s);}s=s.replace(/\.\./g,"");ul(s);utag_condload=true;__tealium_default_path='//tags.tiqcdn.com/utag/mtbank/main/prod/';}}})();}catch(e){};if(typeof utag=="undefined"&&!utag_condload){var utag={id:"mtbank.main",o:{},sender:{},send:{},rpt:{ts:{a:new Date()}},dbi:[],db_log:[],loader:{q:[],lc:0,f:{},p:0,ol:0,wq:[],lq:[],bq:{},bk:{},rf:0,ri:0,rp:0,rq:[],ready_q:[],sendq:{"pending":0},run_ready_q:function(){for(var i=0;i<utag.loader.rea

Chrome Cache Entry: 446

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 53065
Category:	downloaded
Size (bytes):	37876
Entropy (8bit):	7.99158419117331
Encrypted:	true
SSDEEP:	768:q7B0BIAt4EfWokqpA6LuzSBgiSbiMI1WniFW73a4xoiIjng:q7u+AjfaqpA6L3BgZQW3afhng
MD5:	145712F1144416E403C7BB6A8AC5D8A4
SHA1:	AA26F72681BF87678EC571BD0C36E9BC5509FC97
SHA-256:	B18EB48737D6E17C9FD42481AC5DCDE4E1F9BD567B548E7E2B8D1CE938E21C50
SHA-512:	3770D68BB36B23B0AADF7A6F210CD3ECD213CC9E22D83DD7B1FB7BC04719C306DEA47D41135ABB9A32E04D1A0E363D9CA3CB60A4E411E7BA34234E36EC0DCFDD
Malicious:	false
Reputation:	low
URL:	https://onlinebanking.mtb.com/TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=12
Preview:	...............J.%.~...N.aO'Z.}.HH.Jd./mh.5c..C..[...[VV.@.xD./_+..`.S..I:...?...X.qN..Oy.'......`.."\..Ok.!...~.0........Z76A...k..j......?..N.y...-m.^....3.......M.o.....j._.h....OC...,..p.ok0.E..-.....r........~....D...]38..vE\|yW.............?}.....\|...........?~..?..;..._..G.......^.o.Z.........:f...i................_.............[\...6.....L~...................?C.........#...I.._..........I.bi.?.u..........a..t.....~..E..S...'.R..u\|.R2........t....8.......\..-.{:..#..<.G.)h.:.a.G....5....?..;........5..?)?..~......./.i.v......=..&...N........4...S...1.b.......s...H1..g......{..o.OC..~.oE...y...../.....s./Oa...u._n......o....7..1I.$........._..{.m.n...?:m......_~.c~.........%......Q._....?~.ZZ.A.tu7.............!........w..6.._.....G,...........yP....U}%3....u.].......KaiTerZg..2i.g......J......J.lu.lL[.._..#..!.....QA{.yV..._.xl4.0.H.?.l.....+t.......}.>...N?....D.....:..~K......M.....^.W...x.3....)T...)..e.V:...I.....f..K.f.E..i

Chrome Cache Entry: 447

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3227), with no line terminators
Category:	downloaded
Size (bytes):	3227
Entropy (8bit):	5.126059073717022
Encrypted:	false
SSDEEP:	48:h6Fac7OxwusRHHHD2dLkmttJ75cEC8Xn7LrKWkI8aWNrTQsHa5eaL/3VMGb55csJ:hiSqbQgmokN5fLNDJ
MD5:	9EE48A4DA9C402E8A23AD085FB71F28F
SHA1:	F0C59306D6313F9BEE02B53CA8903991BD24BFD7
SHA-256:	9CDAD69A4B967C882C3D8E9CB054E7334B7F8870E96427A5D20AE2D17EFF2622
SHA-512:	2C25A0BA0B95622DA682D5F1D238C77A3858D621655ECF352BD49BE5FA7D92C6417410ACCF16F50E039FE1C2863C575FA725C23A6F3587AC95A061E53B90E6D3
Malicious:	false
Reputation:	low
URL:	https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js
Preview:	var cdwpb=function(t){var a={};function __webpack_require__(e){if(a[e])return a[e].exports;var r=a[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}return __webpack_require__.m=t,__webpack_require__.c=a,__webpack_require__.d=function(e,r,t){__webpack_require__.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},__webpack_require__.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},__webpack_require__.t=function(r,e){if(1&e&&(r=__webpack_require__(r)),8&e)return r;if(4&e&&"object"==typeof r&&r&&r.__esModule)return r;var t=Object.create(null);if(__webpack_require__.r(t),Object.defineProperty(t,"default",{enumerable:!0,value:r}),2&e&&"string"!=typeof r)for(var a in r)__webpack_require__.d(t,a,function(e){return r[e]}.bind(null,a));return t},__webpack_require__.n=function(e){var r=e&&e.__esModule?function getDef

Chrome Cache Entry: 448

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	15
Entropy (8bit):	3.3735572622751855
Encrypted:	false
SSDEEP:	3:RneZn:RneZn
MD5:	5F0C8A3C3FCBE42DC9B746BD11F02EEE
SHA1:	FBF31E85841D0B64B75E1BB6B00AC1783C47C2A6
SHA-256:	0FFAD937DDADE2AD1207E4F990C55FA89D1E39F00B92D72461C1ACE398C24F7F
SHA-512:	6FDD0E81812552AA98ADB1FBE46AD9E33639E871BA83253D7CEBF2C1B70C65F5439B0707C510CF306BF0B9982AFC4EBE8C7BFF3C95BBEFDD52ACC1DDCA26C811
Malicious:	false
Reputation:	low
Preview:	hash not found.

Chrome Cache Entry: 449

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343), with no line terminators
Category:	downloaded
Size (bytes):	2343
Entropy (8bit):	5.876276976101478
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08jRkSRQbI7KJKSVmi6:wsbSUtJfxrqLWWWdV6j1PRkQS9YX
MD5:	56594C7C9A516B8A3CD7DE7364E5E6C6
SHA1:	4131111BA33C1A053BC13A75B6B51A02A8404A1D
SHA-256:	7A53C08C19DD39A8F76CA53830761662EA1DEAFB23C15DBE4441D0F8E6645E1B
SHA-512:	EF45965C827778DEC6788EA8076B1A45979849CE78CD3DC4BD25A202F4835D1FEE13B4BD540E5C7E38A4D749B4C027C20AC43AA029F3517C9F9AA36FF7B98D74
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/875517505/?random=1710377813697&cv=11&fst=1710377813697&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 450

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	631
Entropy (8bit):	4.811471571333258
Encrypted:	false
SSDEEP:	12:TMHdNZhK1t1NwLgFQRoyT0a/H1hfoJOQJKAQK40/HLZGIFgc0pRPjxUN/+:2d/E1HNwLgFQBT0a/H1xoMQJKKX/HX0B
MD5:	EC1050B05C3A7A5A4AA8C5C1CBDAFD1A
SHA1:	94E1859808BAEE1B47F2B143E6936FDF6B94F2E7
SHA-256:	89C679258FAE3AE528B4BE6B49698CCE90EDBE2A752A006852A585C0D30769B1
SHA-512:	61AB9DABBD286B0F4875BFD05E2C5EF420384FCF55EACB926DA5E5465496EC6BE1384719D0B63E727E382A9AD9F3CBCA3B28ACA6AB3CAD4D92C1FFA9EC97307D
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/icon-search-green.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 53.28 55.72">. <defs>. <style>. .cls-1 {. stroke-width: 5px;. }.. .cls-1, .cls-2 {. fill: none;. stroke: #007856;. stroke-miterlimit: 10;. }.. .cls-2 {. stroke-linecap: round;. stroke-width: 8px;. }. </style>. </defs>. <g id="Layer_1-2" data-name="Layer 1">. <g>. <circle class="cls-1" cx="23.04" cy="23.04" r="20.54"/>. <polyline class="cls-2" points="37.9 40.34 44.2 46.64 49.28 51.72"/>. </g>. </g>.</svg>

Chrome Cache Entry: 451

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 2878x904, components 3
Category:	dropped
Size (bytes):	137918
Entropy (8bit):	7.437698543991211
Encrypted:	false
SSDEEP:	3072:ymiR+OYpDl5wrAS3d9grD2Mh+/hpAUNCGhArXL:ymiR+QAS34juTvNDe7L
MD5:	46C886B0FD4BF57A47ADBDA6D2746970
SHA1:	A4E8E19E4FA2878C901AE0D3EDA420531E193005
SHA-256:	10E467A6C8EE9754DAD4B459B72C4E7D26D4E1E0F6E039AB9B1785E4291CF0E5
SHA-512:	0019F9953247997DACA29E5ED4434A458EF3092D35467DCD285BC4853015A4E2D235EFBA6C71AE1B15E5237EBCF4BF573F371D9BCFB7557F02E2DBB7478A78EC
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....,http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.2 (Windows)" xmpMM:InstanceID="xmp.iid:55C534508D9911EBB7AC94CBADDEAFB5" xmpMM:DocumentID="xmp.did:55C534518D9911EBB7AC94CBADDEAFB5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:55C5344E8D9911EBB7AC94CBADDEAFB5" stRef:documentID="xmp.did:55C5344F8D9911EBB7AC94CBADDEAFB5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................

Chrome Cache Entry: 452

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	710
Entropy (8bit):	5.130532593761623
Encrypted:	false
SSDEEP:	12:t41UMnuz+4vg4Z8GfL93ReMT+YCChI29njJPjqubKna4sHRE4x7KC7Oi:t41NnWhvgU8GDhR/TdvTnjJLRboa1xEs
MD5:	3FCCC1AA4801098B4AE5D5C44E110526
SHA1:	C77C99C7CCB0A07FECF4D1BFC2A65856E1986C5D
SHA-256:	CD5DBF4D0C6E42631BDB42F90733B7AB2A47E743654E2FB56567B92ACCA146C4
SHA-512:	AA429469B6829A0227D5E3FAC01B8B4DE2482E610D8D4B979E96A842EE9FD781962DF15E81D7D06467339E6F22A20254BF97FC55869836A3C7BBD9BB30B6B753
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/svg/icon_lock_green.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 67.53 87.58"><defs><style>.cls-1{fill:#007856;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M0,83.6a4.2,4.2,0,0,0,4.4,4H63.12a4.21,4.21,0,0,0,4.41-4V38.48a4.21,4.21,0,0,0-4.41-4h-4.4V22.56C58.72,10.12,47.52,0,33.76,0S8.81,10.12,8.81,22.56V34.5H4.4a4.2,4.2,0,0,0-4.4,4Zm17.62-61c0-8,7.24-14.6,16.14-14.6s16.15,6.55,16.15,14.6V34.5H17.62Z"/><path class="cls-2" d="M38.35,66a4.38,4.38,0,0,1-4.59,4.15A4.39,4.39,0,0,1,29.17,66"/><rect class="cls-2" x="29.17" y="57.71" width="9.18" height="8.3"/><ellipse class="cls-2" cx="33.76" cy="55.56" rx="7.34" ry="6.63"/></g></g></svg>

Chrome Cache Entry: 453

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2039
Entropy (8bit):	4.072281108290705
Encrypted:	false
SSDEEP:	48:Cq9UQCR0AvA3SrVzrc5rMFoPFVxpgvxJdxcwyjjRl5FVcFlOsvq:x9UQC253SrVnYM2tV7ebxcw6jRlVcFQd
MD5:	F2B901CF895852A0866FE4A16C7F1730
SHA1:	C4240AF1EC798477B4E65A185DDBB1B038817DA4
SHA-256:	5F5B0D9F678FE446631A33A4CBBE891A01B0ED972143702E67AE6617367096AC
SHA-512:	6199A217ECD4FDDDFF9221D6571069421D7308A150B42A0D9049615DCA4FD50BA977E4613E43BD5ECEFCA7CE3DEEB46AB18D7D1765C2C3E8020A12C1AC82C8C2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 182 33" fill="#FFF"><path d="M112.16 15.72c3.66-.83 6.02-3.47 6.02-7.51 0-4.91-3.2-8.2-9.82-8.2h-10.7v32.44h11.07c6.9 0 10.61-3.24 10.61-8.76 0-4.41-2.64-7.23-7.18-7.97zM99.7 1.68h8.62c5.24 0 7.74 2.55 7.74 6.67s-2.5 6.63-7.74 6.63H99.7V1.68zm8.94 29.1H99.7V16.64h8.94c5.79 0 8.57 2.64 8.57 7.04 0 4.45-2.78 7.1-8.57 7.1zm22.33-21.41c-4.26 0-7.32 2.36-8.43 5.79l1.76.56c1.16-3.2 3.57-4.77 6.67-4.77 3.89 0 6.12 1.85 6.12 6.72v1.3l-2.97.14c-9.96.32-12.79 3.43-12.79 7.37 0 4.03 3.24 6.53 7.55 6.53 3.8 0 6.72-1.81 8.2-5.05v4.5h1.95V18.13c.01-6.07-2.96-8.76-8.06-8.76zm6.12 14.32c0 4.31-3.06 7.74-7.97 7.74-3.43 0-5.79-1.99-5.79-4.96 0-3.15 2.18-5.65 10.89-5.93l2.87-.09v3.24zm16.08-14.32c-4.12 0-7.18 2.64-8.57 6.3V9.92h-1.99v22.52h1.99v-11.3c0-5.98 3.34-10.1 8.2-10.1 3.8 0 5.75 2.27 5.75 6.72v14.69h1.99V17.34c0-4.82-2.6-7.97-7.37-7.97zm19.33 9.4l8.1-8.85h-2.4l-12.1 13.35V.01h-1.99v32.43h1.99v-6.76l5.1-5.52 8.43 12.28h2.27M63.24 8.75h1.98s-.02-

Chrome Cache Entry: 454

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3642
Entropy (8bit):	4.095780547380282
Encrypted:	false
SSDEEP:	48:CfcluCgoEpw5PLalCPXuCB2m8LITso1HZOhc82gnlUWw8sJMpPRE5RKrdJPA1P:ZoNaUsY7MhZOhcRWXJp+KrbIx
MD5:	64162792F9EC147554540ED572424594
SHA1:	E2BD6A8D112140A7E723344513148CE79B660448
SHA-256:	F705816329CFA4F34A2AA866E59B94FBA75628D0FFF1BD61450E0C2B9DD5DC15
SHA-512:	D4DF4E7F0273CD826A13812186A2FE10920E7D778FC6ADF82A1349C7B6399F9A2D1072238F77F307EF091C3029796976EC36DB2BCA0B51C1721A90DD51D1C2C9
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/mtb_logo_green.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 240.9 45.54"><defs><style>.cls-1{fill:#007856;fill-rule:evenodd;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M4.9,4.34H0v-2c.3,0,.6-.1.9-.1H12.6c.8,0,1.1.4,1.4,1.1,3.5,9.1,7.1,18.2,10.7,27.3.1.3.3.6.6,1.3,3.9-10.1,7.7-19.8,11.6-29.6H50v2H45.2c0,.6-.1,1-.1,1.4v36.4c0,1.2.4,1.6,1.5,1.5a24.32,24.32,0,0,1,2.7,0v1.8H32.6v-1.9h3.3c.6,0,.9-.2.9-.9V10.24c0-.1-.1-.1-.2-.5l-.7,1.4c-4.1,10.7-8.2,21.4-12.2,32.1-.3.7-.5,1.3-1.4,1.2s-1.2-.5-1.5-1.3c-4.1-10.7-8.3-21.5-12.5-32.2-.1-.4-.4-.7-.5-1.1-.1,0-.2.1-.3.1,0,.4-.1.8-.1,1.3v30.7c0,1.2.3,1.7,1.5,1.6s2.5,0,3.9,0v1.8H1v-1.8a24.32,24.32,0,0,1,2.7,0c1.1.1,1.3-.3,1.3-1.4V4.34Z"/><path class="cls-1" d="M132,11.54v8.1c0,.7.1,1.2,1,1.2,4.6-.1,9.2-.1,13.8-.3a8.5,8.5,0,0,0,5.6-2.3,9.82,9.82,0,0,0,1.8-11.1c-1.8-3.6-5.1-4.8-8.7-4.9-4.1-.2-8.3,0-12.4-.1-.8,0-1.1.3-1.1,1.1v8.3Zm0,21.1v8.7c0,.7.1,1.2,1,1.2,4.8-.1,9.7,0,14.5-.3,3-.2,5.8-1.3,7.5

Chrome Cache Entry: 455

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	6607
Entropy (8bit):	4.187207897604091
Encrypted:	false
SSDEEP:	48:00KuptJBu6Uh7Zd4UeV87VhbeUlsYbe9MLs4bkOXN82g5yocW3zELzbV0tG8OUC:Hub9Zd94YrsYJLLg5yoc8zEP+C
MD5:	BCD91879F8D2846AC97E98CB5CD65E53
SHA1:	6AF6040A80381434EE17FAE7BFA80D4232DB0DCF
SHA-256:	01E93F31CEBFF31883ED39498A49A387F3E3BD30C1C3CC36D48350405C37E900
SHA-512:	6EFC9F3E033955133401EEF8DE9DFDF670928E67303677A44BFA94F4320F559D00E6B5E4E0D95640B010D3889F1F146DA5E4C92FFC6B954D0BA7F72A87672DB8
Malicious:	false
Reputation:	low
URL:	https://mtb-repo.pages.dev/
Preview:	<!DOCTYPE html>..<html lang="en" class="__sticky-footer __sticky-footer--links">. <head>. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />. . . <title>Welcome to Online Banking \| M&T Bank</title>. <link. rel="shortcut icon". href="https://asset.mtb.com/Documents/html/homepage/favicon.ico". type="image/x-icon". />.. <meta. name="viewport". content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0". />. <meta http-equiv="X-UA-Compatible" content="ie=edge" />. <meta name="format-detection" content="telephone=no" />.. .. <link href="./mtb_files/css.mtb.css" rel="stylesheet" /> -->.. . . . . <script type="module" crossorigin src="/assets/index-ewIPLFCo.js"></script>. <link rel="stylesheet" crossorigin href="/assets/index-1PX0Jpt0.css">. </head>. <body>. <form method="post">. <input id="UnMaskedUserId" name="UnMaskedUserId" type="hidden" valu

Chrome Cache Entry: 456

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	222294
Entropy (8bit):	5.547634432236266
Encrypted:	false
SSDEEP:	3072:yGkupDb7GKuwutrx8S8RZsp0WiQg74BJBEEYEtaDJFvW+exciAu:11GnwutMap0W5ZtaDJFvD0l
MD5:	1E198B1159FFF50D254A739CDE76F116
SHA1:	23E945B6B96080850820944C464A917D2CB59997
SHA-256:	2A395D30D4548F5D0B5EBEB8BAC7B52AFDE694D8FBCB53CBB1FD86691E98AA5F
SHA-512:	6C9FF08BABFE00EB07CDCDF2355866659F17299D5328EFD1B3703DC07CC82B3BF96EFAFC4C4E21EA8EB5633BCC8A8968E95DE5268C2AB40E59994E2F4719E0E9
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-990489911
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__c

Chrome Cache Entry: 457

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1312
Entropy (8bit):	5.098595818873659
Encrypted:	false
SSDEEP:	24:2d8df83LIjeaxM2liVf8/a1K1itrARKq//k0T4QShlloT02ZKQShlls/4o:c8eboFgnp8k0TtdZFz
MD5:	2AEEF916416B88C3B5A46C225DA65B0C
SHA1:	A5C3BC7CA572992BE8CE895CE33C37FB2F5DF463
SHA-256:	50D953DE8E245B07DC2E1905612DDA04668C570D39494712BDC8D94166D0CA69
SHA-512:	30B7D72AB40D2F793985DB507D9EFF743B0983CE5804712C5F649AFC60BCB2FF4F41AEAE1D4071182CE562817D6B32C83867DBD447F98EBF461EB4FEC98C00C4
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/pub-lp/banner-check.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="88px" height="88px" viewBox="0 0 88 88" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>Checkmark Icon Copy</title>. <g id="Version-3-Fixed" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Business-Banking-Welcome---Desktop" transform="translate(-180.000000, -1737.000000)">. <g id="Check-1" transform="translate(120.000000, 1693.000000)">. <g id="Checkmark-Icon-Copy" transform="translate(62.000000, 46.000000)">. <path d="M84,42 C84,65.1962732 65.1962732,84 42,84 C18.8037268,84 0,65.1962732 0,42 C0,18.8037268 18.8037268,0 42,0 C65.1962732,0 84,18.8037268 84,42" id="Fill-1" fill="#FEFEFE"></path>. <path d="M83,42 C83,65.1954136 64.4206444,84 41.5,84 C18.5793556,84 0,65.1954136 0,42 C0,18.8045864 18.5793556,0 41.5,0 C64.4206444,0 83,18.8045864 83,42 Z" id="Stroke-3" stroke="#008164" strok

Chrome Cache Entry: 458

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	144
Entropy (8bit):	4.886658201289085
Encrypted:	false
SSDEEP:	3:2LGffV8QgfQRPSHOqtIDz3VYeZcSYfQRZSR+l/HMeen:2LGXxQKSHOqt+BzZ9IcSR+q
MD5:	4C55773C0D090D32EB149D6C7EB128BA
SHA1:	3F86845C5F1D17A874796C435CCFFDAAF8CDD33D
SHA-256:	14C57A750D85C2EC0A17391A1FAF08164C01132D1437332B5CBA521CD216A360
SHA-512:	C1596655872E8EEA3065ED22B2E46BC78B44ACDCA0531C2B994BF829C17F57AAB37C0E738F44304592C00571CDBDC50B38829009BC97ED8FB1987E1C83D289F5
Malicious:	false
Reputation:	low
URL:	https://gs.mountain.com/gs
Preview:	(function(){irongate.g=function(){return '79d58da8-d206-337a-b886-f6229ccac695'};irongate.gt=function(){return 1710377816764};irongate.dl()})();

Chrome Cache Entry: 459

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	842
Entropy (8bit):	7.621914736199469
Encrypted:	false
SSDEEP:	24:T6Dk35KzFZ77+RIfefy0Nmn/8k6/Sk+xZuZuzl:ApZ77+KGlNmnkk6/10
MD5:	BB90A4AE36322D887347D2F45861E810
SHA1:	235A731571F44A4001D6405D48C92164CD4328AE
SHA-256:	66E4AA69769971116030515799C022549C3772BF27BD52E2259EF4851F55EB10
SHA-512:	456A0907767440A6775501ACAB6E4DE91B47AFE4A30EC002BE9A98ABCEAC43040D6C896EDBC5B1B91D6324347D9268F5771842384B45EDEA8AF59427D1AE7A57
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/logos/favicon.ico.transform/32x32/image.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx..IL.Q....G..1......(.hL4^41Q......Y... F...P...@...De.UCi...P ,...&P....).SZTn\.....gy..g.....C...D..`..n./..9...z.....fs3j.."=..E. 76p........._;`dn...Ked.Z........N....Y.-..w....L.x\|.vy....vE!.W..s.f...$...M).5...[...&..$........._e2.....)..\|3.Hp.P.&...2...gt..........&.....u\..........O..Y....@...Q....h.5:..Y&8@N..R...........}..5..........gb.n...a.gw3..043....Q......O.....f.....$.W[.R...<...5n..o....`ba.B.Ud./9.VlV0..B.[.....Wv.......13....9\)..d..8@..0K.3.....C...W..9....M..(\V..>...Q...P.}.h........d....O2....wQ.......\.^SD.c..X.Z7..v........V..\..j^..y...$k..6g...\.r..0.....eW\|0U7:......g,Z......B.UV.V.....v..-.=.+................D..#}H.>.G..a.. .....Y ....=....35....2.?Q...3.p\|~..C.....u.}.)yk..........4..!V[..u%n....V.7..D..@......J.......IEND.B`.

Chrome Cache Entry: 460

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 461

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	15822
Entropy (8bit):	7.9575799002181
Encrypted:	false
SSDEEP:	384:RCuVI4IrVf3dZRDmmGGjuEQeFmmOg52gbm:RdlOV/hmm3juEQeTK
MD5:	652A2382A1D4D1159BFFE5DD9C77877D
SHA1:	84B893FD39255950601DA0C8D65735D28E775892
SHA-256:	ACFA0CC8B42493333D9032C79E4D91D7BBDD40995A283A3945075DA6FB2F3CFB
SHA-512:	81D0806D8D2657E623F91824D44DC33F4D5375B96A1768B64C741E5A2CB02D443236F565763C38E651003BF81F4603569F506A5571B95CC05859E1D9D58517FB
Malicious:	false
Reputation:	low
URL:	https://asset.mtb.com/Documents/html/homepage/favicon.ico
Preview:	.PNG........IHDR...,...,........"....tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:4CE2F5850C98E41191D88808CA6C83CE" xmpMM:DocumentID="xmp.did:089565F0984011E4B903D8EB7B2BD9E5" xmpMM:InstanceID="xmp.iid:089565EF984011E4B903D8EB7B2BD9E5" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4CE2F5850C98E41191D88808CA6C83CE" stRef:documentID="xmp.did:4CE2F5850C98E41191D88808CA6C83CE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.3....9.IDATx..].\|...?';$...g ..H..KPP..EQDf..Z[....

Chrome Cache Entry: 462

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2039
Entropy (8bit):	4.072281108290705
Encrypted:	false
SSDEEP:	48:Cq9UQCR0AvA3SrVzrc5rMFoPFVxpgvxJdxcwyjjRl5FVcFlOsvq:x9UQC253SrVnYM2tV7ebxcw6jRlVcFQd
MD5:	F2B901CF895852A0866FE4A16C7F1730
SHA1:	C4240AF1EC798477B4E65A185DDBB1B038817DA4
SHA-256:	5F5B0D9F678FE446631A33A4CBBE891A01B0ED972143702E67AE6617367096AC
SHA-512:	6199A217ECD4FDDDFF9221D6571069421D7308A150B42A0D9049615DCA4FD50BA977E4613E43BD5ECEFCA7CE3DEEB46AB18D7D1765C2C3E8020A12C1AC82C8C2
Malicious:	false
Reputation:	low
URL:	https://mtb-repo.pages.dev/mtb_files/mtb-logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 182 33" fill="#FFF"><path d="M112.16 15.72c3.66-.83 6.02-3.47 6.02-7.51 0-4.91-3.2-8.2-9.82-8.2h-10.7v32.44h11.07c6.9 0 10.61-3.24 10.61-8.76 0-4.41-2.64-7.23-7.18-7.97zM99.7 1.68h8.62c5.24 0 7.74 2.55 7.74 6.67s-2.5 6.63-7.74 6.63H99.7V1.68zm8.94 29.1H99.7V16.64h8.94c5.79 0 8.57 2.64 8.57 7.04 0 4.45-2.78 7.1-8.57 7.1zm22.33-21.41c-4.26 0-7.32 2.36-8.43 5.79l1.76.56c1.16-3.2 3.57-4.77 6.67-4.77 3.89 0 6.12 1.85 6.12 6.72v1.3l-2.97.14c-9.96.32-12.79 3.43-12.79 7.37 0 4.03 3.24 6.53 7.55 6.53 3.8 0 6.72-1.81 8.2-5.05v4.5h1.95V18.13c.01-6.07-2.96-8.76-8.06-8.76zm6.12 14.32c0 4.31-3.06 7.74-7.97 7.74-3.43 0-5.79-1.99-5.79-4.96 0-3.15 2.18-5.65 10.89-5.93l2.87-.09v3.24zm16.08-14.32c-4.12 0-7.18 2.64-8.57 6.3V9.92h-1.99v22.52h1.99v-11.3c0-5.98 3.34-10.1 8.2-10.1 3.8 0 5.75 2.27 5.75 6.72v14.69h1.99V17.34c0-4.82-2.6-7.97-7.37-7.97zm19.33 9.4l8.1-8.85h-2.4l-12.1 13.35V.01h-1.99v32.43h1.99v-6.76l5.1-5.52 8.43 12.28h2.27M63.24 8.75h1.98s-.02-

Chrome Cache Entry: 463

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2058)
Category:	downloaded
Size (bytes):	233260
Entropy (8bit):	5.641709911064782
Encrypted:	false
SSDEEP:	3072:jdNx2eOjfkoeM/oM7i9kRG5jbB9ytSmkG/Q9G+a05ivG55SXXg+TZ:JOjfvJRMvB9ytSmfK0Mie5mQ4Z
MD5:	E6D01CCE667DF4DC0578BA0491C22594
SHA1:	D2EEF0998F28DD283A746C0813D5CC4D02260C9F
SHA-256:	BAD67A14BA08ED9FD2EBA27C2CD94F148C0C1AFC3E222DB70FB296F8C5349DAB
SHA-512:	16CAC6A264521D44BB157D1F15E71F9F3212274F86DB09857B523010E8BC08F73D50233A5358CA5FE3FC4BB2488034025B479B24EDCFE4A6FE5767B33A50B791
Malicious:	false
Reputation:	low
URL:	https://onlinebanking.mtb.com/ruxitagentjs_ICA2NVfghjqrux_10285240307101407.js
Preview:	/. Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ /.(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ba=-1!==document.cookie.indexOf("__dTCookie");document.cookie="".concat("__dTCookie","=").concat("1","; expires=Thu, 01-Jan-1970 00:00:01 GMT");return Ba}function gb(){return void 0===hb.dialogArguments?navigator.cookieEnabled\|\|Ka():Ka()}function ib(){var Ba;if(gb()){var Ia=hb.dT_,Va=null===Ia\|\|void 0===Ia?void 0:Ia.platformPrefix;if(!Ia\|\|Va){var La=null===Ia\|\|void 0===Ia?void 0:Ia.minAgentVersion;.La&&"10285240307101407"<La+""?window.console.log("[CookiePrefix/initConfig] Min agent version detected, and javascript agent is older - the javascript agent will not be initialized!"):(La=(Ba={},Ba.cfg="#CONFIGSTRING#\|auto=#AUTO#\|domain=#DOMAIN#\|rid=RID_#REQUEST_ID#\|rpid=#RESPONSE_ID#\|app=#APP#",Ba.iCE=gb,Ba.platformCookieOffset=null===Ia\|\|void 0===Ia?void 0:Ia.platformCookieOffset,Ba),Va&&(La

Chrome Cache Entry: 464

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 64397
Category:	downloaded
Size (bytes):	18932
Entropy (8bit):	7.9883307763313
Encrypted:	false
SSDEEP:	384:3tSo1T5qVxPFdWPLFmlpqCyGnhR5s78lZ4V7CRkKPvNHPu:dpFqjPFdyF8cC9hRW78MV7CRkKHNvu
MD5:	3A432CCAA78665BA280893F08585082C
SHA1:	4E7DBBC74F954408D019480DF07F318207363F8C
SHA-256:	1450D5BBC2C9D58C9FA961103F65C12FE5AC8A070EAAF7F478DD97044A743EA6
SHA-512:	F22C352BED4F1A9A72B76752FDABBF09E07A6B90BD4197C5A817B1B42FA9C07A1D0EFFFE5E43D2E09E1A87AE96E4C7C7AB59CDA7BE3993A865C44C09F250C899
Malicious:	false
Reputation:	low
URL:	https://onlinebanking.mtb.com/TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=9
Preview:	...........}ks.F..w..I..!LH.g. .V....Q.]F,7.6 k..n.&..{.............m..9.&.GUVUV.3..............M..........e..........i............s..V..wC.UL.Iuz:q...~.......L..k.....SY:.....;h`g...[p'.....I1-..nW.8...5<d.....ju.......O..........-....1.p.;..s....q]...S.B..[..}+7S....._...xjM../-........._..5.'.9..D..V0...J.C.@..h.....M...is...b4:<..'.Vw.z.I95+..nus....U..2..m?.2).n>~\.~........\|.<...)Wo.....u....ezr..].X.....-./.\|x(&..\|z.p2i...?...X..sg.Hxu=..Y.8.s.......'.Qi.....iuU^..'.c.[...>....e.,F..Z....#....q.pv...]h.s..B.r]..V.7.rW?.[}p._...n..x...............+.......X.......}Wn....?m.W............O...on....-.\....wS...G. .4~..j......1.7.b....?...v}......`J.........q...ONF../...Uz..Kn.K...9.h......7o\|k.i;.:.i...7.....'.....{D.....g.)...G..Hu.. ..Zu.s.~.........K.......;..7.............i.3dL..i.P..W.....z...$s..q..6...a."....6?..0....c.q.9..8..........L...&d.\...Z.W..;E.....6hQ.kM..xr\7..j.s.x..g.\|z......u......i ..~.....m.O..C.*_.A.

Chrome Cache Entry: 465

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 636x473, components 3
Category:	dropped
Size (bytes):	47067
Entropy (8bit):	7.9402712505309445
Encrypted:	false
SSDEEP:	768:xoYs487S7j5yWoEIDR7l3z6MREK65NP1GL1dpLhZDeU+20q7m2c7Y5ucc9oeBJf1:2Ys48mxRUDRdxEKmO1nLeUF0q7Zc7Y4l
MD5:	98EABCB002E917D9B0522448CEF0DEAA
SHA1:	5A881B6AD2867C30EE727308B77CE0D39B09665C
SHA-256:	848A8F5130A9180D852C9D7EE9D7FAB24B225E902FAE4DF3C53F0FFD287FFB88
SHA-512:	CE380760E954DA9AE1491C001E33308083F9C0E54919905A98B0115A0C97F801A66FDB24D2B85D00EAF115057EDCFD0A1912ACA09FFEB97059747D0CFEE4C28B
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C................'.....0"$.'92<;8276?GZL?CUD67NkOU]`efe=KownbvZcea...C...........aA7Aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa........\|..".......................................C.......................!.1A.Q."aq.2..#B...3R...4r.$Cb...5S.%c.s.................................2........................!1A."Q.2aq..#B...3...RS.............?...4.......$.*X..d.T..@.fO\|U.b...b.`.S.y.G".......d.{".x..O..".....-!B..Sb...I.......W..f.RD.9L......wb.h..8...O.J$...c....z..).sP..S.....1Q..0.e.x.

Chrome Cache Entry: 466

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (457), with CRLF line terminators
Category:	downloaded
Size (bytes):	15052
Entropy (8bit):	5.333764682652863
Encrypted:	false
SSDEEP:	192:mZWUrX/BzVBeoTqGHIUyvAEMaP7AzbSZOnzh3FT0W33juMh1ml5IMhOl5IMh33Ni:NUrXkRhhvF89flF9vy
MD5:	C88B5A3A4CD6A73E1E082C214F45EF5C
SHA1:	F0EADE117F67DA66B09F9E2DE2B4108BE4E2950D
SHA-256:	3B665CA9BC74D637485BBB9E18DBF32F53B8530F2529A9FF80EB4C218FCC30AF
SHA-512:	6D51CFDCDEB131727072366DBC020727697E49040C5DEC4F770B16D5870B50AF326227E9CD2440A00425691A85DB084C319F471992B926DD6A3AD14EC08A6EF3
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/scripts/status.js
Preview:	function mainNavActiveChecker(){....try {....if(/peoples/gi.test(window.location.href)){.....document.querySelector(".header-nav-item > a[href*='peoples-united']").classList.add("-parent-page");....}....} catch(err){}...}....var homepages = {..."personal":["personal","personal-customer","personal-mortgage","customer","homebuying","home-page"],..."business":["business","BusinessCustomer","businesscustomer"],..."commercial":["commercial"]..}....var moveAlertBanner = function(){...try {....if(document.querySelectorAll(".alert-banner")[0]){.....document.querySelectorAll(".header")[0].append(document.querySelectorAll(".alert-banner")[0]);....}......} catch(err){.......}..}.....function DownSlider(p,k){ //p = parentSelector, k = kid selector...try {....var sliderParents = document.querySelectorAll(p);......[].forEach.call(sliderParents,function(sliderParent,i){........var sliderKids = k != undefined ? document.querySelectorAll(k) : sliderParent.children;.....var allKidsHeight = 0;..........

Chrome Cache Entry: 467

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1570)
Category:	downloaded
Size (bytes):	4721
Entropy (8bit):	5.2803366061260135
Encrypted:	false
SSDEEP:	96:Q8bcnP4ReIZB/zfF4rCiRrpjhkJUU+Oh5YuU:Q8bcnP4gIZpf8RrZBUJtU
MD5:	0F46A48FEB8441BDCE1D3EE97355A2AE
SHA1:	320511CFC07F1FC6D45C7BB419EA737269C8493A
SHA-256:	3B63CF8E90358636A5E34CD686E61B65B6F9251EE4893B3DEC917AC23C8A3902
SHA-512:	40C3BD8862C30C70DD0EFE754897F55A57C84F500B37B1760D6AF6B367C75C7B9E4A099FDAE3F9C557A05CE0B58AA1C724E3104F492D1EF12DF7DF5C6C45F67A
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.210.js?utv=ut4.51.202308231951
Preview:	//tealium universal tag - utag.210 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechang

Chrome Cache Entry: 468

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 427218
Category:	downloaded
Size (bytes):	122337
Entropy (8bit):	7.9976709727461035
Encrypted:	true
SSDEEP:	3072:kk2B/ojQYVjSMWPnNwfJ+bu/CYns4fTrOSpIN3n4pcYF:kXB/okZ8+S/HaSpmX4iYF
MD5:	B644C9F5108B40E0171AF474FCD0563A
SHA1:	FB2B99E71AE8F259D7650D1501A653BA9410484F
SHA-256:	A30292B87443F4C283A654C58A050E673B73E3A8FD49E90B67F6F52D62423AC7
SHA-512:	2DD67108A8FBE340BEF21013736EBBA849447F18F4F4FF5166520F37F8A23FE63A175BD122A01D90314892823F66718B75048E7E91A224FF812C9D5F2844058B
Malicious:	false
Reputation:	low
URL:	https://onlinebanking.mtb.com/TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=11
Preview:	...........k..H.(.]..N.x...C.#..d91wn.+Aw...b.t...;.K.............D...^,....`<N........z............-.>...._>.{....F...y..Y.........0.O...v.x........_...c{7.[t.....?L...h.c..........^&..Uw..}........r..q....?\|....~\|......M.7.m....G.<:.{....i.}:....L..........[.....O.R.5.nJ.e..y.&....7......i......$..%4L-\|...I.h.~.A.7.N.A'...qb.o.=.8.I~.a..g...aRe...1.F...E....!AE...x.-.i...&.'.=}+.[W.7.S...ZN..5&..hq_.:t.R.U..f..f..y.c.a..(V..F_m..Y...%4.&]..;.>,..{.b.....9....S...8..]>...ex.............C+`...7.q.L...q..M.WmT.i^..}.7.lv..sP>rC....s.)?...8.....*Y<.>.~....~...q..1...5.7......Nc.t..Z.......?...\|.\O."Os.l..>...N...W../l..M.........D....?N......fg...- .#l/...}.f=.P....no.p.-.U;}...w.?<.........J...)..b{....?...._..^.....U.#f..e4b..y.....x...S......v....l...yt...5...?.....%.r..ea;.E.<....Y.G.._.......g..w...x...&ar...g.%....p'y.......>...._.._..O.Z..~......[...;.._...3....6...r......... ....&......Fq...6.v.n7....M.&..<s\%...J.h\.....<.....iQ.r^M

Chrome Cache Entry: 469

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1152
Entropy (8bit):	4.54883244660136
Encrypted:	false
SSDEEP:	24:t41CnWhvgU800bBlW09hEwzjuzXlrvuRNzV9n0bSuO91WImjD:Cawl8fBBRjeJv679n0bP
MD5:	ADE554F91E52849605C30A8072E25E97
SHA1:	69EF930D2C4592A1D2213372E2752DE77F3B0A64
SHA-256:	D01D4D65754E63146D58C815FAA0F5E2B0857FE47374DD34D742632E9B34C283
SHA-512:	53CF4EC17E5512594E748519F68BE70ABCCDAB36C19708F33B6DEE778D22390D33B496BAD832DD00E38ED5ABD89ADF14F70254071E635EB9252969136361FF56
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 193 193"><defs><style>.cls-1{fill:#007856;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><circle class="cls-1" cx="96.5" cy="96.5" r="96.5"/><path class="cls-2" d="M146,63.89A38.3,38.3,0,0,1,139,66.26,22,22,0,0,0,144.77,57h0a1.15,1.15,0,0,0-1.7-1.34h0a39.05,39.05,0,0,1-10.77,4.43,3.23,3.23,0,0,1-.67.11,3,3,0,0,1-1.91-.73A22.08,22.08,0,0,0,115.13,54a23.08,23.08,0,0,0-7,1.08A21.23,21.23,0,0,0,93.78,70.49a23,23,0,0,0-.52,8.09.68.68,0,0,1-.2.62.84.84,0,0,1-.62.26h-.1A57.7,57.7,0,0,1,52.58,58.22h0a1.16,1.16,0,0,0-1.91.15h0a22.11,22.11,0,0,0,3.56,26.81,20,20,0,0,1-5-2h0a1.14,1.14,0,0,0-1.7,1h0a22.07,22.07,0,0,0,12.89,20.32H59.9a18.73,18.73,0,0,1-3.71-.36h0a1.13,1.13,0,0,0-1.29,1.49h0a22.19,22.19,0,0,0,17.48,15.06,40.56,40.56,0,0,1-22.79,6.91H47.07a1.69,1.69,0,0,0-1.65,1.29,1.65,1.65,0,0,0,.82,1.9A60.55,60.55,0,0,0,76.66,139a61.36,61.36,0,0,0,26-5.51,58.3,58.3,0,0,0,19-14.24,62.57

Chrome Cache Entry: 470

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.066108939837481
Encrypted:	false
SSDEEP:	3:GMyoSt:jFSt
MD5:	96B191AE794C2C78387B3F4F9BB7A251
SHA1:	F974547DF0ADFFB7E80699552C6BCE3E709343A6
SHA-256:	CE76758AEEF2CAF12021AFB5257D0CA4E9E5C20015C2C85D68BB27FA6B1AFB28
SHA-512:	07EE1CFDBD53C1046FA4F44FF7C83F4456CDAA099299816B451D114E3EEAAD4BE8F0CD0FC09F0E838418BCBB5E50547E806E8E080B8E3421D0DB26FF4C15D412
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlW5YO1IpnAPBIFDeeNQA4SBQ3OQUx6?alt=proto
Preview:	ChIKBw3njUAOGgAKBw3OQUx6GgA=

Chrome Cache Entry: 471

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 640x475, components 3
Category:	dropped
Size (bytes):	93613
Entropy (8bit):	7.9809332069346315
Encrypted:	false
SSDEEP:	1536:gTCGj08QeB+Qa7DV33EiyWw/F3siyAw+UsuJPs831WVdQSKdZZTP8QaNVIsbJ:ghw8Qq9a7GiyWwRJyA3uJb31WVdPmPP6
MD5:	10F1A17AA428C8110AAFD638DBB58EDA
SHA1:	B323327ADDD89F303556E6D54C8D810A1AC09B79
SHA-256:	DC79353A89F84486576456E49D9E722B01B6B3882D26F01919EB3185AAD206A5
SHA-512:	3E7E11BBFD90F76911F7A5C5FD5E383F45E610C78E8AB0B909BBA4BF7879F2B489F745610D02780ABB9AFC9692450BC974C6928AFC1AFDC5ECE2CB9F0F0CBCDE
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......E......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:77462874947911EEBA10B425DBC72A80" xmpMM:InstanceID="xmp.iid:77462873947911EEBA10B425DBC72A80" xmp:CreatorTool="Adobe Photoshop 2023 Windows"> <xmpMM:DerivedFrom stRef:instanceID="7650D960A4B5EFB82B8D183AF1C5A617" stRef:documentID="7650D960A4B5EFB82B8D183AF1C5A617"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................................

Chrome Cache Entry: 472

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2316), with no line terminators
Category:	downloaded
Size (bytes):	2316
Entropy (8bit):	5.86910383935527
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt088ULkSYQerD7LKAx6:wsbSUtJfxrqLWWWdV6j1wULklNS
MD5:	1AAC982708699EFADC51606E9CCCB10E
SHA1:	7EC31E6303EC40B7C1E3ED6F4574E780C0B132D0
SHA-256:	5E9AA0FA591DA387CD80C71EC8DF640EA1F80CF48B971A26F2AB7D7DF50164BE
SHA-512:	1D132DB1C3516DB74FEDC453D6A8971184AB77FFEA8F39B5F153240BF3127B908CE65BD64BC67D3CCCB0B22ED7B2A5F5CC05E9CC67A3B510E5AFC6EB9C6CDFD4
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/990489911/?random=1710377841052&cv=11&fst=1710377841052&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fm.mtb.com%2FEnrollment&hn=www.googleadservices.com&frm=0&tiba=Enroll%20in%20Online%20Banking%20-%20Select%20Account%20Type%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 473

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	221
Entropy (8bit):	5.173729213216515
Encrypted:	false
SSDEEP:	6:hxLchdxkGXbv+EQtNVkA7G86XIGYNGY4HX4Qb:hwxkOgNVkA7GXXIVV4IQb
MD5:	21E34CF6A03F570DF49E212018A567D0
SHA1:	F0BE4058936850AE0163F5137600D14B6632BBB3
SHA-256:	0A23512EA579554AF1F2614D6DEA6120D38660028FC7624C71A978478FAE0EB6
SHA-512:	85F32EA67B64F49CB438A32C9F77D2D746CF67D3387C4C9D5E78EE181B7FB11F444D6DC17DEA19A69F8EFA5D4D52AC016E6EEA78A741A6658CF86C15B7FDACE9
Malicious:	false
Reputation:	low
URL:	https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html
Preview:	<!DOCTYPE html>.<head>.</head>.<body>.<script src="crossdomain2.12.0.5273.b96c35cc.min.js"></script>.<script>. var ccApp = typeof cdwpb !== "undefined" ? new cdwpb.default.Application() : {};.</script>.</body>.</html>

Chrome Cache Entry: 474

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3546)
Category:	downloaded
Size (bytes):	19195
Entropy (8bit):	5.197656389442245
Encrypted:	false
SSDEEP:	384:WCRWg53JJr9nkHAkIxkHAkI0kHAkDsIGJcDoLRKGqJ8eTV:WstTDO3QV
MD5:	6D18451A6CA6B8DD9A1AA6F66D8D405C
SHA1:	6FDDD5578113596EE4A76BEA61417F5FAB8E927D
SHA-256:	92F4AAF7E668AD5B546B700292F1B324474317DB1DDF40B47FB4A9AC3EBA695D
SHA-512:	B895EBCF31528942E7C53F723305F60BF9DC0F5DDA1629FDD4B7C52CB008671DBF02EDE01BFD5FABA9ED225D6C50C6D870E1538C9B9B4A24F1996F6EC77703B5
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.214.js?utv=ut4.51.202311032118
Preview:	//tealium universal tag - utag.214 ut4.0.202402142352, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;u.ev={"view":1,"link":1};u.map={"ga4_event:retailchecking_redeeminbranch_lead":"retailchecking_redeeminbranch_lead","ga4_event:retailchecking_ezchoice_nao":"retailchecking_ezchoice_nao","ga4_event:retailchecking_myway_nao":"retailchecking_myway_nao","ga4_event:retailchecking_mychoicepremium_nao":"retailchecking_mychoicepremium_nao","ga4_event:retailchecking_mychoiceplus_nao":"retailchecking_mychoiceplus_nao","ga4_event:bb_tailoredchecking_nao":"bb_tailoredchecking_nao","ga4_event:bb_simplechecking_nao":"bb_simplechecking_nao","ga4_event:cd_cj_nao":"cd_cj_nao","ga4_event:bb_sbalending_lead":"bb_sbalending_lead","ga4_event:bb_generallending_lead":"bb_generallending_lead","ga4_event:bb_merchant_lead":"bb_merchant_lead","ga4_event:bb_bcc_lead":"bb_bcc_lead","ga4_event:consumerlending_applyonline_click":"consumerlend

Chrome Cache Entry: 475

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3019)
Category:	downloaded
Size (bytes):	29999
Entropy (8bit):	4.390260319847339
Encrypted:	false
SSDEEP:	384:JS8to9Pu6ByDic4DhVfqwuXp4FbPfa7ecD4hYkc:JXtoZu6By+DDhFRuXp4FbPf830Ykc
MD5:	0556FC395CBC0E07E89BEB1BEDFD63C9
SHA1:	E11F94857ED2B1ADCCE363A357C092D64E35D1B6
SHA-256:	765F3EF7D17F032F3DCDA5AAE9B03EBFEDCA019F5C4F3169198E155753860128
SHA-512:	7954FD1C2308A69C6090F0485F34DAD62243A6B2E0C9856DFF39CDC8F24722C335D74EFC4D538129B6759DEED2D71FBC5F1A5FC99A15D4AE86061236EB505298
Malicious:	false
Reputation:	low
URL:	https://dx.mountain.com/spx?dxver=4.0.0&shaid=34249&tdr=&plh=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&cb=55960873835234740
Preview:	var dcm_cid,dcm_tid,dcm_gid;!function(){try{var d=document.cookie.split("_ga")[1].split(";")[0].split(".");dcm_cid=d[2]+"."+d[3],dcm_tid=ga.getAll()[0].b.data.values[":trackingId"];d=document.cookie.split("_gid")[1].split(";")[0].split(".");dcm_gid=d[2]+"."+d[3]}catch(d){}}();(function() {.. var mntnis;. async function fwto(resource, options = {}) {. const {. timeout = 1000. } = options;. const controller = new AbortController();. const id = setTimeout(() => controller.abort(), timeout);. try {. const response = await fetch(resource, {. ...options,. signal: controller.signal. });. clearTimeout(id);. if(response != undefined && response != null) {. return response.text();. } else {. return undefined;. }. } catch (fe) {. clearTimeout(id);. return undefined;. }. }.. fwto("

Chrome Cache Entry: 476

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.5724312513221195
Encrypted:	false
SSDEEP:	3:uZuUeB:u5eB
MD5:	53AF239EE5D3E261545DEDEDCB6FFD57
SHA1:	04CA7E137E1E9FEEAD96A7DF45BB67D5AB3DE190
SHA-256:	99EB12F2AB3C4866A353E098FFA3CB7A967E617C49B98480394EC5D8EA92B094
SHA-512:	C734E4A5FF5D335A91518DBF47861BDAF8012AF49371DCD2E3350E269C9A5A1CC094114D17C4F5B053F3757B4B07487EBD0D309C91EF97ACF4665CC5D5C9A2D3
Malicious:	false
Reputation:	low
Preview:	404 page not found

Chrome Cache Entry: 477

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	221
Entropy (8bit):	5.173729213216515
Encrypted:	false
SSDEEP:	6:hxLchdxkGXbv+EQtNVkA7G86XIGYNGY4HX4Qb:hwxkOgNVkA7GXXIVV4IQb
MD5:	21E34CF6A03F570DF49E212018A567D0
SHA1:	F0BE4058936850AE0163F5137600D14B6632BBB3
SHA-256:	0A23512EA579554AF1F2614D6DEA6120D38660028FC7624C71A978478FAE0EB6
SHA-512:	85F32EA67B64F49CB438A32C9F77D2D746CF67D3387C4C9D5E78EE181B7FB11F444D6DC17DEA19A69F8EFA5D4D52AC016E6EEA78A741A6658CF86C15B7FDACE9
Malicious:	false
Reputation:	low
URL:	https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html
Preview:	<!DOCTYPE html>.<head>.</head>.<body>.<script src="crossdomain2.12.0.5273.b96c35cc.min.js"></script>.<script>. var ccApp = typeof cdwpb !== "undefined" ? new cdwpb.default.Application() : {};.</script>.</body>.</html>

Chrome Cache Entry: 478

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	103632
Entropy (8bit):	5.441221482114423
Encrypted:	false
SSDEEP:	1536:+eb5Sn+wo7Q3N5p8f2Rak/o/iRCx9wBYt3bQlQlt2DG1NvUAzOCPlXIaIDeVWy3r:+ok3ZqmRyh51zCsn3Lq0
MD5:	D652415262591AE947D69E16F0032FEC
SHA1:	EEB6650F0C68E15339468B9C99B93389FBCB1411
SHA-256:	98C390C021989CFD0361E1D10F935A2FB0F5367DF51151D81E8FE82B623CE1F4
SHA-512:	A77ADE52E00041721CD0E8A9F99B63D256E5426D78FB7F2BEFE23BDCCB332FB007427E4D962C8C4124CE90F330E4BF2CEAE98CDF43FB6C446A226F7914B968EB
Malicious:	false
Reputation:	low
URL:	https://ob.segreencolumn.com/i/8032d93d154e4517e5e5e20fa9c27d7b.js
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"_",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t._)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var i in t)r.d(e,i,function(n){return t[n]}.bind(null,i));return e},r.n=function(t){var n=t&&t._?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=5)}([function(t,n,r){var e=r(1),i=window,a=i.document,c=i.location,o=encodeURIComponent,u=decodeURIComponent,f=i.navigat

Chrome Cache Entry: 479

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	178110
Entropy (8bit):	5.171485471826068
Encrypted:	false
SSDEEP:	3072:tc2tbW9eIoOr3EDf4basynDTPNfiLu/RMWu54p:ts9eIo9zRZDTPNfiLu/R5u5C
MD5:	7B8CE2D4E4A2D70813D5EE697473CF62
SHA1:	18B18D6C65711FE7BEA1A201AA2BA2BBEFA11397
SHA-256:	154B065ABED1FF81C2B641826AB901F38910B3B93748B3BAC75070AF3A8802EE
SHA-512:	32C10DD17E8BD4ABC79AED2C81B41F52E540C3B27BC087CDF5D1C69E9183E9B9F014BEDA8B37943E0F503FA14C81AD89A873C558F3DF0C7DD647E5B92EB3F418
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/scripts/foundation.js
Preview:	!function(t,e){if("object"==typeof exports&&"object"==typeof module)module.exports=e(require("jquery"));else if("function"==typeof define&&define.amd)define(["jquery"],e);else{var i="object"==typeof exports?e(require("jquery")):e(t.jQuery);for(var n in i)("object"==typeof exports?exports:t)[n]=i[n]}}(window,function(i){return function(i){var n={};function o(t){if(n[t])return n[t].exports;var e=n[t]={i:t,l:!1,exports:{}};return i[t].call(e.exports,e,e.exports,o),e.l=!0,e.exports}return o.m=i,o.c=n,o.d=function(t,e,i){o.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:i})},o.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(o.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)o.d(i,n,

Chrome Cache Entry: 480

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (855)
Category:	downloaded
Size (bytes):	3993
Entropy (8bit):	5.195919674748532
Encrypted:	false
SSDEEP:	96:hGeSIX+eVQnLInac4S+YYlzqyvOlGUGFTfyO2EVIOG:hGeSNLI4zqyGSKO2EVIOG
MD5:	7D13B10B152459B32864331A29549915
SHA1:	7B95819ACE8329564C07B2280A3A3217E8D685CB
SHA-256:	8708A3DFDE190D3E02270E48A3DE6876FA81D201E18FDDB8F16F6E1D5EC22E02
SHA-512:	8F72EDC134C1742DC83BC55C49829E9AC560E688EE94EF69A50A971E2D93F1722EDD3EC5FC7581FA1889F7103CE559D0C41C51B27AF73C009CCFD39A87A31254
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.47.js?utv=ut4.51.202106282113
Preview:	//tealium universal tag - utag.47 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved..var dotq=dotq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;u.ev={"view":1,"link":1};u.initialized=false;u.scriptrequested=false;u.queue=[];u.map={};u.extend=[];u.send=function(utag_event,data_layer){if(u.ev[utag_event]\|\|u.ev.all!==undefined){utag.DB("send:47");utag.DB(data_layer);var a,b,c,d;a=utag_event;b=data_layer;u.data={base_url:"https://s.yimg.com/wi/ytc.js",projectId:"10000",pixelId:"10087193",coloId:"SP",qstrings:{},tagid:"",et:"custom",ec:"",ea:"",el:"",ev:"",gv:"",product_id:[],timestamp:"",advertiser_id:""};utag.DB("send:47:EXTENSIONS");utag.DB(data_layer);for(var mapping_key in utag.loader.GV(u.map)){if(data_layer[mapping_key]!==undefined&&data_layer[mapping_key]!==""){var destinations=u.map[mapping_key].split(",");for(var i=0;i<destinations.length;i++){u.data[destinations[i]]=data_layer[mapping_key];}}}.utag.DB("send:47:MAPPINGS");utag.DB(u

Chrome Cache Entry: 481

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.366634665454505
Encrypted:	false
SSDEEP:	3:CUdlG9h/:Xl2/
MD5:	BFF56CE49DD485D195FDFA0A02342568
SHA1:	74FB4071DEAB7D3AB083562067B735DF32C43397
SHA-256:	0E4B1E428A2198EF747010C094101C257B568A97CDCC0F31ED5E9868CC835B39
SHA-512:	15BC2B5B57144C4F71DC203E16B0F7235EC5E659532D5BAFFD3E91D57CEC61D36CA1B7EA28156AB11A3FA46982FE252A58410D7ADF6693C93EDCCA2B2FA1ABB8
Malicious:	false
Reputation:	low
URL:	https://sp.analytics.yahoo.com/sp.pl?a=10000&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium%2Cgtm
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 482

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2916)
Category:	downloaded
Size (bytes):	21014
Entropy (8bit):	5.359094698737249
Encrypted:	false
SSDEEP:	384:sCJBmXAwmAABmSABmqABmpAwm3ABmXHAW8mTABmwABmygABm6ABmwoF4CAMuNQvR:soYw5pY/Y3YO5QYQW9cYZYqYHYJF4TMt
MD5:	305046C00CFB21BA2068C04975E34B95
SHA1:	615CEAF73836913847BD3CBAE575D16B6475AC93
SHA-256:	4A47B350B9E1C0CAE3E78590631F81192DA816378BC6CFFCDD7DDB239A6EC71E
SHA-512:	0C20B413B784CF710DE7637328EB3526729EBA29D9BF567306110618E8A998A8D2E9366D0E96437BEB05C0E95B86DDE96E3A374802455A9D2F66281A29E7734D
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/290387871401930?v=2.9.149&r=stable&domain=www3.mtb.com&hme=8b8eb2472f555e54a8b57f2b720f9bd3b1bc6aed031525376dd772ba51107995&ex_m=63%2C107%2C95%2C99%2C54%2C3%2C89%2C62%2C14%2C87%2C80%2C45%2C47%2C153%2C156%2C167%2C163%2C164%2C166%2C26%2C90%2C46%2C69%2C165%2C148%2C151%2C160%2C161%2C168%2C116%2C13%2C44%2C172%2C171%2C118%2C16%2C30%2C33%2C1%2C37%2C58%2C59%2C60%2C64%2C84%2C15%2C12%2C86%2C83%2C82%2C96%2C98%2C32%2C97%2C27%2C23%2C149%2C152%2C125%2C25%2C9%2C10%2C11%2C5%2C6%2C22%2C19%2C20%2C50%2C55%2C57%2C67%2C91%2C24%2C68%2C8%2C7%2C72%2C42%2C18%2C93%2C92%2C17%2C74%2C79%2C41%2C40%2C78%2C34%2C36%2C77%2C49%2C75%2C29%2C38%2C66%2C0%2C85%2C4%2C81%2C73%2C76%2C2%2C31%2C56%2C35%2C94%2C39%2C71%2C61%2C100%2C53%2C52%2C28%2C88%2C51%2C48%2C43%2C70%2C65%2C21%2C101%2C173%2C175%2C108%2C130%2C134%2C114%2C169%2C209%2C145%2C102%2C131%2C154%2C141%2C105%2C210%2C147%2C106%2C128%2C121%2C109
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 483

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/875517505?random=1710377853057&cv=11&fst=1710377853057&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Preview:	<html></html>

Chrome Cache Entry: 484

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	221
Entropy (8bit):	5.173729213216515
Encrypted:	false
SSDEEP:	6:hxLchdxkGXbv+EQtNVkA7G86XIGYNGY4HX4Qb:hwxkOgNVkA7GXXIVV4IQb
MD5:	21E34CF6A03F570DF49E212018A567D0
SHA1:	F0BE4058936850AE0163F5137600D14B6632BBB3
SHA-256:	0A23512EA579554AF1F2614D6DEA6120D38660028FC7624C71A978478FAE0EB6
SHA-512:	85F32EA67B64F49CB438A32C9F77D2D746CF67D3387C4C9D5E78EE181B7FB11F444D6DC17DEA19A69F8EFA5D4D52AC016E6EEA78A741A6658CF86C15B7FDACE9
Malicious:	false
Reputation:	low
URL:	https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html
Preview:	<!DOCTYPE html>.<head>.</head>.<body>.<script src="crossdomain2.12.0.5273.b96c35cc.min.js"></script>.<script>. var ccApp = typeof cdwpb !== "undefined" ? new cdwpb.default.Application() : {};.</script>.</body>.</html>

Chrome Cache Entry: 485

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1349
Entropy (8bit):	4.193398232602312
Encrypted:	false
SSDEEP:	24:t41lFt9unBfUGOhNmaFQ1vP+nr+c90wSpWXNeT7eYFUCFTY94/s7Hi:CR9JJbmaW1vHcZSpWS7eoUGU9+
MD5:	9A569AD20708D7453D89FE6C72E7FCDC
SHA1:	60B6A41620583484642F7C826FAF8E3C879A6374
SHA-256:	B2EF3BD17AA6BC2DAA7B1209F7848B30C64F3068E43162B09A216639AB430CE5
SHA-512:	593BBBA69EE4B582001515DFC425CB306D5B8A10895FAA48F366934DA79AB12770C8D4F6034DF647B8853CF94560D41B467708BE674D4392B06D08701B0D99C1
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 634.7 148.5" fill="#767676"><path d="M0 146.2h84v-37.7H43.2V92.1h37V54.5h-37V40.2H84V2.5H0m160.9 29.6c-13.8 0-24.6 11.4-28.6 23.5l-.4-.5 1.1-20.7H91.5v111.7H133V92.4c0-11.4.6-19 8.7-19 7 0 7.6 6.8 7.6 16.3v56.5h41.5V72.5c-.1-20.1-6-40.4-29.9-40.4zm145.6 24.1l-.4-.4 2.3-21.4h-61.2V9.8h-41.5v24.7h-11.9v33.2h11.9v78.5h41.5V67.7h19.5v78.5h41.5v-45.3c0-11.6 1.9-26.4 17.4-26.4 2.9 0 7.8 2.1 11.6 4V32.1c-15.4-.6-26 10.4-30.7 24.1zm96.3 38.3c0 13.6-.8 19.3-8.2 19.3-7.2 0-8-5.9-8-19.3V34.4h-41.5v65.8c0 30.5 17.4 48.3 49.5 48.3 30.5 0 49.8-15.2 49.8-48.3V34.4h-41.5v60.1zm99.4-17.1c-4.4-1.7-12.5-4.7-12.5-10.4 0-3.6 3.1-5.5 6.1-5.5 7 0 12.5 5.5 17.4 9.9l14.2-30.3a73.6 73.6 0 0 0-34.1-9.1c-26 0-44.9 14.6-44.9 37.7 0 19 12.9 27.5 29.2 33.2 7.2 2.5 10.8 4.8 10.8 8.9 0 4-4.5 5.7-8 5.7-7.6 0-15.9-6.4-20.7-11.6l-15.2 30.9a79.2 79.2 0 0 0 40.2 11.6c23.1 0 44.7-14 44.7-39.2-.1-18-12.1-26.1-27.2-31.8zm84.9-67.6h-41.5v24.6h-11.9v33.3h11.9v78.5h41.5V67.7h1

Chrome Cache Entry: 486

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 250 x 219, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1959
Entropy (8bit):	7.7269292313382145
Encrypted:	false
SSDEEP:	48:G37WAJuNIlpjiLti17r+/COD/hX1aYQnvOH1O3I:N/el5icZmphXUYQnvqO4
MD5:	8EB8405EC6E9E761EA45321B2A180AB5
SHA1:	E220FF9FA0D83C5416FD7860621C39B71B756B23
SHA-256:	D37A24BA2D508B82283588651C66D6412271FD8A358A4E00FDD97028A3BE79B3
SHA-512:	4D1A49947F3CF856ADB220DE2C8F6771D3945EFB451D0165C3EA3970F6CC9DC215163C8CED757A26F15A674AD4F4D2428D5F49E073D69880473A99A36B9656F3
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/icons/mtb-icon-mortgage-2c-cmyk.png
Preview:	.PNG........IHDR.............s.\|....]PLTE.....B..B..B..B..B..B..B.i9.i9.i9.i9..B..B.i9.i9.i9.i9.i9.i9..B..B..B..B..B.i9.i9.i9.i9..B.i9.......tRNS.f..D...w.33.."..D..Uw".f..UH..!....orNT..w.....IDATx..kC.0...E.d."........[.K.&mW.~....y.....7-WUU==.k.7.......Z/.U...8&..B...e@.oTE......K....o.......=MF./.o.......x.......&.z..`...G..1z.u5$.....e.P.1.w...i.y/d...b...}..?}-..K....}..N..<.j..;$.....:..VC.9{............F...M_......i5i....F.... ...../.....&.,.f..7.P./gO.7ot.,..k.a...nlr."...[.>\.I;.B%7.k.9...>8t-;.B$7...'!.....L`...........B.D..a.....Cv+.......>-..........o.-.6y.......QV....@G..]......j..cK.V.....m......js....f...vREV....v...L............v.sTti..:..Ca..3t2;.f. ......g...I.\|..Z7.n..........Q.....v.en ..`).......~%....K3.....#_..,ft.Uo.2..~.Ln...[N..N._..Dw`.P.C....k...V6tWv>}.!S.Bwg..../.0.;.s.5.x...9.Ni....Ci.&s....w....f...&K3....PM..jt.E..3.&J3...R.>ib<..E'.D.>V.9P..m.i,.y<.$8..w"...*....?).y.v....YQl.....iv.]3Z...X.}

Chrome Cache Entry: 487

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2392
Entropy (8bit):	4.921279958271143
Encrypted:	false
SSDEEP:	48:cK0j0xA09J2J1e4Hocpr3J4nZJlJJLJpQDtQI1x:c0xjfS9InNnmJX
MD5:	F7A8C8E0B985DA44B804D5B300BE2BA3
SHA1:	DDD1EF46A018F7E29BA21FFE326A6C971EBD75D8
SHA-256:	8F4FE69C9E8381E804C98C661C5668EF738141085131DB24AA1F2B588C7AC900
SHA-512:	D6A349A9612BA3935AD205A7102001CBA3DC5CC8B121831C7875F6151A3C00FD9519D29963369AC356A8EEB5FE10EF4BC9E90498FD035EC8D1D03262B6CD16C8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="64px" height="64px" viewBox="0 0 64 64" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>icon_devices</title>. <g id="icon_devices" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round">. <g id="Group-3" transform="translate(0.000000, 6.000000)" stroke-width="2">. <g id="phone-action-disable" transform="translate(42.378378, 12.972973)" stroke="#80BC00">. <rect id="Rectangle-path" x="0.772200772" y="0.810810811" width="20.0772201" height="37.2972973" rx="2"></rect>. <line x1="20.8494208" y1="31.6216216" x2="0.772200772" y2="31.6216216" id="Shape"></line>. <line x1="20.8494208" y1="7.2972973" x2="0.772200772" y2="7.2972973" id="Shape"></line>. </g>. <g id="desktop-monitor" stroke="#077E5A">. <path d="M34.9561736,37.2702703 L3.0

Chrome Cache Entry: 488

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	2.584962500721156
Encrypted:	false
SSDEEP:	3:kn:k
MD5:	8ECA36DE2DC5831816C1E7FDEFF2A66A
SHA1:	931AFB9F4647D495E1783623E25FC1CB93C9CB91
SHA-256:	A689579E15FCDB149AA4B8ADF80C1D26D097A8FA2FA17A2849E8191BDFF686F9
SHA-512:	ABE57F9E101635D338944DBE7C542AC18F80DDB1FD9A971BB4A1C22B7FAF7DCAAFC01CB9F6ACEDEBCF3B9C715DFDA44A0ED4E43F34D70A3819316356134484FF
Malicious:	false
Reputation:	low
Preview:	FL(OA)

Chrome Cache Entry: 489

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	4.461614023802694
Encrypted:	false
SSDEEP:	3:qtAW7ECvOAXqB40fLOAXAABAQn:qmWAZAq40CAsQn
MD5:	431EA4B9A4CC1C1FCE8C85A440A637FB
SHA1:	751C87A490890DABB9C6CF9655B6B69B348EFB33
SHA-256:	E75B5D0CE6E629804E56DBC35E30AE3CAA6FB4FEECB9944EC4762ED7029262E0
SHA-512:	9D1B57B4A50C99BE6B0AF587DF4221850A16E0901FCE6AE7CC74D5A2AC3EDFA3A64DDF75BB05AA1F5834B104145385B9C0D98F9FF5AEA6BEC59629A85C7A80D6
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/scripts/alert_scripts/allAlertobject.js
Preview:	var siteAlerts = {"pagesWithCurrentAlerts":[],"indexesForPagesWithCurrentAlerts":[],"alerts":[]}

Chrome Cache Entry: 490

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3639
Entropy (8bit):	4.099070039517418
Encrypted:	false
SSDEEP:	48:CKluCgoEpw5PLalCPXuCB2m8LITso1HZOhc82gnlUWw8sJMpPRE5RKrdJPA1P:BoNaUsY7MhZOhcRWXJp+KrbIx
MD5:	5C863A31408C3E2C9E7381AA77EE3A86
SHA1:	C7B7D56DD3D3372097DD958573201E16C6FD2008
SHA-256:	4C508AE0CD33BCA9839A701F97AEF16787F35DB6CF587396B21113E7D2FBF5A9
SHA-512:	8E83F7192BC7BF88F77A63781E5792172AFF0879E828D4B8DF38B1CB374CB0F94A45B75E30ECFC74921FCE8DE71FE34C67260EB7D0B5F28A69A104374CB523FF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 240.9 45.54"><defs><style>.cls-1{fill:#fff;fill-rule:evenodd;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M4.9,4.34H0v-2c.3,0,.6-.1.9-.1H12.6c.8,0,1.1.4,1.4,1.1,3.5,9.1,7.1,18.2,10.7,27.3.1.3.3.6.6,1.3,3.9-10.1,7.7-19.8,11.6-29.6H50v2H45.2c0,.6-.1,1-.1,1.4v36.4c0,1.2.4,1.6,1.5,1.5a24.32,24.32,0,0,1,2.7,0v1.8H32.6v-1.9h3.3c.6,0,.9-.2.9-.9V10.24c0-.1-.1-.1-.2-.5l-.7,1.4c-4.1,10.7-8.2,21.4-12.2,32.1-.3.7-.5,1.3-1.4,1.2s-1.2-.5-1.5-1.3c-4.1-10.7-8.3-21.5-12.5-32.2-.1-.4-.4-.7-.5-1.1-.1,0-.2.1-.3.1,0,.4-.1.8-.1,1.3v30.7c0,1.2.3,1.7,1.5,1.6s2.5,0,3.9,0v1.8H1v-1.8a24.32,24.32,0,0,1,2.7,0c1.1.1,1.3-.3,1.3-1.4V4.34Z"/><path class="cls-1" d="M132,11.54v8.1c0,.7.1,1.2,1,1.2,4.6-.1,9.2-.1,13.8-.3a8.5,8.5,0,0,0,5.6-2.3,9.82,9.82,0,0,0,1.8-11.1c-1.8-3.6-5.1-4.8-8.7-4.9-4.1-.2-8.3,0-12.4-.1-.8,0-1.1.3-1.1,1.1v8.3Zm0,21.1v8.7c0,.7.1,1.2,1,1.2,4.8-.1,9.7,0,14.5-.3,3-.2,5.8-1.3,7.5-3.

Chrome Cache Entry: 491

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 52, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2167
Entropy (8bit):	6.2456491726492045
Encrypted:	false
SSDEEP:	48:9x1D5TNvpqq/LHvz0rwk+oDU4r6pn2vp1pBIh+JS:9xKiHL0K2hS
MD5:	FEFA7114F6F692AA0C77A46038C6EC63
SHA1:	9F17780417344EDCA37C91A05090296B35F43693
SHA-256:	4B10875381B86B03A126A8A42696DEE961EAF5D09DF5BC30DDA8623A59F3D62E
SHA-512:	C46E9ADAC494B10E3D716F01CA6DE88B094A19A4EAC2E21E5E5DFFDA4C508A5F2006A8AE96E759447098112F8CD48ABE56789214F856CEEE8583F6F0E55006DD
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/zelle-color-convenience-logo.png
Preview:	.PNG........IHDR.......4.....u.......PLTE.....U.......$..$U.$..$..I..IU.I..I..m..mU.m..m......U...........U...........U..........U......$..$.U$..$..$$.$$U$$.$$.$I.$IU$I.$I.$m.$mU$m.$m.$..$.U$..$..$..$.U$..$..$..$.U$.$..$..$.U$..$..I..I.UI..I..I$.I$UI$.I$.II.IIUII.II.Im.ImUIm.Im.I..I.UI..I..I..I.UI..I..I..I.UI.I..I..I.UI..I..m..m.Um..m..m$.m$Um$.m$.mI.mIUmI.mI.mm.mmUmm.mm.m..m.Um..m..m..m.Um..m..m..m.Um.m..m..m.Um..m.......U.......$..$U.$..$..I..IU.I..I..m..mU.m..m......U...........U...........U..........U...........U.......$..$U.$..$..I..IU.I..I..m..mU.m..m......U...........U...........U..........U...........U.......$..$U.$..$..I..IU.I..I..m..mU.m..m....U.......U.........U..........U...........U.......$..$U.$..$..I..IU.I..I..m..mU.m..m......U...........U...........U..........U.......n.....tRNS...................................................................................................................................................................................

Chrome Cache Entry: 492

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65531), with no line terminators
Category:	downloaded
Size (bytes):	210130
Entropy (8bit):	5.097139009209818
Encrypted:	false
SSDEEP:	3072:M/zwVy1EnmJ4bbdtKge8/KtIr2ZB13UZuRY7a9kHvgJmnQTmJEn6dd0fchGpwzSA:7LjV
MD5:	8E21D8ACB00B53A288A9382FAF9205C8
SHA1:	E7463603FCEFB9731FF9707EC1EDE63F44262457
SHA-256:	EEBCF37545DFDFAFF8120183CE85704EE290B03976EFBE6497A508F7E6418C06
SHA-512:	F9FD52585ED69A3480C6673CBC9192FF8F810AF8EC23AA6964CD9B3C81CFD878F1172D3F15712C2033B18DFB320880C3E50F98100AF1927AEE6E2B313D81E229
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/assets/css/foundation-all.css
Preview:	.@charset "UTF-8";@media print,screen and (min-width:36em){.reveal,.reveal.large,.reveal.small,.reveal.tiny{right:auto;left:auto;margin:0 auto}}/! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}img{border-style:none}button,input,optgroup,select,textarea{font-family:inherit;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{te

Chrome Cache Entry: 493

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/990489911?random=1710377841052&cv=11&fst=1710377841052&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fm.mtb.com%2FEnrollment&hn=www.googleadservices.com&frm=0&tiba=Enroll%20in%20Online%20Banking%20-%20Select%20Account%20Type%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 494

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 495

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 64318, version 1.0
Category:	downloaded
Size (bytes):	64318
Entropy (8bit):	7.993144470716114
Encrypted:	true
SSDEEP:	1536:28OdL6GL/lzNg34+BPE42aEUsEgx794VgxuR27p/:qx6ylzNgXBsmsEgVu0p/
MD5:	B245A55F7E33E1CF4D2477570936EF84
SHA1:	12BF1C1EDA6DB246778F7C343ACEBBAAD8FA36F4
SHA-256:	B391B55F950528937BEEE7687717A4AEF81196817834F1C93B099713FF738FBC
SHA-512:	52303BDB1A193FDEC98F139447B6ACF17DC51EC36B5DCCB06B9796B57222E81A09F89E9A012AC9AFB0D26F9F93CBA73121051AFCB8276A4834A96A3ABFBEB7A5
Malicious:	false
Reputation:	low
URL:	https://resources.mtb.com/assets/fonts/mandtbaltoweb-medium.woff
Preview:	wOFF.......>...................z............GPOS...T..).......`.GSUB...d..._...2....LTSH...........'...jOS/2...$...X...`jh.fVDMX.......x.......acmap............Z..cvt ..#....^...^....fpgm..!........s.Y.7gasp...@.........u..glyf..(.......l4....hdmx...8...T..-P.[..head.......6...6...Bhhea.......!...$....hmtx...\|...2......_.loca..$D...H...H_P..maxp....... ... .;..name...........E~d+;post...d............prep.."....R......J............_.<...........G.......2...)................x.c`d``...........Y,...".I..............#.X..._...............+....x.c`fRc......X.......f,a.g.e``.fgfaebbbf```g@.!............;100.b....0.$...i..R`.......x..Kh\U.....%i&1}.4.d...W.Z.....e..(.Q...P..Eh.h.6..A.....j.J..Q..(.....B\|,\|....c.]$0..;..C.B\....;.\|.%._.f...P.k.V.B;.....%...+.G........h..i....n\...\|?.c.........>wZ=....>W...m.\.rv...o......F?...'U..%5np.A..a.K.........../#. .Wx..{..r_p....S&.A..u....[H..#...j..Typ....lq0....emG...5...{SY.@....B.R.y...JkE.Z.}.....4...cn...N)m1'6.\|.oq.6

Chrome Cache Entry: 496

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2158
Entropy (8bit):	5.609859008274974
Encrypted:	false
SSDEEP:	48:IG/THIGIjLiGb8A+s2Rv5VQ2vXDBD54hqMYQ:Ix9jQ15QmN4P
MD5:	5B394238D2E2C9F9A72FAC2249C23494
SHA1:	081CF62DDD20010CD22215C7E1C987F829E1F27D
SHA-256:	433A41272BF6E556E8A42F23597595A31B4956F42CB7C5158F41F4759D1F75B0
SHA-512:	2C05742D0438E9FA69BE616803EB9F1B662B04898FB7D63A1DB577D9FD9751BF74C606666296591CD3EDE12FAAF2EEC9880778CEBEF75052E5F7C2D3D9728F99
Malicious:	false
Reputation:	low
URL:	https://m.mtb.com/scripts/Moe/mtb-app.js
Preview:	//Foundation.Reveal.defaults.closeOnClick = false;..$(document).foundation();....var regexKeys = {.. companyNameAllow: "[^\\%\\}\\]\\\"\\<\\>\\~]",.. passocdeAllow: /[^\#\&\* ]/gi..}....rgxCompanyName = /[\%\}\]\"\<\>\~]/;..rgxCardFormat = /^[0-9]{16}$/;..rgxSSNFormat = /^[0-9]{9}$/;..rgxTaxIdFormat = /^[0-9]{9}$/;..rgxDobFormat = /^[0-9]{2}\/[0-9]{2}\/[0-9]{4}$/;..rgxDob = /^[0-1][0-9]\/[0-3][0-9]\/[1-2][0-9]{3}$/;..rgxName = /^[0-9a-z\.\- ]+$/i;..rgxNumbersOnly = /^[0-9]+$/;..rgxEmail = /^[a-z0-9\.\-\_]+\@[a-z0-9\.*]+\.[a-z]{2,4}$/i;..rgxisCard = /^4691\|^4258\|^5026\|^5887\|^5889\|^4747/;..rgxisDebitCard = /^4258\|^5026\|^5887\|^5889\|^4747/; //4747..rgxisCreditCard = /^4691/;..rgxPin = /^[0-9]{4}$/;..rgxCvv = /^[0-9]{3}$/;....rgNotNumsLettersOnly = /[^0-9a-z]/gi;..rgNotNumsOnly = /[^0-9]/gi;..rgNotNumsSpaceOnly = /[^0-9 ]/gi;..rgNotNumsDashOnly = /[^0-9\-]/gi;..rgNotNumsSlashOnly = /[^0-9\/]/gi;..rgWTSSOStart = /^wtsso/i;..rgEmailAllow = /[a-z0-9\@\.\-\_]/i;..rgEmailBlockifNot = /[^a-

Chrome Cache Entry: 497

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1256), with no line terminators
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	5.852623426446806
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAYc+KVCLTLv138EgFB5vtTGJTlWt9kZ1JcsLqo40RWUnYN:VKEc3KonR3evtTA8cZ1vLrwUnG
MD5:	05D9FCD5A551BE9D1185A2FC7149AA60
SHA1:	ABC5CA0C5B214BDCC276872C8ECCFB8C9B523AD3
SHA-256:	9A7F87E3E0AC5EBAF7503EF84DA1262BAFDD8E2A514EEF8AE0355EDEC15E7623
SHA-512:	9A7AA169432A80B549046A8C8DEFBBF3326DFDE0606B30113EFE6CE54EC0EA48EDB1BAA4934ED008472151491448F72C4EACC37A55663D5D905BF8CACBE23F2E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-7n6vgo

Chrome Cache Entry: 498

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4277)
Category:	downloaded
Size (bytes):	11403
Entropy (8bit):	5.317023677342303
Encrypted:	false
SSDEEP:	192:LbFnNojImVVMwKpTXupAzoAFoAAoAN1ZM1+oAg5G1BpkqwAt5G1BpkqoAt5G1VaH:LlNsImVVMwKpeuzbFbAbNDM1+bg5G1Pm
MD5:	BD2CA8D32B1507527F29EDDDCCF03ED1
SHA1:	211E357F6A861D29D7F0BF301058DD1CBE3F7288
SHA-256:	455D8B913FE4875EB46E191EA76BC5335BA24A0DFBB5FCF32DDF0430BC26D235
SHA-512:	A1730F978E4651165167559B1924670477562B8226AD297A7AB5642FDCBEB5F1C3E83EEC7B1E58995F52B632CE3B320539155F2DD027E319EE0D7A44B7D6CDEE
Malicious:	false
Reputation:	low
URL:	https://tags.tiqcdn.com/utag/mtbank/main/prod/utag.224.js?utv=ut4.51.202312122232
Preview:	//tealium universal tag - utag.224 ut4.0.202402142352, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatecha

Chrome Cache Entry: 499

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1440x650, components 3
Category:	downloaded
Size (bytes):	76857
Entropy (8bit):	7.654280949728706
Encrypted:	false
SSDEEP:	1536:O54sr7BfY6YYLv5D8XBCJqmrRhfrvQLUTzk0Y8j4+Dw7FIB:APBlh8xCJqmrPQL4zBY8jqFIB
MD5:	4919A82E1F2E075F6779147743E171D6
SHA1:	DDBC2C7ED0C9F3E945A08B135DDE94FF935776A0
SHA-256:	A1F2D3DE9072054A94ED111AD1D7006F8BA54FE45794C41E3A06B04998820877
SHA-512:	8D7A843B86F02E13A21B08569D88581A70D03D1287010162A011C7446E4D53EE45D0EC0A3D90598B5838D276DFA452788EFFAC078DD5F98B5EE6EE7EF0124B71
Malicious:	false
Reputation:	low
URL:	https://www3.mtb.com/content/dam/mtb-web/images/lending-calculator-1440x650.jpg
Preview:	......Exif..II*.................Ducky.......5......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:cca5d5e6-41fb-d443-9479-430b8296c413" xmpMM:DocumentID="xmp.did:B9660655C11511EE85589ABC8FE4DA03" xmpMM:InstanceID="xmp.iid:B9660654C11511EE85589ABC8FE4DA03" xmp:CreatorTool="Adobe Photoshop 24.0 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:500e572b-2cf9-0148-85ee-bc06f7bf686b" stRef:documentID="adobe:docid:photoshop:3aba1142-3937-004d-9d92-0c6b3b604157"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................

Static File Info

⊘No static file info

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 14, 2024 01:56:17.427666903 CET	192.168.2.4	1.1.1.1	0xc369	Standard query (0)	mtb-repo.pages.dev	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:17.427764893 CET	192.168.2.4	1.1.1.1	0xd5b9	Standard query (0)	mtb-repo.pages.dev	65	IN (0x0001)	false
Mar 14, 2024 01:56:18.449775934 CET	192.168.2.4	1.1.1.1	0xfcb4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:18.450031042 CET	192.168.2.4	1.1.1.1	0x8313	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:18.503447056 CET	192.168.2.4	1.1.1.1	0x58e7	Standard query (0)	mtb-repo.pages.dev	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:18.503659010 CET	192.168.2.4	1.1.1.1	0xc056	Standard query (0)	mtb-repo.pages.dev	65	IN (0x0001)	false
Mar 14, 2024 01:56:19.079755068 CET	192.168.2.4	1.1.1.1	0xb331	Standard query (0)	asset.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:19.080677032 CET	192.168.2.4	1.1.1.1	0x6397	Standard query (0)	asset.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:20.771641016 CET	192.168.2.4	1.1.1.1	0x47c4	Standard query (0)	asset.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:20.771879911 CET	192.168.2.4	1.1.1.1	0xbc21	Standard query (0)	asset.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:30.002536058 CET	192.168.2.4	1.1.1.1	0x61c0	Standard query (0)	www.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:30.002871037 CET	192.168.2.4	1.1.1.1	0xf8ee	Standard query (0)	www.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:30.571340084 CET	192.168.2.4	1.1.1.1	0x5c85	Standard query (0)	www3.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:30.571695089 CET	192.168.2.4	1.1.1.1	0x7130	Standard query (0)	www3.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:31.109174967 CET	192.168.2.4	1.1.1.1	0xfd55	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:31.109855890 CET	192.168.2.4	1.1.1.1	0x7bbc	Standard query (0)	tags.tiqcdn.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:32.029213905 CET	192.168.2.4	1.1.1.1	0xdba8	Standard query (0)	www3.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:32.029783010 CET	192.168.2.4	1.1.1.1	0xa54b	Standard query (0)	www3.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:33.976275921 CET	192.168.2.4	1.1.1.1	0x3e24	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:33.977693081 CET	192.168.2.4	1.1.1.1	0x3516	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:36.030843019 CET	192.168.2.4	1.1.1.1	0x4037	Standard query (0)	aiq-in.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:36.031260967 CET	192.168.2.4	1.1.1.1	0x2bca	Standard query (0)	aiq-in.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:36.604475975 CET	192.168.2.4	1.1.1.1	0x90b9	Standard query (0)	aiq-in.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:36.604803085 CET	192.168.2.4	1.1.1.1	0x5f1b	Standard query (0)	aiq-in.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:50.536603928 CET	192.168.2.4	1.1.1.1	0x98c1	Standard query (0)	mtb.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:50.536943913 CET	192.168.2.4	1.1.1.1	0x373	Standard query (0)	mtb.tt.omtrdc.net	65	IN (0x0001)	false
Mar 14, 2024 01:56:51.260960102 CET	192.168.2.4	1.1.1.1	0x6187	Standard query (0)	ob.segreencolumn.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.261187077 CET	192.168.2.4	1.1.1.1	0x8c7d	Standard query (0)	ob.segreencolumn.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:51.572293043 CET	192.168.2.4	1.1.1.1	0x65d5	Standard query (0)	mtb.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.572467089 CET	192.168.2.4	1.1.1.1	0x194	Standard query (0)	mtb.tt.omtrdc.net	65	IN (0x0001)	false
Mar 14, 2024 01:56:51.675914049 CET	192.168.2.4	1.1.1.1	0x3929	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.676239967 CET	192.168.2.4	1.1.1.1	0x4a82	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Mar 14, 2024 01:56:51.732635021 CET	192.168.2.4	1.1.1.1	0xbb13	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.733128071 CET	192.168.2.4	1.1.1.1	0x8044	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:52.188267946 CET	192.168.2.4	1.1.1.1	0x5604	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:52.188777924 CET	192.168.2.4	1.1.1.1	0x2d7b	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:52.196192980 CET	192.168.2.4	1.1.1.1	0xf49	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:52.196748018 CET	192.168.2.4	1.1.1.1	0xe51b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:52.208791018 CET	192.168.2.4	1.1.1.1	0x3723	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:52.209316969 CET	192.168.2.4	1.1.1.1	0xe1d8	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:52.213474035 CET	192.168.2.4	1.1.1.1	0x99b1	Standard query (0)	cdn.quantummetric.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:52.214459896 CET	192.168.2.4	1.1.1.1	0xa1b1	Standard query (0)	cdn.quantummetric.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:53.365761995 CET	192.168.2.4	1.1.1.1	0xafed	Standard query (0)	obs.segreencolumn.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.366655111 CET	192.168.2.4	1.1.1.1	0x173f	Standard query (0)	obs.segreencolumn.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:53.369242907 CET	192.168.2.4	1.1.1.1	0xbe0e	Standard query (0)	dx.mountain.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.370321989 CET	192.168.2.4	1.1.1.1	0x218a	Standard query (0)	dx.mountain.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:53.398355961 CET	192.168.2.4	1.1.1.1	0x27ce	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.399292946 CET	192.168.2.4	1.1.1.1	0x2205	Standard query (0)	t.co	65	IN (0x0001)	false
Mar 14, 2024 01:56:53.402441025 CET	192.168.2.4	1.1.1.1	0x1932	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.403225899 CET	192.168.2.4	1.1.1.1	0xcf01	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:53.415844917 CET	192.168.2.4	1.1.1.1	0xc0c5	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.416132927 CET	192.168.2.4	1.1.1.1	0xc88e	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:53.598012924 CET	192.168.2.4	1.1.1.1	0x7928	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.598218918 CET	192.168.2.4	1.1.1.1	0x7fe6	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Mar 14, 2024 01:56:53.776196003 CET	192.168.2.4	1.1.1.1	0xc444	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.776705027 CET	192.168.2.4	1.1.1.1	0xfe54	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Mar 14, 2024 01:56:53.806075096 CET	192.168.2.4	1.1.1.1	0xfc7b	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.806288958 CET	192.168.2.4	1.1.1.1	0x31f2	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:53.916028976 CET	192.168.2.4	1.1.1.1	0xf6c3	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.916776896 CET	192.168.2.4	1.1.1.1	0x579d	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:54.166878939 CET	192.168.2.4	1.1.1.1	0xe8f3	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.167382002 CET	192.168.2.4	1.1.1.1	0x865e	Standard query (0)	t.co	65	IN (0x0001)	false
Mar 14, 2024 01:56:54.171394110 CET	192.168.2.4	1.1.1.1	0x8b5	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.171753883 CET	192.168.2.4	1.1.1.1	0xf6fc	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:54.183300018 CET	192.168.2.4	1.1.1.1	0xf20f	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.183521032 CET	192.168.2.4	1.1.1.1	0x660f	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:54.584547997 CET	192.168.2.4	1.1.1.1	0x7cc1	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.584738970 CET	192.168.2.4	1.1.1.1	0x12a4	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:54.592963934 CET	192.168.2.4	1.1.1.1	0xc462	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.593722105 CET	192.168.2.4	1.1.1.1	0xd48	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:54.832160950 CET	192.168.2.4	1.1.1.1	0xc98	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.832442045 CET	192.168.2.4	1.1.1.1	0xfb60	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:54.860994101 CET	192.168.2.4	1.1.1.1	0xb650	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.861316919 CET	192.168.2.4	1.1.1.1	0xbc32	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Mar 14, 2024 01:56:55.081545115 CET	192.168.2.4	1.1.1.1	0x1813	Standard query (0)	px.mountain.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.081734896 CET	192.168.2.4	1.1.1.1	0x28e1	Standard query (0)	px.mountain.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:55.186152935 CET	192.168.2.4	1.1.1.1	0xf893	Standard query (0)	sp.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.186650038 CET	192.168.2.4	1.1.1.1	0xdf91	Standard query (0)	sp.analytics.yahoo.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:55.199456930 CET	192.168.2.4	1.1.1.1	0x5180	Standard query (0)	obs.segreencolumn.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.199733973 CET	192.168.2.4	1.1.1.1	0xfca4	Standard query (0)	obs.segreencolumn.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:55.201132059 CET	192.168.2.4	1.1.1.1	0x7616	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.201389074 CET	192.168.2.4	1.1.1.1	0x96da	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:55.266813040 CET	192.168.2.4	1.1.1.1	0x54f0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.267317057 CET	192.168.2.4	1.1.1.1	0xf59e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:56.022970915 CET	192.168.2.4	1.1.1.1	0xbd93	Standard query (0)	gs.mountain.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:56.023607969 CET	192.168.2.4	1.1.1.1	0xeb14	Standard query (0)	gs.mountain.com	65	IN (0x0001)	false
Mar 14, 2024 01:56:58.984255075 CET	192.168.2.4	1.1.1.1	0x5f18	Standard query (0)	mtb-app.quantummetric.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:58.985059977 CET	192.168.2.4	1.1.1.1	0x1bf9	Standard query (0)	mtb-app.quantummetric.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:00.630829096 CET	192.168.2.4	1.1.1.1	0x5be7	Standard query (0)	rl.quantummetric.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:00.631225109 CET	192.168.2.4	1.1.1.1	0x7c2d	Standard query (0)	rl.quantummetric.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:00.662163973 CET	192.168.2.4	1.1.1.1	0xe9ad	Standard query (0)	mtb-app.quantummetric.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:00.662914991 CET	192.168.2.4	1.1.1.1	0xc3e4	Standard query (0)	mtb-app.quantummetric.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:00.703958988 CET	192.168.2.4	1.1.1.1	0x83d3	Standard query (0)	onlinebanking.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:00.704782963 CET	192.168.2.4	1.1.1.1	0x989f	Standard query (0)	onlinebanking.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:00.934401035 CET	192.168.2.4	1.1.1.1	0xc68	Standard query (0)	onlinebanking.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:00.935820103 CET	192.168.2.4	1.1.1.1	0xb514	Standard query (0)	onlinebanking.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:01.652995110 CET	192.168.2.4	1.1.1.1	0x1d95	Standard query (0)	resources.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:01.653234005 CET	192.168.2.4	1.1.1.1	0x26f0	Standard query (0)	resources.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:01.742125988 CET	192.168.2.4	1.1.1.1	0xbb1	Standard query (0)	resources.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:01.791538000 CET	192.168.2.4	1.1.1.1	0x9ed4	Standard query (0)	rl.quantummetric.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:01.791939020 CET	192.168.2.4	1.1.1.1	0xf3ee	Standard query (0)	rl.quantummetric.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:02.293040037 CET	192.168.2.4	1.1.1.1	0x4f0f	Standard query (0)	resources.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:02.293215036 CET	192.168.2.4	1.1.1.1	0xb0e2	Standard query (0)	resources.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:02.392235994 CET	192.168.2.4	1.1.1.1	0xbbbe	Standard query (0)	resources.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:05.805027008 CET	192.168.2.4	1.1.1.1	0xc60e	Standard query (0)	wup-5d65a0ab.us.v2.we-stats.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:05.805299997 CET	192.168.2.4	1.1.1.1	0x1d50	Standard query (0)	wup-5d65a0ab.us.v2.we-stats.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:07.183307886 CET	192.168.2.4	1.1.1.1	0xffa8	Standard query (0)	1.a79ab95c1589a13f8a4cab612bc71f9f7.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.183828115 CET	192.168.2.4	1.1.1.1	0x5169	Standard query (0)	1.a79ab95c1589a13f8a4cab612bc71f9f7.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:07.184360027 CET	192.168.2.4	1.1.1.1	0x47ff	Standard query (0)	1.b406929acabac9b095f124c81bdfcf57f.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.184561014 CET	192.168.2.4	1.1.1.1	0xac8f	Standard query (0)	1.b406929acabac9b095f124c81bdfcf57f.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:07.184870958 CET	192.168.2.4	1.1.1.1	0x8551	Standard query (0)	1.c81358859121583b7adf2ace89cb39f44.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.185323000 CET	192.168.2.4	1.1.1.1	0xb0b2	Standard query (0)	1.c81358859121583b7adf2ace89cb39f44.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:09.677010059 CET	192.168.2.4	1.1.1.1	0x91ee	Standard query (0)	log-5d65a0ab.us.v2.we-stats.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:09.677983046 CET	192.168.2.4	1.1.1.1	0xfa01	Standard query (0)	log-5d65a0ab.us.v2.we-stats.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:10.132893085 CET	192.168.2.4	1.1.1.1	0xe224	Standard query (0)	wup-5d65a0ab.us.v2.we-stats.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:10.133132935 CET	192.168.2.4	1.1.1.1	0x9812	Standard query (0)	wup-5d65a0ab.us.v2.we-stats.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:11.679228067 CET	192.168.2.4	1.1.1.1	0x2bd9	Standard query (0)	onlinebanking.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:11.680166006 CET	192.168.2.4	1.1.1.1	0x9aa2	Standard query (0)	onlinebanking.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:11.769750118 CET	192.168.2.4	1.1.1.1	0xd075	Standard query (0)	onlinebanking.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:14.923321962 CET	192.168.2.4	1.1.1.1	0xc976	Standard query (0)	asset.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:14.924104929 CET	192.168.2.4	1.1.1.1	0xc59c	Standard query (0)	asset.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:19.197896004 CET	192.168.2.4	1.1.1.1	0xb408	Standard query (0)	m.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:19.198297977 CET	192.168.2.4	1.1.1.1	0x6099	Standard query (0)	m.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:20.382189989 CET	192.168.2.4	1.1.1.1	0x1093	Standard query (0)	m.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:20.382385969 CET	192.168.2.4	1.1.1.1	0x3911	Standard query (0)	m.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:27.830354929 CET	192.168.2.4	1.1.1.1	0x1eb0	Standard query (0)	mboxedge34.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:27.830732107 CET	192.168.2.4	1.1.1.1	0x27b6	Standard query (0)	mboxedge34.tt.omtrdc.net	65	IN (0x0001)	false
Mar 14, 2024 01:57:31.317470074 CET	192.168.2.4	1.1.1.1	0x85f6	Standard query (0)	mboxedge34.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:31.317706108 CET	192.168.2.4	1.1.1.1	0x9d66	Standard query (0)	mboxedge34.tt.omtrdc.net	65	IN (0x0001)	false
Mar 14, 2024 01:57:32.947134018 CET	192.168.2.4	1.1.1.1	0x7b4e	Standard query (0)	www3.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:32.947489977 CET	192.168.2.4	1.1.1.1	0x4fa1	Standard query (0)	www3.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:33.129837990 CET	192.168.2.4	1.1.1.1	0x30c8	Standard query (0)	www3.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:33.130841970 CET	192.168.2.4	1.1.1.1	0x1237	Standard query (0)	www3.mtb.com	65	IN (0x0001)	false
Mar 14, 2024 01:57:33.547030926 CET	192.168.2.4	1.1.1.1	0x6659	Standard query (0)	www3.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:36.690648079 CET	192.168.2.4	1.1.1.1	0x91f3	Standard query (0)	www3.mtb.com	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:36.691421032 CET	192.168.2.4	1.1.1.1	0x65be	Standard query (0)	www3.mtb.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 14, 2024 01:56:17.522562981 CET	1.1.1.1	192.168.2.4	0xd5b9	No error (0)	mtb-repo.pages.dev			65	IN (0x0001)	false
Mar 14, 2024 01:56:17.522591114 CET	1.1.1.1	192.168.2.4	0xc369	No error (0)	mtb-repo.pages.dev		172.66.47.152	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:17.522591114 CET	1.1.1.1	192.168.2.4	0xc369	No error (0)	mtb-repo.pages.dev		172.66.44.104	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:18.538752079 CET	1.1.1.1	192.168.2.4	0x8313	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2024 01:56:18.538826942 CET	1.1.1.1	192.168.2.4	0xfcb4	No error (0)	www.google.com		142.250.80.4	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:18.596230984 CET	1.1.1.1	192.168.2.4	0x58e7	No error (0)	mtb-repo.pages.dev		172.66.44.104	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:18.596230984 CET	1.1.1.1	192.168.2.4	0x58e7	No error (0)	mtb-repo.pages.dev		172.66.47.152	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:18.596927881 CET	1.1.1.1	192.168.2.4	0xc056	No error (0)	mtb-repo.pages.dev			65	IN (0x0001)	false
Mar 14, 2024 01:56:19.168406963 CET	1.1.1.1	192.168.2.4	0xb331	No error (0)	asset.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:19.168406963 CET	1.1.1.1	192.168.2.4	0xb331	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.70	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:19.168406963 CET	1.1.1.1	192.168.2.4	0xb331	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.36	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:19.168406963 CET	1.1.1.1	192.168.2.4	0xb331	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.79	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:19.168406963 CET	1.1.1.1	192.168.2.4	0xb331	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.6	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:19.172178984 CET	1.1.1.1	192.168.2.4	0x6397	No error (0)	asset.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:20.860945940 CET	1.1.1.1	192.168.2.4	0x47c4	No error (0)	asset.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:20.860945940 CET	1.1.1.1	192.168.2.4	0x47c4	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.70	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:20.860945940 CET	1.1.1.1	192.168.2.4	0x47c4	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.79	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:20.860945940 CET	1.1.1.1	192.168.2.4	0x47c4	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.6	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:20.860945940 CET	1.1.1.1	192.168.2.4	0x47c4	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.36	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:20.881365061 CET	1.1.1.1	192.168.2.4	0xbc21	No error (0)	asset.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:30.095407009 CET	1.1.1.1	192.168.2.4	0xf8ee	No error (0)	www.mtb.com	d3o2xc4936wvmh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:30.101140022 CET	1.1.1.1	192.168.2.4	0x61c0	No error (0)	www.mtb.com	d3o2xc4936wvmh.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:30.101140022 CET	1.1.1.1	192.168.2.4	0x61c0	No error (0)	d3o2xc4936wvmh.cloudfront.net		18.164.116.52	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:30.101140022 CET	1.1.1.1	192.168.2.4	0x61c0	No error (0)	d3o2xc4936wvmh.cloudfront.net		18.164.116.27	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:30.101140022 CET	1.1.1.1	192.168.2.4	0x61c0	No error (0)	d3o2xc4936wvmh.cloudfront.net		18.164.116.122	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:30.101140022 CET	1.1.1.1	192.168.2.4	0x61c0	No error (0)	d3o2xc4936wvmh.cloudfront.net		18.164.116.38	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:30.668575048 CET	1.1.1.1	192.168.2.4	0x7130	No error (0)	www3.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:30.673321009 CET	1.1.1.1	192.168.2.4	0x5c85	No error (0)	www3.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:30.673321009 CET	1.1.1.1	192.168.2.4	0x5c85	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.6	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:30.673321009 CET	1.1.1.1	192.168.2.4	0x5c85	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.36	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:30.673321009 CET	1.1.1.1	192.168.2.4	0x5c85	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.70	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:30.673321009 CET	1.1.1.1	192.168.2.4	0x5c85	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.79	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:31.202076912 CET	1.1.1.1	192.168.2.4	0x7bbc	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:31.202101946 CET	1.1.1.1	192.168.2.4	0xfd55	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:31.202101946 CET	1.1.1.1	192.168.2.4	0xfd55	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.164.116.55	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:31.202101946 CET	1.1.1.1	192.168.2.4	0xfd55	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.164.116.47	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:31.202101946 CET	1.1.1.1	192.168.2.4	0xfd55	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.164.116.129	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:31.202101946 CET	1.1.1.1	192.168.2.4	0xfd55	No error (0)	dzfq4ouujrxm8.cloudfront.net		18.164.116.77	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:31.753237009 CET	1.1.1.1	192.168.2.4	0xc019	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:31.753237009 CET	1.1.1.1	192.168.2.4	0xc019	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:32.122562885 CET	1.1.1.1	192.168.2.4	0xa54b	No error (0)	www3.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:32.128288984 CET	1.1.1.1	192.168.2.4	0xdba8	No error (0)	www3.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:32.128288984 CET	1.1.1.1	192.168.2.4	0xdba8	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.36	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:32.128288984 CET	1.1.1.1	192.168.2.4	0xdba8	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.79	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:32.128288984 CET	1.1.1.1	192.168.2.4	0xdba8	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.70	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:32.128288984 CET	1.1.1.1	192.168.2.4	0xdba8	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.6	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:34.063879967 CET	1.1.1.1	192.168.2.4	0x3e24	No error (0)	www.google.com		142.250.80.100	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:34.065541029 CET	1.1.1.1	192.168.2.4	0x3516	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2024 01:56:36.121421099 CET	1.1.1.1	192.168.2.4	0x4037	No error (0)	aiq-in.mtb.com		34.67.98.25	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:36.693599939 CET	1.1.1.1	192.168.2.4	0x90b9	No error (0)	aiq-in.mtb.com		34.67.98.25	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:44.757556915 CET	1.1.1.1	192.168.2.4	0x5d64	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:44.757556915 CET	1.1.1.1	192.168.2.4	0x5d64	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:50.632497072 CET	1.1.1.1	192.168.2.4	0x373	No error (0)	mtb.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:50.635071039 CET	1.1.1.1	192.168.2.4	0x98c1	No error (0)	mtb.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:50.635071039 CET	1.1.1.1	192.168.2.4	0x98c1	No error (0)	adobetarget.data.adobedc.net		63.140.39.117	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:50.635071039 CET	1.1.1.1	192.168.2.4	0x98c1	No error (0)	adobetarget.data.adobedc.net		63.140.38.189	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:50.635071039 CET	1.1.1.1	192.168.2.4	0x98c1	No error (0)	adobetarget.data.adobedc.net		63.140.38.236	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:50.635071039 CET	1.1.1.1	192.168.2.4	0x98c1	No error (0)	adobetarget.data.adobedc.net		63.140.38.132	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:50.635071039 CET	1.1.1.1	192.168.2.4	0x98c1	No error (0)	adobetarget.data.adobedc.net		63.140.39.65	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:50.635071039 CET	1.1.1.1	192.168.2.4	0x98c1	No error (0)	adobetarget.data.adobedc.net		63.140.39.9	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:50.635071039 CET	1.1.1.1	192.168.2.4	0x98c1	No error (0)	adobetarget.data.adobedc.net		63.140.39.82	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:50.635071039 CET	1.1.1.1	192.168.2.4	0x98c1	No error (0)	adobetarget.data.adobedc.net		63.140.39.93	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:50.635071039 CET	1.1.1.1	192.168.2.4	0x98c1	No error (0)	adobetarget.data.adobedc.net		63.140.38.217	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:50.635071039 CET	1.1.1.1	192.168.2.4	0x98c1	No error (0)	adobetarget.data.adobedc.net		63.140.39.150	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.379551888 CET	1.1.1.1	192.168.2.4	0x6187	No error (0)	ob.segreencolumn.com		18.238.80.12	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.379551888 CET	1.1.1.1	192.168.2.4	0x6187	No error (0)	ob.segreencolumn.com		18.238.80.53	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.379551888 CET	1.1.1.1	192.168.2.4	0x6187	No error (0)	ob.segreencolumn.com		18.238.80.9	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.379551888 CET	1.1.1.1	192.168.2.4	0x6187	No error (0)	ob.segreencolumn.com		18.238.80.28	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.661035061 CET	1.1.1.1	192.168.2.4	0x194	No error (0)	mtb.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:51.665353060 CET	1.1.1.1	192.168.2.4	0x65d5	No error (0)	mtb.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:51.665353060 CET	1.1.1.1	192.168.2.4	0x65d5	No error (0)	adobetarget.data.adobedc.net		63.140.39.15	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.665353060 CET	1.1.1.1	192.168.2.4	0x65d5	No error (0)	adobetarget.data.adobedc.net		63.140.38.138	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.665353060 CET	1.1.1.1	192.168.2.4	0x65d5	No error (0)	adobetarget.data.adobedc.net		63.140.39.117	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.665353060 CET	1.1.1.1	192.168.2.4	0x65d5	No error (0)	adobetarget.data.adobedc.net		63.140.38.189	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.665353060 CET	1.1.1.1	192.168.2.4	0x65d5	No error (0)	adobetarget.data.adobedc.net		63.140.38.236	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.665353060 CET	1.1.1.1	192.168.2.4	0x65d5	No error (0)	adobetarget.data.adobedc.net		63.140.38.132	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.665353060 CET	1.1.1.1	192.168.2.4	0x65d5	No error (0)	adobetarget.data.adobedc.net		63.140.39.65	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.665353060 CET	1.1.1.1	192.168.2.4	0x65d5	No error (0)	adobetarget.data.adobedc.net		63.140.39.9	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.665353060 CET	1.1.1.1	192.168.2.4	0x65d5	No error (0)	adobetarget.data.adobedc.net		63.140.39.82	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.665353060 CET	1.1.1.1	192.168.2.4	0x65d5	No error (0)	adobetarget.data.adobedc.net		63.140.39.93	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.764590025 CET	1.1.1.1	192.168.2.4	0x4a82	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:51.764614105 CET	1.1.1.1	192.168.2.4	0x3929	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:51.764614105 CET	1.1.1.1	192.168.2.4	0x3929	No error (0)	scontent.xx.fbcdn.net		31.13.71.7	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:51.820768118 CET	1.1.1.1	192.168.2.4	0x8044	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:51.820981979 CET	1.1.1.1	192.168.2.4	0xbb13	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:51.820981979 CET	1.1.1.1	192.168.2.4	0xbb13	No error (0)	platform.twitter.map.fastly.net		199.232.36.157	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:52.276634932 CET	1.1.1.1	192.168.2.4	0x5604	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:52.276634932 CET	1.1.1.1	192.168.2.4	0x5604	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:52.276634932 CET	1.1.1.1	192.168.2.4	0x5604	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:52.277272940 CET	1.1.1.1	192.168.2.4	0x2d7b	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:52.284521103 CET	1.1.1.1	192.168.2.4	0xf49	No error (0)	www.google.com		142.250.81.228	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:52.284970045 CET	1.1.1.1	192.168.2.4	0xe51b	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2024 01:56:52.297904968 CET	1.1.1.1	192.168.2.4	0x3723	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:52.297924995 CET	1.1.1.1	192.168.2.4	0xe1d8	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:52.302094936 CET	1.1.1.1	192.168.2.4	0x99b1	No error (0)	cdn.quantummetric.com		172.67.20.158	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:52.302094936 CET	1.1.1.1	192.168.2.4	0x99b1	No error (0)	cdn.quantummetric.com		104.22.53.252	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:52.302094936 CET	1.1.1.1	192.168.2.4	0x99b1	No error (0)	cdn.quantummetric.com		104.22.52.252	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:52.303420067 CET	1.1.1.1	192.168.2.4	0xa1b1	No error (0)	cdn.quantummetric.com			65	IN (0x0001)	false
Mar 14, 2024 01:56:53.457499027 CET	1.1.1.1	192.168.2.4	0xbe0e	No error (0)	dx.mountain.com		44.209.137.118	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.457499027 CET	1.1.1.1	192.168.2.4	0xbe0e	No error (0)	dx.mountain.com		34.238.149.65	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.457499027 CET	1.1.1.1	192.168.2.4	0xbe0e	No error (0)	dx.mountain.com		52.7.151.245	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.475074053 CET	1.1.1.1	192.168.2.4	0xafed	No error (0)	obs.segreencolumn.com		54.83.110.109	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.475074053 CET	1.1.1.1	192.168.2.4	0xafed	No error (0)	obs.segreencolumn.com		34.199.234.25	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.475074053 CET	1.1.1.1	192.168.2.4	0xafed	No error (0)	obs.segreencolumn.com		52.45.196.192	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.475074053 CET	1.1.1.1	192.168.2.4	0xafed	No error (0)	obs.segreencolumn.com		50.16.211.97	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.475074053 CET	1.1.1.1	192.168.2.4	0xafed	No error (0)	obs.segreencolumn.com		3.227.190.204	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.475074053 CET	1.1.1.1	192.168.2.4	0xafed	No error (0)	obs.segreencolumn.com		35.172.245.152	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.486988068 CET	1.1.1.1	192.168.2.4	0x27ce	No error (0)	t.co		104.244.42.197	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.490206003 CET	1.1.1.1	192.168.2.4	0x1932	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:53.490206003 CET	1.1.1.1	192.168.2.4	0x1932	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:53.490206003 CET	1.1.1.1	192.168.2.4	0x1932	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.490206003 CET	1.1.1.1	192.168.2.4	0x1932	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.490206003 CET	1.1.1.1	192.168.2.4	0x1932	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.490206003 CET	1.1.1.1	192.168.2.4	0x1932	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.491018057 CET	1.1.1.1	192.168.2.4	0xcf01	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:53.491018057 CET	1.1.1.1	192.168.2.4	0xcf01	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:53.505023956 CET	1.1.1.1	192.168.2.4	0xc88e	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:53.505023956 CET	1.1.1.1	192.168.2.4	0xc88e	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:53.505095005 CET	1.1.1.1	192.168.2.4	0xc0c5	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:53.505095005 CET	1.1.1.1	192.168.2.4	0xc0c5	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:53.686660051 CET	1.1.1.1	192.168.2.4	0x7928	No error (0)	td.doubleclick.net		142.251.40.226	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.864379883 CET	1.1.1.1	192.168.2.4	0xc444	No error (0)	googleads.g.doubleclick.net		142.251.40.130	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.864485025 CET	1.1.1.1	192.168.2.4	0xfe54	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Mar 14, 2024 01:56:53.894633055 CET	1.1.1.1	192.168.2.4	0x31f2	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:53.894704103 CET	1.1.1.1	192.168.2.4	0xfc7b	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:53.894704103 CET	1.1.1.1	192.168.2.4	0xfc7b	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:53.894704103 CET	1.1.1.1	192.168.2.4	0xfc7b	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.005168915 CET	1.1.1.1	192.168.2.4	0x579d	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.013557911 CET	1.1.1.1	192.168.2.4	0xf6c3	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.013557911 CET	1.1.1.1	192.168.2.4	0xf6c3	No error (0)	spdc-global.pbp.gysm.yahoodns.net		76.13.32.146	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.254651070 CET	1.1.1.1	192.168.2.4	0xe8f3	No error (0)	t.co		104.244.42.133	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.259114981 CET	1.1.1.1	192.168.2.4	0x8b5	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.259114981 CET	1.1.1.1	192.168.2.4	0x8b5	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.259114981 CET	1.1.1.1	192.168.2.4	0x8b5	No error (0)	s.twitter.com		104.244.42.67	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.259114981 CET	1.1.1.1	192.168.2.4	0x8b5	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.259114981 CET	1.1.1.1	192.168.2.4	0x8b5	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.259114981 CET	1.1.1.1	192.168.2.4	0x8b5	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.260435104 CET	1.1.1.1	192.168.2.4	0xf6fc	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.260435104 CET	1.1.1.1	192.168.2.4	0xf6fc	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.271272898 CET	1.1.1.1	192.168.2.4	0xf20f	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.271272898 CET	1.1.1.1	192.168.2.4	0xf20f	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.271738052 CET	1.1.1.1	192.168.2.4	0x660f	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.271738052 CET	1.1.1.1	192.168.2.4	0x660f	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.674375057 CET	1.1.1.1	192.168.2.4	0x12a4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.674388885 CET	1.1.1.1	192.168.2.4	0x7cc1	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.674388885 CET	1.1.1.1	192.168.2.4	0x7cc1	No error (0)	star-mini.c10r.facebook.com		157.240.241.35	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.680699110 CET	1.1.1.1	192.168.2.4	0xc462	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.681443930 CET	1.1.1.1	192.168.2.4	0xd48	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.920706987 CET	1.1.1.1	192.168.2.4	0xfb60	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.920850992 CET	1.1.1.1	192.168.2.4	0xc98	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:54.920850992 CET	1.1.1.1	192.168.2.4	0xc98	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.920850992 CET	1.1.1.1	192.168.2.4	0xc98	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.920850992 CET	1.1.1.1	192.168.2.4	0xc98	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.920850992 CET	1.1.1.1	192.168.2.4	0xc98	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.949425936 CET	1.1.1.1	192.168.2.4	0xb650	No error (0)	stats.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:54.949425936 CET	1.1.1.1	192.168.2.4	0xb650	No error (0)	stats.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.170567036 CET	1.1.1.1	192.168.2.4	0x1813	No error (0)	px.mountain.com		35.81.173.170	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.170567036 CET	1.1.1.1	192.168.2.4	0x1813	No error (0)	px.mountain.com		35.85.106.161	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.170567036 CET	1.1.1.1	192.168.2.4	0x1813	No error (0)	px.mountain.com		44.235.191.156	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.170567036 CET	1.1.1.1	192.168.2.4	0x1813	No error (0)	px.mountain.com		52.37.218.4	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.170567036 CET	1.1.1.1	192.168.2.4	0x1813	No error (0)	px.mountain.com		52.89.99.220	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.170567036 CET	1.1.1.1	192.168.2.4	0x1813	No error (0)	px.mountain.com		34.210.219.79	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.170567036 CET	1.1.1.1	192.168.2.4	0x1813	No error (0)	px.mountain.com		52.42.124.195	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.274173975 CET	1.1.1.1	192.168.2.4	0xf893	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:55.274173975 CET	1.1.1.1	192.168.2.4	0xf893	No error (0)	spdc-global.pbp.gysm.yahoodns.net		76.13.32.146	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.274601936 CET	1.1.1.1	192.168.2.4	0xdf91	No error (0)	sp.analytics.yahoo.com	spdc-global.pbp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:55.289525986 CET	1.1.1.1	192.168.2.4	0x7616	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:55.289525986 CET	1.1.1.1	192.168.2.4	0x7616	No error (0)	star-mini.c10r.facebook.com		31.13.71.36	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.289846897 CET	1.1.1.1	192.168.2.4	0x96da	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:56:55.307714939 CET	1.1.1.1	192.168.2.4	0x5180	No error (0)	obs.segreencolumn.com		3.227.190.204	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.307714939 CET	1.1.1.1	192.168.2.4	0x5180	No error (0)	obs.segreencolumn.com		35.172.245.152	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.307714939 CET	1.1.1.1	192.168.2.4	0x5180	No error (0)	obs.segreencolumn.com		34.199.234.25	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.307714939 CET	1.1.1.1	192.168.2.4	0x5180	No error (0)	obs.segreencolumn.com		54.83.110.109	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.307714939 CET	1.1.1.1	192.168.2.4	0x5180	No error (0)	obs.segreencolumn.com		50.16.211.97	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.307714939 CET	1.1.1.1	192.168.2.4	0x5180	No error (0)	obs.segreencolumn.com		52.45.196.192	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.354785919 CET	1.1.1.1	192.168.2.4	0x54f0	No error (0)	www.google.com		142.251.40.132	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:55.355463982 CET	1.1.1.1	192.168.2.4	0xf59e	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2024 01:56:56.131014109 CET	1.1.1.1	192.168.2.4	0xbd93	No error (0)	gs.mountain.com		34.212.4.35	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:56.131014109 CET	1.1.1.1	192.168.2.4	0xbd93	No error (0)	gs.mountain.com		52.12.117.226	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:56.131014109 CET	1.1.1.1	192.168.2.4	0xbd93	No error (0)	gs.mountain.com		35.81.162.201	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:56:59.073249102 CET	1.1.1.1	192.168.2.4	0x5f18	No error (0)	mtb-app.quantummetric.com		34.72.33.225	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:00.719279051 CET	1.1.1.1	192.168.2.4	0x5be7	No error (0)	rl.quantummetric.com		34.66.3.160	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:00.751441002 CET	1.1.1.1	192.168.2.4	0xe9ad	No error (0)	mtb-app.quantummetric.com		34.72.33.225	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:01.023451090 CET	1.1.1.1	192.168.2.4	0xc68	No error (0)	onlinebanking.mtb.com	onlinebanking.gslb.mtb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:01.023451090 CET	1.1.1.1	192.168.2.4	0xc68	No error (0)	onlinebanking.gslb.mtb.com		24.75.29.69	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:01.024425983 CET	1.1.1.1	192.168.2.4	0xb514	Server failure (2)	onlinebanking.mtb.com	none	none	65	IN (0x0001)	false
Mar 14, 2024 01:57:01.740559101 CET	1.1.1.1	192.168.2.4	0x1d95	No error (0)	resources.mtb.com	resources.gslb.mtb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:01.740559101 CET	1.1.1.1	192.168.2.4	0x1d95	No error (0)	resources.gslb.mtb.com		192.216.61.78	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:01.741611958 CET	1.1.1.1	192.168.2.4	0x26f0	Server failure (2)	resources.mtb.com	none	none	65	IN (0x0001)	false
Mar 14, 2024 01:57:01.830511093 CET	1.1.1.1	192.168.2.4	0xbb1	Server failure (2)	resources.mtb.com	none	none	65	IN (0x0001)	false
Mar 14, 2024 01:57:01.881819010 CET	1.1.1.1	192.168.2.4	0x9ed4	No error (0)	rl.quantummetric.com		34.66.3.160	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:02.382200003 CET	1.1.1.1	192.168.2.4	0xb0e2	Server failure (2)	resources.mtb.com	none	none	65	IN (0x0001)	false
Mar 14, 2024 01:57:02.382242918 CET	1.1.1.1	192.168.2.4	0x4f0f	No error (0)	resources.mtb.com	resources.gslb.mtb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:02.382242918 CET	1.1.1.1	192.168.2.4	0x4f0f	No error (0)	resources.gslb.mtb.com		192.216.61.78	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:05.797544956 CET	1.1.1.1	192.168.2.4	0x989f	Server failure (2)	onlinebanking.mtb.com	none	none	65	IN (0x0001)	false
Mar 14, 2024 01:57:05.893066883 CET	1.1.1.1	192.168.2.4	0xc60e	No error (0)	wup-5d65a0ab.us.v2.we-stats.com		52.141.217.134	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.272623062 CET	1.1.1.1	192.168.2.4	0x5169	No error (0)	1.a79ab95c1589a13f8a4cab612bc71f9f7.com	d3lyk6mjwds9ox.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:07.273108959 CET	1.1.1.1	192.168.2.4	0x47ff	No error (0)	1.b406929acabac9b095f124c81bdfcf57f.com	d3hspktnnoy2e3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:07.273108959 CET	1.1.1.1	192.168.2.4	0x47ff	No error (0)	d3hspktnnoy2e3.cloudfront.net		13.225.214.59	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.273108959 CET	1.1.1.1	192.168.2.4	0x47ff	No error (0)	d3hspktnnoy2e3.cloudfront.net		13.225.214.21	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.273108959 CET	1.1.1.1	192.168.2.4	0x47ff	No error (0)	d3hspktnnoy2e3.cloudfront.net		13.225.214.55	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.273108959 CET	1.1.1.1	192.168.2.4	0x47ff	No error (0)	d3hspktnnoy2e3.cloudfront.net		13.225.214.45	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.273787975 CET	1.1.1.1	192.168.2.4	0xb0b2	No error (0)	1.c81358859121583b7adf2ace89cb39f44.com	d3q5vj014p5nip.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:07.273906946 CET	1.1.1.1	192.168.2.4	0x8551	No error (0)	1.c81358859121583b7adf2ace89cb39f44.com	d3q5vj014p5nip.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:07.273906946 CET	1.1.1.1	192.168.2.4	0x8551	No error (0)	d3q5vj014p5nip.cloudfront.net		13.225.214.11	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.273906946 CET	1.1.1.1	192.168.2.4	0x8551	No error (0)	d3q5vj014p5nip.cloudfront.net		13.225.214.114	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.273906946 CET	1.1.1.1	192.168.2.4	0x8551	No error (0)	d3q5vj014p5nip.cloudfront.net		13.225.214.85	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.273906946 CET	1.1.1.1	192.168.2.4	0x8551	No error (0)	d3q5vj014p5nip.cloudfront.net		13.225.214.19	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.280627966 CET	1.1.1.1	192.168.2.4	0xac8f	No error (0)	1.b406929acabac9b095f124c81bdfcf57f.com	d3hspktnnoy2e3.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:07.283087969 CET	1.1.1.1	192.168.2.4	0xffa8	No error (0)	1.a79ab95c1589a13f8a4cab612bc71f9f7.com	d3lyk6mjwds9ox.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:07.283087969 CET	1.1.1.1	192.168.2.4	0xffa8	No error (0)	d3lyk6mjwds9ox.cloudfront.net		54.230.163.72	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.283087969 CET	1.1.1.1	192.168.2.4	0xffa8	No error (0)	d3lyk6mjwds9ox.cloudfront.net		54.230.163.93	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.283087969 CET	1.1.1.1	192.168.2.4	0xffa8	No error (0)	d3lyk6mjwds9ox.cloudfront.net		54.230.163.12	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.283087969 CET	1.1.1.1	192.168.2.4	0xffa8	No error (0)	d3lyk6mjwds9ox.cloudfront.net		54.230.163.62	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:07.575977087 CET	1.1.1.1	192.168.2.4	0xc917	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:07.575977087 CET	1.1.1.1	192.168.2.4	0xc917	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:08.435291052 CET	1.1.1.1	192.168.2.4	0xbbbe	Server failure (2)	resources.mtb.com	none	none	65	IN (0x0001)	false
Mar 14, 2024 01:57:09.767677069 CET	1.1.1.1	192.168.2.4	0x91ee	No error (0)	log-5d65a0ab.us.v2.we-stats.com		52.238.253.184	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:10.221033096 CET	1.1.1.1	192.168.2.4	0xe224	No error (0)	wup-5d65a0ab.us.v2.we-stats.com		52.141.217.134	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:11.768378973 CET	1.1.1.1	192.168.2.4	0x2bd9	No error (0)	onlinebanking.mtb.com	onlinebanking.gslb.mtb.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:11.768378973 CET	1.1.1.1	192.168.2.4	0x2bd9	No error (0)	onlinebanking.gslb.mtb.com		24.75.29.69	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:11.769463062 CET	1.1.1.1	192.168.2.4	0x9aa2	Server failure (2)	onlinebanking.mtb.com	none	none	65	IN (0x0001)	false
Mar 14, 2024 01:57:11.858865023 CET	1.1.1.1	192.168.2.4	0xd075	Server failure (2)	onlinebanking.mtb.com	none	none	65	IN (0x0001)	false
Mar 14, 2024 01:57:15.012829065 CET	1.1.1.1	192.168.2.4	0xc59c	No error (0)	asset.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:15.041402102 CET	1.1.1.1	192.168.2.4	0xc976	No error (0)	asset.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:15.041402102 CET	1.1.1.1	192.168.2.4	0xc976	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.36	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:15.041402102 CET	1.1.1.1	192.168.2.4	0xc976	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.6	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:15.041402102 CET	1.1.1.1	192.168.2.4	0xc976	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.70	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:15.041402102 CET	1.1.1.1	192.168.2.4	0xc976	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.79	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:19.291455984 CET	1.1.1.1	192.168.2.4	0xb408	No error (0)	m.mtb.com		24.75.29.68	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:20.471155882 CET	1.1.1.1	192.168.2.4	0x1093	No error (0)	m.mtb.com		24.75.29.68	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:27.920365095 CET	1.1.1.1	192.168.2.4	0x27b6	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:27.920365095 CET	1.1.1.1	192.168.2.4	0x27b6	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:27.921143055 CET	1.1.1.1	192.168.2.4	0xf0e4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:27.921143055 CET	1.1.1.1	192.168.2.4	0xf0e4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:27.921257019 CET	1.1.1.1	192.168.2.4	0x1eb0	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:27.921257019 CET	1.1.1.1	192.168.2.4	0x1eb0	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:27.921257019 CET	1.1.1.1	192.168.2.4	0x1eb0	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		23.20.189.8	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:27.921257019 CET	1.1.1.1	192.168.2.4	0x1eb0	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		35.169.173.155	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:27.921257019 CET	1.1.1.1	192.168.2.4	0x1eb0	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		54.205.210.54	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:31.407154083 CET	1.1.1.1	192.168.2.4	0x85f6	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:31.407154083 CET	1.1.1.1	192.168.2.4	0x85f6	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:31.407154083 CET	1.1.1.1	192.168.2.4	0x85f6	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		23.20.189.8	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:31.407154083 CET	1.1.1.1	192.168.2.4	0x85f6	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		54.205.210.54	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:31.407154083 CET	1.1.1.1	192.168.2.4	0x85f6	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		35.169.173.155	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:31.407407999 CET	1.1.1.1	192.168.2.4	0x9d66	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:31.407407999 CET	1.1.1.1	192.168.2.4	0x9d66	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:33.044569016 CET	1.1.1.1	192.168.2.4	0x7b4e	No error (0)	www3.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:33.044569016 CET	1.1.1.1	192.168.2.4	0x7b4e	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.79	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:33.044569016 CET	1.1.1.1	192.168.2.4	0x7b4e	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.70	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:33.044569016 CET	1.1.1.1	192.168.2.4	0x7b4e	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.6	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:33.044569016 CET	1.1.1.1	192.168.2.4	0x7b4e	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.36	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:33.059263945 CET	1.1.1.1	192.168.2.4	0x4fa1	No error (0)	www3.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:33.227338076 CET	1.1.1.1	192.168.2.4	0x30c8	No error (0)	www3.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:33.227338076 CET	1.1.1.1	192.168.2.4	0x30c8	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.79	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:33.227338076 CET	1.1.1.1	192.168.2.4	0x30c8	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.36	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:33.227338076 CET	1.1.1.1	192.168.2.4	0x30c8	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.70	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:33.227338076 CET	1.1.1.1	192.168.2.4	0x30c8	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.6	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:33.248704910 CET	1.1.1.1	192.168.2.4	0x1237	No error (0)	www3.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:33.643327951 CET	1.1.1.1	192.168.2.4	0x6659	No error (0)	www3.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:33.643327951 CET	1.1.1.1	192.168.2.4	0x6659	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.6	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:33.643327951 CET	1.1.1.1	192.168.2.4	0x6659	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.70	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:33.643327951 CET	1.1.1.1	192.168.2.4	0x6659	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.36	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:33.643327951 CET	1.1.1.1	192.168.2.4	0x6659	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.79	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:36.783926010 CET	1.1.1.1	192.168.2.4	0x65be	No error (0)	www3.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:36.788146973 CET	1.1.1.1	192.168.2.4	0x91f3	No error (0)	www3.mtb.com	d9siiz948zdql.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2024 01:57:36.788146973 CET	1.1.1.1	192.168.2.4	0x91f3	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.6	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:36.788146973 CET	1.1.1.1	192.168.2.4	0x91f3	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.70	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:36.788146973 CET	1.1.1.1	192.168.2.4	0x91f3	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.36	A (IP address)	IN (0x0001)	false
Mar 14, 2024 01:57:36.788146973 CET	1.1.1.1	192.168.2.4	0x91f3	No error (0)	d9siiz948zdql.cloudfront.net		108.139.29.79	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	172.66.47.152	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:17 UTC	661	OUT	GET / HTTP/1.1 Host: mtb-repo.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:17 UTC	754	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6607 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "c467ee7e7ea430d855ab80000c26f9a9" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e%2BsIB0NtPnNAtpHwpp09Arh0qQr7hUp8GbxHwAbtarFS70A15tfu%2Fia1Ccw8titlpLtYnCeizFO89xbkVdMQvIVsBzgE7XZGdymXlgS0Ojxh1xrjWzzYT%2Bn8RpLd3pP6ppaFVYA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86404d97dbbf8c5d-EWR alt-svc: h3=":443"; ma=86400
2024-03-14 00:56:17 UTC	615	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 5f 5f 73 74 69 63 6b 79 2d 66 6f 6f 74 65 72 20 5f 5f 73 74 69 63 6b 79 2d 66 6f 6f 74 65 72 2d 2d 6c 69 6e 6b 73 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 0a 20 20 20 0a 20 20 20 20 3c 74 69 74 6c 65 3e 57 65 6c 63 6f 6d 65 20 74 6f 20 4f 6e 6c 69 6e 65 20 42 61 6e 6b 69 6e 67 20 7c 20 4d 26 61 6d 70 3b 54 20 42 61 6e 6b 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 0a 20 20 20 20 20 20 72 65 6c 3d 22 73 68 6f 72 Data Ascii: <!DOCTYPE html><html lang="en" class="__sticky-footer __sticky-footer--links"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <title>Welcome to Online Banking \| M&T Bank</title> <link rel="shor
2024-03-14 00:56:17 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 2f 3e 0a 0a 20 20 20 20 0a 0a 20 20 20 20 3c 21 2d 2d 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2e 2f 6d 74 62 5f 66 69 6c 65 73 2f 63 73 73 2e 6d 74 62 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 20 2d 2d 3e 0a 0a 20 0a 20 0a 20 0a 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 73 72 63 3d 22 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 65 77 49 50 4c 46 43 6f 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 31 50 Data Ascii: ontent="telephone=no" /> ... <link href="./mtb_files/css.mtb.css" rel="stylesheet" /> --> <script type="module" crossorigin src="/assets/index-ewIPLFCo.js"></script> <link rel="stylesheet" crossorigin href="/assets/index-1P
2024-03-14 00:56:17 UTC	1369	IN	Data Raw: 48 61 76 65 20 71 75 65 73 74 69 6f 6e 73 20 61 62 6f 75 74 20 4d 26 61 6d 70 3b 54 20 4f 6e 6c 69 6e 65 20 42 61 6e 6b 69 6e 67 3f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 65 6c 6c 20 6d 65 64 69 75 6d 2d 36 20 74 65 78 74 2d 63 65 6e 74 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 5f 5f 66 6f 6e 74 2d 73 69 7a 65 2d 73 65 63 6f 6e 64 61 72 79 20 5f 5f 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 20 5f 5f 73 70 61 63 65 72 2d 70 61 72 61 67 72 61 70 68 2d 68 61 6c 66 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 Data Ascii: Have questions about M&T Online Banking? </p> </div> <div class="cell medium-6 text-center"> <p class="__font-size-secondary __color-primary __spacer-paragraph-half" >
2024-03-14 00:56:17 UTC	1369	IN	Data Raw: 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 6d 74 62 2d 66 6f 6f 74 65 72 20 6d 74 62 2d 66 6f 6f 74 65 72 5f 5f 61 75 74 68 22 20 72 6f 6c 65 3d 22 63 6f 6e 74 65 6e 74 69 6e 66 6f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 72 69 64 2d 78 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 63 65 6c 6c 20 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 20 66 6c 65 78 2d 64 69 72 2d 63 6f 6c 75 6d 6e 20 61 6c 69 67 6e 2d 63 65 6e 74 65 72 2d 6d 69 64 64 6c 65 22 0a Data Ascii: </p> </div> </div> </div> <section class="mtb-footer mtb-footer__auth" role="contentinfo"> <div class="grid-x"> <div class="cell flex-container flex-dir-column align-center-middle"
2024-03-14 00:56:17 UTC	1369	IN	Data Raw: 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 74 62 2d 66 6f 6f 74 65 72 2d 2d 6e 6f 6e 2d 61 75 74 68 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 c2 a9 32 30 32 33 20 4d 26 61 6d 70 3b 54 20 42 61 6e 6b 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 3c 62 72 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 55 73 65 72 73 20 6f 66 20 74 68 69 73 20 77 65 62 73 69 74 65 20 61 67 72 65 65 20 74 6f 20 62 65 20 62 6f 75 6e 64 20 62 79 20 74 68 65 20 70 72 6f 76 69 73 69 6f 6e 73 20 6f 66 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 65 20 4d 26 61 6d 70 3b 54 20 77 65 62 73 Data Ascii: /div> <div class="mtb-footer--non-auth"> <p> 2023 M&T Bank. All Rights Reserved.<br /> Users of this website agree to be bound by the provisions of the M&T webs
2024-03-14 00:56:17 UTC	516	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 45 71 75 61 6c 20 48 6f 75 73 69 6e 67 20 4c 65 6e 64 65 72 20 4e 4d 4c 53 20 23 33 38 31 30 37 36 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 74 62 2e 63 6f 6d 2f 66 64 69 63 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 4d 65 6d 62 65 72 20 46 44 49 43 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </div> <p> Equal Housing Lender NMLS #381076 <a href="https://www.mtb.com/fdic" target="_blank" >Member FDIC</a > </p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49734	172.66.47.152	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:18 UTC	593	OUT	GET /assets/index-1PX0Jpt0.css HTTP/1.1 Host: mtb-repo.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mtb-repo.pages.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://mtb-repo.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:18 UTC	755	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:18 GMT Content-Type: text/css; charset=utf-8 Content-Length: 251309 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "fe24fde32215cb005db2f863fa1a7ab6" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mufHG7kcBJrYFwGRUCkGOkTo1BPW8X%2B7FZxPpqgXWkt9pmM6G4wgdLk2f1HY9C5UfyGe%2B7tY9P49Yynwp4eCQARXu6jfUZ1F485wIzHlhquBXRaggMAE4wzvNx%2FYuqdhDG6idvA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86404d998b21c44f-EWR alt-svc: h3=":443"; ma=86400
2024-03-14 00:56:18 UTC	614	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 6c 6f 61 64 65 72 7b 77 69 64 74 68 3a 34 38 70 78 3b 68 65 69 67 68 74 3a 34 38 70 78 3b 62 6f 72 64 65 72 3a 35 70 78 20 73 6f 6c 69 64 20 23 30 30 37 38 35 36 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 72 6f 74 61 74 69 6f 6e 20 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 7d 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 69 6f 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 Data Ascii: @charset "UTF-8";.loader{width:48px;height:48px;border:5px solid #007856;border-bottom-color:transparent;border-radius:50%;display:inline-block;box-sizing:border-box;animation:rotation 1s linear infinite}@keyframes rotation{0%{transform:rotate(0)}to{trans
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 68 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 70 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 2d 77 Data Ascii: h1{font-size:2em;margin:.67em 0}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent}abbr[title]{border-bottom:none;text-decoration:underline;-w
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 7d 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e Data Ascii: ox;box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-decoration{-webkit-appearance:non
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 5b 64 61 74 61 2d 77 68 61 74 69 6e 70 75 74 3d 6d 6f 75 73 65 5d 20 62 75 74 74 6f 6e 7b 6f 75 74 6c 69 6e 65 3a 30 7d 70 72 65 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 7d 2e 69 73 2d 76 69 73 69 62 6c 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 73 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 5b 74 79 70 65 3d 74 65 78 74 5d 2c 5b 74 79 70 65 3d 70 61 73 73 77 6f Data Ascii: ground:transparent;line-height:1;cursor:auto}[data-whatinput=mouse] button{outline:0}pre{overflow:auto}button,input,optgroup,select,textarea{font-family:inherit}.is-visible{display:block!important}.is-hidden{display:none!important}[type=text],[type=passwo
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 64 69 6f 5d 2b 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2b 6c 61 62 65 6c 5b 66 6f 72 5d 2c 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2b 6c 61 62 65 6c 5b 66 6f 72 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 6c 61 62 65 6c 3e 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 6c 61 62 65 6c 3e 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 35 72 65 6d 7d 5b 74 79 70 65 3d 66 69 6c 65 5d 7b 77 69 64 74 68 3a 31 30 30 Data Ascii: dio]+label{display:inline-block;vertical-align:baseline;margin-left:.5rem;margin-right:1rem;margin-bottom:0}[type=checkbox]+label[for],[type=radio]+label[for]{cursor:pointer}label>[type=checkbox],label>[type=radio]{margin-right:.5rem}[type=file]{width:100
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 61 62 65 6c 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 30 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 6c 61 62 65 6c 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 7d 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 66 69 65 6c 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 20 31 20 30 3b 2d 6d 73 2d 66 6c 65 78 3a 31 20 31 20 30 3b 66 6c 65 78 3a 31 20 31 20 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 2e 69 6e 70 75 74 2d 67 Data Ascii: nter;-ms-flex-align:center;align-items:center}.input-group-label:first-child{border-right:0}.input-group-label:last-child{border-left:0}.input-group-field{border-radius:0;-webkit-box-flex:1;-webkit-flex:1 1 0;-ms-flex:1 1 0;flex:1 1 0;min-width:0}.input-g
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 74 79 6c 65 3d 27 66 69 6c 6c 3a 20 72 67 62 25 32 38 30 2c 20 31 32 30 2c 20 38 36 25 32 39 27 3e 3c 2f 70 6f 6c 79 67 6f 6e 3e 3c 2f 73 76 67 3e 22 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 6f 72 69 67 69 6e 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 72 69 67 68 74 20 2d 31 72 65 6d 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 39 70 78 20 36 70 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 30 ef bf bd 29 7b 73 65 6c 65 63 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 Data Ascii: tyle='fill: rgb%280, 120, 86%29'></polygon></svg>");background-origin:content-box;background-position:right -1rem center;background-repeat:no-repeat;background-size:9px 6px}@media screen and (min-width:0){select{background-image:url(data:image/png;base
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 32 35 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 7d 65 6d 2c 69 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 73 74 72 6f 6e 67 2c 62 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 68 31 2c 2e 68 31 2c 68 32 2c 2e 68 32 2c 68 33 2c 2e 68 33 2c 68 34 2c 2e 68 34 2c 68 35 2c 2e 68 35 2c 68 36 2c 2e 68 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4d 26 54 20 42 61 6c 74 6f 20 57 65 62 22 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 Data Ascii: 25;text-rendering:optimizeLegibility}em,i{font-style:italic;line-height:inherit}strong,b{font-weight:500;line-height:inherit}small{font-size:80%;line-height:inherit}h1,.h1,h2,.h2,h3,.h3,h4,.h4,h5,.h5,h6,.h6{font-family:"M&T Balto Web",Arial,Helvetica,sans
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 30 7d 75 6c 2c 6f 6c 2c 64 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 70 6f 73 69 74 69 6f 6e 3a 6f 75 74 73 69 64 65 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 7d 6c 69 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 75 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 32 35 72 65 6d 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 69 73 63 7d 6f 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 32 35 72 65 6d 7d 75 6c 20 75 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 6f 6c 20 6f 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 64 6c 20 64 74 7b 6d 61 72 67 Data Ascii: 0}ul,ol,dl{margin-bottom:1rem;list-style-position:outside;line-height:1.25}li{font-size:inherit}ul{margin-left:1.25rem;list-style-type:disc}ol{margin-left:1.25rem}ul ul,ol ul,ul ol,ol ol{margin-left:1.25rem;margin-bottom:0}dl{margin-bottom:1rem}dl dt{marg
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 6d 65 64 69 75 6d 2d 74 65 78 74 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6d 65 64 69 75 6d 2d 74 65 78 74 2d 6a 75 73 74 69 66 79 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 65 6d 29 7b 2e 6c 61 72 67 65 2d 74 65 78 74 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 6c 61 72 67 65 2d 74 65 78 74 2d 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 6c 61 72 67 65 2d 74 65 78 74 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6c 61 72 67 65 2d 74 65 78 74 2d 6a Data Ascii: text-align:right}.medium-text-center{text-align:center}.medium-text-justify{text-align:justify}}@media print,screen and (min-width:48em){.large-text-left{text-align:left}.large-text-right{text-align:right}.large-text-center{text-align:center}.large-text-j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	172.66.47.152	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:18 UTC	713	OUT	GET /mtb_files/saved_resource.html HTTP/1.1 Host: mtb-repo.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://mtb-repo.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:18 UTC	644	IN	HTTP/1.1 308 Permanent Redirect Date: Thu, 14 Mar 2024 00:56:18 GMT Content-Length: 0 Connection: close Location: /mtb_files/saved_resource Access-Control-Allow-Origin: * referrer-policy: strict-origin-when-cross-origin Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ciQu8%2FV3mH07YVc1GhZaokNJZLnqxNtqpVZKJoEWVR1%2FGNCkSEzSXPaNPrJjDjvZMulaotI6jnXDh0SlXGeAS9Qg9FfmaYBzOSC7oi1uqH4u%2FBGBX7yv%2Fw47Mpx5%2BOFN%2BiBPEkA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86404d9aec987c6c-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49737	172.66.47.152	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:18 UTC	578	OUT	GET /assets/index-ewIPLFCo.js HTTP/1.1 Host: mtb-repo.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mtb-repo.pages.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://mtb-repo.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:18 UTC	752	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:18 GMT Content-Type: application/javascript Content-Length: 186513 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "85644f765ca358e2c1eef2a045d302ee" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1zuFAtIXQ5l39k2Keg9k38GX%2BSVmCNsTbhDuD63kRaFCTOyvn2VhdtO8r5LFv0oH280tMqCzSVC0omYIrMp4VUMqkW72U4a76hjmBSDFjIu43BJ6Lnm63qyhgK7dcSaHuYv%2FwkQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86404d9b1d3e7d05-EWR alt-svc: h3=":443"; ma=86400
2024-03-14 00:56:18 UTC	617	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6f 64 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 74 5b 6e 5d 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 73 74 72 69 6e 67 22 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 7b 66 6f 72 28 63 6f 6e 73 74 20 6c 20 69 6e 20 72 29 69 66 28 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 21 28 6c 20 69 6e 20 65 29 29 7b 63 6f 6e 73 74 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 6c 29 3b 69 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6c 2c 69 2e 67 65 74 3f 69 3a 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 28 29 3d 3e 72 5b 6c 5d Data Ascii: function od(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!Array.isArray(r)){for(const l in r)if(l!=="default"&&!(l in e)){const i=Object.getOwnPropertyDescriptor(r,l);i&&Object.defineProperty(e,l,i.get?i:{enumerable:!0,get:()=>r[l]
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 64 4e 6f 64 65 73 29 6f 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 4c 49 4e 4b 22 26 26 6f 2e 72 65 6c 3d 3d 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 26 26 72 28 6f 29 7d 29 2e 6f 62 73 65 72 76 65 28 64 6f 63 75 6d 65 6e 74 2c 7b 63 68 69 6c 64 4c 69 73 74 3a 21 30 2c 73 75 62 74 72 65 65 3a 21 30 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6c 29 7b 63 6f 6e 73 74 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6c 2e 69 6e 74 65 67 72 69 74 79 26 26 28 69 2e 69 6e 74 65 67 72 69 74 79 3d 6c 2e 69 6e 74 65 67 72 69 74 79 29 2c 6c 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 26 26 28 69 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3d 6c 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 29 2c 6c 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 3d 3d 22 75 73 65 2d 63 72 65 64 65 6e Data Ascii: dNodes)o.tagName==="LINK"&&o.rel==="modulepreload"&&r(o)}).observe(document,{childList:!0,subtree:!0});function n(l){const i={};return l.integrity&&(i.integrity=l.integrity),l.referrerPolicy&&(i.referrerPolicy=l.referrerPolicy),l.crossOrigin==="use-creden
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 52 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 6e 71 75 65 75 65 53 65 74 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 52 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2c 4f 73 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 66 6e 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 70 72 6f 70 73 3d 65 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 74 2c 74 68 69 73 2e 72 65 66 73 3d 4f 73 2c 74 68 69 73 2e 75 70 64 61 74 65 72 3d 6e 7c 7c 54 73 7d 66 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 52 65 61 63 74 43 6f 6d 70 6f 6e 65 6e 74 3d 7b 7d 3b 66 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 65 21 3d 22 6f Data Ascii: n(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},Rs=Object.assign,Os={};function fn(e,t,n){this.props=e,this.context=t,this.refs=Os,this.updater=n\|\|Ts}fn.prototype.isReactComponent={};fn.prototype.setState=function(e,t){if(typeof e!="o
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 70 65 3a 65 2e 74 79 70 65 2c 6b 65 79 3a 74 2c 72 65 66 3a 65 2e 72 65 66 2c 70 72 6f 70 73 3a 65 2e 70 72 6f 70 73 2c 5f 6f 77 6e 65 72 3a 65 2e 5f 6f 77 6e 65 72 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 6f 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 65 21 3d 3d 6e 75 6c 6c 26 26 65 2e 24 24 74 79 70 65 6f 66 3d 3d 3d 69 72 7d 66 75 6e 63 74 69 6f 6e 20 53 64 28 65 29 7b 76 61 72 20 74 3d 7b 22 3d 22 3a 22 3d 30 22 2c 22 3a 22 3a 22 3d 32 22 7d 3b 72 65 74 75 72 6e 22 24 22 2b 65 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 3a 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 5b 6e 5d 7d 29 7d 76 61 72 20 70 75 3d 2f 5c 2f 2b 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 42 6c 28 65 2c 74 29 7b 72 65 74 75 Data Ascii: pe:e.type,key:t,ref:e.ref,props:e.props,_owner:e._owner}}function po(e){return typeof e=="object"&&e!==null&&e.$$typeof===ir}function Sd(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,function(n){return t[n]})}var pu=/\/+/g;function Bl(e,t){retu
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 78 64 28 65 29 7b 69 66 28 65 2e 5f 73 74 61 74 75 73 3d 3d 3d 2d 31 29 7b 76 61 72 20 74 3d 65 2e 5f 72 65 73 75 6c 74 3b 74 3d 74 28 29 2c 74 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 28 65 2e 5f 73 74 61 74 75 73 3d 3d 3d 30 7c 7c 65 2e 5f 73 74 61 74 75 73 3d 3d 3d 2d 31 29 26 26 28 65 2e 5f 73 74 61 74 75 73 3d 31 2c 65 2e 5f 72 65 73 75 6c 74 3d 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 28 65 2e 5f 73 74 61 74 75 73 3d 3d 3d 30 7c 7c 65 2e 5f 73 74 61 74 75 73 3d 3d 3d 2d 31 29 26 26 28 65 2e 5f 73 74 61 74 75 73 3d 32 2c 65 2e 5f 72 65 73 75 6c 74 3d 6e 29 7d 29 2c 65 2e 5f 73 74 61 74 75 73 3d 3d 3d 2d 31 26 26 28 65 2e 5f 73 74 61 74 75 73 3d 30 2c 65 2e 5f 72 65 73 75 6c 74 3d 74 29 7d 69 66 28 65 2e 5f 73 74 Data Ascii: ction xd(e){if(e._status===-1){var t=e._result;t=t(),t.then(function(n){(e._status===0\|\|e._status===-1)&&(e._status=1,e._result=n)},function(n){(e._status===0\|\|e._status===-1)&&(e._status=2,e._result=n)}),e._status===-1&&(e._status=0,e._result=t)}if(e._st
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 65 6c 73 65 20 69 66 28 31 3c 73 29 7b 75 3d 41 72 72 61 79 28 73 29 3b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 73 3b 61 2b 2b 29 75 5b 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 61 2b 32 5d 3b 72 2e 63 68 69 6c 64 72 65 6e 3d 75 7d 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 69 72 2c 74 79 70 65 3a 65 2e 74 79 70 65 2c 6b 65 79 3a 6c 2c 72 65 66 3a 69 2c 70 72 6f 70 73 3a 72 2c 5f 6f 77 6e 65 72 3a 6f 7d 7d 3b 4f 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 7b 24 24 74 79 70 65 6f 66 3a 70 64 2c 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 3a 65 2c 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 32 3a 65 2c 5f 74 68 72 65 61 64 43 6f 75 6e 74 3a 30 2c 50 72 6f 76 69 64 65 72 3a 6e 75 6c 6c 2c 43 6f 6e 73 Data Ascii: else if(1<s){u=Array(s);for(var a=0;a<s;a++)u[a]=arguments[a+2];r.children=u}return{$$typeof:ir,type:e.type,key:l,ref:i,props:r,_owner:o}};O.createContext=function(e){return e={$$typeof:pd,_currentValue:e,_currentValue2:e,_threadCount:0,Provider:null,Cons
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 63 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 28 65 2c 74 29 7d 3b 4f 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 63 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 28 65 2c 74 29 7d 3b 4f 2e 75 73 65 4d 65 6d 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 63 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 4d 65 6d 6f 28 65 2c 74 29 7d 3b 4f 2e 75 73 65 52 65 64 75 63 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 63 65 2e 63 75 72 72 65 6e 74 2e 75 73 65 52 65 64 75 63 65 72 28 65 2c 74 2c 6e 29 7d 3b 4f 2e 75 73 65 52 65 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 Data Ascii: ce.current.useInsertionEffect(e,t)};O.useLayoutEffect=function(e,t){return ce.current.useLayoutEffect(e,t)};O.useMemo=function(e,t){return ce.current.useMemo(e,t)};O.useReducer=function(e,t,n){return ce.current.useReducer(e,t,n)};O.useRef=function(e){retu
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 75 72 72 65 6e 74 7d 7d 77 6c 2e 46 72 61 67 6d 65 6e 74 3d 50 64 3b 77 6c 2e 6a 73 78 3d 4d 73 3b 77 6c 2e 6a 73 78 73 3d 4d 73 3b 6a 73 2e 65 78 70 6f 72 74 73 3d 77 6c 3b 76 61 72 20 70 3d 6a 73 2e 65 78 70 6f 72 74 73 2c 70 69 3d 7b 7d 2c 44 73 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 6b 65 3d 7b 7d 2c 42 73 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 24 73 3d 7b 7d 3b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 73 63 68 65 64 75 6c 65 72 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 Data Ascii: urrent}}wl.Fragment=Pd;wl.jsx=Ms;wl.jsxs=Ms;js.exports=wl;var p=js.exports,pi={},Ds={exports:{}},ke={},Bs={exports:{}},$s={};/** * @license React * scheduler.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 65 6e 64 69 6e 67 21 3d 3d 76 6f 69 64 20 30 26 26 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 2e 69 73 49 6e 70 75 74 50 65 6e 64 69 6e 67 2e 62 69 6e 64 28 6e 61 76 69 67 61 74 6f 72 2e 73 63 68 65 64 75 6c 69 6e 67 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 43 29 7b 66 6f 72 28 76 61 72 20 54 3d 6e 28 61 29 3b 54 21 3d 3d 6e 75 6c 6c 3b 29 7b 69 66 28 54 2e 63 61 6c 6c 62 61 63 6b 3d 3d 3d 6e 75 6c 6c 29 72 28 61 29 3b 65 6c 73 65 20 69 66 28 54 2e 73 74 61 72 74 54 69 6d 65 3c 3d 43 29 72 28 61 29 2c 54 2e 73 6f 72 74 49 6e 64 65 78 3d 54 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 2c 74 28 73 2c 54 29 3b 65 6c 73 65 20 62 72 65 61 6b 3b 54 3d 6e 28 61 29 7d 7d 66 75 6e 63 74 69 Data Ascii: .scheduling.isInputPending!==void 0&&navigator.scheduling.isInputPending.bind(navigator.scheduling);function f(C){for(var T=n(a);T!==null;){if(T.callback===null)r(a);else if(T.startTime<=C)r(a),T.sortIndex=T.expirationTime,t(s,T);else break;T=n(a)}}functi
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 6c 50 72 69 6f 72 69 74 79 3d 33 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 50 72 6f 66 69 6c 69 6e 67 3d 6e 75 6c 6c 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 55 73 65 72 42 6c 6f 63 6b 69 6e 67 50 72 69 6f 72 69 74 79 3d 32 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 63 61 6e 63 65 6c 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 43 29 7b 43 2e 63 61 6c 6c 62 61 63 6b 3d 6e 75 6c 6c 7d 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 63 6f 6e 74 69 6e 75 65 45 78 65 63 75 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 7c 7c 79 7c 7c 28 53 3d 21 30 2c 55 6c 28 6b 29 29 7d 2c 65 2e 75 6e 73 74 61 62 6c 65 5f 66 6f 72 63 65 46 72 61 6d 65 52 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 43 29 7b 30 3e 43 7c 7c 31 32 35 3c 43 3f 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 66 6f 72 63 Data Ascii: lPriority=3,e.unstable_Profiling=null,e.unstable_UserBlockingPriority=2,e.unstable_cancelCallback=function(C){C.callback=null},e.unstable_continueExecution=function(){S\|\|y\|\|(S=!0,Ul(k))},e.unstable_forceFrameRate=function(C){0>C\|\|125<C?console.error("forc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49739	172.66.47.152	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:18 UTC	603	OUT	GET /mtb_files/mtb-logo.svg HTTP/1.1 Host: mtb-repo.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mtb-repo.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:18 UTC	745	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:18 GMT Content-Type: image/svg+xml Content-Length: 2039 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "04577b6fb8fd0183a512904deaef98fd" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x5%2FXHckonFLzmIYjSJEPLFSF%2Bi0l2beiAe1vgMynp5LQywRC%2FuaIBmg6pGgAmC7H0esno0QIZGbv%2FPrrnYYRsM8uJTeHHhrybR7xhIilUPGYwyZtOcLge1zFY56ZdLICegGRLc8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86404d9b28d342cd-EWR alt-svc: h3=":443"; ma=86400
2024-03-14 00:56:18 UTC	624	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 32 20 33 33 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 32 2e 31 36 20 31 35 2e 37 32 63 33 2e 36 36 2d 2e 38 33 20 36 2e 30 32 2d 33 2e 34 37 20 36 2e 30 32 2d 37 2e 35 31 20 30 2d 34 2e 39 31 2d 33 2e 32 2d 38 2e 32 2d 39 2e 38 32 2d 38 2e 32 68 2d 31 30 2e 37 76 33 32 2e 34 34 68 31 31 2e 30 37 63 36 2e 39 20 30 20 31 30 2e 36 31 2d 33 2e 32 34 20 31 30 2e 36 31 2d 38 2e 37 36 20 30 2d 34 2e 34 31 2d 32 2e 36 34 2d 37 2e 32 33 2d 37 2e 31 38 2d 37 2e 39 37 7a 4d 39 39 2e 37 20 31 2e 36 38 68 38 2e 36 32 63 35 2e 32 34 20 30 20 37 2e 37 34 20 32 2e 35 35 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 182 33" fill="#FFF"><path d="M112.16 15.72c3.66-.83 6.02-3.47 6.02-7.51 0-4.91-3.2-8.2-9.82-8.2h-10.7v32.44h11.07c6.9 0 10.61-3.24 10.61-8.76 0-4.41-2.64-7.23-7.18-7.97zM99.7 1.68h8.62c5.24 0 7.74 2.55
2024-03-14 00:56:18 UTC	1369	IN	Data Raw: 20 31 34 2e 33 32 63 30 20 34 2e 33 31 2d 33 2e 30 36 20 37 2e 37 34 2d 37 2e 39 37 20 37 2e 37 34 2d 33 2e 34 33 20 30 2d 35 2e 37 39 2d 31 2e 39 39 2d 35 2e 37 39 2d 34 2e 39 36 20 30 2d 33 2e 31 35 20 32 2e 31 38 2d 35 2e 36 35 20 31 30 2e 38 39 2d 35 2e 39 33 6c 32 2e 38 37 2d 2e 30 39 76 33 2e 32 34 7a 6d 31 36 2e 30 38 2d 31 34 2e 33 32 63 2d 34 2e 31 32 20 30 2d 37 2e 31 38 20 32 2e 36 34 2d 38 2e 35 37 20 36 2e 33 56 39 2e 39 32 68 2d 31 2e 39 39 76 32 32 2e 35 32 68 31 2e 39 39 76 2d 31 31 2e 33 63 30 2d 35 2e 39 38 20 33 2e 33 34 2d 31 30 2e 31 20 38 2e 32 2d 31 30 2e 31 20 33 2e 38 20 30 20 35 2e 37 35 20 32 2e 32 37 20 35 2e 37 35 20 36 2e 37 32 76 31 34 2e 36 39 68 31 2e 39 39 56 31 37 2e 33 34 63 30 2d 34 2e 38 32 2d 32 2e 36 2d 37 2e 39 37 Data Ascii: 14.32c0 4.31-3.06 7.74-7.97 7.74-3.43 0-5.79-1.99-5.79-4.96 0-3.15 2.18-5.65 10.89-5.93l2.87-.09v3.24zm16.08-14.32c-4.12 0-7.18 2.64-8.57 6.3V9.92h-1.99v22.52h1.99v-11.3c0-5.98 3.34-10.1 8.2-10.1 3.8 0 5.75 2.27 5.75 6.72v14.69h1.99V17.34c0-4.82-2.6-7.97
2024-03-14 00:56:18 UTC	46	IN	Data Raw: 34 31 68 2d 33 2e 32 36 76 31 2e 36 35 68 31 33 2e 31 32 76 2d 31 2e 36 35 68 2d 33 2e 32 38 56 31 2e 36 36 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 41h-3.26v1.65h13.12v-1.65h-3.28V1.66z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	172.66.47.152	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:18 UTC	617	OUT	GET /mtb_files/mtb-equalhousinglender.svg HTTP/1.1 Host: mtb-repo.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mtb-repo.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:18 UTC	746	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:18 GMT Content-Type: image/svg+xml Content-Length: 230 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "9946b9197dfb441d1d4a1896a3389de5" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lElWt8nvclpE%2FiJrX%2FyaEipQKYKTrblFRDklhJdvupT%2BSpm2uJ2HvipX94gI8kUOrNJov2ZY6EK5z8WhPY3%2BdYAiI2EKFDkYIgW5T5cUuHRM2vEslUG%2FeA1MeVTsB89eXYCZByw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86404d9b39ae0f53-EWR alt-svc: h3=":443"; ma=86400
2024-03-14 00:56:18 UTC	230	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 31 2e 39 39 22 20 66 69 6c 6c 3d 22 23 37 36 37 36 37 36 22 3e 3c 70 61 74 68 20 64 3d 22 4d 38 2e 30 39 20 30 4c 30 20 34 2e 36 76 31 2e 36 37 68 31 2e 32 34 76 35 2e 37 32 68 31 33 2e 35 56 36 2e 32 37 48 31 36 56 34 2e 36 35 7a 6d 2d 35 2e 32 20 34 2e 37 39 6c 35 2e 32 2d 33 2e 30 36 20 35 2e 31 20 33 2e 30 36 76 35 2e 37 34 48 32 2e 38 38 7a 6d 32 2e 34 33 20 32 2e 31 38 68 35 2e 33 39 76 2d 31 2e 34 48 35 2e 33 32 7a 6d 30 20 32 2e 31 68 35 2e 33 39 76 2d 31 2e 34 48 35 2e 33 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 11.99" fill="#767676"><path d="M8.09 0L0 4.6v1.67h1.24v5.72h13.5V6.27H16V4.65zm-5.2 4.79l5.2-3.06 5.1 3.06v5.74H2.88zm2.43 2.18h5.39v-1.4H5.32zm0 2.1h5.39v-1.4H5.32z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49740	172.66.47.152	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:18 UTC	606	OUT	GET /mtb_files/mtb-entrust.svg HTTP/1.1 Host: mtb-repo.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mtb-repo.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:18 UTC	747	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:18 GMT Content-Type: image/svg+xml Content-Length: 1349 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "f1a590b83d6d6e7b6a368fdc72c679c3" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bakOGGJGls7t%2FjJYG8AWz8kvYFRY4F6wsyksP8M4N%2F%2FMQ%2BOfTkeRI7IpnMtK1O8hTENarNCdoONPmpTFwYTflzF0Fm%2BMc9lWYudOwpqcAjowwUFs6IK3GkqwdqjeJEYOzyQ3wBg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86404d9b4a582394-EWR alt-svc: h3=":443"; ma=86400
2024-03-14 00:56:18 UTC	622	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 33 34 2e 37 20 31 34 38 2e 35 22 20 66 69 6c 6c 3d 22 23 37 36 37 36 37 36 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 34 36 2e 32 68 38 34 76 2d 33 37 2e 37 48 34 33 2e 32 56 39 32 2e 31 68 33 37 56 35 34 2e 35 68 2d 33 37 56 34 30 2e 32 48 38 34 56 32 2e 35 48 30 6d 31 36 30 2e 39 20 32 39 2e 36 63 2d 31 33 2e 38 20 30 2d 32 34 2e 36 20 31 31 2e 34 2d 32 38 2e 36 20 32 33 2e 35 6c 2d 2e 34 2d 2e 35 20 31 2e 31 2d 32 30 2e 37 48 39 31 2e 35 76 31 31 31 2e 37 48 31 33 33 56 39 32 2e 34 63 30 2d 31 31 2e 34 2e 36 2d 31 39 20 38 2e 37 2d 31 39 20 37 20 30 20 37 2e 36 20 36 2e 38 20 37 2e 36 20 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 634.7 148.5" fill="#767676"><path d="M0 146.2h84v-37.7H43.2V92.1h37V54.5h-37V40.2H84V2.5H0m160.9 29.6c-13.8 0-24.6 11.4-28.6 23.5l-.4-.5 1.1-20.7H91.5v111.7H133V92.4c0-11.4.6-19 8.7-19 7 0 7.6 6.8 7.6 1
2024-03-14 00:56:18 UTC	727	IN	Data Raw: 39 2e 34 2d 31 37 2e 31 63 2d 34 2e 34 2d 31 2e 37 2d 31 32 2e 35 2d 34 2e 37 2d 31 32 2e 35 2d 31 30 2e 34 20 30 2d 33 2e 36 20 33 2e 31 2d 35 2e 35 20 36 2e 31 2d 35 2e 35 20 37 20 30 20 31 32 2e 35 20 35 2e 35 20 31 37 2e 34 20 39 2e 39 6c 31 34 2e 32 2d 33 30 2e 33 61 37 33 2e 36 20 37 33 2e 36 20 30 20 30 20 30 2d 33 34 2e 31 2d 39 2e 31 63 2d 32 36 20 30 2d 34 34 2e 39 20 31 34 2e 36 2d 34 34 2e 39 20 33 37 2e 37 20 30 20 31 39 20 31 32 2e 39 20 32 37 2e 35 20 32 39 2e 32 20 33 33 2e 32 20 37 2e 32 20 32 2e 35 20 31 30 2e 38 20 34 2e 38 20 31 30 2e 38 20 38 2e 39 20 30 20 34 2d 34 2e 35 20 35 2e 37 2d 38 20 35 2e 37 2d 37 2e 36 20 30 2d 31 35 2e 39 2d 36 2e 34 2d 32 30 2e 37 2d 31 31 2e 36 6c 2d 31 35 2e 32 20 33 30 2e 39 61 37 39 2e 32 20 37 39 2e Data Ascii: 9.4-17.1c-4.4-1.7-12.5-4.7-12.5-10.4 0-3.6 3.1-5.5 6.1-5.5 7 0 12.5 5.5 17.4 9.9l14.2-30.3a73.6 73.6 0 0 0-34.1-9.1c-26 0-44.9 14.6-44.9 37.7 0 19 12.9 27.5 29.2 33.2 7.2 2.5 10.8 4.8 10.8 8.9 0 4-4.5 5.7-8 5.7-7.6 0-15.9-6.4-20.7-11.6l-15.2 30.9a79.2 79.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49743	172.66.47.152	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:18 UTC	708	OUT	GET /mtb_files/saved_resource HTTP/1.1 Host: mtb-repo.pages.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://mtb-repo.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:18 UTC	753	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 124 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "87433967dd90d1b65c9971cbb084e322" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k0fw3p0acfs%2BxxuqeUtxjQ7ca1NcyJ41hfV7YOcJAeiFPNtNz4tWlIWFEAfp99L6sApf5FisDpb2E0vCgHQrftoOB%2BAojMZ8mX%2FhtqdNvITYDoaVoGrkKyzSyV05sbEXNbXKTxM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86404d9d9e4a4217-EWR alt-svc: h3=":443"; ma=86400
2024-03-14 00:56:18 UTC	124	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> </head> <body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49745	172.66.44.104	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:18 UTC	364	OUT	GET /mtb_files/mtb-logo.svg HTTP/1.1 Host: mtb-repo.pages.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:19 UTC	745	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:19 GMT Content-Type: image/svg+xml Content-Length: 2039 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "04577b6fb8fd0183a512904deaef98fd" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qVUh4wHsECDow7LyCPRisbU8augVoMCHro8z%2Fc9BF3%2Bm6FThUwNjRoNvIYS%2BtFOWgoYQziJCAUnxE4qgfJeOFGu1IkR4yuIUWzreCdMd9jnuTp6%2Fz6yALsMCKxPBhwq0WWTtfis%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86404d9eace180d9-EWR alt-svc: h3=":443"; ma=86400
2024-03-14 00:56:19 UTC	624	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 32 20 33 33 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 32 2e 31 36 20 31 35 2e 37 32 63 33 2e 36 36 2d 2e 38 33 20 36 2e 30 32 2d 33 2e 34 37 20 36 2e 30 32 2d 37 2e 35 31 20 30 2d 34 2e 39 31 2d 33 2e 32 2d 38 2e 32 2d 39 2e 38 32 2d 38 2e 32 68 2d 31 30 2e 37 76 33 32 2e 34 34 68 31 31 2e 30 37 63 36 2e 39 20 30 20 31 30 2e 36 31 2d 33 2e 32 34 20 31 30 2e 36 31 2d 38 2e 37 36 20 30 2d 34 2e 34 31 2d 32 2e 36 34 2d 37 2e 32 33 2d 37 2e 31 38 2d 37 2e 39 37 7a 4d 39 39 2e 37 20 31 2e 36 38 68 38 2e 36 32 63 35 2e 32 34 20 30 20 37 2e 37 34 20 32 2e 35 35 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 182 33" fill="#FFF"><path d="M112.16 15.72c3.66-.83 6.02-3.47 6.02-7.51 0-4.91-3.2-8.2-9.82-8.2h-10.7v32.44h11.07c6.9 0 10.61-3.24 10.61-8.76 0-4.41-2.64-7.23-7.18-7.97zM99.7 1.68h8.62c5.24 0 7.74 2.55
2024-03-14 00:56:19 UTC	1369	IN	Data Raw: 20 31 34 2e 33 32 63 30 20 34 2e 33 31 2d 33 2e 30 36 20 37 2e 37 34 2d 37 2e 39 37 20 37 2e 37 34 2d 33 2e 34 33 20 30 2d 35 2e 37 39 2d 31 2e 39 39 2d 35 2e 37 39 2d 34 2e 39 36 20 30 2d 33 2e 31 35 20 32 2e 31 38 2d 35 2e 36 35 20 31 30 2e 38 39 2d 35 2e 39 33 6c 32 2e 38 37 2d 2e 30 39 76 33 2e 32 34 7a 6d 31 36 2e 30 38 2d 31 34 2e 33 32 63 2d 34 2e 31 32 20 30 2d 37 2e 31 38 20 32 2e 36 34 2d 38 2e 35 37 20 36 2e 33 56 39 2e 39 32 68 2d 31 2e 39 39 76 32 32 2e 35 32 68 31 2e 39 39 76 2d 31 31 2e 33 63 30 2d 35 2e 39 38 20 33 2e 33 34 2d 31 30 2e 31 20 38 2e 32 2d 31 30 2e 31 20 33 2e 38 20 30 20 35 2e 37 35 20 32 2e 32 37 20 35 2e 37 35 20 36 2e 37 32 76 31 34 2e 36 39 68 31 2e 39 39 56 31 37 2e 33 34 63 30 2d 34 2e 38 32 2d 32 2e 36 2d 37 2e 39 37 Data Ascii: 14.32c0 4.31-3.06 7.74-7.97 7.74-3.43 0-5.79-1.99-5.79-4.96 0-3.15 2.18-5.65 10.89-5.93l2.87-.09v3.24zm16.08-14.32c-4.12 0-7.18 2.64-8.57 6.3V9.92h-1.99v22.52h1.99v-11.3c0-5.98 3.34-10.1 8.2-10.1 3.8 0 5.75 2.27 5.75 6.72v14.69h1.99V17.34c0-4.82-2.6-7.97
2024-03-14 00:56:19 UTC	46	IN	Data Raw: 34 31 68 2d 33 2e 32 36 76 31 2e 36 35 68 31 33 2e 31 32 76 2d 31 2e 36 35 68 2d 33 2e 32 38 56 31 2e 36 36 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: 41h-3.26v1.65h13.12v-1.65h-3.28V1.66z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	172.66.44.104	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:19 UTC	378	OUT	GET /mtb_files/mtb-equalhousinglender.svg HTTP/1.1 Host: mtb-repo.pages.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:19 UTC	744	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:19 GMT Content-Type: image/svg+xml Content-Length: 230 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "9946b9197dfb441d1d4a1896a3389de5" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n%2FvU4Y%2FaydzMkAkyW3aiRIzzCTRqKDuDTaLEdv5LEf9as2hZTt2ZYPfUGeZmBZGA%2BsFdmXpkLZ0W%2FMf9CzZaDVxAPceSFokTxrdH5w3NTLsygUOhXwAzUh1govJEKrcetc48ylw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86404da03d3b4399-EWR alt-svc: h3=":443"; ma=86400
2024-03-14 00:56:19 UTC	230	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 31 2e 39 39 22 20 66 69 6c 6c 3d 22 23 37 36 37 36 37 36 22 3e 3c 70 61 74 68 20 64 3d 22 4d 38 2e 30 39 20 30 4c 30 20 34 2e 36 76 31 2e 36 37 68 31 2e 32 34 76 35 2e 37 32 68 31 33 2e 35 56 36 2e 32 37 48 31 36 56 34 2e 36 35 7a 6d 2d 35 2e 32 20 34 2e 37 39 6c 35 2e 32 2d 33 2e 30 36 20 35 2e 31 20 33 2e 30 36 76 35 2e 37 34 48 32 2e 38 38 7a 6d 32 2e 34 33 20 32 2e 31 38 68 35 2e 33 39 76 2d 31 2e 34 48 35 2e 33 32 7a 6d 30 20 32 2e 31 68 35 2e 33 39 76 2d 31 2e 34 48 35 2e 33 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 11.99" fill="#767676"><path d="M8.09 0L0 4.6v1.67h1.24v5.72h13.5V6.27H16V4.65zm-5.2 4.79l5.2-3.06 5.1 3.06v5.74H2.88zm2.43 2.18h5.39v-1.4H5.32zm0 2.1h5.39v-1.4H5.32z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49746	172.66.44.104	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:19 UTC	367	OUT	GET /mtb_files/mtb-entrust.svg HTTP/1.1 Host: mtb-repo.pages.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:19 UTC	749	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:19 GMT Content-Type: image/svg+xml Content-Length: 1349 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "f1a590b83d6d6e7b6a368fdc72c679c3" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zW69VyU8GotlxE%2F4reicKygCevNrv7p%2BdpCOO4xasOMTE%2BCaiGNSp%2FbFGt5gq0nwPPU2mOiZL%2FPAPvOZAS7WGbmxMmqhIlFd7Iltn%2BBjaXFsv1gD7wL4a4M6V2s902GwE91rXso%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 86404da04b8443e8-EWR alt-svc: h3=":443"; ma=86400
2024-03-14 00:56:19 UTC	620	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 33 34 2e 37 20 31 34 38 2e 35 22 20 66 69 6c 6c 3d 22 23 37 36 37 36 37 36 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 34 36 2e 32 68 38 34 76 2d 33 37 2e 37 48 34 33 2e 32 56 39 32 2e 31 68 33 37 56 35 34 2e 35 68 2d 33 37 56 34 30 2e 32 48 38 34 56 32 2e 35 48 30 6d 31 36 30 2e 39 20 32 39 2e 36 63 2d 31 33 2e 38 20 30 2d 32 34 2e 36 20 31 31 2e 34 2d 32 38 2e 36 20 32 33 2e 35 6c 2d 2e 34 2d 2e 35 20 31 2e 31 2d 32 30 2e 37 48 39 31 2e 35 76 31 31 31 2e 37 48 31 33 33 56 39 32 2e 34 63 30 2d 31 31 2e 34 2e 36 2d 31 39 20 38 2e 37 2d 31 39 20 37 20 30 20 37 2e 36 20 36 2e 38 20 37 2e 36 20 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 634.7 148.5" fill="#767676"><path d="M0 146.2h84v-37.7H43.2V92.1h37V54.5h-37V40.2H84V2.5H0m160.9 29.6c-13.8 0-24.6 11.4-28.6 23.5l-.4-.5 1.1-20.7H91.5v111.7H133V92.4c0-11.4.6-19 8.7-19 7 0 7.6 6.8 7.6 1
2024-03-14 00:56:19 UTC	729	IN	Data Raw: 6d 39 39 2e 34 2d 31 37 2e 31 63 2d 34 2e 34 2d 31 2e 37 2d 31 32 2e 35 2d 34 2e 37 2d 31 32 2e 35 2d 31 30 2e 34 20 30 2d 33 2e 36 20 33 2e 31 2d 35 2e 35 20 36 2e 31 2d 35 2e 35 20 37 20 30 20 31 32 2e 35 20 35 2e 35 20 31 37 2e 34 20 39 2e 39 6c 31 34 2e 32 2d 33 30 2e 33 61 37 33 2e 36 20 37 33 2e 36 20 30 20 30 20 30 2d 33 34 2e 31 2d 39 2e 31 63 2d 32 36 20 30 2d 34 34 2e 39 20 31 34 2e 36 2d 34 34 2e 39 20 33 37 2e 37 20 30 20 31 39 20 31 32 2e 39 20 32 37 2e 35 20 32 39 2e 32 20 33 33 2e 32 20 37 2e 32 20 32 2e 35 20 31 30 2e 38 20 34 2e 38 20 31 30 2e 38 20 38 2e 39 20 30 20 34 2d 34 2e 35 20 35 2e 37 2d 38 20 35 2e 37 2d 37 2e 36 20 30 2d 31 35 2e 39 2d 36 2e 34 2d 32 30 2e 37 2d 31 31 2e 36 6c 2d 31 35 2e 32 20 33 30 2e 39 61 37 39 2e 32 20 37 Data Ascii: m99.4-17.1c-4.4-1.7-12.5-4.7-12.5-10.4 0-3.6 3.1-5.5 6.1-5.5 7 0 12.5 5.5 17.4 9.9l14.2-30.3a73.6 73.6 0 0 0-34.1-9.1c-26 0-44.9 14.6-44.9 37.7 0 19 12.9 27.5 29.2 33.2 7.2 2.5 10.8 4.8 10.8 8.9 0 4-4.5 5.7-8 5.7-7.6 0-15.9-6.4-20.7-11.6l-15.2 30.9a79.2 7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	108.139.29.70	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:19 UTC	610	OUT	GET /Documents/html/homepage/favicon.ico HTTP/1.1 Host: asset.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mtb-repo.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:19 UTC	791	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 15822 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 04 May 2022 18:18:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1 X-Frame-Options: SAMEORIGIN X-Vhost: publish Date: Thu, 14 Mar 2024 00:11:27 GMT Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" ETag: "3dce-5de33a8b9cac0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8ca36406fe3aa11c1641e5bc917c8a74.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: Ek_JdcAH-S5YV4UKiOUOFvgFrp9ioO8siC0BkzLR7ZHLlx4FBpns2A== Age: 2739 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:19 UTC	15593	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 02 00 00 00 f6 1f 19 22 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR,,"tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-03-14 00:56:19 UTC	229	IN	Data Raw: 24 21 02 81 40 12 22 10 48 42 04 02 81 24 44 20 90 84 08 04 02 49 88 40 20 09 11 08 04 92 10 81 40 12 22 10 08 24 21 02 81 24 44 20 10 48 42 04 02 49 88 40 20 90 84 08 04 92 10 81 40 20 09 11 08 24 21 02 81 40 12 22 10 48 42 04 02 49 88 40 20 90 84 08 04 92 10 81 40 20 09 11 08 24 21 02 81 40 12 22 10 48 42 04 02 81 24 44 20 90 84 08 04 02 49 88 40 20 09 11 08 04 92 10 81 40 12 22 10 08 24 21 02 81 24 44 20 10 48 42 04 02 49 88 40 20 90 84 08 04 92 10 81 40 20 09 11 08 24 21 02 81 40 12 22 10 48 42 04 02 81 24 44 20 90 84 08 04 02 49 88 40 20 09 11 08 04 92 10 81 40 12 22 10 08 24 21 02 81 24 44 20 10 01 e3 ff 05 18 00 8d 08 d9 ef 26 a3 d0 cf 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: $!@"HB$D I@ @"$!$D HBI@ @ $!@"HBI@ @ $!@"HB$D I@ @"$!$D HBI@ @ $!@"HB$D I@ @"$!$D &IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49750	23.199.50.2	443

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-14 00:56:20 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=44361 Date: Thu, 14 Mar 2024 00:56:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	23.199.50.2	443

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:21 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-14 00:56:21 UTC	659	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 974286BFDC254CDCB50C2B73CC4B4276 Ref B: MNZ221060605025 Ref C: 2023-03-13T15:26:50Z X-MSEdge-Ref: Ref A: 87B54C6474A14C81B6E546C3B6B2F842 Ref B: BLUEDGE1720 Ref C: 2023-03-13T15:26:50Z Cache-Control: public, max-age=66564 Date: Thu, 14 Mar 2024 00:56:21 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-14 00:56:21 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	108.139.29.70	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:21 UTC	372	OUT	GET /Documents/html/homepage/favicon.ico HTTP/1.1 Host: asset.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:21 UTC	791	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 15822 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 04 May 2022 18:18:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1 X-Frame-Options: SAMEORIGIN X-Vhost: publish Date: Thu, 14 Mar 2024 00:11:27 GMT Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" ETag: "3dce-5de33a8b9cac0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c4ce298584668e99f320a46c88c4a04a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: jR0kNhxUW_TjyvVtqhexruZyAYjrwg_6zCEX49oa3JMD5CoawaU5HA== Age: 2741 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:21 UTC	15593	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 02 00 00 00 f6 1f 19 22 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR,,"tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-03-14 00:56:21 UTC	229	IN	Data Raw: 24 21 02 81 40 12 22 10 48 42 04 02 81 24 44 20 90 84 08 04 02 49 88 40 20 09 11 08 04 92 10 81 40 12 22 10 08 24 21 02 81 24 44 20 10 48 42 04 02 49 88 40 20 90 84 08 04 92 10 81 40 20 09 11 08 24 21 02 81 40 12 22 10 48 42 04 02 49 88 40 20 90 84 08 04 92 10 81 40 20 09 11 08 24 21 02 81 40 12 22 10 48 42 04 02 81 24 44 20 90 84 08 04 02 49 88 40 20 09 11 08 04 92 10 81 40 12 22 10 08 24 21 02 81 24 44 20 10 48 42 04 02 49 88 40 20 90 84 08 04 92 10 81 40 20 09 11 08 24 21 02 81 40 12 22 10 48 42 04 02 81 24 44 20 90 84 08 04 02 49 88 40 20 09 11 08 04 92 10 81 40 12 22 10 08 24 21 02 81 24 44 20 10 01 e3 ff 05 18 00 8d 08 d9 ef 26 a3 d0 cf 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: $!@"HB$D I@ @"$!$D HBI@ @ $!@"HBI@ @ $!@"HB$D I@ @"$!$D HBI@ @ $!@"HB$D I@ @"$!$D &IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	18.164.116.52	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:30 UTC	643	OUT	GET /home-page HTTP/1.1 Host: www.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:30 UTC	562	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=iso-8859-1 Content-Length: 238 Connection: close Cache-Control: no-cache="set-cookie" Date: Wed, 13 Mar 2024 11:22:34 GMT Location: https://www3.mtb.com/home-page Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: SAMEORIGIN X-Cache: Hit from cloudfront Via: 1.1 6583236304db9b508d67c62740f04654.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 51ehYYjnmxsYxsoNjvZxJlIZ84LCau36hllDNBSAw7uYSP-FnoucTg== Age: 48836

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:30 UTC	644	OUT	GET /home-page HTTP/1.1 Host: www3.mtb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:31 UTC	803	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Content-Length: 153777 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:56:30 GMT ETag: "258b1-61392197f3c0c" Last-Modified: Wed, 13 Mar 2024 22:14:34 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 50670fc09f8465be7ae4adcf6e33ab7a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: Do-WdgtN9jUuT4kbkiIaGZUSakx5qAXxqVQzNhlUbothgWhCZ85_Sg== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:31 UTC	15581	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4d 26 61 6d 70 3b 54 20 42 61 6e 6b 20 2d 20 50 65 72 73 6f 6e 61 6c 20 26 61 6d 70 3b 20 42 75 73 69 6e 65 73 73 20 42 61 6e 6b 69 6e 67 2c 20 4d 6f 72 74 67 61 67 65 73 2c 20 26 61 6d 70 3b 20 4d 6f 72 65 20 7c 20 4d 26 61 6d 70 3b 54 20 42 61 6e 6b 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 69 74 68 20 61 20 63 6f 6d 6d 75 6e 69 74 79 20 62 61 6e 6b 20 61 70 70 72 6f 61 63 68 2c 20 4d 26 61 6d 70 3b 54 20 42 61 6e 6b 20 68 65 6c 70 73 20 70 65 Data Ascii: <!DOCTYPE HTML><html lang="en"><head><meta charset="UTF-8"/><title>M&T Bank - Personal & Business Banking, Mortgages, & More \| M&T Bank</title><meta name="description" content="With a community bank approach, M&T Bank helps pe
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 75 6d 20 53 65 72 76 69 63 65 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 72 6f 6c 65 3d 22 6c 69 73 74 69 74 65 6d 22 20 63 6c 61 73 73 3d 22 6e 61 76 69 67 61 74 69 6f 6e 2d 70 61 72 65 6e 74 22 20 64 61 74 61 2d 6d 6f 62 69 6c 65 2d 63 6c 61 73 73 3d 22 42 75 73 69 6e 65 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 20 70 61 72 65 6e 74 2d 74 69 Data Ascii: um Services</a> </li> </ul> </li> <li role="listitem" class="navigation-parent" data-mobile-class="Business"> <a class="navigation-link parent-ti
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 22 20 64 61 74 61 2d 6e 6f 61 6c 74 3d 22 74 72 75 65 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 0a 20 20 20 20 0a 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 0a 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 33 20 63 6f 6c 75 6d 6e 2d 70 61 72 73 79 73 20 2d 6c 67 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 70 61 64 64 69 6e 67 22 3e 0a 3c 2f 64 69 76 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 33 20 63 6f 6c 75 6d 6e 2d 70 61 72 73 79 73 20 2d 6c 67 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 70 61 64 64 69 6e 67 22 3e 0a 3c 2f 64 69 76 3e Data Ascii: " data-noalt="true"/> </div> </div></div></div><div class="col-3 column-parsys -lg-horizontal-padding"></div><div class="col-3 column-parsys -lg-horizontal-padding"></div>
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 2f 73 76 67 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 72 76 69 63 65 2d 69 63 6f 6e 2d 74 65 78 74 22 3e 0a 09 09 09 09 09 09 09 44 69 67 69 74 61 6c 20 42 61 6e 6b 69 6e 67 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 3c 2f 6c 69 3e 0a 09 09 09 0a 0a 09 09 09 0a 09 09 3c 2f 75 6c 3e 0a 09 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 75 6d 6e 73 20 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 20 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 32 22 3e 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 75 6d 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2d 6c 67 2d 74 6f Data Ascii: /svg><div class="service-icon-text">Digital Banking</div></a></li></ul></div></div></div></div></div><div class="columns aem-GridColumn aem-GridColumn--default--12"><div class="columns-container -lg-to
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 65 6e 74 22 3e 4d 26 61 6d 70 3b 54 20 44 69 67 69 74 61 6c 20 53 65 72 76 69 63 65 73 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e c2 a0 66 6f 72 20 61 64 64 69 74 69 6f 6e 61 6c 20 64 65 74 61 69 6c 73 2e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 68 69 64 64 65 6e 22 20 64 61 74 61 2d 64 69 73 63 6c 6f 73 75 72 65 2d 69 64 3d 22 64 32 32 39 5f 6f 72 69 67 69 6e 61 6c 22 3e 69 50 68 6f 6e 65 c2 ae 20 69 73 20 61 20 72 65 67 69 73 74 65 72 65 64 20 74 72 61 64 65 6d 61 72 6b 20 6f 66 20 41 70 70 6c 65 2c 20 49 6e 63 2e 20 72 65 67 69 73 74 65 72 65 64 20 69 6e 20 74 68 65 20 55 2e 53 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 75 6e 74 72 69 65 73 2e 20 41 6e 64 72 6f 69 64 e2 84 a2 20 69 73 20 61 20 74 72 61 64 65 6d 61 72 6b 20 6f 66 20 47 Data Ascii: ent">M&T Digital Services Agreement</a>for additional details.</div><div class="_hidden" data-disclosure-id="d229_original">iPhone is a registered trademark of Apple, Inc. registered in the U.S. and other countries. Android is a trademark of G
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 64 61 74 61 2d 73 70 65 65 64 62 75 6d 70 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 54 77 69 74 74 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 6d 61 6e 64 74 5f 62 61 6e 6b 22 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 73 6f 63 69 61 6c 2d 6c 69 6e 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </svg> </a> </li> <li> <a data-speedbump-enabled="true" aria-label="Twitter" href="https://twitter.com/mandt_bank" class="footer-social-link">
2024-03-14 00:56:31 UTC	14491	IN	Data Raw: 20 30 30 37 42 35 36 20 2d 2d 3e 0a 09 09 3c 67 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 70 68 6f 6e 65 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 3e 0a 09 09 09 3c 70 61 74 68 20 64 3d 22 4d 32 2e 36 20 30 63 2e 38 20 30 20 31 2e 33 2e 36 20 31 2e 33 2e 36 20 31 2e 31 20 31 2e 33 20 31 2e 35 20 32 2e 33 20 31 2e 35 20 32 2e 33 2e 36 20 31 2e 32 2e 32 20 32 20 2e 32 20 32 2d 2e 31 2e 34 2d 2e 36 20 31 2d 2e 36 20 31 6c 2d 2e 34 2e 36 63 2d 2e 32 2e 38 2e 31 20 31 2e 35 2e 31 20 31 2e 35 2e 34 20 31 20 31 2e 32 20 31 2e 39 20 31 2e 32 20 31 2e 39 2e 37 2e 38 20 32 2e 37 20 32 2e 38 20 32 2e 37 20 32 2e 38 73 32 20 32 20 32 2e 38 20 32 2e 37 63 30 20 30 20 2e 39 2e 38 20 31 2e 39 20 31 2e 32 20 30 20 30 20 2e 37 2e 33 20 31 2e 36 2e 31 20 30 20 30 20 2e 33 Data Ascii: 007B56 --><g class="icon-phone" stroke="none"><path d="M2.6 0c.8 0 1.3.6 1.3.6 1.1 1.3 1.5 2.3 1.5 2.3.6 1.2.2 2 .2 2-.1.4-.6 1-.6 1l-.4.6c-.2.8.1 1.5.1 1.5.4 1 1.2 1.9 1.2 1.9.7.8 2.7 2.8 2.7 2.8s2 2 2.8 2.7c0 0 .9.8 1.9 1.2 0 0 .7.3 1.6.1 0 0 .3
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 6c 6c 3d 22 6e 6f 6e 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 34 22 3e 0a 09 09 09 3c 70 61 74 68 20 73 74 72 6f 6b 65 3d 22 23 38 30 42 43 30 30 22 20 64 3d 22 4d 39 32 2e 31 36 20 38 33 2e 39 37 48 35 39 2e 34 6c 2d 33 32 2e 37 35 20 32 34 2e 35 37 56 38 33 2e 39 37 48 31 30 2e 32 37 63 2d 34 2e 35 32 20 30 2d 38 2e 32 2d 33 2e 36 36 2d 38 2e 32 2d 38 2e 32 76 2d 36 35 2e 35 63 30 2d 34 2e 35 32 20 33 2e 36 38 2d 38 2e 32 20 38 2e 32 2d 38 2e 32 68 38 31 2e 39 63 34 2e 35 20 30 20 38 2e 31 38 20 33 2e 36 38 20 38 2e 31 38 20 38 2e 32 76 36 35 2e 35 63 30 20 34 2e 35 34 2d 33 2e 36 37 20 38 2e 32 2d 38 2e 32 20 38 2e 32 7a 4d 31 31 32 2e 36 33 20 34 33 2e 30 33 68 34 2e 31 63 34 2e 35 32 20 30 20 38 2e 32 20 33 2e 36 36 20 38 2e 32 20 38 2e 32 Data Ascii: ll="none" stroke-width="4"><path stroke="#80BC00" d="M92.16 83.97H59.4l-32.75 24.57V83.97H10.27c-4.52 0-8.2-3.66-8.2-8.2v-65.5c0-4.52 3.68-8.2 8.2-8.2h81.9c4.5 0 8.18 3.68 8.18 8.2v65.5c0 4.54-3.67 8.2-8.2 8.2zM112.63 43.03h4.1c4.52 0 8.2 3.66 8.2 8.2
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 09 3c 67 20 69 64 3d 22 47 72 6f 75 70 2d 35 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 34 33 2e 34 39 34 35 35 39 2c 20 32 31 2e 32 35 39 34 36 32 29 22 3e 0a 09 09 09 09 09 09 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 2d 32 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 3e 0a 09 09 09 09 09 09 09 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 70 61 74 68 2d 31 22 3e 3c 2f 75 73 65 3e 0a 09 09 09 09 09 09 3c 2f 6d 61 73 6b 3e 0a 09 09 09 09 09 09 3c 67 20 69 64 3d 22 43 6c 69 70 2d 34 22 3e 3c 2f 67 3e 0a 09 09 09 09 09 09 3c 70 61 74 68 20 69 64 3d 22 46 69 6c 6c 2d 33 22 20 73 74 72 6f 6b 65 3d 22 23 37 43 43 30 30 30 22 20 66 69 6c 6c 3d 22 23 37 43 43 30 30 30 22 20 6d 61 73 6b 3d 22 75 72 6c 28 23 6d 61 73 6b 2d 32 29 22 Data Ascii: <g id="Group-5" transform="translate(43.494559, 21.259462)"><mask id="mask-2" fill="white"><use xlink:href="#path-1"></use></mask><g id="Clip-4"></g><path id="Fill-3" stroke="#7CC000" fill="#7CC000" mask="url(#mask-2)"
2024-03-14 00:56:31 UTC	9017	IN	Data Raw: 2e 35 20 32 37 2e 32 56 32 37 2e 32 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f 3e 0a 0a 09 09 09 3c 70 61 74 68 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 36 22 20 64 3d 22 4d 38 20 33 34 2e 37 56 33 34 2e 37 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f 3e 0a 09 09 09 3c 70 61 74 68 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 36 22 20 64 3d 22 4d 31 30 20 33 34 2e 37 56 33 34 2e 37 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f 3e 0a 09 09 09 3c 70 61 74 68 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 36 22 20 64 3d 22 4d 31 39 2e 35 20 33 34 2e 37 56 33 34 2e 37 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f 3e 0a 09 09 09 Data Ascii: .5 27.2V27.2" stroke-linecap="square"/><path stroke-width="6" d="M8 34.7V34.7" stroke-linecap="square"/><path stroke-width="6" d="M10 34.7V34.7" stroke-linecap="square"/><path stroke-width="6" d="M19.5 34.7V34.7" stroke-linecap="square"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49759	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:31 UTC	584	OUT	GET /etc.clientlibs/mtb-web/clientlibs/clientlib-base.css HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:31 UTC	816	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 434979 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 27 Mar 2023 20:18:46 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600, public Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:31 GMT ETag: "6a323-5f7e773365580" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 56e001f87fa53501872a21f09bb07046.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: E0Hhttshaf4D3fB_gMnhUFT4QAVJLIhgJ64tRFwVMlotCUTbZMHgZQ== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 2f 2a 0a 20 2a 20 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 41 64 6f 62 65 0a 20 2a 0a 20 2a 20 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 20 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 20 2a 0a 20 2a 20 20 20 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c Data Ascii: /* * Copyright 2017 Adobe * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/L
2024-03-14 00:56:31 UTC	1514	IN	Data Raw: 6d 70 6f 6e 65 6e 74 20 2e 61 72 74 69 63 6c 65 5f 74 69 6d 65 5f 69 6e 66 6f 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 20 7d 20 7d 0a 0a 2e 68 61 73 50 75 6c 6c 51 20 2b 20 2e 74 68 65 51 75 6f 74 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 32 70 78 20 73 6f 6c 69 64 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 2e 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 20 7d 0a 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 30 32 35 70 78 29 20 7b 0a 20 20 2e 68 61 73 50 75 6c 6c 51 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 77 Data Ascii: mponent .article_time_info { margin-top: 0; } }.hasPullQ + .theQuote { border-left: 2px solid; padding-left: 1.5%; line-height: 1.5; font-size: 1.5rem; }@media screen and (min-width: 1025px) { .hasPullQ { display: inline-block; w
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 33 36 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 35 70 78 3b 0a 20 20 20 20 73 74 72 6f 6b 65 3a 20 23 66 66 66 3b 20 7d 0a 0a 2e 6c 70 2d 68 65 61 64 65 72 2d 6d 69 73 63 2d 69 74 65 6d 2d 6c 69 6e 6b 2e 2d 63 74 61 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 31 70 78 20 32 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 20 7d 0a 20 20 2e 6c 70 2d 68 65 61 64 65 72 2d 6d 69 73 63 2d 69 74 65 6d 2d 6c 69 6e 6b 2e 2d Data Ascii: { width: 36px; height: 25px; stroke: #fff; }.lp-header-misc-item-link.-cta { border: 1px solid #fff; display: flex; padding: 11px 22px; font-size: 16px; text-decoration: none; white-space: nowrap; } .lp-header-misc-item-link.-
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 74 68 3a 20 32 32 70 78 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 0a 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 20 7d 0a 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 37 36 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 66 6f 6f 74 65 72 2d 45 48 4c 2d 63 6f 70 79 72 69 67 68 74 20 3e 20 2e 66 6f 6f 74 65 72 2d 69 63 6f 6e 2e 2d 65 71 75 61 6c 2d 68 6f 75 73 69 6e 67 20 7b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 20 7d 20 7d 0a 20 20 2e 66 6f 6f 74 65 72 2d 45 48 4c 2d 63 6f 70 79 72 69 67 68 74 20 3e 20 2e 66 6f 6f 74 65 72 2d 63 6f 70 79 72 69 67 68 74 2d Data Ascii: th: 22px; height: 17px; margin-bottom: 8px; margin-right: 8px; } @media (min-width: 576px) { .footer-EHL-copyright > .footer-icon.-equal-housing { margin-bottom: 0; } } .footer-EHL-copyright > .footer-copyright-
2024-03-14 00:56:31 UTC	13335	IN	Data Raw: 2e 69 63 6f 6e 2d 72 6f 77 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 38 64 38 64 38 3b 20 7d 0a 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 32 33 70 78 29 20 7b 0a 20 20 20 20 20 20 2e 70 72 6f 64 75 63 74 73 2d 73 65 72 76 69 63 65 73 2d 69 63 6f 6e 73 20 3e 20 2e 69 63 6f 6e 2d 72 6f 77 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 20 7d 20 7d 0a 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 37 35 70 78 29 20 7b 0a 20 20 20 20 20 20 2e 70 72 6f 64 75 63 74 73 2d 73 65 72 76 Data Ascii: .icon-row:first-child { border-bottom: 1px solid #d8d8d8; } @media (max-width: 1023px) { .products-services-icons > .icon-row { margin: auto; justify-content: center; } } @media (max-width: 575px) { .products-serv
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 70 61 6e 2d 79 3b 0a 20 20 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 70 61 6e 2d 79 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 7d 0a 0a 2e 73 6c 69 63 6b 2d 6c 69 73 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 Data Ascii: oz-user-select: none; -ms-user-select: none; user-select: none; -ms-touch-action: pan-y; touch-action: pan-y; -webkit-tap-highlight-color: transparent; }.slick-list { position: relative; overflow: hidden; display: block; margin: 0; p
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 3b 20 7d 0a 20 20 2e 6c 6f 67 69 6e 2d 66 6f 72 6d 2d 73 65 70 61 72 61 74 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 75 62 6d 69 74 2d 61 63 74 69 6f 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 42 61 6c 74 6f 2d 42 6f 6f 6b 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 37 38 35 36 3b 20 7d 0a 20 20 2e Data Ascii: ; } .login-form-separate-container .submit-action { font-size: 16px; padding: 15px; width: 100%; cursor: pointer; font-family: Balto-Book, sans-serif; font-weight: 400; font-style: normal; border: 1px solid #007856; } .
2024-03-14 00:56:31 UTC	2025	IN	Data Raw: 67 6f 2d 6c 69 6e 6b 20 3e 20 2e 6c 6f 67 69 6e 2d 6c 6f 67 6f 20 7b 0a 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 20 7d 0a 20 20 2e 6c 6f 67 69 6e 2d 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 6c 6f 67 69 6e 2d 73 63 72 6f 6c 6c 20 7b 0a 20 20 20 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 38 30 76 68 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 37 35 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 61 75 74 6f 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 33 30 70 78 3b 20 7d 0a 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 Data Ascii: go-link > .login-logo { display: none; } } .login-form-container > .login-scroll { max-height: 80vh; max-width: 475px; width: 100%; overflow-y: auto; overflow-x: hidden; padding-top: 30px; } @media (max-width: 767px
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 33 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 70 78 3b 20 7d 0a 20 20 2e 6c 6f 67 69 6e 2d 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 75 62 6d 69 74 2d 61 63 74 69 6f 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 42 61 6c 74 6f 2d 42 6f 6f 6b 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 Data Ascii: margin-top: -3px; padding: 0; height: 16px; width: 16px; } .login-form-container .submit-action { font-size: 16px; padding: 15px; width: 100%; cursor: pointer; font-family: Balto-Book, sans-serif; font-weight: 400;
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 20 7d 20 7d 0a 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 6c 61 6e 64 69 6e 67 2d 77 72 61 70 70 65 72 20 3e 20 2e 6c 6f 67 69 6e 2d 6c 61 6e 64 69 6e 67 20 3e 20 2e 6c 61 6e 64 69 6e 67 2d 74 65 78 74 2d 61 72 65 61 20 3e 20 2e 64 65 73 63 72 69 70 74 69 6f 6e 20 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 33 30 70 78 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 69 6e 2d 6c 61 6e 64 69 6e 67 2d 77 72 61 70 70 65 72 20 3e 20 2e 6c 6f 67 69 6e 2d 6c 61 6e 64 69 6e 67 20 3e 20 2e 6c 61 6e 64 69 6e 67 2d 74 65 78 74 2d 61 72 65 61 20 3e 20 2e 64 65 73 63 72 69 70 74 69 6f Data Ascii: 00; font-style: normal; } } .login-landing-wrapper > .login-landing > .landing-text-area > .description { width: 100%; max-width: 230px; } .login-landing-wrapper > .login-landing > .landing-text-area > .descriptio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49760	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:31 UTC	564	OUT	GET /etc.clientlibs/axp-common/clientlibs/vendor.js HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:31 UTC	830	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 242353 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 27 Mar 2023 20:18:44 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600, public Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:31 GMT ETag: "3b2b1-5f7e77317d100" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 b601959712c1f21193a489b5759f70ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: xBErnUTCRXdc2CEHlft8vJWFviy3UkG5m7JqHR4GWls2kC5rDEb4mw== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 76 61 72 20 55 74 69 6c 73 3b 0a 69 66 20 28 21 55 74 69 6c 73 29 20 7b 0a 09 55 74 69 6c 73 20 3d 20 7b 7d 3b 0a 7d 0a 0a 55 74 69 6c 73 2e 75 72 6c 4d 61 6e 69 70 75 6c 61 74 69 6f 6e 20 3d 20 7b 0a 09 09 0a 09 2f 2a 2a 0a 09 20 2a 20 73 65 70 61 72 61 74 65 20 74 68 65 20 75 72 6c 20 69 6e 74 6f 20 61 6e 20 6f 62 6a 65 63 74 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 75 72 69 20 61 6e 64 20 71 75 65 72 79 20 73 74 72 69 6e 67 20 70 61 72 61 6d 65 74 65 72 73 0a 09 20 2a 20 65 78 2e 20 28 6e 61 6f 2e 6d 74 62 2e 63 6f 6d 3f 7a 69 70 63 6f 64 65 3d 31 32 33 34 35 29 20 3d 3e 20 7b 75 72 69 3a 20 27 6e 61 6f 2e 6d 74 62 2e 63 6f 6d 27 2c 20 71 75 65 72 79 53 74 72 69 6e 67 3a 20 27 7a 69 70 63 6f 64 65 3d 31 32 33 34 35 27 7d 0a 09 20 2a 0a 09 20 2a 20 Data Ascii: var Utils;if (!Utils) {Utils = {};}Utils.urlManipulation = {/** * separate the url into an object that contains uri and query string parameters * ex. (nao.mtb.com?zipcode=12345) => {uri: 'nao.mtb.com', queryString: 'zipcode=12345'} * *
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 46 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 Data Ascii: egExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp(F),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new Re
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 74 28 7b 76 61 6c 75 65 3a 22 20 22 3d 3d 3d 65 5b 73 2d 32 5d 2e 74 79 70 65 3f 22 2a 22 3a 22 22 7d 29 29 2e 72 65 70 6c 61 63 65 28 24 2c 22 24 31 22 29 2c 74 2c 73 3c 6e 26 26 45 65 28 65 2e 73 6c 69 63 65 28 73 2c 6e 29 29 2c 6e 3c 72 26 26 45 65 28 65 3d 65 2e 73 6c 69 63 65 28 6e 29 29 2c 6e 3c 72 26 26 78 65 28 65 29 29 7d 63 2e 70 75 73 68 28 74 29 7d 72 65 74 75 72 6e 20 77 65 28 63 29 7d 72 65 74 75 72 6e 20 6d 65 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 66 69 6c 74 65 72 73 3d 62 2e 70 73 65 75 64 6f 73 2c 62 2e 73 65 74 46 69 6c 74 65 72 73 3d 6e 65 77 20 6d 65 2c 68 3d 73 65 2e 74 6f 6b 65 6e 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 78 5b 65 2b 22 20 22 5d 3b 69 66 28 6c Data Ascii: t({value:" "===e[s-2].type?"*":""})).replace($,"$1"),t,s<n&&Ee(e.slice(s,n)),n<r&&Ee(e=e.slice(n)),n<r&&xe(e))}c.push(t)}return we(c)}return me.prototype=b.filters=b.pseudos,b.setFilters=new me,h=se.tokenize=function(e,t){var n,r,i,o,a,s,u,l=x[e+" "];if(l
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 61 79 22 2c 6e 29 29 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 66 3b 63 2b 2b 29 6e 75 6c 6c 21 3d 6c 5b 63 5d 26 26 28 65 5b 63 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 6c 5b 63 5d 29 3b 72 65 74 75 72 6e 20 65 7d 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 73 68 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 65 28 74 68 69 73 2c 21 30 29 7d 2c 68 69 64 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 65 28 74 68 69 73 29 7d 2c 74 6f 67 67 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3f 74 68 69 73 2e 73 68 6f 77 28 29 3a 74 68 69 73 2e 68 69 64 65 28 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 65 28 74 68 69 73 29 3f Data Ascii: ay",n)));for(c=0;c<f;c++)null!=l[c]&&(e[c].style.display=l[c]);return e}S.fn.extend({show:function(){return le(this,!0)},hide:function(){return le(this)},toggle:function(e){return"boolean"==typeof e?e?this.show():this.hide():this.each(function(){ae(this)?
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 29 72 65 74 75 72 6e 20 65 7d 28 65 29 7c 7c 65 29 7d 76 61 72 20 56 65 3d 2f 5e 28 6e 6f 6e 65 7c 74 61 62 6c 65 28 3f 21 2d 63 5b 65 61 5d 29 2e 2b 29 2f 2c 47 65 3d 2f 5e 2d 2d 2f 2c 59 65 3d 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 76 69 73 69 62 69 6c 69 74 79 3a 22 68 69 64 64 65 6e 22 2c 64 69 73 70 6c 61 79 3a 22 62 6c 6f 63 6b 22 7d 2c 51 65 3d 7b 6c 65 74 74 65 72 53 70 61 63 69 6e 67 3a 22 30 22 2c 66 6f 6e 74 57 65 69 67 68 74 3a 22 34 30 30 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 65 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 72 3f 4d 61 74 68 2e 6d 61 78 28 30 2c 72 5b 32 5d 2d 28 6e 7c 7c 30 29 29 2b 28 72 5b 33 5d 7c 7c 22 70 78 22 29 3a 74 7d 66 75 6e 63 74 69 6f 6e Data Ascii: )return e}(e)\|\|e)}var Ve=/^(none\|table(?!-c[ea]).+)/,Ge=/^--/,Ye={position:"absolute",visibility:"hidden",display:"block"},Qe={letterSpacing:"0",fontWeight:"400"};function Je(e,t,n){var r=te.exec(t);return r?Math.max(0,r[2]-(n\|\|0))+(r[3]\|\|"px"):t}function
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 72 61 79 28 53 2e 76 61 6c 48 6f 6f 6b 73 2e 6f 70 74 69 6f 6e 2e 67 65 74 28 72 29 2c 6f 29 29 26 26 28 6e 3d 21 30 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3d 2d 31 29 2c 6f 7d 7d 7d 7d 29 2c 53 2e 65 61 63 68 28 5b 22 72 61 64 69 6f 22 2c 22 63 68 65 63 6b 62 6f 78 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 76 61 6c 48 6f 6f 6b 73 5b 74 68 69 73 5d 3d 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 65 2e 63 68 65 63 6b 65 64 3d 2d 31 3c 53 2e 69 6e 41 72 72 61 79 28 53 28 65 29 2e 76 61 6c 28 29 2c 74 29 7d 7d 2c 79 2e 63 68 65 63 6b 4f 6e 7c 7c 28 53 2e 76 61 6c 48 6f 6f 6b 73 5b 74 68 69 73 5d 2e 67 65 74 3d 66 75 Data Ascii: ray(S.valHooks.option.get(r),o))&&(n=!0);return n\|\|(e.selectedIndex=-1),o}}}}),S.each(["radio","checkbox"],function(){S.valHooks[this]={set:function(e,t){if(Array.isArray(t))return e.checked=-1<S.inArray(S(e).val(),t)}},y.checkOn\|\|(S.valHooks[this].get=fu
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 70 57 69 64 74 68 22 2c 21 30 29 2c 69 2e 6c 65 66 74 2b 3d 53 2e 63 73 73 28 65 2c 22 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 22 2c 21 30 29 29 7d 72 65 74 75 72 6e 7b 74 6f 70 3a 74 2e 74 6f 70 2d 69 2e 74 6f 70 2d 53 2e 63 73 73 28 72 2c 22 6d 61 72 67 69 6e 54 6f 70 22 2c 21 30 29 2c 6c 65 66 74 3a 74 2e 6c 65 66 74 2d 69 2e 6c 65 66 74 2d 53 2e 63 73 73 28 72 2c 22 6d 61 72 67 69 6e 4c 65 66 74 22 2c 21 30 29 7d 7d 7d 2c 6f 66 66 73 65 74 50 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 66 66 73 65 74 50 61 72 65 6e 74 3b 77 68 69 6c 65 28 65 26 26 22 73 74 61 74 69 63 22 3d 3d 3d 53 2e 63 73 73 28 65 2c 22 70 6f 73 69 74 69 Data Ascii: pWidth",!0),i.left+=S.css(e,"borderLeftWidth",!0))}return{top:t.top-i.top-S.css(r,"marginTop",!0),left:t.left-i.left-S.css(r,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var e=this.offsetParent;while(e&&"static"===S.css(e,"positi
2024-03-14 00:56:31 UTC	13232	IN	Data Raw: 76 61 6c 69 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 66 6f 63 75 73 49 6e 76 61 6c 69 64 29 74 72 79 7b 61 28 74 68 69 73 2e 66 69 6e 64 4c 61 73 74 41 63 74 69 76 65 28 29 7c 7c 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 65 72 72 6f 72 4c 69 73 74 5b 30 5d 2e 65 6c 65 6d 65 6e 74 7c 7c 5b 5d 29 2e 66 69 6c 74 65 72 28 22 3a 76 69 73 69 62 6c 65 22 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 69 6e 22 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 2c 66 69 6e 64 4c 61 73 74 41 63 74 69 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 6c 61 73 74 41 63 74 69 76 65 3b 72 65 74 75 72 6e 20 62 26 26 Data Ascii: valid:function(){if(this.settings.focusInvalid)try{a(this.findLastActive()\|\|this.errorList.length&&this.errorList[0].element\|\|[]).filter(":visible").trigger("focus").trigger("focusin")}catch(b){}},findLastActive:function(){var b=this.lastActive;return b&&
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 61 2e 6c 65 6e 67 74 68 3a 74 68 69 73 2e 67 65 74 4c 65 6e 67 74 68 28 61 2c 62 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 61 6c 28 62 29 7c 7c 64 3e 3d 63 5b 30 5d 26 26 64 3c 3d 63 5b 31 5d 7d 2c 6d 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 61 6c 28 62 29 7c 7c 61 3e 3d 63 7d 2c 6d 61 78 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 61 6c 28 62 29 7c 7c 61 3c 3d 63 7d 2c 72 61 6e 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 61 6c Data Ascii: function(a,b,c){var d=Array.isArray(a)?a.length:this.getLength(a,b);return this.optional(b)\|\|d>=c[0]&&d<=c[1]},min:function(a,b,c){return this.optional(b)\|\|a>=c},max:function(a,b,c){return this.optional(b)\|\|a<=c},range:function(a,b,c){return this.optional
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 28 29 3b 72 65 74 75 72 6e 20 61 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 21 28 61 2e 6c 65 6e 67 74 68 3e 31 30 7c 7c 61 2e 6c 65 6e 67 74 68 3c 39 7c 7c 21 64 2e 74 65 73 74 28 61 29 29 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 58 5d 2f 2c 22 30 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 59 5d 2f 2c 22 31 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5a 5d 2f 2c 22 32 22 29 2c 63 3d 39 3d 3d 3d 61 2e 6c 65 6e 67 74 68 3f 61 2e 73 75 62 73 74 72 28 30 2c 38 29 3a 61 2e 73 75 62 73 74 72 28 30 2c 39 29 2c 65 2e 63 68 61 72 41 74 28 70 61 72 73 65 49 6e 74 28 63 2c 31 30 29 25 32 33 29 3d 3d 3d 66 29 7d 2c 22 50 6c 65 61 73 65 20 73 70 65 63 69 66 79 20 61 20 76 61 6c 69 64 20 4e 49 45 20 6e 75 6d 62 65 72 Data Ascii: ();return a=a.toString().toUpperCase(),!(a.length>10\|\|a.length<9\|\|!d.test(a))&&(a=a.replace(/^[X]/,"0").replace(/^[Y]/,"1").replace(/^[Z]/,"2"),c=9===a.length?a.substr(0,8):a.substr(0,9),e.charAt(parseInt(c,10)%23)===f)},"Please specify a valid NIE number

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49763	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:31 UTC	607	OUT	GET /etc.clientlibs/axp-common/components/content/disclosure/v1/disclosure/clientlib-header.js HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:31 UTC	826	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 2379 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 21 Apr 2022 20:37:43 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600, public Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:31 GMT ETag: "94b-5dd3014f013c0" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 c4ce298584668e99f320a46c88c4a04a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 2jBHaO_kExhlX5w2XGUgMwPJi1eCxJGz0xfjzPIAMSRq84LxjkKHJg== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:31 UTC	2379	IN	Data Raw: 76 61 72 20 64 69 73 63 6c 6f 73 75 72 65 73 20 3d 20 7b 0a 09 66 69 6e 64 44 69 73 63 6c 6f 73 75 72 65 73 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 76 61 72 20 24 6e 75 6d 62 65 72 65 64 44 69 73 63 6c 6f 73 75 72 65 73 20 3d 20 24 28 20 22 2e 6e 75 6d 62 65 72 65 64 2d 64 69 73 63 6c 6f 73 75 72 65 73 22 20 29 3b 0a 09 09 76 61 72 20 24 75 6e 6e 75 6d 62 65 72 65 64 44 69 73 63 6c 6f 73 75 72 65 73 20 3d 20 24 28 20 22 2e 75 6e 6e 75 6d 62 65 72 65 64 2d 64 69 73 63 6c 6f 73 75 72 65 73 22 20 29 3b 0a 09 09 76 61 72 20 24 64 69 73 63 6c 6f 73 75 72 65 54 69 74 6c 65 20 3d 20 24 28 20 22 2e 64 69 73 63 6c 6f 73 75 72 65 2d 74 69 74 6c 65 22 20 29 3b 0a 09 09 76 61 72 20 24 64 69 73 63 6c 6f 73 75 72 65 73 20 3d 20 24 28 20 22 64 69 76 5b 64 61 Data Ascii: var disclosures = {findDisclosures: function() {var $numberedDisclosures = $( ".numbered-disclosures" );var $unnumberedDisclosures = $( ".unnumbered-disclosures" );var $disclosureTitle = $( ".disclosure-title" );var $disclosures = $( "div[da

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:31 UTC	650	OUT	GET /etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-book.woff HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www3.mtb.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:31 UTC	821	IN	HTTP/1.1 200 OK Content-Type: application/x-font-woff Content-Length: 67671 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 30 Jan 2020 22:52:25 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=86400, public Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:29:49 GMT ETag: "10857-59d634f851c40" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 06d42d2d80190e168b9494192458b51a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: u_yLOedkllgGgYE-1Q9CFOXSs5Od1aMkA5wpv65iAEleR0KnwMx38g== Age: 1602 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:31 UTC	15563	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 08 57 00 12 00 00 00 02 ba dc 00 01 00 00 00 01 06 e0 00 00 01 77 00 00 02 e6 00 00 00 00 00 00 00 00 47 50 4f 53 00 00 e3 58 00 00 1f 25 00 00 96 26 50 09 d2 5b 47 53 55 42 00 01 02 80 00 00 04 5f 00 00 08 32 1d c3 0d fa 4c 54 53 48 00 00 06 90 00 00 01 18 00 00 02 27 71 c2 bb bc 4f 53 2f 32 00 00 02 10 00 00 00 58 00 00 00 60 6a 14 81 0b 56 44 4d 58 00 00 07 a8 00 00 03 7b 00 00 0b ba f8 5c e2 8d 63 6d 61 70 00 00 30 98 00 00 03 fd 00 00 08 ca aa 5a b1 ea 63 76 74 20 00 00 36 ac 00 00 00 44 00 00 00 44 0d 97 02 d7 66 70 67 6d 00 00 34 98 00 00 01 02 00 00 01 73 06 59 9c 37 67 6c 79 66 00 00 3b 38 00 00 9c 66 00 01 81 b0 26 79 6b 82 68 64 6d 78 00 00 0b 24 00 00 25 71 00 00 5a 98 e5 1c 5d 0e 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFFWwGPOSX%&P[GSUB_2LTSH'qOS/2X`jVDMX{\cmap0Zcvt 6DDfpgm4sY7glyf;8f&ykhdmx$%qZ]head
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: c0 0b 5d 70 dd 29 a5 20 d4 69 57 86 a0 62 0c ca 4e 28 07 a0 dc 04 e5 18 14 f3 e8 d3 4a 50 b1 9f c3 b9 0d 28 41 7c b0 49 39 08 3f ee c4 c9 c6 e9 7a 1a 00 36 7a 4a 09 40 63 d2 e9 ca 0c f8 2e a0 c6 e4 c3 13 d2 79 63 6e 83 1f 34 bd 4f 12 80 63 14 54 02 f0 b7 aa ea a2 9a e2 60 81 19 a6 c4 17 9e 57 57 5b 54 53 07 13 e4 af 64 25 96 92 7a f8 0c e7 30 7f bd df 92 c3 70 ce 82 05 c5 b5 ec c9 f5 6d 3d ab 56 f5 f4 ac 8a ec d9 33 56 d8 9e ee 9e 9b f9 49 d7 a5 a9 f9 ae 8b 52 fc b6 11 57 c7 d2 85 07 26 26 0e bc bf fc f2 ad eb 8d eb b7 c2 c7 f6 3b 02 de ac b6 bc f2 70 a1 ab d0 93 12 48 c9 0e 7b 37 3e 36 98 b2 e7 c6 1b f7 00 ea 20 0e 1b 69 2e 9f 38 0d 3f 0c 34 73 46 98 a9 a4 29 c4 24 c4 60 68 76 99 92 ca db 7f 85 04 0e 10 a0 7c 34 8e 9e 06 ac 48 56 0c 34 d8 4a 88 63 2b e2 Data Ascii: ]p) iWbN(JP(A\|I9?z6zJ@c.ycn4OcT`WW[TSd%z0pm=V3VIRW&&;pH{7>6 i.8?4sF)$`hv\|4HV4Jc+
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 05 33 32 7e a0 56 5b 00 57 49 e0 a0 04 4e 4a e0 a6 44 f9 3f b2 50 90 f1 50 04 78 06 3f e6 de 04 54 27 48 b9 34 54 4a 19 ed d1 12 7f 48 4e 98 e7 fa b0 cf 4c e2 91 1a 93 c4 03 23 c3 d7 43 d9 01 65 3f 14 8b 3e a9 47 aa 96 b7 a3 19 ca 80 e2 8f 49 f2 81 97 06 49 f3 0b 25 c4 f3 7a 64 f0 bc 93 d1 74 1e 96 b8 74 1e d9 4c a6 f3 c8 cc 5b db 54 9c 3f af e5 83 55 9f 2c 28 2a c9 99 6b 6f b6 2f 6a ec ef eb f6 b4 97 d6 2d 62 bf 51 8d 73 0b b2 b3 5a 2a aa e6 f5 27 a9 c9 95 73 f2 f2 9c e5 4d cb 07 5f 6d 2d 28 6a e6 39 62 61 6e 6e 81 b9 11 f1 4e 71 e7 e9 b6 c7 e6 a4 48 64 e9 b1 f1 81 b4 a1 10 4e cc 26 8f 77 b2 6a f1 4e d6 8f 4a 16 bb 71 c9 92 8d 58 58 66 53 55 55 13 16 f6 fa ea 4b 2f 5d ad d2 c7 82 85 0b 17 d0 87 c2 cf 8e 33 d4 52 1e 01 97 d2 c6 be 89 5b 70 a1 58 ef 01 a1 Data Ascii: 32~V[WINJD?PPx?T'H4TJHNL#Ce?>GII%zdttL[T?U,(ko/j-bQsZ'sM_m-(j9bannNqHdN&wjNJqXXfSUUK/]3R[pX
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: fa 15 a3 1f ff cc 73 b4 f3 55 d4 48 68 ab e1 b8 8a b9 24 56 39 65 9a 58 65 1f 54 72 23 fb fe f5 e3 d6 b9 b6 1d 5b d4 05 cd 6d 77 b8 df 78 e0 b3 ac e8 63 70 ee 0c a8 8f 4c aa 0f c4 24 1f 9a 1a 93 9c 47 35 15 04 8a 9c 12 1c 8a bc 4c fa 85 17 51 e2 23 07 1d bf b6 7e a0 79 78 d1 c0 dc 61 6b 57 df 60 c7 b2 b6 aa 39 ee 4d 3d 5d 0d 4d bb 37 6d da d5 56 db d3 73 78 62 e2 f0 f3 95 5d fd d5 15 dd bd ec ba 19 ed 1d 45 15 2d 3d ee 3f 57 2e b4 da 86 cb 9a 37 6f 6c a8 98 1b 6b 1b a9 1a de b0 41 e3 9d 49 14 ed f4 61 4f 29 48 cc b1 5d 30 1e 29 b4 a9 f7 43 18 a7 5c 12 61 ec 8d 1b 8e 83 bf 72 f4 90 ed f4 b2 58 62 83 0f 86 58 37 7d 0c f1 73 4b 1a bb e7 cd 69 6c 1f 73 bf 98 3c a7 a4 7f 65 ea 86 ca 95 bb 0f 6e 58 77 d7 9d db 7a 76 a4 b3 33 3d 23 0b 3a 67 cf 99 fb 6a 73 f5 3d Data Ascii: sUHh$V9eXeTr#[mwxcpL$G5LQ#~yxakW`9M=]M7mVsxb]E-=?W.7olkAIaO)H]0)C\arXbX7}sKils<enXwzv3=#:gjs=
2024-03-14 00:56:31 UTC	2956	IN	Data Raw: 27 28 eb 6f e9 ef 90 52 f9 88 dd f4 0f 20 82 a7 f8 29 4a fc 47 d0 22 fa 19 e8 61 6a a7 7f c2 f9 3f 53 0c 2d fc af f4 ef a8 c9 fb f0 26 cb e9 3f 48 79 d7 df d0 6f 91 e6 ff e8 03 c8 e2 77 a0 25 f4 21 7d 82 f4 a7 e8 34 74 e1 0c 33 3d ca 16 5b f4 38 17 71 09 3d c1 a5 5c 86 2b e5 5c 41 4b b8 92 ab 68 29 57 73 2d 2d e3 21 3c 94 9e e4 28 d7 d1 72 ae e7 91 b4 82 1b 78 34 ad e4 31 3c 96 56 f1 38 1e 47 8b 78 3c 3c c5 12 9e c0 13 a8 98 2f e7 cb e9 31 9e 08 8f f6 04 37 72 23 11 fc da 24 e4 70 05 5f 49 3b e1 af a6 d2 1a 6e e2 26 5a 07 af 35 9d d6 f3 f5 7c 23 6d 80 5f 9a 41 4d 7c 13 df 44 53 79 26 fc e0 64 9e c5 b3 f0 ac f2 86 3b f8 16 be 15 e7 b7 f1 6d 78 6a 36 df 8e 7c ee e0 3b 69 17 cf e5 79 f4 1c df cd f7 d0 5e be 97 3f 4b cf f3 02 5e 48 2f f0 43 bc 88 f6 f3 62 7e Data Ascii: '(oR )JG"aj?S-&?Hyow%!}4t3=[8q=\+\AKh)Ws--!<(rx41<V8Gx<</17r#$p_I;n&Z5\|#m_AM\|DSy&d;mxj6\|;iy^?K^H/Cb~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:31 UTC	651	OUT	GET /etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-light.woff HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www3.mtb.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:31 UTC	821	IN	HTTP/1.1 200 OK Content-Type: application/x-font-woff Content-Length: 66170 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:29:49 GMT Last-Modified: Thu, 30 Jan 2020 22:52:25 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish ETag: "1027a-59d634f851c40" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c1685d59e35fdb859ab8a1f97feb5652.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: a3_ZueSkOJ40dbuW4jQol9arDCl2P-bg1qgMcNUuWrjYLZtzl9jAdg== Age: 1602 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:31 UTC	15563	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 02 7a 00 12 00 00 00 02 ab 58 00 01 00 00 00 01 01 04 00 00 01 76 00 00 02 e7 00 00 00 00 00 00 00 00 47 50 4f 53 00 00 d5 1c 00 00 27 88 00 00 b0 62 49 7e c9 7b 47 53 55 42 00 00 fc a4 00 00 04 5f 00 00 08 32 1d c3 0d fa 4c 54 53 48 00 00 06 9c 00 00 01 01 00 00 02 27 42 15 a1 f8 4f 53 2f 32 00 00 02 10 00 00 00 58 00 00 00 60 69 bc 7f 7c 56 44 4d 58 00 00 07 a0 00 00 03 74 00 00 0b ba f5 6a df 95 63 6d 61 70 00 00 2f 8c 00 00 03 fd 00 00 08 ca aa 5a b1 ea 63 76 74 20 00 00 35 a4 00 00 00 4a 00 00 00 4a 06 91 0a e3 66 70 67 6d 00 00 33 8c 00 00 01 02 00 00 01 73 06 59 9c 37 67 6c 79 66 00 00 3a 38 00 00 8f 2b 00 01 57 b4 3b 05 6d cf 68 64 6d 78 00 00 0b 14 00 00 24 78 00 00 5a 98 d1 37 ee af 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFFzXvGPOS'bI~{GSUB_2LTSH'BOS/2X`i\|VDMXtjcmap/Zcvt 5JJfpgm3sY7glyf:8+W;mhdmx$xZ7head
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 02 0e db 92 f0 92 25 61 b6 aa aa 82 65 ff a5 a2 aa 22 b6 95 fd 13 dc 38 39 a9 94 4e 5e 54 b3 0d fb d4 a0 d2 05 0d 66 e5 57 cf f1 f6 22 d8 9b 9f 51 9f 50 82 ca 2f a9 7d 83 c2 db 61 7a d5 12 ba bf 97 da 5f f9 9e 68 9f 6c 65 5f 54 cf c0 fd 27 36 62 fb 36 bc 1f 7a bc 10 fe 94 c3 bc a6 29 4e e5 e9 73 b8 c3 69 6f c3 98 69 86 ad 30 b3 16 98 e1 9c 09 42 1f 37 9f 35 8f 04 66 48 a0 59 02 5b 24 d0 21 81 d3 04 28 88 55 48 04 12 67 36 3e d5 b9 d8 90 8b 53 4d cb e2 80 ef 70 b2 00 ab 7f 11 9a 76 c3 d4 d1 f3 22 12 b8 8f 00 8e 5b 80 77 17 61 97 c2 de ac 0f 86 99 87 39 61 7f 3a f3 cc 61 e6 0c 38 58 d3 86 b1 b1 0d cf 9c 3f b8 77 ef c1 f3 d5 df 59 bd a0 77 75 ec 49 f6 bf 87 77 af 5a b9 fb 24 0c 9d e6 a1 6d b2 93 fd 0f ed af 12 e5 e7 e7 60 f4 9c c6 65 c1 5b 9c 87 2c 98 07 33 Data Ascii: %ae"89N^TfW"QP/}az_hle_T'6b6z)Nsioi0B75fHY[$!(UHg6>SMpv"[wa9a:a8X?wYwuIwZ$m`e[,3
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 1a ee 57 bf f4 3e f7 ab 5f ba b4 9f df af 2a 8d 6a 9a 72 91 72 d4 65 2a 1f 91 d9 de 91 9d cb 88 57 65 bb c0 cb 79 5a 2f 90 b6 45 24 a0 3e 27 2b aa 26 d5 71 37 2a 59 17 65 a5 b8 b8 b9 83 8b 6f 06 cd c6 c3 f5 61 a8 a7 37 6a 2e ac 44 d1 91 8a 70 2b 43 c3 0a 9f cf d7 f5 99 d2 d2 d2 4e f5 fc da e1 e1 b5 6b b1 76 75 62 9f 6f 12 a4 54 e3 6d 65 a5 6e 11 21 77 99 3e 27 d9 bf 84 4b 83 2f 91 ca f1 1a de 59 17 e3 03 b1 4d 48 d5 0f 37 4a 01 49 d6 ca 7b fb 7d a5 ab 3b fd a5 a5 ea 16 de df b5 6b 45 3e 42 e8 f3 7e ea 73 87 cc 05 28 67 77 ba 9a e2 29 27 d3 1c 9f 24 9a 1d 9a 98 84 e7 f7 c8 19 99 b6 66 79 7c e0 72 8c fa 7a e5 f8 8b da b8 68 40 7c 2c dc 1e 31 5b b9 93 bd a4 e6 88 33 66 57 3c 2e 4b 9e 31 5a 7e c3 e4 b2 ed da 39 fa f9 a4 b2 ed 12 41 a5 f2 4e d6 17 8c eb 7b 8d Data Ascii: W>_jrreWeyZ/E$>'+&q7*Yeoa7j.Dp+CNkvuboTmen!w>'K/YMH7JI{};kE>B~s(gw)'$fy\|rzh@\|,1[3fW<.K1Z~9AN{
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 17 34 46 6a 5e 2f 6b 8d 77 bf a2 6c d9 27 4c db cb b4 c6 8d 75 f5 e3 ca 19 8f 69 fb 4f 94 a6 b1 7a 34 6d f7 c3 31 cc c1 e9 47 f0 45 d8 b6 fb ed c9 03 e3 18 56 85 31 17 1d 4b e1 17 60 e9 10 76 9a fd 65 5c 04 b0 5f 91 96 c2 2f b0 9e 0b e5 89 cd 66 58 06 e9 c3 8a 65 28 47 3b 1e b0 59 3f e5 d5 19 06 b6 55 0f 00 61 08 6c a2 6e e7 a7 8c f6 f9 10 86 0f 07 72 a1 bc 6c 4d 44 88 ab 39 22 f1 8a 31 34 4e df d4 84 c6 e9 df 43 e3 f4 3b dc e9 4b 1a a7 13 f0 81 27 67 82 6d 3a 51 f8 e3 15 04 8e 41 e0 16 e8 cb ff 3b 37 f4 f2 00 18 4e 08 00 43 78 f6 62 33 30 d7 31 98 17 03 30 84 33 e7 a5 7c 69 18 ce 26 5c b0 33 0f 95 8e d0 f0 10 78 34 70 31 3c 58 28 7a ba c2 ed ce 2c 3b 65 bf 20 9c 61 1e 8a 41 81 28 06 6e e0 ae 95 1e e1 70 86 70 cf 99 72 f4 e2 e0 85 fe e3 c7 3f fb f3 ec 57 Data Ascii: 4Fj^/kwl'LuiOz4m1GEV1K`ve\_/fXe(G;Y?UalnrlMD9"14NC;K'gm:QA;7NCxb30103\|i&\3x4p1<X(z,;e aA(nppr?W
2024-03-14 00:56:31 UTC	1455	IN	Data Raw: 35 e3 04 52 3a 13 20 c1 85 ec 5d 66 65 45 a5 a0 66 85 80 44 3e c8 ac cc ca 48 6e 64 51 64 54 96 45 f6 b0 6e 46 d9 83 48 8b 88 ca c6 be 73 2e 70 0f 70 cf 37 67 9d bd d7 b7 f6 3e 6b ad bd f7 da 20 80 24 14 60 08 c6 82 bc 82 42 24 97 16 85 ca 31 07 96 f4 38 79 12 7e 7d 0c f5 7c 6a 25 61 2a 92 3d 0c 61 c2 46 02 12 31 05 d3 30 1d 81 25 45 55 d7 a1 38 2a 4b ca 97 97 61 59 54 5e 5f 59 b4 04 e5 51 59 5e 5d 56 89 da a8 ac d0 07 75 51 59 55 5d 5c 85 8d a3 b2 a2 0a 8d 51 19 72 d8 d6 a8 d4 8f 89 53 5d 99 2c 39 cd 6d 19 f2 c2 92 1f 3e 79 e2 97 2f 49 f2 66 aa cb 44 f9 53 5c 19 70 e5 74 57 a6 60 26 72 8c 5a 63 8b b1 cf 88 98 30 b3 cc 3c b3 d4 5c 67 86 cd 63 d6 2c 2b 2f 21 db 2a b4 8a ad 0a 2b 62 b7 f8 06 12 b2 35 33 70 1a 72 b1 08 2b b0 11 7b d0 8b 41 06 18 64 1e af e5 Data Ascii: 5R: ]feEfD>HndQdTEnFHs.pp7g>k $`B$18y~}\|j%a=aF10%EU8KaYT^_YQY^]VuQYU]\QrS],9m>y/IfDS\ptW`&rZc0<\gc,+/!*+b53pr+{Ad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49767	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:31 UTC	652	OUT	GET /etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-medium.woff HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www3.mtb.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:31 UTC	820	IN	HTTP/1.1 200 OK Content-Type: application/x-font-woff Content-Length: 64318 Connection: close Accept-Ranges: bytes Cache-Control: max-age=86400, public Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:29:49 GMT Last-Modified: Thu, 30 Jan 2020 22:52:25 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish ETag: "fb3e-59d634f851c40" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e42e8491a089e2183879e26e61dae708.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: GO23icaXGO79piWMTi65zHdBDe-5qzeGbWyomz0ns3wA37692TdajQ== Age: 1602 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:31 UTC	15564	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 fb 3e 00 13 00 00 00 02 92 d4 00 01 00 00 00 00 f9 c4 00 00 01 7a 00 00 02 e8 00 00 00 00 00 00 00 00 47 50 4f 53 00 00 cc 54 00 00 29 10 00 00 af a6 a9 17 60 ae 47 53 55 42 00 00 f5 64 00 00 04 5f 00 00 08 32 1d c3 0d fa 4c 54 53 48 00 00 06 b0 00 00 01 10 00 00 02 27 f0 da 10 6a 4f 53 2f 32 00 00 02 24 00 00 00 58 00 00 00 60 6a 68 83 66 56 44 4d 58 00 00 07 c0 00 00 03 78 00 00 0b ba f7 1c e1 61 63 6d 61 70 00 00 1d 8c 00 00 03 fd 00 00 08 ca aa 5a b1 ea 63 76 74 20 00 00 23 e4 00 00 00 5e 00 00 00 5e 08 80 0e eb 66 70 67 6d 00 00 21 8c 00 00 01 02 00 00 01 73 06 59 9c 37 67 61 73 70 00 00 cc 40 00 00 00 14 00 00 00 14 00 75 00 0c 67 6c 79 66 00 00 28 8c 00 00 97 f2 00 01 6c 34 91 9f fc 1a 68 64 6d 78 00 00 0b 38 00 00 12 Data Ascii: wOFF>zGPOST)`GSUBd_2LTSH'jOS/2$X`jhfVDMXxacmapZcvt #^^fpgm!sY7gasp@uglyf(l4hdmx8
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 57 dd d3 6b bb 17 ea 05 6b c3 9b 86 3e 3e 74 e0 d3 0f 1e 5e 77 38 43 7c ab 7b f6 cc ce 29 d3 7a ff 65 72 f3 a1 3b 43 f5 43 1b 96 df f9 e8 13 b6 47 2e 2d 5f 44 f3 8e d6 da 1f 09 69 af 5a c0 76 29 29 1d a2 a5 c0 46 f2 18 cd ae 83 95 1c 0e 96 28 27 34 94 49 c3 0c 4b 52 5e 68 3f 3a 7e 1c e5 29 51 2b 65 2a f8 5d 90 17 e5 ef 12 65 60 a9 2a 91 6c 79 52 0a b7 2a 29 dc 26 7f 3f 85 7f 5f 91 0c 3d 14 ab 37 a0 95 d5 69 65 71 0c 09 24 3d 4a 48 4a f4 f6 90 1c 99 83 64 4a 1c 95 47 ca 95 30 38 10 2c c5 f3 27 4f 46 a6 91 78 09 c3 69 d4 16 89 51 bd 0f 1d 5c 62 67 45 1f a1 5d 99 c8 93 20 85 11 18 a9 94 a5 05 33 7d 42 31 11 42 b3 1a 4c 84 a4 62 ba f2 af b1 92 ef 47 07 92 b9 cc 28 55 83 91 95 66 a4 8a 8c d2 46 f1 fd c8 27 c4 f6 48 58 1c fe e1 9a 87 1e 5a f3 43 9a b7 99 da 0b Data Ascii: Wkk>>t^w8C\|{)zer;CCG.-_DiZv))F('4IKR^h?:~)Q+e]e`lyR*)&?_=7ieq$=JHJdJG08,'OFxiQ\bgE] 3}B1BLbG(UfF'HXZC
2024-03-14 00:56:31 UTC	16384	IN	Data Raw: 7a 59 a5 d8 cb 41 f6 bd 4c eb 7a b9 4c 49 2f 67 82 e8 35 a1 7c 31 e2 6f f1 b8 d5 a2 2f 69 4d 70 5e 37 01 69 6c 33 94 0e dd 52 e9 d0 4d 29 71 6a a1 e1 7f 1f 3e c9 98 f4 99 44 82 57 4c b6 4c a1 aa f8 55 70 92 13 ac 22 9f 06 bc 59 1a e0 45 1a 57 91 37 27 3a 89 49 83 82 5e 49 2a b6 19 a3 6c 3c da 41 62 84 91 74 3a a5 e3 b6 d5 48 86 a2 52 89 e7 68 07 e8 0d a6 af c8 90 a9 1b f1 d0 c8 54 f9 51 9c ec ef bd 8c fd 70 2f 49 00 6f 94 4b de b9 ea 46 b9 70 a3 5c ae 29 9f ab 8a 0f 16 73 cd b8 2d 5c 7c 70 48 02 58 5c be 00 be 5e 00 e7 52 01 dc bc 80 52 a6 62 0c 7e 46 34 43 da 2e e8 38 2c 33 a4 e1 1e 92 59 fe 4a f1 09 4b 55 29 f9 52 ed 2c 96 27 96 6b ae 9c 57 37 10 80 0e d1 c5 1c a2 b0 09 de 1c a0 f8 42 23 cd 02 e5 77 09 c1 93 86 00 49 42 52 79 b8 44 25 60 40 43 70 88 1f Data Ascii: zYALzLI/g5\|1o/iMp^7il3RM)qj>DWLLUp"YEW7':I^I*l<Abt:HRhTQp/IoKFp\)s-\\|pHX\^RRb~F4C.8,3YJKU)R,'kW7B#wIBRyD%`@Cp
2024-03-14 00:56:31 UTC	15986	IN	Data Raw: 9f 60 be 90 7e be 1b f3 9f 62 de 49 f3 37 e2 f9 7f 50 ce 5f 86 9f ff 11 f3 f9 f4 f3 e3 f8 f9 9f 94 fc 51 cc 5f c2 fc bc e9 6f 91 87 49 a7 04 f5 6c f2 1d c7 7b 2e 9b fe 1e 99 4f 9a 24 a8 67 51 66 a5 65 2b f1 bc df 2b 65 b9 f4 bb bb b0 ec 3f 94 b2 4c 7a de 0d f8 dd 4f 94 b2 42 7a de 6e 2c fb 54 29 73 d2 b2 1b f1 bb 7f 08 fa ee 32 3c ef 8f 4a 59 3e 3d ef 38 9e f7 a7 a0 b2 a3 58 76 89 95 01 e1 bf e4 95 df 92 0f d3 5d d3 18 2c 54 a2 99 6f 3c aa 54 e0 ab 50 76 61 35 e7 c9 20 53 0a 4d 71 21 0f 60 02 9f 3f 8a 05 f4 f0 68 19 0d 9c a3 c1 73 6c 68 b9 06 b3 af 0a 6d 00 f5 b0 a1 43 71 7b b0 2e a7 6a 09 19 68 78 87 7c ea 8b 7e a7 c1 f7 82 7c b8 f3 a9 35 4f 75 12 2b 9b ef 37 48 3d f2 1e 79 1d fd ee b7 60 36 90 d9 3c 6a c7 f5 15 46 f5 e0 42 4c 2b d6 dc 3c 62 ed 7d a4 25 Data Ascii: `~bI7P_Q_oIl{.O$gQfe++e?LzOBzn,T)s2<JY>=8Xv],To<TPva5 SMq!`?hslhmCq{.jhx\|~\|5Ou+7H=y`6<jFBL+<b}%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49768	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:31 UTC	649	OUT	GET /etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-bold.otf HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www3.mtb.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:32 UTC	817	IN	HTTP/1.1 200 OK Content-Type: application/x-font-otf Content-Length: 140400 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 30 Jan 2020 22:52:25 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=86400, public Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:31 GMT ETag: "22470-59d634f851c40" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 cc4ee60e87dead01c9e2d4b985af043e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: -6bxKy2hADMcIey3itciS6TB5IQ7jsOipICsU-FekcjPXonupRHzOA== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:32 UTC	16384	IN	Data Raw: 4f 54 54 4f 00 0b 00 80 00 03 00 30 43 46 46 20 07 b9 27 32 00 00 db 80 00 00 8a 3d 47 50 4f 53 7d a9 d5 ea 00 01 65 c0 00 00 ad 88 47 53 55 42 30 81 42 82 00 02 13 48 00 00 08 a6 4f 53 2f 32 6c ee 87 aa 00 00 01 20 00 00 00 60 63 6d 61 70 d4 a5 0e e0 00 00 d5 d8 00 00 05 88 68 65 61 64 ff e5 d3 77 00 00 00 bc 00 00 00 36 68 68 65 61 07 f8 06 00 00 00 00 f4 00 00 00 24 68 6d 74 78 af 03 50 39 00 02 1b f0 00 00 08 7e 6d 61 78 70 02 23 50 00 00 00 01 18 00 00 00 06 6e 61 6d 65 79 11 11 13 00 00 01 80 00 00 d4 55 70 6f 73 74 ff 94 00 80 00 00 db 60 00 00 00 20 00 01 00 00 00 01 00 00 05 e9 3d 4a 5f 0f 3c f5 00 03 03 e8 00 00 00 00 ce 01 c7 e0 00 00 00 00 ce 01 c7 e0 ff d2 ff 20 04 f9 03 b7 00 00 00 03 00 02 00 00 00 00 00 00 00 01 00 00 03 2a ff 42 00 00 05 Data Ascii: OTTO0CFF '2=GPOS}eGSUB0BHOS/2l `cmapheadw6hhea$hmtxP9~maxp#PnameyUpost` =J_< *B
2024-03-14 00:56:32 UTC	16384	IN	Data Raw: 61 74 65 64 20 62 79 20 61 6e 79 20 6c 61 77 2c 20 73 74 61 74 75 74 65 2c 20 74 72 65 61 74 79 2c 20 6f 72 20 67 6f 76 65 72 6e 6d 65 6e 74 61 6c 20 72 65 67 75 6c 61 74 69 6f 6e 20 61 72 65 20 77 61 69 76 65 61 62 6c 65 2c 20 79 6f 75 20 61 67 72 65 65 20 74 68 61 74 20 79 6f 75 72 20 61 63 63 65 70 74 61 6e 63 65 20 6f 66 20 74 68 65 20 41 67 72 65 65 6d 65 6e 74 20 73 68 61 6c 6c 20 63 6f 6e 73 74 69 74 75 74 65 20 61 6e 20 65 66 66 65 63 74 69 76 65 20 61 6e 64 20 69 72 72 65 76 6f 63 61 62 6c 65 20 77 61 69 76 65 72 20 6f 66 20 61 6e 79 20 73 75 63 68 20 72 69 67 68 74 2e 20 54 68 69 73 20 41 67 72 65 65 6d 65 6e 74 20 6d 61 79 2c 20 61 74 20 54 79 70 65 20 53 75 70 70 6c 79 27 73 20 73 6f 6c 65 20 64 69 73 63 72 65 74 69 6f 6e 2c 20 62 65 20 65 6e Data Ascii: ated by any law, statute, treaty, or governmental regulation are waiveable, you agree that your acceptance of the Agreement shall constitute an effective and irrevocable waiver of any such right. This Agreement may, at Type Supply's sole discretion, be en
2024-03-14 00:56:32 UTC	12288	IN	Data Raw: 69 00 66 00 79 00 20 00 6f 00 72 00 20 00 72 00 65 00 6d 00 6f 00 76 00 65 00 20 00 74 00 68 00 65 00 20 00 46 00 6f 00 6e 00 74 00 20 00 53 00 6f 00 66 00 74 00 77 00 61 00 72 00 65 00 2e 00 0a 00 38 00 2e 00 20 00 59 00 6f 00 75 00 20 00 6d 00 61 00 79 00 20 00 6d 00 61 00 6b 00 65 00 20 00 6f 00 6e 00 65 00 20 00 28 00 31 00 29 00 20 00 62 00 61 00 63 00 6b 00 2d 00 75 00 70 00 20 00 63 00 6f 00 70 00 79 00 20 00 6f 00 66 00 20 00 46 00 6f 00 6e 00 74 00 20 00 53 00 6f 00 66 00 74 00 77 00 61 00 72 00 65 00 20 00 66 00 6f 00 72 00 20 00 61 00 72 00 63 00 68 00 69 00 76 00 61 00 6c 00 20 00 70 00 75 00 72 00 70 00 6f 00 73 00 65 00 73 00 20 00 6f 00 6e 00 6c 00 79 00 2c 00 20 00 61 00 6e 00 64 00 20 00 79 00 6f 00 75 00 20 00 61 00 67 00 72 00 65 00 65 Data Ascii: ify or remove the Font Software.8. You may make one (1) back-up copy of Font Software for archival purposes only, and you agree
2024-03-14 00:56:32 UTC	16384	IN	Data Raw: 57 00 41 00 52 00 52 00 41 00 4e 00 54 00 20 00 54 00 48 00 41 00 54 00 20 00 54 00 48 00 45 00 20 00 4f 00 50 00 45 00 52 00 41 00 54 00 49 00 4f 00 4e 00 20 00 4f 00 46 00 20 00 54 00 48 00 45 00 20 00 46 00 4f 00 4e 00 54 00 20 00 53 00 4f 00 46 00 54 00 57 00 41 00 52 00 45 00 20 00 57 00 49 00 4c 00 4c 00 20 00 42 00 45 00 20 00 55 00 4e 00 49 00 4e 00 54 00 45 00 52 00 52 00 55 00 50 00 54 00 45 00 44 00 20 00 4f 00 52 00 20 00 45 00 52 00 52 00 4f 00 52 00 2d 00 46 00 52 00 45 00 45 00 2c 00 20 00 4f 00 52 00 20 00 54 00 48 00 41 00 54 00 20 00 54 00 48 00 45 00 20 00 46 00 4f 00 4e 00 54 00 20 00 53 00 4f 00 46 00 54 00 57 00 41 00 52 00 45 00 20 00 49 00 53 00 20 00 57 00 49 00 54 00 48 00 4f 00 55 00 54 00 20 00 44 00 45 00 46 00 45 00 43 00 54 Data Ascii: WARRANT THAT THE OPERATION OF THE FONT SOFTWARE WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT THE FONT SOFTWARE IS WITHOUT DEFECT
2024-03-14 00:56:32 UTC	16384	IN	Data Raw: 0e 79 8b f7 1c f7 2f f7 1b f7 1e f7 1c 0b e7 8b f7 17 f7 43 f5 f7 31 f7 17 01 c4 f7 54 f7 80 f7 5c 03 f7 ea 8d 0a fb b4 5a 21 bc fb c6 06 f7 54 f7 17 15 f7 43 f7 1b f5 fb 1b f7 31 cd 07 f7 13 b6 4e fb 31 1f 89 07 fb 31 60 4e fb 13 1e 0e f7 bd 07 c6 a7 ae bd b6 9f 72 58 1e fb cf f7 44 f7 eb 07 0b b1 6d 05 8f 96 9c 8e 95 1b a7 97 81 7d 7b 7e 81 68 76 70 91 95 6e 1f 0b f7 b9 e9 3b f7 b2 25 06 66 77 6a 7e 62 7d 08 30 07 a8 90 ac 95 a1 95 08 fb 41 37 07 0e 58 7c f7 18 fb 09 f7 09 f8 1b 77 0b b0 07 ae 9a 98 b1 9a a0 8a 89 9a 1e f7 00 07 92 6f 6d 8d 6b 1b fb 19 52 50 fb 09 1f 74 44 fb 02 d2 fc 22 f7 44 f8 22 07 0e 6b 74 99 b3 7c 1f 29 6c 05 42 9d c4 5c e8 1b 0b db a0 4c 1d 0b 15 c8 5c b9 4c 4c 5c 5d 4e 4f ba 5d ca ca ba b9 c7 1e 49 16 71 78 76 72 71 78 a0 a5 a6 Data Ascii: y/C1T\Z!TC1N11`NrXDm}{~hvpn;%fwj~b}0A7X\|womkRPtD"D"kt\|)lB\L\LL\]NO]Iqxvrqx
2024-03-14 00:56:32 UTC	4019	IN	Data Raw: f7 44 f7 12 f7 0a 24 f7 44 13 5d f8 5a 16 13 6e 5d 9e 0a ce a3 b5 92 95 a4 1e 13 ae 79 8d 1d 98 0a fb bd 07 50 6f 68 59 60 77 a4 be 1e f7 cf fb 44 fb eb 07 3c 0a 13 5d 32 07 0e 67 1d d0 f7 20 12 9b f9 97 13 78 f7 f8 f8 c1 30 1d f7 89 fc c1 15 66 0a 13 b8 35 1d 0e 67 1d cf f7 22 12 9b f9 97 13 78 f8 70 16 66 0a 13 b8 35 1d fb 29 f8 09 43 0a 67 1d cf f7 22 12 9b f9 97 13 78 f8 2a f9 4e 31 0a 28 fd 4e 15 66 0a 13 b8 35 1d 0e 67 1d d6 f7 15 12 f7 92 a6 0a 13 7c f8 15 f8 c7 4b 0a ae fd 48 15 66 0a 13 bc 35 1d 0e 79 1d d0 f7 20 01 98 f8 a4 03 23 0a d5 f9 87 8a 0a 79 1d cf f7 22 01 98 f8 a4 03 23 0a 6d fa 14 43 0a 79 1d cd b9 0a 98 f8 a4 13 ec 23 0a f7 cd f9 e9 2e 1d 13 d4 32 0a 13 ec 47 1d 8f 1d bb f7 22 01 a1 f8 4d 03 f7 87 f9 4e 31 0a be fd 4e 15 49 0a 0e 8f Data Ascii: D$D]Zn]yPohY`wD<]2g x0f5g"xpf5)Cg"x*N1(Nf5g\|KHf5y #y"#mCy#.2G"MN1NI
2024-03-14 00:56:32 UTC	16384	IN	Data Raw: 0d f8 b5 77 01 f7 67 f7 4d 03 ca 16 f8 70 f7 0d fb 23 f8 b5 fb 26 06 4e 66 53 74 45 76 08 fb 15 07 bb 95 c8 9e b2 9e 08 fc 13 fb 28 07 0e 6b 8b f7 1e f8 3e 99 1d f7 f7 f7 53 03 f8 b4 16 f7 1e fb b7 07 d4 be 05 f7 43 f7 0e b8 cb f3 1a f7 08 35 e1 fb 35 fb 32 37 32 fb 25 75 1e f7 43 77 05 f4 98 a7 ab b6 1b b3 a0 6f 5b 4f 7a 64 fb 0d 21 1f fb 3b fb 26 05 fb 1d 07 0e c7 1d f7 fa c4 1d f7 39 f3 df f7 0b d3 61 c9 27 a4 1f 13 f0 e4 a5 b1 c3 ce 1a f1 37 de fb 40 fb 33 3b 34 fb 0e 7b 1e f7 3d 77 05 db 96 a7 ab b6 1b ba a1 6e 58 4f 71 71 50 1f 53 fb 09 06 13 e8 c8 06 d4 9e 71 4e 50 6c 6a 5b 5c 69 ac eb 81 1f fb 42 76 05 fb 2a 97 ea 40 f7 36 1b 0e a0 76 f7 23 f7 12 f7 7b f7 3a 8b 77 12 f7 cf f7 4d 13 d8 f7 cf 16 f7 4d f7 23 d0 f7 12 46 f8 21 fb 6e 06 fb 9c fc 2d 05 Data Ascii: wgMp#&NfStEv(k>SC55272%uCwo[Ozd!;&9a'7@3;4{=wnXOqqPSqNPlj[\iBv*@6v#{:wMM#F!n-
2024-03-14 00:56:32 UTC	16384	IN	Data Raw: f5 ff f7 ff f7 ff f8 ff f8 ff f1 ff f1 ff f7 ff ff ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-03-14 00:56:32 UTC	16384	IN	Data Raw: 00 00 00 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f4 ff ee 00 00 00 00 ff f0 ff ef ff d9 ff fd 00 00 ff f6 00 00 00 00 ff f9 ff fa 00 00 00 00 ff fc 00 00 ff f8 00 00 ff f3 ff f6 ff fa ff fa ff fb ff fb ff f8 ff f0 ff fa 00 00 00 00 00 00 00 00 00 00 00 00 00 07 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-03-14 00:56:32 UTC	9405	IN	Data Raw: 00 00 00 00 00 00 00 ff f2 00 00 00 00 00 00 ff fc 00 00 00 00 00 00 00 00 ff ec 00 00 00 00 00 00 ff f9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff d2 ff d1 ff f6 ff f7 ff e6 ff e6 ff c4 ff f0 ff ea ff de 00 00 ff ff 00 00 ff e6 ff f1 00 00 00 00 00 00 ff f7 ff e5 ff d4 00 00 00 00 00 00 ff f0 00 00 00 00 00 00 ff fb ff f7 00 00 00 00 00 00 00 00 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e1 ff e5 00 00 ff e3 00 00 ff d8 00 00 ff f9 ff f7 00 00 ff fc 00 00 ff e8 00 00 ff f9 00 04 00 00 ff d4 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49769	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:31 UTC	748	OUT	GET /content/experience-fragments/mtb-web/info-icon-exp-fragment/info-icon-experience-fragment-2/_jcr_content/root/columns/col_1/image.coreimg.png/1601342332140/green-logo.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:32 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 21842 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Tue, 29 Sep 2020 01:18:52 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Date: Thu, 14 Mar 2024 00:56:31 GMT Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" ETag: "5552-5b06990dcd700" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ef73a156d5c211fdbb7e4231f2a0edca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 7MI31A-voxTTSpVeHLatISjXBq87ZXcwt_knYTsZ77Qthe5rk8m9zA== Age: 3255 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:32 UTC	15587	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 00 c8 08 06 00 00 00 34 9f 9f b6 00 00 55 19 49 44 41 54 78 da ed 9d 07 58 54 47 d7 c7 af bd f7 ae 18 6b ec 5d 63 89 1a 7b c3 42 af d2 7b ef cb 02 bb 0b 4b 5b da d2 9b 4b 6f 22 ae 0a 22 8a a0 28 d1 a8 31 86 58 62 4c e2 67 de 98 c4 bc 89 69 6f aa d1 d8 ee 37 33 77 77 01 15 64 0b b0 c6 f3 7b 9e 79 40 81 bd 33 f7 ce 9d f9 cf 99 33 e7 50 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRX4UIDATxXTGk]c{B{K[Ko""(1XbLgio73wwd{y@33P
2024-03-14 00:56:32 UTC	6255	IN	Data Raw: fc 02 8b c9 95 b6 5c c4 4d c0 49 6b 55 fd 98 33 2e d6 2e 5e 90 e8 73 55 e6 93 a5 cc 76 21 09 ee b8 ab b9 f5 cd 57 8b f6 39 5e 14 d8 9e 5d 15 2c 58 af 8e c0 5a 99 1b b2 a4 67 98 e5 67 cd 7d b0 f4 e9 b5 39 e1 5b 9f fd 5d 87 4a d1 76 8a 6b fc b7 2c c5 96 f7 76 7a 72 bc fb 47 b5 5f 5c 1b d9 99 6d d0 2c 8e da 8a ea 75 4f d6 06 10 58 cf 5b dd d1 38 b7 bd 28 3a 51 7c 43 b9 8c 0d 55 37 1b 86 af c9 0a a9 64 c2 fb e8 31 8b 39 af 6d f4 ac 04 ef 73 70 aa 10 00 81 d5 02 76 15 22 2c 68 ee c9 b6 92 e4 2d 48 d4 2c c9 08 ac 14 d3 b4 6a 06 a7 00 1d 27 a5 04 56 5a eb 02 cb ad b2 60 25 c5 35 fa 5d 6e 81 15 c8 e4 ef 5b 9a 1e 54 2e 6a a8 6f 17 01 20 7a bf 66 d1 1b 02 c7 0f 49 8e b0 00 7d e5 63 65 49 fd e3 fc 75 1e 2f 4a 0b a8 6c 4b 8c 23 a5 05 16 f8 60 bd 12 02 6b 7d 41 f8 e6 Data Ascii: \MIkU3..^sUv!W9^],XZgg}9[]Jvk,vzrG_\m,uOX[8(:Q\|CU7d19mspv",h-H,j'VZ`%5]n[T.jo zfI}ceIu/JlK#`k}A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49764	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:32 UTC	545	OUT	GET /utag/mtbank/main/prod/utag.sync.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:35 UTC	608	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 80086 Connection: close Last-Modified: Wed, 14 Feb 2024 23:54:32 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: AtHxD4Av_fxmVoB8gyfbSTt7gmnhLpY8 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 14 Mar 2024 00:56:33 GMT ETag: "cbb333b2b751101cdb84522b53e3ea5c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 05b3bdb53d1146d1176c185d2da0d530.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: k5qb3eaFCcJbNJrq5BMzC4lFUHIt75u-As_88z3ut_4E8GLqj_66jQ== Cache-Control: max-age=300
2024-03-14 00:56:35 UTC	15776	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 73 79 6e 63 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 77 69 6e 64 6f 77 2e 74 61 72 67 65 74 50 61 67 65 50 61 72 61 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 43 6f 6f 6b 69 65 56 61 6c 75 65 28 6e 61 6d 65 29 7b 76 61 72 20 6e 61 6d 65 45 51 3d 6e 61 6d 65 2b 22 3d 22 3b 76 61 72 20 63 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 27 3b 27 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 63 61 2e 6c 65 6e 67 74 68 3b 69 2b Data Ascii: //tealium universal tag - utag.sync ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved.window.targetPageParams=function(){function readCookieValue(name){var nameEQ=name+"=";var ca=document.cookie.split(';');for(var i=0;i<ca.length;i+
2024-03-14 00:56:38 UTC	16384	IN	Data Raw: 51 28 6e 29 2c 72 3d 65 2e 70 72 6f 74 6f 63 6f 6c 2c 69 3d 65 2e 68 6f 73 74 2c 6f 3d 65 2e 70 61 74 68 2c 75 3d 22 22 3d 3d 3d 65 2e 70 6f 72 74 3f 22 22 3a 22 3a 22 2b 65 2e 70 6f 72 74 2c 63 3d 6b 28 65 2e 61 6e 63 68 6f 72 29 3f 22 22 3a 22 23 22 2b 65 2e 61 6e 63 68 6f 72 2c 61 3d 54 65 28 65 29 2c 66 3d 47 64 28 4f 65 28 61 2c 74 29 29 3b 72 65 74 75 72 6e 20 72 2b 22 3a 2f 2f 22 2b 69 2b 75 2b 6f 2b 28 6b 28 66 29 3f 22 22 3a 22 3f 22 2b 66 29 2b 63 7d 0a 66 75 6e 63 74 69 6f 6e 20 6b 65 28 6e 29 7b 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 6d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 61 28 74 5b 6e 2e 74 79 70 65 5d 29 26 26 28 74 5b 6e 2e 74 79 70 65 5d 3d 7b 7d 29 2c 74 5b 6e 2e 74 79 70 65 5d 5b 6e 2e 6e 61 6d 65 5d 3d 6e 2e 64 65 66 61 75 Data Ascii: Q(n),r=e.protocol,i=e.host,o=e.path,u=""===e.port?"":":"+e.port,c=k(e.anchor)?"":"#"+e.anchor,a=Te(e),f=Gd(Oe(a,t));return r+"://"+i+u+o+(k(f)?"":"?"+f)+c}function ke(n){var t={};return m(function(n){a(t[n.type])&&(t[n.type]={}),t[n.type][n.name]=n.defau
2024-03-14 00:56:44 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 28 29 7d 2c 7a 70 29 2c 4f 75 28 29 7d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 75 28 6e 2c 74 29 7b 7a 70 5b 6e 5d 3d 74 2c 74 28 29 2c 4f 75 28 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 6b 75 28 6e 29 7b 64 65 6c 65 74 65 20 7a 70 5b 6e 5d 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 75 28 6e 2c 74 29 7b 69 66 28 71 6e 28 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 43 75 28 6e 2c 74 29 3b 4e 75 28 6e 2c 74 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 44 75 28 6e 29 7b 69 66 28 71 6e 28 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 53 75 28 6e 29 3b 6b 75 28 6e 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 6a 75 28 6e 29 7b 73 75 28 64 28 70 61 2c 49 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 Data Ascii: unction(){m(function(n){return n()},zp),Ou()})}}function Nu(n,t){zp[n]=t,t(),Ou()}function ku(n){delete zp[n]}function Au(n,t){if(qn())return void Cu(n,t);Nu(n,t)}function Du(n){if(qn())return void Su(n);ku(n)}function ju(n){su(d(pa,I(function(n){ret
2024-03-14 00:56:48 UTC	16384	IN	Data Raw: 66 69 6e 65 64 22 3a 4b 63 28 6e 29 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 20 6e 3b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 6e 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 3b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 6e 29 3f 6e 3a 22 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 22 22 7d 7d 2c 46 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 74 3d 74 7c 7c 22 26 22 2c 65 3d 65 7c 7c 22 3d 22 2c 6e 75 6c 6c 3d 3d 3d 6e 26 26 28 6e 3d 76 6f 69 64 20 30 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 76 6f 69 64 20 30 3d 3d 3d 6e 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 4b 63 28 6e 29 29 3f 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 2e 6d Data Ascii: fined":Kc(n)){case"string":return n;case"boolean":return n?"true":"false";case"number":return isFinite(n)?n:"";default:return""}},Fd=function(n,t,e,r){return t=t\|\|"&",e=e\|\|"=",null===n&&(n=void 0),"object"===(void 0===n?"undefined":Kc(n))?Object.keys(n).m
2024-03-14 00:56:49 UTC	15158	IN	Data Raw: 20 78 28 74 68 69 73 2c 22 22 29 3b 4f 3d 78 28 74 68 69 73 29 2c 79 28 74 68 69 73 2c 6e 2c 74 2c 4f 29 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 67 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 4f 3d 4f 2e 72 65 70 6c 61 63 65 28 6c 28 6e 29 2c 22 20 22 29 7d 29 2c 78 28 74 68 69 73 2c 4f 2e 74 72 69 6d 28 29 29 7d 7d 29 7d 2c 74 6f 67 67 6c 65 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 54 28 74 68 69 73 29 3b 79 28 74 68 69 73 2c 6e 2c 65 2c 78 28 74 68 69 73 29 29 2e 73 70 6c 69 74 28 2f 5c 73 2b 2f 67 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 28 74 3d 3d 3d 43 3f 21 72 2e 68 61 73 43 6c Data Ascii: x(this,"");O=x(this),y(this,n,t,O).split(/\s+/g).forEach(function(n){O=O.replace(l(n)," ")}),x(this,O.trim())}})},toggleClass:function(n,t){return n?this.each(function(e){var r=T(this);y(this,n,e,x(this)).split(/\s+/g).forEach(function(n){(t===C?!r.hasCl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49772	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:32 UTC	761	OUT	GET /content/experience-fragments/mtb-web/homepage-body-experience-fragment/personal3/_jcr_content/root/columns/col_2/columns/col_1/image.coreimg.png/1708525986921/top-10-sba-logo-2022.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:32 UTC	791	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1663 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 21 Feb 2024 14:33:06 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:32 GMT ETag: "67f-611e5347c2c80" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f458ab1245bb4f257969c1da8e708f88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 9PvIhet3qDb79z3l6X1oiWoSEbYmHRHBcq7Q64eP2hCdg5iDcUoxUg== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:32 UTC	1663	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 4b 08 06 00 00 00 38 4e 7a ea 00 00 06 46 49 44 41 54 78 da ed 5a c1 75 db 30 0c f5 08 99 a0 e5 6b da 7b 47 d0 08 bd b4 cd d1 23 64 04 5f d2 1c 3d 42 47 d0 08 1a c1 23 70 04 8d a0 0a 14 40 81 20 48 51 4a d3 57 c9 e4 7b 7c 89 25 91 04 bf 3e c0 0f d8 a7 d3 7b b6 5f 3f 87 6c 7f 79 ba b8 e7 5e 9f cc e9 f5 e7 6f 71 df 9e 7e fd f8 26 e6 eb 94 79 3a 37 16 e6 d8 75 03 30 a8 d3 46 f9 b5 d7 a7 e6 74 f9 f6 30 5e ef 5d a7 6b 00 d2 0c cc 73 04 56 38 ef d5 8f df 3d 60 1c 38 d8 a8 6c c4 28 00 29 66 66 87 f7 4c f0 39 9a 03 00 66 4c 3d 2c 58 13 2b 6e ba 1b 3b 86 cd ec 4a 81 35 bb 7c 77 5c b0 80 31 4b 8c 70 cc 1a d9 77 f7 cc 2a d9 24 67 cc ec 96 8d ef c0 ba bb 88 59 5b c1 8a 7b 7b 7a f9 fe f5 74 98 96 8e Data Ascii: PNGIHDRKK8NzFIDATxZu0k{G#d_=BG#p@ HQJW{\|%>{_?ly^oq~&y:7u0Ft0^]ksV8=`8l()ffL9fL=,X+n;J5\|w\1Kpw*$gY[{{zt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49773	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:32 UTC	506	OUT	GET /content/experience-fragments/mtb-web/info-icon-exp-fragment/info-icon-experience-fragment-2/_jcr_content/root/columns/col_1/image.coreimg.png/1601342332140/green-logo.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:32 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 21842 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Tue, 29 Sep 2020 01:18:52 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Date: Thu, 14 Mar 2024 00:56:31 GMT Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" ETag: "5552-5b06990dcd700" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ef73a156d5c211fdbb7e4231f2a0edca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: FMmBABtyegbb3xLy3qvxwvwyN0j4UUfWKFr77hOFKaH6oMEDOGsfDA== Age: 3256 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:32 UTC	15587	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 58 00 00 00 c8 08 06 00 00 00 34 9f 9f b6 00 00 55 19 49 44 41 54 78 da ed 9d 07 58 54 47 d7 c7 af bd f7 ae 18 6b ec 5d 63 89 1a 7b c3 42 af d2 7b ef cb 02 bb 0b 4b 5b da d2 9b 4b 6f 22 ae 0a 22 8a a0 28 d1 a8 31 86 58 62 4c e2 67 de 98 c4 bc 89 69 6f aa d1 d8 ee 37 33 77 77 01 15 64 0b b0 c6 f3 7b 9e 79 40 81 bd 33 f7 ce 9d f9 cf 99 33 e7 50 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRX4UIDATxXTGk]c{B{K[Ko""(1XbLgio73wwd{y@33P
2024-03-14 00:56:32 UTC	6255	IN	Data Raw: fc 02 8b c9 95 b6 5c c4 4d c0 49 6b 55 fd 98 33 2e d6 2e 5e 90 e8 73 55 e6 93 a5 cc 76 21 09 ee b8 ab b9 f5 cd 57 8b f6 39 5e 14 d8 9e 5d 15 2c 58 af 8e c0 5a 99 1b b2 a4 67 98 e5 67 cd 7d b0 f4 e9 b5 39 e1 5b 9f fd 5d 87 4a d1 76 8a 6b fc b7 2c c5 96 f7 76 7a 72 bc fb 47 b5 5f 5c 1b d9 99 6d d0 2c 8e da 8a ea 75 4f d6 06 10 58 cf 5b dd d1 38 b7 bd 28 3a 51 7c 43 b9 8c 0d 55 37 1b 86 af c9 0a a9 64 c2 fb e8 31 8b 39 af 6d f4 ac 04 ef 73 70 aa 10 00 81 d5 02 76 15 22 2c 68 ee c9 b6 92 e4 2d 48 d4 2c c9 08 ac 14 d3 b4 6a 06 a7 00 1d 27 a5 04 56 5a eb 02 cb ad b2 60 25 c5 35 fa 5d 6e 81 15 c8 e4 ef 5b 9a 1e 54 2e 6a a8 6f 17 01 20 7a bf 66 d1 1b 02 c7 0f 49 8e b0 00 7d e5 63 65 49 fd e3 fc 75 1e 2f 4a 0b a8 6c 4b 8c 23 a5 05 16 f8 60 bd 12 02 6b 7d 41 f8 e6 Data Ascii: \MIkU3..^sUv!W9^],XZgg}9[]Jvk,vzrG_\m,uOX[8(:Q\|CU7d19mspv",h-H,j'VZ`%5]n[T.jo zfI}ceIu/JlK#`k}A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49765	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:32 UTC	780	OUT	GET /content/experience-fragments/mtb-web/homepage-body-experience-fragment/personal3/_jcr_content/root/columns/col_2/columns/col_2/image_copy_copy.coreimg.png/1708525802608/greenwich-bestbrand-logo-2022.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:32 UTC	794	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 87544 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 21 Feb 2024 14:30:02 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:32 GMT ETag: "155f8-611e529848e80" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f25b89e7ef738cb8bb7e28e041d8fe54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: wlJdM3tPdE9oMOgodge0N0zcrJIglnmVa0FYNzd3pPIYCJZWhjipPA== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:32 UTC	15590	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 03 a8 08 06 00 00 00 8e 7b 59 4e 00 00 80 00 49 44 41 54 78 da ec dd 67 94 14 65 a3 e8 fb b3 f7 3e eb 7e b9 1f ce c7 bb ee 59 eb ae a3 02 43 86 c9 33 0c 39 4a ce a0 64 50 50 10 73 16 05 44 cc 62 42 51 30 20 0a 48 12 24 89 09 49 82 02 4a 4e d3 33 dd 93 73 ce b1 bb 9f 5b 4f 6b b3 87 61 a6 bb ba aa 3a ff 7f 6b 3d 6b bf fb 7d 99 ee ea ea 9a ee aa ff 54 d5 f3 3f fe 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR{YNIDATxge>~YC39JdPPsDbBQ0 H$IJN3s[Oka:k=k}T?
2024-03-14 00:56:32 UTC	16384	IN	Data Raw: 64 64 bb d1 c5 f5 01 70 a1 ee f7 d6 d4 33 4e d4 fc fe b3 b0 a9 bd 2f 9f f2 fd d9 94 93 21 d2 27 8e d4 fd ba 2b 0e ec 24 00 1a 20 75 c0 20 dd ef 45 d1 87 6f 78 14 e3 e4 ef 41 c1 6b cb f4 87 e0 c5 33 09 80 f2 73 7e fe fd ba b7 83 70 fb fc b3 8c d3 ff 19 94 f3 f8 12 61 ad 28 53 bf dd d7 56 8b b2 ad 9f eb bf 04 7e f2 38 76 da 40 00 04 40 00 f4 29 bb 4d d4 9c 38 a2 eb e0 c9 1c 37 50 d4 9e 3b c9 37 17 40 00 0c d8 00 28 3f eb 72 9f 7e 48 5f 24 ea 1c 2b 1a 6e 9c 73 fb 54 05 af af d0 f5 3c 25 1b b4 5f fa 5b fb f7 51 c7 d9 2a 7a d7 b7 65 c4 20 51 77 e9 2f 75 67 21 da ed a2 21 cd 24 32 66 e8 bf 07 55 c6 94 7b 3c 0f 50 3a 9f 37 67 a9 72 f0 5b 56 ac 6d b3 52 d6 4f c5 f7 db 1d b3 5b 6a 9f 04 60 2c 01 50 a7 b2 ad 5f e9 fb dd ee 1d 27 ea 6f 5c d2 fc fc f2 77 c5 9c d4 57 Data Ascii: ddp3N/!'+$ u EoxAk3s~pa(SV~8v@@)M87P;7@(?r~H_$+nsT<%_[Q*ze Qw/ug!!$2fU{<P:7gr[VmRO[j`,P_'o\wW
2024-03-14 00:56:32 UTC	13082	IN	Data Raw: a9 5e aa c2 66 49 fa b9 97 0d 7d 3d 8d bd 56 9a 92 93 58 34 00 0f 51 51 5e e9 50 74 1c 3d 7a cc e7 c7 b8 3f 39 c5 af 05 a0 bd f5 35 a2 00 54 03 3d 16 2d 5e aa bf ef 5f 68 b8 f6 70 17 e8 34 d4 37 38 94 a0 eb 37 6c e4 c6 01 00 08 40 04 20 00 02 10 01 68 4c da 4b f2 24 fd ac d1 23 2e ff 2a 7e fa 5e 3a ab 2b 39 01 e0 14 6d f9 59 52 fc c6 df 9c 1b 10 f2 cf 4f a5 bb a3 8d 45 03 70 03 d5 82 3a 2f 24 cc a1 e8 e8 ea f4 7d b5 57 ea 81 83 76 8f 2f 36 6e 91 5f 08 40 bd 16 d2 d6 56 63 dd c3 76 ec d8 e9 b0 e5 b5 ba 3a 38 86 32 39 da 0b 53 7d 2f 6d 6b e5 77 0f 00 20 00 11 80 00 08 40 04 a0 41 a9 9c 31 65 e4 c4 df e9 a3 a4 f0 a9 a7 a4 2d 37 9d 85 87 61 d1 b0 63 a3 e4 4c 9c 38 e4 b5 96 77 df 83 d2 9a 79 8c 05 03 18 e6 97 f4 b8 85 8b 75 45 47 54 74 ac 56 11 66 04 8e 1d 3f Data Ascii: ^fI}=VX4QQ^Pt=z?95T=-^_hp4787l@ hLK$#.*~^:+9mYROEp:/$}Wv/6n_@Vcv:829S}/mkw @A1e-7acL8wyuEGTtVf?
2024-03-14 00:56:32 UTC	16384	IN	Data Raw: 89 d9 af 5c 63 be 1d 5b ca 13 26 4c 12 2e 1b 86 cb da bb db b5 a1 e3 07 0f a0 2f 60 58 03 6f df bc 45 4a ea 21 37 17 39 c2 2c 69 c8 c6 75 eb 70 2f 60 d8 45 ad e4 79 2f 6f d7 fe e3 b8 71 15 f6 da 9d c1 a6 d0 8e d7 c7 4a 01 3e 13 d0 67 0c fb 8a 23 fc 8c 81 9f 39 f4 93 32 fb 16 47 fb 15 f9 7c 09 f8 bb 6c 0e fe 7e f9 e5 23 f8 63 67 fe 5d 2f ca f6 2b c1 bf 9b 32 f0 4f bf 16 ff 08 ff 9e 49 e7 fe fd a9 5f df cb 6d fd 35 3f fb 4f 8a fe 8b 88 90 8d fe 63 e0 cf 1a 00 54 bb fd 17 00 10 00 10 12 4f 0a d2 80 25 05 b1 05 01 2d 45 03 5a 8b 08 34 86 81 72 40 d0 1c 0a 9a 83 41 39 38 c8 63 39 80 58 9e 6c 13 72 fe 5a 64 03 14 f4 6c e4 46 ff d2 2f 7e cc 6d 3e 21 29 35 fb 65 eb bb b1 e3 4a 79 d2 a4 c9 c2 65 c3 70 59 7b ff 80 ae e8 07 18 d6 c0 6b 56 ac a4 ff fe eb df b2 f3 90 Data Ascii: \c[&L./`XoEJ!79,iup/`Ey/oqJ>g#92G\|l~#cg]/+2OI_m5?OcTO%-EZ4r@A98c9XlrZdlF/~m>!)5eJyepY{kV
2024-03-14 00:56:32 UTC	16384	IN	Data Raw: 00 54 ed a4 5d eb f1 00 40 10 00 20 04 00 08 00 08 41 00 80 00 80 90 93 2d 52 33 53 29 b8 3e df f6 df a4 dd 2b d1 61 00 80 15 c2 e9 37 90 d5 13 02 00 04 00 54 ef bc 98 30 3c 04 10 04 00 08 01 00 02 00 42 10 00 20 00 20 e4 3c 4a dc be 86 ef 43 a7 aa 3b 15 a4 be 43 87 01 00 2a 72 78 97 2e 94 b8 6d 95 a6 8e 9b 37 87 62 bf 9d 4c 91 3d fb 51 68 d3 16 14 58 cd 5d f3 c5 7b 68 93 b6 b8 f9 10 00 a0 13 00 c0 37 33 c6 6a fe 0e 79 33 71 3a 45 0f 1b 43 11 5d 7b 50 88 57 63 fb 24 15 5a be 04 0f 01 04 01 00 42 00 80 00 80 10 04 00 e8 9a 00 f0 dd 91 4d f4 66 de 8f 70 39 73 88 77 00 df f6 5f b7 26 f4 a1 00 db 7f 01 00 15 2e de 27 4d b2 ff 07 7c 52 1c c5 2f 9a a1 1f cb cd 35 5d c0 e7 46 05 63 00 40 00 80 65 0c 00 33 ef ff 6c f7 36 e6 04 3f a7 a8 e1 c3 28 b8 be 9f a6 ef 10 Data Ascii: T]@ A-R3S)>+a7T0<B <JC;C*rx.m7bL=QhX]{h73jy3q:EC]{PWc$ZBMfp9sw_&.'M\|R/5]Fc@e3l6?(
2024-03-14 00:56:32 UTC	9720	IN	Data Raw: c5 df 97 be d5 fb 02 6e 87 d8 17 cc 15 d3 e5 f9 ba ec 93 f9 f2 b1 d2 31 e3 13 86 04 03 06 a7 86 b9 6a ce 75 66 80 21 9f 4a c9 92 65 49 09 00 d5 ea ba 5a 2b bd 1a 61 f5 df 48 0a 35 7a 6b 36 34 34 ea f2 f9 aa 37 a1 d6 f9 60 04 6a e1 97 64 07 80 ea bc d0 6a 83 52 83 f4 8a 2d 2b 2b 27 00 04 40 00 48 00 08 10 00 12 00 1a 57 ed fd d3 e3 1a 4e ea b1 9d 4b fb 36 07 07 bc 62 9f 5f 28 96 71 d7 26 25 fc 6b fc cd 73 32 d0 6c 9c 5e 8e 03 2d 75 d2 f4 c2 8b e1 b9 17 13 de bf 0b ae 92 fa c7 7f 26 be f6 16 4e 7e c0 a0 9a 9a 9a 93 be ca 6e a2 66 cf 8d 1c 7a 1d 39 72 34 a1 cf 35 9b 2d 11 3f 57 85 82 7e bf df 90 c7 6b c5 ca d5 11 b7 f9 f8 f1 13 ba 7c be d6 d0 d7 42 83 cc 07 69 b6 58 23 6e 9f 9e cf 71 7d 7d 7d 9a d7 c4 16 83 2c b2 b1 62 d5 6a 8d 80 72 3d 37 35 00 04 80 04 80 Data Ascii: n1juf!JeIZ+aH5zk6447`jdjR-++'@HWNK6b_(q&%ks2l^-u&N~nfz9r45-?W~k\|BiX#nq}}},bjr=75

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49775	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:32 UTC	640	OUT	GET /content/dam/mtb-web/images/icons/mtb-icon-mortgage-2c-cmyk.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:32 UTC	791	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1959 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 21 Jun 2021 19:11:47 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:32 GMT ETag: "7a7-5c54b71dbc2c0" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 8e923e72a50f75048382f193bf6c8c4e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: ATj5x1nyA0FsM7JGuQDIQoADmOgfukjE29FEUAlqIREYjcVrpDH-Sg== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:32 UTC	1959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 db 08 03 00 00 00 73 c2 7c 9c 00 00 00 5d 50 4c 54 45 ff ff ff 7f bd 42 7f bd 42 7f bd 42 7f bd 42 7f bd 42 7f bd 42 7f bd 42 08 69 39 08 69 39 08 69 39 08 69 39 7f bd 42 7f bd 42 08 69 39 08 69 39 08 69 39 08 69 39 08 69 39 08 69 39 7f bd 42 7f bd 42 7f bd 42 7f bd 42 7f bd 42 08 69 39 08 69 39 08 69 39 08 69 39 7f bd 42 08 69 39 fc dc a0 ff 00 00 00 1d 74 52 4e 53 00 66 ee cc 44 99 11 bb 77 dd aa 33 33 dd ee 22 11 99 44 bb 88 55 77 22 aa 66 88 cc 55 48 d9 cd 21 00 00 00 01 6f 72 4e 54 01 cf a2 77 9a 00 00 06 cf 49 44 41 54 78 da ed 9d 6b 43 ea 30 0c 86 01 45 11 64 ec 22 2a 93 f1 ff 7f e6 e1 00 9b 5b b3 4b 9b 26 6d 57 f3 7e 93 cb d6 c7 b5 79 b3 a6 1d 8b 85 37 2d 57 55 55 3d 3d fb 6b 80 Data Ascii: PNGIHDRs\|]PLTEBBBBBBBi9i9i9i9BBi9i9i9i9i9i9BBBBBi9i9i9i9Bi9tRNSfDw33"DUw"fUH!orNTwIDATxkC0Ed"*[K&mW~y7-WUU==k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49776	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:32 UTC	519	OUT	GET /content/experience-fragments/mtb-web/homepage-body-experience-fragment/personal3/_jcr_content/root/columns/col_2/columns/col_1/image.coreimg.png/1708525986921/top-10-sba-logo-2022.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:32 UTC	784	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1663 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 21 Feb 2024 14:33:06 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:32 GMT ETag: "67f-611e5347c2c80" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 baec235d174153a8f2e92ea724643824.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 3qcekm1iFqpEE_qOdsQ5YdBKgKubvCgznodE3Tj6oVYXsD-tFjgX-w== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:32 UTC	1663	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4b 00 00 00 4b 08 06 00 00 00 38 4e 7a ea 00 00 06 46 49 44 41 54 78 da ed 5a c1 75 db 30 0c f5 08 99 a0 e5 6b da 7b 47 d0 08 bd b4 cd d1 23 64 04 5f d2 1c 3d 42 47 d0 08 1a c1 23 70 04 8d a0 0a 14 40 81 20 48 51 4a d3 57 c9 e4 7b 7c 89 25 91 04 bf 3e c0 0f d8 a7 d3 7b b6 5f 3f 87 6c 7f 79 ba b8 e7 5e 9f cc e9 f5 e7 6f 71 df 9e 7e fd f8 26 e6 eb 94 79 3a 37 16 e6 d8 75 03 30 a8 d3 46 f9 b5 d7 a7 e6 74 f9 f6 30 5e ef 5d a7 6b 00 d2 0c cc 73 04 56 38 ef d5 8f df 3d 60 1c 38 d8 a8 6c c4 28 00 29 66 66 87 f7 4c f0 39 9a 03 00 66 4c 3d 2c 58 13 2b 6e ba 1b 3b 86 cd ec 4a 81 35 bb 7c 77 5c b0 80 31 4b 8c 70 cc 1a d9 77 f7 cc 2a d9 24 67 cc ec 96 8d ef c0 ba bb 88 59 5b c1 8a 7b 7b 7a f9 fe f5 74 98 96 8e Data Ascii: PNGIHDRKK8NzFIDATxZu0k{G#d_=BG#p@ HQJW{\|%>{_?ly^oq~&y:7u0Ft0^]ksV8=`8l()ffL9fL=,X+n;J5\|w\1Kpw*$gY[{{zt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49778	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:33 UTC	565	OUT	GET /content/dam/mtb-web/scripts/fe_utilities_axp.js HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:33 UTC	804	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2176 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 18 Jan 2024 15:47:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:33 GMT ETag: "880-60f3a462ae500" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 cc4ee60e87dead01c9e2d4b985af043e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: aQ2aUWKe8UfteeSHnEAXv4pE3NqhRWOJPsXagm-Ej94qIEi2G0lH3A== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:33 UTC	2176	IN	Data Raw: ef bb bf 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 50 61 67 65 41 6c 65 72 74 42 61 6e 6e 65 72 28 29 7b 0d 0a 09 69 66 28 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 61 6c 65 72 74 2d 62 61 6e 6e 65 72 22 29 5b 30 5d 20 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 7b 0d 0a 09 09 76 61 72 20 61 6c 65 72 74 42 61 6e 6e 65 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 0d 0a 09 09 61 6c 65 72 74 42 61 6e 6e 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 6c 65 72 74 2d 62 61 6e 6e 65 72 22 29 3b 0d 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 68 65 61 64 65 72 2c 20 2e 68 65 61 64 65 72 2d 77 72 61 70 70 65 Data Ascii: function createPageAlertBanner(){if( document.querySelectorAll(".alert-banner")[0] == undefined){var alertBanner = document.createElement("div");alertBanner.classList.add("alert-banner");document.querySelectorAll(".header, .header-wrappe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49781	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:33 UTC	538	OUT	GET /content/experience-fragments/mtb-web/homepage-body-experience-fragment/personal3/_jcr_content/root/columns/col_2/columns/col_2/image_copy_copy.coreimg.png/1708525802608/greenwich-bestbrand-logo-2022.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:33 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 87544 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 21 Feb 2024 14:30:02 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:32 GMT ETag: "155f8-611e529848e80" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6c9d752a06683b70c3a48f07f80d43b0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: GkLpSRyD8TgD81Yx0eMepaTv-JGkIQDLZndAFfkDlqmcJ4RCsZQL3A== Age: 1 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:33 UTC	15589	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 03 a8 08 06 00 00 00 8e 7b 59 4e 00 00 80 00 49 44 41 54 78 da ec dd 67 94 14 65 a3 e8 fb b3 f7 3e eb 7e b9 1f ce c7 bb ee 59 eb ae a3 02 43 86 c9 33 0c 39 4a ce a0 64 50 50 10 73 16 05 44 cc 62 42 51 30 20 0a 48 12 24 89 09 49 82 02 4a 4e d3 33 dd 93 73 ce b1 bb 9f 5b 4f 6b b3 87 61 a6 bb ba aa 3a ff 7f 6b 3d 6b bf fb 7d 99 ee ea ea 9a ee aa ff 54 d5 f3 3f fe 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR{YNIDATxge>~YC39JdPPsDbBQ0 H$IJN3s[Oka:k=k}T?
2024-03-14 00:56:33 UTC	16384	IN	Data Raw: 4b 64 64 bb d1 c5 f5 01 70 a1 ee f7 d6 d4 33 4e d4 fc fe b3 b0 a9 bd 2f 9f f2 fd d9 94 93 21 d2 27 8e d4 fd ba 2b 0e ec 24 00 1a 20 75 c0 20 dd ef 45 d1 87 6f 78 14 e3 e4 ef 41 c1 6b cb f4 87 e0 c5 33 09 80 f2 73 7e fe fd ba b7 83 70 fb fc b3 8c d3 ff 19 94 f3 f8 12 61 ad 28 53 bf dd d7 56 8b b2 ad 9f eb bf 04 7e f2 38 76 da 40 00 04 40 00 f4 29 bb 4d d4 9c 38 a2 eb e0 c9 1c 37 50 d4 9e 3b c9 37 17 40 00 0c d8 00 28 3f eb 72 9f 7e 48 5f 24 ea 1c 2b 1a 6e 9c 73 fb 54 05 af af d0 f5 3c 25 1b b4 5f fa 5b fb f7 51 c7 d9 2a 7a d7 b7 65 c4 20 51 77 e9 2f 75 67 21 da ed a2 21 cd 24 32 66 e8 bf 07 55 c6 94 7b 3c 0f 50 3a 9f 37 67 a9 72 f0 5b 56 ac 6d b3 52 d6 4f c5 f7 db 1d b3 5b 6a 9f 04 60 2c 01 50 a7 b2 ad 5f e9 fb dd ee 1d 27 ea 6f 5c d2 fc fc f2 77 c5 9c d4 Data Ascii: Kddp3N/!'+$ u EoxAk3s~pa(SV~8v@@)M87P;7@(?r~H_$+nsT<%_[Q*ze Qw/ug!!$2fU{<P:7gr[VmRO[j`,P_'o\w
2024-03-14 00:56:33 UTC	16384	IN	Data Raw: ab a9 5e aa c2 66 49 fa b9 97 0d 7d 3d 8d bd 56 9a 92 93 58 34 00 0f 51 51 5e e9 50 74 1c 3d 7a cc e7 c7 b8 3f 39 c5 af 05 a0 bd f5 35 a2 00 54 03 3d 16 2d 5e aa bf ef 5f 68 b8 f6 70 17 e8 34 d4 37 38 94 a0 eb 37 6c e4 c6 01 00 08 40 04 20 00 02 10 01 68 4c da 4b f2 24 fd ac d1 23 2e ff 2a 7e fa 5e 3a ab 2b 39 01 e0 14 6d f9 59 52 fc c6 df 9c 1b 10 f2 cf 4f a5 bb a3 8d 45 03 70 03 d5 82 3a 2f 24 cc a1 e8 e8 ea f4 7d b5 57 ea 81 83 76 8f 2f 36 6e 91 5f 08 40 bd 16 d2 d6 56 63 dd c3 76 ec d8 e9 b0 e5 b5 ba 3a 38 86 32 39 da 0b 53 7d 2f 6d 6b e5 77 0f 00 20 00 11 80 00 08 40 04 a0 41 a9 9c 31 65 e4 c4 df e9 a3 a4 f0 a9 a7 a4 2d 37 9d 85 87 61 d1 b0 63 a3 e4 4c 9c 38 e4 b5 96 77 df 83 d2 9a 79 8c 05 03 18 e6 97 f4 b8 85 8b 75 45 47 54 74 ac 56 11 66 04 8e 1d Data Ascii: ^fI}=VX4QQ^Pt=z?95T=-^_hp4787l@ hLK$#.*~^:+9mYROEp:/$}Wv/6n_@Vcv:829S}/mkw @A1e-7acL8wyuEGTtVf
2024-03-14 00:56:33 UTC	16384	IN	Data Raw: 0a cc 26 c6 a9 d3 66 94 f2 82 05 8b 84 cb 86 61 47 fa f6 a5 8b 74 ba 52 1d fa a9 53 37 f4 07 0c ab f4 e1 83 07 65 e7 1a 39 bb 37 6c 68 d7 b6 7c d1 a2 05 d5 a9 59 93 cb ec 40 76 9e 32 bd dc dc 6c 5e 17 03 06 86 7f cf 12 8c 34 f1 f1 e1 ee 93 c1 03 06 70 5f 1f 3b 47 aa 7f ef de dc 65 f3 d8 c7 dd 43 6a b3 3d ee 07 8b 42 1a d0 a7 8f a6 ed f5 76 77 17 6e ef a4 1f 7e b0 59 cf f8 6f bf fd 38 c6 0f 1c a4 3a 35 6a 08 b7 dd 53 3f fe 59 86 50 ae f9 e9 e6 4d 6a 50 b7 2e 57 b9 0c 4e aa e9 87 21 fa b1 67 ab 6c 16 a5 aa a6 ec fd 7b f6 70 b5 7d f4 f0 e1 56 cb e9 d6 a9 13 57 39 83 f4 e3 4c f8 fb f6 da 75 9a 35 75 2a 7d f6 9f ff 68 36 5e d9 71 03 0c 86 aa 69 cf bc d9 b3 b9 eb 31 bc 1f ba 74 e8 28 dc 66 16 31 f8 93 ca 31 55 21 7c 53 de bf 16 47 ee 59 b2 39 e0 33 07 7d 45 11 Data Ascii: &faGtRS7e97lh\|Y@v2l^4p_;GeCj=Bvwn~Yo8:5jS?YPMjP.WN!gl{p}VW9Lu5u*}h6^qi1t(f11U!\|SGY93}E
2024-03-14 00:56:33 UTC	16384	IN	Data Raw: 02 80 19 f7 2e da e5 1d 52 90 9c 40 69 57 8e 51 cc e4 61 da 27 96 71 f7 11 de 9d e0 6a 00 30 ff ed 5b e1 f7 0e cb 46 fe fe ef 47 ea 00 d3 cb 47 c2 3f 02 a4 5d 3b 05 00 28 b7 db 66 bf 78 74 64 d4 f0 41 9a 47 aa 47 7d db b7 e8 fd 20 37 1e 5e 3d a1 b8 a5 13 29 a8 8e 17 00 20 04 00 08 41 10 00 a0 33 2a f3 ee 55 a1 33 a3 42 7c 02 28 2f 26 04 b3 16 04 39 11 00 0c aa ee 21 2d ca 34 75 6d fb 7e d0 27 ac 5a 20 fe a3 c6 f6 4d e2 59 18 3b b6 a6 9c d0 7f 8a 80 85 a2 9b 56 48 39 c1 af 48 d7 a6 b5 70 1b b2 5f fc a6 a8 ea fc c4 58 a1 e8 8b b8 c5 d3 c4 c0 95 fe da 53 ce 8a 25 1f 09 ae ef 2b 45 33 c9 29 fd ea 39 4a 3d 7b 90 cb 29 47 76 8b 9d 1f c7 59 8f 9c d3 2e 9d 14 3e c7 d1 59 00 60 50 6d 4f cd df 21 81 d5 ec 7b 3e e5 fb 57 cf 85 fb cd d5 00 60 ec cc 6f c5 ce e0 1c 3e Data Ascii: .R@iWQa'qj0[FGG?];(fxtdAGG} 7^=) A3*U3B\|(/&9!-4um~'Z MY;VH9Hp_XS%+E3)9J={)GvY.>Y`PmO!{>W`o>
2024-03-14 00:56:33 UTC	6419	IN	Data Raw: 25 f8 33 fd 78 ac b4 7f fe 7e 78 45 62 e4 86 81 06 ab d4 ff fc 89 98 57 8b ae 9d 7e 4f f8 ff 03 20 35 54 6f af 19 33 0b 34 03 9f a3 47 2b 53 be 4d 2a 60 d2 ea 81 46 00 98 dc 76 5f b6 7c a5 e6 b6 cf 9b bf 40 9c 4e 57 d6 5f 13 0e 87 43 e6 46 59 f9 78 fd 86 4d dc 38 00 10 00 12 00 02 04 80 04 80 c6 d3 f0 d8 93 49 5b b4 23 e6 e0 ef 07 a3 a5 fe c9 c7 39 18 39 ac b7 6c a5 58 27 de 18 db 39 73 d1 28 71 ec de 1a 7a 1b 65 62 75 20 99 9c 4e a7 7c a5 d1 f3 ef 9b a0 63 63 da 82 a8 4c 0e 00 d5 36 66 5a 00 18 0c 06 65 df be fd 51 87 bc f6 f5 f5 65 fd 35 e1 f3 f9 65 f9 8a 55 9a ed b0 a8 64 09 37 0e 00 04 80 04 80 00 01 20 01 a0 f1 f8 7b ed 69 0f ff ac 93 af 17 8f e5 04 07 03 61 1d 5f bd 1b 0e f8 62 39 77 1a 5f 78 5a 82 7e 1f 8d 06 24 e3 f7 c1 ef 8f 3a d4 b3 70 ce bc 94 Data Ascii: %3x~xEbW~O 5To34G+SM*`Fv_\|@NW_CFYxM8I[#99lX'9s(qzebu N\|ccL6fZeQe5eUd7 {ia_b9w_xZ~$:p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49779	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:33 UTC	398	OUT	GET /content/dam/mtb-web/images/icons/mtb-icon-mortgage-2c-cmyk.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:33 UTC	792	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1959 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 21 Jun 2021 19:11:47 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:32 GMT ETag: "7a7-5c54b71dbc2c0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fdc88b576635a6d1858343ad162c44fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: ucOYdm1Q5lsoaxsjSjwjYGg8Zcey-jNQ4nSqK_B103S7reu0_vJ4qQ== Age: 1 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:33 UTC	1959	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 fa 00 00 00 db 08 03 00 00 00 73 c2 7c 9c 00 00 00 5d 50 4c 54 45 ff ff ff 7f bd 42 7f bd 42 7f bd 42 7f bd 42 7f bd 42 7f bd 42 7f bd 42 08 69 39 08 69 39 08 69 39 08 69 39 7f bd 42 7f bd 42 08 69 39 08 69 39 08 69 39 08 69 39 08 69 39 08 69 39 7f bd 42 7f bd 42 7f bd 42 7f bd 42 7f bd 42 08 69 39 08 69 39 08 69 39 08 69 39 7f bd 42 08 69 39 fc dc a0 ff 00 00 00 1d 74 52 4e 53 00 66 ee cc 44 99 11 bb 77 dd aa 33 33 dd ee 22 11 99 44 bb 88 55 77 22 aa 66 88 cc 55 48 d9 cd 21 00 00 00 01 6f 72 4e 54 01 cf a2 77 9a 00 00 06 cf 49 44 41 54 78 da ed 9d 6b 43 ea 30 0c 86 01 45 11 64 ec 22 2a 93 f1 ff 7f e6 e1 00 9b 5b b3 4b 9b 26 6d 57 f3 7e 93 cb d6 c7 b5 79 b3 a6 1d 8b 85 37 2d 57 55 55 3d 3d fb 6b 80 Data Ascii: PNGIHDRs\|]PLTEBBBBBBBi9i9i9i9BBi9i9i9i9i9i9BBBBBi9i9i9i9Bi9tRNSfDw33"DUw"fUH!orNTwIDATxkC0Ed"*[K&mW~y7-WUU==k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49780	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:33 UTC	580	OUT	GET /content/dam/mtb-web/scripts/fe_utilities_axp.css HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:33 UTC	789	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 532 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 13 Dec 2023 19:00:57 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:33 GMT ETag: "214-60c68c97fec40" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f391dfb0806f29cccc5f1df3e1ae836e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: bVpoSOAzanhT2p47Se5sV1AUf68OOS2eGc9Slv0CNuNvv2bq7Oyb4Q== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:33 UTC	532	IN	Data Raw: 2e 61 6c 65 72 74 2d 62 61 6e 6e 65 72 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 37 35 65 6d 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 32 30 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 31 70 78 20 32 70 78 20 35 70 78 20 30 20 23 30 30 30 30 30 30 34 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6c 65 72 74 2d 62 61 6e 6e 65 72 20 2a 20 3e 20 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 67 69 6e 2d 61 6c 65 72 74 73 2d 69 74 65 6d 2d 63 66 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 67 69 6e 2d 61 6c 65 72 74 2d 74 65 78 74 20 7b Data Ascii: .alert-banner { position: relative; padding: 0.75em;z-index: 20; box-shadow: 1px 2px 5px 0 #00000040;}.alert-banner * > p:first-child { margin-top: 0;}.login-alerts-item-cf { display: flex;}.login-alert-text {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49782	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:33 UTC	594	OUT	GET /content/dam/mtb-web/scripts/alert_scripts/alert_new_design.css HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:33 UTC	790	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2249 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 25 Oct 2021 13:54:52 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:33 GMT ETag: "8c9-5cf2db47b2300" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 d4b67fda8355378cec4afc079701f8e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: qhlHbFp3FOcb62S_Smp9-B6s9QSA6waRcXi7dp9l1aCNm1ILKv6--w== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:33 UTC	2249	IN	Data Raw: 2e 68 65 61 64 65 72 2d 77 72 61 70 70 65 72 20 7b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 20 3e 20 2e 61 6c 65 72 74 2d 62 61 6e 6e 65 72 20 7b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6d 61 72 67 69 6e 2d 74 6f 70 20 31 73 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 2e 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 20 3e 20 2e 61 6c 65 72 74 2d 62 61 6e 6e 65 72 2e 5f 6f 70 65 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 62 6c Data Ascii: .header-wrapper { z-index: 10;}.header.aem-GridColumn > .alert-banner { z-index: 9; position: absolute; transition: margin-top 1s;opacity:0;}.header.aem-GridColumn > .alert-banner._open { margin-top: 0;display:bl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49783	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:33 UTC	577	OUT	GET /content/dam/mtb-web/scripts/alert_scripts/allAlertobject.js HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:33 UTC	776	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Content-Length: 96 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Tue, 20 Feb 2024 12:36:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:33 GMT ETag: "60-611cf7760d0c0" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 76d4de5b65bdf749a3f97445d1b9f4d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 3XYKZoMZD_SF7bMm28jc-b31YewD3Y9R-gjrN76hWSU-E_qMqUS5QQ==
2024-03-14 00:56:33 UTC	96	IN	Data Raw: 76 61 72 20 73 69 74 65 41 6c 65 72 74 73 20 3d 20 7b 22 70 61 67 65 73 57 69 74 68 43 75 72 72 65 6e 74 41 6c 65 72 74 73 22 3a 5b 5d 2c 22 69 6e 64 65 78 65 73 46 6f 72 50 61 67 65 73 57 69 74 68 43 75 72 72 65 6e 74 41 6c 65 72 74 73 22 3a 5b 5d 2c 22 61 6c 65 72 74 73 22 3a 5b 5d 7d Data Ascii: var siteAlerts = {"pagesWithCurrentAlerts":[],"indexesForPagesWithCurrentAlerts":[],"alerts":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49784	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:33 UTC	555	OUT	GET /content/dam/mtb-web/scripts/status.js HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:33 UTC	766	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 15052 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Fri, 23 Feb 2024 14:51:03 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:33 GMT ETag: "3acc-6120db05ca3c0" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 8fd21502425077e617fde7325b45e112.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: Jpn8fsLxcdlqPuplJWOumB8vPWosN-zSKZ9wDev13lcsKv3aWy1zKQ==
2024-03-14 00:56:33 UTC	15052	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6d 61 69 6e 4e 61 76 41 63 74 69 76 65 43 68 65 63 6b 65 72 28 29 7b 09 0d 0a 09 74 72 79 20 7b 0d 0a 09 09 69 66 28 2f 70 65 6f 70 6c 65 73 2f 67 69 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 7b 0d 0a 09 09 09 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 68 65 61 64 65 72 2d 6e 61 76 2d 69 74 65 6d 20 3e 20 61 5b 68 72 65 66 2a 3d 27 70 65 6f 70 6c 65 73 2d 75 6e 69 74 65 64 27 5d 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 2d 70 61 72 65 6e 74 2d 70 61 67 65 22 29 3b 0d 0a 09 09 7d 09 0d 0a 09 7d 20 63 61 74 63 68 28 65 72 72 29 7b 7d 09 0d 0a 7d 0d 0a 0d 0a 76 61 72 20 68 6f 6d 65 70 61 67 65 73 20 3d 20 7b 0d 0a 09 22 70 65 72 73 6f 6e 61 6c 22 Data Ascii: function mainNavActiveChecker(){try {if(/peoples/gi.test(window.location.href)){document.querySelector(".header-nav-item > a[href*='peoples-united']").classList.add("-parent-page");}} catch(err){}}var homepages = {"personal"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49785	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:33 UTC	560	OUT	GET /content/dam/mtb-web/scripts/charReplace.js HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:33 UTC	804	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1655 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 08 Nov 2021 13:21:26 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:33 GMT ETag: "677-5d046deb14180" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ed016821a44f073856f1ffba399e1728.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: ZVMULQwqoY4P5arnZ9Mqn58rQRV7B9JLOiYEw3oPQk7PSRwsHC7x7w== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:33 UTC	1655	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 43 68 61 72 49 6e 54 69 74 6c 65 28 29 7b 0d 0a 09 76 61 72 20 63 68 61 72 52 65 70 6c 61 63 65 20 3d 20 5b 7b 0d 0a 09 09 22 70 72 69 6e 74 22 3a 20 22 c3 81 22 2c 0d 0a 09 09 22 68 65 78 61 22 3a 20 22 c3 84 22 2c 0d 0a 09 09 22 68 74 6d 6c 22 3a 20 22 26 41 61 63 75 74 65 3b 22 0d 0a 09 7d 2c 20 7b 0d 0a 09 09 22 70 72 69 6e 74 22 3a 20 22 c3 a1 22 2c 0d 0a 09 09 22 68 65 78 61 22 3a 20 22 c3 a1 22 2c 0d 0a 09 09 22 68 74 6d 6c 22 3a 20 22 26 61 61 63 75 74 65 3b 22 0d 0a 09 7d 2c 20 7b 0d 0a 09 09 22 70 72 69 6e 74 22 3a 20 22 c3 89 22 2c 0d 0a 09 09 22 68 65 78 61 22 3a 20 22 c3 89 22 2c 0d 0a 09 09 22 68 74 6d 6c 22 3a 20 22 26 45 61 63 75 74 65 3b 22 0d 0a 09 7d 2c 20 7b 0d 0a 09 09 22 70 72 69 6e 74 Data Ascii: function replaceCharInTitle(){var charReplace = [{"print": "","hexa": "","html": "Á"}, {"print": "","hexa": "","html": "á"}, {"print": "","hexa": "","html": "É"}, {"print

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49786	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:34 UTC	569	OUT	GET /etc.clientlibs/mtb-web/clientlibs/clientlib-base.js HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:34 UTC	830	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 400917 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 29 Jun 2022 20:38:00 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600, public Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:34 GMT ETag: "61e15-5e29c21005a00" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 8cdf4e2d4f4070992665477c4dbca0c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: cybub8wE5y3mxmYbBwbXVsI2SCxP83wqSuEAr5YIGy1sLyrmb5aCJQ== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:34 UTC	16384	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 41 64 6f 62 65 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 20 59 6f 75 20 6d 61 79 20 6f Data Ascii: /******************************************************************************* * Copyright 2017 Adobe * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may o
2024-03-14 00:56:34 UTC	16384	IN	Data Raw: 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 3d 20 77 69 6e 64 6f 77 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 7c 7c 20 77 69 6e 64 6f 77 2e 57 65 62 4b 69 74 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 20 7c 7c 20 77 69 6e 64 6f 77 2e 4d 6f 7a 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 62 6f 64 79 20 20 20 20 20 20 20 20 20 20 20 20 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 62 6f 64 79 22 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 62 73 65 72 76 65 72 20 20 20 20 20 20 20 20 20 3d 20 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 66 75 6e 63 74 69 6f 6e 28 6d 75 74 61 74 69 6f 6e 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d Data Ascii: tationObserver = window.MutationObserver \|\| window.WebKitMutationObserver \|\| window.MozMutationObserver; var body = document.querySelector("body"); var observer = new MutationObserver(function(mutations) { m
2024-03-14 00:56:34 UTC	16384	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 73 2e 73 65 6c 66 20 3d 20 77 72 61 70 70 65 72 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 68 6f 6f 6b 73 20 3d 20 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 73 2e 73 65 6c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 64 61 74 61 2d 22 20 2b 20 4e 53 20 2b 20 22 2d 68 6f 6f 6b 2d 22 20 2b 20 49 53 20 2b 20 22 5d 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 68 6f 6f 6b 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 68 6f 6f 6b 20 3d 20 68 6f 6f 6b 73 5b 69 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 70 69 74 61 6c 69 7a 65 64 20 3d 20 49 53 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: this._elements.self = wrapper; var hooks = this._elements.self.querySelectorAll("[data-" + NS + "-hook-" + IS + "]"); for (var i = 0; i < hooks.length; i++) { var hook = hooks[i]; var capitalized = IS;
2024-03-14 00:56:34 UTC	14808	IN	Data Raw: 76 61 6c 75 65 20 29 20 29 3b 0a 09 09 09 09 09 09 24 76 61 72 69 61 74 69 6f 6e 43 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 28 20 24 6e 65 77 56 61 72 20 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 0a 09 09 09 09 69 66 20 28 20 72 65 73 75 6c 74 2e 72 65 66 65 72 65 6e 63 65 73 2e 6c 65 6e 67 74 68 20 3e 20 30 20 29 20 7b 0a 09 09 09 09 09 2f 2f 20 62 75 69 6c 64 20 6f 75 74 20 74 68 65 20 72 65 66 65 72 65 6e 63 65 73 0a 09 09 09 09 09 65 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 20 27 73 65 63 74 69 6f 6e 27 20 29 3b 0a 09 09 09 09 09 76 61 72 20 24 72 65 66 65 72 65 6e 63 65 43 6f 6e 74 61 69 6e 65 72 20 3d 20 24 28 20 65 6c 65 6d 65 6e 74 20 29 2e 61 70 70 65 6e 64 28 20 72 65 66 65 72 65 Data Ascii: value ) );$variationContainer.append( $newVar );}}if ( result.references.length > 0 ) {// build out the referenceselement = document.createElement( 'section' );var $referenceContainer = $( element ).append( refere
2024-03-14 00:56:34 UTC	16384	IN	Data Raw: 76 69 63 65 73 2d 77 72 61 70 70 65 72 2e 63 6f 6d 70 6f 6e 65 6e 74 27 29 2e 64 61 74 61 28 27 69 64 27 29 3b 0a 20 20 20 20 24 70 72 6f 64 75 63 74 53 65 72 76 69 63 65 42 75 74 74 6f 6e 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 24 62 75 74 74 6f 6e 20 3d 20 24 28 74 68 69 73 29 3b 0a 20 20 20 20 20 20 20 20 24 62 75 74 74 6f 6e 2e 6f 6e 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 65 61 6c 69 75 6d 45 76 65 6e 74 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 61 6c 69 75 6d 5f 65 76 65 6e 74 3a 20 27 63 6c 69 63 6b 41 63 74 69 6f 6e 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f Data Ascii: vices-wrapper.component').data('id'); $productServiceButtons.each(function () { var $button = $(this); $button.on('click', function (e) { var tealiumEvent = { tealium_event: 'clickAction', co
2024-03-14 00:56:34 UTC	16384	IN	Data Raw: 6c 61 73 73 28 22 73 6c 69 63 6b 2d 64 69 73 61 62 6c 65 64 22 29 2e 61 74 74 72 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 22 74 72 75 65 22 29 29 3a 65 2e 24 70 72 65 76 41 72 72 6f 77 2e 61 64 64 28 65 2e 24 6e 65 78 74 41 72 72 6f 77 29 2e 61 64 64 43 6c 61 73 73 28 22 73 6c 69 63 6b 2d 68 69 64 64 65 6e 22 29 2e 61 74 74 72 28 7b 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 3a 22 74 72 75 65 22 2c 74 61 62 69 6e 64 65 78 3a 22 2d 31 22 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 44 6f 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6f 3d 74 68 69 73 3b 69 66 28 21 30 3d 3d 3d 6f 2e 6f 70 74 69 6f 6e 73 2e 64 6f 74 73 29 7b 66 6f 72 28 6f 2e 24 73 6c 69 64 65 72 2e 61 64 64 43 6c 61 73 73 28 22 73 6c 69 Data Ascii: lass("slick-disabled").attr("aria-disabled","true")):e.$prevArrow.add(e.$nextArrow).addClass("slick-hidden").attr({"aria-disabled":"true",tabindex:"-1"}))},e.prototype.buildDots=function(){var e,t,o=this;if(!0===o.options.dots){for(o.$slider.addClass("sli
2024-03-14 00:56:34 UTC	16384	IN	Data Raw: 73 69 7a 65 73 22 29 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 61 6e 69 6d 61 74 65 28 7b 6f 70 61 63 69 74 79 3a 30 7d 2c 31 30 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 65 2e 61 74 74 72 28 22 73 72 63 73 65 74 22 2c 6f 29 2c 73 26 26 65 2e 61 74 74 72 28 22 73 69 7a 65 73 22 2c 73 29 29 2c 65 2e 61 74 74 72 28 22 73 72 63 22 2c 74 29 2e 61 6e 69 6d 61 74 65 28 7b 6f 70 61 63 69 74 79 3a 31 7d 2c 32 30 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 65 6d 6f 76 65 41 74 74 72 28 22 64 61 74 61 2d 6c 61 7a 79 20 64 61 74 61 2d 73 72 63 73 65 74 20 64 61 74 61 2d 73 69 7a 65 73 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 Data Ascii: sizes"),r=document.createElement("img");r.onload=function(){e.animate({opacity:0},100,function(){o&&(e.attr("srcset",o),s&&e.attr("sizes",s)),e.attr("src",t).animate({opacity:1},200,function(){e.removeAttr("data-lazy data-srcset data-sizes").removeClass("
2024-03-14 00:56:34 UTC	16384	IN	Data Raw: 71 72 74 28 4d 61 74 68 2e 70 6f 77 28 6c 2e 74 6f 75 63 68 4f 62 6a 65 63 74 2e 63 75 72 59 2d 6c 2e 74 6f 75 63 68 4f 62 6a 65 63 74 2e 73 74 61 72 74 59 2c 32 29 29 29 2c 21 6c 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 53 77 69 70 69 6e 67 26 26 21 6c 2e 73 77 69 70 69 6e 67 26 26 72 3e 34 3f 28 6c 2e 73 63 72 6f 6c 6c 69 6e 67 3d 21 30 2c 21 31 29 3a 28 21 30 3d 3d 3d 6c 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 53 77 69 70 69 6e 67 26 26 28 6c 2e 74 6f 75 63 68 4f 62 6a 65 63 74 2e 73 77 69 70 65 4c 65 6e 67 74 68 3d 72 29 2c 74 3d 6c 2e 73 77 69 70 65 44 69 72 65 63 74 69 6f 6e 28 29 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 26 26 6c 2e 74 6f 75 63 68 4f 62 6a 65 63 74 2e 73 77 69 70 65 4c 65 6e 67 Data Ascii: qrt(Math.pow(l.touchObject.curY-l.touchObject.startY,2))),!l.options.verticalSwiping&&!l.swiping&&r>4?(l.scrolling=!0,!1):(!0===l.options.verticalSwiping&&(l.touchObject.swipeLength=r),t=l.swipeDirection(),void 0!==i.originalEvent&&l.touchObject.swipeLeng
2024-03-14 00:56:34 UTC	336	IN	Data Raw: 63 6b 65 64 27 2c 20 74 72 75 65 20 29 3b 0a 09 09 09 24 6c 6f 67 69 6e 46 6f 72 6d 53 65 6c 65 63 74 69 6f 6e 2e 66 69 6e 64 28 20 27 2e 6f 70 74 69 6f 6e 27 20 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 20 27 2d 61 63 74 69 76 65 27 20 29 3b 0a 09 09 09 24 6c 6f 67 69 6e 46 6f 72 6d 53 65 6c 65 63 74 69 6f 6e 2e 66 69 6e 64 28 20 27 2e 6f 70 74 69 6f 6e 27 20 29 2e 61 74 74 72 28 20 27 61 72 69 61 2d 70 72 65 73 73 65 64 27 2c 20 27 66 61 6c 73 65 27 20 29 3b 0a 09 09 09 24 6c 6f 67 69 6e 46 6f 72 6d 53 65 6c 65 63 74 69 6f 6e 2e 66 69 6e 64 28 20 27 2e 6f 70 74 69 6f 6e 5b 64 61 74 61 2d 6f 70 74 69 6f 6e 3d 64 65 61 6c 65 72 5d 27 20 29 2e 61 64 64 43 6c 61 73 73 28 20 27 2d 61 63 74 69 76 65 27 20 29 3b 0a 09 09 09 24 6c 6f 67 69 6e 46 6f 72 6d 53 65 Data Ascii: cked', true );$loginFormSelection.find( '.option' ).removeClass( '-active' );$loginFormSelection.find( '.option' ).attr( 'aria-pressed', 'false' );$loginFormSelection.find( '.option[data-option=dealer]' ).addClass( '-active' );$loginFormSe
2024-03-14 00:56:34 UTC	16384	IN	Data Raw: 73 65 74 46 6f 72 6d 41 63 74 69 6f 6e 28 29 3b 0a 09 09 7d 0a 0a 09 09 69 66 28 20 24 28 20 27 23 6c 6f 67 69 6e 2d 63 68 65 63 6b 62 6f 78 27 20 29 2e 70 72 6f 70 28 20 27 63 68 65 63 6b 65 64 27 20 29 20 20 29 20 7b 0a 09 09 09 66 6f 63 75 73 49 6e 70 75 74 28 20 24 28 20 27 23 74 78 74 55 73 65 72 49 44 27 20 29 20 29 3b 0a 09 09 7d 0a 09 7d 3b 0a 0a 09 24 6c 6f 67 69 6e 43 6f 6d 70 6f 6e 65 6e 74 73 76 32 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 73 65 74 44 65 76 69 63 65 50 72 69 6e 74 28 29 3b 0a 09 09 72 65 74 72 69 65 76 65 43 6f 6f 6b 69 65 28 29 3b 0a 09 7d 20 29 3b 0a 09 69 66 28 20 24 6c 6f 67 69 6e 43 6f 6d 70 6f 6e 65 6e 74 73 76 32 2e 6c 65 6e 67 74 68 20 3e 20 30 20 29 20 7b 0a 09 09 62 69 6e 64 44 72 6f 70 64 Data Ascii: setFormAction();}if( $( '#login-checkbox' ).prop( 'checked' ) ) {focusInput( $( '#txtUserID' ) );}};$loginComponentsv2.each( function () {setDevicePrint();retrieveCookie();} );if( $loginComponentsv2.length > 0 ) {bindDropd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49787	142.250.80.100	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:34 UTC	860	OUT	GET /recaptcha/api.js?render=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:34 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 14 Mar 2024 00:56:34 GMT Date: Thu, 14 Mar 2024 00:56:34 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:56:34 UTC	724	IN	Data Raw: 34 65 38 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4e8/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-03-14 00:56:34 UTC	539	IN	Data Raw: 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 Data Ascii: hcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js';po.crossOrigin='anonymous';p
2024-03-14 00:56:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49788	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:34 UTC	540	OUT	GET /utag/mtbank/main/prod/utag.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:35 UTC	602	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 71913 Connection: close Date: Thu, 14 Mar 2024 00:56:36 GMT Last-Modified: Wed, 14 Feb 2024 23:54:31 GMT ETag: "3f4acdb8749c24db8fc76cbff668b24a" x-amz-server-side-encryption: AES256 x-amz-version-id: en44e1b4TAH51D2w7yzPQrJVlNo3.ioo Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c70c0d114d0fcf32b9941c29c00266de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: yTTon8EpMJ8WNleKiyzkZIdVJyQ1yEgD1DQw_YetPIQLmgg1po3Hqg== Cache-Control: max-age=300
2024-03-14 00:56:35 UTC	15782	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 75 6c 28 73 72 63 2c 61 2c 62 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 3b 62 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 62 2e 6c 61 6e 67 75 61 67 65 3d 27 6a 61 76 61 73 63 72 69 70 74 27 3b 62 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 Data Ascii: //tealium universal tag - utag.loader ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved.var utag_condload=false;try{(function(){function ul(src,a,b){a=document;b=a.createElement('script');b.language='javascript';b.type='text/javascr
2024-03-14 00:56:35 UTC	30	IN	Data Raw: 2f 3b 64 6f 6d 61 69 6e 3d 22 2b 75 74 61 67 2e 63 66 67 2e 64 6f 6d 61 69 6e 2b 22 3b 65 Data Ascii: /;domain="+utag.cfg.domain+";e
2024-03-14 00:56:35 UTC	16384	IN	Data Raw: 78 70 69 72 65 73 3d 22 2b 78 2b 28 75 74 61 67 2e 63 66 67 2e 73 65 63 75 72 65 5f 63 6f 6f 6b 69 65 3f 22 3b 73 65 63 75 72 65 22 3a 22 22 29 3b 7d 0a 72 65 74 75 72 6e 20 31 7d 2c 70 72 65 70 61 72 65 41 6e 64 57 72 69 74 65 43 6f 6f 6b 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 61 67 2c 64 61 74 61 2c 65 78 70 69 72 61 74 69 6f 6e 29 7b 76 61 72 20 64 65 66 61 75 6c 74 53 65 73 73 69 6f 6e 45 78 70 69 72 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 3d 5b 22 5f 70 6e 22 2c 22 5f 73 73 22 2c 22 5f 73 74 22 2c 22 5f 73 65 73 5f 69 64 22 2c 22 5f 73 65 22 5d 3b 76 61 72 20 6f 72 69 67 69 6e 61 6c 45 78 70 69 72 61 74 69 6f 6e 3d 65 78 70 69 72 61 74 69 6f 6e 3b 69 66 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 64 61 74 61 29 2e 6c 65 6e 67 74 68 3e 30 29 7b 66 6f 72 28 Data Ascii: xpires="+x+(utag.cfg.secure_cookie?";secure":"");}return 1},prepareAndWriteCookies:function(tag,data,expiration){var defaultSessionExpirationCookies=["_pn","_ss","_st","_ses_id","_se"];var originalExpiration=expiration;if(Object.keys(data).length>0){for(
2024-03-14 00:56:35 UTC	16384	IN	Data Raw: 6d 6f 62 69 6c 65 2d 73 65 72 76 69 63 65 73 3a 6d 6f 6e 65 79 2d 73 6d 61 72 74 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 26 26 64 5b 27 74 65 61 6c 69 75 6d 5f 65 76 65 6e 74 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 63 6c 69 63 6b 41 63 74 69 6f 6e 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 26 26 74 79 70 65 6f 66 20 64 5b 27 63 75 73 74 6f 6d 4c 69 6e 6b 4e 61 6d 65 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 64 5b 27 63 75 73 74 6f 6d 4c 69 6e 6b 4e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 47 65 74 20 53 74 61 72 74 65 64 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 Data Ascii: mobile-services:money-smart'.toLowerCase())>-1&&d['tealium_event'].toString().toLowerCase().indexOf('clickAction'.toLowerCase())>-1&&typeof d['customLinkName']!='undefined'&&d['customLinkName'].toString().toLowerCase().indexOf('Get Started'.toLowerCase())
2024-03-14 00:56:35 UTC	4848	IN	Data Raw: 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 63 6c 69 63 6b 41 63 74 69 6f 6e 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 26 26 64 5b 27 63 75 73 74 6f 6d 4c 69 6e 6b 4e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 41 70 70 6c 65 20 42 75 74 74 6f 6e 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3e 2d 31 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 37 38 27 3a 74 72 79 7b 63 5b 37 38 5d 7c 3d 28 64 5b 27 70 61 67 65 4e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 27 4d 54 42 3a 70 65 72 73 6f 6e 61 6c 3a 70 Data Ascii: ().toLowerCase().indexOf('clickAction'.toLowerCase())>-1&&d['customLinkName'].toString().toLowerCase().indexOf('Apple Button'.toLowerCase())>-1)}catch(e){utag.DB(e)};break;case'78':try{c[78]\|=(d['pageName'].toString().toLowerCase().indexOf('MTB:personal:p
2024-03-14 00:56:35 UTC	16384	IN	Data Raw: 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 75 74 61 67 2e 6c 6f 61 64 65 72 2e 6c 6f 61 64 72 75 6c 65 73 28 29 3b 7d 3b 75 74 61 67 2e 6c 6f 61 64 65 72 2e 47 45 54 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 75 74 61 67 2e 63 6c 3d 7b 27 5f 61 6c 6c 5f 27 3a 31 7d 3b 75 74 61 67 2e 70 72 65 28 29 3b 75 74 61 67 2e 68 61 6e 64 6c 65 72 2e 65 78 74 65 6e 64 3d 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 69 66 28 31 29 7b 64 3d 62 5b 27 75 74 2e 65 6e 76 27 5d 3b 69 66 28 74 79 70 65 6f 66 20 64 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 72 65 74 75 72 6e 3b 63 3d 5b 7b 27 70 72 6f 64 27 3a 27 6d 74 62 27 7d 2c 7b 27 50 52 4f 44 27 3a 27 6d 74 62 27 7d 5d 3b 76 61 72 20 6d 3d 66 61 6c 73 65 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c Data Ascii: e){utag.DB(e)};utag.loader.loadrules();};utag.loader.GET=function(){utag.cl={'_all_':1};utag.pre();utag.handler.extend=[function(a,b,c,d,e,f,g){if(1){d=b['ut.env'];if(typeof d=='undefined')return;c=[{'prod':'mtb'},{'PROD':'mtb'}];var m=false;for(e=0;e<c.l
2024-03-14 00:56:35 UTC	2101	IN	Data Raw: 2c 22 31 35 31 22 2c 22 31 35 33 22 2c 22 31 35 34 22 2c 22 31 37 30 22 2c 22 31 37 31 22 2c 22 31 37 32 22 2c 22 31 37 33 22 2c 22 31 37 34 22 2c 22 31 37 35 22 2c 22 31 37 39 22 2c 22 31 38 30 22 2c 22 31 38 32 22 2c 22 31 38 33 22 2c 22 31 38 35 22 2c 22 31 38 36 22 2c 22 31 38 37 22 2c 22 31 38 38 22 2c 22 31 39 30 22 2c 22 31 39 36 22 2c 22 31 39 39 22 2c 22 32 30 31 22 2c 22 32 30 32 22 2c 22 32 30 33 22 2c 22 32 30 34 22 2c 22 32 30 35 22 2c 22 32 30 36 22 2c 22 32 30 37 22 2c 22 32 30 38 22 2c 22 32 30 39 22 2c 22 32 31 34 22 2c 22 32 31 35 22 2c 22 32 31 36 22 2c 22 32 31 37 22 2c 22 32 31 38 22 2c 22 32 31 39 22 2c 22 32 32 30 22 2c 22 32 32 31 22 2c 22 32 32 32 22 2c 22 32 32 33 22 2c 22 32 32 34 22 2c 22 32 32 39 22 2c 22 32 33 30 22 2c 22 32 Data Ascii: ,"151","153","154","170","171","172","173","174","175","179","180","182","183","185","186","187","188","190","196","199","201","202","203","204","205","206","207","208","209","214","215","216","217","218","219","220","221","222","223","224","229","230","2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49789	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:35 UTC	767	OUT	GET /content/dam/mtb-web/scripts/mtbank-prod.js HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session
2024-03-14 00:56:35 UTC	808	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 218303 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 05 Apr 2023 19:26:32 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:35 GMT ETag: "354bf-5f89bc4fbaa00" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 baec235d174153a8f2e92ea724643824.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: FQM2nvJD6Jv8ans992lbV0693BMgIKuRSgNcxe9ZFe7tJP9C4Y2MyA== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:35 UTC	15576	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 6e 61 6c 79 74 69 63 73 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 2c 65 2c 6e 3d 7b 32 32 32 38 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 76 34 3a 28 29 3d 3e 61 7d 29 3b 66 6f 72 28 76 61 72 20 72 2c 69 3d 32 35 36 2c 6f 3d 5b 5d 3b 69 2d 2d 3b 29 6f 5b 69 5d 3d 28 69 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 74 2c 65 3d 30 2c 6e 3d 22 22 3b 69 66 28 21 72 7c 7c 69 2b 31 36 3e 32 35 36 29 7b 66 6f 72 28 72 3d 41 72 72 61 79 28 65 3d 32 Data Ascii: /! For license information please see analytics.js.LICENSE.txt /(()=>{var t,e,n={2228:(t,e,n)=>{"use strict";n.d(e,{v4:()=>a});for(var r,i=256,o=[];i--;)o[i]=(i+256).toString(16).substring(1);function a(){var t,e=0,n="";if(!r\|\|i+16>256){for(r=Array(e=2
2024-03-14 00:56:35 UTC	13206	IN	Data Raw: 72 73 69 73 74 3a 21 30 2c 63 6f 6f 6b 69 65 3a 7b 6b 65 79 3a 22 61 6a 73 5f 67 72 6f 75 70 5f 69 64 22 7d 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3a 7b 6b 65 79 3a 22 61 6a 73 5f 67 72 6f 75 70 5f 70 72 6f 70 65 72 74 69 65 73 22 7d 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 52 29 3b 76 61 72 20 72 3d 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 6e 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 72 2e 61 6e 6f 6e 79 6d 6f 75 73 49 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 7d 2c 4d 28 72 29 2c 72 7d 72 65 74 75 72 6e 28 30 2c 69 2e 5a 54 29 28 65 2c 74 29 2c 65 7d 28 71 29 2c 4a 3d 6e 28 37 30 32 30 29 2c 55 3d 22 54 68 69 73 20 69 73 20 62 65 69 6e 67 20 64 65 70 Data Ascii: rsist:!0,cookie:{key:"ajs_group_id"},localStorage:{key:"ajs_group_properties"}},G=function(t){function e(e,n){void 0===e&&(e=R);var r=t.call(this,e,n)\|\|this;return r.anonymousId=function(t){},M(r),r}return(0,i.ZT)(e,t),e}(q),J=n(7020),U="This is being dep
2024-03-14 00:56:35 UTC	16384	IN	Data Raw: 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 28 74 3d 74 68 69 73 2e 5f 70 72 6f 6d 69 73 65 29 2e 74 68 65 6e 2e 61 70 70 6c 79 28 74 2c 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 65 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 28 74 3d 74 68 69 73 2e 5f 70 72 6f 6d 69 73 65 29 2e 63 61 74 63 68 2e 61 70 70 6c 79 28 74 2c 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 61 6c 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 2c 65 3d 5b 5d Data Ascii: rguments.length;n++)e[n]=arguments[n];return(t=this._promise).then.apply(t,e)},t.prototype.catch=function(){for(var t,e=[],n=0;n<arguments.length;n++)e[n]=arguments[n];return(t=this._promise).catch.apply(t,e)},t.prototype.finally=function(){for(var t,e=[]
2024-03-14 00:56:35 UTC	16384	IN	Data Raw: 78 28 74 2c 65 29 7b 72 65 74 75 72 6e 28 30 2c 72 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 69 3d 74 68 69 73 3b 72 65 74 75 72 6e 28 30 2c 72 2e 4a 68 29 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 75 29 7b 73 77 69 74 63 68 28 75 2e 6c 61 62 65 6c 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 3d 5b 5d 2c 28 30 2c 6f 2e 69 73 4f 66 66 6c 69 6e 65 29 28 29 3f 5b 32 2c 65 5d 3a 5b 34 2c 28 30 2c 6c 2e 78 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 30 26 26 28 30 2c 6f 2e 69 73 4f 6e 6c 69 6e 65 29 28 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 72 2e 6d 47 29 28 69 2c 76 6f 69 64 20 30 2c Data Ascii: x(t,e){return(0,r.mG)(this,void 0,void 0,(function(){var n,i=this;return(0,r.Jh)(this,(function(u){switch(u.label){case 0:return n=[],(0,o.isOffline)()?[2,e]:[4,(0,l.x)((function(){return e.length>0&&(0,o.isOnline)()}),(function(){return(0,r.mG)(i,void 0,
2024-03-14 00:56:35 UTC	16384	IN	Data Raw: 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6c 61 73 73 20 65 78 74 65 6e 64 73 20 76 61 6c 75 65 20 22 2b 53 74 72 69 6e 67 28 65 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 6f 72 20 6e 75 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 7d 72 28 74 2c 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 Data Ascii: e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function n(){this.constructor=t}r(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var o=function(){return o=Object.assign\|\|functi
2024-03-14 00:56:35 UTC	16384	IN	Data Raw: 64 22 29 7c 7c 74 68 69 73 2e 70 72 6f 78 79 28 22 70 72 6f 70 65 72 74 69 65 73 2e 63 68 65 63 6b 6f 75 74 49 64 22 29 7d 2c 6c 2e 70 61 79 6d 65 6e 74 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 78 79 28 22 70 72 6f 70 65 72 74 69 65 73 2e 70 61 79 6d 65 6e 74 5f 69 64 22 29 7c 7c 74 68 69 73 2e 70 72 6f 78 79 28 22 70 72 6f 70 65 72 74 69 65 73 2e 70 61 79 6d 65 6e 74 49 64 22 29 7d 2c 6c 2e 63 6f 75 70 6f 6e 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 78 79 28 22 70 72 6f 70 65 72 74 69 65 73 2e 63 6f 75 70 6f 6e 5f 69 64 22 29 7c 7c 74 68 69 73 2e 70 72 6f 78 79 28 22 70 72 6f 70 65 72 74 69 65 73 2e 63 6f 75 70 6f 6e 49 64 22 29 7d 2c 6c 2e 77 69 73 68 6c 69 73 74 Data Ascii: d")\|\|this.proxy("properties.checkoutId")},l.paymentId=function(){return this.proxy("properties.payment_id")\|\|this.proxy("properties.paymentId")},l.couponId=function(){return this.proxy("properties.coupon_id")\|\|this.proxy("properties.couponId")},l.wishlist
2024-03-14 00:56:35 UTC	16384	IN	Data Raw: 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 37 38 33 38 29 2c 69 3d 6e 28 31 39 32 31 29 2c 6f 3d 6e 28 32 34 39 30 29 2c 61 3d 5b 30 2c 30 5d 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 75 3b 72 65 74 75 72 6e 20 72 28 61 2c 74 29 2c 6e 3d 61 5b 30 5d 2c 6e 26 3d 32 31 34 37 34 38 33 36 34 37 2c 75 3d 69 28 65 29 2c 6f 28 6e 7c 3d 75 26 3d 32 31 34 37 34 38 33 36 34 38 2c 61 5b 31 5d 29 7d 7d 2c 35 35 30 30 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 38 33 39 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 38 33 39 37 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 34 31 36 35 29 2c 69 3d 6e 28 32 39 31 38 Data Ascii: trict";var r=n(7838),i=n(1921),o=n(2490),a=[0,0];t.exports=function(t,e){var n,u;return r(a,t),n=a[0],n&=2147483647,u=i(e),o(n\|=u&=2147483648,a[1])}},5500:(t,e,n)=>{"use strict";var r=n(8397);t.exports=r},8397:(t,e,n)=>{"use strict";var r=n(4165),i=n(2918
2024-03-14 00:56:35 UTC	16384	IN	Data Raw: 47 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 2e 6d 61 70 28 63 65 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 4e 74 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4e 74 2e 72 65 73 6f 6c 76 65 28 74 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 29 29 7d 2c 50 53 44 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 44 74 3d 74 7d 7d 2c 74 6f 74 61 6c 45 63 68 6f 65 73 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 65 7d 7d 2c 6e 65 77 50 53 44 3a 61 65 2c 75 73 65 50 53 44 3a 64 65 2c 73 63 68 65 64 75 6c 65 72 3a 7b 67 65 74 3a 66 Data Ascii: G.apply(null,arguments).map(ce);return new Nt((function(e,n){t.map((function(t){return Nt.resolve(t).then(e,n)}))}))},PSD:{get:function(){return Dt},set:function(t){return Dt=t}},totalEchoes:{get:function(){return ie}},newPSD:ae,usePSD:de,scheduler:{get:f
2024-03-14 00:56:35 UTC	2777	IN	Data Raw: 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 3b 72 65 74 75 72 6e 20 4a 65 28 74 68 69 73 2e 5f 63 74 78 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 28 65 2e 76 61 6c 75 65 29 7d 29 29 2c 65 3d 74 68 69 73 2e 5f 63 74 78 2c 6e 3d 74 2c 65 2e 69 73 4d 61 74 63 68 3d 46 65 28 65 2e 69 73 4d 61 74 63 68 2c 6e 29 2c 74 68 69 73 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6c 74 65 72 28 74 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 2e 64 62 2e 57 68 65 72 65 43 6c 61 75 73 65 28 74 68 69 73 2e 5f 63 74 78 2e 74 61 62 6c 65 2c 74 2c 74 68 Data Ascii: ter=function(t){var e,n;return Je(this._ctx,(function(e){return t(e.value)})),e=this._ctx,n=t,e.isMatch=Fe(e.isMatch,n),this},t.prototype.and=function(t){return this.filter(t)},t.prototype.or=function(t){return new this.db.WhereClause(this._ctx.table,t,th
2024-03-14 00:56:35 UTC	16384	IN	Data Raw: 68 3e 30 26 26 73 2e 6d 75 74 61 74 65 28 7b 74 72 61 6e 73 3a 72 2c 74 79 70 65 3a 22 61 64 64 22 2c 76 61 6c 75 65 73 3a 75 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 74 2e 66 61 69 6c 75 72 65 73 29 76 2e 73 70 6c 69 63 65 28 70 61 72 73 65 49 6e 74 28 65 29 2c 31 29 3b 6d 28 75 2e 6c 65 6e 67 74 68 2c 74 29 7d 29 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 63 2e 6c 65 6e 67 74 68 3e 30 26 26 73 2e 6d 75 74 61 74 65 28 7b 74 72 61 6e 73 3a 72 2c 74 79 70 65 3a 22 70 75 74 22 2c 6b 65 79 73 3a 64 2c 76 61 6c 75 65 73 3a 63 7d 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6d 28 63 2e 6c 65 6e 67 74 68 2c 74 29 7d 29 29 7d Data Ascii: h>0&&s.mutate({trans:r,type:"add",values:u}).then((function(t){for(var e in t.failures)v.splice(parseInt(e),1);m(u.length,t)}))).then((function(t){return c.length>0&&s.mutate({trans:r,type:"put",keys:d,values:c}).then((function(t){return m(c.length,t)}))}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49790	34.67.98.25	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:36 UTC	587	OUT	POST /v1/p HTTP/1.1 Host: aiq-in.mtb.com Connection: keep-alive Content-Length: 978 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:36 UTC	978	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 33 2d 31 34 54 30 30 3a 35 36 3a 33 34 2e 38 31 31 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 33 65 63 32 61 34 30 39 2d 64 32 61 33 2d 34 39 66 38 2d 62 64 36 35 2d 30 35 65 38 62 38 37 34 33 32 38 63 22 2c 22 74 79 70 65 22 3a 22 70 61 67 65 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 74 68 22 3a 22 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 65 61 72 63 68 22 3a 22 22 2c 22 74 69 74 6c 65 22 3a 22 4d 26 54 20 42 61 6e 6b 20 2d 20 50 65 72 73 6f 6e 61 6c 20 26 20 42 75 73 69 6e 65 73 73 20 42 61 6e 6b 69 6e 67 2c 20 4d 6f 72 74 67 61 67 65 73 2c 20 26 20 4d 6f 72 65 20 7c 20 4d 26 54 20 42 61 6e 6b 22 2c Data Ascii: {"timestamp":"2024-03-14T00:56:34.811Z","integrations":{},"anonymousId":"3ec2a409-d2a3-49f8-bd65-05e8b874328c","type":"page","properties":{"path":"/","referrer":"","search":"","title":"M&T Bank - Personal & Business Banking, Mortgages, & More \| M&T Bank",
2024-03-14 00:56:36 UTC	377	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:36 GMT Content-Type: application/json; charset=utf-8 Content-Length: 16 Connection: close Access-Control-Allow-Headers: Content-Type,Authorization Access-Control-Allow-Origin: * Access-Control-Max-Age: 900 X-Request-Id: 6c990115-da3d-4884-a4c7-f645f322b7ec Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-03-14 00:56:36 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49791	34.67.98.25	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:36 UTC	604	OUT	GET /v1/p HTTP/1.1 Host: aiq-in.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c
2024-03-14 00:56:37 UTC	244	IN	HTTP/1.1 404 Not Found Date: Thu, 14 Mar 2024 00:56:37 GMT Content-Type: text/plain Content-Length: 18 Connection: close X-Request-Id: a2dfc01f-86cc-4279-b243-b78e28e8bdad Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-03-14 00:56:37 UTC	18	IN	Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49795	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:50 UTC	568	OUT	GET /utag/mtbank/main/prod/utag.210.js?utv=ut4.51.202308231951 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:50 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 4721 Connection: close Date: Thu, 14 Mar 2024 00:56:51 GMT Last-Modified: Wed, 14 Feb 2024 23:54:30 GMT ETag: "0f46a48feb8441bdce1d3ee97355a2ae" x-amz-server-side-encryption: AES256 x-amz-version-id: aUD_0fA7sfe8Zfo1xZv4i8UGUBnsg1_U Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0bc560bfbdf419589e7d5b642ae14678.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 77FN-5Av4KPt0OKbyA6yW7Hkuzt5d1SwEz1viORQGF4ghR-Uex7Zyw== Cache-Control: max-age=1296000
2024-03-14 00:56:50 UTC	1477	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 32 31 30 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 6c 6f 61 64 65 72 3d 66 Data Ascii: //tealium universal tag - utag.210 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=f
2024-03-14 00:56:50 UTC	3244	IN	Data Raw: 74 75 72 6e 20 75 2e 65 6e 63 6f 64 65 28 62 5b 64 5d 29 3b 7d 65 6c 73 65 7b 72 65 74 75 72 6e 22 22 3b 7d 7d 29 3b 7d 0a 72 65 74 75 72 6e 20 61 3b 7d 3b 75 2e 6d 61 70 3d 7b 22 75 74 6d 43 6c 61 73 73 22 3a 22 61 74 74 72 69 62 75 74 65 2e 63 6c 61 73 73 22 2c 22 75 74 6d 44 61 74 61 43 68 22 3a 22 61 74 74 72 69 62 75 74 65 2e 64 61 74 61 2d 63 68 22 2c 22 75 74 6d 44 61 74 61 4a 53 4f 4e 50 22 3a 22 61 74 74 72 69 62 75 74 65 2e 64 61 74 61 2d 6a 73 6f 6e 70 22 2c 22 75 74 6d 53 6f 75 72 63 65 22 3a 22 61 74 74 72 69 62 75 74 65 2e 64 61 74 61 2d 75 74 6d 2d 73 6f 75 72 63 65 22 2c 22 75 74 6d 43 6f 6e 74 65 6e 74 22 3a 22 61 74 74 72 69 62 75 74 65 2e 64 61 74 61 2d 75 74 6d 2d 63 6f 6e 74 65 6e 74 22 2c 22 75 74 6d 4d 65 64 69 75 6d 22 3a 22 61 74 Data Ascii: turn u.encode(b[d]);}else{return"";}});}return a;};u.map={"utmClass":"attribute.class","utmDataCh":"attribute.data-ch","utmDataJSONP":"attribute.data-jsonp","utmSource":"attribute.data-utm-source","utmContent":"attribute.data-utm-content","utmMedium":"at

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49792	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:50 UTC	567	OUT	GET /utag/mtbank/main/prod/utag.40.js?utv=ut4.51.202309082106 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:50 UTC	606	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 22670 Connection: close Date: Thu, 14 Mar 2024 00:56:51 GMT Last-Modified: Wed, 14 Feb 2024 23:54:29 GMT ETag: "386a20e7fbd77404d0afd70e0615f46b" x-amz-server-side-encryption: AES256 x-amz-version-id: M5QxyLXswdwUO.xt2G8IeY7PKvxIfai1 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7c55514b62254664b7255cfc5da6dc92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: Ui0gBaKqqiGwjuX6weh_ZJvHmLwweglNoxfpK8iZzCl_ST3Nxb91Yw== Cache-Control: max-age=1296000
2024-03-14 00:56:50 UTC	8430	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 34 30 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 2e 66 62 71 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 3d 66 2e 66 62 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 4d 65 74 68 6f 64 3f 6e 2e 63 61 6c 6c 4d 65 74 68 6f 64 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 3a 6e 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 3b 69 66 28 21 66 2e 5f 66 62 71 29 66 2e 5f 66 62 71 3d 6e 3b 6e 2e 70 75 73 Data Ascii: //tealium universal tag - utag.40 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved.(function(f){if(f.fbq)return;var n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments);};if(!f._fbq)f._fbq=n;n.pus
2024-03-14 00:56:50 UTC	9000	IN	Data Raw: 69 2b 73 3b 72 65 74 75 72 6e 28 61 3c 3c 6f 7c 61 3e 3e 3e 33 32 2d 6f 29 2b 6e 7d 6e 2e 4d 44 35 3d 69 2e 5f 63 72 65 61 74 65 48 65 6c 70 65 72 28 61 29 2c 6e 2e 48 6d 61 63 4d 44 35 3d 69 2e 5f 63 72 65 61 74 65 48 6d 61 63 48 65 6c 70 65 72 28 61 29 7d 28 4d 61 74 68 29 29 3b 7d 65 6c 73 65 7b 6d 64 35 3d 75 74 61 67 2e 75 74 2e 6d 64 35 3b 7d 0a 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 2c 22 6c 69 6e 6b 22 3a 31 7d 3b 75 2e 73 63 72 69 70 74 72 65 71 75 65 73 74 65 64 3d 66 61 6c 73 65 3b 75 2e 70 69 78 65 6c 73 5f 69 6e 69 74 69 61 6c 69 7a 65 64 3d 7b 7d 3b 75 2e 63 6c 65 61 72 45 6d 70 74 79 4b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 65 63 74 29 7b 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 6f 62 6a 65 63 74 29 7b 69 66 28 6f 62 6a 65 Data Ascii: i+s;return(a<<o\|a>>>32-o)+n}n.MD5=i._createHelper(a),n.HmacMD5=i._createHmacHelper(a)}(Math));}else{md5=utag.ut.md5;}u.ev={"view":1,"link":1};u.scriptrequested=false;u.pixels_initialized={};u.clearEmptyKeys=function(object){for(var key in object){if(obje
2024-03-14 00:56:50 UTC	5240	IN	Data Raw: 74 20 62 65 20 63 6f 6c 6c 65 63 74 65 64 20 62 79 20 54 65 61 6c 69 75 6d 20 43 6f 6c 6c 65 63 74 2e 20 50 6c 65 61 73 65 20 65 6e 73 75 72 65 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 74 68 65 20 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 20 6f 66 20 75 74 61 67 2e 6a 73 20 74 6f 20 67 65 6e 65 72 61 74 65 20 61 20 74 65 61 6c 69 75 6d 5f 72 61 6e 64 6f 6d 20 76 61 6c 75 65 2e 22 29 3b 7d 7d 0a 69 66 28 75 2e 64 61 74 61 2e 74 72 61 63 6b 5f 73 69 6e 67 6c 65 3d 3d 3d 74 72 75 65 7c 7c 75 2e 64 61 74 61 2e 74 72 61 63 6b 5f 73 69 6e 67 6c 65 3d 3d 3d 22 74 72 75 65 22 29 7b 62 61 73 65 5f 74 72 61 63 6b 69 6e 67 5f 74 79 70 65 2b 3d 22 53 69 6e 67 6c 65 22 3b 7d 0a 75 2e 64 61 74 61 2e 6f 72 64 65 72 5f 63 75 72 72 65 6e 63 79 3d 75 2e 64 61 74 61 2e Data Ascii: t be collected by Tealium Collect. Please ensure you are using the latest version of utag.js to generate a tealium_random value.");}}if(u.data.track_single===true\|\|u.data.track_single==="true"){base_tracking_type+="Single";}u.data.order_currency=u.data.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49794	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:50 UTC	567	OUT	GET /utag/mtbank/main/prod/utag.41.js?utv=ut4.51.202309082106 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:51 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 26269 Connection: close Last-Modified: Wed, 14 Feb 2024 23:54:19 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: N6vdd4tSU4YYd_W1oa6N8AybolPxiZ8k Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "fce0a1eefd5fbe7b4db683ebe6ef51b2" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ae4e162eb9c0a598fcb6475e70daa530.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 28VLmSMJC1FWlX_gAXY8OQgmnuPddIeoomHctySN8F-1wc87x4xkKQ== Cache-Control: max-age=1296000
2024-03-14 00:56:51 UTC	15772	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 34 31 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 65 74 71 3d 75 65 74 71 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e Data Ascii: //tealium universal tag - utag.41 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved.var uetq=uetq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d*)\.
2024-03-14 00:56:51 UTC	10497	IN	Data Raw: 74 61 5b 5f 65 76 65 6e 74 5d 26 26 75 2e 64 61 74 61 5b 5f 65 76 65 6e 74 5d 2e 68 63 74 5f 70 61 72 74 6e 65 72 5f 68 6f 74 65 6c 5f 69 64 29 7b 72 65 74 75 72 6e 20 75 2e 64 61 74 61 5b 5f 65 76 65 6e 74 5d 2e 68 63 74 5f 70 61 72 74 6e 65 72 5f 68 6f 74 65 6c 5f 69 64 3b 7d 65 6c 73 65 20 69 66 28 75 2e 64 61 74 61 2e 68 63 74 5f 70 61 72 74 6e 65 72 5f 68 6f 74 65 6c 5f 69 64 29 7b 72 65 74 75 72 6e 20 75 2e 64 61 74 61 2e 68 63 74 5f 70 61 72 74 6e 65 72 5f 68 6f 74 65 6c 5f 69 64 3b 7d 65 6c 73 65 20 69 66 28 75 2e 64 61 74 61 5b 5f 65 76 65 6e 74 5d 26 26 75 2e 64 61 74 61 5b 5f 65 76 65 6e 74 5d 2e 68 63 74 5f 70 69 64 29 7b 72 65 74 75 72 6e 20 75 2e 64 61 74 61 5b 5f 65 76 65 6e 74 5d 2e 68 63 74 5f 70 69 64 3b 7d 65 6c 73 65 7b 72 65 74 75 72 Data Ascii: ta[_event]&&u.data[_event].hct_partner_hotel_id){return u.data[_event].hct_partner_hotel_id;}else if(u.data.hct_partner_hotel_id){return u.data.hct_partner_hotel_id;}else if(u.data[_event]&&u.data[_event].hct_pid){return u.data[_event].hct_pid;}else{retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49801	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:50 UTC	968	OUT	GET /content/dam/mtb-web/images/spanish/es-language-icon.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379669
2024-03-14 00:56:51 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1884 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 16 Sep 2021 13:15:46 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:50 GMT ETag: "75c-5cc1c9cd66480" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 a9a7890bd69fb04b587cd51baf217b1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: h3aCZk5K_B_h2A99ZtsdBn1JeWQJrIm-r5IghP1g8Q32ql4XBodZeQ== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:51 UTC	1884	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 37 70 78 22 20 68 65 69 67 68 74 3d 22 34 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 37 20 34 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 70 61 6e 69 73 68 20 4c 61 6e 67 75 61 67 65 20 49 63 6f 6e 40 33 78 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 53 70 61 6e 69 73 68 2d 49 63 6f 6e 2d 4f 70 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="47px" height="46px" viewBox="0 0 47 46" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Spanish Language Icon@3x</title> <g id="Spanish-Icon-Opt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49797	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:50 UTC	567	OUT	GET /utag/mtbank/main/prod/utag.42.js?utv=ut4.51.202106282113 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:51 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3993 Connection: close Date: Thu, 14 Mar 2024 00:56:51 GMT Last-Modified: Wed, 14 Feb 2024 23:54:27 GMT ETag: "6a27e663482a2e07e1c59a49fa8b8d4a" x-amz-server-side-encryption: AES256 x-amz-version-id: _w_F0qyKlgHk0RP4gE7CzHphnfihYXMZ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 2f276f8b7ce92ba7a0844268d20c32ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 9VYl0SrYZxBSZPZzLQO3kFiBSpMM_iCZbQDRgaawNYv8olP5-0-CkA== Cache-Control: max-age=1296000
2024-03-14 00:56:51 UTC	3993	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 34 32 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 64 6f 74 71 3d 64 6f 74 71 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 2c 22 6c 69 6e 6b 22 3a 31 7d 3b 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 66 61 6c 73 65 3b 75 2e 73 63 72 69 70 74 72 65 71 75 65 73 74 65 Data Ascii: //tealium universal tag - utag.42 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved.var dotq=dotq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;u.ev={"view":1,"link":1};u.initialized=false;u.scriptrequeste

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49796	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:50 UTC	567	OUT	GET /utag/mtbank/main/prod/utag.43.js?utv=ut4.51.202006232100 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:51 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9884 Connection: close Date: Thu, 14 Mar 2024 00:56:51 GMT Last-Modified: Wed, 14 Feb 2024 23:54:15 GMT ETag: "7383f6cbba6840ace0ac7b283c425195" x-amz-server-side-encryption: AES256 x-amz-version-id: sXeQBThsfVzDLzBgBBMktzTjdMevkDvW Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b863f5ba2fad5306016f04b0ec05bd82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: wa4LfvLlqdpHVMcQiqAKG3nZJSA5OuGVKRmo0rdnafpWli3td4oOsw== Cache-Control: max-age=1296000
2024-03-14 00:56:51 UTC	9884	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 34 33 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 32 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 67 2e Data Ascii: //tealium universal tag - utag.43 ut4.0.202402142352, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cfg.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49798	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:50 UTC	989	OUT	GET /content/dam/mtb-web/images/personal-home-page/mom-daughter-couch-desktop.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379669
2024-03-14 00:56:51 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 99062 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 11 Mar 2021 18:06:24 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "182f6-5bd46a4374800" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f458ab1245bb4f257969c1da8e708f88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: kKONWuH3C01KsAOpIffHXQQ6h-mVSxQ7P2TVClZxnMLKDc3P8OFAMw== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 8a 05 a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 79 2c ee 99 25 8f e6 5e 8b 55 46 cc 8a d7 5b 0d ba b1 82 7b 19 15 57 6d c4 7c 86 fe 16 15 63 c0 b7 c6 cd 6f 99 b7 7e ee 3f bb f5 e3 fa d5 5d 62 de e3 4b 86 3f 3f 74 72 cd f3 f9 7b b9 db d8 9c 7a d3 b4 35 3f 65 bc 9f cb dd f3 22 b2 af f0 86 c8 fe 75 b4 be 17 73 28 2f 7d 19 f3 4d ba f2 36 fb dd 32 bf 4a c9 be 9a de eb 52 8e 39 6e bc bf de 6d 2e dd 17 eb 5a 96 3a 6c ba 85 c4 8a 8c de 6a 31 ca ff 00 8d 64 eb 9a 5c 16 aa ce b1 b4 92 b3 6d 3b 9b 85 22 a1 35 7b 75 37 7c dc b7 e8 66 eb 5e 17 93 4d 99 a5 8a e2 3b c8 1b 3b 5e 16 cd 71 f7 91 ed 91 95 d7 6e de aa d5 dc 68 76 e6 e2 65 8d 9b e7 7f e2 db c6 2b 07 c5 90 c7 15 d2 ec 6f 33 f8 43 56 91 96 b6 66 35 29 ae 5e 64 73 ad 0e ef b8 df 32 ff 00 0d 47 1c d3 db fd c6 f9 4f f0 b7 4a 77 29 22 b2 fd ea b9 6a a6 eb 9d bf Data Ascii: y,%^UF[{Wm\|co~?]bK??tr{z5?e"us(/}M62JR9nm.Z:lj1d\m;"5{u7\|f^M;;^qnhve+o3CVf5)^ds2GOJw)"j
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: f9 7f 2b 36 d0 bb bb d7 52 d0 e5 35 26 d3 f5 3b 5f 0c f9 b1 c7 ff 00 12 f7 b9 48 a5 9b 69 c6 e0 32 a1 89 af 58 f8 5f a4 e8 7a 36 9f e1 fd 5e 0d 5a 7d 63 c4 f1 ea f1 b4 fe 1e b5 82 48 c7 d9 95 86 33 71 f7 77 39 3c 62 be de fd 9f 7f 65 f8 ee bf 65 1d 4b 4a b7 fb 34 7a 8f 8d 12 17 be fe d2 5f 33 ec d1 a8 c0 f2 f1 fc 5f c4 3d eb d9 3c 3b fb 20 f8 33 c1 1e 05 87 44 f0 d5 aa e9 37 4e d1 b5 de aa b0 2c f7 37 21 5b 71 52 64 c8 5c f4 f9 47 15 93 77 2f 43 ba f1 87 c3 7d 33 e2 25 ae 87 ab dd 43 73 a6 ea fa 6c 5e 75 8c d6 b7 25 26 b6 67 00 b4 6c cb f7 86 47 3e b5 d5 2d bc 12 db d8 b5 d4 6b 35 c5 ae 31 33 72 54 f7 20 d4 90 c2 96 eb 1a c5 1f 97 12 28 51 f4 02 a1 8e e0 45 27 95 fd ee 8b d6 8d c9 b9 a8 ac 17 cc 7f e2 7e f5 1d c6 cb 76 59 7e 5d ad 4e 58 67 fb 3e e5 db f2 Data Ascii: +6R5&;_Hi2X_z6^Z}cH3qw9<beeKJ4z_3_=<; 3D7N,7![qRd\Gw/C}3%Csl^u%&glG>-k513rT (QE'~vY~]NXg>
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: ff 00 b3 56 97 8c 2d c5 ae a9 e7 aa fc b2 61 c7 f5 ac 76 9b cd 8f 35 c5 b3 b1 e5 2f 76 4e 2f a0 e6 9a ab dc 31 f9 b6 fd d5 fe 1a 8e 49 0f de 5a ae d7 1f 33 7f 7a b5 4c ec 8c 86 b4 df f7 d5 42 d2 1a 6c 93 7f e3 d5 1f 99 ba ad 33 a2 2c 9b cc 0c b5 56 f3 e5 55 5f 59 05 58 5c 79 7f ef 55 1d 42 43 ba dd 7f bd 2f f2 06 ba 36 47 64 76 2a dc 36 dd df ec ff 00 15 72 30 cd f7 be 6f 99 98 fc df 8d 74 da 84 85 63 dd fe 7b d7 1b 1c 9f 7b 77 cd f3 1a 89 4a cc ce 72 d5 05 f2 ff 00 a4 7c df c5 1f 35 97 35 c6 d5 ab d7 53 0f 39 59 7e f7 96 73 58 b3 48 65 db b7 e6 5f f3 cf 15 0d f6 25 4b b0 43 71 b6 fb 77 dd dc 9f c3 5b 4b 31 6d bb 7f bb 5c fc d9 82 ea 16 f9 59 97 3f d2 b6 2d d8 35 ba 9f bb fc 3b 6b 58 1d 94 25 d0 ea b4 1b cf 2a 68 d9 3e f7 f7 bd ea af ed 4d 78 35 69 bc 13 Data Ascii: V-av5/vN/1IZ3zLBl3,VU_YX\yUBC/6Gdv6r0otc{{wJr\|55S9Y~sXHe_%KCqw[K1m\Y?-5;kX%h>Mx5i
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: f4 6a 82 c6 b3 1d cb fd ea b0 ad b5 57 f5 5a ab e6 0d db bf ca d4 8a df dd ff 00 be 6b 20 2d 6e 2d fe 7b 54 96 ed f2 ff 00 b3 da a8 c6 c3 72 ab 7d ea 99 66 d8 bf ee d0 36 68 6e f9 5b f5 dd 4d f3 3f 79 bb f2 dd 55 e1 90 32 ff 00 ec d5 1c 93 7c d8 5a 00 d0 f3 03 2f de dd b7 f8 9a 8f 38 33 55 15 b8 dc bb a9 df 68 f9 b6 ed ff 00 80 d0 23 43 ce f9 bf dd a9 15 87 ca bf fa 15 51 f3 0b 2f cb 4e 8e 4f dd fc ad 40 1a 11 b6 d6 ff 00 6a ae 2c 83 ff 00 b1 ac 75 98 37 f9 c1 ab 90 cc 1b 6f dd 6a a4 26 69 2c 9b 7f a5 5c 8d b6 37 cb fc 5f c5 58 eb 27 f1 7f e8 35 6a 3b 81 b9 77 7f 15 59 26 d5 bb 16 65 db f3 37 dd f9 7a d7 49 0f 86 6e d6 3d f3 ed b7 dd d1 5b ef fe 5d ab 73 e1 bf 85 52 df 4f 8f 57 ba 8f f7 b2 2f fa 3a 37 f0 af f7 bf 1e d5 b9 aa 46 1a 46 dc df f0 1a f5 b0 f8 Data Ascii: jWZk -n-{Tr}f6hn[M?yU2\|Z/83Uh#CQ/NO@j,u7oj&i,\7_X'5j;wY&e7zIn=[]sROW/:7FF
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 4d 64 dd 49 3f d9 55 19 be f4 98 dc bf 4a 93 49 bc 11 5c 79 12 6e dc d1 f1 27 be e3 c5 66 f4 34 6a ea c5 1f da 83 e1 fb f8 fb e1 5e 9a e9 6e d7 93 e8 fa 84 77 07 6f 25 63 61 b5 8f fe 83 57 34 58 60 f0 97 86 f4 bb 38 97 cb 67 88 7c be f8 ae e3 4b d4 1a 2d 16 fa 7d db bc 98 1d 8a b7 46 e3 a5 79 2f 88 35 63 75 ae 69 e8 8d f2 c7 10 5f 97 a5 79 d8 97 ca c7 4e 2e 49 ae c7 b1 78 4d bc d8 e3 f3 5b e6 6f e2 6a ec a3 d5 05 84 ca ab f7 1a bc 56 cf c4 12 45 0c 7b 1b 73 2f 5f 5e 05 6e 47 e2 89 2e a1 da ed f3 aa f1 5c aa b4 50 9d 16 cf 66 93 54 3f 61 f9 7e f3 f4 6a ae da 87 fa 3a a2 b7 35 e6 fa 7f 8a 27 96 15 81 db 72 ad 6c 69 ba c0 ba b8 99 b7 6e 54 5d a3 75 6b ed 93 d8 97 45 9e 81 a7 eb 82 28 fc a6 fb cb d3 75 35 6f 8d c4 db 55 be ab 5c 7d bd e3 dc 49 fe d5 5e d3 ef Data Ascii: MdI?UJI\yn'f4j^nwo%caW4X`8g\|K-}Fy/5cui_yN.IxM[ojVE{s/_^nG.\PfT?a~j:5'rlinT]ukE(u5oU\}I^
2024-03-14 00:56:51 UTC	758	IN	Data Raw: 6a ac f2 6e 32 34 63 39 aa f7 9e 26 b9 97 76 e9 9b df 6a 8e f5 4e 56 2b b8 03 81 8c e3 df d6 aa a2 86 59 09 19 3b 8f 35 0c 94 90 49 ab 3c 9b 77 34 8d f2 f3 d7 fa 55 39 35 00 cb f7 5b fd da 8e 6f f5 98 ed bb a5 43 e9 ef d7 de a9 31 34 98 eb 1d 5a 38 b5 28 ff 00 bd db ae 2b a4 be 9a 26 b7 61 e6 2a aa 7f 12 ae 4d 70 30 fc da 80 27 92 7a 9a ea a4 63 e4 49 cf dd fb be df 4a a9 bb 34 45 b5 64 72 5c 69 eb 66 be 7b 6e d9 d5 1b 23 8a e7 7c 9b 4f 3b 7f cc aa cb ce d6 e5 49 ef c5 74 31 c3 1c 96 30 6f 8d 5b 2a 73 b8 03 59 0b 6d 0f 93 09 f2 93 3c 73 b4 57 b5 07 ee a3 09 04 9a 5a 45 0b 5d 34 92 32 f6 6f 2f fa f4 ae 5f 50 b7 f3 24 69 62 93 6e df 9b 6f 15 dc 48 a1 6d 62 45 1b 50 e7 2a 3a 7e 55 cd 79 31 a9 91 44 6a 17 cb 1f 2e 06 3e f5 69 34 ac 63 09 33 9e b5 60 d3 2a b3 Data Ascii: jn24c9&vjNV+Y;5I<w4U95[oC14Z8(+&aMp0'zcIJ4Edr\if{n#\|O;It10o[sYm<sWZE]42o/_P$ibnoHmbEP:~Uy1Dj.>i4c3`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49799	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:50 UTC	998	OUT	GET /content/dam/mtb-web/images/shareholder-letter/2024-shareholder-letter-art-desktop.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379669
2024-03-14 00:56:51 UTC	794	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 47067 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 26 Feb 2024 19:37:01 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "b7db-6124e08951140" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 d4b67fda8355378cec4afc079701f8e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: bM8BIfQxvMIoRGLeJSNKvJVDRET4tQTH6YTBSnrOXcmpCZ69fWXTtw== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:51 UTC	8949	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 50 56 24 cd 4e 71 50 50 83 26 99 0a 42 7f 2a 8c c6 6a 46 08 3f a7 ad 1b 67 d2 9e 7d 69 5b a9 f0 d9 dc ce 0a bd 00 a7 41 51 6f 84 26 fe 1f b7 bb 69 b7 2f 16 b5 12 24 25 06 31 ea 69 df f8 57 a7 ba 0f 84 5d 65 5c 1d 5a a3 e8 6b 76 00 4e 30 38 1d a9 24 02 73 b1 c5 34 73 e5 8d 25 23 5a c7 04 aa 8f 34 ea fd 39 fe 97 74 1a 7c 05 05 65 b5 a7 65 0f fb e2 8e b6 f8 5f a9 3f 6e 97 4a 50 d0 50 94 a5 c3 07 d3 15 dc 37 68 c3 f7 2d a9 e6 d2 e2 98 24 a3 50 98 9e 6a 0f 6a 0e 2a 55 27 d6 ad 9f d4 72 28 26 97 22 c7 4f 17 26 ac f3 5b ab 67 ed 9e 2d 3e d2 9a 70 70 46 0f b5 53 b9 03 f6 af 47 ba b5 66 f9 af 0a e5 a0 e2 07 7d c7 d6 a3 6f 67 6b 6e 0a 6d ed db 6c 77 09 c9 ab 17 d5 63 b7 98 f3 fe 08 f4 bc f0 f8 27 f0 3a 11 69 f0 e8 53 ea 0d 97 1c 52 e1 58 31 b6 d5 b8 7a 8d ba 76 2a Data Ascii: PV$NqPP&BjF?g}i[AQo&i/$%1iW]e\ZkvN08$s4s%#Z49t\|ee_?nJPP7h-$PjjU'r(&"O&[g->ppFSGf}ogknmlwc':iSRX1zv*
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 34 9c 42 ef d1 01 69 43 21 58 31 24 9e f4 c9 d2 af 05 e9 a4 ab c7 c8 33 ad 07 9d 52 58 4a 94 80 7c c6 31 40 dc 5b a9 b1 84 90 46 0f 6a db 64 1b 48 69 c2 9f 09 53 0a 18 83 42 b8 da 9c 1e 22 a7 40 e3 bd 5d 8f 23 bf c0 d1 9d ba f0 67 db 5c bb 6e 52 b4 28 46 c5 27 65 7b 8a d1 45 f2 5d 1a 84 21 40 7c a6 81 79 9d 30 b1 98 19 3b 4d 43 cc b4 e7 e5 1d fb 56 89 62 8e 4e 7c 86 51 5d 9b 01 45 d6 e6 3f 4d e8 72 d2 50 d9 50 98 9c cd 00 d3 8a b6 73 ca a5 29 b3 cc ed 47 07 10 eb 65 40 9c 6e 0e c0 f7 ac d3 c6 e0 ff 00 02 c7 8e 89 5d bd a6 dd 25 46 49 18 a0 92 95 dd 3a db 60 0d 44 c5 3b 8f 78 a9 00 99 22 41 f5 ad 3e 8b 6b a5 3e 3a c7 cc 3c be 83 bd 0f f6 e3 6c b1 b5 86 17 e4 3d 96 12 d3 61 b4 0e 3f 33 de 87 37 37 4d dc 04 36 85 28 ff 00 2c 51 2b 65 6e a8 69 56 98 c8 35 37 Data Ascii: 4BiC!X1$3RXJ\|1@[FjdHiSB"@]#g\nR(F'e{E]!@\|y0;MCVbN\|Q]E?MrPPs)Ge@n]%FI:`D;x"A>k>:<l=a?377M6(,Q+eniV57
2024-03-14 00:56:51 UTC	5350	IN	Data Raw: 0c 24 6c 3d e9 ae b9 63 28 ed 5c 92 ea bd 4c 5a d9 ad 7f 33 8b 05 28 48 dc ff 00 b5 71 c2 d9 d5 7e 0d 24 89 f3 51 c0 3a fb a5 db 95 15 ac ed 3b 27 e9 57 29 c6 9a 39 d4 e2 a0 79 46 4d 62 c9 a8 e7 84 73 33 e4 df 2a 8f 46 5f d9 1d 33 e5 12 38 9a 64 59 5c 38 e0 42 11 2a 26 04 1a 35 d2 e2 87 98 e8 4f 64 ef f5 ae 93 e1 8e 8a 02 d3 78 e4 93 95 24 2b b5 51 97 54 f1 c6 df 65 78 e1 b9 fe 08 f4 ef 83 ed d0 96 97 76 a2 e1 58 f9 41 80 31 43 75 cf 84 9b 61 b7 1e e9 cb 51 f0 d3 a9 4c ab 27 e8 7f a5 76 50 02 99 3b 0c 93 f9 55 00 37 72 e5 c9 5a 35 a0 02 20 f3 35 c7 8e b3 3a 9e e7 2f fa 35 7a 71 6b a3 cb 8d b3 85 33 a4 92 47 3c 1a a8 a0 a4 90 a9 04 71 5d 77 59 f8 7e ea cd 21 7d 3c 17 5b 56 42 4e 54 3b 8f 5a e4 dc 52 f5 a9 0e 03 a9 38 21 58 8f a5 77 b0 e7 f5 79 46 47 16 bb Data Ascii: $l=c(\LZ3(Hq~$Q:;'W)9yFMbs3F_38dY\8B&5Odx$+QTexvXA1CuaQL'vP;U7rZ5 5:/5zqk3G<q]wY~!}<[VBNT;ZR8!XwyFG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49804	63.140.39.117	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:50 UTC	1304	OUT	GET /m2/mtb/mbox/json?mbox=target-global-mbox&mboxSession=982bceee196b4711901768c5d35728f4&mboxPC=&mboxPage=95c765057f464bf290004888157cb13b&mboxRid=46f004b8035b4814899fcb244e9933cb&mboxVersion=1.8.3&mboxCount=1&mboxTime=1710381408801&mboxHost=www3.mtb.com&mboxURL=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&mboxReferrer=&browserHeight=907&browserWidth=1280&browserTimeOffset=60&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_property=f7ba4290-5c00-8608-2ad1-5fc4576548bf&zipCodeCookie=&geoRegionCookie=&entity.categoryId=home-page&user.categoryId=home-page&loginClickedCookie=&mbox3rdPartyId= HTTP/1.1 Host: mtb.tt.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:51 UTC	678	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:56:51 GMT content-type: application/json;charset=UTF-8 content-length: 11804 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www3.mtb.com access-control-allow-credentials: true x-request-id: 46f004b8035b4814899fcb244e9933cb pragma: no-cache timing-allow-origin: * referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-03-14 00:56:51 UTC	11804	IN	Data Raw: 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 39 38 32 62 63 65 65 65 31 39 36 62 34 37 31 31 39 30 31 37 36 38 63 35 64 33 35 37 32 38 66 34 22 2c 22 74 6e 74 49 64 22 3a 22 39 38 32 62 63 65 65 65 31 39 36 62 34 37 31 31 39 30 31 37 36 38 63 35 64 33 35 37 32 38 66 34 2e 33 34 5f 30 22 2c 22 6f 66 66 65 72 73 22 3a 5b 7b 22 72 65 73 70 6f 6e 73 65 54 6f 6b 65 6e 73 22 3a 7b 22 65 78 70 65 72 69 65 6e 63 65 2e 69 64 22 3a 22 30 22 2c 22 61 63 74 69 76 69 74 79 2e 6e 61 6d 65 22 3a 22 43 6f 6d 6d 65 72 63 69 61 6c 20 53 63 72 69 70 74 22 2c 22 67 65 6f 2e 63 69 74 79 22 3a 22 6e 65 77 20 79 6f 72 6b 22 2c 22 61 63 74 69 76 69 74 79 2e 69 64 22 3a 22 31 33 37 34 36 30 22 2c 22 67 65 6f 2e 73 74 61 74 65 22 3a 22 6e 65 77 20 79 6f 72 6b 22 2c 22 65 78 70 65 72 Data Ascii: {"sessionId":"982bceee196b4711901768c5d35728f4","tntId":"982bceee196b4711901768c5d35728f4.34_0","offers":[{"responseTokens":{"experience.id":"0","activity.name":"Commercial Script","geo.city":"new york","activity.id":"137460","geo.state":"new york","exper

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49800	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:50 UTC	989	OUT	GET /content/dam/mtb-web/images/personal-home-page/convenience-section-image1.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379669
2024-03-14 00:56:51 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 229468 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 16 Apr 2020 22:06:22 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "3805c-5a36fa49cf380" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 10a23502057a5449ee9e08eab6e9c0d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: xFLznG6lHdfIS4QTbuBLebR0aUiK_Za81BrEgwnNNIK0eIVuIITwsg== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:51 UTC	15389	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 5c 00 00 01 b9 08 06 00 00 00 c2 9f 8c 1d 00 00 19 8b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 35 30 2c 20 32 30 31 39 2f 31 30 2f 30 31 2d 31 38 3a 30 33 3a 31 36 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR\iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 19 a8 01 f7 04 93 f4 10 8b 4c fa a1 57 e9 8d e7 19 d4 9f fa f1 1f 7d a6 db 2c 7e 15 b0 f8 e4 ee f6 ce d4 36 a0 25 e7 e6 d1 36 82 9a 32 4b 01 6f 88 88 41 ae 56 6e 6f 76 69 31 1c 8b bf f1 ca ab 38 a2 79 35 38 5a e5 ad 97 2f 5d 2e ae 5c bd 5a cc cd 72 fa 2e 00 b9 a9 21 02 20 ad 85 d8 36 22 85 81 1b 65 80 9a 4b 7c 75 75 fd e1 34 e8 ab cf 69 bb d3 b3 0b c5 c2 82 7a b6 8b a1 11 b0 7e 07 b1 05 46 0d a3 01 fa bb a0 a5 be 0b 3c c9 41 d9 b1 0e 6e d6 e1 7c dd b4 93 1b 9d e9 cf 06 67 d9 82 fb d5 d3 97 2f 81 6d 80 77 9b 31 2b 0a 50 16 1d a0 c9 7d 28 ab 05 76 ef 72 b5 72 a1 e1 3f 41 70 26 4f 08 55 06 ac 7e ae 75 34 86 90 1b 27 c1 a6 a1 27 4b 94 16 67 61 de 8c e6 82 5c b2 20 2d 7e 0e e0 f8 95 49 08 b8 fa 9a d0 b4 58 11 86 ad 52 bd d1 6e 4c cd d2 ee fc a5 2b 57 bf f2 ed Data Ascii: LW},~6%62KoAVnovi18y58Z/].\Zr.! 6"eK\|uu4iz~F<An\|g/mw1+P}(vrr?Ap&OU~u4''Kga\ -~IXRnL+W
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: aa d6 e1 65 6a 5f 96 d1 84 5b d3 e4 9d ad ad e9 76 63 f0 54 c5 37 ee bd 1b 62 fc 87 57 4e 33 9e d2 66 a7 78 35 cc f3 8c 7b a5 32 65 aa fc 9b d3 f2 78 5e a6 8e 3f e0 19 a8 01 f7 01 4f e8 b8 e6 e6 6e ad 34 9a fd d6 7c ab 5f 5a 4c c5 4e 37 0f ac ba b6 a2 d4 c1 fe 0e 06 0d 9c d2 c0 3f 76 b1 03 1c 94 45 86 b3 6d 80 c0 2f 69 47 0e 2e 36 6b e0 56 71 c9 18 9b 31 00 87 0f b0 e0 a3 dc d6 4d 1d db b3 1d b5 12 c4 43 37 8d 5c d2 6a 81 15 66 c1 72 d7 87 a0 18 ce 61 62 dd 5c fe 0c 02 38 29 1b 4f 5f 80 29 65 01 a1 60 9f 09 68 9a 4f 94 e2 11 a6 2f e4 bb a5 8c b3 cc f3 45 61 4c 0c 0d 8a c0 29 e0 3a ae 20 d9 88 37 4c 75 db a5 b8 43 09 63 07 6b 01 88 e5 f2 9d 22 25 27 48 84 42 d6 09 30 73 04 26 19 03 c0 26 78 47 97 b4 af 5e ae e5 52 5f ce 6d 98 30 d3 8f d6 61 fd 50 01 73 7c Data Ascii: ej_[vcT7bWN3fx5{2ex^?On4\|_ZLN7?vEm/iG.6kVq1MC7\jfrab\8)O_)e`hO/EaL): 7LuCck"%'HB0s&&xG^R_m0aPs\|
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 70 07 88 81 a2 01 84 fc c3 85 0c 8c 2d 63 d4 9f 41 c1 d5 6c ab 7a ad 51 8f 70 0e e1 86 e0 77 6c 9c 59 ec 8f 7b 94 2d bc b7 28 83 21 0c 87 98 c6 f5 8d 6c 06 db 0d 99 b3 60 4c d9 32 46 cc de 77 0a c0 b2 62 c5 11 01 c2 5c b7 21 9d c3 2b db 66 73 da ae 30 03 18 a4 9c 98 de c9 4a 79 76 67 7b 93 38 c4 db 80 2a 01 c2 51 a6 cd af 9e 0f ab 85 0a 0a b4 19 64 b0 f2 67 07 20 eb d0 a7 8c c6 67 68 02 b8 02 b2 f5 b3 66 9a 87 69 2b dc 26 84 a5 ed 2a 9b 6e ea c4 c2 c7 53 31 a8 58 c1 85 2a 1d 38 ec 80 3d ac 1c 62 d5 0f db 8c f7 ca f2 b5 11 6e cc ce 2e 5c bd 70 e5 25 92 64 85 b6 e0 8f b6 4d 3e 97 9f bb 3f ed d8 dc f3 eb f7 3b f6 5e 71 2b 3e 73 bf eb 67 a5 2b 3e f3 a9 3e 9e 02 ee 53 f8 bc ed f6 81 58 b7 d3 87 6a 09 4a fe a4 65 ba 82 8e 0a 15 ee c5 35 3b ab ec ef 18 cb 04 3b Data Ascii: p-cAlzQpwlY{-(!l`L2Fwb\!+fs0Jyvg{8Qdg ghfi+&nS1X*8=bn.\p%dM>?;^q+>sg+>>SXjJe5;;
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 6e 70 59 a6 22 68 f2 92 a5 76 b5 b7 5a ea c4 a1 59 7e 75 89 c3 7c c2 c3 25 ed 29 e4 6e 67 99 90 ac a7 35 28 d0 50 90 fa a5 fc 8a d3 b9 71 25 7b e3 2a 57 bc ab a5 cc 72 5f bc 84 a6 31 12 98 42 16 5a 7e 85 57 d8 4b ad 4a 75 ae a1 fb 81 e0 39 d2 2c 0f 57 46 cd 3a 75 e6 86 97 d7 ab 0b d2 16 6d 96 a3 cd a3 d4 b3 27 05 95 42 f0 6a 76 59 04 5e 99 ee d5 3f d0 ec b4 37 52 1b c4 e0 61 08 12 2a 65 a1 6c 65 52 96 4d 04 db 83 c9 8a d2 70 a2 6f 76 92 db 2a 1e 78 ed 6b 5f 8b 08 c5 f6 63 56 7c ea bb 9a db df d5 ce 77 7d aa 7b fb dd 6b f6 7b 37 3b e3 aa 7e da ef b6 7d 35 b7 df bd 66 bf eb d3 1b 4f b5 bf 9b f7 57 23 8e bb 49 ef 05 7e bf 05 b8 2f a8 92 be 16 2f a6 a1 6a 98 76 84 da 35 ab b0 3b 61 5f 2e 44 be 14 40 f4 29 e0 c0 3b 84 1c de 04 49 06 a1 f8 c1 a8 4c f7 1d 40 2e Data Ascii: npY"hvZY~u\|%)ng5(Pq%{Wr_1BZ~WKJu9,WF:um'BjvY^?7RaeleRMpov*xk_cV\|w}{k{7;~}5fOW#I~//jv5;a_.D@);IL@.
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: d2 92 14 e7 56 b3 9f e5 be 00 67 75 f8 8c 72 a2 6c 05 aa 58 fe fe d1 e3 c7 d2 a7 94 1a 90 8d a5 17 e3 75 03 2d 65 65 06 b1 ae e5 f1 3a c1 58 7d 4e be 23 9c e4 73 05 93 9b 2e 48 db 80 02 be ef 55 26 c1 41 6e fb 18 1a 03 6c e5 eb db 9f 01 44 d9 53 14 37 07 6f 9c e8 25 20 bc 94 54 d6 84 75 18 16 39 3e ac 73 d9 0f 49 9f 4c 3b a1 6f 42 6d 4b 24 18 5e c0 75 35 68 3e ad 5a 27 ad 48 d9 80 db 07 f6 2d 9c 3e 7e f4 c8 7f 71 e4 f0 e1 57 bf e1 0d 6f f8 df 7f f5 57 7f f5 d3 28 dd e9 e5 ef 12 b2 ef a3 bd 49 b4 1f ed 28 75 df 87 06 bf cd ad 1d 6f db 6c 9c bd df fd 22 ac 7e 7a f3 d0 eb 57 7f bb fa b1 3b bf d4 4f cd 6c bf 74 7a dd ea 77 7d 1b 46 73 fd ee 67 ae 76 79 9f 3c 79 72 f0 7f fb ed df 7d e3 87 3f fc df fe 67 df f1 ae f7 fc fd 85 c3 47 fe ab c3 fb f7 ff c0 e4 e4 c4 Data Ascii: VgurlXu-ee:X}N#s.HU&AnlDS7o% Tu9>sIL;oBmK$^u5h>Z'H->~qWoW(I(uol"~zW;Oltzw}Fsgvy<yr}?gG
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 19 df 3d 8c 47 16 ee 8c 96 f5 fb 5e 96 ec cc 96 ec 3b 60 32 80 76 d6 3b d0 d9 20 91 98 2a c0 06 70 35 2a 7e 2a 0c c5 fa 46 87 40 9b e2 91 1e 87 8e 00 1e fd 2a 66 39 4f 76 b2 90 ed 2c 62 ba 2d c0 22 03 c2 09 15 38 d6 f6 12 72 58 d0 69 40 b6 7a c8 10 02 da 78 08 24 e2 33 71 5f b4 d5 05 80 52 f8 49 46 50 9d 30 a0 8b 7f 53 2d 5d 4b 6e fa ee 79 ed 55 b2 fa 3f 0c 70 95 63 f2 84 01 69 ef 65 09 9b 15 67 bb 2a d6 3e 59 57 07 29 75 ea c7 26 90 ba f7 de 7b ef f5 6c f9 d5 f1 a3 0a 90 f1 42 27 db 29 cd b7 df 7f ff fd df 79 fb ed b7 d7 cb 35 f6 be 4f 1d 23 c6 9f 3a 3b 25 7d 72 76 9a f5 f2 d7 70 59 df d7 e7 2e fe 76 db f9 73 e7 7f fb fe 53 1f 7f 6a 16 6e 5b b5 fc b5 e2 40 af cf ba 9f 09 90 75 3d ef 73 61 6e de 18 e1 37 ca ab 13 08 32 ad ee bb 34 96 af 58 ec 23 2b eb 9d Data Ascii: =G^;`2v; p5~F@f9Ov,b-"8rXi@zx$3q_RIFP0S-]KnyU?pcieg*>YW)u&{lB')y5O#:;%}rvpY.vsSjn[@u=san724X#+
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: c2 11 f6 ec 7a 98 65 7d 2f 61 97 9a 82 71 6e 37 53 4b 82 7a 45 55 c7 3a 37 46 7f d2 76 ce 06 f3 b6 5a fb 41 bc 10 00 55 89 c0 2b 00 c9 14 b0 4a d4 69 0c b5 79 56 1a 4c 96 e0 02 58 09 68 d7 0d da 64 b4 4e 18 e5 b2 f6 73 31 2b f7 e1 83 7b ab f7 5a b0 a3 86 ac b6 8a 61 1f f6 1c e0 b7 1f 16 57 73 a7 81 0f ab fd fb 4e b9 c3 db 85 69 0b 2d 24 b8 d8 90 cb 49 68 d1 19 c0 b2 12 b8 5d 77 9a 90 61 bf ac 2b 16 10 a9 fd 23 d0 3d be 2b 17 16 6d a2 21 c1 35 4b cb 84 00 ae b7 fe a8 69 01 4e ed e9 5e 96 85 90 c2 40 7c ef 96 91 b1 59 9f 48 c6 17 83 77 0f 7a 13 92 c9 d2 70 67 75 11 6f 9c 7d ab fa 3e 4b 43 56 0c a6 21 e0 02 e4 bb b5 77 72 69 fb 3d ff b1 e8 a3 d1 13 a0 90 40 16 70 1d cb 0c 5f 00 4e f1 6d ca 56 40 80 65 68 b7 3c 56 d9 c2 37 00 29 f1 eb 1d 75 ca 80 17 6f 6a 34 Data Ascii: ze}/aqn7SKzEU:7FvZAU+JiyVLXhdNs1+{ZaWsNi-$Ih]wa+#=+m!5KiN^@\|YHwzpguo}>KCV!wri=@p_NmV@eh<V7)uoj4
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 00 be e7 34 38 5b 3f 3d 4c 08 f1 5c 73 a0 60 ff 5a 0c 75 08 74 f7 24 52 e4 a4 de 5e 4e 6d 6d 6c de ba b5 75 fc e4 b9 93 eb 77 ae df 01 7a bf cb e1 a5 a6 e0 e0 af 36 9e ff ec fb f3 c7 97 bd f6 d9 7d 5f 99 e0 56 88 e5 bf 40 08 f5 0a 21 40 7c 38 14 ee 4a ef 6d 05 4d 84 4a 49 d4 7a f7 30 39 8c 04 d1 67 8b 25 85 70 45 40 ee 47 bc 52 83 7a be 0b 01 54 13 dd 04 f2 06 73 56 40 f8 21 40 75 15 01 83 10 47 93 6e 71 b4 66 3f 80 64 bb 79 b2 5c 6f 21 64 b0 9d 0d 58 f4 65 a5 9e 44 d0 03 52 12 14 a9 6e 9c 3b 11 ae 01 ab fa 2c 10 3c 68 19 c9 41 c2 83 d0 13 39 dd d4 23 33 63 b5 66 8b 93 fa a5 48 35 c7 15 a0 d9 0f 78 e5 8c b3 23 1b 03 a4 9d 20 f1 ae 89 e1 c5 9d 35 80 90 3c 4a 5d bf 9e 3d ec 69 e3 39 2f cf bc 56 ed 06 51 c7 92 b0 ca 28 4a 24 53 79 09 32 71 28 d6 74 c4 bf 1d Data Ascii: 48[?=L\s`Zut$R^Nmmluwz6}_V@!@\|8JmMJIz09g%pE@GRzTsV@!@uGnqf?dy\o!dXeDRn;,<hA9#3cfH5x# 5<J]=i9/VQ(J$Sy2q(t
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 7b d8 1c f7 71 36 d4 a3 f5 5f 98 5b d2 45 ad 42 5e 05 93 1a 23 a2 59 5f 10 57 0e 70 b8 cf 1f 21 a9 62 70 26 18 d5 7f 78 3b c4 b6 71 31 21 29 d4 4e 1a 66 9a 30 a7 f0 4a bf 45 b2 88 75 9f f0 49 74 a3 39 a6 31 18 17 86 0a 07 31 5f d8 d4 78 0d f3 77 3d 6a 62 a6 e9 77 7d fe d7 3e f7 5b 09 ee e6 c9 e3 27 7e fe d3 9f 1c 7f 18 72 7f eb eb 6f c4 b9 5b cc 6c 48 90 14 27 bc 17 b2 dc ca 11 a6 40 f7 56 40 c2 fe b7 61 5b e5 a0 1b e7 19 bb 52 53 c0 24 f1 30 bb 9a 3a 9a 5b 79 e2 11 24 84 97 e9 c1 e4 b7 1a 21 45 60 d5 e4 51 77 9e 44 7d 36 cb 25 9f 23 24 41 cc 49 15 6c b3 d2 06 ef 54 46 70 af c5 39 9e 27 f3 7a f1 92 16 58 33 6c 4e 82 db b7 6d 6f de 42 01 96 cd ec c2 a7 23 ce c1 c1 ca 3b 5a d8 8d 6d c7 c9 d3 8f 7a e8 69 80 7f ea 78 9b f3 15 63 88 0b db 86 7b 54 fa 16 11 a0 Data Ascii: {q6_[EB^#Y_Wp!bp&x;q1!)Nf0JEuIt911_xw=jbw}>['~ro[lH'@V@a[RS$0:[y$!E`QwD}6%#$AIlTFp9'zX3lNmoB#;Zmzixc{T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49805	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	567	OUT	GET /utag/mtbank/main/prod/utag.44.js?utv=ut4.51.202309082106 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:51 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 12080 Connection: close Last-Modified: Wed, 14 Feb 2024 23:54:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: Z.uZLYqxrlRivRfHijE9oV3NZ9JnfI63 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 14 Mar 2024 00:56:52 GMT ETag: "f75ac8c96fb9c754bdf5a99ae7b1f37b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 b33e91c066f49dc7c18162b9a344e266.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 5Pl0GI0ZdM_8UuPXuwpXxogHVHvDFbmNqLOi-scW_UQ8bB-gj4oc1Q== Cache-Control: max-age=1296000
2024-03-14 00:56:51 UTC	12080	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 34 34 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 5f 6c 69 6e 6b 65 64 69 6e 3d 5f 6c 69 6e 6b 65 64 69 6e 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 3d 77 69 6e 64 6f 77 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 69 64 3a 69 64 7d 3b 76 61 72 20 6d 64 35 3b 75 Data Ascii: //tealium universal tag - utag.44 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved.var _linkedin=_linkedin\|\|{};window._linkedin_data_partner_ids=window._linkedin_data_partner_ids\|\|[];try{(function(id,loader){var u={id:id};var md5;u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49806	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	567	OUT	GET /utag/mtbank/main/prod/utag.46.js?utv=ut4.51.202309082106 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:51 UTC	606	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 22670 Connection: close Date: Thu, 14 Mar 2024 00:56:52 GMT Last-Modified: Wed, 14 Feb 2024 23:54:16 GMT ETag: "1a029694d85be1602e0e97a30bceecd0" x-amz-server-side-encryption: AES256 x-amz-version-id: IyyKU1MlC_9U.6c5uFz9YI9mvOLiYKS. Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 08307cdad31639e360e0351e9156d6ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: og-kE2Vtz8-UdtfMY8tzbi-Idj3lN88pHGLrs9iw1x0OYXH6O85inQ== Cache-Control: max-age=1296000
2024-03-14 00:56:51 UTC	6396	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 34 36 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 32 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 2e 66 62 71 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 3d 66 2e 66 62 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 4d 65 74 68 6f 64 3f 6e 2e 63 61 6c 6c 4d 65 74 68 6f 64 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 3a 6e 2e 71 75 65 75 65 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 3b 69 66 28 21 66 2e 5f 66 62 71 29 66 2e 5f 66 62 71 3d 6e 3b 6e 2e 70 75 73 Data Ascii: //tealium universal tag - utag.46 ut4.0.202402142352, Copyright 2024 Tealium.com Inc. All Rights Reserved.(function(f){if(f.fbq)return;var n=f.fbq=function(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments);};if(!f._fbq)f._fbq=n;n.pus
2024-03-14 00:56:51 UTC	2032	IN	Data Raw: 44 2c 43 2c 4d 2c 41 2c 53 2c 31 32 2c 73 5b 31 33 5d 29 2c 41 3d 63 28 41 2c 44 2c 43 2c 4d 2c 48 2c 31 37 2c 73 5b 31 34 5d 29 2c 43 3d 75 28 43 2c 4d 3d 63 28 4d 2c 41 2c 44 2c 43 2c 7a 2c 32 32 2c 73 5b 31 35 5d 29 2c 41 2c 44 2c 64 2c 35 2c 73 5b 31 36 5d 29 2c 44 3d 75 28 44 2c 43 2c 4d 2c 41 2c 77 2c 39 2c 73 5b 31 37 5d 29 2c 41 3d 75 28 41 2c 44 2c 43 2c 4d 2c 78 2c 31 34 2c 73 5b 31 38 5d 29 2c 4d 3d 75 28 4d 2c 41 2c 44 2c 43 2c 61 2c 32 30 2c 73 5b 31 39 5d 29 2c 43 3d 75 28 43 2c 4d 2c 41 2c 44 2c 67 2c 35 2c 73 5b 32 30 5d 29 2c 44 3d 75 28 44 2c 43 2c 4d 2c 41 2c 42 2c 39 2c 73 5b 32 31 5d 29 2c 41 3d 75 28 41 2c 44 2c 43 2c 4d 2c 7a 2c 31 34 2c 73 5b 32 32 5d 29 2c 4d 3d 75 28 4d 2c 41 2c 44 2c 43 2c 79 2c 32 30 2c 73 5b 32 33 5d 29 2c 43 Data Ascii: D,C,M,A,S,12,s[13]),A=c(A,D,C,M,H,17,s[14]),C=u(C,M=c(M,A,D,C,z,22,s[15]),A,D,d,5,s[16]),D=u(D,C,M,A,w,9,s[17]),A=u(A,D,C,M,x,14,s[18]),M=u(M,A,D,C,a,20,s[19]),C=u(C,M,A,D,g,5,s[20]),D=u(D,C,M,A,B,9,s[21]),A=u(A,D,C,M,z,14,s[22]),M=u(M,A,D,C,y,20,s[23]),C
2024-03-14 00:56:51 UTC	14242	IN	Data Raw: 29 2b 69 2b 73 3b 72 65 74 75 72 6e 28 61 3c 3c 6f 7c 61 3e 3e 3e 33 32 2d 6f 29 2b 6e 7d 6e 2e 4d 44 35 3d 69 2e 5f 63 72 65 61 74 65 48 65 6c 70 65 72 28 61 29 2c 6e 2e 48 6d 61 63 4d 44 35 3d 69 2e 5f 63 72 65 61 74 65 48 6d 61 63 48 65 6c 70 65 72 28 61 29 7d 28 4d 61 74 68 29 29 3b 7d 65 6c 73 65 7b 6d 64 35 3d 75 74 61 67 2e 75 74 2e 6d 64 35 3b 7d 0a 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 2c 22 6c 69 6e 6b 22 3a 31 7d 3b 75 2e 73 63 72 69 70 74 72 65 71 75 65 73 74 65 64 3d 66 61 6c 73 65 3b 75 2e 70 69 78 65 6c 73 5f 69 6e 69 74 69 61 6c 69 7a 65 64 3d 7b 7d 3b 75 2e 63 6c 65 61 72 45 6d 70 74 79 4b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 65 63 74 29 7b 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 6f 62 6a 65 63 74 29 7b 69 66 28 6f 62 Data Ascii: )+i+s;return(a<<o\|a>>>32-o)+n}n.MD5=i._createHelper(a),n.HmacMD5=i._createHmacHelper(a)}(Math));}else{md5=utag.ut.md5;}u.ev={"view":1,"link":1};u.scriptrequested=false;u.pixels_initialized={};u.clearEmptyKeys=function(object){for(var key in object){if(ob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49807	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	567	OUT	GET /utag/mtbank/main/prod/utag.47.js?utv=ut4.51.202106282113 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:51 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3993 Connection: close Date: Thu, 14 Mar 2024 00:56:52 GMT Last-Modified: Wed, 14 Feb 2024 23:54:28 GMT ETag: "7d13b10b152459b32864331a29549915" x-amz-server-side-encryption: AES256 x-amz-version-id: b.Z7D9b1NqyUvTX7k8mOj_57TZickKxP Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 079cd4553da15b2329bffae6abe6157e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 3QO4aN24ARdHJVJrVA7Ta8KBMCwDVJIMOtYJ7NMU9lnqxGEq88zQKQ== Cache-Control: max-age=1296000
2024-03-14 00:56:51 UTC	3993	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 34 37 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 64 6f 74 71 3d 64 6f 74 71 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 2c 22 6c 69 6e 6b 22 3a 31 7d 3b 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 66 61 6c 73 65 3b 75 2e 73 63 72 69 70 74 72 65 71 75 65 73 74 65 Data Ascii: //tealium universal tag - utag.47 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved.var dotq=dotq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;u.ev={"view":1,"link":1};u.initialized=false;u.scriptrequeste

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49808	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	567	OUT	GET /utag/mtbank/main/prod/utag.70.js?utv=ut4.51.202302282213 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:51 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5961 Connection: close Date: Thu, 14 Mar 2024 00:56:52 GMT Last-Modified: Wed, 14 Feb 2024 23:54:26 GMT ETag: "424341dfa8849987a2ae988f212ffd72" x-amz-server-side-encryption: AES256 x-amz-version-id: I9suCB2XvyYsLB0Rl2aBqVif63QrE40o Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7bf47dc1c691ee43f7c8db83aa03a3cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 9YSRYZjn2jaApPri2eRZqXBDcsBJLbKuCQyORA_PYN8Y_cKR_jxXtw== Cache-Control: max-age=1296000
2024-03-14 00:56:51 UTC	5961	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 37 30 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 67 2e Data Ascii: //tealium universal tag - utag.70 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cfg.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49809	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	567	OUT	GET /utag/mtbank/main/prod/utag.76.js?utv=ut4.51.202309082106 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:51 UTC	606	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 12128 Connection: close Date: Thu, 14 Mar 2024 00:56:52 GMT Last-Modified: Wed, 14 Feb 2024 23:54:18 GMT ETag: "c7581c8e02ea7b333319a1f3178f94ce" x-amz-server-side-encryption: AES256 x-amz-version-id: N03VolowUvW8CJQhqiP0RYU1fdqrzSph Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 0bc560bfbdf419589e7d5b642ae14678.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 11XIZsI3GeHjPlGIWfpxfZUdJufuFtTC7oa7QNOMHuuCIULSgnrjuA== Cache-Control: max-age=1296000
2024-03-14 00:56:51 UTC	452	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 37 36 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 67 6c 6f 62 61 6c 73 3d 75 74 61 67 2e 67 6c 6f 62 61 6c 73 7c 7c 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 Data Ascii: //tealium universal tag - utag.76 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.globals=utag.globals\|\|{};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/u
2024-03-14 00:56:51 UTC	11676	IN	Data Raw: 6d 26 26 6d 2e 74 61 67 4e 61 6d 65 3d 3d 22 49 46 52 41 4d 45 22 29 7b 62 3d 6d 3b 7d 65 6c 73 65 7b 62 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 7d 6f 2e 61 74 74 72 73 3d 6f 2e 61 74 74 72 73 7c 7c 7b 7d 3b 75 74 61 67 2e 75 74 2e 6d 65 72 67 65 28 6f 2e 61 74 74 72 73 2c 7b 22 68 65 69 67 68 74 22 3a 22 31 22 2c 22 77 69 64 74 68 22 3a 22 31 22 2c 22 73 74 79 6c 65 22 3a 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 7d 2c 30 29 3b 7d 65 6c 73 65 20 69 66 28 6f 2e 74 79 70 65 3d 3d 22 69 6d 67 22 29 7b 75 74 61 67 2e 44 42 28 22 41 74 74 61 63 68 20 69 6d 67 3a 20 22 2b 6f 2e 73 72 63 29 3b 62 3d 6e 65 77 20 49 6d 61 67 65 28 29 3b 7d 65 6c 73 65 7b 62 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 Data Ascii: m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("scri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49810	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	979	OUT	GET /content/dam/mtb-web/images/diversity-inclusion/50-50-volunteer.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379669
2024-03-14 00:56:51 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 93613 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 06 Dec 2023 20:53:33 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "16dad-60bdd8b4cad40" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ef73a156d5c211fdbb7e4231f2a0edca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 7-QPizAI0_gKD52h9WAPTNS1xIouBxp5pvdMca63KpHBObEYg48tiQ== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 45 00 00 ff e1 03 1e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*DuckyEhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RD
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 56 7b aa fe 18 ad dc 22 68 6b 35 0d d1 17 42 a7 4f 3a 65 28 cb ca 32 31 6f ee e4 83 df b3 87 4f 88 ae 86 7d 27 26 4b 2c da 6c 71 6c c5 7d 1f 60 89 cd 68 c9 e4 1a c0 ad 24 9f 44 ad d5 13 c2 b1 59 66 64 6e aa bc 22 57 67 e3 59 6b de 39 0e e1 95 8d 73 70 d8 e7 4d 2c a0 0f 4f 13 13 c1 0b ae 80 55 c6 59 06 d8 a4 61 59 2b d3 35 ab 4c a3 9d c5 cd d3 a5 70 2b ab 41 78 04 af 95 6e af 54 64 9e a6 b3 f4 f6 d0 5d 76 1e 7b 9b 1a e8 1b 0b c1 95 14 82 ac 3f c6 b3 d8 b0 cd 75 fc a5 16 d2 26 db df 5a bf 9a 35 b2 88 f4 5d 01 04 a8 d2 83 77 a4 ac 03 fb d6 d1 b0 64 9f 77 13 96 ca e1 a1 d1 1e bc 86 88 47 d9 5a 28 66 7b 91 56 12 10 78 1f cc 37 4f f8 d6 bc e4 c9 81 f6 7a 82 78 55 a5 82 31 99 5a a6 a3 28 f9 08 00 fd 95 44 19 92 a1 08 ed 1c a4 0d fd f5 08 3c 47 b6 e4 a8 41 e8 cd Data Ascii: V{"hk5BO:e(21oO}'&K,lql}`h$DYfdn"WgYk9spM,OUYaY+5Lp+AxnTd]v{?u&Z5]wdwGZ(f{Vx7OzxU1Z(D<GA
2024-03-14 00:56:51 UTC	12288	IN	Data Raw: c2 c2 5c ae 4a f7 b7 1b 7d 75 05 9d bd bb a7 b5 68 7c 81 85 e0 34 06 b9 aa 02 12 e3 5d 0a 5e 83 de 70 62 5d cb 82 b7 fe f4 2d a7 b4 95 97 12 31 1f 1d db 1e d0 08 40 0b 4c 80 03 a7 85 64 e5 a6 87 71 d2 92 d4 d4 7e 9e f6 fe 3f b7 b0 2d f7 94 c3 c8 bd c4 85 00 82 4e 80 2f 4a e2 dd 89 64 ec d1 6e d5 a0 52 c3 18 ec e6 73 fb a5 b5 bb 5b 6b 10 01 9e e4 41 a4 a1 6a 91 c8 0e a2 95 ed e0 7b b1 30 4f d5 ee d0 93 3f 63 69 63 63 10 74 a2 40 f7 48 00 d0 06 b8 26 e3 c6 9f 55 fb 0c 57 d0 a6 56 f0 df 42 70 b6 b6 4d 7e 5d 9e ec e4 12 42 02 8a 74 d8 9f 0a 73 e5 e0 52 e1 02 ae fe 8c 76 b9 b9 d5 cd 8f 50 38 14 09 a7 81 22 83 f5 8c 3f d1 92 cf d3 4c 4e 3a cd ec b6 78 ba 0a 82 37 00 00 d1 77 24 d5 2e 53 65 be 1a 33 4e e0 ec 18 2e 1e e9 23 88 40 34 56 34 04 3a 1f 02 2b 44 6f 6c Data Ascii: \J}uh\|4]^pb]-1@Ldq~?-N/JdnRs[kAj{0O?cicct@H&UWVBpM~]BtsRvP8"?LN:x7w$.Se3N.#@4V4:+Dol
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 2b 4d 68 b2 db f4 6f 29 2d bf 77 c5 13 dc 8c 94 b4 6a 50 05 3f e7 5a 62 87 57 a3 36 0f ad 36 42 e7 03 f3 0d 6a a3 5c 54 05 55 68 d5 7e ca d5 03 45 9a a3 c7 b7 cd 31 dc bd 87 50 5c 7e cd 69 ac 07 d3 24 de da 04 e7 f1 c1 a3 79 a3 d3 ff 00 5b 69 d5 b3 9f dd 16 28 68 f4 26 34 19 f2 26 31 a8 68 6a fd c2 b6 c5 1f 25 e5 2c 26 68 b8 bb 0f 76 d1 c1 ad 42 41 45 1b 6e 2b 44 4e 2e 98 25 c0 d7 14 b5 95 c8 18 42 aa 6b ae dd 3a 1a 66 4c ce 23 ef b5 89 81 c5 a0 10 42 16 a6 9b 6e b4 0d 03 d0 15 2d a7 ca 4c 26 89 ca c3 a9 03 44 d8 f8 d1 28 92 52 43 cd b9 8e 5f 4b c6 a8 84 2e fe 75 05 31 9b 82 d0 38 46 00 5d c8 d6 a3 0a 32 c0 3a 5b 38 cf a8 20 78 dc 93 d7 e0 68 26 8d 15 d8 41 75 bf 27 fa d3 c8 90 29 7b 4d 31 b1 b5 90 76 47 01 6b 78 c2 48 1c 91 79 01 aa a7 91 a0 75 9a 68 e7 Data Ascii: +Mho)-wjP?ZbW66Bj\TUh~E1P\~i$y[i(h&4&1hj%,&hvBAEn+DN.%Bk:fL#Bn-L&D(RC_K.u18F]2:[8 xh&Au'){M1vGkxHyuh
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: a2 34 d7 0c b3 d5 1d 9b dc fd 91 80 c3 c7 82 c9 dc 5c 65 05 a3 1a cb c9 ad 44 6e 89 85 0f 21 c8 3d a7 c7 ee ac ee fc 3c 1d fe 37 15 46 38 66 a1 d9 b3 fd 3c ee 1b 29 71 dd b3 9a 6f 27 1e 4d c7 5c be 36 96 b8 92 02 16 b9 ee 55 35 d0 e3 df 23 cd 77 bf a7 55 fa c7 c7 fd c5 0f bf 3b 66 e2 d6 e1 d6 17 6c 6d d4 60 b9 cc 25 5a f5 40 42 71 00 9d 0d 75 6b bb 27 ca bb 9f 12 5c 2b 75 f1 f8 99 6c 38 06 63 f3 96 37 16 f3 ba 07 47 3b 1c f8 66 3c 74 0e 07 c4 d6 6e 53 cc 4e af d3 dc d5 3b d1 37 ea ed c5 f5 f6 6e 29 e0 8c dd 40 21 68 73 98 49 68 22 36 0d db f0 ae 77 6d 58 6c f7 7f 52 e3 db 52 33 29 04 03 d5 75 69 2c 7d 15 bc 8f c7 77 0a e9 c6 4d b3 c5 6c 9b e8 c6 4d b6 25 fa 93 23 57 a3 b4 3f 6f aa 89 a4 d0 5b ac 8e 82 0d 96 2d c0 f1 b8 0b e0 5d af ef ab db 84 1e 66 33 2d Data Ascii: 4\eDn!=<7F8f<)qo'M\6U5#wU;flm`%Z@Bquk'\+ul8c7G;f<tnSN;7n)@!hsIh"6wmXlRR3)ui,}wMlM%#W?o[-]f3-
2024-03-14 00:56:51 UTC	15789	IN	Data Raw: 0b 58 62 de 92 2a df 57 ad 64 bc b1 c4 66 24 6f 09 9c e7 44 f0 74 04 12 02 26 bf cb 5d fe d3 66 86 ba b5 61 3c 83 23 83 1d 8a 8a 20 62 80 40 ad 4d 47 34 69 52 a4 f5 34 fe 5b cc 8f 45 44 7d 23 58 92 45 cb e5 79 42 83 51 fb 79 56 59 ac 1a 2b 2d f1 7a 43 5c 1c a7 75 f8 56 66 8d d1 90 f4 97 de d4 05 ce 1a 9d 17 ef a8 d1 33 90 3e 4a e5 c2 d8 48 e3 f9 95 07 df 44 a2 2a 4c ad 5c 5c 49 23 0a 9f 14 a3 48 44 d9 5c b8 f4 02 4d 32 2b 22 33 96 4f c0 e5 25 b4 7c a2 10 09 76 8e 04 2e 9a 6b 41 38 31 f5 5f b5 04 b2 5d de 6d a1 16 b0 16 86 a1 24 27 52 be 6b d6 99 5d 6d 87 67 25 60 ce 33 7d ca 1f 27 b6 64 2f 7f 80 01 06 95 d2 a7 8d 93 89 c8 e4 36 ca 9c d7 0e bb 9b 94 c4 96 fe a3 e1 5b ab a5 44 c0 e6 c6 1d 1e 85 b1 8e aa df 82 53 41 6b 27 c8 0e a3 63 55 b8 1c 1f 55 64 b4 cf Data Ascii: XbWdf$oDt&]fa<# b@MG4iR4[ED}#XEyBQyVY+-zC\uVf3>JHDL\\I#HD\M2+"3O%\|v.kA81_]m$'Rk]mg%`3}'d/6[DSAk'cUUd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49793	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	568	OUT	GET /utag/mtbank/main/prod/utag.190.js?utv=ut4.51.202309150258 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:53 UTC	606	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 12140 Connection: close Date: Thu, 14 Mar 2024 00:56:52 GMT Last-Modified: Wed, 14 Feb 2024 23:54:31 GMT ETag: "00b32b44d58510a747e128f4738abaa5" x-amz-server-side-encryption: AES256 x-amz-version-id: BHxl8nmJkbuHE3MfIvcKYc5tJORpoTI0 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b33e91c066f49dc7c18162b9a344e266.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 5TodHODh-oA087ccElwo7y_nTWLeyjmzCpoF84eplCOJ8TjTLY26YA== Cache-Control: max-age=1296000
2024-03-14 00:56:53 UTC	12140	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 39 30 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 67 6c 6f 62 61 6c 73 3d 75 74 61 67 2e 67 6c 6f 62 61 6c 73 7c 7c 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f Data Ascii: //tealium universal tag - utag.190 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.globals=utag.globals\|\|{};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49812	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	1043	OUT	GET /content/dam/mtb-web/images/lending-calculator-1440x650.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
2024-03-14 00:56:51 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 76857 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Fri, 02 Feb 2024 15:22:21 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "12c39-61067ada1c540" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 c1685d59e35fdb859ab8a1f97feb5652.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: dzK9mMvqIK5ehuhb5E3pAfWCg3SMOUogmymYFq_5C_ZZQjAoNJGbVQ== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 35 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky5http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: aa 9a 06 76 7b e6 d7 72 cd cc 2b 32 b2 fa ad ca 0a 51 d6 ad 27 c9 f9 a3 ae ae 4c f8 d0 d2 54 b0 34 89 a2 8a 2f 20 c0 dc 97 a1 d0 58 8f 3a df ac 5f bb b8 49 a8 49 c5 25 46 91 f3 bb b5 b9 55 30 ec dd 8a f5 46 5f 34 3a 9a d5 8f ba ff 00 4e 74 f0 27 77 87 ab ab cb 9c 8c 5f 5f c8 f9 f5 f4 22 48 fd 29 79 90 57 c4 21 5e 01 56 49 7a 5f c4 a8 a4 97 a9 7c 00 ce d8 75 b9 73 e3 42 54 ae f3 6c 5f 97 1f 82 3d 5f 5f cb 87 73 75 67 e9 f9 1f 4a 3c 35 6c cd 44 58 54 ab 24 11 04 f8 92 91 af dd 9f fb 59 7c 09 5a 79 2f 72 6b b8 c1 7f 88 6a c5 7d 34 75 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: v{r+2Q'LT4/ X:_II%FU0F_4:Nt'w__"H)yW!^VIz_\|usBTl_=__sugJ<5lDXT$Y\|Zy/rkj}4ud
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: df b1 91 07 e6 d2 fb cc ef af 18 4e bd f9 95 dc 64 d9 84 ad c2 fd 96 a7 8d 7a 2a ed 9b 91 d5 38 cb 55 fd cf cc f1 61 f4 72 bb 1a 10 94 eb 2d 6a 95 3f bc c5 57 51 b4 db 51 49 57 5e 55 a2 7e 55 24 67 66 65 fb 8e 09 c6 32 d6 9f 0d 0d 56 63 5b 9b 72 72 ac 1c a8 e9 cb 5d 09 06 37 e9 d5 2b 35 44 97 a6 3f de 8b 83 29 e3 67 db 5e e5 ca 45 7f 1f 82 2f ab 3e cc cc 69 46 e7 f4 d3 6b c1 2d 46 45 db a6 74 2c 41 61 c2 5f 9a d2 77 97 34 b9 47 fb cd de 26 18 c6 5a d6 d4 9a 6b e0 64 64 e3 4f a6 48 64 c3 77 b7 e5 b4 d6 ba 1d b4 d9 cb 68 de 63 e5 46 51 a3 e6 b5 f8 1e bd 37 79 f6 d5 5f f8 5c 0c 88 f5 d8 b7 1b 57 a3 ab 4b 99 e9 d6 4d bf db cb be b8 69 77 4d a1 4a f2 74 d6 06 76 d5 cd 16 d3 b7 c1 bb 97 27 14 9f 53 1a c1 83 bf 6d 76 ff 00 4f 3b 89 6b 5d 19 9d a0 e3 76 cc dc 7b Data Ascii: Ndz*8Uar-j?WQQIW^U~U$gfe2Vc[rr]7+5D?)g^E/>iFk-FEt,Aa_w4G&ZkddOHdwhcFQ7y_\WKMiwMJtv'SmvO;k]v{
2024-03-14 00:56:51 UTC	14808	IN	Data Raw: a6 cb b3 09 56 9a 30 ad 06 7d 89 c6 b4 75 e6 11 ab d6 18 f3 a2 a4 d4 eb a0 23 59 91 25 56 9a ab 7c 82 30 ee c9 27 a7 22 8a e3 f2 52 e7 aa f8 16 23 6b 8b 3e 98 a9 52 b4 37 06 da 52 ea 8c 1a d3 4d 68 69 96 eb b6 b2 dc a4 ed 4b f0 4a 8b e1 25 fd e7 97 bf 5e 72 f5 74 de 1b b5 26 ae 3a f0 af 13 ce f4 46 6e 3f 4c a3 25 c9 ae af 9f 3f b8 2b 2e db f6 65 19 2a f4 ba 4b 4e 1e 65 88 da 5a 8e 2e 5c 1c 2e c6 32 53 54 6a 49 51 a3 a4 e5 11 e2 ed 9b 86 d1 7b dd da 6e 3f d3 f1 9e 25 c7 58 57 fc 0f f0 9a 93 1e 0b 65 f2 de 61 6f 56 32 3d 19 10 78 f9 1a 56 33 d2 bf e5 7c 19 d6 6c e5 74 c7 86 c7 4e 29 e8 6d cc 6a ab c4 a9 5e 5f fb b7 8f 35 b9 6d d7 3a 7f 2d d9 bb 05 2f f1 29 a9 35 f6 1e 6f b1 3c 3d 3f 5a f9 70 57 97 49 e6 7a 98 19 3a c6 51 7c 19 52 9b 4e e7 3b 17 54 27 2e 0e Data Ascii: V0}u#Y%V\|0'"R#k>R7RMhiKJ%^rt&:Fn?L%?+.e*KNeZ.\.2STjIQ{n?%XWeaoV2=xV3\|ltN)mj^_5m:-/)5o<=?ZpWIz:Q\|RN;T'.
2024-03-14 00:56:51 UTC	12897	IN	Data Raw: 53 64 f6 7d 2d 26 d4 a2 f8 12 c5 cb 6b 8d 8f 6e 71 52 4e 95 e2 62 d6 a2 78 e2 41 b6 d2 ab 80 c8 ba 16 2d 39 25 5a 3f 33 36 b5 15 ba b2 2c c9 28 cf 47 cf 91 1a 95 95 67 23 a5 a5 77 d4 9f 16 66 ae 1b 0c 7f d2 dc 6b 5a 27 e2 4c a5 95 8b bf e0 df b7 8e ee e3 c5 dc 4b 94 78 96 42 5f cb 9d c0 dd ee f5 f4 b9 38 ca 2f e9 92 a3 4c bb 6a d3 a1 db fb 8f 26 cc 92 94 db e7 e4 25 b1 9b ae 5b a5 bb e1 e4 c5 3c 8b 11 9c 9f 19 25 46 6b df 3e 58 fd 78 f0 92 c4 b6 fe aa e2 dd 76 64 ff 00 0b 7a 16 63 e0 b9 f9 49 9d ea c6 76 b7 3c 78 65 e0 cb 47 26 ba a9 e0 76 d3 7d a7 fa 71 db 4d 76 f1 e5 ce 5b fd b7 da 32 b7 15 93 b6 de 76 71 a7 2e bc 8b 2f 56 a2 b9 43 e2 76 9f c9 99 7d 7c ba 7b 9f fe ad 81 08 3c 0e 8b 19 16 17 45 db 51 e3 24 97 16 79 7b 2c f8 f2 f4 e9 36 f9 f0 f1 5f de 3c Data Ascii: Sd}-&knqRNbxA-9%Z?36,(Gg#wfkZ'LKxB_8/Lj&%[<%Fk>XxvdzcIv<xeG&v}qMv[2vq./VCv}\|{<EQ$y{,6_<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49811	18.238.80.12	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	553	OUT	GET /i/8032d93d154e4517e5e5e20fa9c27d7b.js HTTP/1.1 Host: ob.segreencolumn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:51 UTC	504	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 103632 Connection: close ETag: "194d0-7rZlDwxo4VM5RoucmbkzifvLFBE" Server: Caddy Cache-Control: max-age=43200 Date: Wed, 13 Mar 2024 21:54:43 GMT Expires: Thu, 14 Mar 2024 09:54:43 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7d7f6eb601e45c772b8fdc4924fedb26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK52-P5 X-Amz-Cf-Id: TRNbe9mcnnTE72XEXN7g1w0ZIuOh_M1jVW4P73eYRihjjcFgkXdRDQ== Age: 10928
2024-03-14 00:56:51 UTC	15880	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 6e 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=fun
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 2f 5f 67 61 63 5f 55 41 5c 2d 5c 64 2b 5c 2d 5c 64 2b 5c 3d 28 2e 2a 3f 29 5c 3b 2f 29 5b 31 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 33 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 72 5b 32 5d 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 22 2d 22 7d 2c 57 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 78 2e 57 74 28 22 5f 75 65 74 76 69 64 22 29 7c 7c 22 2d 22 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 22 2d 22 7d 2c 56 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 61 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 2f 5f 67 61 63 5f 55 41 5c 2d 5c 64 2b 5c 2d 5c 64 2b 5c 3d 28 2e 2a 3f 29 5c 3b 2f 29 5b 31 5d 3b 69 66 28 33 3d 3d 3d 74 2e Data Ascii: .cookie.match(/_gac_UA\-\d+\-\d+\=(.?)\;/)[1].split(".");if(3===r.length)return r[2]}catch(t){}return"-"},Wn:function(){try{return x.Wt("_uetvid")\|\|"-"}catch(t){}return"-"},Vn:function(){try{var t=a.cookie.match(/_gac_UA\-\d+\-\d+\=(.?)\;/)[1];if(3===t.
2024-03-14 00:56:51 UTC	504	IN	Data Raw: 28 2f 26 61 62 5c 3d 2e 2a 3f 28 26 7c 24 29 2f 2c 22 26 61 62 3d 6a 78 2e 34 2e 32 3b 24 31 22 29 2c 6a 28 46 29 3b 65 6c 73 65 20 69 66 28 74 29 7b 76 61 72 20 72 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 2c 65 3d 72 2e 63 7c 7c 22 22 3b 4c 28 72 2c 65 2c 72 2e 72 61 29 7d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 29 3a 6a 28 46 29 7d 3b 69 66 28 22 70 72 65 72 65 6e 64 65 72 22 3d 3d 3d 62 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 7b 76 61 72 20 64 3d 21 31 3b 62 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 64 7c 7c 22 70 72 65 72 65 6e 64 65 72 22 21 3d 3d 62 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 28 76 28 31 29 2c 64 3d 21 30 29 7d 29 Data Ascii: (/&ab\=.*?(&\|$)/,"&ab=jx.4.2;$1"),j(F);else if(t){var r=JSON.parse(t),e=r.c\|\|"";L(r,e,r.ra)}}catch(t){}}):j(F)};if("prerender"===b.visibilityState){var d=!1;b.addEventListener("visibilitychange",function(){d\|\|"prerender"!==b.visibilityState&&(v(1),d=!0)})
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 65 29 7b 76 61 72 20 65 3d 65 7c 7c 7b 7d 2c 68 3d 22 22 3b 74 72 79 7b 6e 3d 6e 7c 7c 7b 7d 3b 76 61 72 20 5f 3d 22 66 72 6f 6d 43 68 61 72 43 6f 64 65 22 2c 6d 3d 22 6e 61 76 69 67 61 74 6f 72 22 2c 70 3d 22 5f 22 2c 79 3d 70 2b 22 65 76 61 6c 75 61 74 65 22 2c 67 3d 70 2b 22 73 63 72 69 70 74 22 2c 62 3d 70 2b 22 75 6e 77 72 61 70 70 65 64 22 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 22 22 2c 65 3d 30 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 72 2b 3d 53 74 72 69 6e 67 5b 5f 5d 28 74 5b 65 5d 2d 6e 29 3b 72 65 74 75 72 6e 20 72 7d 2c 53 3d 22 73 65 6c 65 6e 69 75 6d 22 2c 43 3d 22 64 72 69 76 65 72 22 2c 49 3d 22 77 65 62 22 2b 43 2c 45 3d 22 70 68 61 6e 74 6f 6d 22 2c 6b Data Ascii: ction(t,n,r,e){var e=e\|\|{},h="";try{n=n\|\|{};var _="fromCharCode",m="navigator",p="_",y=p+"evaluate",g=p+"script",b=p+"unwrapped",w=function(t,n){for(var r="",e=0;e<t.length;e++)r+=String[_](t[e]-n);return r},S="selenium",C="driver",I="web"+C,E="phantom",k
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 26 26 28 74 68 69 73 2e 63 75 72 72 65 6e 74 4e 75 6d 62 65 72 2b 3d 69 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 3d 28 74 2d 31 29 2f 69 2c 72 3f 74 2a 6e 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2a 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 6e 2e 63 72 65 61 74 65 52 61 64 69 61 6c 47 72 61 64 69 65 6e 74 28 73 28 74 2e 67 65 74 4e 65 78 74 28 29 2c 72 2e 77 69 64 74 68 29 2c 73 28 74 2e 67 65 74 4e 65 78 74 28 29 2c 72 2e 68 65 69 67 68 74 29 2c 73 28 74 2e 67 65 74 4e 65 78 74 28 29 2c 72 2e 77 69 64 74 68 29 2c 73 28 74 2e 67 65 74 4e 65 78 74 28 29 2c 72 2e 77 69 64 74 68 29 2c 73 28 74 2e 67 65 74 4e 65 78 74 28 29 2c 72 2e 68 65 69 67 68 74 29 2c 73 28 74 2e 67 65 74 4e Data Ascii: &&(this.currentNumber+=i)}function s(t,n,r){return t=(t-1)/i,r?tn:Math.floor(tn)}function l(t,n,r){var e=n.createRadialGradient(s(t.getNext(),r.width),s(t.getNext(),r.height),s(t.getNext(),r.width),s(t.getNext(),r.width),s(t.getNext(),r.height),s(t.getN
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 3b 72 2e 68 65 69 67 68 74 3d 36 30 2c 72 2e 77 69 64 74 68 3d 34 30 30 3b 76 61 72 20 65 3d 72 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 29 3b 72 65 74 75 72 6e 20 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 69 6e 6c 69 6e 65 22 2c 65 2e 74 65 78 74 42 61 73 65 6c 69 6e 65 3d 22 61 6c 70 68 61 62 65 74 69 63 22 2c 65 2e 66 69 6c 6c 53 74 79 6c 65 3d 22 23 66 36 30 22 2c 65 2e 66 69 6c 6c 52 65 63 74 28 31 32 35 2c 31 2c 36 32 2c 32 30 29 2c 65 2e 66 69 6c 6c 53 74 79 6c 65 3d 22 23 30 36 39 22 2c 65 2e 66 6f 6e 74 3d 22 31 31 70 74 20 6e 30 2d 72 33 61 6c 2d 66 30 6e 74 2d 31 32 33 22 2c 65 2e 66 69 6c 6c 54 65 78 74 28 22 43 77 6d 20 66 6a 6f 72 64 62 61 6e 6b 20 67 6c 79 70 68 73 20 76 65 78 74 20 71 75 69 7a 2c 20 f0 9f 98 83 22 2c 32 2c Data Ascii: ;r.height=60,r.width=400;var e=r.getContext("2d");return r.style.display="inline",e.textBaseline="alphabetic",e.fillStyle="#f60",e.fillRect(125,1,62,20),e.fillStyle="#069",e.font="11pt n0-r3al-f0nt-123",e.fillText("Cwm fjordbank glyphs vext quiz, ",2,
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 72 3a 6f 2e 42 74 28 74 29 7d 7d 3b 6f 2e 68 6e 28 73 2c 22 73 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3d 6f 2e 6c 6e 28 74 29 3b 79 2e 4f 65 2e 49 65 2b 2b 2c 67 28 65 29 3b 76 61 72 20 69 3d 6f 2e 66 6e 28 29 3b 79 2e 4f 65 2e 78 65 7c 7c 28 79 2e 4f 65 2e 78 65 3d 72 28 6e 2c 65 2c 69 29 29 2c 79 2e 4f 65 2e 6b 74 3d 72 28 6e 2c 65 2c 69 29 7d 29 7d 28 61 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3b 74 72 79 7b 76 61 72 20 65 3d 66 2e 62 72 28 22 70 61 69 6e 74 22 29 3b 65 26 26 65 5b 30 5d 26 26 28 72 3d 21 30 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 72 29 79 2e 52 65 2e 70 75 73 68 28 7b 73 3a 31 7d 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 30 3b 73 77 69 74 63 68 28 6f 2e 55 74 28 29 29 7b 63 61 Data Ascii: r:o.Bt(t)}};o.hn(s,"scroll",function(n){var e=o.ln(t);y.Oe.Ie++,g(e);var i=o.fn();y.Oe.xe\|\|(y.Oe.xe=r(n,e,i)),y.Oe.kt=r(n,e,i)})}(a),function(t,n){var r;try{var e=f.br("paint");e&&e[0]&&(r=!0)}catch(t){}if(r)y.Re.push({s:1});else{var i=0;switch(o.Ut()){ca
2024-03-14 00:56:51 UTC	5328	IN	Data Raw: 2f 69 6d 61 67 65 73 2f 6c 69 73 74 69 6e 67 2f 74 6f 6f 6c 2f 63 76 2f 79 74 61 67 2e 6a 73 22 29 2c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 29 2c 6e 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 79 6a 44 61 74 61 4c 61 79 65 72 3d 65 2e 79 6a 44 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 79 6a 44 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 28 7b 74 79 70 65 3a 22 79 73 73 5f 72 65 74 61 72 67 65 74 69 6e 67 22 2c 63 6f 6e 66 69 67 3a 7b 79 61 68 6f 6f 5f 73 73 5f 72 65 74 61 72 67 65 74 69 6e 67 5f 69 64 3a 74 2c 79 61 68 6f 6f 5f 73 73 74 61 67 5f 63 75 73 74 6f 6d 5f 70 61 72 61 6d 73 3a 7b 63 Data Ascii: /images/listing/tool/cv/ytag.js"),n.setAttribute("type","text/javascript"),n.onload=function(){e.yjDataLayer=e.yjDataLayer\|\|[],function(){e.yjDataLayer.push(arguments)}({type:"yss_retargeting",config:{yahoo_ss_retargeting_id:t,yahoo_sstag_custom_params:{c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49813	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	568	OUT	GET /utag/mtbank/main/prod/utag.214.js?utv=ut4.51.202311032118 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:51 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 19195 Connection: close Last-Modified: Wed, 14 Feb 2024 23:54:14 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: WXYf3NWL4HSwdaBPvom3UcrdznOJYarT Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 14 Mar 2024 00:56:52 GMT ETag: "6d18451a6ca6b8dd9a1aa6f66d8d405c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 97e44a27a616410da5792d77e9d25f52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: WSUEPVWG4MIIGmLajQG2F9CrqsVETy4ec_r5rPWFfPFz5eKcktqXKw== Cache-Control: max-age=1296000
2024-03-14 00:56:51 UTC	15772	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 32 31 34 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 32 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 2c 22 6c 69 6e 6b 22 3a 31 7d 3b 75 2e 6d 61 70 3d 7b 22 67 61 34 5f 65 76 65 6e 74 3a 72 65 74 61 69 6c 63 68 65 63 6b 69 6e 67 5f 72 65 64 65 65 6d 69 6e 62 72 61 6e 63 68 5f 6c 65 61 64 22 Data Ascii: //tealium universal tag - utag.214 ut4.0.202402142352, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;u.ev={"view":1,"link":1};u.map={"ga4_event:retailchecking_redeeminbranch_lead"
2024-03-14 00:56:51 UTC	3416	IN	Data Raw: 7b 67 2e 69 74 65 6d 5f 63 61 74 65 67 6f 72 79 34 3d 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 61 64 64 63 61 74 65 67 6f 72 79 34 5b 69 5d 3b 7d 0a 69 66 28 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 61 64 64 63 61 74 65 67 6f 72 79 35 5b 69 5d 29 7b 67 2e 69 74 65 6d 5f 63 61 74 65 67 6f 72 79 35 3d 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 61 64 64 63 61 74 65 67 6f 72 79 35 5b 69 5d 3b 7d 0a 69 66 28 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 76 61 72 69 61 6e 74 5b 69 5d 29 7b 67 2e 69 74 65 6d 5f 76 61 72 69 61 6e 74 3d 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 76 61 72 69 61 6e 74 5b 69 5d 3b 7d 0a 69 66 28 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 75 6e 69 74 5f 70 72 69 63 65 5b 69 5d 29 7b 67 2e 70 72 69 63 65 3d 75 2e 64 61 74 Data Ascii: {g.item_category4=u.data.product_addcategory4[i];}if(u.data.product_addcategory5[i]){g.item_category5=u.data.product_addcategory5[i];}if(u.data.product_variant[i]){g.item_variant=u.data.product_variant[i];}if(u.data.product_unit_price[i]){g.price=u.dat
2024-03-14 00:56:51 UTC	7	IN	Data Raw: 72 6f 72 29 3b 7d 0a Data Ascii: ror);}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49815	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	1046	OUT	GET /content/dam/mtb-web/images/spotlight/mtb-hp-spotlight-whm.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
2024-03-14 00:56:51 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 101773 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 06 Mar 2024 14:13:56 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "18d8d-612fe91b7d100" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 fc527c9e0a8a22ce61e1580f7382bcf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: fRiQq4c8gY6GD-ue8AK2H-SUoWnhMxzXYWmuYxycFn9zEe9drIF8Nw== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFHHICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: e9 da a3 33 99 1e 99 69 e7 37 29 00 88 86 91 79 ab 5c 13 cf ef 5f 16 d7 63 79 0f 16 70 ce 67 98 57 52 65 34 95 16 81 23 68 ab 2a da 95 4a 36 ea 50 ad cb 8b 78 5b 97 d9 df 0e ea 59 45 18 2c 07 df 32 6f cd 88 47 bf 33 af 11 ea 1e 34 97 bf 8a 46 26 42 65 93 50 25 02 f8 59 ad 7b a9 6d 37 00 f8 70 da 7b c4 9e d7 25 4a f8 83 b2 07 46 2c 23 0b ef 15 fb 40 df e6 31 03 c3 79 ae 6c f9 3e 5d 3e 61 4d 4d 43 57 46 59 1e 11 50 ae 19 36 b1 d4 3d 2f e2 3e f7 3b 61 e6 55 1e 75 4d 99 d4 ac f9 6c 2b 95 cb 14 82 54 7a a5 90 ac bb 14 08 b6 b8 17 1c db 97 3b 63 19 4a 2b e4 9f bf 39 99 22 a3 83 db f2 91 0f c6 32 e5 d3 cc 6b fb b3 49 0c 09 3c b1 04 52 b7 02 ec c1 89 03 49 1e 25 0d e7 e7 89 21 25 3f 1b bf b1 d7 d0 d4 9c 86 09 bd a6 4a 59 11 81 98 32 f8 65 6b 78 ac ad e1 2a 3a e3 Data Ascii: 3i7)y\_cypgWRe4#hJ6Px[YE,2oG34F&BeP%Y{m7p{%JF,#@1yl>]>aMMCWFYP6=/>;aUuMl+Tz;cJ+9"2kI<RI%!%?JY2ekx:
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 69 06 a5 ef 3e a2 50 39 1b dc a9 fd d8 e4 73 16 8c c1 81 1e f1 c5 a9 38 cc d8 a1 fc ca c1 85 bd 95 66 87 2c cd 6a e5 64 d4 3b bd 86 06 f3 8a f9 33 6c ce b1 a4 56 31 77 84 85 f5 be 08 72 48 13 2c 8e a6 75 f7 8e d6 c6 99 3d 1c 3e d7 2c 92 05 2c c7 e4 2f 8e c8 dc 5a 18 89 b6 47 95 b4 02 95 a5 0a d0 c9 f6 4f 4c 5a 59 5e 40 b4 b4 9f d1 2c 8a db fc b1 05 94 64 c9 51 53 13 2b fd 54 44 16 1d 39 f4 c1 7f 16 71 64 39 36 51 fc cd 35 54 81 65 5d 3b 60 6c 4b 18 07 63 9c 09 0f c5 f1 d1 52 70 e2 9a 68 b4 d4 dc 6a 23 f6 62 a7 cb 12 5f d2 8e 11 1b b9 69 23 2f e5 7d 43 16 4f 12 e6 70 cf c1 74 95 05 3f 9d ce 54 9f 4c 0c 45 97 54 b8 a1 14 c1 64 96 ae 54 d8 73 00 30 bd f1 29 c0 9c a7 89 7b fd 25 2a 65 4e 2d aa 89 5f 4a fb 2d 39 36 6b 35 8a 6f 8e 6b 49 63 49 58 9d 57 27 97 9e Data Ascii: i>P9s8f,jd;3lV1wrH,u=>,,/ZGOLZY^@,dQS+TD9qd96Q5Te];`lKcRphj#b_i#/}COpt?TLETdTs0){%*eN-_J-96k5okIcIXW'
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: aa b0 59 bc 03 8e 01 ff 00 a8 26 d4 65 7d 2a 76 89 6e e7 fc 51 36 59 53 4b 0a 96 fa e7 0a 0e ae a7 04 d1 c1 98 3c 09 26 bd 57 17 b6 29 ce 39 ae 65 cd f2 c4 d3 dd b1 95 1b 43 f3 00 ef d7 17 7e 5d 29 f6 48 c1 16 16 16 c7 98 b5 00 db ce 33 9f 7e d1 dd 4a f9 74 56 ca 06 4e 63 0e ee a1 75 16 85 b5 75 b3 63 4f 6d 96 0d 95 64 18 24 47 07 a2 9f 5c 6d dd 44 de f2 2e 39 6a da 32 3f 59 9a 75 39 f8 96 0c 7e 9b 75 e7 33 0f 8e 33 13 f2 65 94 92 fb d1 2e 33 16 f5 fb 9f c4 cb 79 d4 f7 10 1b 87 a9 aa 57 2c ef 49 66 9b 46 94 d7 b7 8b cc 9f 4c 2d 9d d4 7b 26 57 33 3b 78 ad a0 fc 4e db 62 5e e2 96 9a 24 8d 54 35 ac bd 07 c7 03 19 de 61 13 bb 33 ff 00 43 0e e1 ba 5c 75 5b fe dc 7b 76 e0 4f 3b 40 e9 ed 2a 6e 29 a3 95 ea 60 0d ab 4c 09 b2 1e 49 7e 67 e3 88 fc a2 75 19 84 14 f1 Data Ascii: Y&e}vnQ6YSK<&W)9eC~])H3~JtVNcuucOmd$G\mD.9j2?Yu9~u33e.3yW,IfFL-{&W3;xNb^$T5a3C\u[{vO;@n)`LI~gu
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: b6 22 33 3c de a2 8f 38 09 14 56 88 c8 aa 2d cc 92 c0 62 13 27 cf 67 cf ea c2 c2 8c 29 81 bb 3b a9 17 b7 51 83 3a a8 52 7c fe 9a 37 55 d3 24 88 f7 f2 bd 8f ed c2 7a 94 1c 18 df 87 d9 82 c8 64 57 6f b9 84 99 67 6e 95 9d db 6d 57 96 d2 51 b8 d5 6b ac 91 15 df e1 7b e0 9f 2a ce ff 00 47 f0 76 73 56 b4 f2 4b 1e 5c d3 77 50 44 b7 79 52 35 01 54 01 d5 88 b6 00 be 94 6e a9 da ed 73 16 b1 f6 0a 3d f7 e7 a0 db 12 1d 9a 67 be d5 c2 f4 da a6 bb 19 5b 5b 75 d5 aa f8 ae 9b d5 59 59 a3 a9 40 8b 5d 9f 29 70 70 e5 7c f2 64 74 35 35 14 e6 92 aa 68 12 59 69 99 b5 34 2e ca 09 42 7a 90 4d b1 5c f6 81 c1 79 06 59 c0 7d a2 e7 2f 47 53 de 66 b1 0a ba b9 22 92 f2 19 15 c6 86 5b ec 14 33 5c af c7 12 d4 5c 6f 57 2f 1c 54 f0 d3 64 15 11 e5 50 52 0a 93 9d 3b da 12 d6 06 db 8b 5b 7d Data Ascii: "3<8V-b'g);Q:R\|7U$zdWognmWQk{*GvsVK\wPDyR5Tns=g[[uYY@])pp\|dt55hYi4.BzM\yY}/GSf"[3\\oW/TdPR;[}
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 28 e7 8c c6 d9 9e 23 0e 40 e4 c0 9e 36 e3 0a a5 c8 aa b3 79 61 6a 4a 15 ba 51 d3 9d 9a 69 08 f0 96 f8 73 38 e6 8a 98 8b 12 4b 77 92 30 0c ee 79 96 27 7c 5c 3d b8 e7 87 33 ce 7d 8e 20 ab 49 42 85 62 41 c8 b9 36 66 b7 e5 8a fe 93 2e 59 e4 98 c8 ca ab 10 e6 79 dd 88 16 1f 8d f1 a7 a5 01 6b dd ef 13 b8 e5 b1 ed 05 ea 04 8b 1a 46 5d fb be 61 4b 1b 7e 18 2b e0 fa 78 eb 73 58 69 e4 65 5e f6 40 15 8f 21 e1 21 6f e9 7e 78 da 83 2a a7 cc 5e 52 eb e0 0e 21 50 76 b9 2a c6 f8 f2 8f 2a a8 a0 79 2a 29 a5 ef 22 85 c0 d6 36 24 f4 db e5 86 18 e4 62 51 40 1d 24 ed 18 a0 cb aa 6a e9 a5 ee fd 92 ac 82 d1 9f 12 a0 bd ef b7 96 fe b8 42 7c a2 6c b7 3b 8e 7c 9a 15 5a 7a 99 c4 10 3a 5c 77 8e 48 ba 85 24 b7 5e 47 09 c5 79 c2 d6 d2 a7 7a 6e 65 71 25 98 69 3e f2 b5 fc bc f1 d4 bd 80 Data Ascii: (#@6yajJQis8Kw0y'\|\=3} IBbA6f.YykF]aK~+xsXie^@!!o~x^R!Pvy)"6$bQ@$jB\|l;\|Zz:\wH$^Gyzneq%i>
2024-03-14 00:56:52 UTC	3469	IN	Data Raw: 4b 82 d2 95 31 36 82 d2 f8 e1 b8 62 e1 9e 03 9f 88 3b db 4f 99 e4 d4 15 d3 83 ee 89 e2 a1 48 83 5c 7d eb 47 7f 86 28 8c b3 fa 7d 3e 1f ab 01 4d b6 17 1c ed f3 c4 bf 1a f6 ad 36 65 c3 14 99 3c 19 0e 71 92 e5 d0 c3 49 97 08 73 88 7b 9a 89 a7 89 75 4a da 6e 7e a9 56 38 d6 fd 5a 4c 40 64 6e 2c 09 6f 17 3c 67 ea f3 d0 cd 8f 0c a4 aa 33 b7 7f d2 21 da c4 84 f0 fe 53 02 be e6 a9 dc af 98 09 6b fc af 80 8e 01 ab a7 ca b8 96 97 36 90 c8 29 32 fa 88 aa 2b 9d 13 50 4a 60 48 66 6e 67 46 a6 50 6c 3f 6e 25 bb 48 cd 16 b7 35 8e 9e 3f e8 e8 93 ba bf 9b 9d db f0 3b 60 02 48 75 27 83 56 ad c0 b6 c7 7e 78 9a 46 10 03 1f 18 e8 46 44 ed 8e 3d e2 3a 2c 96 5c b4 e5 fc 41 4d 29 f6 47 aa cb 32 b8 28 63 7a 3a 8a 57 d2 8d 13 14 3b ab 15 ba b0 b6 92 71 25 5f 51 ec 19 72 8f d1 52 c1 Data Ascii: K16b;OH\}G(}>M6e<qIs{uJn~V8ZL@dn,o<g3!Sk6)2+PJ`HfngFPl?n%H5?;`Hu'V~xFFD=:,\AM)G2(cz:W;q%_QrR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49816	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	798	OUT	GET /content/dam/mtb-web/images/spanish/es-language-icon.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
2024-03-14 00:56:51 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1884 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 16 Sep 2021 13:15:46 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:50 GMT ETag: "75c-5cc1c9cd66480" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ef73a156d5c211fdbb7e4231f2a0edca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: e-MVEsJikC60Q-L9cRMu1whLD1PEtaOyv-pjQj8V9cCVmTD1IBIGZg== Age: 1 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:51 UTC	1884	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 37 70 78 22 20 68 65 69 67 68 74 3d 22 34 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 37 20 34 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 70 61 6e 69 73 68 20 4c 61 6e 67 75 61 67 65 20 49 63 6f 6e 40 33 78 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 53 70 61 6e 69 73 68 2d 49 63 6f 6e 2d 4f 70 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="47px" height="46px" viewBox="0 0 47 46" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Spanish Language Icon@3x</title> <g id="Spanish-Icon-Opt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49819	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	819	OUT	GET /content/dam/mtb-web/images/personal-home-page/mom-daughter-couch-desktop.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
2024-03-14 00:56:51 UTC	788	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 99062 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 11 Mar 2021 18:06:24 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "182f6-5bd46a4374800" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d3a2886dcf7e47b1e56baf628c69dc24.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: eKC5pltzlkt4NAE2RXkZTxY5H3DWs9StQgHHYWmXxWCwDOWXSAyVPw== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:51 UTC	15596	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 8a 05 a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: e6 79 9f ea 97 cc ff 00 59 f4 f5 af 86 6d 7e 31 59 df f8 5e f1 97 52 92 3b f9 27 7b 88 ed 63 db b2 35 23 ee e0 63 8a f3 bf 05 fe d0 de 2c d0 7c 44 d6 71 6a 97 2d a5 f9 9f 35 b4 cd bc 26 3f bb 9e 95 0e 00 9a 67 e8 d4 32 49 2c d2 41 fd a8 cd 75 1c 7b da 38 db 3e 58 27 1f 31 07 8a ab fd a5 73 b9 97 ed 4c dd 7f 8a b0 7f 62 3f 11 0f 1e 78 5f 56 4b 8d 26 3d d6 f3 c8 ed 72 dc 79 aa cd 95 dd 9f d2 be 8e 6f 0b e9 9f f4 07 b6 66 ff 00 76 a3 95 8a 4e 29 d8 f0 f5 d5 2f 3f e7 e1 bf ef aa 93 fb 5a f7 77 fc 7c 35 7b 57 fc 22 7a 5f fd 02 6d 28 6f 02 e9 7e 5a bf f6 4d b6 d6 e9 b6 a6 c2 ba 3c 57 fb 5a fd 7e f5 c3 53 97 58 bd f9 bf d2 19 ab d7 bf e1 07 d2 25 6f f9 04 c6 bf f0 2a 6c 9e 03 d1 d5 b6 ff 00 66 af fc 05 a8 b1 37 47 91 b6 b5 78 cb bb ce fb df 4a 3f b7 2f 55 76 f9 Data Ascii: yYm~1Y^R;'{c5#c,\|Dqj-5&?g2I,Au{8>X'1sLb?x_VK&=ryofvN)/?Zw\|5{W"z_m(o~ZM<WZ~SX%o*lf7GxJ?/Uv
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 0d 94 b2 5c c3 6a b8 f3 56 4c fa f2 7f bb f9 56 c5 d7 85 43 59 eb 16 b1 79 7f d9 d6 38 c3 2b 60 ee 1d f3 5e 85 f0 f7 41 b7 8b fb 3e 2f 2f 6b 5c 46 1a 45 91 b2 7a 71 5e c6 1a 8c 6a 4f 96 3b 2e c7 8f 5a 53 b5 e4 7a 94 3a 3e a9 f0 be fa ce 5d 23 5a 6d 1e c2 48 a3 88 5c 6e d9 1b 46 47 de 56 00 a1 e7 b3 62 be be f8 63 f1 ba cd 7c 37 67 07 89 b5 6b 6b ab ff 00 30 44 2e 21 c6 f9 01 19 56 65 1e be d5 f1 8c 3e 24 d4 fc 3f 1f d8 ed 61 5b eb 84 6d be 5b 5c 98 1d 63 ff 00 a6 6d 82 32 7d f8 ae 9a c6 39 af 35 05 d4 6d 56 3b 76 9a 0d b2 47 34 11 b8 b6 24 67 e6 e7 6b 91 eb 5e ed 5c 3c 2b 2e 46 8f 39 37 17 74 7d f5 7d e3 8f 0f e9 76 ab 3d d6 a9 04 28 cb b8 6e ce 7f 2c 66 b9 18 7f 68 6f 0f 5c 6a df d9 c9 6b 7d 1d c2 c9 b0 8b 88 3c bf d3 24 d7 cb 3a 3f c6 2b 25 bc b7 d1 2e Data Ascii: \jVLVCYy8+`^A>//k\FEzq^jO;.ZSz:>]#ZmH\nFGVbc\|7gkk0D.!Ve>$?a[m[\cm2}95mV;vG4$gk^\<+.F97t}}v=(n,fho\jk}<$:?+%.
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 9d ad f2 fd d3 54 ed fc 2f e2 1d 52 4f dd 58 ce df ed 6d 22 b8 25 53 de f7 56 a6 e9 1b da b7 8d 0d c4 32 43 14 9b 91 bf d6 b7 42 c7 15 b5 e0 df 08 ea ff 00 15 75 08 d5 17 ec fa 45 ae 3c eb c9 3f d5 f0 3a 03 df f0 ab de 07 f8 1b 1a cc b7 9e 2f be fb 2d aa fc c6 c6 1e 64 93 1c f2 47 dd 15 e9 d7 9e 34 d3 ad ec e1 d2 34 d8 e3 b1 d3 63 f9 16 18 54 0e fc 74 ef eb 5a c2 9c a4 f9 aa 3b 0a 52 b6 91 dc 91 ae ad 3e 1b e8 f7 4d 65 24 6d f6 78 f6 5a f9 6d 90 d2 b7 00 f3 f9 d7 1b f0 8f 52 93 43 f1 e6 9f ab aa ae a5 3d bc 85 9a 39 39 46 de 31 cf 6e f5 87 f1 3b fe 27 9a b5 bd 9a 4d ba cf 4f 5f 99 55 73 ba 56 c6 72 38 e9 5d 07 c3 5f 10 78 57 4b bc b7 4d 5a 4b b8 d0 36 df dd a8 40 bf 97 35 7c ca 53 4b a1 1c bc b1 d7 76 7d c5 ab 5e 4b ab 68 3a 3d fb c7 b6 57 de b2 cd fd e2 Data Ascii: T/ROXm"%SV2CBuE<?:/-dG44cTtZ;R>Me$mxZmRC=99F1n;'MO_UsVr8]_xWKMZK6@5\|SKv}^Kh:=W
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 6d 2c ee 3f e7 e3 4f cd b3 ff 00 e3 98 1f 98 ae 03 5e fd 8e e2 46 69 7c 39 e2 6b cb 3c 7d db 6b ef de 26 7f de 15 f0 55 70 d3 bb 68 f9 fc 3e 3e 8c d2 8d 4d 19 c8 35 f0 da db 64 f9 7b 54 7f db 12 44 df 2b 7d de 8d 58 be 24 f8 31 f1 2f c1 bb a5 fb 1a ea d6 a9 9c 3d bb 1e 9f 86 6b 85 ba f1 95 e6 87 27 95 ab e9 b7 36 32 ab 6d 2d 34 67 1c 7b 8a f3 e4 e5 17 a9 f4 54 e8 42 b2 bc 1a 92 f2 3d 9a 1f 11 0f 31 59 e4 dd d2 b5 ad f5 a8 1a 3c ff 00 b5 fc 3e fd 2b c3 6d 7e 20 59 5d 2e f4 ba 8d be 6a e8 2c 7c 6d 6e d1 ae 26 da bb b6 ed 6f 5a 3d b3 8e e0 f0 29 ec 7a b5 c4 30 4a ac cd b7 e5 ff 00 c7 aa 46 d0 ec a4 d3 66 db ff 00 1f 1b 72 17 fa 9a e6 7c 3f ad 5b dc 32 bc b2 6e 46 e8 bb bd 2b be b3 fb 35 fd aa c4 8d b5 e6 f9 55 23 ea c4 d7 44 5c 6a 69 63 cd ab 19 d1 3e 67 f1 Data Ascii: m,?O^Fi\|9k<}k&Uph>>M5d{TD+}X$1/=k'62m-4g{TB=1Y<>+m~ Y].j,\|mn&oZ=)z0JFfr\|?[2nF+5U#D\jic>g
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: ae a6 6c a6 d2 22 c7 fb d6 f9 97 f8 b6 d3 64 9a 3b 58 f7 cb 26 d5 ff 00 6a ad 5d 42 16 f2 46 1f 75 7a 76 ae 0f c5 da b7 d8 ee 37 fd b1 5a 55 c3 ad bc 7c 96 ad 61 4d ca 45 2d 4d 8d 5b 5a 2b 1e e9 56 4b 7b 7f bc ce dc 71 ea 73 5e 7b a8 78 82 d2 ea eb 65 ac 2b 23 49 f2 89 24 5f 31 f8 e7 91 9c 0f 6a c3 d6 3c 41 a8 6b 37 52 4b 7b 24 8d 04 6b cc 71 af 98 39 e9 bb 9f f7 b9 ac d9 2d 65 bc 93 cb b7 bc 83 4f 92 35 3b 99 58 b9 5c 72 33 9f ca bd 3a 74 14 56 a7 6d 1a 12 a9 2b 24 69 37 8a 35 46 65 58 a1 92 18 b6 8d ae cc 23 46 20 63 d8 e3 3d 6b 1f 50 f8 8d a6 69 33 7d 9f 5e bc b9 86 5d a5 b6 c6 ac 47 4f ef f4 e2 a3 be f0 7e af a9 5a c3 02 ea 51 db ce b2 6e f3 a3 f9 ca e7 19 e0 72 7f 8a b1 e1 f8 7f e2 d8 ae 95 d7 50 b4 9a 04 5d f2 2c 92 0d 9b b3 9c 63 e9 5d 2a 31 5b 9f Data Ascii: l"d;X&j]BFuzv7ZU\|aME-M[Z+VK{qs^{xe+#I$_1j<Ak7RK{$kq9-eO5;X\r3:tVm+$i75FeX#F c=kPi3}^]GO~ZQnrP],c]*1[
2024-03-14 00:56:52 UTC	1546	IN	Data Raw: 00 17 f5 ab 73 28 fb 67 41 f7 5a 95 c6 95 ca 53 2a 2c 3b 16 36 dc fd 19 79 a8 da dc af 97 ba 36 db db 6f f1 1f 5a 9a 4f 96 4b 9c 71 8e 95 4d 58 ed 8c e4 e7 77 5a 35 1d 91 62 48 4c b1 f9 4f 1c 8a bd b6 af 7a 6f d9 5f cb da bf 2e de aa cb 8d d5 2b 4a eb 6f 39 0e c0 8e 87 3d 29 2d 64 67 8d 4b 31 63 f3 72 4d 17 02 19 21 75 66 dd 22 b2 ed e1 5b aa e2 b9 fd 42 19 25 93 6e ef 2f 6a 9c 3f 5f d2 bb 04 50 d1 f2 33 d6 b0 f5 2f 95 b0 38 1b 7a 7e 34 c0 e0 ef 16 f1 64 db b7 e5 5d df 33 56 4c cb e6 ee df 1e d6 dd f7 b6 fd ef ca ba a6 62 cc a0 9c 8d c7 8f c6 b2 db f7 97 18 7f 98 6d e8 dc d0 d5 ce 84 f5 39 59 ac de 56 55 f2 59 95 bf 0a a7 75 66 91 48 a8 b0 b4 6c fd 55 b0 7f 95 6c 5d 7f c7 d4 ab fc 23 a2 f6 15 9b a8 31 59 b8 38 f9 5a b9 a5 14 75 53 93 30 75 48 46 ef 97 6c Data Ascii: s(gAZS*,;6y6oZOKqMXwZ5bHLOzo_.+Jo9=)-dgK1crM!uf"[B%n/j?_P3/8z~4d]3VLbm9YVUYufHlUl]#1Y8ZuS0uHFl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49817	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	828	OUT	GET /content/dam/mtb-web/images/shareholder-letter/2024-shareholder-letter-art-desktop.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
2024-03-14 00:56:51 UTC	787	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 47067 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 26 Feb 2024 19:37:01 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "b7db-6124e08951140" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a9a7890bd69fb04b587cd51baf217b1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 5E4KuaNw96vI6loS0FHxdUNR0JTxkw0IP0UG8H7Y7UKFCp63-iC-_A== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:51 UTC	15990	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 96 00 96 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-03-14 00:56:51 UTC	16384	IN	Data Raw: 05 17 72 f3 b7 4a 41 78 88 1b 24 60 7b d5 09 6d cd 40 cc 8e 07 6a 08 a6 12 a5 52 2c 6e c5 c5 38 4a 11 b6 e4 d2 5b 2a 5a 56 95 a6 46 c4 11 46 db de a1 96 4a 5e 90 67 06 37 a1 dd be 2b 52 94 da 01 04 c0 d5 52 d8 63 92 52 75 46 6a ac 1a 56 05 b3 6a 00 7f 2c 53 2b a5 db 11 1f 65 1f 49 a3 d5 70 e0 c2 53 ea 62 8f 61 82 eb 29 71 4b 3a 94 27 d8 51 64 c8 b1 a5 72 8a 30 11 d1 ad 09 82 ca 81 ff 00 59 a2 ed ba 55 9b 20 a7 ec ad 39 26 41 5e 4d 68 14 90 a5 24 26 48 c1 22 9f 42 88 f9 71 34 0a 9e 2c 5e 22 80 91 d2 ad 09 d5 e0 37 9e 62 8a 45 a5 b3 68 4a 42 10 23 98 ab 8a 4f 09 11 4c 10 b5 aa 01 4c d0 a2 6d 88 5a 2d da 0c a5 29 42 4a 63 f3 a0 94 84 66 00 29 e2 ac d0 e2 53 a1 6f 04 a7 b0 35 4a 97 6e de 24 af b6 71 45 02 11 ae 9d 91 d0 99 30 00 33 48 b2 a2 92 43 47 4f 7a 5e Data Ascii: rJAx$`{m@jR,n8J[*ZVFFJ^g7+RRcRuFjVj,S+eIpSba)qK:'Qdr0YU 9&A^Mh$&H"Bq4,^"7bEhJB#OLLmZ-)BJcf)So5Jn$qE03HCGOz^
2024-03-14 00:56:52 UTC	14693	IN	Data Raw: 94 4c 76 f6 ae 76 3d 16 28 bd d5 67 03 2b a9 b5 f9 24 f3 ce bc 3e f9 d5 ac ff 00 d4 6a 91 cd 4c a4 01 9d fb 4d 43 13 24 e2 b5 28 d7 08 aa c6 c8 e2 4d 3a 48 e4 0c d3 1c ff 00 4a 6d 8e f8 a2 41 c9 d3 18 cf 1e d4 c1 5e 6c 64 0a 72 99 8e 45 21 91 b0 ed ed 40 83 e3 62 71 4e ac 1d 32 0d 2d 58 e3 02 29 94 40 fe b4 49 62 27 00 d4 41 13 b1 fa 7b 53 ac 81 1a 73 ef 51 e3 06 2a 00 72 73 be d4 b7 1c 54 15 52 06 00 8a 34 01 18 1c 53 93 80 62 29 49 33 02 6a 7e 0b aa 00 68 20 77 a9 44 b4 88 01 df 9a 6e 45 5e 9b 55 1f 99 40 62 a6 9b 64 63 52 89 a9 71 5d b1 1c d0 30 df 1b 71 4b bc 51 81 b6 81 c2 27 bc d3 14 84 4c 25 31 de a6 f8 f8 42 fa 80 9a 4f 00 9a 7f 09 c5 64 a4 d1 24 c4 82 7f 2a 65 11 3d bd cd 2b 95 93 7b 00 92 2a 63 d2 a2 78 c9 f5 a9 02 02 76 cd 29 a4 7f 50 46 f4 84 Data Ascii: Lvv=(g+$>jLMC$(M:HJmA^ldrE!@bqN2-X)@Ib'A{SsQrsTR4Sb)I3j~h wDnE^U@bdcRq]0qKQ'L%1BOd$e=+{*cxv)PF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49818	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	819	OUT	GET /content/dam/mtb-web/images/personal-home-page/convenience-section-image1.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
2024-03-14 00:56:52 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 229468 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 16 Apr 2020 22:06:22 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "3805c-5a36fa49cf380" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fdc88b576635a6d1858343ad162c44fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: LVn8sJRHTYqEEJhzAppCFgR0TjiWXnmgATb2C9nREM9H3f8sGiKF6Q== Age: 1 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 5c 00 00 01 b9 08 06 00 00 00 c2 9f 8c 1d 00 00 19 8b 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 35 30 2c 20 32 30 31 39 2f 31 30 2f 30 31 2d 31 38 3a 30 33 3a 31 36 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDR\iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: b7 1a 01 ee f0 2f 22 cb d5 03 d8 3e 20 37 40 97 57 d8 eb c1 e9 ce 2f 2e 97 9b 74 87 ee 19 f5 b7 ab d7 af 11 4b 79 43 5f 0c 2e fb 77 d9 64 73 43 cd 4d b2 2e 80 6c 5b 72 bb e1 9c 5c 10 05 20 d5 bc d0 48 82 ca a5 f8 80 41 0a a2 5e ca 70 5b ca 62 dd 80 03 83 55 69 73 fc fa 84 b0 84 5a 16 72 b3 07 00 b4 dc af 3a c1 a5 46 82 f7 57 aa 86 69 04 a1 27 32 db 14 d4 e5 ea 05 66 e4 d0 0d dc 4e f6 e6 a6 7b 8d cd fd c6 ef de b9 b3 a6 02 45 fa 7e 26 85 0e eb 24 57 02 cd d4 4e 4a e7 75 4f 42 b3 4c 6a 23 af 5b c7 1f 83 19 a8 01 f7 31 f8 12 18 c2 a4 07 a4 4a 6f fc e8 67 3e b3 d8 6d 0e 7f 89 2f ee 4f c1 11 36 d4 28 d0 2b 97 c0 a4 05 99 a6 b1 bb e8 9e f6 b5 f4 82 53 bc 73 f3 26 5c 2b 4e 67 00 29 ad cd e6 16 d0 95 d5 a4 96 25 ff 0e 4b f9 1d b4 12 da e8 c5 aa 69 a0 1f 5c 39 d2 Data Ascii: /"> 7@W/.tKyC_.wdsCM.l[r\ HA^p[bUisZr:FWi'2fN{E~&$WNJuOBLj#[1Jog>m/O6(+Ss&\+Ng)%Ki\9
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 87 0d 59 31 af 7f 01 cf ce d2 15 63 9b 4f 0b 57 82 82 ca 0e c7 7a cb 5d 79 66 d9 c2 c2 62 3c a0 bd 3e e2 06 c0 26 dc 2c 22 bb 9d 5b 58 e0 e1 e5 e4 58 bc 8b f9 f8 0b 40 f1 70 c3 b5 ed 61 49 a5 4f 00 9c a3 00 be a5 ab c2 00 0a 38 5b 59 e9 d8 b4 81 93 f5 c4 5d eb 84 7b 46 41 56 60 3b 04 42 1f 49 01 b8 d4 2a 60 b4 82 6d f4 52 d2 23 9d 36 e9 c8 0b 0e 59 94 89 d1 08 b4 d0 78 9d 24 ce 35 44 09 82 2e 43 95 9b 0f 15 2f 05 b6 c1 1e 9a 76 c7 5f ae be 6c a3 6c 3f ba a4 0a f0 26 c8 85 48 02 79 2d 63 36 df e5 3d ff 23 ee 0b 41 70 77 98 c0 59 8c 34 5e 67 96 03 f0 35 9b 96 a3 57 0f 99 ce e8 d7 17 13 66 bc 18 2e 28 db 6d 41 d7 ab 9a b7 df e3 28 f6 3e 1b 67 7d 01 1a 42 1c 97 c3 dc a9 bb ab 58 20 36 31 19 e7 1e df 5f 58 ef 51 d7 be 3d 8a de 4d 3c 8f 2d d2 78 c2 b9 73 ae 1d Data Ascii: Y1cOWz]yfb<>&,"[XX@paIO8[Y]{FAV`;BI*`mR#6Yx$5D.C/v_ll?&Hy-c6=#ApwY4^g5Wf.(mA(>g}BX 61_XQ=M<-xs
2024-03-14 00:56:52 UTC	11610	IN	Data Raw: 68 24 6f 37 08 d2 b2 8c 32 4d 70 6a ef 1f 22 72 d8 26 1f cc a7 b4 c3 2d 31 cd 9f 01 5c e8 c9 c1 1e c9 33 48 2a dd 21 9b 62 03 b4 00 94 a0 29 9b 12 8c 42 56 8a 28 42 90 0e 10 20 2f bd a5 02 b4 01 49 87 08 6d 65 05 69 d5 f5 4e 93 f5 c8 92 31 86 20 21 ee 71 4c 5e 9a 5e 09 ae b1 3c 39 d3 67 49 6e bc 57 d6 cb a6 00 22 94 59 0e 3a 2a a1 00 d9 10 a9 70 2c a0 2b 02 69 00 4c c6 25 50 86 da 47 8c d0 e1 1a 19 f2 1c 3b b2 29 8f f0 d8 0b 85 a0 75 f5 7d e4 23 90 92 3e ea 44 3e 5a 51 58 07 1b 22 90 80 3c 3e 9c 59 70 ec 20 e0 c0 a0 89 9a 36 cc 06 92 e9 c2 90 67 4a 4d c0 1c b1 01 4f d9 7e ce 36 4a ac 2e 11 ef 01 20 0d 70 63 28 47 01 df 77 99 b6 5f 21 74 26 01 6b 46 75 84 34 02 b4 83 aa cb a6 f3 ee 4c 5c 40 54 31 00 db c1 4f d1 8c ad 26 c3 8d 32 2a 36 71 e0 e0 b7 50 2b 23 Data Ascii: h$o72Mpj"r&-1\3H!b)BV(B /ImeiN1 !qL^^<9gInW"Y:p,+iL%PG;)u}#>D>ZQX"<>Yp 6gJMO~6J. pc(Gw_!t&kFu4L\@T1O&2*6qP+#
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 58 ad 78 1f 99 ed 1e 0e 09 48 a8 01 d9 85 b4 78 ed 62 aa 23 92 30 ba 59 06 65 14 25 c0 8c 02 31 98 c8 b4 c3 3d d9 d6 03 f4 c2 12 01 b0 95 19 83 58 c4 4a 18 a4 3b 88 33 ee 6c 6e 07 41 97 65 d6 10 65 28 b7 b5 3e 8a 0e 8e db 94 15 57 82 0e e5 d4 a2 02 87 6b 16 b5 44 6c 23 93 26 df 7d 57 15 06 60 c3 aa 02 20 b4 de ae aa 2c 43 d5 a9 c2 cd 78 07 99 f3 02 19 3b 70 f1 a4 83 9a 47 0e 88 86 5b d4 35 5b c0 36 0c 65 0c 0a 28 c3 0c 09 49 85 78 3f e2 14 be a3 d1 c6 ac 87 cf 08 c8 56 c3 9f 43 16 90 9d 19 0d e5 8f a8 64 a4 e1 3d 8b 73 8d fa 17 5e 7c f6 d9 8f 63 1e 66 f1 dd 2c aa 5b 71 7f da f1 59 69 e2 e1 c2 f3 f9 79 be cf f3 ca cf ef b7 7f 94 b4 f7 cb e7 9f e4 3d e7 42 d3 ed c9 b6 c0 cf fc 80 86 37 4b 9d c1 c6 f0 5d c3 f2 85 62 eb c3 f7 67 49 ed ec b1 dc 0c 1d b2 3c a3 Data Ascii: XxHxb#0Ye%1=XJ;3lnAee(>WkDl#&}W` ,Cx;pG[5[6e(Ix?VCd=s^\|cf,[qYiy=B7K]bgI<
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 32 d5 b1 b1 7e 8b 04 00 e1 a7 b9 7b ed 73 cf 3e 7b f1 f3 4f 3d f5 f8 97 3e f9 c9 4f 3e f3 f1 8f 7f fc da 1e 00 d8 aa b0 6a da d5 54 ed 7a df 6d 3f bb 99 6b 7c 77 fb b6 61 76 0a 53 f3 52 dd db df d5 ec db 47 3f f5 69 9b ab 5d 7d bf c0 ad 82 4c f5 f0 52 bf f7 92 5e af 9f 9d be ab 7d bf 77 db 6e 37 b3 6e 77 72 b7 4e 3a df f7 7d df 37 fd 9f ff f8 8f be f9 c0 fe d9 f7 4c 8d 4d be 1e 95 4c 67 d8 59 1e 46 fa 00 02 05 5e 2b 3a 6c 05 56 29 15 b5 7a 39 d6 a5 a6 1c 70 6e 9c ad 03 14 76 70 a9 9a c1 41 80 33 80 82 cc 2d 47 4c 11 2b 68 46 a1 4c 87 11 86 77 60 2c 71 16 df 0d 2f 97 94 39 28 01 b9 a5 2c ee 28 bc 3a a5 1d 18 47 00 12 0a a9 19 a8 0f ff fb ff bb b9 7e fe 89 e6 f4 fd 2f cf 01 09 45 c2 14 0b 4a 4b 07 24 ca 81 02 92 4e 18 c1 a7 88 5c 69 91 a2 05 78 f4 7f fd e2 Data Ascii: 2~{s>{O=>O>jTzm?k\|wavSRG?i]}LR^}wn7nwrN:}7LMLgYF^+:lV)z9pnvpA3-GL+hFLw`,q/9(,(:G~/EJK$N\ix
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: de d5 b4 6f c2 40 da 14 1d ec 52 ac 2c 74 27 e4 06 fb aa cc ec 02 72 29 43 40 6c 72 e8 15 b9 ad 18 f7 f1 9d 8f 56 1f 7f f8 61 20 b3 55 f8 e0 8d 68 d4 d2 96 f5 e1 e3 68 4e 09 53 c8 ca 12 33 c5 ab 97 01 a1 81 b8 94 87 10 00 cb 90 95 1d fe a4 a0 17 60 31 6d db 86 9c bb 19 13 f8 c7 a1 2d 94 c2 d0 91 f5 d8 7f c0 ab ea 06 da 8b b2 d3 87 c2 06 f0 c2 7d e3 de 27 27 13 82 ea 9c 41 41 d9 03 7b f5 21 70 af b8 a1 39 de f2 4f 6c db ec 39 b1 5a fc 49 16 28 2a e1 0e 75 1f b0 ab 5d 0e a1 18 a1 93 19 28 54 09 f2 d5 33 bc 1d e7 c8 1b da 93 5d 80 3f 32 52 a8 42 bd d1 97 81 45 d1 4f 58 30 5e b7 03 33 be 18 4b 9c 82 eb 79 ca e3 64 40 b6 70 5b fd f0 28 ba e0 47 b1 5f a0 de 22 ef df ff de 0f de fa fd 77 df 79 e7 f1 54 ea a7 ff d3 5b e6 f8 ac cf f5 39 37 7c d6 f7 f5 b9 f5 e7 c5 Data Ascii: o@R,t'r)C@lrVa UhhNS3`1m-}''AA{!p9Ol9ZI(*u](T3]?2RBEOX0^3Kyd@p[(G_"wyT[97\|
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: e3 9a 01 b8 5e 5b 79 8b a5 3a c2 56 7d 25 93 1b dc 1a f0 ac 4f 8c dc ab 3a f6 53 fe 22 e8 01 6f ef 33 12 2f 76 8a cb dc 3f 47 ef c3 fc 0e 65 2a cb bb 78 1c 40 8b 1b cd 5b 40 63 b1 6f 7b 88 f9 bd 57 fc 0d 98 ec a4 14 84 16 0c 3d 53 80 77 3e 7e b0 7a e7 87 ef 0c 9f 5c bb da 02 d4 ad 79 ab 5d 33 78 d4 7b 28 1f ef 97 3a e6 7c 84 1f 30 f5 e1 e0 12 47 dd fa 20 17 b8 93 14 e3 62 a9 55 cf 1a 06 08 01 9f f3 52 b0 78 3f eb 41 2f 3b 2b e0 53 31 59 56 dd ec 49 57 19 9e 1f 77 b7 36 89 ab 9e 36 f3 0b 28 8a 1b 03 aa a5 fe 95 1b 47 2d 8a a3 42 7a 17 e0 67 f9 8f 72 e9 3e ef 41 a4 99 62 5b 2b e4 21 f3 d8 d0 95 3c 30 42 58 8d 66 ef f1 42 4c 95 65 71 03 34 83 b3 68 c4 9a 1f da 57 fe cc 36 1c be 47 91 85 17 f1 93 45 6e 0c ea 01 70 56 f4 2b ed d9 a6 3c ef c6 53 da 67 f1 27 f4 Data Ascii: ^[y:V}%O:S"o3/v?Ge*x@[@co{W=Sw>~z\y]3x{(:\|0G bURx?A/;+S1YVIWw66(G-Bzgr>Ab[+!<0BXfBLeq4hW6GEnpV+<Sg'
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 8b cd 1e 65 e9 9d aa e6 83 fe 1d cd c4 c2 f6 fb 38 84 d9 8b 68 28 5e 4d 05 dc c8 7e 77 3c a2 b1 d7 b8 10 34 ce 2d 24 f0 44 92 c1 56 99 55 9c 75 08 c2 04 c9 27 29 9b 4b f3 d5 e8 9a 93 88 8c f6 02 70 08 4e 8a 58 af ad 63 21 13 bf 3a 64 fc 15 48 7a f6 65 c8 53 73 1b 88 07 9a 3d db 67 36 53 73 e9 ec dc e6 9c b9 eb af c9 f3 cf 7a 60 a4 e0 c0 f1 8c 54 f7 04 08 af 55 f7 36 87 75 71 ce cc d9 3e cf b5 da b0 43 f0 a3 18 4c f8 36 cf 20 40 ab 8c ae da 6d 5d 1e 77 cf 06 8e 50 03 b6 24 df 55 45 ad ba bc 13 fe 55 ff 98 91 84 25 b6 90 a3 89 6d 05 43 13 41 d0 f8 0f 22 20 48 b9 ce d5 c2 ea 1d a8 51 f3 47 88 58 f5 b1 af bd 62 22 3e 1a 88 2d 98 48 79 92 68 56 ce 27 9a c2 4a 7d 26 61 4f d1 a3 be 3f 41 24 62 ee 87 0b 4b 3b 77 36 0f 3b a1 c1 70 d3 8a c6 36 dc fc db da 89 6d 97 Data Ascii: e8h(^M~w<4-$DVUu')KpNXc!:dHzeSs=g6Ssz`TU6uq>CL6 @m]wP$UEU%mCA" HQGXb">-HyhV'J}&aO?A$bK;w6;p6m
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: f6 6f 46 48 7f f2 e3 9f 47 0c 72 b8 34 46 51 10 52 80 4f 9a ea e6 61 e2 55 5b c7 49 63 ce d1 f5 f4 c1 dd 96 98 b4 da 4f 10 32 44 b9 b9 12 06 87 c0 30 ca af 92 4b 92 b8 9a 78 3e 09 db 44 d1 be c0 39 e6 78 a8 0a 5c 14 7a c4 0f b3 9e 30 b5 cc 22 88 ad 70 c8 51 f6 67 a9 93 e0 08 33 e1 10 93 1d d8 98 3d f6 1a 37 26 8e 58 1a 30 42 33 42 0e 78 8c 78 99 2b 4e 47 5a 9f 63 92 00 f2 23 20 a0 a3 99 34 07 63 4f 8d f8 11 48 76 22 f0 3b e1 89 8a 65 9e 53 93 e0 6e 71 b2 b4 a9 93 69 87 b6 dc e1 c7 20 04 21 90 36 e1 14 fa e6 3c 2d 0c 51 67 de 3b 0a d7 9b d7 94 93 11 b8 e0 c2 bd 4c 0f 1f 17 36 76 e3 d3 ab ad ef c9 e5 e2 2b af 4c 5d de cb 1f 5f ae e4 e2 89 aa e9 95 06 cc 66 9b 74 4b b0 90 0d f7 38 ff 89 ec 43 a9 c4 d6 90 a6 4c 93 3c 29 1a 43 76 5c 73 4d 20 22 d4 11 8e 26 c4 Data Ascii: oFHGr4FQROaU[IcO2D0Kx>D9x\z0"pQg3=7&X0B3Bxx+NGZc# 4cOHv";eSnqi !6<-Qg;L6v+L]_ftK8CL<)Cv\sM "&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49820	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	568	OUT	GET /utag/mtbank/main/prod/utag.215.js?utv=ut4.51.202304242124 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:52 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3799 Connection: close Date: Thu, 14 Mar 2024 00:56:53 GMT Last-Modified: Wed, 14 Feb 2024 23:54:25 GMT ETag: "20cf1ded6fd43147dd0d48034ce0dc90" x-amz-server-side-encryption: AES256 x-amz-version-id: kt6vtQCJHSuWcQ3wguypxVMHLeVC1N_C Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 3ce8b408dfcacf1e62d9fe4b346a6a62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: e5ynANi8kxUGgAHhMJ98beHZVM4Egw19PJhRCL1SKCESAUHIHO7RNg== Cache-Control: max-age=1296000
2024-03-14 00:56:52 UTC	3799	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 32 31 35 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 33 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 7d 3b 75 2e 6d 61 70 3d 7b 22 6d 6e 74 6e 5f 63 6f 6e 76 22 3a 22 6f 72 64 65 72 5f 69 64 22 7d 3b 75 2e 65 78 74 65 6e 64 3d 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 69 66 28 31 Data Ascii: //tealium universal tag - utag.215 ut4.0.202402142353, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;u.ev={"view":1};u.map={"mntn_conv":"order_id"};u.extend=[function(a,b,c,d,e,f,g){if(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49822	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	809	OUT	GET /content/dam/mtb-web/images/diversity-inclusion/50-50-volunteer.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
2024-03-14 00:56:52 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 93613 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 06 Dec 2023 20:53:33 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "16dad-60bdd8b4cad40" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 62c7f4f128c40af6818c2f8f919f1c18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: t98liLwNgj5KiKyAMf6sBi0F-_VEj-sKrR0Ed7npNAVuuZeYySYM_Q== Age: 1 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 45 00 00 ff e1 03 1e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: ExifII*DuckyEhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RD
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 56 7b aa fe 18 ad dc 22 68 6b 35 0d d1 17 42 a7 4f 3a 65 28 cb ca 32 31 6f ee e4 83 df b3 87 4f 88 ae 86 7d 27 26 4b 2c da 6c 71 6c c5 7d 1f 60 89 cd 68 c9 e4 1a c0 ad 24 9f 44 ad d5 13 c2 b1 59 66 64 6e aa bc 22 57 67 e3 59 6b de 39 0e e1 95 8d 73 70 d8 e7 4d 2c a0 0f 4f 13 13 c1 0b ae 80 55 c6 59 06 d8 a4 61 59 2b d3 35 ab 4c a3 9d c5 cd d3 a5 70 2b ab 41 78 04 af 95 6e af 54 64 9e a6 b3 f4 f6 d0 5d 76 1e 7b 9b 1a e8 1b 0b c1 95 14 82 ac 3f c6 b3 d8 b0 cd 75 fc a5 16 d2 26 db df 5a bf 9a 35 b2 88 f4 5d 01 04 a8 d2 83 77 a4 ac 03 fb d6 d1 b0 64 9f 77 13 96 ca e1 a1 d1 1e bc 86 88 47 d9 5a 28 66 7b 91 56 12 10 78 1f cc 37 4f f8 d6 bc e4 c9 81 f6 7a 82 78 55 a5 82 31 99 5a a6 a3 28 f9 08 00 fd 95 44 19 92 a1 08 ed 1c a4 0d fd f5 08 3c 47 b6 e4 a8 41 e8 cd Data Ascii: V{"hk5BO:e(21oO}'&K,lql}`h$DYfdn"WgYk9spM,OUYaY+5Lp+AxnTd]v{?u&Z5]wdwGZ(f{Vx7OzxU1Z(D<GA
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: c2 c2 5c ae 4a f7 b7 1b 7d 75 05 9d bd bb a7 b5 68 7c 81 85 e0 34 06 b9 aa 02 12 e3 5d 0a 5e 83 de 70 62 5d cb 82 b7 fe f4 2d a7 b4 95 97 12 31 1f 1d db 1e d0 08 40 0b 4c 80 03 a7 85 64 e5 a6 87 71 d2 92 d4 d4 7e 9e f6 fe 3f b7 b0 2d f7 94 c3 c8 bd c4 85 00 82 4e 80 2f 4a e2 dd 89 64 ec d1 6e d5 a0 52 c3 18 ec e6 73 fb a5 b5 bb 5b 6b 10 01 9e e4 41 a4 a1 6a 91 c8 0e a2 95 ed e0 7b b1 30 4f d5 ee d0 93 3f 63 69 63 63 10 74 a2 40 f7 48 00 d0 06 b8 26 e3 c6 9f 55 fb 0c 57 d0 a6 56 f0 df 42 70 b6 b6 4d 7e 5d 9e ec e4 12 42 02 8a 74 d8 9f 0a 73 e5 e0 52 e1 02 ae fe 8c 76 b9 b9 d5 cd 8f 50 38 14 09 a7 81 22 83 f5 8c 3f d1 92 cf d3 4c 4e 3a cd ec b6 78 ba 0a 82 37 00 00 d1 77 24 d5 2e 53 65 be 1a 33 4e e0 ec 18 2e 1e e9 23 88 40 34 56 34 04 3a 1f 02 2b 44 6f 6c Data Ascii: \J}uh\|4]^pb]-1@Ldq~?-N/JdnRs[kAj{0O?cicct@H&UWVBpM~]BtsRvP8"?LN:x7w$.Se3N.#@4V4:+Dol
2024-03-14 00:56:52 UTC	5214	IN	Data Raw: 58 5c 3a 3b 88 e5 30 4b 18 04 96 bb d4 41 73 48 23 f4 d5 e5 33 9d ec dd c5 59 5f cb fa 8d 64 f3 39 87 66 a2 cc 64 63 2c bc 08 65 70 1c 7d c0 36 d4 34 55 6d 42 2f e4 bf 7d 4a 46 bd 88 ce 62 2f 31 b6 b9 9c 6c 51 dc e6 9c e4 74 01 c3 98 00 90 81 ad 53 d3 c2 b3 c9 60 f6 3c 6e 5d 32 86 53 d7 f8 81 fe a7 76 bd c7 75 da 5d e3 dd 19 8a e6 48 c5 d5 a9 3c b6 68 e1 c4 22 6a a4 d6 2e 4a 7e d4 91 d2 55 29 5d 19 1e 44 c8 f6 f6 52 57 87 39 c7 92 f0 73 48 20 04 5d 4f dd 5e 3e d9 ed 96 0e b4 75 64 ec 2e 22 68 80 8a 50 5c 5a 0e a4 1d 75 15 8e 4f 2f 23 54 34 2c b1 58 da b4 b0 48 c0 3c 54 27 8d 5d 7b 9b 17 96 98 e6 4d e6 d9 f6 11 5a 35 c1 8f 94 99 24 68 50 d1 c1 da 91 5e bb b4 5f 94 78 ce f9 c6 94 96 58 43 21 79 36 59 88 e7 39 b8 78 b5 88 6c 65 70 d0 10 89 a6 be 3d 2b be a5 Data Ascii: X\:;0KAsH#3Y_d9fdc,ep}64UmB/}JFb/1lQtS`<n]2Svu]H<h"j.J~U)]DRW9sH ]O^>ud."hP\ZuO/#T4,XH<T']{MZ5$hP^_xXC!y6Y9xlep=+
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 18 0e 2e e4 17 60 c0 9f 9b c6 86 30 c9 b3 9d de 12 8e 17 8f b8 cc e4 ed fb 96 80 1d 1a 01 b8 2d f8 f8 8a 72 a8 e2 3e eb bb c7 f4 23 7f e3 a3 77 35 7a 95 51 53 db 29 f3 b2 3c cc 5c 10 ff 00 f8 b1 f6 a9 fc 6a b6 0a 97 21 b1 f6 fc 9c 3a 23 9e 7c 00 d3 f7 d5 8b 72 6f cc 93 1c 93 4e 38 c5 6e 58 36 e4 7c 6a d0 99 24 ba b2 7d b6 32 54 0e 2f 68 71 dd 3d 5f 81 14 58 33 59 7c 56 84 fb fc 25 cd e6 1e e6 dd 92 f2 77 03 e9 73 41 04 a8 d8 6b e3 54 d1 38 bc 95 0b d3 30 d9 22 7c 2e f6 de de 13 c6 4b 48 d5 74 ea 41 a5 4c fa 3d 36 6f 8e 4f 4c 7f b3 b6 b9 99 fc c9 05 47 b4 ff 00 df 15 71 3b a3 3b 9c 1c e0 d1 be bb dd c7 6b 80 b9 b8 99 a4 b2 29 da a4 e9 ba 0d eb 8d c1 4d db 93 6f 39 ff 00 6f 05 53 fd b7 c4 61 ef 9e eb 64 c0 06 4b 0b a5 69 71 23 42 f8 47 5f 85 74 b9 d2 4e 38 Data Ascii: .`0-r>#w5zQS)<\j!:#\|roN8nX6\|j$}2T/hq=_X3Y\|V%wsAkT80"\|.KHtAL=6oOLGq;;k)Mo9oSadKiq#BG_tN8
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 5d a5 71 33 b0 d9 5b 8b 36 68 e7 40 43 1c d2 46 a0 0e 4d 3d 4d 4c b6 35 40 d2 31 3f 5e 3e a3 5a c4 d7 cd 24 37 b1 22 a4 8c 42 00 3b 9e 1c 6a d6 9e 62 dd 19 7d 03 ac ff 00 71 3d d0 5b fd 7c 34 0e 3e 31 b5 e7 f7 c8 2a 9e be 63 15 78 f2 04 65 ff 00 dc 2e 76 46 3c 33 11 1c 68 0f 20 5a ef 0f ff 00 c8 68 1c 4b 8d db 4c e3 3d f5 3f bc b2 b6 b2 4e d9 23 b5 81 ab e9 89 a0 bb 63 a7 ac 3a a4 69 4c 29 f2 9b 2a 58 ac 34 df 51 6e ae 2c 25 cc 36 2c cf 15 b7 86 e9 dc 58 f7 10 00 0d e0 c7 78 d6 ca 53 4c c3 34 a6 ba 99 f7 76 76 57 75 f6 65 cb 6d 7b 86 c5 d6 8a e4 8e 46 82 62 70 21 54 13 ad 76 6a ba 38 39 16 f1 70 ca c9 73 bd 20 9d 5d a0 05 14 93 b2 25 39 cf e0 60 9f 5d 45 b7 91 04 a2 80 50 fc 6a e3 2f 88 59 c2 d0 e2 eb ea 1a 2e c7 a8 f2 a1 94 13 d4 ad f9 2c 5d ad da 59 3e Data Ascii: ]q3[6h@CFM=ML5@1?^>Z$7"B;jb}q=[\|4>1cxe.vF<3h ZhKL=?N#c:iL)X4Qn,%6,XxSL4vvWuem{Fbp!Tvj89ps ]%9`]EPj/Y.,]Y>
2024-03-14 00:56:52 UTC	6479	IN	Data Raw: aa 70 cc 4e 4c 9f c0 ba f7 3e 5b dc ee 91 8b c4 b5 b7 72 5a 01 13 c4 80 82 5c 43 42 82 ad d3 4a ac 60 91 cb 17 9a 9e 6c 2e 1e da d8 45 f3 17 7e e1 b8 9c 04 2d 68 79 2f e1 a9 07 aa 51 a8 36 c3 c0 4d bd e3 81 cc 63 e3 b1 6d c1 b2 bf 7b 3d a9 20 95 a7 88 51 c7 4e 01 d5 53 93 ce 05 99 4f d4 8f 6e e2 d4 3d b7 02 66 db bb 84 71 05 40 48 fc c1 40 ea 2b a9 c1 93 46 ba fa 19 14 8e 2c 56 91 a6 bb f9 d7 69 3c 91 a2 30 70 24 8e 2a 2a c8 34 f0 01 d0 25 42 08 3a 1f 33 d6 af 05 36 71 c4 a2 55 11 31 a7 ea 4a f8 54 c9 68 4c 40 21 d5 4f 85 42 d8 a2 34 a8 51 f3 74 a8 41 49 50 82 98 8b 50 82 c9 0b a5 4c 90 52 1e 9f 0a 19 10 e9 fc a4 95 71 1a b4 14 d4 aa 27 dd 47 9c 56 ca 37 ee c7 b7 8a df 03 0e 32 f0 f1 67 07 49 1b 4e bc 9e 5c 40 1a 2f 43 5e 6b 91 2f 56 41 64 c7 db 58 5e 4b Data Ascii: pNL>[rZ\CBJ`l.E~-hy/Q6Mcm{= QNSOn=fq@H@+F,Vi<0p$**4%B:36qU1JThL@!OB4QtAIPPLRq'GV72gIN\@/C^k/VAdX^K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49821	63.140.39.15	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:51 UTC	1106	OUT	GET /m2/mtb/mbox/json?mbox=target-global-mbox&mboxSession=982bceee196b4711901768c5d35728f4&mboxPC=&mboxPage=95c765057f464bf290004888157cb13b&mboxRid=46f004b8035b4814899fcb244e9933cb&mboxVersion=1.8.3&mboxCount=1&mboxTime=1710381408801&mboxHost=www3.mtb.com&mboxURL=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&mboxReferrer=&browserHeight=907&browserWidth=1280&browserTimeOffset=60&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_property=f7ba4290-5c00-8608-2ad1-5fc4576548bf&zipCodeCookie=&geoRegionCookie=&entity.categoryId=home-page&user.categoryId=home-page&loginClickedCookie=&mbox3rdPartyId= HTTP/1.1 Host: mtb.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:52 UTC	587	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:56:52 GMT content-type: application/json;charset=UTF-8 content-length: 11825 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding x-request-id: 46f004b8035b4814899fcb244e9933cb pragma: no-cache timing-allow-origin: * referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-03-14 00:56:52 UTC	11825	IN	Data Raw: 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 39 38 32 62 63 65 65 65 31 39 36 62 34 37 31 31 39 30 31 37 36 38 63 35 64 33 35 37 32 38 66 34 22 2c 22 74 6e 74 49 64 22 3a 22 39 38 32 62 63 65 65 65 31 39 36 62 34 37 31 31 39 30 31 37 36 38 63 35 64 33 35 37 32 38 66 34 2e 33 34 5f 30 22 2c 22 6f 66 66 65 72 73 22 3a 5b 7b 22 72 65 73 70 6f 6e 73 65 54 6f 6b 65 6e 73 22 3a 7b 22 65 78 70 65 72 69 65 6e 63 65 2e 69 64 22 3a 22 30 22 2c 22 61 63 74 69 76 69 74 79 2e 6e 61 6d 65 22 3a 22 43 6f 6d 6d 65 72 63 69 61 6c 20 53 63 72 69 70 74 22 2c 22 67 65 6f 2e 63 69 74 79 22 3a 22 6e 65 77 20 79 6f 72 6b 22 2c 22 61 63 74 69 76 69 74 79 2e 69 64 22 3a 22 31 33 37 34 36 30 22 2c 22 67 65 6f 2e 73 74 61 74 65 22 3a 22 6e 65 77 20 79 6f 72 6b 22 2c 22 65 78 70 65 72 Data Ascii: {"sessionId":"982bceee196b4711901768c5d35728f4","tntId":"982bceee196b4711901768c5d35728f4.34_0","offers":[{"responseTokens":{"experience.id":"0","activity.name":"Commercial Script","geo.city":"new york","activity.id":"137460","geo.state":"new york","exper

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49823	31.13.71.7	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:52 UTC	533	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:52 UTC	1997	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;script-src .fbcdn.net .facebook.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' facebook.net .facebook.net fbcdn.net .fbcdn.net fbsbx.com .fbsbx.com;connect-src .fbcdn.net .facebook.net wss://*.fbcdn.net attachment.fbsbx.com blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
2024-03-14 00:56:52 UTC	772	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 72 65 73 6f 75 72 63 65 2d 70 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 65 6d 62 65 64 64 65 72 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 65 70 5f 72 65 70 6f 72 74 22 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 0d 0a 50 72 61 67 6d 61 3a 20 70 75 62 6c 69 63 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 31 32 30 30 0d 0a Data Ascii: cross-origin-resource-policy: cross-origincross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"Pragma: publicCache-Control: public, max-age=1200
2024-03-14 00:56:52 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-03-14 00:56:52 UTC	15023	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 6c 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3a 68 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 22 43 53 53 22 2c 69 64 3a 62 7d 7d 69 66 28 66 3d 3d 3d 22 43 4f 4e 53 54 41 4e 54 5f 56 41 4c 55 45 22 29 7b 68 3d 67 28 61 29 3b 69 66 28 68 21 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 63 2c 65 76 65 6e 74 5f 74 79 70 65 3a 64 2c 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3a 68 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 22 43 4f 4e 53 54 41 4e 54 5f 56 41 4c 55 45 22 2c 69 64 3a 62 7d 7d 69 66 28 66 3d 3d 3d 22 47 4c 4f 42 41 4c 5f 56 41 52 49 41 42 4c 45 22 29 72 65 74 75 72 6e 7b 64 6f 6d 61 69 6e 5f 75 72 Data Ascii: l)return{domain_uri:c,event_type:d,extractor_config:h,extractor_type:"CSS",id:b}}if(f==="CONSTANT_VALUE"){h=g(a);if(h!=null)return{domain_uri:c,event_type:d,extractor_config:h,extractor_type:"CONSTANT_VALUE",id:b}}if(f==="GLOBAL_VARIABLE")return{domain_ur
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 69 6e 66 65 72 72 65 64 65 76 65 6e 74 73 22 2c 22 69 64 65 6e 74 69 74 79 22 5d 2c 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 46 6f 72 50 61 72 74 6e 65 72 49 6e 74 65 67 72 61 74 69 6f 6e 73 3a 5b 22 61 75 74 6f 6d 61 74 69 63 6d 61 74 63 68 69 6e 67 66 6f 72 70 61 72 74 6e 65 72 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 5d 2c 43 6f 6d 6d 6f 6e 49 6e 63 6c 75 64 65 73 3a 5b 22 63 6f 6d 6d 6f 6e 69 6e 63 6c 75 64 65 73 22 5d 2c 44 65 66 61 75 6c 74 43 75 73 74 6f 6d 44 61 74 61 3a 5b 22 64 65 66 61 75 6c 74 63 75 73 74 6f 6d 64 61 74 61 22 5d 2c 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 3a 5b 22 63 6f 6f 6b 69 65 22 5d 2c 49 57 4c 42 6f 6f 74 73 74 72 61 70 70 65 72 3a 5b 22 69 77 6c 62 6f 6f 74 73 74 72 61 70 70 65 72 22 5d 2c 49 57 4c 50 Data Ascii: inferredevents","identity"],AutomaticMatchingForPartnerIntegrations:["automaticmatchingforpartnerintegrations"],CommonIncludes:["commonincludes"],DefaultCustomData:["defaultcustomdata"],FirstPartyCookies:["cookie"],IWLBootstrapper:["iwlbootstrapper"],IWLP
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 2f 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 62 3d 67 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 69 66 28 64 26 26 64 2e 73 72 63 26 26 64 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 61 2e 43 44 4e 5f 42 41 53 45 5f 55 52 4c 29 21 3d 3d 2d 31 29 72 65 74 75 72 6e 20 64 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 76 61 72 20 63 3d 64 28 29 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 74 72 79 7b 69 66 28 66 2e 74 72 75 73 74 65 64 54 79 70 65 73 26 26 66 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 Data Ascii: onnect.facebook.net/"};function b(){var b=g.getElementsByTagName("script");for(var c=0;c<b.length;c++){var d=b[c];if(d&&d.src&&d.src.indexOf(a.CDN_BASE_URL)!==-1)return d}return null}var c=d();function d(){try{if(f.trustedTypes&&f.trustedTypes.createPolic
2024-03-14 00:56:52 UTC	1500	IN	Data Raw: 74 75 72 6e 5b 63 2c 74 68 69 73 2e 73 75 62 64 6f 6d 61 69 6e 49 6e 64 65 78 2c 74 68 69 73 2e 63 72 65 61 74 69 6f 6e 54 69 6d 65 2c 74 68 69 73 2e 70 61 79 6c 6f 61 64 5d 2e 6a 6f 69 6e 28 22 2e 22 29 7d 7d 2c 7b 6b 65 79 3a 22 6d 61 79 62 65 55 70 64 61 74 65 50 61 79 6c 6f 61 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 68 69 73 2e 70 61 79 6c 6f 61 64 3d 3d 3d 6e 75 6c 6c 7c 7c 74 68 69 73 2e 70 61 79 6c 6f 61 64 21 3d 3d 61 29 7b 74 68 69 73 2e 70 61 79 6c 6f 61 64 3d 61 3b 61 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 68 69 73 2e 63 72 65 61 74 69 6f 6e 54 69 6d 65 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 3f 61 3a 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 7d 5d 2c 5b 7b 6b 65 79 Data Ascii: turn[c,this.subdomainIndex,this.creationTime,this.payload].join(".")}},{key:"maybeUpdatePayload",value:function(a){if(this.payload===null\|\|this.payload!==a){this.payload=a;a=Date.now();this.creationTime=typeof a==="number"?a:new Date().getTime()}}}],[{key
2024-03-14 00:56:52 UTC	14884	IN	Data Raw: 50 6c 75 67 69 6e 4c 6f 61 64 65 64 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 3b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 3f 5b 61 5d 3a 6e 75 6c 6c 7d 6b 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 Data Ascii: PluginLoadedEvent",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsBaseEvent");function b(a){a=a!=null&&typeof a==="string"?a:null;return a!=null?[a]:null}k.exports=new a
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 68 45 76 65 6e 74 26 26 21 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 3b 76 61 72 20 6a 3d 68 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 65 26 26 28 6a 2e 6e 61 6d 65 3d 66 29 3b 6a 2e 73 72 63 3d 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 3b 6a 2e 69 64 3d 66 3b 6a 2e 6e 61 6d 65 3d 66 3b 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 3b 63 28 6a 2c 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 68 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 63 2e 6e 61 6d 65 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 3b 63 2e 76 61 6c 75 65 3d 62 3b 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 Data Ascii: hEvent&&!g.addEventListener);var j=h.createElement("iframe");e&&(j.name=f);j.src="about:blank";j.id=f;j.name=f;i.appendChild(j);c(j,"load",function(){b.each(function(a,b){var c=h.createElement("input");c.name=decodeURIComponent(a);c.value=b;i.appendChild(
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 56 61 6c 69 64 61 74 65 43 75 73 74 6f 6d 50 61 72 61 6d 65 74 65 72 73 45 76 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 Data Ascii: d)});f.ensureModuleRegistered("SignalsFBEventsValidateCustomParametersEvent",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49825	199.232.36.157	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:52 UTC	524	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:52 UTC	536	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57596 Last-Modified: Thu, 27 Oct 2022 18:55:37 GMT ETag: "32ad004436155ec972bc50e6238b5b67" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Thu, 14 Mar 2024 00:56:52 GMT X-Served-By: cache-iad-kjyo7100147-IAD, cache-lga21960-LGA X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-03-14 00:56:52 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-03-14 00:56:52 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-03-14 00:56:52 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-03-14 00:56:52 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-03-14 00:56:52 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-03-14 00:56:52 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-03-14 00:56:52 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-03-14 00:56:52 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-03-14 00:56:52 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-03-14 00:56:52 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49814	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:52 UTC	568	OUT	GET /utag/mtbank/main/prod/utag.224.js?utv=ut4.51.202312122232 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:52 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11403 Connection: close Last-Modified: Wed, 14 Feb 2024 23:54:17 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: GmJo_ap0PEEqIj3Peu0f.xX0Lv7PaaWh Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 14 Mar 2024 00:56:53 GMT ETag: "bd2ca8d32b1507527f29edddccf03ed1" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3ce8b408dfcacf1e62d9fe4b346a6a62.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: PzGXluPo52kvCSpGOLMThBqgFRy82I_dyrcvou2Lf9Lxp1GN-u-eew== Cache-Control: max-age=1296000
2024-03-14 00:56:54 UTC	9594	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 32 32 34 20 75 74 34 2e 30 2e 32 30 32 34 30 32 31 34 32 33 35 32 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 67 Data Ascii: //tealium universal tag - utag.224 ut4.0.202402142352, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cfg
2024-03-14 00:56:54 UTC	1809	IN	Data Raw: 61 74 61 2e 73 65 73 73 69 6f 6e 5f 69 64 5b 6a 5d 21 3d 3d 22 22 29 7b 65 76 65 6e 74 49 64 44 61 74 61 2e 73 65 73 73 69 6f 6e 5f 69 64 3d 75 2e 64 61 74 61 2e 73 65 73 73 69 6f 6e 5f 69 64 5b 6a 5d 3b 7d 0a 69 66 28 75 2e 64 61 74 61 2e 6f 72 64 65 72 5f 74 6f 74 61 6c 29 7b 65 76 65 6e 74 49 64 44 61 74 61 2e 76 61 6c 75 65 3d 75 2e 64 61 74 61 2e 6f 72 64 65 72 5f 74 6f 74 61 6c 3b 65 76 65 6e 74 49 64 44 61 74 61 2e 74 72 61 6e 73 61 63 74 69 6f 6e 5f 69 64 3d 75 2e 64 61 74 61 2e 6f 72 64 65 72 5f 69 64 3b 7d 0a 69 66 28 75 2e 64 61 74 61 2e 70 72 6f 64 75 63 74 5f 71 75 61 6e 74 69 74 79 29 7b 65 76 65 6e 74 49 64 44 61 74 61 2e 71 75 61 6e 74 69 74 79 3d 74 6f 74 61 6c 5f 71 74 79 3b 7d 0a 65 76 65 6e 74 49 64 44 61 74 61 2e 69 74 65 6d 73 3d 5b Data Ascii: ata.session_id[j]!==""){eventIdData.session_id=u.data.session_id[j];}if(u.data.order_total){eventIdData.value=u.data.order_total;eventIdData.transaction_id=u.data.order_id;}if(u.data.product_quantity){eventIdData.quantity=total_qty;}eventIdData.items=[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49826	69.147.82.61	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:52 UTC	515	OUT	GET /wi/ytc.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:52 UTC	976	IN	HTTP/1.1 200 OK x-amz-id-2: fPFSrwnMNNgwOY7wArZ9U43A+Ybm2D/6BnJpbevh1m2hiX72cNvMqnSkAc8Ak6RTRji09YmOCbsUto5Iqes9cnhlnfCPw4+vVXjaw57Vois= x-amz-request-id: MJF9HA0KZSTSJCXB Date: Thu, 14 Mar 2024 00:55:16 GMT Last-Modified: Mon, 26 Jun 2023 09:26:35 GMT x-amz-expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="oath-standard-lifecycle" ETag: "5c6ed25dce803fd84288922b8928409e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=3600 x-amz-version-id: xC6OTTJGIjCqkMTkbrZpmtbXHK5oaZhW Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 18187 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 97 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-14 00:56:52 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 2c 6e 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=fun
2024-03-14 00:56:52 UTC	1300	IN	Data Raw: 41 74 28 61 29 29 3e 3d 35 36 33 32 30 26 26 6f 3c 3d 35 37 33 34 33 29 29 7b 72 5b 6e 2b 3d 31 5d 3d 32 33 39 2c 72 5b 6e 2b 3d 31 5d 3d 31 39 31 2c 72 5b 6e 2b 3d 31 5d 3d 31 38 39 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 61 2b 3d 31 2c 28 69 3d 31 30 32 34 2a 28 69 2d 35 35 32 39 36 29 2b 6f 2d 35 36 33 32 30 2b 36 35 35 33 36 29 3e 36 35 35 33 35 29 7b 72 5b 6e 2b 3d 31 5d 3d 32 34 30 7c 69 3e 3e 3e 31 38 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 69 3e 3e 3e 31 32 26 36 33 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 69 3e 3e 3e 36 26 36 33 2c 72 5b 6e 2b 3d 31 5d 3d 31 32 38 7c 36 33 26 69 3b 63 6f 6e 74 69 6e 75 65 7d 7d 69 3c 3d 31 32 37 3f 72 5b 6e 2b 3d 31 5d 3d 30 7c 69 3a 69 3c 3d 32 30 34 37 3f 28 72 5b 6e 2b 3d 31 5d 3d 31 39 32 7c 69 3e 3e 3e 36 2c 72 Data Ascii: At(a))>=56320&&o<=57343)){r[n+=1]=239,r[n+=1]=191,r[n+=1]=189;continue}if(a+=1,(i=1024*(i-55296)+o-56320+65536)>65535){r[n+=1]=240\|i>>>18,r[n+=1]=128\|i>>>12&63,r[n+=1]=128\|i>>>6&63,r[n+=1]=128\|63&i;continue}}i<=127?r[n+=1]=0\|i:i<=2047?(r[n+=1]=192\|i>>>6,r
2024-03-14 00:56:52 UTC	1300	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 7b 69 66 28 21 74 28 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 72 61 79 2e 66 72 6f 6d 3a 20 77 68 65 6e 20 70 72 6f 76 69 64 65 64 2c 20 74 68 65 20 73 65 63 6f 6e 64 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 28 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 7d 66 6f 72 28 76 61 72 20 73 2c 75 3d 72 28 69 2e 6c 65 6e 67 74 68 29 2c 64 3d 74 28 6e 29 3f 4f 62 6a 65 63 74 28 6e 65 77 20 6e 28 75 29 29 3a 6e 65 77 20 41 72 72 61 79 28 75 29 2c 63 3d 30 3b 63 3c 75 3b 29 73 3d 69 5b 63 5d 2c 64 5b 63 5d 3d 61 3f 76 Data Ascii: arguments[1]:void 0;if(void 0!==a){if(!t(a))throw new TypeError("Array.from: when provided, the second argument must be a function");arguments.length>2&&(o=arguments[2])}for(var s,u=r(i.length),d=t(n)?Object(new n(u)):new Array(u),c=0;c<u;)s=i[c],d[c]=a?v
2024-03-14 00:56:52 UTC	1300	IN	Data Raw: 63 68 28 65 29 7b 7d 69 66 28 6e 3d 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 29 62 72 65 61 6b 3b 6e 3d 6e 2e 70 61 72 65 6e 74 7d 72 65 74 75 72 6e 20 74 7d 28 74 29 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 76 6f 69 64 20 76 28 65 29 3b 76 61 72 20 6f 3d 7b 7d 2c 61 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 22 22 3b 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 3d 3d 3d 74 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 77 69 6e 64 6f 77 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 7b 5f 5f 74 63 66 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 65 2c 70 61 72 61 6d 65 74 65 72 3a 61 2c 76 65 72 73 69 6f 6e 3a 69 2c 63 61 6c 6c 49 64 3a 72 7d 7d 3b 6e 5b 72 5d 3d 6f 2c 6c 28 74 2c 73 2c 22 2a 22 29 Data Ascii: ch(e){}if(n===window.top)break;n=n.parent}return t}(t);if(!i)return void v(e);var o={},a=Math.random()+"";"__tcfapiLocator"===t?function(e,t,n,r){window[e]=function(e,i,o,a){var s={__tcfapiCall:{command:e,parameter:a,version:i,callId:r}};n[r]=o,l(t,s,"*")
2024-03-14 00:56:52 UTC	1300	IN	Data Raw: 6e 67 3a 6e 2e 75 73 70 53 74 72 69 6e 67 2c 69 73 4f 61 74 68 46 69 72 73 74 50 61 72 74 79 3a 6e 2e 69 73 4f 61 74 68 46 69 72 73 74 50 61 72 74 79 7d 2c 21 30 29 3a 65 28 76 6f 69 64 20 30 2c 21 31 29 7d 29 29 29 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3b 6d 28 22 5f 5f 74 63 66 61 70 69 22 2c 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 2c 22 5f 5f 74 63 66 61 70 69 43 61 6c 6c 22 2c 22 5f 5f 74 63 66 61 70 69 52 65 74 75 72 6e 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 74 63 66 61 70 69 3f 28 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3f 28 68 28 65 29 2c 76 28 22 5f 5f 74 63 66 61 70 69 22 29 29 3a 67 28 29 7d 2c 74 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 76 6f 69 64 20 30 2c 21 Data Ascii: ng:n.uspString,isOathFirstParty:n.isOathFirstParty},!0):e(void 0,!1)})))},y=function(){var e,t;m("__tcfapi","__tcfapiLocator","__tcfapiCall","__tcfapiReturn"),window.__tcfapi?(e=function(e,t){t?(h(e),v("__tcfapi")):g()},t=setTimeout((function(){e(void 0,!
2024-03-14 00:56:52 UTC	1300	IN	Data Raw: 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 3a 22 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 2d 4a 61 6e 2d 31 39 37 30 20 30 30 3a 30 30 3a 30 31 20 47 4d 54 22 2c 6e 3d 65 2e 6e 61 6d 65 2b 22 3d 22 2b 65 2e 76 61 6c 75 65 2b 74 2b 22 3b 20 70 61 74 68 3d 22 2b 65 2e 70 61 74 68 2b 28 22 22 21 3d 3d 65 2e 64 6f 6d 61 69 6e 3f 22 3b 20 64 6f 6d 61 69 6e 3d 2e 22 2b 65 2e 64 6f 6d 61 69 6e 3a 22 22 29 2b 22 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 2c 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 6e 7d 28 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 74 2c 65 78 70 69 72 79 4f 66 66 73 65 74 3a 6e 2c 64 6f 6d 61 69 6e 3a 61 28 29 2c 70 61 74 68 3a 22 2f 22 7d 29 3b 76 61 72 20 72 3d 7b 69 64 3a 74 2c 74 69 6d 65 73 74 61 6d 70 3a 28 6e 65 77 20 44 Data Ascii: .toGMTString():"; expires=Thu, 01-Jan-1970 00:00:01 GMT",n=e.name+"="+e.value+t+"; path="+e.path+(""!==e.domain?"; domain=."+e.domain:"")+"; SameSite=Lax",document.cookie=n}({name:e,value:t,expiryOffset:n,domain:a(),path:"/"});var r={id:t,timestamp:(new D
2024-03-14 00:56:52 UTC	1300	IN	Data Raw: 29 7d 7d 76 61 72 20 48 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 30 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 67 65 2e 70 6c 61 69 6e 41 75 69 64 73 29 7b 76 61 72 20 72 3d 41 72 72 61 79 2e 66 72 6f 6d 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 65 5b 74 5d 29 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 7d 29 29 3b 67 65 2e 68 61 73 68 65 64 41 75 69 64 73 5b 6e 5d 3d 72 2e 6a 6f 69 6e 28 22 22 29 2c 74 2b 2b 7d 67 65 2e 61 75 69 64 73 41 72 65 48 61 73 68 65 64 3d 21 30 2c 79 65 28 29 7d 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 70 75 73 68 28 Data Ascii: )}}var H=function(e){var t=0;for(var n in ge.plainAuids){var r=Array.from(new Uint8Array(e[t])).map((function(e){return e.toString(16).padStart(2,"0")}));ge.hashedAuids[n]=r.join(""),t++}ge.auidsAreHashed=!0,ye()},M=function(e,t){var n=function(n){t.push(
2024-03-14 00:56:52 UTC	1300	IN	Data Raw: 3b 72 65 74 75 72 6e 28 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 7c 7c 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2e 73 75 62 74 6c 65 2e 64 69 67 65 73 74 28 22 53 48 41 2d 32 35 36 22 2c 74 29 7d 3b 76 61 72 20 56 2c 7a 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 59 28 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 6e 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 77 69 2f 63 6f 6e 66 69 67 2f 22 2b 65 2b 22 2e 6a 73 6f 6e 22 3b 74 2e 6f 70 65 6e 28 22 47 45 54 22 2c 6e 2c 21 30 29 2c 74 2e 74 69 6d 65 6f 75 74 3d 32 65 33 2c 74 2e 6f 6e 74 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 71 2d 2d 2c 79 65 28 29 7d 2c 74 2e 73 65 6e 64 28 29 2c 74 2e Data Ascii: ;return(window.crypto\|\|window.msCrypto).subtle.digest("SHA-256",t)};var V,z=!1;function Y(e){if(void 0!==e){var t=new XMLHttpRequest,n="https://s.yimg.com/wi/config/"+e+".json";t.open("GET",n,!0),t.timeout=2e3,t.ontimeout=function(e){q--,ye()},t.send(),t.
2024-03-14 00:56:52 UTC	1300	IN	Data Raw: 6d 61 69 6c 26 26 28 74 2e 75 73 65 72 45 6d 61 69 6c 3d 67 65 2e 65 6d 61 69 6c 73 5b 74 2e 70 69 78 65 6c 49 64 5d 29 2c 74 2e 75 73 65 72 48 61 73 68 65 64 45 6d 61 69 6c 26 26 28 49 65 28 74 2e 75 73 65 72 48 61 73 68 65 64 45 6d 61 69 6c 29 7c 7c 64 65 6c 65 74 65 20 74 2e 75 73 65 72 48 61 73 68 65 64 45 6d 61 69 6c 29 7d 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 70 75 73 68 28 6e 2e 74 61 72 67 65 74 2e 72 65 73 75 6c 74 29 2c 74 2e 6c 65 6e 67 74 68 3d 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 5a 28 74 29 7d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 65 5b 72 5d 2e 6f 6e 63 6f 6d 70 6c 65 74 65 3d 6e 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 30 3b Data Ascii: mail&&(t.userEmail=ge.emails[t.pixelId]),t.userHashedEmail&&(Ie(t.userHashedEmail)\|\|delete t.userHashedEmail)}var $=function(e,t){var n=function(n){t.push(n.target.result),t.length===e.length&&Z(t)};for(var r in e)e[r].oncomplete=n},Z=function(e){var t=0;
2024-03-14 00:56:52 UTC	1300	IN	Data Raw: 6f 6d 70 6f 6e 65 6e 74 28 70 61 72 73 65 49 6e 74 28 74 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2f 36 30 2c 31 30 29 2b 28 74 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 3c 74 2e 79 77 61 53 74 61 6e 64 61 72 64 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 3f 22 64 22 3a 22 22 29 29 29 2c 65 2e 6a 6f 69 6e 28 22 22 29 7d 28 29 29 2c 72 2e 6a 6f 69 6e 28 22 22 29 7d 76 61 72 20 72 65 3d 5b 7b 6e 61 6d 65 3a 22 74 65 61 6c 69 75 6d 22 2c 69 6e 74 65 72 66 61 63 65 3a 22 75 74 61 67 5f 64 61 74 61 22 7d 2c 7b 6e 61 6d 65 3a 22 67 74 6d 22 2c 69 6e 74 65 72 66 61 63 65 3a 22 67 6f 6f 67 6c 65 5f 74 61 67 5f 6d 61 6e 61 67 65 72 22 7d 2c 7b 6e 61 6d 65 3a 22 61 64 6f 62 65 22 2c 69 6e 74 65 72 66 61 63 65 3a 22 5f 73 61 74 65 Data Ascii: omponent(parseInt(t.getTimezoneOffset()/60,10)+(t.getTimezoneOffset()<t.ywaStandardTimezoneOffset?"d":""))),e.join("")}()),r.join("")}var re=[{name:"tealium",interface:"utag_data"},{name:"gtm",interface:"google_tag_manager"},{name:"adobe",interface:"_sate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49829	142.250.81.228	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:52 UTC	1128	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3&co=aHR0cHM6Ly93d3czLm10Yi5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=invisible&cb=c8l0hwixplg5 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:52 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 14 Mar 2024 00:56:52 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-jyEqOde4gFSzSvZE9eXNng' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:56:52 UTC	361	IN	Data Raw: 32 61 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ae8<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-03-14 00:56:52 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2024-03-14 00:56:52 UTC	1252	IN	Data Raw: 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 Data Ascii: 9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329,
2024-03-14 00:56:52 UTC	1252	IN	Data Raw: 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a Data Ascii: 0-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}
2024-03-14 00:56:52 UTC	1252	IN	Data Raw: 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c Data Ascii: */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA,
2024-03-14 00:56:52 UTC	1252	IN	Data Raw: 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b Data Ascii: l(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal;
2024-03-14 00:56:52 UTC	1252	IN	Data Raw: 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6a 79 45 71 4f 64 65 34 67 46 53 7a 53 76 5a 45 39 65 58 4e 6e 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 Data Ascii: U+FEFF, U+FFFD;}</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css"><script nonce="jyEqOde4gFSzSvZE9eXNng" type="text/javascript">window['__recaptcha_api'] = 'http
2024-03-14 00:56:52 UTC	1252	IN	Data Raw: 54 51 39 52 36 74 6f 76 57 65 46 70 5a 76 41 77 5f 48 6d 6e 39 78 63 67 75 5a 50 56 6f 4e 4c 65 64 68 7a 32 41 78 6a 50 33 49 35 43 35 32 79 58 61 65 78 6e 38 77 75 42 70 30 66 4e 78 31 56 30 71 5a 49 69 73 6b 6c 53 4c 71 50 51 59 69 69 4c 6e 61 32 39 77 45 73 50 58 4e 4f 36 37 48 36 66 49 46 44 45 5a 67 70 6f 72 4f 45 79 6d 5a 4e 7a 65 6d 31 4f 58 4a 49 33 4f 48 6e 56 79 65 35 57 78 41 57 6b 38 46 45 75 68 4d 4f 6a 6e 50 51 36 46 7a 70 74 63 34 55 39 79 68 72 36 4f 65 7a 6a 67 62 5f 68 6a 61 53 79 57 54 77 6d 64 65 49 52 6a 6f 6f 47 76 39 44 45 67 36 59 41 41 38 69 5a 36 74 5f 6a 76 47 4c 69 63 74 31 4a 47 51 68 6e 30 6d 5a 49 62 6e 58 72 48 6b 39 4f 58 7a 63 53 6d 53 4e 46 75 4d 70 71 37 4d 44 78 72 62 33 65 48 57 69 4c 45 50 32 44 62 4d 68 6e 70 46 69 Data Ascii: TQ9R6tovWeFpZvAw_Hmn9xcguZPVoNLedhz2AxjP3I5C52yXaexn8wuBp0fNx1V0qZIisklSLqPQYiiLna29wEsPXNO67H6fIFDEZgporOEymZNzem1OXJI3OHnVye5WxAWk8FEuhMOjnPQ6Fzptc4U9yhr6Oezjgb_hjaSyWTwmdeIRjooGv9DEg6YAA8iZ6t_jvGLict1JGQhn0mZIbnXrHk9OXzcSmSNFuMpq7MDxrb3eHWiLEP2DbMhnpFi
2024-03-14 00:56:52 UTC	1252	IN	Data Raw: 35 75 35 2d 51 73 5f 6e 50 53 4c 79 43 68 63 34 36 4a 4a 61 4d 6b 79 53 59 47 4a 4e 4d 36 4c 49 71 6c 6a 42 47 65 2d 72 7a 74 4a 44 5a 43 67 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 6a 79 45 71 4f 64 65 34 67 46 53 7a 53 76 5a 45 39 65 58 4e 6e 67 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 32 4e 7a 64 54 61 56 46 69 59 33 68 30 53 7a 46 50 4e 57 56 72 4d 54 46 55 5a 47 78 76 61 55 49 31 65 6c 6f 77 4d 46 56 42 Data Ascii: 5u5-Qs_nPSLyChc46JJaMkySYGJNM6LIqljBGe-rztJDZCg"><script type="text/javascript" nonce="jyEqOde4gFSzSvZE9eXNng"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy92NzdTaVFiY3h0SzFPNWVrMTFUZGxvaUI1elowMFVB
2024-03-14 00:56:52 UTC	615	IN	Data Raw: 35 63 44 6b 31 63 6e 46 6e 56 47 6c 6e 4c 31 46 6c 59 58 5a 70 64 56 55 7a 4f 45 70 69 57 55 31 51 64 58 56 4b 4f 48 5a 4f 64 47 4a 52 5a 46 64 7a 61 45 30 7a 5a 6e 5a 32 64 48 59 77 4d 69 74 79 5a 48 42 73 4d 46 55 78 5a 6e 68 43 61 7a 4a 6b 53 56 46 72 4d 6a 52 4b 53 56 4e 5a 59 6b 30 30 4c 30 4a 4a 4d 30 59 72 54 7a 56 6e 62 30 67 33 52 56 4e 35 53 6c 56 5a 54 56 52 61 53 44 6c 42 61 6b 5a 55 64 46 4e 61 54 6c 49 34 4c 30 31 6d 57 56 64 71 4d 7a 46 71 53 6b 70 58 4e 7a 64 4c 54 7a 49 78 4e 57 77 32 56 46 6c 74 64 32 4e 59 52 48 6c 6f 54 56 64 6c 51 32 46 74 52 47 63 72 56 31 42 54 61 6b 5a 48 53 57 52 31 4e 32 4d 79 52 30 4a 72 64 6a 64 70 54 55 35 53 52 45 6c 77 64 55 78 42 63 47 51 7a 59 31 6c 75 51 30 6c 6b 4e 48 41 72 57 6e 68 4e 62 46 70 58 4d 6c Data Ascii: 5cDk1cnFnVGlnL1FlYXZpdVUzOEpiWU1QdXVKOHZOdGJRZFdzaE0zZnZ2dHYwMityZHBsMFUxZnhCazJkSVFrMjRKSVNZYk00L0JJM0YrTzVnb0g3RVN5SlVZTVRaSDlBakZUdFNaTlI4L01mWVdqMzFqSkpXNzdLTzIxNWw2VFltd2NYRHloTVdlQ2FtRGcrV1BTakZHSWR1N2MyR0JrdjdpTU5SRElwdUxBcGQzY1luQ0lkNHArWnhNbFpXMl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49832	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:52 UTC	801	OUT	GET /content/dam/mtb-web/images/lending-calculator-1440x650.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
2024-03-14 00:56:52 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 76857 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Fri, 02 Feb 2024 15:22:21 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "12c39-61067ada1c540" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f391dfb0806f29cccc5f1df3e1ae836e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 4kRohNvLdQgMZxvLGYDrWuu9hxd50oqnsiYzlTDeM5kBphWwZCgYKA== Age: 1 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 35 00 00 ff e1 03 8d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 32 20 37 39 2e 66 33 35 34 65 66 63 37 30 2c 20 32 30 32 33 2f 31 31 2f 30 39 2d 31 32 3a 30 35 3a 35 33 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*Ducky5http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c002 79.f354efc70, 2023/11/09-12:05:53 "> <rdf:RDF
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: aa 9a 06 76 7b e6 d7 72 cd cc 2b 32 b2 fa ad ca 0a 51 d6 ad 27 c9 f9 a3 ae ae 4c f8 d0 d2 54 b0 34 89 a2 8a 2f 20 c0 dc 97 a1 d0 58 8f 3a df ac 5f bb b8 49 a8 49 c5 25 46 91 f3 bb b5 b9 55 30 ec dd 8a f5 46 5f 34 3a 9a d5 8f ba ff 00 4e 74 f0 27 77 87 ab ab cb 9c 8c 5f 5f c8 f9 f5 f4 22 48 fd 29 79 90 57 c4 21 5e 01 56 49 7a 5f c4 a8 a4 97 a9 7c 00 ce d8 75 b9 73 e3 42 54 ae f3 6c 5f 97 1f 82 3d 5f 5f cb 87 73 75 67 e9 f9 1f 4a 3c 35 6c cd 44 58 54 ab 24 11 04 f8 92 91 af dd 9f fb 59 7c 09 5a 79 2f 72 6b b8 c1 7f 88 6a c5 7d 34 75 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: v{r+2Q'LT4/ X:_II%FU0F_4:Nt'w__"H)yW!^VIz_\|usBTl_=__sugJ<5lDXT$Y\|Zy/rkj}4ud
2024-03-14 00:56:53 UTC	16384	IN	Data Raw: df b1 91 07 e6 d2 fb cc ef af 18 4e bd f9 95 dc 64 d9 84 ad c2 fd 96 a7 8d 7a 2a ed 9b 91 d5 38 cb 55 fd cf cc f1 61 f4 72 bb 1a 10 94 eb 2d 6a 95 3f bc c5 57 51 b4 db 51 49 57 5e 55 a2 7e 55 24 67 66 65 fb 8e 09 c6 32 d6 9f 0d 0d 56 63 5b 9b 72 72 ac 1c a8 e9 cb 5d 09 06 37 e9 d5 2b 35 44 97 a6 3f de 8b 83 29 e3 67 db 5e e5 ca 45 7f 1f 82 2f ab 3e cc cc 69 46 e7 f4 d3 6b c1 2d 46 45 db a6 74 2c 41 61 c2 5f 9a d2 77 97 34 b9 47 fb cd de 26 18 c6 5a d6 d4 9a 6b e0 64 64 e3 4f a6 48 64 c3 77 b7 e5 b4 d6 ba 1d b4 d9 cb 68 de 63 e5 46 51 a3 e6 b5 f8 1e bd 37 79 f6 d5 5f f8 5c 0c 88 f5 d8 b7 1b 57 a3 ab 4b 99 e9 d6 4d bf db cb be b8 69 77 4d a1 4a f2 74 d6 06 76 d5 cd 16 d3 b7 c1 bb 97 27 14 9f 53 1a c1 83 bf 6d 76 ff 00 4f 3b 89 6b 5d 19 9d a0 e3 76 cc dc 7b Data Ascii: Ndz*8Uar-j?WQQIW^U~U$gfe2Vc[rr]7+5D?)g^E/>iFk-FEt,Aa_w4G&ZkddOHdwhcFQ7y_\WKMiwMJtv'SmvO;k]v{
2024-03-14 00:56:53 UTC	16384	IN	Data Raw: a6 cb b3 09 56 9a 30 ad 06 7d 89 c6 b4 75 e6 11 ab d6 18 f3 a2 a4 d4 eb a0 23 59 91 25 56 9a ab 7c 82 30 ee c9 27 a7 22 8a e3 f2 52 e7 aa f8 16 23 6b 8b 3e 98 a9 52 b4 37 06 da 52 ea 8c 1a d3 4d 68 69 96 eb b6 b2 dc a4 ed 4b f0 4a 8b e1 25 fd e7 97 bf 5e 72 f5 74 de 1b b5 26 ae 3a f0 af 13 ce f4 46 6e 3f 4c a3 25 c9 ae af 9f 3f b8 2b 2e db f6 65 19 2a f4 ba 4b 4e 1e 65 88 da 5a 8e 2e 5c 1c 2e c6 32 53 54 6a 49 51 a3 a4 e5 11 e2 ed 9b 86 d1 7b dd da 6e 3f d3 f1 9e 25 c7 58 57 fc 0f f0 9a 93 1e 0b 65 f2 de 61 6f 56 32 3d 19 10 78 f9 1a 56 33 d2 bf e5 7c 19 d6 6c e5 74 c7 86 c7 4e 29 e8 6d cc 6a ab c4 a9 5e 5f fb b7 8f 35 b9 6d d7 3a 7f 2d d9 bb 05 2f f1 29 a9 35 f6 1e 6f b1 3c 3d 3f 5a f9 70 57 97 49 e6 7a 98 19 3a c6 51 7c 19 52 9b 4e e7 3b 17 54 27 2e 0e Data Ascii: V0}u#Y%V\|0'"R#k>R7RMhiKJ%^rt&:Fn?L%?+.e*KNeZ.\.2STjIQ{n?%XWeaoV2=xV3\|ltN)mj^_5m:-/)5o<=?ZpWIz:Q\|RN;T'.
2024-03-14 00:56:53 UTC	11321	IN	Data Raw: 24 04 52 20 8a 41 51 4c 83 1a 4f 52 2a d6 c1 56 b6 45 45 3d 48 31 ee 20 ac 3b f5 33 5a 88 2a 45 59 29 b4 41 64 ae 27 c4 95 56 37 4f 81 95 72 bd df 05 2b f1 b9 1d 27 15 ab 3a 68 c6 cf 35 cd 51 f7 6e 53 8f 56 b4 f3 3a 39 ac db b2 3f 4b ba e1 dd e0 ad 5e 85 7e 0d d0 b1 75 f2 f6 fd de 2e 73 c1 c8 4f fa 90 8c 5b f9 50 9b f8 34 69 72 ad a7 6a ec 1f 1d 4e 2e ad 7f 6d e3 3c 8b 17 ac 7e 28 c9 f4 b3 55 2b 49 dd 3d af 97 73 2e 57 52 af a6 9e 28 ba dc 33 b4 cb 89 7b 36 e1 8f 76 ec 6e 5b 69 51 d2 87 49 63 9d d6 b2 7b 4b 60 dd 73 f7 8b 50 b1 8b 72 f4 3a d7 5b 51 6d 25 e6 f9 17 30 91 eb db 9f ed 66 46 5d 98 c6 32 b3 81 6d a5 d6 df aa 5f 62 31 9c 35 ac 5d b5 fe d4 76 8e dd 38 dd c8 6f 3e ff 00 17 2b d2 a4 2b fe 44 62 f6 7f 97 49 a7 f8 75 18 f6 b6 bc 4b 4a d6 3b b5 62 da Data Ascii: $R AQLORVEE=H1 ;3ZEY)Ad'V7Or+':h5QnSV:9?K^~u.sO[P4irjN.m<~(U+I=s.WR(3{6vn[iQIc{K`sPr:[Qm%0fF]2m_b15]v8o>++DbIuKJ;b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49833	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:52 UTC	804	OUT	GET /content/dam/mtb-web/images/spotlight/mtb-hp-spotlight-whm.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34
2024-03-14 00:56:52 UTC	797	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 101773 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 06 Mar 2024 14:13:56 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:51 GMT ETag: "18d8d-612fe91b7d100" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e42e8491a089e2183879e26e61dae708.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: ngUmWjATfcU5fUKI8UYCw0eMIiVJBj44m5Jd-Y0pAsXTEMX7GWQgkA== Age: 1 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:52 UTC	15587	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 01 d8 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: JFIFHHICC_PROFILE0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2024-03-14 00:56:52 UTC	16384	IN	Data Raw: 2a e9 de 96 f6 98 1f aa bf 47 1f 66 de b8 46 5a 45 96 30 c7 75 0b 72 35 6e 05 b6 6f c7 9e 34 49 a5 81 d2 ac 78 64 04 24 97 da ce 06 c7 e0 c3 04 07 70 e2 2f d0 e2 68 55 7b d7 ef 23 61 1b 1d 32 a8 e6 a7 ce d8 4d 23 a9 a0 a8 59 63 e7 0d 8a c9 f6 59 4f 21 f0 38 21 af 92 1a 8a 7f 6c 68 be ac 9d 0d 30 f7 e1 72 2e aa e3 91 53 d1 b0 cc 80 b0 14 67 bc 52 82 a8 c5 76 8d 8f 30 47 3b 1c 70 63 2a 46 63 1c c5 05 54 71 cd 09 53 10 17 50 76 31 dc ee bf 00 71 05 32 05 16 56 06 dc ed 89 f4 82 a6 90 3c e6 8f 55 34 05 7b c5 2f 71 67 d8 1b fa db 9e 35 93 29 82 ab 49 a1 79 59 66 36 8d 59 7d d6 1b 95 27 a9 f2 c5 83 01 f4 9c 41 33 ea 66 7d 13 cb 99 47 a4 5d 7d 96 0f f6 06 23 85 13 75 2a 3d 31 29 9e ca 12 ae 21 aa d6 a6 86 ff 00 e8 0c 46 44 43 8b a9 d0 0f 9f 3c 64 35 98 38 13 2e Data Ascii: GfFZE0ur5no4Ixd$p/hU{#a2M#YcYO!8!lh0r.SgRv0G;pcFcTqSPv1q2V<U4{/qg5)IyYf6Y}'A3f}G]}#u*=1)!FDC<d58.
2024-03-14 00:56:53 UTC	16384	IN	Data Raw: 38 bf 89 51 1a d9 dd 58 ff 00 47 fd dc 30 8f 8d f8 a1 af 7c fa b4 ff 00 a3 fe ee 37 ab a5 3d d9 c4 4c 70 32 df 02 c9 83 5d 87 b4 b2 32 fe 21 cd e5 a6 57 93 32 9d 9a c3 73 6b fe cc 2b fa 7f 36 e9 98 cf f9 7f 0c 44 e5 43 f9 98 f8 0c 3a c1 50 71 12 b0 fa b8 91 99 bf 1a 71 2d 3e 71 43 0c 39 dd 6c 70 90 75 22 30 b1 fc b0 6f 4b 9e 66 ae 53 5e 61 52 76 17 f1 75 c5 6b 9b a0 6c f6 90 7e ad ff 00 3c 1f d1 0f 1a 7c 06 3b 12 4f c2 24 f8 cc eb ad ff 00 3c 9f fd 3c 66 1b e3 31 d2 b0 12 b2 b0 c1 2e 8e 6b 8f 52 72 e1 4f 4c 42 e6 b5 3d d3 dd b9 df 19 45 98 87 40 b8 67 11 0c 99 2f 24 ba 39 6d eb 84 85 6e fe f6 35 b1 9f 4f ae 35 30 2a ff 00 6b 14 22 10 19 25 1c a1 46 fe f5 af 8a a3 b4 9c e2 4a aa 76 59 1d 56 1b da 24 77 08 86 dc d9 8d 89 fc 06 2c 3a d9 0d 2d 01 2b bb 49 e1 Data Ascii: 8QXG0\|7=Lp2]2!W2sk+6DC:Pqq->qC9lpu"0oKfS^aRvukl~<\|;O$<<f1.kRrOLB=E@g/$9mn5O50*k"%FJvYV$w,:-+I
2024-03-14 00:56:53 UTC	16384	IN	Data Raw: c8 ec 5f 3c cb a8 b8 e2 87 87 e9 33 5a 9c da ae 6a 89 04 f3 49 7d 08 b1 c4 da 42 b7 26 b5 ac 47 4f 3c 73 2d 4e 6b 5d 5e 22 a1 5a b7 10 4b 21 fa b2 c1 50 96 60 5b 55 ba 5f 7f 21 8e 83 ec 1a 8e 3a 5e 2d e1 54 0d e2 51 21 5d 08 17 50 31 bd d8 93 b9 bf 4e 5b 5b 19 7a 8a 05 64 16 ee 46 07 eb 18 0e 5e b6 c7 b1 9d 0f 99 a0 fd 21 53 e0 52 c5 b7 3f 21 86 9a 16 d6 64 5d 38 db 38 ac 31 66 95 89 a7 93 7e e1 86 06 bf 57 c7 13 b0 99 94 1a 3e d1 1f f9 25 c2 4f 3d 34 47 74 8f 57 4c 30 93 30 2a bb 7e 38 1c a8 af 92 6c ce 2a 78 d7 bc 94 ef a4 6e 6d e7 8a ba 6d 19 c4 2d 7e a3 8c c2 c9 ea 14 46 36 e7 ca d8 4e 29 0d 40 6e e5 1a 51 7d 24 a2 dc 5f ca f8 15 e2 1e 20 6a 27 86 9a 35 6d 32 78 5e 51 d0 9f dd 89 6e cd 73 7e f4 56 e5 92 1f ad 07 bf 41 ab 9d b6 60 3e 56 38 e5 a8 91 b8 Data Ascii: _<3ZjI}B&GO<s-Nk]^"ZK!P`[U_!:^-TQ!]P1N[[zdF^!SR?!d]881f~W>%O=4GtWL00~8lxnmm-~F6N)@nQ}$_ j'5m2x^Qns~VA`>V8
2024-03-14 00:56:53 UTC	16384	IN	Data Raw: 31 44 d2 92 cf dd a6 90 4f 99 03 6b e1 43 03 2f 89 9d 7f d1 c1 ff 00 f9 0d 3b 0c ab 40 0f 0e d4 0e 0a 4d ea 73 f7 e4 9d 31 98 43 d8 c3 9d 63 76 f2 e4 31 98 49 fc 42 9c f1 cc d0 ab c3 6d db c8 94 1e 57 39 88 21 1a 81 5f 2c 17 c5 2a 66 14 e2 37 fe 90 72 3f f9 f3 c0 4d 3c eb 15 5f 74 cc c2 e3 6f 09 e7 89 aa 7a c4 8b 48 d7 e1 e9 cf 1e b4 4f 2b 68 04 e6 47 71 2e 50 1a 3e fa 21 a6 a2 1d fe 23 15 d6 73 56 65 cc 32 d9 0b 7d 62 1d 0c de 87 90 c5 ce 2b 29 73 38 fb aa 93 66 3b 6a 1b 1c 55 dc 77 c2 73 e4 f5 74 d5 49 22 c9 4d 3c a1 55 82 90 43 1d f7 f9 62 1b a6 63 7a 1b 41 7d 8c 79 85 d9 21 31 64 ae f1 ff 00 49 ab 50 3f 0c 17 d1 56 eb 81 03 37 89 85 8e 00 69 33 18 69 69 a3 8f 5f 84 8b 37 84 f5 c3 e8 f3 85 83 b9 f1 f8 57 c2 79 f2 3c b1 31 6b 2b 2c 49 86 a6 00 e1 d5 7d Data Ascii: 1DOkC/;@Ms1Ccv1IBmW9!_,*f7r?M<_tozHO+hGq.P>!#sVe2}b+)s8f;jUwstI"M<UCbczA}y!1dIP?V7i3ii_7Wy<1k+,I}
2024-03-14 00:56:53 UTC	16384	IN	Data Raw: 43 81 08 f2 6a 06 a9 ca 2a d2 46 ee 9a 96 92 7a 84 b2 f3 d3 6b af cf 51 df 13 dd 9a 48 d4 4d 35 23 c8 8c 5b 44 cb 63 7b 6a 50 40 f8 91 81 5c bf 35 9a 9e 28 65 61 a6 9e a1 24 a6 6e 57 21 d1 91 88 f4 df 0f b2 16 a9 86 aa 07 40 91 2a 0b 2c 48 a6 c2 dc c9 27 99 24 ef 7c 0a f5 dc 84 18 5a 72 1f 32 f4 9e 82 8f 34 f6 75 ac 8d 65 86 36 0e 01 5b d9 86 e1 87 91 18 f1 f2 bc 96 09 5e 78 5d 44 80 dc a2 3e 95 3f 15 04 0e 7e 98 8d c8 f3 ea 49 d1 45 43 f7 72 01 62 0f 9f 96 24 eb 2a 72 a3 13 1d 71 86 1d 71 92 1d 90 ed 9a 40 8c 72 24 44 14 f1 45 5f 53 5c 5e 49 6a 24 b0 32 ca e5 c8 41 c9 54 92 6c a3 c8 60 27 8b f3 38 ee 59 f5 16 62 5b 4a 73 d2 05 ce 26 f3 ae 20 82 96 17 11 9f 09 d9 47 53 8a be a7 38 15 f5 53 d5 39 7e fe 12 ca aa 01 2b a1 85 89 36 f2 3f 8e 1b a2 b2 ef bc c5 Data Ascii: CjFzkQHM5#[Dc{jP@\5(ea$nW!@,H'$\|Zr24ue6[^x]D>?~IECrb$*rqq@r$DE_S\^Ij$2ATl`'8Yb[Js& GS8S9~+6?
2024-03-14 00:56:53 UTC	4266	IN	Data Raw: 06 d6 e6 77 df 17 f2 76 80 de f2 a1 40 72 c2 37 d7 8c d7 86 6d 29 fb d8 f3 bf 3f 7b 13 2f 88 f7 bc 0b 8c ef 30 c9 65 2d e9 8d fb dc 74 ec 47 5d e6 3c d6 70 82 3e a3 7c 28 08 c7 48 9b 6b 6f bd 8f 43 9c 34 9d fb a6 f7 b9 e1 31 3e fe f6 3a 58 74 92 91 3f 8f 12 70 48 7d a0 1d 5f 64 62 0a 07 37 c4 c5 38 f1 ea f8 0c 06 ee 90 d4 7c 7f 74 2d c9 aa 52 2a da 76 90 2b 47 a9 75 a9 5b 82 a4 d8 dc 1c 66 22 e0 9f 41 5f ba 39 e3 31 9b 6d 02 c2 09 9d 6d 21 ce 4c ea ea 8a ff 00 fd 28 76 4f 39 5b c4 d1 67 14 a1 bc 9d a9 91 87 e4 0e 0b 7b 5f e0 2f f0 ab d9 b6 69 90 c2 14 e6 b0 91 5d 96 31 e7 ed 28 0f 82 fd 35 a9 64 f8 e9 c5 51 3e 5d 53 c4 55 39 04 91 e7 b5 d9 44 99 2c ed 57 4f 25 14 48 ec 65 2a 00 72 5e fb 05 f0 e9 e4 6e 6f 8b c3 27 cc 5e 58 90 99 2f 20 02 ec 8b a6 ed 6d d8 Data Ascii: wv@r7m)?{/0e-tG]<p>\|(HkoC41>:Xt?pH}_db78\|t-Rv+Gu[f"A_91mm!L(vO9[g{_/i]1(5dQ>]SU9D,WO%Her^no'^X/ m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49827	172.67.20.158	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:52 UTC	540	OUT	GET /qscripts/quantum-mtb.js HTTP/1.1 Host: cdn.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:53 UTC	620	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:52 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding etag: W/"171035041707217096569823831710316802438" Cache-Control: public, max-age=300, stale-while-revalidate=21600, stale-if-error=21600 access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept x-content-type-options: no-sniff strict-transport-security: max-age=31536000 x-robots-tag: noindex CF-Cache-Status: HIT Age: 282 Server: cloudflare CF-RAY: 86404e730e78431c-EWR alt-svc: h3=":443"; ma=86400
2024-03-14 00:56:53 UTC	749	IN	Data Raw: 37 64 34 39 0d 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2d 32 30 32 33 20 51 75 61 6e 74 75 6d 20 4d 65 74 72 69 63 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 46 6f 72 20 55 53 20 70 61 74 65 6e 74 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 70 61 74 65 6e 74 73 2f 2e 20 46 6f 72 20 45 55 4c 41 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 65 75 6c 61 20 74 32 20 64 66 38 35 65 35 30 64 35 63 65 30 38 32 64 61 33 38 38 66 32 39 35 63 36 63 32 32 31 38 34 34 35 36 36 66 65 30 30 32 20 2a 2f 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 50 61 6b 6f 20 Data Ascii: 7d49/* Copyright 2015-2023 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula t2 df85e50d5ce082da388f295c6c221844566fe002 // Copyright Pako
2024-03-14 00:56:53 UTC	1369	IN	Data Raw: 73 79 6d 62 6f 6c 5f 5f 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 27 5d 20 7c 7c 20 77 69 6e 64 6f 77 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 3b 0a 76 61 72 20 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 5f 7a 6f 6e 65 5f 73 79 6d 62 6f 6c 5f 5f 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 27 5d 20 7c 7c 20 77 69 6e 64 6f 77 2e 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 3b 0a 76 61 72 20 50 72 6f 6d 69 73 65 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 5f 7a 6f 6e 65 5f 73 79 6d 62 6f 6c 5f 5f 50 72 6f 6d 69 73 65 27 5d 20 7c 7c 20 77 69 6e 64 6f 77 2e 50 72 6f 6d 69 73 65 3b 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 Data Ascii: symbol__MutationObserver'] \|\| window.MutationObserver;var queueMicrotask = window['__zone_symbol__queueMicrotask'] \|\| window.queueMicrotask;var Promise = window['__zone_symbol__Promise'] \|\| window.Promise; 'use strict';function aa(a){var b=0;return func
2024-03-14 00:56:53 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 6a 61 28 29 7b 66 61 28 29 3b 76 61 72 20 61 3d 63 61 2e 5f 51 75 61 6e 74 75 6d 4d 65 74 72 69 63 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 61 7c 7c 28 61 3d 63 61 2e 5f 51 75 61 6e 74 75 6d 4d 65 74 72 69 63 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3d 63 61 2e 5f 51 75 61 6e 74 75 6d 4d 65 74 72 69 63 53 79 6d 62 6f 6c 28 22 5f 51 75 61 6e 74 75 6d 4d 65 74 72 69 63 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 29 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 64 61 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e Data Ascii: ction ja(){fa();var a=ca._QuantumMetricSymbol.iterator;a\|\|(a=ca._QuantumMetricSymbol.iterator=ca._QuantumMetricSymbol("_QuantumMetricSymbol.iterator"));"function"!=typeof Array.prototype[a]&&da(Array.prototype,a,{configurable:!0,writable:!0,value:function
2024-03-14 00:56:53 UTC	1369	IN	Data Raw: 70 65 2e 6d 61 74 63 68 41 6c 6c 28 29 20 6d 75 73 74 20 68 61 76 65 20 67 6c 6f 62 61 6c 20 74 61 67 2e 22 29 3b 76 61 72 20 63 3d 6e 65 77 20 52 65 67 45 78 70 28 62 2c 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 76 6f 69 64 20 30 3a 22 67 22 29 2c 64 3d 74 68 69 73 2c 65 3d 21 31 2c 66 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 7b 7d 2c 68 3d 63 2e 6c 61 73 74 49 6e 64 65 78 3b 69 66 28 65 29 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 3b 76 61 72 20 6b 3d 63 2e 65 78 65 63 28 64 29 3b 69 66 28 21 6b 29 72 65 74 75 72 6e 20 65 3d 21 30 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 3b 63 2e 6c 61 73 74 49 6e 64 65 78 3d 3d 3d 68 26 26 28 63 2e 6c Data Ascii: pe.matchAll() must have global tag.");var c=new RegExp(b,b instanceof RegExp?void 0:"g"),d=this,e=!1,f={next:function(){var g={},h=c.lastIndex;if(e)return{value:void 0,done:!0};var k=c.exec(d);if(!k)return e=!0,{value:void 0,done:!0};c.lastIndex===h&&(c.l
2024-03-14 00:56:53 UTC	1369	IN	Data Raw: 24 32 2f 24 33 2f 7b 69 64 7d 22 7d 2c 7b 72 65 3a 7b 70 3a 22 2f 61 6b 61 6d 2f 2e 2b 22 2c 66 3a 22 22 7d 2c 72 65 70 3a 22 2f 61 6b 61 6d 2f 7b 70 69 78 65 6c 7d 22 7d 2c 7b 72 65 3a 7b 70 3a 22 28 68 74 74 70 5b 73 5d 3f 3a 2f 2f 29 5b 5e 5c 5c 2e 5d 2b 5c 5c 2e 73 61 66 65 66 72 61 6d 65 5c 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 5c 2e 63 6f 6d 22 2c 66 3a 22 22 7d 2c 72 65 70 3a 22 24 31 52 45 50 4c 41 43 45 44 2e 73 61 66 65 66 72 61 6d 65 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 22 7d 5d 2c 77 61 3d 2f 7a 6f 6f 6d 7c 74 6f 67 67 6c 65 7c 70 72 65 76 7c 6e 65 78 74 7c 66 6f 72 77 61 72 64 7c 62 61 63 6b 77 61 72 64 7c 71 74 79 7c 64 6f 77 6e 7c 75 70 7c 72 69 67 68 74 7c 6c 65 66 74 7c 61 72 72 6f 77 7c Data Ascii: $2/$3/{id}"},{re:{p:"/akam/.+",f:""},rep:"/akam/{pixel}"},{re:{p:"(http[s]?://)[^\\.]+\\.safeframe\\.googlesyndication\\.com",f:""},rep:"$1REPLACED.safeframe.googlesyndication.com"}],wa=/zoom\|toggle\|prev\|next\|forward\|backward\|qty\|down\|up\|right\|left\|arrow\|
2024-03-14 00:56:53 UTC	1369	IN	Data Raw: 2e 24 61 3d 3d 45 61 29 72 65 74 75 72 6e 21 74 68 69 73 2e 49 61 5b 30 5d 2e 65 76 61 6c 75 61 74 65 28 29 3b 69 66 28 74 68 69 73 2e 24 61 3d 3d 46 61 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 74 68 69 73 2e 49 61 2e 6c 65 6e 67 74 68 3b 2b 2b 61 29 69 66 28 21 74 68 69 73 2e 49 61 5b 61 5d 2e 65 76 61 6c 75 61 74 65 28 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 6f 72 28 61 3d 30 3b 61 3c 74 68 69 73 2e 49 61 2e 6c 65 6e 67 74 68 3b 2b 2b 61 29 69 66 28 74 68 69 73 2e 49 61 5b 61 5d 2e 65 76 61 6c 75 61 74 65 28 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 4c 28 29 7b 72 65 74 75 72 6e 20 44 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 22 4c 22 2b 74 68 69 73 2e 24 61 2e 74 6f 53 74 72 69 6e 67 28 29 5d 2e 63 6f 6e 63 Data Ascii: .$a==Ea)return!this.Ia[0].evaluate();if(this.$a==Fa){for(var a=0;a<this.Ia.length;++a)if(!this.Ia[a].evaluate())return!1;return!0}for(a=0;a<this.Ia.length;++a)if(this.Ia[a].evaluate())return!0;return!1}L(){return D.apply(this,["L"+this.$a.toString()].conc
2024-03-14 00:56:53 UTC	1369	IN	Data Raw: 65 6e 74 3d 62 7d 52 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 76 65 6e 74 2e 65 76 61 6c 75 61 74 65 28 29 2e 76 61 6c 75 65 7d 4c 28 29 7b 72 65 74 75 72 6e 20 44 28 22 45 56 22 2c 74 68 69 73 2e 65 76 65 6e 74 2e 71 61 28 29 29 7d 24 28 29 7b 72 65 74 75 72 6e 20 45 28 74 68 69 73 2e 65 76 65 6e 74 29 7d 43 61 28 61 29 7b 47 28 74 68 69 73 2e 65 76 65 6e 74 2c 61 29 7d 7d 3b 63 6c 61 73 73 20 4f 61 20 65 78 74 65 6e 64 73 20 49 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 7d 52 28 29 7b 72 65 74 75 72 6e 7b 43 63 3a 21 30 2c 76 61 6c 75 65 3a 22 22 7d 7d 4c 28 29 7b 72 65 74 75 72 6e 20 44 28 22 48 45 22 29 7d 24 28 29 7b 72 65 74 75 72 6e 7b 65 76 65 6e 74 69 6e 66 6f 3a 21 30 7d 7d 7d 3b 63 6c 61 73 73 20 51 61 20 65 78 74 Data Ascii: ent=b}R(){return this.event.evaluate().value}L(){return D("EV",this.event.qa())}$(){return E(this.event)}Ca(a){G(this.event,a)}};class Oa extends I{constructor(){super()}R(){return{Cc:!0,value:""}}L(){return D("HE")}$(){return{eventinfo:!0}}};class Qa ext
2024-03-14 00:56:53 UTC	1369	IN	Data Raw: 5b 30 2d 39 5d 2a 29 29 28 5b 5e 5f 5c 2d 30 2d 39 5d 7c 24 29 2f 2c 57 61 3d 2f 5c 44 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 29 7b 76 61 72 20 62 3d 56 61 2e 65 78 65 63 28 61 29 3b 69 66 28 62 26 26 21 28 32 3e 62 2e 6c 65 6e 67 74 68 29 26 26 28 61 3d 62 5b 31 5d 2c 30 3c 61 2e 6c 65 6e 67 74 68 26 26 22 2e 22 3d 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 62 3d 21 31 2c 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2c 22 29 21 3d 61 2e 6c 65 6e 67 74 68 2d 33 26 26 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 29 21 3d 61 2e 6c 65 6e 67 74 68 2d 33 7c 7c 32 3d 3d 61 2e 6c 65 6e 67 74 68 7c 7c 28 62 3d 21 30 29 2c 61 3d 61 2e 72 65 70 6c 61 63 65 Data Ascii: [0-9]*))([^_\-0-9]\|$)/,Wa=/\D/g;function Xa(a){var b=Va.exec(a);if(b&&!(2>b.length)&&(a=b[1],0<a.length&&"."==a[a.length-1]&&(a=a.substring(0,a.length-1)),b=!1,a.lastIndexOf(",")!=a.length-3&&a.lastIndexOf(".")!=a.length-3\|\|2==a.length\|\|(b=!0),a=a.replace
2024-03-14 00:56:53 UTC	1369	IN	Data Raw: 2e 24 61 2e 74 6f 53 74 72 69 6e 67 28 29 2c 74 68 69 73 2e 76 61 6c 75 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 7d 76 61 72 20 63 62 3d 30 2c 64 62 3d 31 2c 65 62 3d 32 3b 63 6c 61 73 73 20 66 62 20 65 78 74 65 6e 64 73 20 47 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 7d 65 76 61 6c 75 61 74 65 28 61 29 7b 72 65 74 75 72 6e 21 21 61 7d 4c 28 29 7b 72 65 74 75 72 6e 20 44 28 22 49 73 54 72 75 65 22 29 7d 7d 63 6c 61 73 73 20 67 62 20 65 78 74 65 6e 64 73 20 47 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 7d 65 76 61 6c 75 61 74 65 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 30 21 3d 61 2e 6c 65 6e 67 74 68 7d 4c 28 29 7b 72 65 74 75 72 6e 20 44 28 22 49 73 4e 6f 74 4e 75 6c 6c 22 29 7d 7d Data Ascii: .$a.toString(),this.value.toString())}}var cb=0,db=1,eb=2;class fb extends Ga{constructor(){super()}evaluate(a){return!!a}L(){return D("IsTrue")}}class gb extends Ga{constructor(){super()}evaluate(a){return null!=a&&0!=a.length}L(){return D("IsNotNull")}}
2024-03-14 00:56:53 UTC	1369	IN	Data Raw: 53 56 22 2c 74 68 69 73 2e 6b 61 29 7d 24 28 29 7b 72 65 74 75 72 6e 7b 66 6f 72 6d 53 75 62 6d 69 74 74 65 64 3a 21 30 7d 7d 7d 3b 63 6c 61 73 73 20 6e 62 20 65 78 74 65 6e 64 73 20 4b 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 73 75 70 65 72 28 61 29 3b 74 68 69 73 2e 67 3d 62 3b 74 68 69 73 2e 71 61 3d 44 28 22 53 45 56 22 2c 74 68 69 73 2e 67 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 74 68 69 73 2e 44 3d 7b 65 76 65 6e 74 69 6e 66 6f 3a 21 30 2c 65 76 65 6e 74 3a 21 30 7d 7d 52 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 74 68 69 73 2e 67 2c 62 3d 74 68 69 73 2e 47 2e 70 62 2c 63 3d 62 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 63 3b 2d 2d 63 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 69 66 28 64 2e 69 64 3d 3d 61 29 72 65 74 75 72 6e 20 64 2e 76 61 6c 75 Data Ascii: SV",this.ka)}$(){return{formSubmitted:!0}}};class nb extends K{constructor(a,b){super(a);this.g=b;this.qa=D("SEV",this.g.toString());this.D={eventinfo:!0,event:!0}}R(){for(var a=this.g,b=this.G.pb,c=b.length-1;0<=c;--c){var d=b[c];if(d.id==a)return d.valu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49839	31.13.71.7	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:53 UTC	1279	OUT	GET /signals/config/293418718495934?v=2.9.149&r=stable&domain=www3.mtb.com&hme=8b8eb2472f555e54a8b57f2b720f9bd3b1bc6aed031525376dd772ba51107995&ex_m=63%2C107%2C95%2C99%2C54%2C3%2C89%2C62%2C14%2C87%2C80%2C45%2C47%2C153%2C156%2C167%2C163%2C164%2C166%2C26%2C90%2C46%2C69%2C165%2C148%2C151%2C160%2C161%2C168%2C116%2C13%2C44%2C172%2C171%2C118%2C16%2C30%2C33%2C1%2C37%2C58%2C59%2C60%2C64%2C84%2C15%2C12%2C86%2C83%2C82%2C96%2C98%2C32%2C97%2C27%2C23%2C149%2C152%2C125%2C25%2C9%2C10%2C11%2C5%2C6%2C22%2C19%2C20%2C50%2C55%2C57%2C67%2C91%2C24%2C68%2C8%2C7%2C72%2C42%2C18%2C93%2C92%2C17%2C74%2C79%2C41%2C40%2C78%2C34%2C36%2C77%2C49%2C75%2C29%2C38%2C66%2C0%2C85%2C4%2C81%2C73%2C76%2C2%2C31%2C56%2C35%2C94%2C39%2C71%2C61%2C100%2C53%2C52%2C28%2C88%2C51%2C48%2C43%2C70%2C65%2C21%2C101 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:53 UTC	2008	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin
2024-03-14 00:56:53 UTC	755	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 65 6d 62 65 64 64 65 72 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 65 70 5f 72 65 70 6f 72 74 22 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 0d 0a 50 72 61 67 6d 61 3a 20 70 75 62 6c 69 63 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 31 32 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 30 31 20 4a 61 6e 20 32 30 30 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 58 2d 43 6f Data Ascii: cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"Pragma: publicCache-Control: public, max-age=1200Expires: Sat, 01 Jan 2000 00:00:00 GMTX-Co
2024-03-14 00:56:53 UTC	745	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-03-14 00:56:53 UTC	1500	IN	Data Raw: 45 53 53 0a 2a 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 20 4e 4f 4e 49 4e 46 52 49 4e 47 45 4d 45 4e 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 48 45 20 41 55 54 48 4f 52 53 20 4f 52 0a 2a 20 43 4f 50 59 52 49 47 48 54 20 48 4f 4c 44 45 52 53 20 42 45 20 4c 49 41 42 4c 45 20 46 4f 52 20 41 4e 59 20 43 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 45 52 20 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 45 54 48 45 52 0a 2a 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 0a 2a 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 Data Ascii: ESS* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN* CONNECTION WI
2024-03-14 00:56:53 UTC	1500	IN	Data Raw: 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 75 6e 63 74 69 6f 6e Data Ascii: "FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;function
2024-03-14 00:56:53 UTC	1500	IN	Data Raw: 63 75 6c 75 73 5c 2e 63 6f 6d 7c 6e 6f 76 69 5c 2e 63 6f 6d 29 5c 2e 3f 24 2f 69 29 3b 72 65 74 75 72 6e 20 61 21 3d 3d 6e 75 6c 6c 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 6f 75 6c 64 4e 6f 74 44 72 6f 70 43 6f 6f 6b 69 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 Data Ascii: culus\.com\|novi\.com)\.?$/i);return a!==null}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsShouldNotDropCookie",function(){return function(g,h,i,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsMod
2024-03-14 00:56:53 UTC	1500	IN	Data Raw: 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 75 6c 6c 2c 65 3d 6c 28 63 2c 71 29 3b 65 3d 3d 3d 6e 75 6c 6c 26 26 28 65 3d 6c 28 62 2e 72 65 66 65 72 72 65 72 2c 71 29 29 3b 65 3d 3d 3d 6e 75 6c 6c 26 26 28 65 3d 64 29 3b 69 66 28 65 21 3d 6e 75 6c 6c 26 26 65 2e 6c 65 6e 67 74 68 3e 35 30 30 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 6e 28 72 29 3b 69 66 28 65 21 3d 6e 75 6c 6c 29 7b 69 66 28 21 66 29 72 65 74 75 72 6e 20 6f 28 72 2c 65 29 3b 66 2e 6d 61 79 62 65 55 70 64 61 74 65 50 61 79 6c 6f 61 64 28 65 29 3b 72 65 74 75 72 6e 20 70 28 72 2c 66 29 7d 65 6c 73 65 20 69 66 28 66 29 72 65 74 75 72 6e 20 70 28 72 2c 66 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 76 61 72 20 61 3d 6e 28 74 29 3b 69 66 Data Ascii: 0?arguments[1]:null,e=l(c,q);e===null&&(e=l(b.referrer,q));e===null&&(e=d);if(e!=null&&e.length>500)return null;var f=n(r);if(e!=null){if(!f)return o(r,e);f.maybeUpdatePayload(e);return p(r,f)}else if(f)return p(r,f);return null}function y(){var a=n(t);if
2024-03-14 00:56:53 UTC	1500	IN	Data Raw: 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e Data Ascii: ixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.
2024-03-14 00:56:53 UTC	1500	IN	Data Raw: 6f 68 69 62 69 74 65 64 73 6f 75 72 63 65 73 22 29 3b 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 26 26 66 2e 72 65 67 69 73 74 65 72 50 6c 75 67 69 6e 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 68 69 62 69 74 65 64 73 6f 75 72 63 65 73 22 2c 65 2e 65 78 70 6f 72 74 73 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 70 72 6f 68 69 62 69 74 65 64 73 6f 75 72 63 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 6c 6f 63 61 74 69 6f 6e 2c 68 69 73 74 6f 72 79 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b Data Ascii: ohibitedsources");f.registerPlugin&&f.registerPlugin("fbevents.plugins.prohibitedsources",e.exports);f.ensureModuleRegistered("fbevents.plugins.prohibitedsources",function(){return e.exports})})()})(window,document,location,history);(function(a,b,c,d){
2024-03-14 00:56:53 UTC	1298	IN	Data Raw: 74 73 50 6c 75 67 69 6e 22 29 3b 76 61 72 20 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 68 61 32 35 36 5f 77 69 74 68 5f 64 65 70 65 6e 64 65 6e 63 69 65 73 5f 6e 65 77 22 29 3b 68 2e 65 61 63 68 3b 76 61 72 20 6a 3d 68 2e 6d 61 70 2c 6b 3d 21 31 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 61 28 66 75 6e 63 74 69 6f 6e 28 61 2c 65 29 7b 62 2e 6c 69 73 74 65 6e 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 66 29 7b 69 66 28 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b Data Ascii: tsPlugin");var h=f.getFbeventsModules("SignalsFBEventsUtils"),i=f.getFbeventsModules("sha256_with_dependencies_new");h.each;var j=h.map,k=!1;f.getFbeventsModules("SignalsParamList");e.exports=new a(function(a,e){b.listen(function(b,c,f){if(b==null)return;
2024-03-14 00:56:53 UTC	1500	IN	Data Raw: 2e 75 72 6c 3b 66 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 28 6d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 28 62 29 3d 3d 3d 61 26 26 28 6b 3d 21 30 2c 68 2e 70 75 73 68 28 61 29 2c 66 2e 73 65 74 28 62 2c 22 5f 72 65 6d 6f 76 65 64 5f 22 29 29 7d 29 7d 29 7d 7d 62 2e 75 6e 77 61 6e 74 65 64 50 61 72 61 6d 73 3d 67 3b 62 2e 72 65 73 74 72 69 63 74 65 64 50 61 72 61 6d 73 3d 68 3b 69 66 28 6b 29 7b 65 7c 7c 28 61 2e 61 70 70 65 6e 64 28 22 75 70 5f 75 72 6c 22 2c 67 2e 6a 6f 69 6e 28 22 2c 22 29 29 2c 61 2e 61 70 70 65 6e 64 28 22 72 70 5f 75 72 6c 22 2c 68 2e 6a 6f 69 6e 28 22 2c 22 29 29 2c 66 2e 73 65 74 28 22 5f 66 69 6c 74 65 72 65 64 50 61 72 61 6d 73 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 29 29 3b 72 Data Ascii: .url;f.forEach(function(a,b){j(m,function(a){i(b)===a&&(k=!0,h.push(a),f.set(b,"_removed_"))})})}}b.unwantedParams=g;b.restrictedParams=h;if(k){e\|\|(a.append("up_url",g.join(",")),a.append("rp_url",h.join(",")),f.set("_filteredParams",JSON.stringify(b)));r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49840	69.147.82.61	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:53 UTC	555	OUT	GET /wi/config/10087193.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:53 UTC	768	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-amz-request-id: 0W03F4Z8SB0PRT2R x-amz-id-2: lcuxQwJvLSQ+e55ISZp0NUO00c9+oogRa7JM3Q2v0itjKcskIscCkzYf+Ic7sgS/fX9ZCT3rP6U= Content-Type: application/json Date: Wed, 13 Mar 2024 23:59:52 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Cache-Control: public,max-age=3600 Content-Length: 2 Age: 3421 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-14 00:56:53 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49841	69.147.82.61	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:53 UTC	555	OUT	GET /wi/config/10108773.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:53 UTC	767	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-amz-request-id: 6Y4GM4RHHTRCNVV2 x-amz-id-2: B4+aCqETxEBnjLfpSUrNa+M+M2+eC8NUTYDYwC9iLHnzyfbCQiaYd5ZruydUldX5n5zuk149KYE= Content-Type: application/json Date: Thu, 14 Mar 2024 00:43:45 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Cache-Control: public,max-age=3600 Content-Length: 2 Age: 788 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-03-14 00:56:53 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49846	104.244.42.131	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:53 UTC	932	OUT	GET /i/adsct?bci=3&eci=2&event_id=eb8739fc-85bf-4705-8e1c-d3d391190c7d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ce9a527c-4201-486e-8c81-c51017e646de&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:54 UTC	572	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:56:53 GMT perf: 7469935968 server: tsa_b set-cookie: personalization_id="v1_5UBAyvKoxs+QXpDa5ElW/A=="; Max-Age=63072000; Expires=Sat, 14 Mar 2026 00:56:53 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 02c64728e0e9bb69 strict-transport-security: max-age=631138519 x-response-time: 71 x-connection-hash: c9516d1e525770d83ee20596b47c8dcbe32dc59c5dc5b25eafdba5c8ac5a5e9b connection: close
2024-03-14 00:56:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49845	104.244.42.197	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:53 UTC	915	OUT	GET /i/adsct?bci=3&eci=2&event_id=eb8739fc-85bf-4705-8e1c-d3d391190c7d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ce9a527c-4201-486e-8c81-c51017e646de&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:53 UTC	551	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:56:53 GMT perf: 7469935968 server: tsa_b set-cookie: muc_ads=08022923-6d5c-4a53-a3f5-ff7758503d68; Max-Age=63072000; Expires=Sat, 14 Mar 2026 00:56:53 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 3acc866a9e3a1694 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: da28488ddc614aa4f51c09ea1ca25db5e659809a334ee76461a9e4c2ab57fa8d connection: close
2024-03-14 00:56:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49843	44.209.137.118	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:53 UTC	607	OUT	GET /spx?dxver=4.0.0&shaid=34249&tdr=&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&cb=42205510116200300 HTTP/1.1 Host: dx.mountain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:53 UTC	350	IN	HTTP/1.1 200 OK vary: origin,access-control-request-method,access-control-request-headers,accept-encoding expires: Thu, 01 Jan 1970 00:00:00 GMT content-type: application/javascript;charset=utf-8 content-length: 29966 date: Thu, 14 Mar 2024 00:56:53 GMT x-envoy-upstream-service-time: 2 be: spx-prod server: istio-envoy connection: close
2024-03-14 00:56:53 UTC	7913	IN	Data Raw: 76 61 72 20 64 63 6d 5f 63 69 64 2c 64 63 6d 5f 74 69 64 2c 64 63 6d 5f 67 69 64 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 5f 67 61 22 29 5b 31 5d 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 64 63 6d 5f 63 69 64 3d 64 5b 32 5d 2b 22 2e 22 2b 64 5b 33 5d 2c 64 63 6d 5f 74 69 64 3d 67 61 2e 67 65 74 41 6c 6c 28 29 5b 30 5d 2e 62 2e 64 61 74 61 2e 76 61 6c 75 65 73 5b 22 3a 74 72 61 63 6b 69 6e 67 49 64 22 5d 3b 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 5f 67 69 64 22 29 5b 31 5d 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 64 63 6d 5f 67 69 64 3d 64 5b 32 5d 2b 22 Data Ascii: var dcm_cid,dcm_tid,dcm_gid;!function(){try{var d=document.cookie.split("_ga")[1].split(";")[0].split(".");dcm_cid=d[2]+"."+d[3],dcm_tid=ga.getAll()[0].b.data.values[":trackingId"];d=document.cookie.split("_gid")[1].split(";")[0].split(".");dcm_gid=d[2]+"
2024-03-14 00:56:53 UTC	16384	IN	Data Raw: 20 64 69 63 74 20 3d 20 7b 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6d 73 45 6c 69 67 69 62 6c 65 46 6f 72 43 6f 6d 6d 61 53 65 70 65 72 61 74 65 64 4c 69 73 74 20 3d 20 5b 22 73 68 63 70 22 2c 20 22 73 68 6f 71 22 2c 20 22 73 68 72 6f 71 22 2c 20 22 73 68 72 6f 75 70 22 2c 20 22 73 68 6f 75 70 22 2c 20 22 73 68 6f 70 69 64 22 2c 20 22 73 68 72 6f 70 69 64 22 2c 20 22 73 68 72 6f 70 69 6c 22 2c 20 22 73 68 63 70 71 22 2c 20 22 73 68 61 64 64 69 74 69 6f 6e 61 6c 22 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 61 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 31 45 31 37 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 Data Ascii: dict = {}, paramsEligibleForCommaSeperatedList = ["shcp", "shoq", "shroq", "shroup", "shoup", "shopid", "shropid", "shropil", "shcpq", "shadditional"]; if (a === "undefined") a = Math.floor(Math.random() * 1E17); i
2024-03-14 00:56:53 UTC	314	IN	Data Raw: 6f 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 65 74 41 4f 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 6e 74 6e 67 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 6d 6e 74 6e 69 73 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 67 61 5f 74 72 61 63 6b 69 6e 67 5f 69 64 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 67 61 5f 63 6c 69 65 6e 74 5f 69 64 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 26 26 20 73 68 70 74 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 61 5f 69 6e 66 6f 2e 73 74 61 74 75 73 20 3d 20 22 4f 4b 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 61 5f 69 6e 66 6f 2e 67 61 5f 74 72 61 63 Data Ascii: o === undefined) { getAO(); } if (mntng !== undefined && mntnis !== undefined && ga_tracking_id !== undefined && ga_client_id !== undefined && shpt !== undefined) { ga_info.status = "OK"; ga_info.ga_trac
2024-03-14 00:56:53 UTC	5355	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 22 20 7c 7c 20 67 61 5f 63 6c 69 65 6e 74 5f 69 64 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 2e 75 6e 64 65 66 69 6e 65 64 22 20 7c 7c 20 67 61 5f 63 6c 69 65 6e 74 5f 69 64 20 3d 3d 20 22 6e 75 6c 6c 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 61 5f 63 6c 69 65 6e 74 5f 69 64 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 61 5f 69 6e 66 6f 2e 67 61 5f 63 6c 69 65 6e 74 5f 69 64 20 3d 20 67 61 5f 63 6c 69 65 6e 74 5f 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 61 5f 69 6e 66 6f 2e 73 68 70 74 20 3d 20 73 68 70 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 63 6d 5f 63 69 64 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 7c 7c 20 64 Data Ascii: undefined" \|\| ga_client_id == "undefined.undefined" \|\| ga_client_id == "null") { ga_client_id = ""; } ga_info.ga_client_id = ga_client_id; ga_info.shpt = shpt; if (dcm_cid == "undefined" \|\| d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49844	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:53 UTC	7488	OUT	GET /ct?id=40173&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1710377811956&hl=1&op=0&ag=300509663&rand=930900207112600627151968957212880781022186171791009110850075551602210670150808968161&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=%7B%7D&cri=HmumvR8fU1&pto=23275&ver=59&gac=-&mei=&ap=&fe=1&duid=1.1710377811.4AAk1vNijWsJXg6B&suid=1.1710377811.LyfUeGgwomjj9ERX&tuid=1.1710377811.UaGzbtZWBnSOHttz&fbc=-&gtm=W10%3D&it=47%2C21048%2C1247&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0&ab=&sck=- HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:53 UTC	396	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/javascript Date: Thu, 14 Mar 2024 00:56:53 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Set-Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc; Max-Age=29030400; Path=/; Expires=Thu, 13 Feb 2025 00:56:53 GMT; HttpOnly; Secure; SameSite=None Connection: close Transfer-Encoding: chunked
2024-03-14 00:56:53 UTC	783	IN	Data Raw: 64 33 64 0d 0a 74 79 70 65 6f 66 20 5f 5f 63 74 63 67 5f 63 74 5f 34 30 31 37 33 5f 65 78 65 63 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 5f 5f 63 74 63 67 5f 63 74 5f 34 30 31 37 33 5f 65 78 65 63 28 7b 22 74 63 22 3a 22 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 62 39 65 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 35 30 65 66 38 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 Data Ascii: d3dtypeof __ctcg_ct_40173_exec === 'function' && __ctcg_ct_40173_exec({"tc":"37dfbd8ee84e00126beec432ed4f8b9e9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b940263007294
2024-03-14 00:56:53 UTC	2358	IN	Data Raw: 36 61 38 38 63 35 65 37 64 61 32 39 61 30 33 63 37 61 37 34 64 63 33 38 31 63 61 35 64 34 64 66 30 65 32 37 39 30 62 30 32 30 65 35 34 31 66 30 39 30 30 64 63 65 32 31 65 31 33 64 35 32 34 63 35 30 63 62 32 36 61 66 30 61 63 63 38 37 66 36 33 66 66 38 63 39 37 38 63 36 31 36 61 37 64 37 39 63 64 61 36 64 38 39 34 61 31 32 37 66 65 66 35 66 35 34 31 64 33 65 34 35 37 64 64 33 61 37 36 36 62 37 35 33 64 66 63 31 38 62 36 34 66 64 64 65 36 39 62 64 64 65 36 63 64 66 38 31 63 38 66 30 37 36 38 38 62 63 66 31 37 34 36 30 33 65 64 30 61 39 31 31 30 34 39 35 66 37 30 64 35 61 32 33 66 61 65 37 65 35 33 38 65 30 34 33 63 65 66 38 35 36 66 64 66 64 33 63 61 65 36 65 65 32 36 64 38 37 35 39 62 66 31 64 64 37 61 38 33 66 64 62 31 33 32 37 65 34 61 63 38 65 36 37 33 Data Ascii: 6a88c5e7da29a03c7a74dc381ca5d4df0e2790b020e541f0900dce21e13d524c50cb26af0acc87f63ff8c978c616a7d79cda6d894a127fef5f541d3e457dd3a766b753dfc18b64fdde69bdde6cdf81c8f07688bcf174603ed0a9110495f70d5a23fae7e538e043cef856fdfd3cae6ee26d8759bf1dd7a83fdb1327e4ac8e673
2024-03-14 00:56:53 UTC	260	IN	Data Raw: 61 75 64 22 3a 5b 7b 22 63 6c 69 65 6e 74 49 64 22 3a 22 33 33 31 30 30 30 33 31 32 22 2c 22 74 79 70 65 22 3a 22 62 69 6e 67 22 7d 5d 7d 2c 22 66 62 6b 22 3a 7b 22 61 75 64 22 3a 5b 7b 22 63 6c 69 65 6e 74 49 64 22 3a 22 31 39 39 34 35 33 34 36 36 37 35 32 34 38 38 38 22 2c 22 74 79 70 65 22 3a 22 66 61 63 65 62 6f 6f 6b 22 7d 5d 7d 2c 22 67 67 61 22 3a 7b 22 61 75 64 22 3a 5b 7b 22 69 64 22 3a 22 38 37 35 35 31 37 35 30 35 22 2c 22 6c 61 62 65 6c 22 3a 22 42 53 69 53 43 4a 62 34 37 70 55 59 45 4d 47 73 76 61 45 44 22 7d 5d 7d 2c 22 67 61 63 22 3a 7b 22 74 22 3a 5b 22 47 2d 5a 54 4e 51 36 5a 4b 38 54 30 22 5d 2c 22 74 75 61 22 3a 5b 5d 2c 22 76 22 3a 31 2c 22 63 22 3a 22 37 7a 4a 6e 39 6e 48 34 7a 62 7a 77 70 6a 70 76 62 7a 22 7d 7d 2c 22 22 29 3b 0d 0a Data Ascii: aud":[{"clientId":"331000312","type":"bing"}]},"fbk":{"aud":[{"clientId":"1994534667524888","type":"facebook"}]},"gga":{"aud":[{"id":"875517505","label":"BSiSCJb47pUYEMGsvaED"}]},"gac":{"t":["G-ZTNQ6ZK8T0"],"tua":[],"v":1,"c":"7zJn9nH4zbzwpjpvbz"}},"");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49849	142.251.40.226	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	1380	OUT	GET /td/rul/948713993?random=1710377812268&cv=11&fst=1710377812268&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:54 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 14-Mar-2024 01:11:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:56:54 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-14 00:56:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49852	69.147.82.61	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	357	OUT	GET /wi/config/10087193.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:54 UTC	614	IN	HTTP/1.1 200 OK x-amz-request-id: Y4FKGANA0M6ZQW2F x-amz-id-2: ADE1C0/4tOgLG/PuyloKmemCTi2IDJgJUA3x2VZ3dwNq9JcxebSmj8UGr0j6wfobNH5hKB2czgU= Content-Type: application/json Date: Thu, 14 Mar 2024 00:51:53 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Cache-Control: public,max-age=3600 Content-Length: 2 Age: 301 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-14 00:56:54 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49853	69.147.82.61	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	357	OUT	GET /wi/config/10108773.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:54 UTC	618	IN	HTTP/1.1 200 OK x-amz-request-id: YKCSXA9DEXQB8DP5 x-amz-id-2: 37WtNtL58uqjGoaUDfF92GeJMJXvO1UvJr7Oy5SKYxtS4DJWd8uPgRKV/uGBiRQ07UpAzudCyDTxY67bBbZx6eav2637Oz1f Content-Type: application/json Date: Thu, 14 Mar 2024 00:56:53 GMT Server: ATS Referrer-Policy: no-referrer-when-downgrade Vary: Origin Cache-Control: public,max-age=3600 Age: 1 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-03-14 00:56:54 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49851	142.251.40.130	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	1256	OUT	GET /pagead/viewthroughconversion/948713993/?random=1710377812268&cv=11&fst=1710377812268&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:54 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 14-Mar-2024 01:11:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:56:54 UTC	410	IN	Data Raw: 39 31 34 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 914(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-14 00:56:54 UTC	1252	IN	Data Raw: 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 Data Ascii: 1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("S
2024-03-14 00:56:54 UTC	669	IN	Data Raw: 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 41 7a 4e 7a 63 34 4d 54 49 79 4e 6a 67 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 39 34 38 37 31 33 39 39 33 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 31 30 33 37 37 38 31 32 32 36 38 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 33 37 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 62 30 76 38 37 34 30 31 30 37 38 31 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 Data Ascii: ).call(this);;s.ss_(window,'OjE3MTAzNzc4MTIyNjg',['https://www.google.com/pagead/1p-user-list/948713993/?random\x3d1710377812268\x26cv\x3d11\x26fst\x3d1710374400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43b0v874010781za200\x26gcd\x3d13
2024-03-14 00:56:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49855	54.156.2.105	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	536	OUT	GET /is HTTP/1.1 Host: 54.156.2.105 Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:54 UTC	405	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:56:54 GMT access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header x-application-context: application:prod:8080 content-type: text/plain;charset=utf-8 content-length: 32 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close
2024-03-14 00:56:54 UTC	32	IN	Data Raw: 79 36 2f 34 67 6a 77 4e 2b 74 32 5a 76 36 66 5a 4c 33 6b 4f 77 6b 4a 54 41 43 66 72 6f 47 76 36 Data Ascii: y6/4gjwN+t2Zv6fZL3kOwkJTACfroGv6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49859	76.13.32.146	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	858	OUT	GET /sp.pl?a=10000&d=Thu%2C%2014%20Mar%202024%2000%3A56%3A52%20GMT&n=-1&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium%2Cgtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:54 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:54 GMT Expires: Thu, 14 Mar 2024 00:56:54 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFZL8mUCEF-d4bLnUBZTeFt8ULdHBJgFEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAApRLIQ0A_JgP4FxCbMqpWKM; Expires=Fri, 14 Mar 2025 06:56:54 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-14 00:56:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49857	76.13.32.146	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	795	OUT	GET /sp.pl?a=10000&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10087193&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&tagmgr=tealium%2Cgtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:54 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:54 GMT Expires: Thu, 14 Mar 2024 00:56:54 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFZL8mUCEFAqeDvettSjlN_MCOwxPwMFEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAvRTlD64LI4iG_-rb7QwAb4; Expires=Fri, 14 Mar 2025 06:56:54 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-14 00:56:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49858	76.13.32.146	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	805	OUT	GET /sp.pl?a=10000&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium%2Cgtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:54 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:54 GMT Expires: Thu, 14 Mar 2024 00:56:54 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU; Expires=Fri, 14 Mar 2025 06:56:54 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-14 00:56:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49863	142.250.81.228	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	1020	OUT	GET /js/bg/v77SiQbcxtK1O5ek11TdloiB5zZ00UAxE3PsP-319e4.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3&co=aHR0cHM6Ly93d3czLm10Yi5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=invisible&cb=c8l0hwixplg5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:54 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 17875 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 13 Mar 2024 21:02:07 GMT Expires: Thu, 13 Mar 2025 21:02:07 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 04 Mar 2024 15:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 14087 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:56:54 UTC	441	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 51 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 79 29 7b 69 66 28 21 28 43 3d 28 79 3d 51 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 79 29 7c 7c 21 79 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 43 3b 74 72 79 7b 43 3d 79 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6e 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6e 2c 63 72 65 61 74 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var Q=this\|\|self,R=function(C,y){if(!(C=(y=Q.trustedTypes,null),y)\|\|!y.createPolicy)return C;try{C=y.createPolicy("bg",{createHTML:n,createScript:n,creat
2024-03-14 00:56:54 UTC	1252	IN	Data Raw: 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 6b 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 22 22 2b 6b 7d 7d 28 51 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 43 55 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 79 29 7b 66 75 6e 63 74 69 6f 6e 20 51 28 29 7b 74 68 69 73 2e 4a 3d 28 74 68 69 73 2e 6e 3d 30 2c 5b 5d 29 7d 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 79 2e 52 70 28 6e 29 2c 43 2e 52 70 28 6e 29 7d 2c 28 43 3d 28 28 51 2e 70 72 Data Ascii: .createScript(k)}:function(k){return""+k}}(Q)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var CU=function(C,y){function Q(){this.J=(this.n=0,[])}return[function(n){y.Rp(n),C.Rp(n)},(C=((Q.pr
2024-03-14 00:56:54 UTC	1252	IN	Data Raw: 3a 6e 2c 51 26 26 28 64 3d 43 2c 64 2e 44 21 3d 63 3e 3e 36 26 26 28 64 2e 44 3d 63 3e 3e 36 2c 4c 3d 58 28 64 2c 34 38 35 29 2c 64 2e 76 4e 3d 4c 55 28 64 2e 44 2c 64 2e 50 2c 5b 30 2c 30 2c 4c 5b 31 5d 2c 4c 5b 32 5d 5d 29 29 2c 66 5e 3d 43 2e 76 4e 5b 4e 26 6d 5d 29 2c 63 2b 3d 61 2c 6b 7c 3d 28 66 3e 3e 38 2d 28 44 7c 30 29 2d 28 61 7c 30 29 26 28 31 3c 3c 61 29 2d 31 29 3c 3c 28 6e 7c 30 29 2d 28 61 7c 30 29 2c 6e 2d 3d 61 3b 72 65 74 75 72 6e 20 5a 28 43 2c 32 34 39 2c 28 52 7c 28 51 3d 6b 2c 30 29 29 2b 28 79 7c 30 29 29 2c 51 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 43 29 7b 72 65 74 75 72 6e 20 43 2e 6c 3f 64 67 28 43 2c 43 2e 4c 29 3a 59 28 43 2c 38 2c 74 72 75 65 29 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 79 2c 51 2c 6e 2c 4c 2c 64 2c 61 2c Data Ascii: :n,Q&&(d=C,d.D!=c>>6&&(d.D=c>>6,L=X(d,485),d.vN=LU(d.D,d.P,[0,0,L[1],L[2]])),f^=C.vN[N&m]),c+=a,k\|=(f>>8-(D\|0)-(a\|0)&(1<<a)-1)<<(n\|0)-(a\|0),n-=a;return Z(C,249,(R\|(Q=k,0))+(y\|0)),Q},v=function(C){return C.l?dg(C,C.L):Y(C,8,true)},T=function(C,y,Q,n,L,d,a,
2024-03-14 00:56:54 UTC	1252	IN	Data Raw: 2c 76 6f 69 64 20 30 21 3d 6e 26 26 64 2e 70 75 73 68 28 6e 26 32 35 35 29 29 2c 51 3d 22 22 2c 43 26 26 28 43 2e 6d 65 73 73 61 67 65 26 26 28 51 2b 3d 43 2e 6d 65 73 73 61 67 65 29 2c 43 2e 73 74 61 63 6b 26 26 28 51 2b 3d 22 3a 22 2b 43 2e 73 74 61 63 6b 29 29 2c 43 3d 58 28 79 2c 34 32 35 29 2c 33 3c 43 5b 30 5d 29 29 7b 43 3d 28 51 3d 24 6b 28 28 43 5b 51 3d 51 2e 73 6c 69 63 65 28 30 2c 28 43 5b 30 5d 7c 30 29 2d 33 29 2c 30 5d 2d 3d 28 51 2e 6c 65 6e 67 74 68 7c 30 29 2b 33 2c 51 29 29 2c 79 2e 48 29 2c 79 2e 48 3d 79 3b 74 72 79 7b 75 28 79 2c 32 39 30 2c 6c 28 51 2e 6c 65 6e 67 74 68 2c 32 29 2e 63 6f 6e 63 61 74 28 51 29 2c 39 29 7d 66 69 6e 61 6c 6c 79 7b 79 2e 48 3d 43 7d 7d 7d 2c 61 4b 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 79 2c 51 2c 6e 2c 4c Data Ascii: ,void 0!=n&&d.push(n&255)),Q="",C&&(C.message&&(Q+=C.message),C.stack&&(Q+=":"+C.stack)),C=X(y,425),3<C[0])){C=(Q=$k((C[Q=Q.slice(0,(C[0]\|0)-3),0]-=(Q.length\|0)+3,Q)),y.H),y.H=y;try{u(y,290,l(Q.length,2).concat(Q),9)}finally{y.H=C}}},aK=function(C,y,Q,n,L
2024-03-14 00:56:54 UTC	1252	IN	Data Raw: 56 29 28 43 29 2c 43 29 2c 6e 29 2c 79 29 26 26 28 6e 3d 24 6b 28 22 22 2b 6e 29 29 2c 51 29 26 26 75 28 43 2c 4c 2c 6c 28 6e 2e 6c 65 6e 67 74 68 2c 32 29 29 2c 4c 29 2c 6e 29 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 79 29 7b 69 66 28 43 2e 6c 29 72 65 74 75 72 6e 20 64 67 28 43 2c 43 2e 4c 29 3b 72 65 74 75 72 6e 28 79 3d 59 28 43 2c 38 2c 74 72 75 65 29 2c 79 26 31 32 38 29 26 26 28 79 5e 3d 31 32 38 2c 43 3d 59 28 43 2c 32 2c 74 72 75 65 29 2c 79 3d 28 79 3c 3c 32 29 2b 28 43 7c 30 29 29 2c 79 7d 2c 65 37 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 79 29 7b 72 65 74 75 72 6e 20 79 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 3c 43 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 43 5b 79 2b 2b 5d 7d 3a 7b Data Ascii: V)(C),C),n),y)&&(n=$k(""+n)),Q)&&u(C,L,l(n.length,2)),L),n)},V=function(C,y){if(C.l)return dg(C,C.L);return(y=Y(C,8,true),y&128)&&(y^=128,C=Y(C,2,true),y=(y<<2)+(C\|0)),y},e7=function(C,y){return y=0,function(){return y<C.length?{done:false,value:C[y++]}:{
2024-03-14 00:56:54 UTC	1252	IN	Data Raw: 69 73 7c 7c 73 65 6c 66 2c 6a 37 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 79 2c 51 2c 6e 29 7b 72 65 74 75 72 6e 20 58 28 79 2c 28 5a 28 79 2c 32 34 39 2c 28 28 6e 3d 58 28 79 2c 32 34 39 29 2c 79 2e 4f 26 26 6e 3c 79 2e 53 3f 28 5a 28 79 2c 32 34 39 2c 79 2e 53 29 2c 5a 7a 28 51 2c 79 29 29 3a 5a 28 79 2c 32 34 39 2c 51 29 2c 45 5f 29 28 79 2c 43 29 2c 6e 29 29 2c 33 31 38 29 29 7d 2c 50 67 3d 66 75 6e 63 74 69 6f 6e 28 43 29 7b 72 65 74 75 72 6e 20 43 7d 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 79 2c 51 29 7b 79 5b 5a 28 43 2c 51 2c 79 29 2c 59 6b 5d 3d 32 37 39 36 7d 2c 6d 48 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 79 2c 51 2c 6e 2c 4c 29 7b 69 66 28 28 51 3d 79 5b 30 5d 2c 51 29 3d 3d 72 29 43 2e 4e 3d 74 72 75 65 2c 43 2e 6c 59 3d 32 35 2c 43 2e 54 28 79 29 Data Ascii: is\|\|self,j7=function(C,y,Q,n){return X(y,(Z(y,249,((n=X(y,249),y.O&&n<y.S?(Z(y,249,y.S),Zz(Q,y)):Z(y,249,Q),E_)(y,C),n)),318))},Pg=function(C){return C},K=function(C,y,Q){y[Z(C,Q,y),Yk]=2796},mH=function(C,y,Q,n,L){if((Q=y[0],Q)==r)C.N=true,C.lY=25,C.T(y)
2024-03-14 00:56:54 UTC	1252	IN	Data Raw: 6e 29 2c 6c 28 58 28 79 2c 51 29 2c 43 29 29 7d 2c 48 2c 77 67 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 79 2c 51 2c 6e 2c 4c 2c 64 2c 61 29 7b 66 6f 72 28 61 3d 28 43 2e 66 56 3d 41 30 28 28 43 2e 49 70 3d 28 43 2e 41 6d 3d 42 67 2c 4d 75 29 2c 43 2e 4a 6d 3d 43 5b 71 5d 2c 43 2e 76 29 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 29 2c 43 2e 67 46 3d 45 5b 43 2e 76 5d 28 43 2e 66 56 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d 7d 7d 29 2c 64 3d 30 2c 5b 5d 29 3b 33 36 35 3e 64 3b 64 2b 2b 29 61 5b 64 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 29 3b 57 28 21 28 78 28 28 78 28 5b 28 78 28 28 4b 28 43 2c 28 4b 28 43 2c 66 75 6e 63 74 69 6f 6e 28 6b 2c 52 2c 4e Data Ascii: n),l(X(y,Q),C))},H,wg=function(C,y,Q,n,L,d,a){for(a=(C.fV=A0((C.Ip=(C.Am=Bg,Mu),C.Jm=C[q],C.v),{get:function(){return this.concat()}}),C.gF=E[C.v](C.fV,{value:{value:{}}}),d=0,[]);365>d;d++)a[d]=String.fromCharCode(d);W(!(x((x([(x((K(C,(K(C,function(k,R,N
2024-03-14 00:56:54 UTC	1252	IN	Data Raw: 5d 2c 7a 29 7d 2c 28 4b 28 43 2c 66 75 6e 63 74 69 6f 6e 28 6b 2c 52 2c 4e 2c 66 29 7b 21 54 28 74 72 75 65 2c 66 61 6c 73 65 2c 52 2c 6b 29 26 26 28 52 3d 52 4b 28 6b 29 2c 66 3d 52 2e 78 58 2c 4e 3d 52 2e 6e 56 2c 6b 2e 48 3d 3d 6b 7c 7c 4e 3d 3d 6b 2e 44 47 26 26 66 3d 3d 6b 29 26 26 28 5a 28 6b 2c 52 2e 73 61 2c 4e 2e 61 70 70 6c 79 28 66 2c 52 2e 68 29 29 2c 6b 2e 4b 3d 6b 2e 42 28 29 29 7d 2c 28 4b 28 43 2c 28 5a 28 43 2c 28 5a 28 43 2c 28 4b 28 43 2c 28 4b 28 43 2c 66 75 6e 63 74 69 6f 6e 28 6b 2c 52 2c 4e 2c 66 2c 44 2c 6d 2c 63 29 7b 66 6f 72 28 63 3d 58 28 28 52 3d 28 4e 3d 56 28 6b 29 2c 6d 3d 73 5f 28 6b 29 2c 22 22 29 2c 6b 29 2c 32 31 31 29 2c 44 3d 63 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 6d 2d 2d 3b 29 66 3d 28 28 66 7c 30 29 2b 28 73 5f 28 Data Ascii: ],z)},(K(C,function(k,R,N,f){!T(true,false,R,k)&&(R=RK(k),f=R.xX,N=R.nV,k.H==k\|\|N==k.DG&&f==k)&&(Z(k,R.sa,N.apply(f,R.h)),k.K=k.B())},(K(C,(Z(C,(Z(C,(K(C,(K(C,function(k,R,N,f,D,m,c){for(c=X((R=(N=V(k),m=s_(k),""),k),211),D=c.length,f=0;m--;)f=((f\|0)+(s_(
2024-03-14 00:56:54 UTC	1252	IN	Data Raw: 30 29 2c 43 2e 56 3d 28 43 2e 6a 3d 30 2c 43 2e 4f 3d 5b 5d 2c 5b 5d 29 2c 31 29 2c 43 2e 76 4e 3d 76 6f 69 64 20 30 2c 66 61 6c 73 65 29 2c 32 35 29 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 7b 7d 29 2c 6e 2e 74 69 6d 65 4f 72 69 67 69 6e 7c 7c 28 6e 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 29 7c 7c 30 2c 32 34 39 29 2c 30 29 2c 38 30 29 2c 30 29 2c 34 32 35 29 2c 5b 32 30 34 38 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 63 67 28 34 2c 6b 29 7d 29 2c 32 35 33 29 2c 66 75 6e 63 74 69 6f 6e 28 6b 2c 52 2c 4e 2c 66 2c 44 29 7b 5a 28 28 52 3d 28 44 3d 58 28 6b 2c 28 44 3d 28 52 3d 28 4e 3d 56 28 28 66 3d 56 28 6b 29 2c 6b 29 29 2c 56 28 6b 29 29 2c 56 28 6b 29 29 2c 44 29 29 2c 4e 3d 58 28 6b Data Ascii: 0),C.V=(C.j=0,C.O=[],[]),1),C.vN=void 0,false),25),window.performance\|\|{}),n.timeOrigin\|\|(n.timing\|\|{}).navigationStart)\|\|0,249),0),80),0),425),[2048]),function(k){cg(4,k)}),253),function(k,R,N,f,D){Z((R=(D=X(k,(D=(R=(N=V((f=V(k),k)),V(k)),V(k)),D)),N=X(k
2024-03-14 00:56:54 UTC	1252	IN	Data Raw: 29 2c 33 34 37 2c 5b 5d 29 2c 33 39 35 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6b 2c 52 2c 4e 2c 66 2c 44 2c 6d 2c 63 29 7b 69 66 28 21 54 28 74 72 75 65 2c 74 72 75 65 2c 52 2c 6b 29 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 49 4b 28 28 6d 3d 58 28 28 44 3d 28 4e 3d 28 4e 3d 28 44 3d 56 28 28 52 3d 56 28 6b 29 2c 6d 3d 56 28 6b 29 2c 6b 29 29 2c 56 29 28 6b 29 2c 52 3d 58 28 6b 2c 52 29 2c 58 29 28 6b 2c 4e 29 2c 58 28 6b 2c 44 29 29 2c 6b 29 2c 6d 29 2c 52 29 29 29 7b 66 6f 72 28 66 20 69 6e 20 63 3d 5b 5d 2c 52 29 63 2e 70 75 73 68 28 66 29 3b 52 3d 63 7d 69 66 28 6b 2e 48 3d 3d 6b 29 66 6f 72 28 6b 3d 52 2e 6c 65 6e 67 74 68 2c 44 3d 30 3c 44 3f 44 3a 31 2c 66 3d 30 3b 66 3c 6b 3b 66 2b 3d 44 29 6d 28 52 2e 73 6c 69 63 65 28 66 2c 28 66 7c 30 29 2b 28 Data Ascii: ),347,[]),395)),function(k,R,N,f,D,m,c){if(!T(true,true,R,k)){if("object"==IK((m=X((D=(N=(N=(D=V((R=V(k),m=V(k),k)),V)(k),R=X(k,R),X)(k,N),X(k,D)),k),m),R))){for(f in c=[],R)c.push(f);R=c}if(k.H==k)for(k=R.length,D=0<D?D:1,f=0;f<k;f+=D)m(R.slice(f,(f\|0)+(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49864	104.244.42.133	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	737	OUT	GET /i/adsct?bci=3&eci=2&event_id=eb8739fc-85bf-4705-8e1c-d3d391190c7d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ce9a527c-4201-486e-8c81-c51017e646de&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=08022923-6d5c-4a53-a3f5-ff7758503d68
2024-03-14 00:56:54 UTC	393	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:56:54 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: fce9b8ad9f90fcb2 strict-transport-security: max-age=0 x-response-time: 71 x-connection-hash: 7c5c28cd82222b3653f03c4257733488b0781d325c5d2385b5435a3ff397591f connection: close
2024-03-14 00:56:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49865	104.244.42.67	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	758	OUT	GET /i/adsct?bci=3&eci=2&event_id=eb8739fc-85bf-4705-8e1c-d3d391190c7d&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ce9a527c-4201-486e-8c81-c51017e646de&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_5UBAyvKoxs+QXpDa5ElW/A=="
2024-03-14 00:56:54 UTC	400	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:56:54 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 7d094c0672b0562c strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 0dd85ceb6ca3861d66652f3aaf322cf967264b083f12e9216b3b8df85892d8a2 connection: close
2024-03-14 00:56:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49871	31.13.71.7	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	1399	OUT	GET /signals/config/290387871401930?v=2.9.149&r=stable&domain=www3.mtb.com&hme=8b8eb2472f555e54a8b57f2b720f9bd3b1bc6aed031525376dd772ba51107995&ex_m=63%2C107%2C95%2C99%2C54%2C3%2C89%2C62%2C14%2C87%2C80%2C45%2C47%2C153%2C156%2C167%2C163%2C164%2C166%2C26%2C90%2C46%2C69%2C165%2C148%2C151%2C160%2C161%2C168%2C116%2C13%2C44%2C172%2C171%2C118%2C16%2C30%2C33%2C1%2C37%2C58%2C59%2C60%2C64%2C84%2C15%2C12%2C86%2C83%2C82%2C96%2C98%2C32%2C97%2C27%2C23%2C149%2C152%2C125%2C25%2C9%2C10%2C11%2C5%2C6%2C22%2C19%2C20%2C50%2C55%2C57%2C67%2C91%2C24%2C68%2C8%2C7%2C72%2C42%2C18%2C93%2C92%2C17%2C74%2C79%2C41%2C40%2C78%2C34%2C36%2C77%2C49%2C75%2C29%2C38%2C66%2C0%2C85%2C4%2C81%2C73%2C76%2C2%2C31%2C56%2C35%2C94%2C39%2C71%2C61%2C100%2C53%2C52%2C28%2C88%2C51%2C48%2C43%2C70%2C65%2C21%2C101%2C173%2C175%2C108%2C130%2C134%2C114%2C169%2C209%2C145%2C102%2C131%2C154%2C141%2C105%2C210%2C147%2C106%2C128%2C121%2C109 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:54 UTC	2008	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin
2024-03-14 00:56:54 UTC	755	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 65 6d 62 65 64 64 65 72 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 65 70 5f 72 65 70 6f 72 74 22 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 0d 0a 50 72 61 67 6d 61 3a 20 70 75 62 6c 69 63 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 31 32 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 30 31 20 4a 61 6e 20 32 30 30 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 58 2d 43 6f Data Ascii: cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"Pragma: publicCache-Control: public, max-age=1200Expires: Sat, 01 Jan 2000 00:00:00 GMTX-Co
2024-03-14 00:56:54 UTC	745	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-03-14 00:56:54 UTC	1500	IN	Data Raw: 45 53 53 0a 2a 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 20 4e 4f 4e 49 4e 46 52 49 4e 47 45 4d 45 4e 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 48 45 20 41 55 54 48 4f 52 53 20 4f 52 0a 2a 20 43 4f 50 59 52 49 47 48 54 20 48 4f 4c 44 45 52 53 20 42 45 20 4c 49 41 42 4c 45 20 46 4f 52 20 41 4e 59 20 43 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 45 52 20 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 45 54 48 45 52 0a 2a 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 0a 2a 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 Data Ascii: ESS* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN* CONNECTION WI
2024-03-14 00:56:54 UTC	1500	IN	Data Raw: 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 75 6e 63 74 69 6f 6e Data Ascii: "FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;function
2024-03-14 00:56:54 UTC	1500	IN	Data Raw: 2e 70 6f 73 74 4d 65 73 73 61 67 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 Data Ascii: .postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this
2024-03-14 00:56:54 UTC	1500	IN	Data Raw: 65 73 5b 61 5d 7d 2c 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 75 6e 77 61 6e 74 65 64 64 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 Data Ascii: es[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("fbevents.plugins.unwanteddata",function(){return e.exports})})()})
2024-03-14 00:56:54 UTC	1500	IN	Data Raw: 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 Data Ascii: el Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;function g(a,b){if(!(a instanceof b))t
2024-03-14 00:56:54 UTC	1500	IN	Data Raw: 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 66 29 7b 62 28 7b 61 63 74 69 6f 6e 3a 22 46 42 5f 4c 4f 47 22 2c 6c 6f 67 54 79 70 65 3a 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 22 2c 6c 6f 67 4d 65 73 73 61 67 65 3a 22 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 7d 2c 22 2a 22 29 3b 22 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 Data Ascii: ion(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"*");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}re
2024-03-14 00:56:54 UTC	1500	IN	Data Raw: 72 6e 22 5d 26 26 67 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 65 29 74 68 72 6f 77 20 66 7d 7d 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 72 65 74 75 72 6e 20 62 3b 65 6c 73 65 20 69 66 28 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 69 6e 20 4f 62 6a 65 63 74 28 62 29 29 72 65 74 75 72 6e 20 61 28 62 2c 63 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 Data Ascii: rn"]&&g["return"]()}finally{if(e)throw f}}return c}return function(b,c){if(Array.isArray(b))return b;else if((typeof Symbol==="function"?Symbol.iterator:"@@iterator")in Object(b))return a(b,c);else throw new TypeError("Invalid attempt to destructure non-i
2024-03-14 00:56:54 UTC	1500	IN	Data Raw: 64 75 6c 65 4c 6f 61 64 65 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 66 2e 66 62 49 73 4d 6f 64 75 6c 65 4c 6f 61 64 65 64 28 62 29 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 62 5d 3d 61 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 66 62 65 76 65 6e 74 73 2e 70 6c 75 67 69 6e 73 2e 63 6c 69 65 6e 74 68 69 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 29 7d 29 28 29 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c Data Ascii: duleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("fbevents.plugins.clienthint",function(){return e.exports})})()})(window,document,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49868	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	2227	OUT	GET /tracker/tc_imp.gif?e=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&cri=HmumvR8fU1&ts=766&cb=1710377812722 HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:56:54 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Thu, 14 Mar 2024 00:56:54 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2024-03-14 00:56:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49872	142.250.81.228	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	1032	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=07g0mpPGukTo20VqKa8GbTSw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3&co=aHR0cHM6Ly93d3czLm10Yi5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=invisible&cb=c8l0hwixplg5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:55 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Thu, 14 Mar 2024 00:56:54 GMT Date: Thu, 14 Mar 2024 00:56:54 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:56:55 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/recaptcha__en.js');
2024-03-14 00:56:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49874	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	916	OUT	GET /tr/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377812859&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fa981a&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:55 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:56:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49877	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	1008	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377812859&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fa981a&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:55 UTC	1227	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Set-Cookie: ps_n=0; expires=Fri, 18-Apr-2025 00:56:55 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=None Set-Cookie: ps_l=0; expires=Fri, 18-Apr-2025 00:56:55 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=Lax Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:56:55 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:56:55 UTC	1446	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f
2024-03-14 00:56:55 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49878	142.250.80.100	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:54 UTC	1311	OUT	GET /pagead/1p-user-list/948713993/?random=1710377812268&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqzMKuIekrv2g2EyjjtOF4TFh3o-SUHQ&random=255017323&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:56:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49879	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	576	OUT	GET /utag/tiqapp/utag.v.js?a=mtbank/main/202402142352&cb=1710377813666 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:55 UTC	604	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2 Connection: close Last-Modified: Sat, 11 Mar 2023 06:57:46 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 14 Mar 2024 00:56:56 GMT ETag: "7bc0ee636b3b83484fc3b9348863bd22" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ffc407ec9784e618feb8fc53384b80aa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: DEmrzwu1PHBTblPeEOeFlNlAw_lF2oNacKGQ5fIRjsYtiVwCrErM1Q== Cache-Control: max-age=300
2024-03-14 00:56:55 UTC	2	IN	Data Raw: 2f 2f Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49880	216.239.32.181	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	1612	OUT	POST /g/collect?v=2&tid=G-ZTNQ6ZK8T0&gtm=45je43b0v890340193za200&_p=1710377810451&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dYmQxMT&cid=1166952759.1710377814&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=1&sid=1710377813&sct=1&seg=0&dl=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&dt=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.channelmix_session_id=cMuFi34ov9l7qy7J&ep.channelmix_event_id=cMuFi34ov9l7qy7J&ep.channelmix_conv_id=cMuFi34ov9l7qy7J-cMuFi34ov9l7qy7J&epn.channelmix_timestamp=1710377812065&tfd=24930 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www3.mtb.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:55 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www3.mtb.com Date: Thu, 14 Mar 2024 00:56:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49882	142.251.16.156	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	822	OUT	POST /g/collect?v=2&tid=G-ZTNQ6ZK8T0&cid=1166952759.1710377814&gtm=45je43b0v890340193za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www3.mtb.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-14 00:56:55 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www3.mtb.com Date: Thu, 14 Mar 2024 00:56:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49881	142.251.40.226	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	1420	OUT	GET /td/rul/875517505?random=1710377813697&cv=11&fst=1710377813697&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-14 00:56:55 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUnwHKS1BukXdJ5n2Ldvz-Tyyp6S8ASTsOyMv1VHvayKpA6FTrBUuCNPeShP; expires=Sat, 14-Mar-2026 00:56:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:56:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-14 00:56:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49884	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 6723 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:56:55 UTC	6723	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 62 39 65 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8b9e9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:56:55 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:56:55 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49886	142.251.40.130	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	1294	OUT	GET /pagead/viewthroughconversion/875517505/?random=1710377813676&cv=11&fst=1710377813676&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-14 00:56:55 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlMBTPqogVB4cT4UJT31Wqd7xdvPU4n5SlHIzMvJemY7xgKl81Hcn0F2vE7; expires=Sat, 14-Mar-2026 00:56:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:56:55 UTC	241	IN	Data Raw: 39 32 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 Data Ascii: 925(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;br
2024-03-14 00:56:55 UTC	1252	IN	Data Raw: 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b Data Ascii: eak a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break
2024-03-14 00:56:55 UTC	855	IN	Data Raw: 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 41 7a 4e 7a 63 34 4d 54 4d 32 4e 7a 59 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 Data Ascii: ined"==typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTAzNzc4MTM2NzY',['https://www.google.com/pagead/1p-us
2024-03-14 00:56:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49883	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 1678 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:56:55 UTC	1678	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 62 39 65 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8b9e9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:56:55 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:56:55 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49885	142.251.40.226	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	1482	OUT	GET /td/rul/875517505?random=1710377813720&cv=11&fst=1710377813720&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-14 00:56:55 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmmL2kgA4hpYjBCrLZZrHwdtX4Ej4-AO_TqNJKJ28a0994FiU5BUq_GrX1s; expires=Sat, 14-Mar-2026 00:56:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:56:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-14 00:56:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49888	54.156.2.105	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	338	OUT	GET /is HTTP/1.1 Host: 54.156.2.105 Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:55 UTC	405	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:56:55 GMT access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header x-application-context: application:prod:8080 content-type: text/plain;charset=utf-8 content-length: 32 x-envoy-upstream-service-time: 1 server: istio-envoy connection: close
2024-03-14 00:56:55 UTC	32	IN	Data Raw: 55 48 62 71 67 72 4d 43 71 2f 46 69 53 4c 76 35 76 78 6b 72 77 76 6e 76 62 36 55 6f 4a 7a 6c 57 Data Ascii: UHbqgrMCq/FiSLv5vxkrwvnvb6UoJzlW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49887	142.251.40.130	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	1296	OUT	GET /pagead/viewthroughconversion/875517505/?random=1710377813697&cv=11&fst=1710377813697&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-03-14 00:56:55 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv; expires=Sat, 14-Mar-2026 00:56:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:56:55 UTC	241	IN	Data Raw: 39 32 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 Data Ascii: 927(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;br
2024-03-14 00:56:55 UTC	1252	IN	Data Raw: 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b Data Ascii: eak a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break
2024-03-14 00:56:55 UTC	857	IN	Data Raw: 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 41 7a 4e 7a 63 34 4d 54 4d 32 4f 54 63 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 Data Ascii: ined"==typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTAzNzc4MTM2OTc',['https://www.google.com/pagead/1p-us
2024-03-14 00:56:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49891	31.13.71.7	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	1400	OUT	GET /signals/config/1994534667524888?v=2.9.149&r=stable&domain=www3.mtb.com&hme=8b8eb2472f555e54a8b57f2b720f9bd3b1bc6aed031525376dd772ba51107995&ex_m=63%2C107%2C95%2C99%2C54%2C3%2C89%2C62%2C14%2C87%2C80%2C45%2C47%2C153%2C156%2C167%2C163%2C164%2C166%2C26%2C90%2C46%2C69%2C165%2C148%2C151%2C160%2C161%2C168%2C116%2C13%2C44%2C172%2C171%2C118%2C16%2C30%2C33%2C1%2C37%2C58%2C59%2C60%2C64%2C84%2C15%2C12%2C86%2C83%2C82%2C96%2C98%2C32%2C97%2C27%2C23%2C149%2C152%2C125%2C25%2C9%2C10%2C11%2C5%2C6%2C22%2C19%2C20%2C50%2C55%2C57%2C67%2C91%2C24%2C68%2C8%2C7%2C72%2C42%2C18%2C93%2C92%2C17%2C74%2C79%2C41%2C40%2C78%2C34%2C36%2C77%2C49%2C75%2C29%2C38%2C66%2C0%2C85%2C4%2C81%2C73%2C76%2C2%2C31%2C56%2C35%2C94%2C39%2C71%2C61%2C100%2C53%2C52%2C28%2C88%2C51%2C48%2C43%2C70%2C65%2C21%2C101%2C173%2C175%2C108%2C130%2C134%2C114%2C169%2C209%2C145%2C102%2C131%2C154%2C141%2C105%2C210%2C147%2C106%2C128%2C121%2C109 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:55 UTC	2008	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin
2024-03-14 00:56:55 UTC	755	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 65 6d 62 65 64 64 65 72 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 65 70 5f 72 65 70 6f 72 74 22 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 0d 0a 50 72 61 67 6d 61 3a 20 70 75 62 6c 69 63 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 31 32 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 30 31 20 4a 61 6e 20 32 30 30 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 58 2d 43 6f Data Ascii: cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"Pragma: publicCache-Control: public, max-age=1200Expires: Sat, 01 Jan 2000 00:00:00 GMTX-Co
2024-03-14 00:56:55 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-03-14 00:56:55 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 Data Ascii: urn!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="func
2024-03-14 00:56:55 UTC	1500	IN	Data Raw: 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d Data Ascii: Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=
2024-03-14 00:56:55 UTC	1500	IN	Data Raw: 61 2e 70 69 78 65 6c 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a Data Ascii: a.pixel;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:
2024-03-14 00:56:55 UTC	1500	IN	Data Raw: 61 28 29 2c 6b 3d 5b 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 Data Ascii: a(),k=[],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonEleme
2024-03-14 00:56:55 UTC	1500	IN	Data Raw: 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 Data Ascii: nts[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user
2024-03-14 00:56:55 UTC	1500	IN	Data Raw: 2e 5f 72 61 74 65 4d 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 Data Ascii: ._rateMS=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length
2024-03-14 00:56:55 UTC	543	IN	Data Raw: 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 Data Ascii: .getFbeventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)retu
2024-03-14 00:56:55 UTC	1500	IN	Data Raw: 65 2c 66 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 68 3d 62 2e 6f 70 74 49 6e 73 2e 69 73 4f 70 74 65 64 49 6e 28 63 2e 69 64 2c 22 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 6a 3d 6f 28 66 29 2c 6b 3d 71 28 66 2c 6a 29 2c 6c 3d 78 28 72 28 66 29 29 2e 73 61 66 65 3b 69 66 28 6c 21 3d 6e 75 6c 6c 26 26 6c 2e 6c 65 6e 67 74 68 3e 44 29 72 65 74 75 72 6e 3b 68 3d 68 3b 66 3d 76 28 7b 62 75 74 74 6f 6e 3a 66 2c 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 6b 2c 62 75 74 74 6f 6e 54 65 78 74 3a 6c 2c 66 6f 72 6d 3a 6a 2c 70 69 78 65 6c 3a 63 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 68 7d 29 3b 6b 3d 69 28 66 2c 32 29 3b 6c 3d 6b 5b 30 5d 3b 6a 3d 6b 5b 31 5d 3b 67 26 26 28 6c 3d 7b 7d Data Ascii: e,f);if(f==null)return;var h=b.optIns.isOptedIn(c.id,"AutomaticMatching"),j=o(f),k=q(f,j),l=x(r(f)).safe;if(l!=null&&l.length>D)return;h=h;f=v({button:f,buttonFeatures:k,buttonText:l,form:j,pixel:c,shouldExtractUserData:h});k=i(f,2);l=k[0];j=k[1];g&&(l={}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49893	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	892	OUT	GET /tr/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377813856&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=66a7a0&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:55 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:56:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49900	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	1002	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377813856&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=66a7a0&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:55 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:56:55 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:56:55 UTC	1446	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f
2024-03-14 00:56:55 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49899	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	700	OUT	GET /tr/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377812859&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fa981a&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:55 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:56:55 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49895	76.13.32.146	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	670	OUT	GET /sp.pl?a=10000&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10087193&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&tagmgr=tealium%2Cgtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
2024-03-14 00:56:55 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:55 GMT Expires: Thu, 14 Mar 2024 00:56:55 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU; Expires=Fri, 14 Mar 2025 06:56:55 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49898	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	737	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377812859&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fa981a&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:55 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:56:55 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:56:55 UTC	1479	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49894	76.13.32.146	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	733	OUT	GET /sp.pl?a=10000&d=Thu%2C%2014%20Mar%202024%2000%3A56%3A52%20GMT&n=-1&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium%2Cgtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
2024-03-14 00:56:55 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:55 GMT Expires: Thu, 14 Mar 2024 00:56:55 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU; Expires=Fri, 14 Mar 2025 06:56:55 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49896	76.13.32.146	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	680	OUT	GET /sp.pl?a=10000&b=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium%2Cgtm HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
2024-03-14 00:56:55 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:56:55 GMT Expires: Thu, 14 Mar 2024 00:56:55 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU; Expires=Fri, 14 Mar 2025 06:56:55 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49901	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	1995	OUT	GET /tracker/tc_imp.gif?e=37dfbd8ee84e00126beec432ed4f8b9e9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46a56a82b9eec47679c796e092818c5871d61eb72bffeb1ba131be20ecca7478c31db6bda508e1547f77303fd1f564c2acf503ed79ffca8328828bf7d8557ec4b7274a7d43169230121e118f58109ac5d6ead83c6771e217dcf965d78c9df014b3545700015a7902c7e7d17c7ab1f28cef2ea2b93e745711b3eb7b4e7c1d965b4cfd95cbf539e513a67cdee9fb2a465c18ee26c963406d1fa9b7a4c42a2623bac990678fc86ae668500f845b6980a870d97dd75d66071d2d964d27a8f95afb48cf1be5d78e87ce9e6e5710e69e9ce23c1e317a1595455824f5084ccc3d8c6ff943dc46a88c5e7da29a03c7a74dc381ca5d4df0e2790b020e541f0900dce21e13d524c50cb26af0acc87f63ff8c978c616a7d79cda6d894a127fef5f541d3e457dd3a766b753dfc18b64fdde69bdde6cdf81c8f07688bcf174603ed0a9110495f70d5a23fae7e538e043cef856fdfd3cae6ee26d8759bf1dd7a83fdb1327e4ac8e673f3f620b360a400aabe18c6eda1eaa4c4e432ae4a946df981a10e3bbd9bea071c4ede4919aeafbb4121b2ef15587a858698243661cd06b5c7072f20ade2d1884959839ed23ad4ddcad5edfa41fda3e567532086e1282c1e3da3c78529d104494cda5f2e6af0672c9f7e220cc957a0ebaba00207bbdd4800233bd3584419e1de23f9815dcc012f9a457b3ecc280dc2d059dbe581cfa32e2c7a2b704de2c62040fff055f42f3e7069de614d68bcf99109cfbd8605f731ee163c950fd0ceddf7b9c335f33156f3f6deb538e813049ab2f9df6e73fd8d35fcc2926ed0376259fe8d21648ae2cb79c1ada1b235f09ef6a3e88aecb7a94146dcfc701abdec1eddf01891f472815ee6574118e9a0d5bbe20f5a78254cfa1b0510e27fb34771a0e99460ca5cca3&cri=HmumvR8fU1&ts=766&cb=1710377812722 HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:56:55 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Thu, 14 Mar 2024 00:56:55 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2024-03-14 00:56:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49889	35.81.173.170	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	1644	OUT	GET /st?ga_tracking_id=G-ZTNQ6ZK8T0&ga_client_id=1166952759.1710377814&shpt=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22ga_client_id%22%3A%221166952759.1710377814%22%2C%22shpt%22%3A%22M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank%22%2C%22dcm_cid%22%3A%221166952759.1710377814%22%2C%22mntnis%22%3A%22y6%2F4gjwN%2Bt2Zv6fZL3kOwkJTACfroGv6%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1166952759.1710377814&available_ga=%5B%7B%22id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22sess_id%22%3A%221710377813%22%7D%5D&hardcoded_ga=G-ZTNQ6ZK8T0&dxver=4.0.0&shaid=34249&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&cb=42205510116200300&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue%2Ctealium%3Dtrue HTTP/1.1 Host: px.mountain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:55 UTC	446	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:56:55 GMT content-type: application/javascript;charset=utf-8 access-control-allow-origin: * p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE" set-cookie: guid=c0f80a26-e19d-11ee-bc79-65977b46ee41;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure x-envoy-upstream-service-time: 0 server: istio-envoy connection: close transfer-encoding: chunked
2024-03-14 00:56:55 UTC	2357	IN	Data Raw: 39 32 39 0d 0a 65 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 70 2c 61 2c 63 2c 6b 2c 65 2c 64 29 7b 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 28 63 3c 61 3f 27 27 3a 65 28 70 61 72 73 65 49 6e 74 28 63 2f 61 29 29 29 2b 28 28 63 3d 63 25 61 29 3e 33 35 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 63 2b 32 39 29 3a 63 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 7d 3b 69 66 28 21 27 27 2e 72 65 70 6c 61 63 65 28 2f 5e 2f 2c 53 74 72 69 6e 67 29 29 7b 77 68 69 6c 65 28 63 2d 2d 29 7b 64 5b 65 28 63 29 5d 3d 6b 5b 63 5d 7c 7c 65 28 63 29 7d 6b 3d 5b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 5b 65 5d 7d 5d 3b 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 27 5c 5c 77 2b 27 7d 3b 63 3d 31 7d 3b 77 68 69 Data Ascii: 929eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]\|\|e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};whi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49902	142.251.40.132	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	1079	OUT	GET /pagead/1p-user-list/948713993/?random=1710377812268&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqzMKuIekrv2g2EyjjtOF4TFh3o-SUHQ&random=255017323&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:56:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49905	142.250.80.100	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	1328	OUT	GET /pagead/1p-user-list/875517505/?random=1710377813676&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqgy5rmkimJrar-2BaQRjf-DYFJHjEDaISnnSK4zP4dJZDZcAO&random=3200907923&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:56:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49903	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:56:55 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:56:55 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49904	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 1735 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:56:55 UTC	1735	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 62 39 65 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8b9e9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:56:56 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:56:56 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49907	142.250.80.100	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:55 UTC	1330	OUT	GET /pagead/1p-user-list/875517505/?random=1710377813697&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeRcobpVsm9ieYD9QFoJNC0hsBQXQGzOnWLiYT2cz-JZRun5w&random=1555305866&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:56:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49909	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	942	OUT	GET /tr/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814597&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fea200&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:56 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:56:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49906	142.251.40.130	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	1854	OUT	GET /pagead/viewthroughconversion/875517505/?random=2102459353&cv=11&fst=1710377813720&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CNeK_tCruN6AmQEST0NoRUk4SjNGcndZUTFPQ2p2Y2pvLS1EUkFSSW1BTXN5bnJCejI0MG5oaFBUZ2pPOWZWWURUUldhRlNEd0lEWVpTWXE3SEF6Umt2Z0l6YW8aWENoQUk4SjNGcndZUTlQYnI5NXJ3eWRRNEVpNEEyeXFqa3U5amptUi1LWEpUUnRUa2FtXzhIOHhaVXNfQlhFazRaRlhGUURMWVVEeFJUT1hoYXlkMG9tVEIiEwj7-IPxxfKEAxVgGmgIHV_fDw4yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmmL2kgA4hpYjBCrLZZrHwdtX4Ej4-AO_TqNJKJ28a0994FiU5BUq_GrX1s
2024-03-14 00:56:56 UTC	1797	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/875517505/?random=2102459353&cv=11&fst=1710377813720&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CNeK_tCruN6AmQEST0NoRUk4SjNGcndZUTFPQ2p2Y2pvLS1EUkFSSW1BTXN5bnJCejI0MG5oaFBUZ2pPOWZWWURUUldhRlNEd0lEWVpTWXE3SEF6Umt2Z0l6YW8aWENoQUk4SjNGcndZUTlQYnI5NXJ3eWRRNEVpNEEyeXFqa3U5amptUi1LWEpUUnRUa2FtXzhIOHhaVXNfQlhFazRaRlhGUURMWVVEeFJUT1hoYXlkMG9tVEIiEwj7-IPxxfKEAxVgGmgIHV_fDw4yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&cid=CAQSKQB7FLtqsKdJwIEQCzWMtod9ZRFaPjJRmOkU97Y6hGUUMhprsSTzvoOn&random=3676200842 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:56:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49913	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	1052	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814597&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fea200&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source=navigation-source, trigger Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:56 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:56:56 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:56:56 UTC	1446	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f
2024-03-14 00:56:56 UTC	73	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`
2024-03-14 00:56:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49911	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	883	OUT	GET /tr/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814598&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=32473f&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:56 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:56:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49910	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	993	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814598&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=32473f&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:56 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:56:56 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:56:56 UTC	1446	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f
2024-03-14 00:56:56 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49912	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	872	OUT	GET /tr/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&rl=&if=false&ts=1710377814599&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:56 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:56:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49914	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	987	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&rl=&if=false&ts=1710377814599&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:56 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:56:56 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:56:56 UTC	1446	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f
2024-03-14 00:56:56 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49915	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:56:56 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:56:56 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49917	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	660	OUT	GET /tr/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377813856&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=66a7a0&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:56 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:56:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49918	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	697	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377813856&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=66a7a0&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:56 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:56:56 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:56:56 UTC	1479	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49921	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	710	OUT	GET /tr/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814597&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fea200&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:56 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:56:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49920	142.251.40.132	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	1096	OUT	GET /pagead/1p-user-list/875517505/?random=1710377813676&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqgy5rmkimJrar-2BaQRjf-DYFJHjEDaISnnSK4zP4dJZDZcAO&random=3200907923&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:56:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49922	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	747	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814597&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=fea200&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:56 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:56:56 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:56:56 UTC	1479	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49923	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	651	OUT	GET /tr/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814598&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=32473f&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:56 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:56:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49924	142.250.80.100	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	2036	OUT	GET /pagead/1p-conversion/875517505/?random=2102459353&cv=11&fst=1710377813720&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CNeK_tCruN6AmQEST0NoRUk4SjNGcndZUTFPQ2p2Y2pvLS1EUkFSSW1BTXN5bnJCejI0MG5oaFBUZ2pPOWZWWURUUldhRlNEd0lEWVpTWXE3SEF6Umt2Z0l6YW8aWENoQUk4SjNGcndZUTlQYnI5NXJ3eWRRNEVpNEEyeXFqa3U5amptUi1LWEpUUnRUa2FtXzhIOHhaVXNfQlhFazRaRlhGUURMWVVEeFJUT1hoYXlkMG9tVEIiEwj7-IPxxfKEAxVgGmgIHV_fDw4yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&cid=CAQSKQB7FLtqsKdJwIEQCzWMtod9ZRFaPjJRmOkU97Y6hGUUMhprsSTzvoOn&random=3676200842 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:56:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49916	34.212.4.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	564	OUT	GET /gs HTTP/1.1 Host: gs.mountain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guid=c0f80a26-e19d-11ee-bc79-65977b46ee41
2024-03-14 00:56:56 UTC	589	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:56:56 GMT access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header x-application-context: application:prod:8080 content-type: application/javascript;charset=utf-8 p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE" cache-control: public, max-age=31536000 last-modified: Thu, 01 Jan 1970 00:00:00 GMT content-length: 144 x-envoy-upstream-service-time: 1 server: istio-envoy connection: close
2024-03-14 00:56:56 UTC	144	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 72 6f 6e 67 61 74 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 27 37 39 64 35 38 64 61 38 2d 64 32 30 36 2d 33 33 37 61 2d 62 38 38 36 2d 66 36 32 32 39 63 63 61 63 36 39 35 27 7d 3b 69 72 6f 6e 67 61 74 65 2e 67 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 37 31 30 33 37 37 38 31 36 37 36 34 7d 3b 69 72 6f 6e 67 61 74 65 2e 64 6c 28 29 7d 29 28 29 3b Data Ascii: (function(){irongate.g=function(){return '79d58da8-d206-337a-b886-f6229ccac695'};irongate.gt=function(){return 1710377816764};irongate.dl()})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49925	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:56:56 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:56:56 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49926	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:56 UTC	640	OUT	GET /tr/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&rl=&if=false&ts=1710377814599&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:57 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:56:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49928	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:57 UTC	688	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377814598&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=32473f&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:57 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:56:57 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:56:57 UTC	1479	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49929	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:57 UTC	677	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&rl=&if=false&ts=1710377814599&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377812095&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:56:57 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:56:57 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:56:57 UTC	1479	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49927	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:57 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 1799 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:56:57 UTC	1799	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 62 39 65 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8b9e9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:56:57 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:56:57 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49930	142.251.40.132	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:57 UTC	1098	OUT	GET /pagead/1p-user-list/875517505/?random=1710377813697&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeRcobpVsm9ieYD9QFoJNC0hsBQXQGzOnWLiYT2cz-JZRun5w&random=1555305866&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:57 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:56:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49932	142.251.40.132	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:57 UTC	1804	OUT	GET /pagead/1p-conversion/875517505/?random=2102459353&cv=11&fst=1710377813720&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CNeK_tCruN6AmQEST0NoRUk4SjNGcndZUTFPQ2p2Y2pvLS1EUkFSSW1BTXN5bnJCejI0MG5oaFBUZ2pPOWZWWURUUldhRlNEd0lEWVpTWXE3SEF6Umt2Z0l6YW8aWENoQUk4SjNGcndZUTlQYnI5NXJ3eWRRNEVpNEEyeXFqa3U5amptUi1LWEpUUnRUa2FtXzhIOHhaVXNfQlhFazRaRlhGUURMWVVEeFJUT1hoYXlkMG9tVEIiEwj7-IPxxfKEAxVgGmgIHV_fDw4yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&cid=CAQSKQB7FLtqsKdJwIEQCzWMtod9ZRFaPjJRmOkU97Y6hGUUMhprsSTzvoOn&random=3676200842 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:56:57 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:56:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:56:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49931	35.81.173.170	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:57 UTC	1758	OUT	GET /st?ga_tracking_id=G-ZTNQ6ZK8T0&ga_client_id=1166952759.1710377814&shpt=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank&ga_info=%7B%22status%22%3A%22OK%22%2C%22ga_tracking_id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22ga_client_id%22%3A%221166952759.1710377814%22%2C%22shpt%22%3A%22M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%20Mortgages%20%26%20More%20%7C%20M%26T%20Bank%22%2C%22dcm_cid%22%3A%221166952759.1710377814%22%2C%22mntnis%22%3A%22y6%2F4gjwN%2Bt2Zv6fZL3kOwkJTACfroGv6%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A8%2C%22getClientIdByCookie%22%3A%22FAILED%22%2C%22getClientIdByGA%22%3A%22FAILED%22%2C%22getClientIdByTracker%22%3A%22FAILED%22%2C%22getClientIdByGAData%22%3A%22FAILED%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%2C%22message%22%3A%7B%7D%7D&dcm_cid=1166952759.1710377814&available_ga=%5B%7B%22id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22sess_id%22%3A%221710377813%22%7D%5D&hardcoded_ga=G-ZTNQ6ZK8T0&dxver=4.0.0&shaid=34249&plh=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue%2Ctealium%3Dtrue&cb=1710377815866695&shguid=79d58da8-d206-337a-b886-f6229ccac695&shgts=1710377816764 HTTP/1.1 Host: px.mountain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guid=c0f80a26-e19d-11ee-bc79-65977b46ee41
2024-03-14 00:56:58 UTC	568	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:56:57 GMT content-type: application/javascript;charset=utf-8 access-control-allow-origin: * p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE" set-cookie: tt=H4sIAAAAAAAAAKtWKlOyMqoFAP609q8HAAAA;Domain=px.mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure set-cookie: guid=c0f80a26-e19d-11ee-bc79-65977b46ee41;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure x-envoy-upstream-service-time: 23 server: istio-envoy connection: close transfer-encoding: chunked
2024-03-14 00:56:58 UTC	1567	IN	Data Raw: 36 31 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 22 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5c 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 20 7b 77 69 6e 64 6f 77 2e 6d 6e 74 6e 20 3d 20 7b 69 73 5f 76 69 65 77 61 62 6c 65 5f 76 65 72 69 66 69 65 64 5f 76 69 73 69 74 3a 5c 5c 5c 27 66 61 6c 73 65 5c 5c 5c 27 2c 20 69 73 5f 63 72 6f 73 73 5f 64 65 76 69 63 65 3a 5c 5c 5c 27 66 61 6c 73 65 5c 5c 5c 27 2c 20 63 72 65 61 74 69 76 65 5f 67 72 6f 75 70 5f 69 64 3a 5c 5c 5c 27 5c 5c 5c 27 2c 20 63 72 65 61 74 69 76 65 5f 67 72 6f 75 70 5f 6e 61 6d 65 3a 5c 5c 5c 27 5c 5c 5c 27 2c 20 69 6d 70 72 65 73 73 69 6f 6e 5f 65 70 6f 63 68 5f 6d 69 63 72 6f 73 3a 5c 5c 5c 27 5c 5c 5c 27 2c 20 76 69 73 69 74 5f 74 72 61 63 6b 69 6e 67 Data Ascii: 613(function(){var c="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49933	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:58 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:56:58 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:56:58 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49935	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:58 UTC	1358	OUT	GET /content/dam/mtb-web/images/icon-global-nav-help.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
2024-03-14 00:56:58 UTC	786	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2236 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 10 Apr 2023 13:50:53 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:58 GMT ETag: "8bc-5f8fba9cfc940" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f458ab1245bb4f257969c1da8e708f88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: iEAjQHOxaFtRfG5bzEFOnq1vfD62DPuOTQGoUAiZGNCPoN_Z2Fl1Ag== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:58 UTC	2236	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 34 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 20 34 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 33 2e 39 36 37 35 43 30 20 32 31 2e 36 38 34 35 20 36 2e 32 35 30 34 34 20 32 37 2e 39 33 34 39 20 31 33 2e 39 36 37 35 20 32 37 2e 39 33 34 39 43 32 31 2e 36 38 34 35 20 32 37 2e 39 33 34 39 20 32 37 2e 39 33 34 39 20 32 31 2e 36 38 34 35 20 32 37 2e 39 33 34 39 20 31 33 2e 39 36 37 35 43 32 37 2e 39 33 34 39 20 36 2e 32 35 30 34 34 20 32 31 2e 36 38 34 35 20 30 20 31 33 2e 39 36 37 35 20 30 43 36 2e 32 35 30 34 34 20 30 20 30 20 36 Data Ascii: <svg width="28" height="46" viewBox="0 0 28 46" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0 13.9675C0 21.6845 6.25044 27.9349 13.9675 27.9349C21.6845 27.9349 27.9349 21.6845 27.9349 13.9675C27.9349 6.25044 21.6845 0 13.9675 0C6.25044 0 0 6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49934	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:58 UTC	1363	OUT	GET /content/dam/mtb-web/images/icon-global-nav-locations.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
2024-03-14 00:56:58 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 4070 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 10 Apr 2023 13:50:53 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:58 GMT ETag: "fe6-5f8fba9cfc940" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f391dfb0806f29cccc5f1df3e1ae836e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: cwlTs15OmlE9RCVvd9IivYJpaBdiLTSyfTsj9aLeGtBXC6Yd9S4_kg== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:58 UTC	4070	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 33 22 20 68 65 69 67 68 74 3d 22 34 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 33 20 34 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 38 31 33 36 20 32 37 2e 34 31 31 32 43 32 38 2e 38 34 32 33 20 32 36 2e 30 31 34 34 20 32 37 2e 36 32 33 37 20 32 34 2e 32 36 38 35 20 32 36 2e 31 30 35 20 32 32 2e 31 37 33 34 43 32 34 2e 32 36 38 33 20 31 39 2e 35 35 34 35 20 32 33 2e 30 34 39 38 20 31 37 2e 37 37 33 36 20 32 32 2e 34 36 37 20 31 36 2e 38 36 35 37 43 32 31 2e 36 31 39 33 20 31 35 2e 35 35 36 33 20 32 31 2e 30 35 34 32 20 31 34 2e 34 35 36 33 20 32 30 2e 37 35 34 20 Data Ascii: <svg width="63" height="46" viewBox="0 0 63 46" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M29.8136 27.4112C28.8423 26.0144 27.6237 24.2685 26.105 22.1734C24.2683 19.5545 23.0498 17.7736 22.467 16.8657C21.6193 15.5563 21.0542 14.4563 20.754

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49936	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:58 UTC	1360	OUT	GET /content/dam/mtb-web/images/icon-global-nav-search.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
2024-03-14 00:56:58 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3682 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 10 Apr 2023 13:50:53 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:58 GMT ETag: "e62-5f8fba9cfc940" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 d3041c3025b9205db460853b5b9626bc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: eB8rclsHmDK_1thy4e-4YS7KR0nQYNf2dHUboWbXdPqKre8aKMrgSQ== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:58 UTC	3682	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 37 22 20 68 65 69 67 68 74 3d 22 34 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 20 34 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 2e 33 38 39 39 37 20 34 33 2e 32 37 36 31 43 36 2e 30 33 33 39 37 20 34 33 2e 32 37 36 31 20 37 2e 33 32 39 39 37 20 34 32 2e 33 38 38 31 20 37 2e 33 32 39 39 37 20 34 30 2e 39 39 36 31 43 37 2e 33 32 39 39 37 20 33 39 2e 38 34 34 31 20 36 2e 36 34 35 39 37 20 33 39 2e 30 32 38 31 20 34 2e 38 32 31 39 37 20 33 38 2e 35 32 34 31 4c 33 2e 39 30 39 39 37 20 33 38 2e 32 37 32 31 43 32 2e 37 39 33 39 37 20 33 37 2e 39 37 32 31 20 32 2e 33 37 33 Data Ascii: <svg width="37" height="46" viewBox="0 0 37 46" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M4.38997 43.2761C6.03397 43.2761 7.32997 42.3881 7.32997 40.9961C7.32997 39.8441 6.64597 39.0281 4.82197 38.5241L3.90997 38.2721C2.79397 37.9721 2.373

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49938	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:58 UTC	1368	OUT	GET /content/dam/mtb-web/images/icon-global-nav-hamburger-menu.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
2024-03-14 00:56:58 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1473 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 10 Apr 2023 13:50:53 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:58 GMT ETag: "5c1-5f8fba9cfc940" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 e42e8491a089e2183879e26e61dae708.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: Pt9NZW9TnLCFjaXoYI2LZJFSgWS5RBp6PodNDfNFX4in0gneo0_FCQ== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:58 UTC	1473	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 2e 37 32 36 36 32 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 2f 3e 0a 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 33 31 34 22 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 2e 37 32 36 36 32 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 2f 3e 0a 3c 72 65 63 74 20 79 3d 22 32 33 2e 32 30 33 34 22 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 2e 37 32 36 36 32 22 20 66 69 6c Data Ascii: <svg width="42" height="46" viewBox="0 0 42 46" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="42" height="4.72662" fill="white"/><rect y="12.0314" width="42" height="4.72662" fill="white"/><rect y="23.2034" width="42" height="4.72662" fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49937	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:58 UTC	1370	OUT	GET /content/dam/mtb-web/logos/favicon.ico.transform/32x32/image.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/home-page Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
2024-03-14 00:56:58 UTC	790	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 842 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Tue, 12 Mar 2024 22:09:24 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:58 GMT ETag: "34a-6137de930baef" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 b601959712c1f21193a489b5759f70ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: z23z4nOMGcPpGuBmW3PWcDB6Ph6sJxKIajndUYzol7DDAnFdqvWScg== Permissions-Policy: browsing-topics=()
2024-03-14 00:56:58 UTC	842	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 11 49 44 41 54 78 da ed 95 49 4c 93 51 10 80 c1 e5 a0 47 a3 89 31 1e 0c e1 c4 81 ab d1 28 d1 68 4c 34 5e 34 31 51 c3 c1 0d 88 c6 04 59 8c 06 d1 20 46 08 bb 94 50 04 0b a5 40 d1 0a 05 44 65 0d 55 43 69 85 06 a8 50 20 2c 82 12 ca 26 50 f6 c5 2e e3 9b 29 ff 53 5a 54 6e 5c fe 97 bc f4 ff 67 79 f3 bd f9 67 a6 1e b0 c9 cb 43 04 10 01 44 00 11 60 d3 01 6e be 2f 80 c3 39 b1 e0 95 7a 1f 0e ca 9e 82 d5 66 73 33 6a 1f 1b 22 3d ee 0b 45 19 20 37 36 70 dd e2 cf 15 a8 ff de 0b b5 5f 3b 60 64 6e 9a cb fd 4b 65 64 7f 5a f9 0c ae 97 e7 82 97 c4 e9 7f 4e 95 0e 97 d4 59 e0 2d 89 a0 77 ca c0 c5 e2 4c f0 78 7c 83 76 79 b7 d1 0d e0 76 45 21 d7 57 f6 b6 73 b9 66 a0 0b f6 Data Ascii: PNGIHDR szzIDATxILQG1(hL4^41QY FP@DeUCiP ,&P.)SZTn\gygCD`n/9zfs3j"=E 76p_;`dnKedZNY-wLx\|vyvE!Wsf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49939	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:59 UTC	1116	OUT	GET /content/dam/mtb-web/images/icon-global-nav-help.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
2024-03-14 00:56:59 UTC	787	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2236 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 10 Apr 2023 13:50:53 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:58 GMT ETag: "8bc-5f8fba9cfc940" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 50670fc09f8465be7ae4adcf6e33ab7a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: OQAK39B1SmfFKOR49x3lg6Wo5qBeGloKbbqGh-BuQ5TRmHqDetp4XA== Age: 1 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:59 UTC	2236	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 34 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 20 34 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 33 2e 39 36 37 35 43 30 20 32 31 2e 36 38 34 35 20 36 2e 32 35 30 34 34 20 32 37 2e 39 33 34 39 20 31 33 2e 39 36 37 35 20 32 37 2e 39 33 34 39 43 32 31 2e 36 38 34 35 20 32 37 2e 39 33 34 39 20 32 37 2e 39 33 34 39 20 32 31 2e 36 38 34 35 20 32 37 2e 39 33 34 39 20 31 33 2e 39 36 37 35 43 32 37 2e 39 33 34 39 20 36 2e 32 35 30 34 34 20 32 31 2e 36 38 34 35 20 30 20 31 33 2e 39 36 37 35 20 30 43 36 2e 32 35 30 34 34 20 30 20 30 20 36 Data Ascii: <svg width="28" height="46" viewBox="0 0 28 46" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M0 13.9675C0 21.6845 6.25044 27.9349 13.9675 27.9349C21.6845 27.9349 27.9349 21.6845 27.9349 13.9675C27.9349 6.25044 21.6845 0 13.9675 0C6.25044 0 0 6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49940	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:59 UTC	1121	OUT	GET /content/dam/mtb-web/images/icon-global-nav-locations.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
2024-03-14 00:56:59 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 4070 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 10 Apr 2023 13:50:53 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:58 GMT ETag: "fe6-5f8fba9cfc940" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 56e001f87fa53501872a21f09bb07046.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: iG9mf3MmSEgZ8WGBQDxdcj8Bfz0Ospaf6f9iJA1Z3re3z4bYiYJr1A== Age: 1 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:59 UTC	4070	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 33 22 20 68 65 69 67 68 74 3d 22 34 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 33 20 34 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 39 2e 38 31 33 36 20 32 37 2e 34 31 31 32 43 32 38 2e 38 34 32 33 20 32 36 2e 30 31 34 34 20 32 37 2e 36 32 33 37 20 32 34 2e 32 36 38 35 20 32 36 2e 31 30 35 20 32 32 2e 31 37 33 34 43 32 34 2e 32 36 38 33 20 31 39 2e 35 35 34 35 20 32 33 2e 30 34 39 38 20 31 37 2e 37 37 33 36 20 32 32 2e 34 36 37 20 31 36 2e 38 36 35 37 43 32 31 2e 36 31 39 33 20 31 35 2e 35 35 36 33 20 32 31 2e 30 35 34 32 20 31 34 2e 34 35 36 33 20 32 30 2e 37 35 34 20 Data Ascii: <svg width="63" height="46" viewBox="0 0 63 46" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M29.8136 27.4112C28.8423 26.0144 27.6237 24.2685 26.105 22.1734C24.2683 19.5545 23.0498 17.7736 22.467 16.8657C21.6193 15.5563 21.0542 14.4563 20.754

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49942	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:59 UTC	1118	OUT	GET /content/dam/mtb-web/images/icon-global-nav-search.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
2024-03-14 00:56:59 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3682 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 10 Apr 2023 13:50:53 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:58 GMT ETag: "e62-5f8fba9cfc940" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8fd21502425077e617fde7325b45e112.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: ipErx2mzi9FqgBj9VKMhuhUJ0x2LbQQJmJEu4b3NjVgvS2KIaBqDlA== Age: 1 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:59 UTC	3682	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 37 22 20 68 65 69 67 68 74 3d 22 34 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 37 20 34 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 2e 33 38 39 39 37 20 34 33 2e 32 37 36 31 43 36 2e 30 33 33 39 37 20 34 33 2e 32 37 36 31 20 37 2e 33 32 39 39 37 20 34 32 2e 33 38 38 31 20 37 2e 33 32 39 39 37 20 34 30 2e 39 39 36 31 43 37 2e 33 32 39 39 37 20 33 39 2e 38 34 34 31 20 36 2e 36 34 35 39 37 20 33 39 2e 30 32 38 31 20 34 2e 38 32 31 39 37 20 33 38 2e 35 32 34 31 4c 33 2e 39 30 39 39 37 20 33 38 2e 32 37 32 31 43 32 2e 37 39 33 39 37 20 33 37 2e 39 37 32 31 20 32 2e 33 37 33 Data Ascii: <svg width="37" height="46" viewBox="0 0 37 46" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M4.38997 43.2761C6.03397 43.2761 7.32997 42.3881 7.32997 40.9961C7.32997 39.8441 6.64597 39.0281 4.82197 38.5241L3.90997 38.2721C2.79397 37.9721 2.373

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49941	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:59 UTC	1126	OUT	GET /content/dam/mtb-web/images/icon-global-nav-hamburger-menu.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
2024-03-14 00:56:59 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1473 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 10 Apr 2023 13:50:53 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:58 GMT ETag: "5c1-5f8fba9cfc940" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d4b67fda8355378cec4afc079701f8e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: peOcQcPcwDPTGw61afcetRqOQjRjmomHOJ6j7KWprWcX-5w4nEuvOg== Age: 1 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:59 UTC	1473	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 32 20 34 36 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 72 65 63 74 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 2e 37 32 36 36 32 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 2f 3e 0a 3c 72 65 63 74 20 79 3d 22 31 32 2e 30 33 31 34 22 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 2e 37 32 36 36 32 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 2f 3e 0a 3c 72 65 63 74 20 79 3d 22 32 33 2e 32 30 33 34 22 20 77 69 64 74 68 3d 22 34 32 22 20 68 65 69 67 68 74 3d 22 34 2e 37 32 36 36 32 22 20 66 69 6c Data Ascii: <svg width="42" height="46" viewBox="0 0 42 46" fill="none" xmlns="http://www.w3.org/2000/svg"><rect width="42" height="4.72662" fill="white"/><rect y="12.0314" width="42" height="4.72662" fill="white"/><rect y="23.2034" width="42" height="4.72662" fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49943	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:59 UTC	1128	OUT	GET /content/dam/mtb-web/logos/favicon.ico.transform/32x32/image.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0
2024-03-14 00:56:59 UTC	791	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 842 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Tue, 12 Mar 2024 22:09:24 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:56:58 GMT ETag: "34a-6137de930baef" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ef73a156d5c211fdbb7e4231f2a0edca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: Ag8Axvm2vSzh5oYHTE1qJRGUEW7cEoAtR6T0KCKY7UwkPYD8FAbl-w== Age: 1 Permissions-Policy: browsing-topics=()
2024-03-14 00:56:59 UTC	842	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 11 49 44 41 54 78 da ed 95 49 4c 93 51 10 80 c1 e5 a0 47 a3 89 31 1e 0c e1 c4 81 ab d1 28 d1 68 4c 34 5e 34 31 51 c3 c1 0d 88 c6 04 59 8c 06 d1 20 46 08 bb 94 50 04 0b a5 40 d1 0a 05 44 65 0d 55 43 69 85 06 a8 50 20 2c 82 12 ca 26 50 f6 c5 2e e3 9b 29 ff 53 5a 54 6e 5c fe 97 bc f4 ff 67 79 f3 bd f9 67 a6 1e b0 c9 cb 43 04 10 01 44 00 11 60 d3 01 6e be 2f 80 c3 39 b1 e0 95 7a 1f 0e ca 9e 82 d5 66 73 33 6a 1f 1b 22 3d ee 0b 45 19 20 37 36 70 dd e2 cf 15 a8 ff de 0b b5 5f 3b 60 64 6e 9a cb fd 4b 65 64 7f 5a f9 0c ae 97 e7 82 97 c4 e9 7f 4e 95 0e 97 d4 59 e0 2d 89 a0 77 ca c0 c5 e2 4c f0 78 7c 83 76 79 b7 d1 0d e0 76 45 21 d7 57 f6 b6 73 b9 66 a0 0b f6 Data Ascii: PNGIHDR szzIDATxILQG1(hL4^41QY FP@DeUCiP ,&P.)SZTn\gygCD`n/9zfs3j"=E 76p_;`dnKedZNY-wLx\|vyvE!Wsf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49945	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:59 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 1802 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:56:59 UTC	1802	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 62 39 65 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8b9e9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:56:59 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:56:59 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49944	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:56:59 UTC	656	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377817746&z=1&S=0&N=0&P=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 786 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:56:59 UTC	786	OUT	Data Raw: 78 01 6d 54 c9 72 e2 30 14 fc 15 4a 87 54 4d e1 80 2c 79 af ca 81 b0 24 24 2c 0e 30 6c 53 73 f0 22 1b e3 15 2f 38 90 c9 bf cf 13 84 d4 1c e6 a4 96 d4 af df 2a fd fa 40 25 32 50 81 04 f4 8e 0c 91 68 58 40 27 00 98 48 02 aa 6f 27 3b 64 e8 58 15 90 03 54 60 fe 80 85 8a d8 96 89 2e 62 d9 71 24 c7 61 44 94 31 21 ba 26 61 91 62 c5 b5 81 56 20 83 10 2a 13 51 40 19 77 32 be 5b 34 1e ad 24 6c dc 37 4c 96 17 69 62 45 8d bb c6 63 55 04 09 2b 8a cb 55 90 f8 42 63 9c e6 a5 6f f9 ac 10 e0 1a 36 ac f1 a7 71 b3 05 d9 2a 8f 40 6c 57 96 59 61 b4 db 75 5d d3 56 5c da 2d 27 8d db bb 34 66 f7 19 98 02 cd 61 c0 92 7c 8e 5c 64 68 b0 e4 10 0f 86 fc 58 04 91 89 44 85 b8 ce c8 f0 ac a8 60 02 4a 91 01 57 19 32 3e 90 85 0c 55 55 04 64 43 d6 0a bd 64 4d 34 42 81 0e 42 04 4b ba 0e 1a Data Ascii: xmTr0JTM,y$$,0lSs"/8@%2PhX@'Ho';dXT`.bq$aD1!&abV Q@w2[4$l7LibEcU+UBco6q*@lWYau]V\-'4fa\|\dhXD`JW2>UUdCdM4BBK
2024-03-14 00:56:59 UTC	963	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:56:59 GMT Content-Type: application/json Content-Length: 90 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex
2024-03-14 00:56:59 UTC	90	IN	Data Raw: 31 31 65 38 36 31 62 39 39 34 32 36 38 32 66 61 61 32 63 36 37 32 64 32 65 33 61 36 31 30 62 66 2f 30 38 39 31 35 63 33 35 33 36 31 62 36 66 65 62 38 36 63 62 66 64 34 36 37 32 34 61 38 36 38 39 2f 39 36 37 33 35 64 35 65 39 64 66 38 63 30 34 37 64 63 65 63 35 38 37 37 Data Ascii: 11e861b9942682faa2c672d2e3a610bf/08915c35361b6feb86cbfd46724a8689/96735d5e9df8c047dcec5877

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49946	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:00 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:00 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:00 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49947	216.239.32.181	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:00 UTC	1435	OUT	POST /g/collect?v=2&tid=G-ZTNQ6ZK8T0&gtm=45je43b0v890340193za200&_p=1710377810451&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dYmQxMT&cid=1166952759.1710377814&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_s=2&sid=1710377813&sct=1&seg=0&dl=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&dt=M%26T%20Bank%20-%20Personal%20%26%20Business%20Banking%2C%20Mortgages%2C%20%26%20More%20%7C%20M%26T%20Bank&en=CQ&_ee=1&_et=11&up.cq_category=suspicious&tfd=30006 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www3.mtb.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:00 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www3.mtb.com Date: Thu, 14 Mar 2024 00:57:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49948	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:00 UTC	751	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377818547&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=310b529105cc4cce21502298401306db HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 47673 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:00 UTC	16384	OUT	Data Raw: 78 01 ed fd db 72 1b 49 96 ef 09 bf 4a ec ac 29 ed 6e db 02 09 04 ce aa ad 6e 93 98 ca 94 aa 48 65 56 ea 90 95 b5 eb 33 59 00 08 10 28 81 00 0b 00 29 51 3d 3d b6 2f e6 ee 7b 82 b9 6b 9b bb 7d 33 66 df 2b d4 bc 49 3f c9 f7 fb 2f 8f 08 06 22 1c 27 92 52 2a b3 a4 4c 02 01 8f 08 3f 2c 5f 67 5f be fc bf ff 97 af bf 3b 7a f9 d3 f7 4f 82 d1 f2 6c f2 2f ff 3d f9 8c a3 c1 bf fc f7 c3 91 7d f5 66 83 ab 7f f9 ef ff a5 52 f9 e3 c9 ef 5f 7c f7 fc e9 cb 93 e3 07 ff f6 55 ed 2b 3e a6 5f 3d f8 4a bf bf ba ff 55 f4 d5 83 ff f1 6f 5f 85 69 e9 24 9a 9e 52 7a c9 03 f1 f4 ab 7f ff f7 ff cf fd af 8e ec 89 eb f7 9e 3c fa ba fc 5e 7f 12 2d 16 c9 8b d1 b2 12 4f e2 b3 78 ba ac 9c 45 f3 b7 f1 dc 5b cf c9 93 97 8f ca f5 8c 96 cb f3 4a fc b7 8b f1 65 52 d9 6c 3e 3e 1d 4f 2b cb f9 38 Data Ascii: xrIJ)nnHeV3Y()Q==/{k}3f+I?/"'R*L?,_g_;zOl/=}fR_\|U+>_=JUo_i$Rz<^-OxE[JeRl>>O+8
2024-03-14 00:57:00 UTC	16384	OUT	Data Raw: df 78 fe 7a d7 67 7d cf 15 06 f1 05 15 3e 23 54 78 46 6e f5 85 92 fd fc 10 4f 9c b3 c0 37 83 79 4c c8 5f ef fa ac ef 39 3f e2 ff 2a 71 e5 23 8b 88 db 3b ce 73 22 24 30 39 b2 e3 a2 77 1e 17 d2 eb c2 0c ee e3 0a b0 56 ef de f0 f0 61 5f da 5b df 77 61 04 77 c4 74 5f c4 fd 8b 39 01 7b fb f4 66 d7 67 77 79 6e db 33 3b dc cf 6b bc 77 6a 38 68 16 68 ff 26 f5 a7 cb a3 0b 42 2b fb eb ce 20 2c ce 72 a1 ad dd 54 47 0f 15 ef d5 a8 67 90 77 4a b9 c4 16 9e 4e c7 c3 2b 42 17 2a a7 13 f6 9d b9 51 66 31 03 6c d2 8a 2a a3 f1 60 10 a7 51 cc 89 ef 72 17 7b 27 85 60 01 72 fb 50 77 a9 7b 77 47 e9 f4 6a 27 a5 f6 85 21 49 59 f2 ec f2 be 1b f9 9a 90 8a 02 58 76 34 b3 16 b3 fe 98 a0 3f 71 dc 7d fc 3d 85 c6 32 7d ea 16 f3 e8 a1 80 8d 96 92 c7 eb bd db ca 71 32 e4 bb b1 8d ee 94 7c Data Ascii: xzg}>#TxFnO7yL_9?q#;s"$09wVa_[wawt_9{fgwyn3;kwj8hh&B+ ,rTGgwJN+BQf1l*`Qr{'`rPw{wGj'!IYXv4?q}=2}q2\|
2024-03-14 00:57:00 UTC	14905	OUT	Data Raw: 54 85 af 9d 63 fb 38 58 16 e7 2a 3e 74 8b b0 c0 03 23 bf 2b 07 cc 22 18 ac 2f da c0 23 77 08 e6 3a 45 5a af 68 8d 10 21 5a 6c 46 af d4 a4 9a 11 63 29 f7 b8 e2 36 4e 00 bd 0c 83 75 c1 98 f8 79 c4 79 91 b4 eb e2 10 f7 1a c3 3e 88 8a bb 88 70 61 ad fd e0 dc c2 3c b3 70 01 cb 97 4a 3f f1 4e 49 97 b0 2b 3a 7c a9 a5 6a 87 ca 1a b2 69 af 1a ad 29 af 23 7b 99 49 c9 e1 b1 01 c5 a0 82 b7 58 6f f2 16 7a 89 43 70 c5 b2 19 21 f8 73 14 e4 46 5c 52 3e 75 ef 4e 79 58 9f b3 3b 31 a5 1c 09 6c 38 19 a1 83 8f 6c 93 b0 29 a9 9a be b3 11 56 cc 41 6f d0 e5 39 e7 de 9d 62 d7 95 0e 24 cb 32 d9 cb a8 aa 28 ab 5c 9e f9 ad 9c 77 27 c4 6d 76 aa cd 4e 4d fe 5a 34 85 b0 d9 e8 36 9b da 02 04 89 d5 c3 56 17 ff dd ba 72 3c 95 ad 56 27 ec 62 9c ac d4 73 5d ee 05 7f ba a1 bf 34 61 1e af 87 Data Ascii: Tc8X*>t#+"/#w:EZh!ZlFc)6Nuyy>pa<pJ?NI+:\|ji)#{IXozCp!sF\R>uNyX;1l8l)VAo9b$2(\w'mvNMZ46Vr<V'bs]4a
2024-03-14 00:57:00 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:00 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49950	34.66.3.160	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:00 UTC	481	OUT	OPTIONS /mtb/hash-check HTTP/1.1 Host: rl.quantummetric.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www3.mtb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:01 UTC	415	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:01 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: * Access-Control-Allow-Origin: https://www3.mtb.com Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49949	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:00 UTC	753	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377818549&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 613 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:00 UTC	613	OUT	Data Raw: 78 01 75 92 4b 73 a2 40 14 85 ff 0a d5 8b 6c 20 da 74 f3 ae ca 82 f8 48 4c 44 88 32 8a 4c 65 01 da 80 f2 94 87 f8 88 ff 7d 3a 26 99 45 66 b2 ba 4d df fb d5 e9 73 0f 67 40 62 72 04 da f9 b3 82 3d d2 b6 72 ba 83 83 60 d6 4b 36 fd 58 88 05 cf 9d 37 65 91 5a ea 74 6c 75 1d 15 0d 2d dc a0 f5 68 35 82 8d df 5a 46 b9 9b 8c e6 71 d9 e2 51 84 fa c5 c8 0b 03 02 b7 a7 66 bb 33 13 3c 5f f7 f1 64 a8 14 99 b4 98 ef 5d 9c 1f fc c3 c2 87 fb 91 af eb 7b 39 62 ad 8c 55 7b ab 97 b6 90 86 27 8f 35 8a 60 9d 07 15 71 66 73 fc 12 4e aa 8c 0c d2 42 5f be 74 f1 38 2f d7 36 99 65 f1 d2 de b0 c8 48 11 ec e5 24 6f 5a 34 8c f5 ad a1 97 7e be 4b ed 50 60 f5 26 37 9e dd da 14 27 8d d3 a8 55 f3 58 14 93 07 69 73 8c 57 8f 5e 10 0e 9a da cc 88 64 59 61 0f f7 c7 a2 d4 5d 2f d9 76 f9 60 23 Data Ascii: xuKs@l tHLD2Le}:&EfMsg@br=r`K6X7eZtlu-h5ZFqQf3<_d]{9bU{'5`qfsNB_t8/6eH$oZ4~KP`&7'UXisW^dYa]/v`#
2024-03-14 00:57:01 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:01 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49953	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:01 UTC	1499	OUT	GET /Login/LoginHelp HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689
2024-03-14 00:57:01 UTC	1646	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/html; charset=utf-8 Set-Cookie: ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; path=/; secure; HttpOnly; SameSite=None X-SRV: B-OLB-227 P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT' X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Access-Control-Allow-Origin: https://digitalbanking.mtb.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST,GET,OPTIONS X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true Server-Timing: dtSInfo;desc="0", dtRpid;desc="1610461522" Set-Cookie: dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0; Path=/; Domain=.mtb.com Date: Thu, 14 Mar 2024 00:57:00 GMT Set-Cookie: mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b;path=/;secure;httponly Set-Cookie: TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TS01e71088028=01fe6ed147e995f1969612607291575c939203d3776781db003e99e60a297ce8ddf5f2079478e7c3a21bbe6bc607db448eabd1c4b1; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; Max-Age=30; Path=/ Set-Cookie: TSba0bc889027=0856addebbab2000dc662b86e1a85b59e6167ee5c644a1b147977346039c955899ccb704839aafae08ecbd3a56113000abbd31a099400167d849aa5815d7b5db453c9b4f2935df3cd77facbac4e6109b279ddd0b3167adedbd6a91fe51d39159; Path=/ Transfer-Encoding: chunked
2024-03-14 00:57:01 UTC	12721	IN	Data Raw: 33 31 61 39 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 5f 5f 73 74 69 63 6b 79 2d 66 6f 6f 74 65 72 20 5f 5f 73 74 69 63 6b 79 2d 66 6f 6f 74 65 72 2d 2d 6c 69 6e 6b 73 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 77 69 6e 64 6f 77 5b 22 6c 6f 61 64 65 72 43 6f 6e 66 69 67 22 5d 20 3d 20 22 2f 54 53 50 44 2f 3f 74 79 70 65 3d 32 30 22 3b 0d 0a 7d 29 28 29 3b 0d 0a 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 54 53 50 44 2f 3f 74 Data Ascii: 31a9<!DOCTYPE HTML><html lang="en" class="__sticky-footer __sticky-footer--links"><head><script type="text/javascript">(function(){window["loaderConfig"] = "/TSPD/?type=20";})();</script><script type="text/javascript" src="/TSPD/?t
2024-03-14 00:57:01 UTC	4020	IN	Data Raw: 66 61 64 0d 0a 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 65 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 74 62 2d 6c 69 73 74 2d 73 65 6c 65 63 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 62 75 6c 6c 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 74 62 2d 6c 69 73 74 2d 73 65 6c 65 63 74 2d 2d 68 65 61 64 6c 69 6e 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 57 68 61 74 20 63 61 6e 20 77 65 20 68 65 6c 70 20 79 6f 75 20 77 69 74 Data Ascii: fad </div> </div> <div class="cell"> <div class="mtb-list-select"> <ul class="no-bullet"> <li class="mtb-list-select--headline"> What can we help you wit
2024-03-14 00:57:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49951	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:01 UTC	442	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377817746&z=1&S=0&N=0&P=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:01 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:01 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49952	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:01 UTC	535	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377818547&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=310b529105cc4cce21502298401306db HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:01 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:01 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49955	34.66.3.160	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:01 UTC	578	OUT	POST /mtb/hash-check HTTP/1.1 Host: rl.quantummetric.com Connection: keep-alive Content-Length: 286 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:01 UTC	286	OUT	Data Raw: 5b 22 37 58 71 65 32 77 77 65 76 70 4d 3d 22 2c 22 6c 48 63 7e 65 38 4c 59 47 48 6f 3d 22 2c 22 7a 44 4f 35 34 72 41 71 45 36 73 3d 22 2c 22 4b 69 4a 78 42 53 45 7a 55 6d 45 3d 22 2c 22 52 42 6e 74 4a 73 77 55 70 39 34 3d 22 2c 22 55 4f 47 39 6b 57 7a 52 4e 4d 38 3d 22 2c 22 76 4d 6b 4d 43 6e 73 49 51 38 45 3d 22 2c 22 6f 7e 2b 55 4a 46 6a 54 5a 4d 30 3d 22 2c 22 64 65 54 51 75 66 6a 2b 31 36 6b 3d 22 2c 22 36 69 74 46 53 41 72 66 67 4f 45 3d 22 2c 22 76 69 73 36 47 50 35 5a 48 46 41 3d 22 2c 22 5a 50 51 52 69 44 37 69 6f 51 63 3d 22 2c 22 56 67 71 67 31 4a 53 4a 7a 64 6b 3d 22 2c 22 6b 32 41 39 4c 6a 76 6c 36 44 63 3d 22 2c 22 54 30 2b 4e 53 65 45 57 65 72 51 3d 22 2c 22 72 4b 72 32 70 54 55 59 55 49 55 3d 22 2c 22 53 77 57 62 4a 53 50 4b 36 46 67 3d 22 Data Ascii: ["7Xqe2wwevpM=","lHc~e8LYGHo=","zDO54rAqE6s=","KiJxBSEzUmE=","RBntJswUp94=","UOG9kWzRNM8=","vMkMCnsIQ8E=","o~+UJFjTZM0=","deTQufj+16k=","6itFSArfgOE=","vis6GP5ZHFA=","ZPQRiD7ioQc=","Vgqg1JSJzdk=","k2A9Ljvl6Dc=","T0+NSeEWerQ=","rKr2pTUYUIU=","SwWbJSPK6Fg="
2024-03-14 00:57:01 UTC	337	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:01 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www3.mtb.com Vary: Origin Strict-Transport-Security: max-age=15724800; includeSubDomains Access-Control-Allow-Methods: *
2024-03-14 00:57:01 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49954	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:01 UTC	2172	OUT	GET /TSPD/?type=18 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/Login/LoginHelp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS01e71088028=01fe6ed147e995f1969612607291575c939203d3776781db003e99e60a297ce8ddf5f2079478e7c3a21bbe6bc607db448eabd1c4b1; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; TSba0bc889027=0856addebbab2000dc662b86e1a85b59e6167ee5c644a1b147977346039c955899ccb704839aafae08ecbd3a56113000abbd31a099400167d849aa5815d7b5db453c9b4f2935df3cd77facbac4e6109b279ddd0b3167adedbd6a91fe51d39159
2024-03-14 00:57:01 UTC	153	IN	HTTP/1.1 200 OK Content-Encoding: gzip Cache-Control: public, max-age=86400 Content-Type: text/javascript Content-Length: 3248 Connection: close
2024-03-14 00:57:01 UTC	3248	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 00 cd 5a 6d 53 e3 46 12 fe ee 5f 01 fe c0 4a e7 81 d2 e8 5d d6 0a 2a 95 ec d5 e1 72 e2 aa 53 aa ee ca c4 a7 32 58 80 88 d6 e6 2c 79 17 04 fe ef f7 f4 cc e8 c5 40 b2 cb 86 dc dd 07 23 8d 34 dd d3 d3 fd f4 db 88 cf d9 72 b1 fa 7c f4 d3 3f 7e f8 67 b4 bf ff b9 1d 85 e5 fa fe 41 bb dc 2c 2f ca 6c b5 d4 f4 f6 7e af 4a 30 fc 34 5f ef 15 d1 3e 0f 9b c7 89 56 e8 0f 97 ab b5 46 af 92 c8 08 8b c3 c3 50 4f 06 51 ae 2d 56 17 9b 8f e9 b2 3c aa 6f 3e e4 29 5d d8 72 93 e7 7a b8 4e cb cd 1a 0c b6 0d af 5c 2b 58 22 17 99 44 fd 4f 59 3f 4c a2 e4 f1 71 99 7e de 1b d7 d3 e3 0a 93 1a 01 b1 76 71 54 a4 e5 77 65 b9 ce ce 37 65 aa f5 17 f3 72 7e d8 1f 4c 58 72 34 71 34 bd 59 47 32 df ca c5 db 35 c7 d8 55 79 9d 15 47 a7 93 88 87 e2 6e bc c2 36 c4 5d 7e Data Ascii: ZmSF_J]*rS2X,y@#4r\|?~gA,/l~J04_>VFPOQ-V<o>)]rzN\+X"DOY?Lq~vqTwe7er~LXr4q4YG25UyGn6]~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49957	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:01 UTC	721	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377820089&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1159&N=5&P=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 274 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:01 UTC	274	OUT	Data Raw: 78 01 65 50 3d 6f 83 30 14 fc 2b d6 1b 32 b9 89 cd 47 a0 1e b3 a7 8d 94 6c 55 07 4a 5d 82 0a 76 85 a1 4d 45 f9 ef 3d 1b c1 92 ed ec 77 77 ef dd bd 8c 54 93 8a a4 e4 f4 41 4a 70 fa 26 45 c7 cd 85 1d 0a f3 c9 1e d8 49 77 ce 9a a2 61 1b 76 18 5c 6d b4 73 61 54 9b 8a b3 a3 ed fa aa a8 b4 e3 18 e3 a1 d9 1f 5b b4 c4 a9 87 95 d5 1e 00 c9 4c 8a 38 cb 72 99 89 34 e5 f4 4e 2a e6 74 7e 22 95 4e 7c 0c d4 b6 07 15 eb 47 1a 70 91 c8 84 98 02 4f de 13 c0 8a e4 3e be 23 c0 e0 46 6a 9f e4 9c 7e 49 25 09 56 f8 45 ab c1 32 47 5a 3f 8f b3 79 81 7c 5c 19 eb 0d 3f a4 cc d0 34 c1 70 06 50 78 30 1f 15 25 41 d3 22 e2 e9 f9 7c 81 31 8e a6 6b df 7f 39 b5 db d9 37 b7 75 ba ea b4 36 a5 6d 86 d6 6c 4b db ee 5a 6b c0 2b 7d 38 14 ed d0 49 2e 22 94 10 7a ef d0 44 8c ef de ff 2f 5d 21 87 Data Ascii: xeP=o0+2GlUJ]vME=wwTAJp&EIwav\msaT[L8r4N*t~"N\|GpO>#Fj~I%VE2GZ?y\|\?4pPx0%A"\|1k97u6mlKZk+}8I."zD/]!
2024-03-14 00:57:02 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:01 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49956	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:01 UTC	539	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377818549&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:01 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:01 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49958	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:01 UTC	2251	OUT	GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=9 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/Login/LoginHelp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS01e71088028=01fe6ed147e995f1969612607291575c939203d3776781db003e99e60a297ce8ddf5f2079478e7c3a21bbe6bc607db448eabd1c4b1; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; TSba0bc889027=0856addebbab2000dc662b86e1a85b59e6167ee5c644a1b147977346039c955899ccb704839aafae08ecbd3a56113000abbd31a099400167d849aa5815d7b5db453c9b4f2935df3cd77facbac4e6109b279ddd0b3167adedbd6a91fe51d39159
2024-03-14 00:57:02 UTC	157	IN	HTTP/1.1 200 OK Content-Encoding: gzip Cache-Control: public, max-age=31536000 Content-Type: text/javascript Content-Length: 18932 Connection: close
2024-03-14 00:57:02 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 00 dd 7d 6b 73 e3 46 92 e0 77 fe 0a 49 e1 ed 21 4c 48 83 67 01 20 c5 56 cc ce cc c5 51 c1 5d 46 2c 37 e2 36 20 6b 10 ea 6e da 26 07 16 7b 05 b5 a7 8d 16 ff fb e5 ab 0a 05 10 d4 cb 6d ef cd 39 ac 26 89 47 55 56 55 56 be 33 eb 1f eb db 0f db 7f 9c fd fb ff f9 cb 7f 4d 8f 8f ff d1 fc 9a dc df fd f2 65 f8 fd a7 db f7 f7 eb ed ed d0 69 be 1f d5 05 fc fc f9 e6 ee a8 9a 1e fb 13 73 b9 18 56 ce 97 ef b7 77 43 bc 55 4c bd 49 75 7a 3a 71 8a d1 b4 1c 7e d8 be ff f4 d3 ea f6 fe 4c 7f f9 6b b9 c2 0f f7 f6 53 59 3a 93 bb d5 fd a7 3b 68 60 67 da 2a 87 95 5b 70 27 8b e9 c9 cf eb 93 49 31 2d 1e 1e 6e 57 ff 38 9a eb c7 97 35 3c 64 00 84 be ab b3 6a 75 ff a7 fb fb bb f5 bb 4f f7 ab e1 c9 87 9b fb 9b d3 93 d1 c2 2d ce 16 f1 d0 31 fd 70 e3 3b ee bc Data Ascii: }ksFwI!LHg VQ]F,76 kn&{m9&GUVUV3MeisVwCULIuz:q~LkSY:;h`g*[p'I1-nW85<djuO-1p;
2024-03-14 00:57:02 UTC	2548	IN	Data Raw: d1 b6 d8 f4 a4 66 3d c9 fe e7 78 b2 df ba a0 d3 fb 1e 53 17 f0 50 c2 c4 6b c8 42 22 21 2b 81 94 0d 25 0d c8 b3 b4 1e fa 74 5c a1 fc 2c 05 43 4f 6b ac 18 54 4c 6d 4b 73 2b cb 81 a7 e1 40 32 a3 4e 64 b4 de 6e 25 32 8e 86 6d 51 f3 29 7b 3c 25 0d 67 69 c4 34 f1 42 12 26 9d 51 b9 7d 7f 83 3b a4 b1 25 6a d3 2c e2 e9 18 54 75 8c 64 61 e1 56 b8 b2 6b 6c 39 26 c2 22 c6 ec ad b4 c1 77 bd 07 30 5e 68 b6 9e d0 e1 0e 8b 11 2f b2 27 ca e3 63 7a fe 21 e7 86 56 48 b1 dd e5 0c 84 18 49 67 f5 34 9b d0 12 af 3a 14 76 ce ef 96 18 62 4e db c8 8e 04 67 20 0f 36 b8 1f aa 2d 8d 75 9a 69 83 65 ba 8f 9b 29 19 6a 39 d2 d9 17 fd 62 cf 7e 9e 84 c8 f9 7e e9 b3 67 4a cd 5a 6d 70 8b d1 e2 d7 b4 d3 10 23 b7 b2 a3 f2 06 2f 6b c8 c8 46 58 1f ae 32 a9 a1 4d 34 bf de be b1 fb e2 dc af 21 17 Data Ascii: f=xSPkB"!+%t\,COkTLmKs+@2Ndn%2mQ){<%gi4B&Q};%j,TudaVkl9&"w0^h/'cz!VHIg4:vbNg 6-uie)j9b~~gJZmp#/kFX2M4!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49961	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:01 UTC	2252	OUT	GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=17 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/Login/LoginHelp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS01e71088028=01fe6ed147e995f1969612607291575c939203d3776781db003e99e60a297ce8ddf5f2079478e7c3a21bbe6bc607db448eabd1c4b1; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; TSba0bc889027=0856addebbab2000dc662b86e1a85b59e6167ee5c644a1b147977346039c955899ccb704839aafae08ecbd3a56113000abbd31a099400167d849aa5815d7b5db453c9b4f2935df3cd77facbac4e6109b279ddd0b3167adedbd6a91fe51d39159
2024-03-14 00:57:02 UTC	154	IN	HTTP/1.1 200 OK Content-Encoding: gzip Cache-Control: public, max-age=86400 Content-Type: text/javascript Content-Length: 34890 Connection: close
2024-03-14 00:57:02 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 00 ec bd 69 73 db 48 96 28 fa 9d bf c2 52 54 7b 80 12 a4 02 90 58 49 d3 8a be 33 1d 71 a9 e0 0c 5f 0c 27 e2 f5 a3 ad 61 c8 32 6d 53 86 45 b5 20 2f 05 93 ef b7 bf b3 64 26 12 0b 49 88 96 ab fa 4e bc 88 72 89 04 91 fb c9 b3 2f 5f 97 b7 6f 57 5f cf fe e3 ff fe b7 bf 0f 8f 8e be 96 df 06 0f f7 bf 7f b7 de 7d be bd 7e 58 ae 6e 2d bb f2 f9 cb d5 fd b3 62 f8 fd ed e2 fa fe f7 bb 87 be fe a5 b0 bf 63 b3 fb c5 c3 e7 fb db 67 17 d3 c9 7f 9c dd 5d dd e7 0b cb 7c a3 18 16 67 f9 5d b6 7c b0 8e b3 63 7b 80 7d e5 c3 e3 e3 c1 bb d5 bd 85 5f e6 43 77 30 7f 51 9c 65 8b db f7 0f 1f 06 27 27 73 3b 3f 19 4e 1f ee 97 b7 ef cf de dd af 3e fd eb 87 ab fb 7f 5d bd 5d 58 c5 ab f9 a5 3d 90 a3 e5 1b e8 dc de 5c 5f 3d 5c 7f b0 e6 f6 f7 cd 66 a3 7e 82 a9 5e Data Ascii: isH(RT{XI3q_'a2mSE /d&INr/_oW_}~Xn-bcg]\|g]\|c{}_Cw0Qe''s;?N>]]X=\_=\f~^
2024-03-14 00:57:02 UTC	16384	IN	Data Raw: 86 14 23 7f c7 f3 e7 bd 8a f9 df 37 68 ac 52 d1 48 45 f1 56 cb 66 e7 30 2a bb 2c 43 c1 c9 9e be 8f c6 70 9c 1e 41 0a 55 fe a4 d2 36 6c 8d 67 08 9e 48 3d 43 18 c2 4a 95 c1 63 56 0c b3 59 69 d2 ad eb 27 29 91 69 b3 08 d4 b2 c0 a2 63 79 f3 87 51 41 71 d3 ae aa 43 33 54 f8 32 6d dd b2 4b 67 ac 6a 37 1e 79 03 23 3e 38 88 03 15 1f 3c c4 09 82 88 91 06 38 16 a3 bf b3 e9 e8 9c ea 88 5e 4c 81 22 f7 8d 86 22 f2 77 36 cc 47 e7 30 e4 04 6b 17 98 cd 92 d8 dd dd 6c 0c 14 7f 8c ad 54 a6 1c 7e 0b 64 a8 04 ab 32 07 82 ea c6 5f 9e 4d a4 2b c4 6c 36 94 85 a1 e1 2e 0d c6 05 55 61 fd 95 8f 83 d3 a5 60 45 e4 6c 76 36 9b 5a 46 dd d3 7a 79 48 34 d1 c7 a9 34 d1 cf 6c d8 2e 9b ca 6a cd 54 0a 9e 96 79 e0 34 b2 19 ee cf ee 7e 29 c4 9e 0c 13 08 e8 7e 18 f6 7d 1f f3 bb 6d eb 73 3c a3 Data Ascii: #7hRHEVf0*,CpAU6lgH=CJcVYi')icyQAqC3T2mKgj7y#>8<8^L""w6G0klT~d2_M+l6.Ua`Elv6ZFzyH44l.jTy4~)~}ms<
2024-03-14 00:57:02 UTC	2122	IN	Data Raw: 8c 7f 6f 4a 37 a4 6b c3 36 69 af 65 79 3d 81 34 cb ba e1 1f 0c 3b cb 86 cc fb 39 a3 c6 8c 2c 4b 57 2d 84 54 cd 00 d5 d7 af 4f 7a c1 8f 26 eb b1 f1 23 5a d8 df 00 b8 cf fc f4 ee b7 ef 74 f2 59 87 a5 4b 6d 52 98 64 cf 0f d5 60 0c 38 ff b5 19 d3 63 65 27 9a 8a 49 29 ee 24 64 9d 00 6d 89 9a 1c 2f d4 3a d2 e4 71 a4 7c 24 73 18 01 6d 1a 85 b0 53 6b e8 b0 5a 8d 8f 95 2e 53 3c ba f7 b1 aa 13 1e 12 9b 85 50 40 97 4b 2a 0d 8c 06 93 e6 88 5f 96 6f de 9c 75 03 4a 77 4a d7 74 2e de 9b e4 06 6a 33 1d 2c 5a bf 5d 5f 46 2c 7d a0 83 c5 db d8 88 d8 fb f6 c2 50 c3 e1 af 80 73 db 26 76 32 56 5b 9e dd 9c 6f a5 0b 7b a9 4c 74 b1 91 6a d1 d8 e3 57 80 f8 f5 eb af 1f 63 2c 54 fa bc ab f6 bd c0 78 d8 6c 07 20 8d ba 94 22 ad 3a 61 3d 9d ea 29 45 ca bf 8c 20 cb 9a 92 b6 db 2d 83 ba Data Ascii: oJ7k6iey=4;9,KW-TOz&#ZtYKmRd`8ce'I)$dm/:q\|$smSkZ.S<P@K*_ouJwJt.j3,Z]_F,}Ps&v2V[o{LtjWc,Txl ":a=)E -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49959	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:01 UTC	2207	OUT	GET /ruxitagentjs_ICA2NVfghjqrux_10285240307101407.js HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/Login/LoginHelp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS01e71088028=01fe6ed147e995f1969612607291575c939203d3776781db003e99e60a297ce8ddf5f2079478e7c3a21bbe6bc607db448eabd1c4b1; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; TSba0bc889027=0856addebbab2000dc662b86e1a85b59e6167ee5c644a1b147977346039c955899ccb704839aafae08ecbd3a56113000abbd31a099400167d849aa5815d7b5db453c9b4f2935df3cd77facbac4e6109b279ddd0b3167adedbd6a91fe51d39159
2024-03-14 00:57:02 UTC	1163	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000, immutable Content-Type: text/javascript; charset=utf-8 Expires: Fri, 14 Mar 2025 00:57:02 GMT Last-Modified: Wed, 03 Mar 2010 07:01:40 GMT X-SRV: B-OLB-227 P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT' X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Access-Control-Allow-Origin: https://digitalbanking.mtb.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST,GET,OPTIONS Date: Thu, 14 Mar 2024 00:57:01 GMT Content-Length: 233260 Set-Cookie: TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TS01e71088028=01fe6ed147ca8b80a85b38e9a65be56ac368dcb4386781db003e99e60a297ce8ddf5f20794eabe867ceb1093b5c03b605b78f4bf21; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TSba0bc889027=0856addebbab200049b3574fa4e9f952e438738c39dd2d4c84d2502236a18402bbc1dd583b11917108e6a9cfd411300088d1621989653ef7360b22461a046adc64355a4b60780ab9a686d3255c481b6e223f7141cb89cd3589b2126d07f41eec; Path=/
2024-03-14 00:57:02 UTC	6671	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 61 6e 64 20 6c 69 63 65 6e 73 65 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 79 6e 61 74 72 61 63 65 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 74 72 75 73 74 2d 63 65 6e 74 65 72 2f 63 75 73 74 6f 6d 65 72 73 2f 72 65 70 6f 72 74 73 2f 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 22 31 22 2c 22 3b 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 29 3b 76 61 72 20 42 61 3d 2d 31 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 29 3b 64 6f 63 75 6d 65 6e Data Ascii: /* Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ */(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ba=-1!==document.cookie.indexOf("__dTCookie");documen
2024-03-14 00:57:02 UTC	14526	IN	Data Raw: 6d 65 6e 74 7c 7c 67 3d 3d 3d 4e 61 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3f 4f 61 2e 63 61 6c 6c 28 67 2c 71 2c 78 2c 57 29 3a 51 2e 63 61 6c 6c 28 67 2c 71 2c 78 2c 57 29 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 67 2c 71 29 7b 76 61 72 20 78 3d 21 31 3b 74 72 79 7b 69 66 28 79 26 26 2d 31 3c 70 62 2e 69 6e 64 65 78 4f 66 28 67 29 29 7b 76 61 72 20 57 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 22 70 61 73 73 69 76 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 78 3d 21 30 7d 7d 29 3b 79 28 22 74 65 73 74 22 2c 6c 62 2c 57 29 7d 7d 63 61 74 63 68 28 49 29 7b 7d 72 65 74 75 72 6e 20 78 3f 7b 70 61 73 73 69 76 65 3a 21 30 2c 63 61 70 74 75 72 65 3a 71 7d 3a 71 7d 66 75 6e 63 74 Data Ascii: ment\|\|g===Na.document.documentElement?Oa.call(g,q,x,W):Q.call(g,q,x,W))}function U(g,q){var x=!1;try{if(y&&-1<pb.indexOf(g)){var W=Object.defineProperty({},"passive",{get:function(){x=!0}});y("test",lb,W)}}catch(I){}return x?{passive:!0,capture:q}:q}funct
2024-03-14 00:57:02 UTC	16384	IN	Data Raw: 67 2e 67 4e 56 49 64 4e 3d 6a 65 2c 67 2e 67 41 52 6e 56 46 3d 52 61 2c 67 2e 63 41 55 56 3d 53 61 2c 67 2e 75 56 54 3d 6a 64 2c 67 2e 61 4e 56 4c 3d 74 64 2c 67 2e 67 50 43 3d 4d 64 2c 67 2e 63 50 43 3d 6d 64 2c 67 2e 73 50 43 3d 4d 63 2c 67 2e 63 6c 42 3d 7a 61 2c 67 2e 63 74 3d 76 62 2c 67 2e 61 52 49 3d 63 61 2c 67 2e 69 58 42 3d 6d 62 2c 67 2e 67 58 42 52 3d 4d 61 2c 0a 67 2e 73 58 42 52 3d 55 61 2c 67 2e 64 65 3d 6f 61 2c 67 2e 63 43 4c 3d 49 61 2c 67 2e 69 45 43 3d 4a 63 2c 67 2e 72 6e 77 3d 42 61 2c 67 2e 67 74 6f 3d 59 61 2c 67 2e 61 65 6c 3d 5a 2c 67 2e 72 65 6c 3d 61 61 2c 67 2e 73 75 70 3d 55 2c 67 2e 63 75 65 6c 3d 73 61 2c 67 2e 69 41 45 50 4f 4f 3d 78 62 2c 67 2e 69 53 4d 3d 76 2c 67 2e 67 78 77 70 3d 45 2c 67 2e 69 49 4f 3d 43 61 2c 67 2e Data Ascii: g.gNVIdN=je,g.gARnVF=Ra,g.cAUV=Sa,g.uVT=jd,g.aNVL=td,g.gPC=Md,g.cPC=md,g.sPC=Mc,g.clB=za,g.ct=vb,g.aRI=ca,g.iXB=mb,g.gXBR=Ma,g.sXBR=Ua,g.de=oa,g.cCL=Ia,g.iEC=Jc,g.rnw=Ba,g.gto=Ya,g.ael=Z,g.rel=aa,g.sup=U,g.cuel=sa,g.iAEPOO=xb,g.iSM=v,g.gxwp=E,g.iIO=Ca,g.
2024-03-14 00:57:02 UTC	7824	IN	Data Raw: 6b 79 6f 28 63 7c 6b 29 7c 6c 65 28 6e 6f 7c 78 69 29 7c 6c 67 28 20 67 7c 5c 2f 28 6b 7c 6c 7c 75 29 7c 35 30 7c 35 34 7c 5c 2d 5b 61 2d 77 5d 29 7c 6c 69 62 77 7c 6c 79 6e 78 7c 6d 31 5c 2d 77 7c 6d 33 67 61 7c 6d 35 30 5c 2f 7c 6d 61 28 74 65 7c 75 69 7c 78 6f 29 7c 6d 63 28 30 31 7c 32 31 7c 63 61 29 7c 6d 5c 2d 63 72 7c 6d 65 28 72 63 7c 72 69 29 7c 6d 69 28 6f 38 7c 6f 61 7c 74 73 29 7c 6d 6d 65 66 7c 6d 6f 28 30 31 7c 30 32 7c 62 69 7c 64 65 7c 64 6f 7c 74 28 5c 2d 7c 20 7c 6f 7c 76 29 7c 7a 7a 29 7c 6d 74 28 35 30 7c 70 31 7c 76 20 29 7c 6d 77 62 70 7c 6d 79 77 61 7c 6e 31 30 5b 30 2d 32 5d 7c 6e 32 30 5b 32 2d 33 5d 7c 6e 33 30 28 30 7c 32 29 7c 6e 35 30 28 30 7c 32 7c 35 29 7c 6e 37 28 30 28 30 7c 31 29 7c 31 30 29 7c 6e 65 28 28 63 7c 6d 29 5c Data Ascii: kyo(c\|k)\|le(no\|xi)\|lg( g\|\/(k\|l\|u)\|50\|54\|\-[a-w])\|libw\|lynx\|m1\-w\|m3ga\|m50\/\|ma(te\|ui\|xo)\|mc(01\|21\|ca)\|m\-cr\|me(rc\|ri)\|mi(o8\|oa\|ts)\|mmef\|mo(01\|02\|bi\|de\|do\|t(\-\| \|o\|v)\|zz)\|mt(50\|p1\|v )\|mwbp\|mywa\|n10[0-2]\|n20[2-3]\|n30(0\|2)\|n50(0\|2\|5)\|n7(0(0\|1)\|10)\|ne((c\|m)\
2024-03-14 00:57:02 UTC	16384	IN	Data Raw: 61 74 69 76 65 20 63 6f 64 65 5d 2f 2e 74 65 73 74 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 63 28 29 7b 72 65 74 75 72 6e 20 45 66 7d 66 75 6e 63 74 69 6f 6e 20 24 62 28 29 7b 72 65 74 75 72 6e 20 69 63 7d 66 75 6e 63 74 69 6f 6e 20 52 62 28 29 7b 72 65 74 75 72 6e 20 44 64 7d 66 75 6e 63 74 69 6f 6e 20 56 62 28 29 7b 72 65 74 75 72 6e 20 4c 64 7d 66 75 6e 63 74 69 6f 6e 20 76 62 28 61 2c 62 29 7b 61 3f 61 2e 69 64 3d 3d 3d 61 2e 4a 61 28 29 26 26 28 4c 67 3d 61 29 3a 4c 67 3d 62 3f 6e 75 6c 6c 3a 4c 67 7d 66 75 6e 63 74 69 6f 6e 20 46 62 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 51 64 2e 42 61 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 61 3b 61 2d 2d 29 7b 76 Data Ascii: ative code]/.test(Function.prototype.toString.call(a))}function Lc(){return Ef}function $b(){return ic}function Rb(){return Dd}function Vb(){return Ld}function vb(a,b){a?a.id===a.Ja()&&(Lg=a):Lg=b?null:Lg}function Fb(){for(var a=Qd.Ba.length-1;0<=a;a--){v
2024-03-14 00:57:02 UTC	10249	IN	Data Raw: 64 6b 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 48 28 22 64 74 41 64 6b 22 2c 66 29 29 29 3b 63 65 28 62 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 2c 22 22 29 3b 63 65 28 62 2c 22 6d 6f 64 69 66 69 65 64 53 69 6e 63 65 22 2c 51 62 28 22 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 22 29 29 3b 63 65 28 62 2c 22 73 76 72 69 64 22 2c 54 68 28 29 29 3b 6e 26 26 28 62 2e 65 6e 3d 6e 29 3b 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 26 26 22 73 72 52 73 22 3d 3d 3d 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 26 26 63 65 28 62 2c 22 6d 73 6c 22 2c 51 62 28 22 6d 73 6c 22 29 29 3b 62 2e 65 6e 64 3d 31 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 61 2c 62 2c 66 29 7b 76 6f 69 64 20 30 3d 3d 3d 0a 61 5b 62 5d 26 26 28 61 5b 62 5d 3d 66 29 7d 66 75 6e 63 74 Data Ascii: dk",encodeURIComponent(H("dtAdk",f)));ce(b,"contentType","");ce(b,"modifiedSince",Qb("lastModification"));ce(b,"svrid",Th());n&&(b.en=n);b.contentType&&"srRs"===b.contentType&&ce(b,"msl",Qb("msl"));b.end=1}function ce(a,b,f){void 0===a[b]&&(a[b]=f)}funct
2024-03-14 00:57:02 UTC	16384	IN	Data Raw: 31 3c 3d 62 26 26 21 42 26 26 28 72 62 3d 59 67 28 4b 61 28 4b 61 28 7b 7d 2c 61 29 2c 7b 79 61 3a 77 61 2e 69 64 7d 29 29 29 2c 77 61 3d 72 62 29 3a 77 61 3d 7a 62 28 22 63 75 78 22 29 3f 6c 66 28 4b 61 28 4b 61 28 7b 7d 2c 61 29 2c 7b 6e 61 6d 65 3a 22 55 6e 6c 69 6e 6b 65 64 20 58 48 52 22 2c 74 79 70 65 3a 22 78 68 72 22 2c 79 61 3a 21 31 7d 29 29 3a 30 3b 72 65 74 75 72 6e 20 77 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 6c 66 28 61 29 7b 61 3a 7b 76 61 72 20 62 3d 61 2e 69 6e 66 6f 3b 76 61 72 20 66 3d 61 2e 78 68 72 55 72 6c 3b 69 66 28 61 2e 76 64 26 26 51 67 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6b 3d 51 67 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 6b 3b 6b 2d 2d 29 7b 76 61 72 20 6e 3d 51 67 5b 6b 5d 2c 42 3d 6e 2e 44 2c 4b 3d 49 63 28 42 29 3b Data Ascii: 1<=b&&!B&&(rb=Yg(Ka(Ka({},a),{ya:wa.id}))),wa=rb):wa=zb("cux")?lf(Ka(Ka({},a),{name:"Unlinked XHR",type:"xhr",ya:!1})):0;return wa}function lf(a){a:{var b=a.info;var f=a.xhrUrl;if(a.vd&&Qg.length)for(var k=Qg.length-1;0<=k;k--){var n=Qg[k],B=n.D,K=Ic(B);
2024-03-14 00:57:02 UTC	12668	IN	Data Raw: 22 2e 63 6f 6e 63 61 74 28 62 2c 22 5d 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 73 68 6f 72 74 20 73 74 72 69 6e 67 2c 20 62 65 63 61 75 73 65 20 69 74 20 69 73 20 6f 66 20 74 79 70 65 20 22 29 2e 63 6f 6e 63 61 74 28 74 79 70 65 6f 66 20 62 2c 22 2e 22 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 61 3d 22 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 6f 66 20 74 79 70 65 20 27 73 74 72 69 6e 67 27 2e 20 4d 61 6b 65 20 73 75 72 65 20 74 6f 20 70 61 73 73 20 69 6e 20 61 20 73 74 72 69 6e 67 2e 22 3b 0a 28 62 3d 62 2e 6c 65 6e 67 74 68 29 7c 7c 28 61 3d 22 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 73 68 6f 72 74 20 73 74 72 69 6e 67 20 62 65 63 61 75 73 65 20 69 74 20 69 73 20 65 6d 70 74 79 2e 22 29 3b 76 61 72 20 66 3d 51 62 28 22 6d 70 6c Data Ascii: ".concat(b,"] is not a valid short string, because it is of type ").concat(typeof b,".");break}else a="value is not of type 'string'. Make sure to pass in a string.";(b=b.length)\|\|(a="value is not a valid short string because it is empty.");var f=Qb("mpl
2024-03-14 00:57:02 UTC	1199	IN	Data Raw: 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 6a 28 61 29 7b 61 2e 64 65 74 61 69 6c 2e 69 3d 3d 3d 4b 64 26 26 28 6b 61 28 22 41 43 54 49 4f 4e 5f 43 4c 4f 53 45 44 22 2c 70 6a 29 2c 76 67 3d 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 66 28 61 29 7b 76 61 72 20 62 3d 61 2e 64 65 74 61 69 6c 2c 66 3d 62 2e 61 3b 61 3d 62 2e 73 3b 69 66 28 62 2e 69 3d 3d 3d 4b 64 29 7b 6b 61 28 22 41 43 54 49 4f 4e 5f 42 45 46 4f 52 45 5f 53 45 4e 44 22 2c 4e 66 29 3b 76 67 3d 32 3b 62 3d 5b 5d 3b 66 3d 61 2d 66 3b 69 66 28 7a 62 28 22 70 74 22 29 29 7b 69 66 28 7a 65 2e 6c 63 70 54 29 7b 76 61 72 20 6b 3d 70 6d 3b 66 6f 72 28 76 61 72 20 6e 3d 4e 68 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 6e 3b 6e 2d 2d 29 69 66 28 4e 68 5b 6e 5d 2e 4d 61 3c 66 29 7b 6b 3d 4e 68 5b 6e 5d 3b 62 72 65 Data Ascii: })}function pj(a){a.detail.i===Kd&&(ka("ACTION_CLOSED",pj),vg=1)}function Nf(a){var b=a.detail,f=b.a;a=b.s;if(b.i===Kd){ka("ACTION_BEFORE_SEND",Nf);vg=2;b=[];f=a-f;if(zb("pt")){if(ze.lcpT){var k=pm;for(var n=Nh.length-1;0<=n;n--)if(Nh[n].Ma<f){k=Nh[n];bre
2024-03-14 00:57:02 UTC	6064	IN	Data Raw: 5f 22 2c 62 2c 4b 64 2c 71 66 2c 31 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 64 28 29 7b 74 72 79 7b 69 66 28 21 73 62 2e 64 54 5f 7c 7c 21 28 76 6f 69 64 20 30 3d 3d 3d 73 62 2e 64 69 61 6c 6f 67 41 72 67 75 6d 65 6e 74 73 3f 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 7c 7c 6c 62 28 29 3a 6c 62 28 29 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 61 3d 73 62 2e 64 54 5f 3b 61 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 21 31 3b 61 2e 70 61 67 65 49 64 3d 22 22 3b 61 2e 70 61 67 65 54 69 74 6c 65 3d 0a 22 22 3b 61 2e 66 72 61 6d 65 43 6f 75 6e 74 3d 30 3b 61 2e 62 77 73 57 3d 30 3b 61 2e 62 77 73 48 3d 30 3b 61 2e 73 79 6e 3d 21 31 3b 61 2e 67 6f 6f 67 6c 65 42 6f 74 3d 21 31 3b 61 2e 74 70 3d 7a 67 3b 61 2e 67 69 63 76 3d 24 61 3b 61 2e Data Ascii: _",b,Kd,qf,1)}}function Sd(){try{if(!sb.dT_\|\|!(void 0===sb.dialogArguments?navigator.cookieEnabled\|\|lb():lb()))return!1;var a=sb.dT_;a.initialized=!1;a.pageId="";a.pageTitle="";a.frameCount=0;a.bwsW=0;a.bwsH=0;a.syn=!1;a.googleBot=!1;a.tp=zg;a.gicv=$a;a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49962	192.216.61.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:01 UTC	1542	OUT	GET /r/simple-layout-responsive/css.mtb?v=08292023024500 HTTP/1.1 Host: resources.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0
2024-03-14 00:57:02 UTC	1184	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/css; charset=utf-8 Expires: Fri, 14 Mar 2025 00:57:02 GMT Last-Modified: Thu, 14 Mar 2024 00:57:01 GMT ETag: "1710377822:dtagent10285240307101407S3u4" Vary: User-Agent X-Srv: M-STC-001 Access-Control-Allow-Origin: * X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1860555252" Set-Cookie: dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; Path=/; Domain=.mtb.com Date: Thu, 14 Mar 2024 00:57:01 GMT Content-Length: 259098 Set-Cookie: TS019299a7=019f8203fda106037d4083032921c931b2efa1ffef72d7d8e843b36d67ccf0f355dee3fce94880f6ad90ed6fd72a1bd8d40bccf5d9; Path=/ Set-Cookie: TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; path=/; domain=.mtb.com Set-Cookie: TSf60233d5027=08affc4e07ab20000aa48086be8c4a628e05e6bf0ccf2730e7c8dbee80ec6b58a9d69067f3159cba08c7495bd611300033d90acc997d8932ed5b0070eee475535410408bf18803de92e699a9667ef0ccd3ce992d540b47b9423e0856c2f079bd; Path=/
2024-03-14 00:57:02 UTC	13897	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 36 65 6d 29 7b 2e 72 65 76 65 61 6c 2c 2e 72 65 76 65 61 6c 2e 74 69 6e 79 2c 2e 72 65 76 65 61 6c 2e 73 6d 61 6c 6c 2c 2e 72 65 76 65 61 6c 2e 6c 61 72 67 65 7b 72 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 7d 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 68 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 Data Ascii: @charset "UTF-8";@media print,screen and (min-width:36em){.reveal,.reveal.tiny,.reveal.small,.reveal.large{right:auto;left:auto;margin:0 auto}}html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}h1{font-size:2em;margin:.67em 0}hr{-webkit-box
2024-03-14 00:57:02 UTC	7263	IN	Data Raw: 30 20 30 20 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 65 6c 6c 2e 61 75 74 6f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 20 31 20 30 3b 2d 6d 73 2d 66 6c 65 78 3a 31 20 31 20 30 3b 66 6c 65 78 3a 31 20 31 20 30 7d 2e 63 65 6c 6c 2e 73 68 72 69 6e 6b 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 7d 2e 67 72 69 64 2d 78 3e 2e 61 75 74 6f 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 67 72 69 64 2d 78 3e 2e 73 68 72 69 6e 6b 7b 77 69 64 74 68 3a 61 75 Data Ascii: 0 0 auto;min-height:0;min-width:0;width:100%}.cell.auto{-webkit-box-flex:1;-webkit-flex:1 1 0;-ms-flex:1 1 0;flex:1 1 0}.cell.shrink{-webkit-box-flex:0;-webkit-flex:0 0 auto;-ms-flex:0 0 auto;flex:0 0 auto}.grid-x>.auto{width:auto}.grid-x>.shrink{width:au
2024-03-14 00:57:02 UTC	7263	IN	Data Raw: 78 78 78 6c 61 72 67 65 2d 35 2c 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 36 2c 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 37 2c 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 38 2c 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 39 2c 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 31 30 2c 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 31 31 2c 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 7d 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 73 68 72 69 6e 6b 7b 77 69 64 Data Ascii: xxxlarge-5,.grid-x>.xxxlarge-6,.grid-x>.xxxlarge-7,.grid-x>.xxxlarge-8,.grid-x>.xxxlarge-9,.grid-x>.xxxlarge-10,.grid-x>.xxxlarge-11,.grid-x>.xxxlarge-12{-webkit-box-flex:0;-webkit-flex:0 0 auto;-ms-flex:0 0 auto;flex:0 0 auto}.grid-x>.xxxlarge-shrink{wid
2024-03-14 00:57:02 UTC	14526	IN	Data Raw: 25 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 33 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 34 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 32 35 25 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 35 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 32 30 25 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 36 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 37 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 31 34 2e 32 38 35 37 31 25 7d 2e 73 6d 61 6c 6c 2d 75 70 2d 38 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 31 32 2e 35 25 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 36 65 6d 29 7b 2e 6d 65 64 69 75 6d 2d 75 70 2d 31 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 Data Ascii: %}.small-up-3>.cell{width:33.33333%}.small-up-4>.cell{width:25%}.small-up-5>.cell{width:20%}.small-up-6>.cell{width:16.66667%}.small-up-7>.cell{width:14.28571%}.small-up-8>.cell{width:12.5%}@media print,screen and (min-width:36em){.medium-up-1>.cell{width
2024-03-14 00:57:02 UTC	13342	IN	Data Raw: 69 75 6d 2d 70 61 64 64 69 6e 67 2d 63 6f 6c 6c 61 70 73 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6d 65 64 69 75 6d 2d 70 61 64 64 69 6e 67 2d 63 6f 6c 6c 61 70 73 65 3e 2e 63 65 6c 6c 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 65 6d 29 7b 2e 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 63 65 6c 6c 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 Data Ascii: ium-padding-collapse{margin-right:0;margin-left:0}.medium-padding-collapse>.cell{padding-right:0;padding-left:0}}@media print,screen and (min-width:48em){.large-margin-collapse{margin-right:0;margin-left:0}.large-margin-collapse>.cell{margin-right:0;margi
2024-03-14 00:57:02 UTC	1184	IN	Data Raw: 69 6e 2d 77 69 64 74 68 3a 31 36 30 65 6d 29 7b 2e 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 78 78 6c 61 72 67 65 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 78 78 6c 61 72 67 65 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 7d 2e 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 78 78 6c 61 72 67 65 2d 33 7b 77 69 64 74 68 3a 32 35 25 7d 2e 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 78 78 6c 61 72 67 65 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 7d 2e 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 78 78 Data Ascii: in-width:160em){.xxlarge-margin-collapse>.xxxxlarge-1{width:8.33333%}.xxlarge-margin-collapse>.xxxxlarge-2{width:16.66667%}.xxlarge-margin-collapse>.xxxxlarge-3{width:25%}.xxlarge-margin-collapse>.xxxxlarge-4{width:33.33333%}.xxlarge-margin-collapse>.xxxx
2024-03-14 00:57:02 UTC	7263	IN	Data Raw: 33 33 25 7d 2e 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 6d 61 6c 6c 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 37 25 7d 2e 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 6d 61 6c 6c 2d 36 7b 77 69 64 74 68 3a 35 30 25 7d 2e 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 6d 61 6c 6c 2d 37 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 25 7d 2e 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 6d 61 6c 6c 2d 38 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 37 25 7d 2e 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 6d 61 6c 6c 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 78 78 78 6c 61 72 67 Data Ascii: 33%}.xxxlarge-margin-collapse>.small-5{width:41.66667%}.xxxlarge-margin-collapse>.small-6{width:50%}.xxxlarge-margin-collapse>.small-7{width:58.33333%}.xxxlarge-margin-collapse>.small-8{width:66.66667%}.xxxlarge-margin-collapse>.small-9{width:75%}.xxxlarg
2024-03-14 00:57:02 UTC	7263	IN	Data Raw: 72 67 65 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 78 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 6c 61 72 67 65 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 7d 2e 78 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 6c 61 72 67 65 2d 33 7b 77 69 64 74 68 3a 32 35 25 7d 2e 78 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 6c 61 72 67 65 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 7d 2e 78 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 6c 61 72 67 65 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 37 25 7d 2e 78 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 Data Ascii: rge-1{width:8.33333%}.xxxxlarge-margin-collapse>.xxlarge-2{width:16.66667%}.xxxxlarge-margin-collapse>.xxlarge-3{width:25%}.xxxxlarge-margin-collapse>.xxlarge-4{width:33.33333%}.xxxxlarge-margin-collapse>.xxlarge-5{width:41.66667%}.xxxxlarge-margin-collap
2024-03-14 00:57:02 UTC	7263	IN	Data Raw: 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 78 6c 61 72 67 65 2d 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 38 2e 33 33 33 33 33 25 2b 20 2e 35 72 65 6d 29 7d 2e 78 78 6c 61 72 67 65 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 78 6c 61 72 67 65 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 31 36 2e 36 36 36 36 37 25 2b 20 2e 35 72 65 6d 29 7d 2e 78 78 6c 61 72 67 65 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 78 6c 61 72 67 65 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 Data Ascii: d-margin-x>.xxlarge-offset-1{margin-left:calc(8.33333%+ .5rem)}.xxlarge-offset-2{margin-left:16.66667%}.grid-margin-x>.xxlarge-offset-2{margin-left:calc(16.66667%+ .5rem)}.xxlarge-offset-3{margin-left:25%}.grid-margin-x>.xxlarge-offset-3{margin-left:calc(
2024-03-14 00:57:02 UTC	7263	IN	Data Raw: 61 6c 6c 2d 31 30 7b 68 65 69 67 68 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 67 72 69 64 2d 79 3e 2e 73 6d 61 6c 6c 2d 31 31 7b 68 65 69 67 68 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 67 72 69 64 2d 79 3e 2e 73 6d 61 6c 6c 2d 31 32 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 36 65 6d 29 7b 2e 67 72 69 64 2d 79 3e 2e 6d 65 64 69 75 6d 2d 61 75 74 6f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 20 31 20 30 3b 2d 6d 73 2d 66 6c 65 78 3a 31 20 31 20 30 3b 66 6c 65 78 3a 31 20 31 20 30 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 67 72 69 64 2d 79 3e 2e 6d 65 64 69 75 6d 2d 73 68 72 69 6e 6b 2c 2e 67 72 69 64 Data Ascii: all-10{height:83.33333%}.grid-y>.small-11{height:91.66667%}.grid-y>.small-12{height:100%}@media print,screen and (min-width:36em){.grid-y>.medium-auto{-webkit-box-flex:1;-webkit-flex:1 1 0;-ms-flex:1 1 0;flex:1 1 0;height:auto}.grid-y>.medium-shrink,.grid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49963	192.216.61.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:01 UTC	1560	OUT	GET /Assets/img/mtb-logo.svg HTTP/1.1 Host: resources.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0
2024-03-14 00:57:02 UTC	1088	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Fri, 23 Feb 2024 07:24:16 GMT Accept-Ranges: bytes ETag: "050a54e2966da1:0" X-Srv: M-STC-001 Access-Control-Allow-Origin: * X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="204369923" Set-Cookie: dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; Path=/; Domain=.mtb.com Date: Thu, 14 Mar 2024 00:57:01 GMT Content-Length: 2039 Set-Cookie: TS019299a7=019f8203fd41697460408d078b4fb8e67aa06c51614880d21634704b780454027fa78d9f48634bbdd3e2bee80bccb783b456851a4d; Path=/ Set-Cookie: TS0128739d=019f8203fd812ef2007528304d460efd4e316d0a394880d21634704b780454027fa78d9f487d491088fafa824f2309ed78e77937d9b284082e3c9cbb87a5e5e5836be253a6; path=/; domain=.mtb.com Set-Cookie: TSf60233d5027=08affc4e07ab2000e4398034269e35acecf7f8022f9189dda26f61b0a1177cb81be1cba2e95238ee0871f06490113000fce2e968b0583046ed5b0070eee475534bbbeb1eb2effdd2b93490f6e1803b7cb5ac6215c0d8066f2ff5d947f1afc559; Path=/
2024-03-14 00:57:02 UTC	2039	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 32 20 33 33 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 32 2e 31 36 20 31 35 2e 37 32 63 33 2e 36 36 2d 2e 38 33 20 36 2e 30 32 2d 33 2e 34 37 20 36 2e 30 32 2d 37 2e 35 31 20 30 2d 34 2e 39 31 2d 33 2e 32 2d 38 2e 32 2d 39 2e 38 32 2d 38 2e 32 68 2d 31 30 2e 37 76 33 32 2e 34 34 68 31 31 2e 30 37 63 36 2e 39 20 30 20 31 30 2e 36 31 2d 33 2e 32 34 20 31 30 2e 36 31 2d 38 2e 37 36 20 30 2d 34 2e 34 31 2d 32 2e 36 34 2d 37 2e 32 33 2d 37 2e 31 38 2d 37 2e 39 37 7a 4d 39 39 2e 37 20 31 2e 36 38 68 38 2e 36 32 63 35 2e 32 34 20 30 20 37 2e 37 34 20 32 2e 35 35 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 182 33" fill="#FFF"><path d="M112.16 15.72c3.66-.83 6.02-3.47 6.02-7.51 0-4.91-3.2-8.2-9.82-8.2h-10.7v32.44h11.07c6.9 0 10.61-3.24 10.61-8.76 0-4.41-2.64-7.23-7.18-7.97zM99.7 1.68h8.62c5.24 0 7.74 2.55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49964	192.216.61.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:02 UTC	1574	OUT	GET /Assets/img/mtb-equalhousinglender.svg HTTP/1.1 Host: resources.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0
2024-03-14 00:57:02 UTC	582	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Fri, 23 Feb 2024 07:24:16 GMT Accept-Ranges: bytes ETag: "050a54e2966da1:0" X-Srv: M-STC-001 Access-Control-Allow-Origin: * X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="-43637961" Date: Thu, 14 Mar 2024 00:57:01 GMT Content-Length: 230 Set-Cookie: TSf60233d5027=08affc4e07ab2000684a094b5267a23989368eb8831314f019508980beabdaa03ed97107dd7f313408106f76aa1130004ce6a61be8b1ee33ed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2; Path=/
2024-03-14 00:57:02 UTC	230	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 31 2e 39 39 22 20 66 69 6c 6c 3d 22 23 37 36 37 36 37 36 22 3e 3c 70 61 74 68 20 64 3d 22 4d 38 2e 30 39 20 30 4c 30 20 34 2e 36 76 31 2e 36 37 68 31 2e 32 34 76 35 2e 37 32 68 31 33 2e 35 56 36 2e 32 37 48 31 36 56 34 2e 36 35 7a 6d 2d 35 2e 32 20 34 2e 37 39 6c 35 2e 32 2d 33 2e 30 36 20 35 2e 31 20 33 2e 30 36 76 35 2e 37 34 48 32 2e 38 38 7a 6d 32 2e 34 33 20 32 2e 31 38 68 35 2e 33 39 76 2d 31 2e 34 48 35 2e 33 32 7a 6d 30 20 32 2e 31 68 35 2e 33 39 76 2d 31 2e 34 48 35 2e 33 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 11.99" fill="#767676"><path d="M8.09 0L0 4.6v1.67h1.24v5.72h13.5V6.27H16V4.65zm-5.2 4.79l5.2-3.06 5.1 3.06v5.74H2.88zm2.43 2.18h5.39v-1.4H5.32zm0 2.1h5.39v-1.4H5.32z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	49960	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:02 UTC	2184	OUT	GET /Assets/js/tealium_prod.js HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/Login/LoginHelp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_rcs-3Acss_0; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS01e71088028=01fe6ed147e995f1969612607291575c939203d3776781db003e99e60a297ce8ddf5f2079478e7c3a21bbe6bc607db448eabd1c4b1; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; TSba0bc889027=0856addebbab2000dc662b86e1a85b59e6167ee5c644a1b147977346039c955899ccb704839aafae08ecbd3a56113000abbd31a099400167d849aa5815d7b5db453c9b4f2935df3cd77facbac4e6109b279ddd0b3167adedbd6a91fe51d39159
2024-03-14 00:57:02 UTC	1169	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Last-Modified: Fri, 23 Feb 2024 07:03:54 GMT Accept-Ranges: bytes ETag: "0e946762666da1:0" X-SRV: B-OLB-227 P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT' X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Access-Control-Allow-Origin: https://digitalbanking.mtb.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST,GET,OPTIONS Server-Timing: dtSInfo;desc="0", dtRpid;desc="-121227675" Date: Thu, 14 Mar 2024 00:57:01 GMT Content-Length: 307 Set-Cookie: TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TS01e71088028=01fe6ed1477be012843846709038886df69d4bdfbd6781db003e99e60a297ce8ddf5f207943903f875d1f0e14369e91e519c4a8386; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TSba0bc889027=0856addebbab2000ffb23391c6bfb2d37c73048263f74bc140279732071b398210c9d2c7f758ebd108e89e77f7113000904d246224008094360b22461a046adc64355a4b60780ab9a686d3255c481b6e223f7141cb89cd3589b2126d07f41eec; Path=/
2024-03-14 00:57:02 UTC	307	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 0d 0a 20 20 20 20 61 20 3d 20 27 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 74 69 71 63 64 6e 2e 63 6f 6d 2f 75 74 61 67 2f 6d 74 62 61 6e 6b 2f 6f 6c 62 2d 6c 65 67 61 63 79 2f 70 72 6f 64 2f 75 74 61 67 2e 6a 73 27 3b 0d 0a 20 20 20 20 62 3d 64 6f 63 75 6d 65 6e 74 3b 63 3d 27 73 63 72 69 70 74 27 3b 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 29 3b 64 2e 73 72 63 3d 61 3b 64 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 27 2b 63 3b 64 2e 61 73 79 6e 63 3d 74 72 75 65 3b 0d 0a 20 20 20 20 61 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 63 29 5b 31 5d 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 61 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e Data Ascii: (function(a,b,c,d){ a = 'https://tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.js'; b=document;c='script';d=b.createElement(c);d.src=a;d.type='text/java'+c;d.async=true; a=b.getElementsByTagName(c)[1];if(a==null){a=b.getElementsByTagN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	49965	34.66.3.160	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:02 UTC	358	OUT	GET /mtb/hash-check HTTP/1.1 Host: rl.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:02 UTC	327	IN	HTTP/1.1 404 Not Found Date: Thu, 14 Mar 2024 00:57:02 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 15 Connection: close Vary: Origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15724800; includeSubDomains Access-Control-Allow-Methods: * Access-Control-Allow-Credentials: true
2024-03-14 00:57:02 UTC	15	IN	Data Raw: 68 61 73 68 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: hash not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	49966	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:02 UTC	507	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377820089&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1159&N=5&P=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:02 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:02 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	49967	192.216.61.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:02 UTC	2066	OUT	GET /Assets/img/mtb-entrust.svg HTTP/1.1 Host: resources.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS019299a7=019f8203fda106037d4083032921c931b2efa1ffef72d7d8e843b36d67ccf0f355dee3fce94880f6ad90ed6fd72a1bd8d40bccf5d9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TSf60233d5027=08affc4e07ab2000684a094b5267a23989368eb8831314f019508980beabdaa03ed97107dd7f313408106f76aa1130004ce6a61be8b1ee33ed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2
2024-03-14 00:57:02 UTC	584	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Fri, 23 Feb 2024 07:24:16 GMT Accept-Ranges: bytes ETag: "050a54e2966da1:0" X-Srv: M-STC-001 Access-Control-Allow-Origin: * X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="-623193191" Date: Thu, 14 Mar 2024 00:57:02 GMT Content-Length: 1349 Set-Cookie: TSf60233d5027=08affc4e07ab20000dbca39641858e70c6b97dba06d6131aa47372a7d16398e4b22de817c854bafe086ce1bbdb113000cdfda16cb719f646ed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2; Path=/
2024-03-14 00:57:02 UTC	1349	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 33 34 2e 37 20 31 34 38 2e 35 22 20 66 69 6c 6c 3d 22 23 37 36 37 36 37 36 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 34 36 2e 32 68 38 34 76 2d 33 37 2e 37 48 34 33 2e 32 56 39 32 2e 31 68 33 37 56 35 34 2e 35 68 2d 33 37 56 34 30 2e 32 48 38 34 56 32 2e 35 48 30 6d 31 36 30 2e 39 20 32 39 2e 36 63 2d 31 33 2e 38 20 30 2d 32 34 2e 36 20 31 31 2e 34 2d 32 38 2e 36 20 32 33 2e 35 6c 2d 2e 34 2d 2e 35 20 31 2e 31 2d 32 30 2e 37 48 39 31 2e 35 76 31 31 31 2e 37 48 31 33 33 56 39 32 2e 34 63 30 2d 31 31 2e 34 2e 36 2d 31 39 20 38 2e 37 2d 31 39 20 37 20 30 20 37 2e 36 20 36 2e 38 20 37 2e 36 20 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 634.7 148.5" fill="#767676"><path d="M0 146.2h84v-37.7H43.2V92.1h37V54.5h-37V40.2H84V2.5H0m160.9 29.6c-13.8 0-24.6 11.4-28.6 23.5l-.4-.5 1.1-20.7H91.5v111.7H133V92.4c0-11.4.6-19 8.7-19 7 0 7.6 6.8 7.6 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	49968	192.216.61.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:02 UTC	2030	OUT	GET /r/simple-layout-responsive/js.mtb?v=08292023024500 HTTP/1.1 Host: resources.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS019299a7=019f8203fda106037d4083032921c931b2efa1ffef72d7d8e843b36d67ccf0f355dee3fce94880f6ad90ed6fd72a1bd8d40bccf5d9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TSf60233d5027=08affc4e07ab2000684a094b5267a23989368eb8831314f019508980beabdaa03ed97107dd7f313408106f76aa1130004ce6a61be8b1ee33ed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2
2024-03-14 00:57:02 UTC	685	IN	HTTP/1.1 200 OK Cache-Control: public Content-Type: text/javascript; charset=utf-8 Expires: Fri, 14 Mar 2025 00:57:02 GMT Last-Modified: Thu, 14 Mar 2024 00:57:01 GMT ETag: "1710377822:dtagent10285240307101407S3u4" Vary: User-Agent X-Srv: M-STC-001 Access-Control-Allow-Origin: * X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="1044944270" Date: Thu, 14 Mar 2024 00:57:02 GMT Content-Length: 322405 Set-Cookie: TSf60233d5027=08affc4e07ab200010dbf5550a51a1f423f8015068e67648deb8a2a1341c2f6c6971f73d5e0c13ff08dc3338651130007a715b3495119fabed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2; Path=/
2024-03-14 00:57:02 UTC	14069	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0d 0a 20 2a 0d 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0d 0a 20 2a 0d 0a 20 2a 20 44 61 74 65 3a 20 32 30 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 20
2024-03-14 00:57:02 UTC	4859	IN	Data Raw: 0a 09 09 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 20 2b 20 69 64 65 6e 74 69 66 69 65 72 20 2b 20 22 29 29 7c 29 22 20 2b 20 77 68 69 74 65 73 70 61 63 65 20 2b 0d 0a 09 09 22 2a 5c 5c 5d 22 2c 0d 0a 0d 0a 09 70 73 65 75 64 6f 73 20 3d 20 22 3a 28 22 20 2b 20 69 64 65 6e 74 69 66 69 65 72 20 2b 20 22 29 28 3f 3a 5c 5c 28 28 22 20 2b 0d 0a 09 09 2f 2f 20 54 6f 20 72 65 64 75 63 65 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 73 65 6c 65 63 74 6f 72 73 20 6e 65 65 64 69 6e 67 20 74 6f 6b 65 6e 69 7a 65 20 69 6e 20 74 68 65 20 70 72 65 46 69 6c 74 65 72 2c 20 70 72 65 66 65 72 20 61 72 67 75 6d 65 6e 74 73 3a 0d 0a 09 09 2f 2f Data Ascii: "(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|(" + identifier + "))\|)" + whitespace +"\\]",pseudos = ":(" + identifier + ")(?:\\((" +// To reduce the number of selectors needing tokenize in the preFilter, prefer arguments://
2024-03-14 00:57:02 UTC	2404	IN	Data Raw: 09 2f 2f 20 52 65 74 75 72 6e 20 65 61 72 6c 79 20 66 72 6f 6d 20 63 61 6c 6c 73 20 77 69 74 68 20 69 6e 76 61 6c 69 64 20 73 65 6c 65 63 74 6f 72 20 6f 72 20 63 6f 6e 74 65 78 74 0d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 73 65 6c 65 63 74 6f 72 20 21 3d 3d 20 22 73 74 72 69 6e 67 22 20 7c 7c 20 21 73 65 6c 65 63 74 6f 72 20 7c 7c 0d 0a 09 09 6e 6f 64 65 54 79 70 65 20 21 3d 3d 20 31 20 26 26 20 6e 6f 64 65 54 79 70 65 20 21 3d 3d 20 39 20 26 26 20 6e 6f 64 65 54 79 70 65 20 21 3d 3d 20 31 31 20 29 20 7b 0d 0a 0d 0a 09 09 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2f 2f 20 54 72 79 20 74 6f 20 73 68 6f 72 74 63 75 74 20 66 69 6e 64 20 6f 70 65 72 61 74 69 6f 6e 73 20 28 61 73 20 6f 70 70 6f 73 65 64 20 74 6f 20 66 69 6c 74 Data Ascii: // Return early from calls with invalid selector or contextif ( typeof selector !== "string" \|\| !selector \|\|nodeType !== 1 && nodeType !== 9 && nodeType !== 11 ) {return results;}// Try to shortcut find operations (as opposed to filt
2024-03-14 00:57:02 UTC	7263	IN	Data Raw: 4c 6f 77 65 72 43 61 73 65 28 29 20 21 3d 3d 20 22 6f 62 6a 65 63 74 22 20 29 20 7b 0d 0a 0d 0a 09 09 09 09 09 2f 2f 20 43 61 70 74 75 72 65 20 74 68 65 20 63 6f 6e 74 65 78 74 20 49 44 2c 20 73 65 74 74 69 6e 67 20 69 74 20 66 69 72 73 74 20 69 66 20 6e 65 63 65 73 73 61 72 79 0d 0a 09 09 09 09 09 69 66 20 28 20 28 6e 69 64 20 3d 20 63 6f 6e 74 65 78 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 20 22 69 64 22 20 29 29 20 29 20 7b 0d 0a 09 09 09 09 09 09 6e 69 64 20 3d 20 6e 69 64 2e 72 65 70 6c 61 63 65 28 20 72 63 73 73 65 73 63 61 70 65 2c 20 66 63 73 73 65 73 63 61 70 65 20 29 3b 0d 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 09 09 09 63 6f 6e 74 65 78 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 22 69 64 22 2c 20 28 6e 69 64 20 3d 20 Data Ascii: LowerCase() !== "object" ) {// Capture the context ID, setting it first if necessaryif ( (nid = context.getAttribute( "id" )) ) {nid = nid.replace( rcssescape, fcssescape );} else {context.setAttribute( "id", (nid =
2024-03-14 00:57:02 UTC	7263	IN	Data Raw: 72 6e 20 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 3f 20 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6e 6f 64 65 4e 61 6d 65 20 21 3d 3d 20 22 48 54 4d 4c 22 20 3a 20 66 61 6c 73 65 3b 0d 0a 7d 3b 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 2a 20 53 65 74 73 20 64 6f 63 75 6d 65 6e 74 2d 72 65 6c 61 74 65 64 20 76 61 72 69 61 62 6c 65 73 20 6f 6e 63 65 20 62 61 73 65 64 20 6f 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 64 6f 63 75 6d 65 6e 74 0d 0a 20 2a 20 40 70 61 72 61 6d 20 7b 45 6c 65 6d 65 6e 74 7c 4f 62 6a 65 63 74 7d 20 5b 64 6f 63 5d 20 41 6e 20 65 6c 65 6d 65 6e 74 20 6f 72 20 64 6f 63 75 6d 65 6e 74 20 6f 62 6a 65 63 74 20 74 6f 20 75 73 65 20 74 6f 20 73 65 74 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 0d 0a 20 2a 20 40 72 65 74 75 72 6e 73 20 7b 4f 62 Data Ascii: rn documentElement ? documentElement.nodeName !== "HTML" : false;};/** * Sets document-related variables once based on the current document * @param {Element\|Object} [doc] An element or document object to use to set the document * @returns {Ob
2024-03-14 00:57:02 UTC	14526	IN	Data Raw: 20 49 6e 2d 70 61 67 65 20 60 73 65 6c 65 63 74 6f 72 23 69 64 20 73 69 62 6c 69 6e 67 2d 63 6f 6d 62 69 6e 61 74 6f 72 20 73 65 6c 65 63 74 6f 72 60 20 66 61 69 6c 73 0d 0a 09 09 09 69 66 20 28 20 21 65 6c 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 20 22 61 23 22 20 2b 20 65 78 70 61 6e 64 6f 20 2b 20 22 2b 2a 22 20 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0d 0a 09 09 09 09 72 62 75 67 67 79 51 53 41 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 29 3b 0d 0a 0d 0a 09 09 61 73 73 65 72 74 28 66 75 6e 63 74 69 6f 6e 28 20 65 6c 20 29 20 7b 0d 0a 09 09 09 65 6c 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 22 20 Data Ascii: In-page `selector#id sibling-combinator selector` failsif ( !el.querySelectorAll( "a#" + expando + "+*" ).length ) {rbuggyQSA.push(".#.+[+~]");}});assert(function( el ) {el.innerHTML = "<a href='' disabled='disabled'></a>"
2024-03-14 00:57:03 UTC	14526	IN	Data Raw: 09 09 09 09 09 09 73 74 61 72 74 20 3d 20 5b 20 66 6f 72 77 61 72 64 20 3f 20 70 61 72 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 20 3a 20 70 61 72 65 6e 74 2e 6c 61 73 74 43 68 69 6c 64 20 5d 3b 0d 0a 0d 0a 09 09 09 09 09 09 2f 2f 20 6e 6f 6e 2d 78 6d 6c 20 3a 6e 74 68 2d 63 68 69 6c 64 28 2e 2e 2e 29 20 73 74 6f 72 65 73 20 63 61 63 68 65 20 64 61 74 61 20 6f 6e 20 60 70 61 72 65 6e 74 60 0d 0a 09 09 09 09 09 09 69 66 20 28 20 66 6f 72 77 61 72 64 20 26 26 20 75 73 65 43 61 63 68 65 20 29 20 7b 0d 0a 0d 0a 09 09 09 09 09 09 09 2f 2f 20 53 65 65 6b 20 60 65 6c 65 6d 60 20 66 72 6f 6d 20 61 20 70 72 65 76 69 6f 75 73 6c 79 2d 63 61 63 68 65 64 20 69 6e 64 65 78 0d 0a 0d 0a 09 09 09 09 09 09 09 2f 2f 20 2e 2e 2e 69 6e 20 61 20 67 7a 69 70 2d 66 72 69 65 6e Data Ascii: start = [ forward ? parent.firstChild : parent.lastChild ];// non-xml :nth-child(...) stores cache data on `parent`if ( forward && useCache ) {// Seek `elem` from a previously-cached index// ...in a gzip-frien
2024-03-14 00:57:03 UTC	7263	IN	Data Raw: 09 7d 20 3a 0d 0a 09 09 6d 61 74 63 68 65 72 73 5b 30 5d 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 6d 75 6c 74 69 70 6c 65 43 6f 6e 74 65 78 74 73 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 73 2c 20 72 65 73 75 6c 74 73 20 29 20 7b 0d 0a 09 76 61 72 20 69 20 3d 20 30 2c 0d 0a 09 09 6c 65 6e 20 3d 20 63 6f 6e 74 65 78 74 73 2e 6c 65 6e 67 74 68 3b 0d 0a 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 3b 20 69 2b 2b 20 29 20 7b 0d 0a 09 09 53 69 7a 7a 6c 65 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 73 5b 69 5d 2c 20 72 65 73 75 6c 74 73 20 29 3b 0d 0a 09 7d 0d 0a 09 72 65 74 75 72 6e 20 72 65 73 75 6c 74 73 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 64 65 6e 73 65 28 20 75 6e 6d 61 74 63 68 65 64 2c 20 Data Ascii: } :matchers[0];}function multipleContexts( selector, contexts, results ) {var i = 0,len = contexts.length;for ( ; i < len; i++ ) {Sizzle( selector, contexts[i], results );}return results;}function condense( unmatched,
2024-03-14 00:57:03 UTC	7263	IN	Data Raw: 6c 65 6d 65 6e 74 73 20 76 69 73 69 74 65 64 20 61 62 6f 76 65 2c 20 61 6e 64 20 61 64 64 69 6e 67 20 69 74 20 74 6f 20 60 6d 61 74 63 68 65 64 43 6f 75 6e 74 60 0d 0a 09 09 09 2f 2f 20 6d 61 6b 65 73 20 74 68 65 20 6c 61 74 74 65 72 20 6e 6f 6e 6e 65 67 61 74 69 76 65 2e 0d 0a 09 09 09 6d 61 74 63 68 65 64 43 6f 75 6e 74 20 2b 3d 20 69 3b 0d 0a 0d 0a 09 09 09 2f 2f 20 41 70 70 6c 79 20 73 65 74 20 66 69 6c 74 65 72 73 20 74 6f 20 75 6e 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 73 0d 0a 09 09 09 2f 2f 20 4e 4f 54 45 3a 20 54 68 69 73 20 63 61 6e 20 62 65 20 73 6b 69 70 70 65 64 20 69 66 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 75 6e 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 73 20 28 69 2e 65 2e 2c 20 60 6d 61 74 63 68 65 64 43 6f 75 6e 74 60 0d 0a Data Ascii: lements visited above, and adding it to `matchedCount`// makes the latter nonnegative.matchedCount += i;// Apply set filters to unmatched elements// NOTE: This can be skipped if there are no unmatched elements (i.e., `matchedCount`
2024-03-14 00:57:03 UTC	7263	IN	Data Raw: 6e 69 71 75 65 53 6f 72 74 3b 0d 0a 6a 51 75 65 72 79 2e 74 65 78 74 20 3d 20 53 69 7a 7a 6c 65 2e 67 65 74 54 65 78 74 3b 0d 0a 6a 51 75 65 72 79 2e 69 73 58 4d 4c 44 6f 63 20 3d 20 53 69 7a 7a 6c 65 2e 69 73 58 4d 4c 3b 0d 0a 6a 51 75 65 72 79 2e 63 6f 6e 74 61 69 6e 73 20 3d 20 53 69 7a 7a 6c 65 2e 63 6f 6e 74 61 69 6e 73 3b 0d 0a 6a 51 75 65 72 79 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 20 3d 20 53 69 7a 7a 6c 65 2e 65 73 63 61 70 65 3b 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 76 61 72 20 64 69 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 64 69 72 2c 20 75 6e 74 69 6c 20 29 20 7b 0d 0a 09 76 61 72 20 6d 61 74 63 68 65 64 20 3d 20 5b 5d 2c 0d 0a 09 09 74 72 75 6e 63 61 74 65 20 3d 20 75 6e 74 69 6c 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 3b Data Ascii: niqueSort;jQuery.text = Sizzle.getText;jQuery.isXMLDoc = Sizzle.isXML;jQuery.contains = Sizzle.contains;jQuery.escapeSelector = Sizzle.escape;var dir = function( elem, dir, until ) {var matched = [],truncate = until !== undefined;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	49969	192.216.61.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:02 UTC	1823	OUT	GET /Assets/img/mtb-logo.svg HTTP/1.1 Host: resources.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS019299a7=019f8203fda106037d4083032921c931b2efa1ffef72d7d8e843b36d67ccf0f355dee3fce94880f6ad90ed6fd72a1bd8d40bccf5d9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TSf60233d5027=08affc4e07ab2000684a094b5267a23989368eb8831314f019508980beabdaa03ed97107dd7f313408106f76aa1130004ce6a61be8b1ee33ed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2
2024-03-14 00:57:02 UTC	584	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Fri, 23 Feb 2024 07:24:16 GMT Accept-Ranges: bytes ETag: "050a54e2966da1:0" X-Srv: M-STC-001 Access-Control-Allow-Origin: * X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="1706837913" Date: Thu, 14 Mar 2024 00:57:02 GMT Content-Length: 2039 Set-Cookie: TSf60233d5027=08affc4e07ab200084777b6569582ab2a5b1e4756bc1e30fcaeb1a0e5657d50c219111de0f795bc408917d1c03113000ad094d412228a31aed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2; Path=/
2024-03-14 00:57:02 UTC	2039	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 32 20 33 33 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 32 2e 31 36 20 31 35 2e 37 32 63 33 2e 36 36 2d 2e 38 33 20 36 2e 30 32 2d 33 2e 34 37 20 36 2e 30 32 2d 37 2e 35 31 20 30 2d 34 2e 39 31 2d 33 2e 32 2d 38 2e 32 2d 39 2e 38 32 2d 38 2e 32 68 2d 31 30 2e 37 76 33 32 2e 34 34 68 31 31 2e 30 37 63 36 2e 39 20 30 20 31 30 2e 36 31 2d 33 2e 32 34 20 31 30 2e 36 31 2d 38 2e 37 36 20 30 2d 34 2e 34 31 2d 32 2e 36 34 2d 37 2e 32 33 2d 37 2e 31 38 2d 37 2e 39 37 7a 4d 39 39 2e 37 20 31 2e 36 38 68 38 2e 36 32 63 35 2e 32 34 20 30 20 37 2e 37 34 20 32 2e 35 35 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 182 33" fill="#FFF"><path d="M112.16 15.72c3.66-.83 6.02-3.47 6.02-7.51 0-4.91-3.2-8.2-9.82-8.2h-10.7v32.44h11.07c6.9 0 10.61-3.24 10.61-8.76 0-4.41-2.64-7.23-7.18-7.97zM99.7 1.68h8.62c5.24 0 7.74 2.55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	49970	192.216.61.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:02 UTC	1837	OUT	GET /Assets/img/mtb-equalhousinglender.svg HTTP/1.1 Host: resources.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS019299a7=019f8203fda106037d4083032921c931b2efa1ffef72d7d8e843b36d67ccf0f355dee3fce94880f6ad90ed6fd72a1bd8d40bccf5d9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TSf60233d5027=08affc4e07ab2000684a094b5267a23989368eb8831314f019508980beabdaa03ed97107dd7f313408106f76aa1130004ce6a61be8b1ee33ed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2
2024-03-14 00:57:02 UTC	582	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Fri, 23 Feb 2024 07:24:16 GMT Accept-Ranges: bytes ETag: "050a54e2966da1:0" X-Srv: M-STC-001 Access-Control-Allow-Origin: * X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="-43637961" Date: Thu, 14 Mar 2024 00:57:02 GMT Content-Length: 230 Set-Cookie: TSf60233d5027=08affc4e07ab2000eb1dabf8736b4df09791d80cd0fd76ac8f6a0aafe4b5d585bb27e38d2ee99cc208cc3fc48b113000276955390acc2320ed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2; Path=/
2024-03-14 00:57:02 UTC	230	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 31 2e 39 39 22 20 66 69 6c 6c 3d 22 23 37 36 37 36 37 36 22 3e 3c 70 61 74 68 20 64 3d 22 4d 38 2e 30 39 20 30 4c 30 20 34 2e 36 76 31 2e 36 37 68 31 2e 32 34 76 35 2e 37 32 68 31 33 2e 35 56 36 2e 32 37 48 31 36 56 34 2e 36 35 7a 6d 2d 35 2e 32 20 34 2e 37 39 6c 35 2e 32 2d 33 2e 30 36 20 35 2e 31 20 33 2e 30 36 76 35 2e 37 34 48 32 2e 38 38 7a 6d 32 2e 34 33 20 32 2e 31 38 68 35 2e 33 39 76 2d 31 2e 34 48 35 2e 33 32 7a 6d 30 20 32 2e 31 68 35 2e 33 39 76 2d 31 2e 34 48 35 2e 33 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 11.99" fill="#767676"><path d="M8.09 0L0 4.6v1.67h1.24v5.72h13.5V6.27H16V4.65zm-5.2 4.79l5.2-3.06 5.1 3.06v5.74H2.88zm2.43 2.18h5.39v-1.4H5.32zm0 2.1h5.39v-1.4H5.32z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	49972	192.216.61.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:02 UTC	1826	OUT	GET /Assets/img/mtb-entrust.svg HTTP/1.1 Host: resources.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS019299a7=019f8203fda106037d4083032921c931b2efa1ffef72d7d8e843b36d67ccf0f355dee3fce94880f6ad90ed6fd72a1bd8d40bccf5d9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TSf60233d5027=08affc4e07ab200010dbf5550a51a1f423f8015068e67648deb8a2a1341c2f6c6971f73d5e0c13ff08dc3338651130007a715b3495119fabed5b0070eee4755398c86057b0f42bd1707f6b51e6ce1713520ccde19a09140f32f6ab1938d99ea2
2024-03-14 00:57:03 UTC	585	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Fri, 23 Feb 2024 07:24:16 GMT Accept-Ranges: bytes ETag: "050a54e2966da1:0" X-Srv: M-STC-001 Access-Control-Allow-Origin: * X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="-2113769422" Date: Thu, 14 Mar 2024 00:57:02 GMT Content-Length: 1349 Set-Cookie: TSf60233d5027=08affc4e07ab20008524701ec5bc1d0a61fd252e236ccc919f2f67b10b8a96ae1bfb534fb1a6c31a08fa8490f41130007ca8a3cb36dc278c941436a5d2853913a8cbcd1062b69bc7884c6dbe40b5e9c62d080359bb01ed5fd89903dbc3047b67; Path=/
2024-03-14 00:57:03 UTC	1349	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 33 34 2e 37 20 31 34 38 2e 35 22 20 66 69 6c 6c 3d 22 23 37 36 37 36 37 36 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 34 36 2e 32 68 38 34 76 2d 33 37 2e 37 48 34 33 2e 32 56 39 32 2e 31 68 33 37 56 35 34 2e 35 68 2d 33 37 56 34 30 2e 32 48 38 34 56 32 2e 35 48 30 6d 31 36 30 2e 39 20 32 39 2e 36 63 2d 31 33 2e 38 20 30 2d 32 34 2e 36 20 31 31 2e 34 2d 32 38 2e 36 20 32 33 2e 35 6c 2d 2e 34 2d 2e 35 20 31 2e 31 2d 32 30 2e 37 48 39 31 2e 35 76 31 31 31 2e 37 48 31 33 33 56 39 32 2e 34 63 30 2d 31 31 2e 34 2e 36 2d 31 39 20 38 2e 37 2d 31 39 20 37 20 30 20 37 2e 36 20 36 2e 38 20 37 2e 36 20 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 634.7 148.5" fill="#767676"><path d="M0 146.2h84v-37.7H43.2V92.1h37V54.5h-37V40.2H84V2.5H0m160.9 29.6c-13.8 0-24.6 11.4-28.6 23.5l-.4-.5 1.1-20.7H91.5v111.7H133V92.4c0-11.4.6-19 8.7-19 7 0 7.6 6.8 7.6 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	49971	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:03 UTC	2366	OUT	GET /Assets/js/kessel-client-prod.js HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/Login/LoginHelp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TS01e71088028=01fe6ed1477be012843846709038886df69d4bdfbd6781db003e99e60a297ce8ddf5f207943903f875d1f0e14369e91e519c4a8386; TSba0bc889027=0856addebbab2000ffb23391c6bfb2d37c73048263f74bc140279732071b398210c9d2c7f758ebd108e89e77f7113000904d246224008094360b22461a046adc64355a4b60780ab9a686d3255c481b6e223f7141cb89cd3589b2126d07f41eec
2024-03-14 00:57:03 UTC	1173	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Last-Modified: Fri, 23 Feb 2024 07:03:56 GMT Accept-Ranges: bytes ETag: "01678772666da1:0" X-SRV: B-OLB-227 P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT' X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Access-Control-Allow-Origin: https://digitalbanking.mtb.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST,GET,OPTIONS Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1489053774" Date: Thu, 14 Mar 2024 00:57:03 GMT Content-Length: 810218 Set-Cookie: TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TS01e71088028=01fe6ed1475ae90f962796ed67413d5d6ba1b3f1096781db003e99e60a297ce8ddf5f207942582882f26f924d3a9fc52d880a80eea; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TSba0bc889027=0856addebbab2000efe7d2a7ca70e3bf85b0eac5cfab257b1025eb2f6568ca72722b2796d84a971308e5fb0b94113000229b934028510dd98791c862e1589a8059fe71956a7f4cd5da0bffc4ce6468789c1f5e845b2d54ff01cb0bc1b5b7b21d; Path=/
2024-03-14 00:57:03 UTC	13924	IN	Data Raw: 2f 2a 20 64 64 3a 20 32 30 32 33 2d 30 38 2d 31 38 5f 5f 31 37 2d 33 37 2d 34 34 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 65 6c 66 2e 63 64 41 70 69 3d 7b 5f 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3a 7b 7d 2c 6f 6e 4d 65 73 73 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 64 41 70 69 2e 5f 65 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 5b 65 2e 64 61 74 61 2e 74 79 70 65 5d 3b 0a 2f 2f 49 66 20 74 68 65 72 65 20 61 72 65 20 6e 6f 20 6c 69 73 74 65 6e 65 72 73 20 77 65 20 61 62 6f 72 74 20 61 74 20 74 68 69 73 20 70 6f 69 6e 74 0a 69 66 28 74 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 28 65 2e 64 61 74 61 2e 65 76 65 6e 74 29 7d 2c Data Ascii: /* dd: 2023-08-18__17-37-44 */!function(e){"use strict";self.cdApi={_eventListeners:{},onMessage:function(e){var t=cdApi._eventListeners[e.data.type];//If there are no listeners we abort at this pointif(t)for(var n=0;n<t.length;n++)t[n](e.data.event)},
2024-03-14 00:57:03 UTC	7263	IN	Data Raw: 72 6f 70 65 72 74 79 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 7d 28 45 6c 65 6d 65 6e 74 53 65 74 74 69 6e 67 73 2c 5b 7b 6b 65 79 3a 22 67 65 74 43 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 41 74 74 72 69 62 75 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 41 74 74 72 69 62 75 74 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 41 74 74 72 69 62 75 74 65 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 41 74 74 72 69 62 75 74 65 73 54 6f 4d 61 73 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 41 74 74 72 69 62 75 74 65 73 54 6f 4d 61 73 6b 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 74 74 72 69 62 75 74 65 Data Ascii: roperty(e,"prototype",{writable:!1})}(ElementSettings,[{key:"getCustomElementAttribute",value:function getCustomElementAttribute(){return this._customElementAttribute}},{key:"getAttributesToMask",value:function getAttributesToMask(){return this._attribute
2024-03-14 00:57:03 UTC	14526	IN	Data Raw: 69 6f 6e 20 75 70 64 61 74 65 4c 6f 67 43 6f 6e 66 69 67 28 65 29 7b 74 68 69 73 2e 5f 6c 6f 67 4c 65 76 65 6c 3d 65 2e 67 65 74 28 43 2e 6c 6f 67 4c 65 76 65 6c 29 7c 7c 74 68 69 73 2e 5f 6c 6f 67 4c 65 76 65 6c 2c 74 68 69 73 2e 5f 6c 6f 67 42 72 69 64 67 65 2e 73 65 74 4c 6f 67 4c 65 76 65 6c 28 74 68 69 73 2e 5f 6c 6f 67 4c 65 76 65 6c 29 2c 74 68 69 73 2e 5f 6c 6f 67 42 72 69 64 67 65 2e 63 6c 65 61 72 4c 6f 67 45 6e 74 72 69 65 73 42 79 4c 6f 67 4c 65 76 65 6c 28 74 68 69 73 2e 5f 6c 6f 67 4c 65 76 65 6c 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 73 65 6e 64 54 6f 4c 6f 67 42 72 69 64 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 5f 73 65 6e 64 54 6f 4c 6f 67 42 72 69 64 67 65 28 65 2c 74 2c 72 29 7b 74 3e 3d 74 68 69 73 2e 5f 6c 6f 67 4c 65 76 65 Data Ascii: ion updateLogConfig(e){this._logLevel=e.get(C.logLevel)\|\|this._logLevel,this._logBridge.setLogLevel(this._logLevel),this._logBridge.clearLogEntriesByLogLevel(this._logLevel)}},{key:"_sendToLogBridge",value:function _sendToLogBridge(e,t,r){t>=this._logLeve
2024-03-14 00:57:03 UTC	9682	IN	Data Raw: 29 3a 66 75 6e 63 74 69 6f 6e 20 5f 63 6f 6e 73 74 72 75 63 74 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 5b 6e 75 6c 6c 5d 3b 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 74 29 3b 6e 3d 6e 65 77 28 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 65 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 26 26 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 2c 72 2e 70 72 6f 74 6f 74 79 70 65 29 2c 6e 7d 29 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 69 73 4e 61 74 69 76 65 52 65 66 6c 65 63 74 43 6f 6e 73 74 72 75 63 74 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 7c 7c 21 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 29 72 65 74 75 72 6e 21 31 Data Ascii: ):function _construct(e,t,r){var n=[null];n.push.apply(n,t);n=new(Function.bind.apply(e,n));return r&&_setPrototypeOf(n,r.prototype),n}).apply(null,arguments)}function _isNativeReflectConstruct(){if("undefined"==typeof Reflect\|\|!Reflect.construct)return!1
2024-03-14 00:57:03 UTC	12107	IN	Data Raw: 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 74 68 69 73 2e 5f 70 61 69 72 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 28 74 68 69 73 2e 5f 70 61 69 72 73 5b 74 5d 5b 31 5d 2c 74 68 69 73 2e 5f 70 61 69 72 73 5b 74 5d 5b 30 5d 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 65 61 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 28 29 7b 74 68 69 73 2e 5f 70 61 69 72 73 3d 5b 5d 7d 7d 2c 7b 6b 65 79 3a 22 5f 69 6e 64 65 78 4f 66 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 5f 69 6e 64 65 78 4f 66 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 74 68 69 73 2e 5f 70 61 69 72 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 74 68 69 73 2e 5f 70 61 69 72 73 5b 74 5d 5b 30 5d 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 3b 72 65 74 75 72 6e 2d 31 7d 7d Data Ascii: for(var t=0;t<this._pairs.length;t++)e(this._pairs[t][1],this._pairs[t][0])}},{key:"clear",value:function clear(){this._pairs=[]}},{key:"_indexOf",value:function _indexOf(e){for(var t=0;t<this._pairs.length;t++)if(this._pairs[t][0]===e)return t;return-1}}
2024-03-14 00:57:03 UTC	14526	IN	Data Raw: 65 72 3d 22 22 2c 74 68 69 73 2e 68 69 73 74 6f 72 79 4c 65 6e 3d 2d 31 2c 74 68 69 73 2e 6f 6e 43 6f 6e 74 65 78 74 43 68 61 6e 67 65 3d 6e 65 77 20 6e 65 2c 74 68 69 73 2e 5f 63 6f 6e 74 65 78 74 53 69 74 65 4d 61 70 70 65 72 2e 75 70 64 61 74 65 4f 62 73 65 72 76 65 72 28 74 68 69 73 2e 6f 6e 53 69 74 65 4d 61 70 70 65 72 4d 61 74 63 68 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 74 68 69 73 2e 5f 77 6f 72 6b 65 72 43 6f 6d 6d 3d 72 2c 74 68 69 73 2e 5f 63 6f 6e 74 65 78 74 49 64 4b 65 79 3d 22 63 64 43 6f 6e 74 65 78 74 49 64 22 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 43 6f 6e 74 65 78 74 4d 67 72 5f 63 72 65 61 74 65 43 6c 61 73 73 28 65 2c 74 2c 72 29 7b 74 26 26 43 6f 6e 74 65 78 74 4d 67 72 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 Data Ascii: er="",this.historyLen=-1,this.onContextChange=new ne,this._contextSiteMapper.updateObserver(this.onSiteMapperMatch.bind(this)),this._workerComm=r,this._contextIdKey="cdContextId"}return function ContextMgr_createClass(e,t,r){t&&ContextMgr_defineProperties
2024-03-14 00:57:04 UTC	7263	IN	Data Raw: 75 73 74 20 62 65 20 64 65 66 69 6e 65 64 22 29 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 4c 6f 61 64 65 64 43 61 6c 6c 62 61 63 6b 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 75 74 69 6c 73 3d 65 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 52 65 70 6f 73 69 74 6f 72 79 3d 74 2c 74 68 69 73 2e 5f 6d 65 73 73 61 67 65 42 75 73 3d 72 2c 74 68 69 73 2e 5f 63 69 64 43 61 63 68 65 3d 6e 2c 6f 26 26 6f 2e 61 64 64 4d 65 73 73 61 67 65 4c 69 73 74 65 6e 65 72 28 63 65 2e 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 4c 6f 61 64 65 64 45 76 65 6e 74 2c 74 68 69 73 2e 5f 6f 6e 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 4c 6f 61 64 65 64 45 76 65 6e 74 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 43 6f 6e 66 Data Ascii: ust be defined");this._configurationLoadedCallback=null,this._utils=e,this._configurationRepository=t,this._messageBus=r,this._cidCache=n,o&&o.addMessageListener(ce.ConfigurationLoadedEvent,this._onConfigurationLoadedEvent.bind(this))}return function Conf
2024-03-14 00:57:04 UTC	7263	IN	Data Raw: 3d 5b 22 74 6f 75 63 68 73 74 61 72 74 22 2c 22 74 6f 75 63 68 6d 6f 76 65 22 2c 22 74 6f 75 63 68 65 6e 64 22 2c 22 74 6f 75 63 68 63 61 6e 63 65 6c 22 5d 3a 77 69 6e 64 6f 77 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 28 74 3d 5b 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 2c 22 70 6f 69 6e 74 65 72 6d 6f 76 65 22 2c 22 70 6f 69 6e 74 65 72 75 70 22 5d 29 2c 74 68 69 73 2e 5f 6c 69 73 74 65 6e 69 6e 67 54 6f 45 76 65 6e 74 73 3d 74 2c 74 68 69 73 2e 5f 6c 69 73 74 65 6e 69 6e 67 54 6f 45 76 65 6e 74 73 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 68 69 73 2e 5f 6c 69 73 74 65 6e 69 6e 67 54 6f 45 76 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 68 69 73 2e 5f 75 74 69 6c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 72 2c 74 68 69 73 2e Data Ascii: =["touchstart","touchmove","touchend","touchcancel"]:window.PointerEvent&&(t=["pointerdown","pointermove","pointerup"]),this._listeningToEvents=t,this._listeningToEvents)for(var n=0;n<this._listeningToEvents.length;n++)this._utils.addEventListener(r,this.
2024-03-14 00:57:04 UTC	7263	IN	Data Raw: 61 74 75 72 65 20 66 61 69 6c 65 64 2c 20 6d 73 67 3a 20 22 2e 63 6f 6e 63 61 74 28 65 2e 6d 65 73 73 61 67 65 29 2c 65 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 62 69 6e 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 5f 62 69 6e 64 28 65 2c 74 2c 72 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 75 70 22 2c 74 2c 72 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 2c 72 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 70 72 65 73 73 22 2c 74 2c 72 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 75 6e 62 69 6e 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 5f 75 6e 62 69 6e 64 28 65 2c 74 2c 72 29 7b 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: ature failed, msg: ".concat(e.message),e)}}},{key:"_bind",value:function _bind(e,t,r){e.addEventListener("keyup",t,r),e.addEventListener("keydown",t,r),e.addEventListener("keypress",t,r)}},{key:"_unbind",value:function _unbind(e,t,r){e.removeEventListener
2024-03-14 00:57:04 UTC	14526	IN	Data Raw: 65 2e 44 4f 43 55 4d 45 4e 54 5f 54 59 50 45 5f 4e 4f 44 45 26 26 66 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 28 63 3d 2b 2b 6c 29 3b 76 61 72 20 70 3d 74 68 69 73 2e 67 65 74 55 6e 69 71 75 65 45 6c 65 6d 65 6e 74 4e 61 6d 65 28 65 29 2c 64 3d 6c 7c 7c 22 22 3b 72 2e 73 70 6c 69 63 65 28 30 2c 30 2c 70 2b 64 29 7d 6f 2b 3d 72 2e 6c 65 6e 67 74 68 3f 22 2f 22 2b 72 2e 6a 6f 69 6e 28 29 3a 22 22 3b 73 3d 5b 5d 3b 72 65 74 75 72 6e 20 30 3c 72 2e 6c 65 6e 67 74 68 26 26 28 73 3d 72 2e 73 6c 69 63 65 28 30 2c 72 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 74 26 26 28 28 75 3d 7b 7d 29 5b 6e 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3d 63 2c 75 3d 74 68 69 73 2e 5f 6e 6f 64 65 4e 61 6d 65 4f 63 63 75 72 65 Data Ascii: e.DOCUMENT_TYPE_NODE&&f.nodeName===e.nodeName&&(c=++l);var p=this.getUniqueElementName(e),d=l\|\|"";r.splice(0,0,p+d)}o+=r.length?"/"+r.join():"";s=[];return 0<r.length&&(s=r.slice(0,r.length-1)),t&&((u={})[n.nodeName.toLowerCase()]=c,u=this._nodeNameOccure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	49973	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:03 UTC	2524	OUT	GET /Assets/scripts/kessel-help.js HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/Login/LoginHelp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; TS01e71088028=01fe6ed1477be012843846709038886df69d4bdfbd6781db003e99e60a297ce8ddf5f207943903f875d1f0e14369e91e519c4a8386; TSba0bc889027=0856addebbab2000ffb23391c6bfb2d37c73048263f74bc140279732071b398210c9d2c7f758ebd108e89e77f7113000904d246224008094360b22461a046adc64355a4b60780ab9a686d3255c481b6e223f7141cb89cd3589b2126d07f41eec; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; rxvt=1710379621901\|1710377821892
2024-03-14 00:57:03 UTC	1168	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Last-Modified: Fri, 23 Feb 2024 07:03:54 GMT Accept-Ranges: bytes ETag: "0e946762666da1:0" X-SRV: B-OLB-227 P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT' X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Access-Control-Allow-Origin: https://digitalbanking.mtb.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST,GET,OPTIONS Server-Timing: dtSInfo;desc="0", dtRpid;desc="950141279" Date: Thu, 14 Mar 2024 00:57:03 GMT Content-Length: 263 Set-Cookie: TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TSba0bc889027=0856addebbab20008131eefbaea33abe6f418498d7c4d7ea50d5671da183f52bcfc0413237977c95082124d6171130002e5ebfdd1e2e69fe8791c862e1589a8059fe71956a7f4cd5da0bffc4ce6468789c1f5e845b2d54ff01cb0bc1b5b7b21d; Path=/
2024-03-14 00:57:03 UTC	263	IN	Data Raw: ef bb bf 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 24 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 0d 0a 20 20 20 20 20 20 20 20 27 66 6f 72 6d 20 2e 6b 65 73 73 65 6c 2d 66 6c 75 73 68 27 2c 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 64 41 70 69 2e 63 6c 69 65 6e 74 2e 66 6c 75 73 68 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 73 75 62 6d 69 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 2f 2f 65 6e 64 20 6f 66 20 72 65 Data Ascii: $(document).ready(function () { $(document).on("click", 'form .kessel-flush', function (event) { event.preventDefault(); cdApi.client.flush(); $(this).submit(); }); //end of re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	49975	192.216.61.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:03 UTC	640	OUT	GET /assets/fonts/mandtbaltoweb-medium.woff HTTP/1.1 Host: resources.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://onlinebanking.mtb.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://resources.mtb.com/r/simple-layout-responsive/css.mtb?v=08292023024500 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:03 UTC	619	IN	HTTP/1.1 200 OK Content-Type: APPLICATION/X-WOFF Last-Modified: Fri, 23 Feb 2024 07:24:15 GMT Accept-Ranges: bytes ETag: "050a54e2966da1:0:dtagent10285240307101407S3u4" X-Srv: M-STC-001 Access-Control-Allow-Origin: * X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="-376943421" Date: Thu, 14 Mar 2024 00:57:03 GMT Content-Length: 64318 Set-Cookie: TSf60233d5027=08affc4e07ab20001693bb2793936b4cb148081629c9c44124558500bf00c12a585fa4e58becc76a08f25aad30113000df4c71103222feaf941436a5d285391359d9f5152242fe9d5f5b12fbe09c773c79701be08f16138e9902c4af37f725df; Path=/
2024-03-14 00:57:03 UTC	14135	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 fb 3e 00 13 00 00 00 02 92 d4 00 01 00 00 00 00 f9 c4 00 00 01 7a 00 00 02 e8 00 00 00 00 00 00 00 00 47 50 4f 53 00 00 cc 54 00 00 29 10 00 00 af a6 a9 17 60 ae 47 53 55 42 00 00 f5 64 00 00 04 5f 00 00 08 32 1d c3 0d fa 4c 54 53 48 00 00 06 b0 00 00 01 10 00 00 02 27 f0 da 10 6a 4f 53 2f 32 00 00 02 24 00 00 00 58 00 00 00 60 6a 68 83 66 56 44 4d 58 00 00 07 c0 00 00 03 78 00 00 0b ba f7 1c e1 61 63 6d 61 70 00 00 1d 8c 00 00 03 fd 00 00 08 ca aa 5a b1 ea 63 76 74 20 00 00 23 e4 00 00 00 5e 00 00 00 5e 08 80 0e eb 66 70 67 6d 00 00 21 8c 00 00 01 02 00 00 01 73 06 59 9c 37 67 61 73 70 00 00 cc 40 00 00 00 14 00 00 00 14 00 75 00 0c 67 6c 79 66 00 00 28 8c 00 00 97 f2 00 01 6c 34 91 9f fc 1a 68 64 6d 78 00 00 0b 38 00 00 12 Data Ascii: wOFF>zGPOST)`GSUBd_2LTSH'jOS/2$X`jhfVDMXxacmapZcvt #^^fpgm!sY7gasp@uglyf(l4hdmx8
2024-03-14 00:57:03 UTC	4859	IN	Data Raw: f9 72 49 af d2 e0 cf bb 30 ef 99 e2 26 a9 18 c1 59 47 da 82 af e9 30 69 f4 5c 7e 32 28 d0 e0 15 50 ce c0 01 06 ea 09 e0 c7 49 c5 d1 a7 9a 1e c7 87 1d 3e f9 38 e9 64 18 4a 55 da c9 61 f8 95 74 d2 06 9b 2c 23 a8 3b a4 ae 64 90 64 90 5c e2 7c 59 34 64 7a 71 c1 ad 92 7f b1 30 db 62 51 94 30 93 34 cf c4 44 28 44 dc 0c c0 10 a2 98 bc 50 a3 0b 1d f0 c3 e9 34 6b 8e 90 a1 77 c0 e9 eb 40 0c ca 1c 26 da 6a 88 6f 6e 29 fa 1c 03 e0 0c b4 47 71 76 e0 26 5e 78 35 ae f1 4a 19 67 13 00 07 a0 1d 83 76 06 da a3 d0 ac 48 0a e1 e8 20 5c b3 07 49 d5 08 27 bf 4b a0 8e ff f5 fe 96 e6 9a d0 0c f7 50 c6 e1 6d 7b f6 df 70 cb 61 d1 13 a9 14 e9 0b 06 aa 6a 9a a7 cd 4f db b8 7f f7 82 9e c1 0d db d6 ad c5 b5 82 3d e2 83 b5 2a 17 4b 51 13 eb 53 7b b0 9c 5e 8b 95 f6 30 97 b4 19 a4 fd ac Data Ascii: rI0&YG0i\~2(PI>8dJUat,#;dd\\|Y4dzq0bQ04D(DP4kw@&jon)Gqv&^x5JgvH \I'KPm{pajO=*KQS{^0
2024-03-14 00:57:03 UTC	2404	IN	Data Raw: e6 a1 cf 3c fa b1 db 1e 7b 08 66 1a e5 84 6f e8 1d 30 db e5 d7 7e 4e e7 1b ee d1 3b 49 de 2e 8d ee 01 8e 43 73 8c f5 d1 d8 c2 a4 78 e9 f5 a5 e6 38 1e d7 ec bd 11 27 35 53 26 8f a8 47 b6 15 a3 96 60 2d 75 8e 36 d5 e1 61 d5 9b 4f 01 f0 88 7c 83 fc 9c ce e1 10 3a cb 5b d2 94 98 18 bd 63 22 4d b1 b1 41 b2 18 68 65 e0 16 06 36 33 70 51 09 de 56 b8 5b a2 8a 65 95 22 38 6e 5c b4 0b 79 71 76 bd 45 0f 9e 7d f0 ee 57 fe e3 81 47 1f bf fb 8f fa f3 7f fc 63 e4 42 e4 13 22 31 f2 ae d8 28 e9 0b c5 d6 23 cf 25 12 e2 e7 d6 98 d3 fd 7c 1e ce 64 60 17 03 03 0c 64 32 f0 08 03 b5 04 fc 3d 0b 30 ce 7c a3 07 fc 10 cf 6a 0e 4f e6 52 06 9a 8d 59 d5 d9 3d 35 93 e7 6a 36 03 86 fe a2 25 56 7f 21 2d 32 56 a4 c4 84 97 19 81 70 ea bd 8f 3c 7c f8 2d d4 56 3c 2c 96 47 26 bd f9 26 ea bf Data Ascii: <{fo0~N;I.Csx8'5S&G`-u6aO\|:[c"MAhe63pQV[e"8n\yqvE}WGcB"1(#%\|d`d2=0\|jORY=5j6%V!-2Vp<\|-V<,G&&
2024-03-14 00:57:03 UTC	7263	IN	Data Raw: 9c 59 4b ea 17 cd 3b 18 ac ad e9 38 58 1e aa e9 04 42 b0 aa a5 a9 bb a9 b5 43 d2 b4 c6 e6 05 3d 91 3f 19 af ef 68 06 1d d7 25 1d f7 28 6f 7c a6 e3 1e 8e 9f 98 11 47 be 77 7e 58 3a 1e 37 81 71 f3 f5 01 74 dc a3 02 13 4c 74 3c e3 fa 74 5c bc b3 3a 96 8c e3 a3 1a 79 8a 75 f6 a3 48 37 24 35 27 7b b5 29 09 ed 46 06 aa e3 1c 2a 9a ae 2f bc c5 fb 51 e8 86 1f 05 46 b0 34 5f c7 8f a2 f8 f8 be bd c7 31 3b af 18 ea 6d 96 49 7c af 61 1a 5e 3b fe 71 60 b2 de 64 fc a3 99 72 81 ea 63 73 81 e6 a9 b8 b4 3c 85 f9 ae f1 73 81 2e 8b 93 d7 63 c5 f4 b8 d4 9f 0a a7 ff 97 73 81 06 33 fe d6 5c a0 a3 fd a6 4c a0 fa 53 2a 06 07 e6 ca a3 e6 ea 67 b8 de d2 ef 20 5f 79 eb 17 a8 1c dd 39 23 66 d9 f2 03 64 50 df f8 32 a8 12 de e3 44 ce 38 cd 55 d1 75 bc 3c a2 41 3a ba f2 f2 c8 e4 59 72 Data Ascii: YK;8XBC=?h%(o\|Gw~X:7qtLt<t\:yuH7$5'{)F/QF4_1;mI\|a^;q`drcs<s.cs3\LSg _y9#fdP2D8Uu<A:Yr
2024-03-14 00:57:03 UTC	7263	IN	Data Raw: 5a 2d 0c 38 5f ca db 9c d1 69 9c 7c 59 e3 c9 1b aa 68 90 1e c1 5c 4f 5d 89 87 39 2c 3e 72 fc f8 be 29 ab 72 73 57 74 ed 8a 91 34 7a d6 e4 e6 ae 9a b2 ef b8 94 37 aa 8d 90 79 c7 be fb ea ab 27 35 44 45 8c fa ea ea fa fb f6 21 8f 50 25 aa f5 26 f1 d0 98 bc 8b 22 84 13 e2 53 25 27 f5 a6 6b 7f 16 0f ed da a5 ae b7 d8 3e e0 7a 8b ed 5a a9 bc 1e 7d f9 be 2e 6e a1 1c 92 a9 da 23 d1 2c 92 c9 2a fa 8d a3 b1 8c ca 3a 03 5c 45 fc 49 06 0a 18 98 c5 c0 03 5c 4a fc ba d5 aa aa 38 79 67 82 96 73 15 57 35 e3 6a f4 f8 b5 28 07 90 04 a5 6d 4a 52 31 f0 a9 21 a2 e0 0d 58 ec 51 be dc dc 5b d7 78 fb 5f 7b eb c3 b7 eb cf 0f 1d 3d 3a 04 6d ec 73 3d 10 b5 b9 31 8f 6b 55 1e 81 46 64 d3 df fe 5c 51 eb 29 3e 1e 0e 1e 8d 4b c8 07 0b d2 2c e6 5c 65 ab 9d 24 f2 51 c2 ce 4a 34 69 dd 04 Data Ascii: Z-8_i\|Yh\O]9,>r)rsWt4z7y'5DE!P%&"S%'k>zZ}.n#,*:\EI\J8ygsW5j(mJR1!XQ[x_{=:ms=1kUFd\Q)>K,\e$QJ4i
2024-03-14 00:57:03 UTC	7263	IN	Data Raw: 42 17 c4 6b 98 c8 d7 94 51 68 0f 66 6b 30 46 cc cf c2 51 12 39 ca 3e 99 cf 4e 29 9c a1 42 cd 19 2a a2 70 6e 65 be 72 f4 16 38 05 52 f7 61 91 18 16 09 b3 48 8c 0a 10 af 14 22 74 e3 0c 1d 50 61 9c cf ce 50 cb 4a 24 df 00 f2 6b 48 b8 1e 95 fd be 40 98 d3 d2 b1 1e 15 36 3b 46 49 41 b7 63 60 f6 76 d3 a3 0d 1a 92 49 95 33 7a 3b 32 c5 d8 4c 75 cc 8d ab 42 9b 31 44 13 1c 40 2b 0c 3d 73 05 b3 cd c0 a2 5b 25 28 ad 55 8a eb d1 c0 28 58 02 78 d8 04 63 b9 81 7b fa 0c 5c 5b c0 c0 b5 05 e0 73 f3 94 a0 a7 85 48 31 2f d1 ba ac c4 93 e3 76 39 5c a9 2e 0f 1e 60 d2 53 b1 ff ff bd b8 62 9f 3e 7d 77 45 f1 67 5b 96 cf 3b 6a 3f 52 70 aa e0 88 7d 7b 51 df c6 c5 0f b6 d5 b4 3d b6 98 ec 99 9e 3e dd be 6c 7a 7a d9 8f f0 bf 65 be 9b c9 1e 38 b0 8f 08 bd 9c 68 29 89 2e bc 5c 44 03 3b Data Ascii: BkQhfk0FQ9>N)B*pner8RaH"tPaPJ$kH@6;FIAc`vI3z;2LuB1D@+=s[%(U(Xxc{\[sH1/v9\.`Sb>}wEg[;j?Rp}{Q=>lzze8h).\D;
2024-03-14 00:57:03 UTC	16384	IN	Data Raw: f5 a8 7a 47 47 7b 55 ee ba 3a b7 0a 14 b2 7d 17 31 8f 9f 40 1e 3f 61 98 45 ba 0e 88 7a 38 a8 8e 3b e9 5e ef c3 2b c7 2c b6 08 cc e2 fd 91 30 8b 97 53 ef 81 10 c5 ab d0 10 97 83 3e 9c 7b 03 79 66 6b bc 33 d0 78 cf 7d f6 b3 c0 c6 b3 c3 f1 7c 58 73 de 1e 76 ce 65 36 a7 2a 42 d9 f4 34 4e 00 3f 93 6e 01 3e bf 78 c0 7c 2f 99 de c6 f3 19 2c 0f 9f 93 37 68 be 50 ad 7c 8e f9 22 cc 37 49 63 b2 5e ae a5 79 0b e6 bb 88 5d 56 91 83 10 0c 8d f9 05 52 bb 1c 2d 83 26 ef a3 3c bf 81 e6 1b 68 fe 02 e6 3b a4 dd 72 94 5c 0a a4 df 98 5f 2c 7d 4b 26 e4 9f 69 be 18 f3 35 52 1f fd bc 9b e6 e7 61 7e 21 cd a7 60 be 04 f3 ed 52 b5 ac 95 77 d1 fc d9 90 fc 63 fc fb a7 e9 f9 00 27 3c c7 7f bf 56 26 f2 28 cd 9f 51 b3 58 8f 53 72 ae 2a 41 2a 91 5f f0 e3 12 04 1e 41 e0 13 84 cd 4a e0 13 Data Ascii: zGG{U:}1@?aEz8;^+,0S>{yfk3x}\|Xsve6B4N?n>x\|/,7hP\|"7Ic^y]VR-&<h;r\_,}K&i5Ra~!`Rwc'<V&(QXSrA*_AJ
2024-03-14 00:57:04 UTC	4747	IN	Data Raw: cc 05 77 fe f5 87 e3 a5 96 08 d1 64 82 c9 dc fb 38 f9 ab 87 5d 6f 51 3e 8c c7 68 bd f6 3c 44 a3 8e 1e 36 f2 08 b5 89 e3 4d 3c 52 19 1d 0d 08 75 d9 f7 21 fe 45 ce 26 9e b7 5e c5 f6 eb 31 f3 31 cd 76 3b 26 f1 68 7f 14 64 3a db 79 0c f9 1f b6 1a 49 f9 af d8 f7 dc 0f 1d c3 b5 47 2a 43 f2 e0 97 63 1a b7 d1 a6 ae 3c 78 5c 3f 41 45 07 fe 98 51 7e f7 3f e2 1d 0f de c3 41 e1 cf 0a c4 7d 2b b8 7f ac eb cf 9a 77 b5 51 b3 89 f7 3e 0c 32 52 75 1a e7 e8 22 f6 5c 6d ed 56 1c fd 25 b0 98 df 7d 0b 98 11 19 f4 bc 57 e7 8a b0 3f ad e5 b1 b2 bf 58 38 da 65 9f d4 61 a1 da 71 c9 bd 1e 92 ac 35 e7 9f 0e 83 2c ca 2a 5f 90 6f 22 85 81 9f f5 1c 4f 36 f0 28 4f 90 39 3f 04 cb 3b f7 c5 b9 5d 98 16 1c e6 6f a1 98 88 df ab c6 07 f5 3e 92 5b fe 01 f5 5c 23 5f 51 73 dd f1 71 1f b7 b0 98 Data Ascii: wd8]oQ>h<D6M<Ru!E&^11v;&hd:yIGCc<x\?AEQ~?A}+wQ>2Ru"\mV%}W?X8eaq5,_o"O6(O9?;]o>[\#_Qsq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	49976	192.216.61.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:03 UTC	638	OUT	GET /assets/fonts/mandtbaltoweb-book.woff HTTP/1.1 Host: resources.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://onlinebanking.mtb.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://resources.mtb.com/r/simple-layout-responsive/css.mtb?v=08292023024500 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:03 UTC	618	IN	HTTP/1.1 200 OK Content-Type: APPLICATION/X-WOFF Last-Modified: Fri, 23 Feb 2024 07:24:15 GMT Accept-Ranges: bytes ETag: "050a54e2966da1:0:dtagent10285240307101407S3u4" X-Srv: M-STC-001 Access-Control-Allow-Origin: * X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="208334268" Date: Thu, 14 Mar 2024 00:57:03 GMT Content-Length: 67671 Set-Cookie: TSf60233d5027=08affc4e07ab2000c5c92c735f08658bea42f6d14075c70087cb0460bd3a73db284f4f821e457ed9089e0783e511300042fba7942a7ef86d941436a5d2853913c79ff4d285c1d822ac851e75ab942e7c651292f3718fbe66106bc09a796b3c9c; Path=/
2024-03-14 00:57:03 UTC	14136	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 08 57 00 12 00 00 00 02 ba dc 00 01 00 00 00 01 06 e0 00 00 01 77 00 00 02 e6 00 00 00 00 00 00 00 00 47 50 4f 53 00 00 e3 58 00 00 1f 25 00 00 96 26 50 09 d2 5b 47 53 55 42 00 01 02 80 00 00 04 5f 00 00 08 32 1d c3 0d fa 4c 54 53 48 00 00 06 90 00 00 01 18 00 00 02 27 71 c2 bb bc 4f 53 2f 32 00 00 02 10 00 00 00 58 00 00 00 60 6a 14 81 0b 56 44 4d 58 00 00 07 a8 00 00 03 7b 00 00 0b ba f8 5c e2 8d 63 6d 61 70 00 00 30 98 00 00 03 fd 00 00 08 ca aa 5a b1 ea 63 76 74 20 00 00 36 ac 00 00 00 44 00 00 00 44 0d 97 02 d7 66 70 67 6d 00 00 34 98 00 00 01 02 00 00 01 73 06 59 9c 37 67 6c 79 66 00 00 3b 38 00 00 9c 66 00 01 81 b0 26 79 6b 82 68 64 6d 78 00 00 0b 24 00 00 25 71 00 00 5a 98 e5 1c 5d 0e 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFFWwGPOSX%&P[GSUB_2LTSH'qOS/2X`jVDMX{\cmap0Zcvt 6DDfpgm4sY7glyf;8f&ykhdmx$%qZ]head
2024-03-14 00:57:03 UTC	7263	IN	Data Raw: 0f 20 0f b6 10 80 11 0c 11 48 11 d8 12 60 12 aa 13 0a 13 74 13 be 14 24 14 ea 15 b6 16 38 16 bc 17 7e 17 da 18 30 18 9a 19 6e 19 ea 1a 26 1a a6 1b 62 1b 9a 1c 50 1c fc 1d 50 1d a6 1e 2c 1e c0 20 5e 20 a4 21 04 21 80 22 3e 22 f4 23 84 23 f6 24 42 24 6e 24 ba 24 f8 25 10 25 40 26 26 26 b8 27 a8 28 42 28 d0 29 54 2a 5c 2a ce 2b 22 2b 98 2c 48 2c 80 2d 2a 2d 96 2d ee 2e 7c 2f 0a 2f 80 31 38 31 bc 32 28 32 a0 33 40 33 f6 34 b2 35 0a 35 a0 35 dc 36 6a 36 c8 36 d4 36 e0 37 fe 38 0a 38 16 38 22 38 2e 38 3a 38 46 38 52 38 5e 38 6a 38 76 39 c4 39 d0 39 dc 39 e8 39 f4 3a 00 3a 0c 3a 18 3a 24 3a 30 3a 3c 3a 48 3a 54 3a 60 3a 6c 3a 78 3a 84 3a 90 3a 9c 3b 0e 3b 70 3c c0 3d 5e 3e f4 3f 1a 3f 6c 40 16 40 e6 41 be 42 70 42 a0 42 e0 43 46 43 e2 45 1c 45 86 45 f6 46 70 47 Data Ascii: H`t$8~0n&bPP, ^ !!">"##$B$n$$%%@&&&'(B()T\+"+,H,-*--.\|//1812(23@345556j6667888"8.8:8F8R8^8j8v99999::::$:0:<:H:T:`:l:x:::;;p<=^>??l@@ABpBBCFCEEEFpG
2024-03-14 00:57:03 UTC	14526	IN	Data Raw: 28 90 26 85 02 de 68 60 af 95 62 28 c2 a4 56 30 63 6c 84 f3 5a 74 6c 72 b0 22 27 aa 12 e3 5d e0 fc 9f 5b 63 7e 90 c3 b4 72 64 13 32 34 ba 19 13 e0 f5 e8 99 bb 7c 17 eb 5b 3a 38 b8 f4 2b 8f 0c 2c 58 30 f0 c8 f1 dd 93 fd ad 03 83 d7 ec 89 fc 6f 57 57 47 47 57 e4 43 b6 a0 b5 a5 a5 f5 2f ac 66 d3 60 e7 52 bb 7d 45 d7 e8 16 f5 0c 97 05 ab 81 8f db 06 f4 32 93 55 9c 26 aa c1 35 95 9c 5a 7a 81 5e e8 34 96 b4 db 67 4b 01 38 fb 42 3e ab 01 ac 08 44 75 98 36 ea 5b 40 68 33 91 0c da 84 d3 30 b2 04 e6 29 be 87 12 ad 33 03 ad 33 03 ad 33 c3 fa 34 03 ad 33 03 4e 98 01 27 cc 40 eb cc 40 eb cc 40 eb cc 40 eb cc 92 d6 99 a1 d5 66 a0 75 66 52 68 20 85 e3 64 35 2d 44 76 cd 34 c2 11 2f be c2 2b c4 40 2f 88 81 5e 10 03 bd 20 06 7a 41 0c f4 82 18 e8 05 31 d0 0b 62 a0 17 c4 40 Data Ascii: (&h`b(V0clZtlr"'][c~rd24\|[:8+,X0oWWGGWC/f`R}E2U&5Zz^4gK8B>Du6[@h30)33343N'@@@@fufRh d5-Dv4/+@/^ zA1b@
2024-03-14 00:57:03 UTC	7263	IN	Data Raw: 34 fe 55 ca f7 a7 7f 02 0d fb bc c4 0c 1d 1f 3f 22 f9 f8 ab 24 f0 25 09 2c 94 c0 c1 58 ab 39 99 3b 93 a2 0a 1a 33 f9 fc 4b 1e 9f 67 a1 ec 4c d5 a2 2b 76 2a 26 da 96 a5 97 e8 e3 28 09 c1 36 e7 e7 0c f5 a6 cd e1 70 f9 67 d7 ae ed eb 03 76 a5 5a 8d b0 df 18 d0 76 72 51 14 6b 63 f7 84 1d b1 a8 a9 53 68 18 30 02 e0 59 b8 ed 25 28 af 12 42 c0 42 97 48 db ae e0 f0 03 ea c8 40 88 df 6c ef 9a 6f 98 d8 b9 13 e7 f0 f7 f0 de 5b e5 7b 3f e2 9c b0 90 04 8e 45 cf 09 b3 c6 cc d8 20 52 e7 51 6a 8c a2 a0 75 e5 55 9a 46 be b3 b3 e1 f9 5d db f9 7b 55 e5 cf 6a 44 cd 35 70 5b d1 ed d1 37 5b 62 4e 55 d3 d9 d7 0f c5 f9 46 ae 48 1c 98 b1 e3 9f 1d 9c 0b ac ec 9b 37 74 ce 7f 17 0a 36 1e 9b 0f 4f 9e 52 cf b3 bf 19 76 42 f3 3e 15 e5 99 b4 71 8b e5 99 76 48 e0 58 62 56 c9 44 ac d2 4b Data Ascii: 4U?"$%,X9;3KgL+v*&(6pgvZvrQkcSh0Y%(BBH@lo[{?E RQjuUF]{UjD5p[7[bNUFH7t6ORvB>qvHXbVDK
2024-03-14 00:57:04 UTC	16384	IN	Data Raw: 9c 3f d8 5f 5b db d9 da 50 53 33 7b 76 7f cc a2 ad d7 f5 56 cf b3 98 97 56 2e dc b5 6e 13 8c 7f b0 ca 55 73 69 9e 33 29 bf e5 bd d8 9b 57 37 52 ec 0d b5 18 8e cf c8 65 78 95 4c 1c 92 89 04 99 98 2f 13 27 3c 9e fb 53 c1 1d 3d 60 69 6c 08 a1 de be be 3a 72 e3 12 e4 2d 82 2e 64 11 24 a4 07 30 b9 fe dc 07 89 27 64 03 d9 2c 28 01 c2 09 c8 c7 84 16 0b c1 7c 32 6e 33 ea 3a 90 b7 2d 23 b4 9c e1 b0 44 41 e6 f6 b8 7f c7 e2 dd b7 b3 e5 ab 96 2c 99 ab ae 70 df dc 5a c5 fe c3 9d d7 fa 99 cf 70 bd be 13 fa 47 12 94 91 1d a3 73 24 68 11 f4 ec 62 37 2d a2 bf 56 f0 d0 28 38 e4 a6 4b 05 6a ba b4 15 a5 cb bd 51 ba d7 68 15 80 ba 15 de 08 34 77 44 d1 fa 94 37 60 b3 f0 28 88 2b a2 6b f8 b0 39 a2 9e 5f ba 29 70 0c 6e 24 8e 9e 5c 6b 57 a4 ad 43 4e 91 9d 44 27 bb 19 fe 9a 13 24 Data Ascii: ?_[PS3{vVV.nUsi3)W7RexL/'<S=`il:r-.d$0'd,(\|2n3:-#DA,pZpGs$hb7-V(8KjQh4wD7`(+k9_)pn$\kWCND'$
2024-03-14 00:57:04 UTC	3214	IN	Data Raw: db 28 cd a6 49 54 8c bf a5 b0 c5 e1 f8 ae 33 56 37 0a 3c fa 3a ad db a2 dd b4 45 da 68 a4 aa 51 3b 6a d4 61 3c 88 92 67 42 3c 88 6e 8f 99 c6 67 a9 f6 48 a0 56 ca 7a 5c d3 1e e3 d0 1e 53 8c 47 51 b6 e8 8a 84 b6 80 ff ed a8 b1 f1 61 a8 a9 83 9a c6 50 cb 18 78 53 1a ed eb 83 f6 d0 69 6d 6d 68 75 5d 2b 5b 2c ae 49 6c d7 11 e9 ec c3 f5 fd a8 81 f2 67 c6 cb a0 06 75 c6 a7 45 4d e9 1a 15 b6 40 3a 4a 22 ba 74 5b 4a 57 d2 a8 0d f0 60 02 72 53 98 d6 a8 5a 4d b4 af 19 5e 7d b1 b2 69 9e 85 d6 56 b9 69 d9 2a 7c 48 1b 9c b1 c5 1f 57 48 eb 6a 8b 4c 1a 8b 4c a0 f5 da d1 72 62 05 ca 86 8c 05 46 a9 14 e5 28 bf 91 10 cd 5e 8c 2b 19 9f 55 8c f4 1a 15 1d d1 5a 5d 3b 65 a7 29 e3 69 5d 41 c3 39 a2 23 da 4e b5 3d 24 a9 04 58 17 85 0f 98 09 1f d0 88 58 43 a3 2c 8b 67 d2 f7 ea 71 Data Ascii: (IT3V7<:EhQ;ja<gB<ngHVz\SGQaPxSimmhu]+[,IlguEM@:J"t[JW`rSZM^}iVi*\|HWHjLLrbF(^+UZ];e)i]A9#N=$XXC,gq
2024-03-14 00:57:04 UTC	1007	IN	Data Raw: ed 4d f7 b8 ee d5 c9 59 f7 9a 97 ed 89 7e a7 b2 63 98 f0 98 53 56 4c 93 c8 23 2a 8c e6 59 ea f9 cd e5 9f e3 ba d7 4c ef a0 b7 f1 89 ec de ee f9 be 2f a8 b5 44 f6 2f 49 28 8d f6 ce 04 9e d0 cd f1 9e 7a cf 68 37 33 77 d0 53 84 1a 8c 18 b5 77 d5 67 95 08 20 6d ec 52 f7 11 53 41 0f d1 ce 17 db f2 c6 b9 84 8e be 2e 56 6f 37 2f 6b 48 f7 a7 71 ce 5c 5d c8 27 ee e8 79 e4 a2 d7 8f f2 47 fb 69 0d ed a2 15 a4 de cc 51 9f ce 6f e6 2c 10 22 df 9b e1 19 fd 59 68 9e f0 3f 73 40 5b 91 e7 06 f9 b5 42 fe 2e 0e f2 50 f7 75 5e 87 f1 3d 05 f7 17 84 d2 65 52 65 ca 5f 6c 4a 51 69 e6 c8 37 a1 b6 ea ca 12 c4 2d 0b bb e1 69 a1 bf 7f 80 d8 5b 1c c8 e2 04 ab 15 72 f7 0b 32 6f 99 9a 91 8f 74 cf 7d 55 b1 5c fd c6 44 5b 16 b2 84 77 7a 49 f9 7e 4c ef 15 9f 19 91 c9 57 8a bd f9 30 bd 53 Data Ascii: MY~cSVL#*YL/D/I(zh73wSwg mRSA.Vo7/kHq\]'yGiQo,"Yh?s@[B.Pu^=eRe_lJQi7-i[r2ot}U\D[wzI~LW0S
2024-03-14 00:57:04 UTC	3878	IN	Data Raw: e8 f9 ec 4e 63 41 4e b6 9f ec e2 69 f7 a2 f9 c9 0e 13 f5 a7 65 b6 d4 ed fc ae 91 91 84 26 3f 7a ea 19 03 ec 8c 44 ba 9c 15 08 76 06 31 73 f7 89 d0 7e 00 e9 73 9d ad a7 7e fc f1 ce 7a 27 fb 39 7f 93 fa 3d 87 bf 27 fc a9 15 32 66 d4 cf 36 a3 08 89 ac 15 47 e9 60 9e cc ce ff bf a2 e9 b8 24 7b 34 2b 84 3a fe ff 71 4c 07 48 18 f8 12 b3 66 e8 02 3d a5 70 60 51 13 31 55 e2 6c 08 a8 52 22 ef c1 34 9c 46 50 15 d5 83 6a e9 32 9a 8c 3b 4d 34 9f c6 d2 7d f4 00 dd 42 0b e9 51 9a 4d 8f d3 5a ba 8b 36 d2 17 e9 11 7a 0d b4 8b 5e 07 ed a6 c3 a0 3d f4 15 d0 33 f4 16 bd 4d cf d2 37 40 7b e9 9b 74 94 9e a7 63 f4 6d 3a 40 7f 41 3f a0 43 f4 43 fa 09 7d 99 fe 9e da e8 0d fa 29 fd 9c de a4 df f0 44 3a ca 93 78 26 fd 17 df cc 37 d3 c7 7c 1b af a4 93 fc 14 af e6 91 fc 34 68 14 6f Data Ascii: NcANie&?zDv1s~s~z'9='2f6G`${4+:qLHf=p`Q1UlR"4FPj2;M4}BQMZ6z^=3M7@{tcm:@A?CC})D:x&7\|4ho

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	49977	192.216.61.78	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:03 UTC	636	OUT	GET /assets/fonts/mandtpg-iconfont.woff HTTP/1.1 Host: resources.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://onlinebanking.mtb.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://resources.mtb.com/r/simple-layout-responsive/css.mtb?v=08292023024500 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:03 UTC	618	IN	HTTP/1.1 200 OK Content-Type: APPLICATION/X-WOFF Last-Modified: Fri, 23 Feb 2024 07:24:15 GMT Accept-Ranges: bytes ETag: "050a54e2966da1:0:dtagent10285240307101407S3u4" X-Srv: M-STC-001 Access-Control-Allow-Origin: * X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Server-Timing: dtSInfo;desc="0", dtRpid;desc="-496403377" Date: Thu, 14 Mar 2024 00:57:03 GMT Content-Length: 4776 Set-Cookie: TSf60233d5027=08affc4e07ab2000c49ab12032584307412e76d9a260293e9d4897aaca10997589c792188640769c081eee45f71130009e215d21dbecfab9941436a5d28539139a0e5d8e53a0e00884fadde457f918c7ddd260f0942355276391175241f5f704; Path=/
2024-03-14 00:57:03 UTC	4776	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 12 a8 00 0b 00 00 00 00 1f bc 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 53 55 42 00 00 01 08 00 00 00 3b 00 00 00 54 20 8b 25 7a 4f 53 2f 32 00 00 01 44 00 00 00 41 00 00 00 56 3f 24 4b b0 63 6d 61 70 00 00 01 88 00 00 00 f0 00 00 03 5a 7b c1 f0 2f 67 6c 79 66 00 00 02 78 00 00 0c c2 00 00 15 08 a7 be b4 c4 68 65 61 64 00 00 0f 3c 00 00 00 33 00 00 00 36 12 cb f6 0c 68 68 65 61 00 00 0f 70 00 00 00 1e 00 00 00 24 07 bd 04 06 68 6d 74 78 00 00 0f 90 00 00 00 1d 00 00 00 94 8c c8 ff d8 6c 6f 63 61 00 00 0f b0 00 00 00 4c 00 00 00 4c 4f fa 55 62 6d 61 78 70 00 00 0f fc 00 00 00 1f 00 00 00 20 01 3b 00 a5 6e 61 6d 65 00 00 10 1c 00 00 01 5e 00 00 02 b2 a7 4a 4c 17 70 6f 73 74 00 00 11 7c 00 00 01 Data Ascii: wOFFGSUB;T %zOS/2DAV?$KcmapZ{/glyfxhead<36hheap$hmtxlocaLLOUbmaxp ;name^JLpost\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	49974	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:04 UTC	555	OUT	GET /utag/mtbank/olb-legacy/prod/utag.js HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:04 UTC	602	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 41164 Connection: close Date: Thu, 14 Mar 2024 00:57:05 GMT Last-Modified: Thu, 16 Nov 2023 22:10:37 GMT ETag: "329efe7a3eded17ea31b4198f085a8e2" x-amz-server-side-encryption: AES256 x-amz-version-id: tvQEM7nhMbww5OLhRTuFWWmI_23SgRD8 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5a588475f9a075d76c33229107634f8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: cYBxkad0aZkdNOIKokTTs4XAvGpVw4_c_pRUdtzyBXD3EnyvaHR3wg== Cache-Control: max-age=300
2024-03-14 00:57:07 UTC	16384	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 33 31 31 31 36 32 32 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 5f 74 65 61 6c 69 75 6d 5f 74 77 63 5f 73 77 69 74 63 68 3d 66 61 6c 73 65 3b 69 66 28 74 79 70 65 6f 66 20 75 74 61 67 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 29 7b 76 61 72 20 75 74 61 67 3d 7b 69 64 3a 22 6d 74 62 61 6e 6b 2e 6f 6c 62 2d 6c 65 67 61 63 79 22 2c 6f 3a 7b 7d 2c 73 65 6e Data Ascii: //tealium universal tag - utag.loader ut4.0.202311162210, Copyright 2023 Tealium.com Inc. All Rights Reserved.var utag_condload=false;window.__tealium_twc_switch=false;if(typeof utag=="undefined"&&!utag_condload){var utag={id:"mtbank.olb-legacy",o:{},sen
2024-03-14 00:57:07 UTC	1477	IN	Data Raw: 70 6c 61 63 65 28 2f 3b 2f 67 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 22 3b 22 29 29 3b 7d 0a 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 6b 65 79 2b 22 3d 22 2b 76 61 6c 75 65 2b 22 3b 70 61 74 68 3d 2f 3b 64 6f 6d 61 69 6e 3d 22 2b 75 74 61 67 2e 63 66 67 2e 64 6f 6d 61 69 6e 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 65 78 70 69 72 61 74 69 6f 6e 2b 28 75 74 61 67 2e 63 66 67 2e 73 65 63 75 72 65 5f 63 6f 6f 6b 69 65 3f 22 3b 73 65 63 75 72 65 22 3a 22 22 29 3b 7d 2c 4c 4f 41 44 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 21 75 74 61 67 2e 6c 6f 61 64 65 72 2e 63 66 67 29 7b 72 65 74 75 72 6e 7d 0a 69 66 28 74 68 69 73 2e 6f 6c 3d 3d 30 29 7b 69 66 28 75 74 61 67 2e 6c 6f 61 64 65 72 2e 63 66 67 5b 61 5d 2e 62 Data Ascii: place(/;/g,encodeURIComponent(";"));}document.cookie=key+"="+value+";path=/;domain="+utag.cfg.domain+";expires="+expiration+(utag.cfg.secure_cookie?";secure":"");},LOAD:function(a,b,c,d){if(!utag.loader.cfg){return}if(this.ol==0){if(utag.loader.cfg[a].b
2024-03-14 00:57:12 UTC	16384	IN	Data Raw: 71 2e 6c 65 6e 67 74 68 3c 3d 31 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 52 48 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 52 48 2c 66 61 6c 73 65 29 3b 75 74 61 67 2e 6c 6f 61 64 65 72 2e 72 75 6e 5f 72 65 61 64 79 5f 71 28 29 7d 3b 69 66 28 21 75 74 61 67 2e 63 66 67 2e 64 6f 6d 5f 63 6f 6d 70 6c 65 74 65 29 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 52 48 2c 66 61 6c 73 65 29 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 75 Data Ascii: q.length<=1){if(document.addEventListener){RH=function(){document.removeEventListener("DOMContentLoaded",RH,false);utag.loader.run_ready_q()};if(!utag.cfg.dom_complete)document.addEventListener("DOMContentLoaded",RH,false);window.addEventListener("load",u
2024-03-14 00:57:14 UTC	6919	IN	Data Raw: 3b 7d 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 74 72 79 7b 74 72 79 7b 69 66 28 75 74 61 67 2e 64 61 74 61 5b 27 64 6f 6d 2e 75 72 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 2f 46 69 72 73 74 54 69 6d 65 4c 6f 67 69 6e 2f 50 65 6f 70 6c 65 73 55 6e 69 74 65 64 27 29 3e 2d 31 29 7b 74 72 79 7b 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 46 54 4c 20 55 49 44 27 29 3b 24 28 27 66 6f 72 6d 23 46 54 4c 4c 6f 67 69 6e 46 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 64 3d 24 28 27 23 55 73 65 72 49 44 4c 6f 67 69 6e Data Ascii: ;});}}catch(e){utag.DB(e)}}catch(e){utag.DB(e)};try{try{if(utag.data['dom.url'].toString().indexOf('/FirstTimeLogin/PeoplesUnited')>-1){try{$(document).ready(function(){console.log('FTL UID');$('form#FTLLoginForm').submit(function(){var id=$('#UserIDLogin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	49978	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:04 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 1838 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:04 UTC	1838	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 62 39 65 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8b9e9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:57:04 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:04 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	49979	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:04 UTC	722	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377822964&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1603&N=12&P=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 147 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:04 UTC	147	OUT	Data Raw: 78 01 8b ae 56 ca 54 b2 32 b1 d0 51 4a 53 b2 32 d0 51 2a 53 b2 52 f2 0d 71 b2 ca c8 cf 4d d5 2d 48 4c 4f 55 d2 51 2a 01 8a e5 83 19 40 96 a1 b9 a1 81 b1 b9 b9 85 a1 b9 81 a9 a9 8e 52 0a 50 c4 c4 5c 47 29 d8 0f c8 30 aa d5 81 1a 07 94 41 98 97 9b 98 99 47 d8 18 33 90 66 90 55 11 40 b5 9e 40 da c6 c9 df 25 52 c1 18 08 0d 31 a0 81 82 21 50 55 85 92 95 99 09 d0 d1 95 40 1f 18 43 1c 63 69 69 0c 33 a7 3c 09 a8 04 e8 3e 93 da 58 00 f7 f1 35 b7 Data Ascii: xVT2QJS2QSRqM-HLOUQ@RP\G)0AG3fU@@%R1!PU@Ccii3<>X5
2024-03-14 00:57:04 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:04 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	49980	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:04 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:05 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:05 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	49982	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:05 UTC	720	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377823614&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=913&N=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 102 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:05 UTC	102	OUT	Data Raw: 78 01 ab 56 72 55 b2 8a ae 56 ca 54 b2 32 b1 d0 51 4a 53 b2 32 d0 51 2a 53 b2 52 f2 0d 71 b2 ca c8 cf 4d d5 2d 48 4c 4f 55 d2 51 2a 51 b2 32 34 37 34 30 36 37 b7 30 34 37 30 35 ad d5 81 6a 32 45 d6 95 9b 98 99 87 4d 71 ac 8e 52 aa 92 95 91 8e 52 71 8a 92 95 a5 81 b9 8e 52 45 31 90 6f 50 0b 00 1a d9 1f c5 Data Ascii: xVrUVT2QJS2QSRqM-HLOUQQ247406704705j2EMqRRqRE1oP
2024-03-14 00:57:05 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:05 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	49981	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:05 UTC	508	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377822964&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1603&N=12&P=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:05 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:05 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	49983	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:05 UTC	506	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377823614&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=913&N=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:05 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:05 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	49984	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:06 UTC	2744	OUT	GET /TSPD/?type=20 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://onlinebanking.mtb.com/Login/LoginHelp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS5075d88f029=0856addebbab28009dd10140f1414ffbe9ac165e594fbb6ed08018304b337e1987d155dad76683deaf7075abae420c35; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; TSba0bc889027=0856addebbab20008131eefbaea33abe6f418498d7c4d7ea50d5671da183f52bcfc0413237977c95082124d6171130002e5ebfdd1e2e69fe8791c862e1589a8059fe71956a7f4cd5da0bffc4ce6468789c1f5e845b2d54ff01cb0bc1b5b7b21d; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05
2024-03-14 00:57:06 UTC	664	IN	HTTP/1.1 200 OK Set-Cookie: TS5075d88f029=0856addebbab2800e516b0381395732aa15d815fcbc86a205301f9f8032dff01f2c5dd775481f8de6c3a853e240c1145; Max-Age=30; Path=/ Set-Cookie: TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; Max-Age=30; Path=/ Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Content-Type: text/html Content-Length: 6010 Connection: close Set-Cookie: TSba0bc889027=0856addebbab2000960c032f97ab0a53871ea33a518f53bd553274d2c53f5ba65a095621a3f4efd90811ea1c881130007a7b2f09aac9ca31e5bd056d836537b03a634ca0b8fe45621e74648b209f36bd31e629222ac5ea9d401f055d50e7cac9; Path=/
2024-03-14 00:57:06 UTC	6010	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 2d 31 22 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 43 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="-1"/><meta http-equiv="CacheControl" content="no-cache"/><meta http-equiv="Content-Type" content="text/html; charset=utf-8"/><link rel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	49985	52.141.217.134	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:06 UTC	492	OUT	POST /client/v3.1/web/wup?cid=mufasa HTTP/1.1 Host: wup-5d65a0ab.us.v2.we-stats.com Connection: keep-alive Content-Length: 172 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:06 UTC	172	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 6e 75 6c 6c 2c 22 63 73 69 64 22 3a 6e 75 6c 6c 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 31 30 33 37 37 38 32 34 34 39 39 2d 32 31 33 42 43 38 45 30 2d 44 36 41 34 2d 34 46 46 35 2d 38 41 35 33 2d 43 46 46 31 44 45 43 44 35 42 30 35 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 30 2c 22 63 22 3a 22 6a 73 22 2c 22 73 74 73 22 3a 6e 75 6c 6c 2c 22 73 74 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"ds":"js","cdsnum":null,"csid":null,"psid":null,"muid":"1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05","context_name":"","requestId":0,"c":"js","sts":null,"std":null}
2024-03-14 00:57:06 UTC	317	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 950 Connection: close date: Thu, 14 Mar 2024 00:57:05 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: fac38e18-60c7-4d57-9209-8f41d6bc7af8
2024-03-14 00:57:06 UTC	950	IN	Data Raw: 7b 22 77 75 70 73 53 65 6e 64 52 61 74 65 22 3a 35 30 30 30 2c 22 63 72 6f 73 73 44 6f 6d 61 69 6e 73 54 69 6d 65 6f 75 74 22 3a 35 30 30 30 2c 22 69 73 43 72 6f 73 73 64 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 63 72 6f 73 73 44 6f 6d 61 69 6e 73 4c 69 73 74 22 3a 22 5b 5c 22 68 74 74 70 73 3a 2f 2f 31 2e 61 37 39 61 62 39 35 63 31 35 38 39 61 31 33 66 38 61 34 63 61 62 36 31 32 62 63 37 31 66 39 66 37 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 70 72 6f 64 2f 63 72 6f 73 73 64 6f 6d 61 69 6e 2e 68 74 6d 6c 5c 22 2c 5c 22 68 74 74 70 73 3a 2f 2f 31 2e 62 34 30 36 39 32 39 61 63 61 62 61 63 39 62 30 39 35 66 31 32 34 63 38 31 62 64 66 63 66 35 37 66 2e 63 6f 6d 2f 73 63 72 69 70 74 73 2f 70 72 6f 64 2f 63 72 6f 73 73 64 6f 6d 61 69 6e 2e 68 74 6d 6c 5c 22 2c 5c Data Ascii: {"wupsSendRate":5000,"crossDomainsTimeout":5000,"isCrossdomain":true,"crossDomainsList":"[\"https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html\",\"https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html\",\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	49986	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:06 UTC	2659	OUT	GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=11 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/TSPD/?type=20 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; TSba0bc889027=0856addebbab2000960c032f97ab0a53871ea33a518f53bd553274d2c53f5ba65a095621a3f4efd90811ea1c881130007a7b2f09aac9ca31e5bd056d836537b03a634ca0b8fe45621e74648b209f36bd31e629222ac5ea9d401f055d50e7cac9
2024-03-14 00:57:06 UTC	155	IN	HTTP/1.1 200 OK Content-Encoding: gzip Cache-Control: public, max-age=86400 Content-Type: text/javascript Content-Length: 122337 Connection: close
2024-03-14 00:57:06 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 00 e4 bd 6b 8f db 48 96 28 f8 5d bf c2 4e f4 78 c4 12 9d 43 06 23 18 a4 64 39 31 77 6e 03 2b 41 77 04 8c ee 62 07 74 e7 10 2e 3b ab 4b 1a 96 b3 d6 cc ea ae a6 ad ff be e7 15 c1 a0 44 a5 d3 ae ea 5e 2c 16 dd ae 94 c4 88 60 3c 4e 9c f7 e3 af fb 0f ef ef ff 7a fd ef ff d7 ff fc cf e5 f3 e7 7f ed bf 2d 1e 3e fe ed d3 f4 87 5f 3e bc 7b d8 df 7f 98 46 83 cf 7f 79 fb f1 59 b7 fc f4 fe ee dd c7 bf fd fc 30 f7 4f ba e8 13 76 fb 78 f7 f0 cb c7 0f cf d6 bb ed bf 5f ff fc f6 63 7b 37 0d 5b 74 cb ee ba fd b9 d9 3f 4c af 9a ab 68 81 63 b5 cb ab ab c5 0f f7 1f a7 f8 a5 5e 26 8b fa 55 77 dd dc 7d f8 f3 c3 8f 8b d9 ac 8e da d9 72 f7 f0 71 ff e1 cf d7 3f 7c bc ff e9 df 7e 7c fb f1 df ee df df 4d bb 37 f5 6d b4 90 b7 b5 47 18 3c 3a be 7b fb f0 ee Data Ascii: kH(]NxC#d91wn+Awbt.;KD^,`<Nz->_>{FyY0Ovx_c{7[t?Lhc^&Uw}rq?\|~\|M7mG<:{
2024-03-14 00:57:06 UTC	16384	IN	Data Raw: a2 8c c8 67 27 81 57 02 dd 0a cb ce a8 98 8b 66 b5 5e ee 86 01 15 b6 b7 7f 67 02 38 99 f8 ff b9 64 9c 5a 45 8b 03 91 2f c4 60 80 58 91 54 a1 25 9f 49 64 6d e6 a4 f3 ce c9 77 ef b0 47 12 a9 4b 56 f2 ee d6 a4 85 25 1d 6f 16 57 48 5a 95 a5 cc 7d 3a 6e 90 98 5a 54 13 a1 86 f7 90 50 cb 84 15 bc 3b 24 bb 58 cb 1b cb 66 02 e2 6b fc eb df 7b 4a a8 11 11 d2 6f 3f f0 94 7a a2 e1 dc 6d c5 29 da 39 59 11 f1 20 6a 4a a8 18 b3 59 65 6f 87 28 f8 a2 4a 76 14 95 1f 30 37 4b 0e d7 04 1b 3f 42 7c 1e a3 65 ac a2 2c ed 17 a8 c6 61 7d 5d 9b 27 d1 58 26 43 4e 4f 79 46 28 61 a0 c3 fe 09 e4 a7 de 3d 3a 99 dd fa b7 8f 51 3d c6 78 ac be a8 88 36 5c 02 f2 f1 4d 6b c6 78 8b cb f3 1c ee 53 f2 15 0c c5 97 f6 4b 3d 6d ac 89 1b 0c 15 cc 1c 30 a5 d8 63 e6 1e 93 06 a8 92 8d 2b 8b 2d 7e d3 Data Ascii: g'Wf^g8dZE/`XT%IdmwGKV%oWHZ}:nZTP;$Xfk{Jo?zm)9Y jJYeo(Jv07K?B\|e,a}]'X&CNOyF(a=:Q=x6\MkxSK=m0c+-~
2024-03-14 00:57:06 UTC	16384	IN	Data Raw: d4 c2 b2 55 3f 19 fa 73 8c 8f 64 33 34 26 e6 e1 77 0f 16 c4 66 8f 59 21 ff 61 c8 aa ee 0e e5 62 17 6a 1a c6 67 fc d7 b7 91 df c0 2d 72 80 4a 9c 98 8a a9 1d 97 31 ad 3b 81 7c db 27 4f d4 43 c7 b3 8e c3 eb 90 6c 7a 55 cd 8a 2a 1d 9a 56 bd 5c d3 1e 88 5a bb 5a 4f f6 bd 5e b5 ea 45 b3 62 d8 61 bc a4 1d 2f 16 13 4e a5 0c eb 9b ad c0 d9 30 69 f9 40 0a 4e d4 1f 0f 2e 22 42 c5 cf 41 38 07 61 69 59 66 be 90 d4 74 39 3e 09 86 db c4 68 22 12 c6 20 4d 66 e6 cc df e4 a7 18 20 e6 b3 e0 b9 a7 ba d5 c6 ea 50 4d 17 d8 22 ed 99 07 8b e4 66 b3 54 3b c8 7a e9 d9 a7 29 b5 97 61 ca fe b8 75 7e 70 c2 95 91 14 dc ab ed e8 6b 20 03 5b da 94 69 cd 92 b0 53 22 f3 e2 3c d0 9e df b3 e9 5d 4e 8b 2d 29 0f 57 5b f8 f0 89 78 e1 82 eb 04 9f 62 e0 41 a7 63 7d 1b c8 62 5a fe 49 fe 5b 0b f3 Data Ascii: U?sd34&wfY!abjg-rJ1;\|'OClzU*V\ZZO^Eba/N0i@N."BA8aiYft9>h" Mf PM"fT;z)au~pk [iS"<]N-)W[xbAc}bZI[
2024-03-14 00:57:07 UTC	16384	IN	Data Raw: 08 a9 ac 19 44 24 61 f2 42 25 90 22 fe 6f 69 c9 bf 7d c7 98 be f9 3d d1 3e 78 85 19 09 ad 5b 33 2c 2a 3c f7 b9 8e 70 13 86 b2 49 51 1f c5 73 48 9e 0b 99 e1 8f 37 98 e1 e5 cf ba c9 8e 54 19 c6 82 dd cd 6b e1 76 c2 3c 88 bb ad 87 ca dd de f1 0c 6e 56 ef 22 4c 6e 18 66 ef ae 75 44 de f6 7c 1d 61 88 a9 11 8c 86 a5 ee c1 3b 5d d3 3b ab d4 cd dc a0 74 9f a2 ac af 77 bf 42 2c 12 db fa fe 95 ca cd 42 b6 41 27 e9 6f 36 22 85 5c ae 8b fa ad 64 8e 2c 3a 5f f0 1f 56 68 1f 56 43 c1 cc 72 77 23 ea c8 6f ca 1e 1c b6 cd 7a b0 31 de 96 73 45 fd df 74 80 f0 ce 31 43 fc ed fa b5 62 e6 6f bf 02 4a 97 32 40 59 0d bd 61 28 db 44 3b 20 85 62 17 d7 58 f1 00 55 a1 5a bc dd 55 1e ed eb 4a 77 e5 a3 bd 94 15 8a 4a 69 f2 11 33 34 ff 4a 35 b8 f2 27 41 94 8f 2b 01 7a f9 1d 6b 90 84 af Data Ascii: D$aB%"oi}=>x[3,*<pIQsH7Tkv<nV"LnfuD\|a;];twB,BA'o6"\d,:_VhVCrw#oz1sEt1CboJ2@Ya(D; bXUZUJwJi34J5'A+zk
2024-03-14 00:57:07 UTC	16384	IN	Data Raw: bd 91 f0 56 54 c0 a9 f6 ee be 5a c7 df db 72 bd 58 ef 2e 77 cf ff 1a 28 50 30 30 ae 5b f2 75 fa b2 69 50 a6 9b 77 02 c3 de d0 67 11 86 7b 7e de 0a d2 05 55 a0 5b 80 a3 ef c3 d5 96 ca 44 6f d1 26 86 b8 18 3d 8b 92 98 0b b5 76 23 d1 a3 62 73 ec 99 29 19 85 65 b8 6e a2 e7 9c 90 c5 2a e8 91 2b 30 57 ed d0 96 d3 54 3f a2 b9 c5 ee 1e ce e6 fb 3d c2 b0 68 34 ba f8 08 d9 62 ce e6 9b fd 4b 34 62 ed 66 5c 9c 9b aa 38 a0 d2 ee 59 64 fb 00 01 f2 e8 77 8b b5 c8 a1 ca 76 57 68 a3 53 e1 62 e8 25 65 4c 54 04 b1 64 4f 16 dc 62 11 33 cf 01 6d be bb 33 bd b3 fe ba e0 f6 9e 56 05 c0 84 be a7 e7 27 62 25 82 43 96 c4 38 62 ac 72 b6 85 64 c4 9e e4 28 92 4e 52 f2 bc 0c a1 49 65 f9 de fe ea 90 14 87 59 71 55 35 1e 39 2d e5 97 cb 5e 77 44 dc c7 c4 3a 6e af 17 d6 ca 71 93 a7 1e 1f Data Ascii: VTZrX.w(P00[uiPwg{~U[Do&=v#bs)en*+0WT?=h4bK4bf\8YdwvWhSb%eLTdOb3m3V'b%C8brd(NRIeYqU59-^wD:nq
2024-03-14 00:57:07 UTC	16384	IN	Data Raw: d9 27 df fd 42 ef f1 ee b7 06 6d fc 8c 67 85 3d 9a df fc c2 b2 8a e5 3e 15 d6 a2 78 63 9f 60 7a 41 56 f8 09 19 21 ad a5 25 45 d8 48 c8 db 3d ed fe 65 f7 1e df e3 ed d6 c9 07 6f f6 b6 db 1d f2 03 3b 7d 3f d1 b3 87 8f ef df 22 8d c3 05 cb 39 ff 13 78 2b ca 34 96 49 fd 2c 67 32 ed ad b7 c0 cf 1f 5a b2 d4 4b cb f5 78 0f ee ad 4c c3 bc fd 2d ad 87 95 23 1e 7e 80 39 c8 b7 5b 59 23 fb dd 87 ed 6f f8 ec cf 96 bf 6d f9 3d 1e ec 61 07 df dd 3d ec 0f 34 e6 1c 58 3b d3 d5 af c4 ff f0 78 e9 d2 2e f0 79 58 cb c3 87 5d c5 74 7a 77 71 f7 11 e7 ca 6e 77 e1 07 96 13 6f df c1 5c 01 2b e1 fb 60 d6 2a e4 1b 56 f2 10 fe f7 67 cb 80 70 1f 5d bc 65 59 e5 6d f5 60 17 82 65 38 5e 73 4b 26 b0 84 70 f6 d8 6e 7f e5 7e 1f 44 e6 12 f9 00 8f ec 8f 78 56 fc 06 d4 4e b4 6b 85 96 bf be 84 Data Ascii: 'Bmg=>xc`zAV!%EH=eo;}?"9x+4I,g2ZKxL-#~9[Y#om=a=4X;x.yX]tzwqnwo\+`*Vgp]eYm`e8^sK&pn~DxVNk
2024-03-14 00:57:07 UTC	16384	IN	Data Raw: 3d d6 93 4a e5 e7 9e 2b 65 85 92 d3 c8 05 78 a3 6c de 01 3d 70 67 9a 17 51 45 0d 01 45 9e eb d3 24 3b bf f5 29 7f 6d e2 8f 96 75 67 76 1a 33 c2 83 85 81 96 2a d0 b4 62 3f 20 a7 09 f2 3d 4e 9d 95 d9 09 5d 6b f2 82 8a 20 e6 72 9d c6 c1 75 12 5c a7 c1 75 16 5c 2b 3f 51 52 c2 5c 4c 64 d2 af 2b 6d ae fd e4 c8 f7 6e 15 b3 20 12 5f 64 dc 38 f8 2e 0f 26 91 37 42 f8 5b 28 fa c8 ca bb 71 f8 ef 47 f4 43 b0 23 ca e0 01 13 07 d7 ca 5f 17 72 cd aa 49 77 f5 aa 75 34 5f 93 ff 44 62 96 b0 11 66 cf 98 01 b8 61 47 9a 44 bb 35 25 38 42 f7 58 74 bf c6 b0 d0 26 d8 d4 07 46 7e 8d b1 c7 8e 12 cd e4 ce 9a 7c 92 97 d7 b9 6f 25 a7 30 a4 78 c0 f2 c2 b1 4f 65 e7 bf 9f 00 3e b5 85 15 04 1d 83 c2 ce 29 fd c1 26 34 c0 b7 9d 08 6d 9b 1e 48 75 9d a3 17 43 be f2 54 72 42 81 27 e0 14 8b fe Data Ascii: =J+exl=pgQEE$;)mugv3*b? =N]k ru\u\+?QR\Ld+mn _d8.&7B[(qGC#_rIwu4_DbfaGD5%8BXt&F~\|o%0xOe>)&4mHuCTrB'
2024-03-14 00:57:07 UTC	7649	IN	Data Raw: 2b f2 69 bc 66 60 63 33 ff ed 33 4d 05 cf ed 14 d2 7d 21 af 90 fe a6 8b 68 64 11 e9 f6 66 22 01 be b0 74 30 3a 47 ab c7 6a 44 29 5b a1 90 cf 72 12 96 f1 eb 9f 3f e2 f2 31 6e f0 ab ac 5f 65 4a 0e a7 33 30 64 5e 3e 26 93 3b 8c 3b d6 65 c4 b0 e6 bf 71 3c 32 2d 67 88 4b 4c e6 8f 3d 9b 3c bf 00 ed dd fe 92 64 47 2b 89 4b dc 33 d6 10 99 7c 5d a0 2b 13 19 8c e2 74 ea 4e 68 d0 03 66 94 4f 79 33 64 bc 79 93 19 0c 69 ec d5 15 15 3f ab 9a 6c ce bc f8 55 58 50 fa 0d 17 d9 54 b2 03 1d db 54 8d d4 c3 c9 2f e5 84 24 ed c5 09 78 98 d1 d5 73 0f 38 ee 5b 1c 19 39 08 d5 c5 b4 2c e4 37 d8 33 f0 63 13 b7 0d bc ac 8f 3b a7 47 a6 b4 b4 c9 f7 42 60 3f 87 46 5d d4 83 4b c1 33 1b 39 03 f2 32 cd c2 1b ad 8b 8d 98 62 35 10 59 2d 62 da bf f2 a7 52 48 9d c9 90 ef 5b 02 23 cb c3 60 63 Data Ascii: +if`c33M}!hdf"t0:GjD)[r?1n_eJ30d^>&;;eq<2-gKL=<dG+K3\|]+tNhfOy3dyi?lUXPTT/$xs8[9,73c;GB`?F]K392b5Y-bRH[#`c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	49987	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:07 UTC	2659	OUT	GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=12 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/TSPD/?type=20 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; TSba0bc889027=0856addebbab2000960c032f97ab0a53871ea33a518f53bd553274d2c53f5ba65a095621a3f4efd90811ea1c881130007a7b2f09aac9ca31e5bd056d836537b03a634ca0b8fe45621e74648b209f36bd31e629222ac5ea9d401f055d50e7cac9
2024-03-14 00:57:07 UTC	154	IN	HTTP/1.1 200 OK Content-Encoding: gzip Cache-Control: public, max-age=86400 Content-Type: text/javascript Content-Length: 37876 Connection: close
2024-03-14 00:57:07 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 94 bb d7 12 a4 4a b2 25 fa 7e be a2 df 4e f7 61 4f 27 5a dc b6 7d cd 48 48 b4 4a 64 92 2f 6d 68 ad 35 63 f3 ef 43 15 b5 5b cc d8 8c dd 5b 56 56 95 40 e0 78 44 b8 2f 5f 2b 02 d6 60 fc 53 da c7 49 3a fd e9 f7 3f fd f7 ff 58 93 71 4e f6 bf 4f 79 10 27 e3 9f fe 9f ff f8 cf 60 9e c7 22 5c e6 e4 4f 6b 12 21 7f 0a fe 7e b7 30 ba a9 98 8b ae fd ed 8f 13 5a 37 36 41 fd b7 7f 6b 0e ff 6a fe 9f 7f 02 fe e3 3f 93 dd 4e f6 79 19 93 bf 2d 6d 91 5e ad ff d4 04 33 fa a7 e5 ef cd aa 06 d7 4d fb 6f cb df fb 7f fc 6a ef 5f ff 68 fb f3 e1 cb 4f 43 7f af 8b 2c 9f ff 70 e0 6f 6b 30 1e 45 9b dd 2d d6 bf b7 b7 1f ff 72 16 be ce ce bf 1e fd c7 e9 9f 86 7e dd 91 1c 89 9b 44 bf ad b7 5d 33 38 fe b6 76 45 7c 79 57 b4 7f fe cb 7f bf 1a a1 7f ba bb f8 fb Data Ascii: J%~NaO'Z}HHJd/mh5cC[[VV@xD/_+`SI:?XqNOy'`"\Ok!~0Z76Akj?Ny-m^3Moj_hOC,pok0E-r~D]38vE\|yW
2024-03-14 00:57:07 UTC	16384	IN	Data Raw: b2 ce 18 f9 a1 ed 91 df e7 29 02 d8 13 8e 81 27 89 02 af bd 27 3c 79 66 ac dd 05 14 b0 95 cf a8 b2 5a eb 3b b4 55 76 e9 38 53 ba ed 68 63 0b 6d 56 a0 2d 05 8d f8 f5 b2 2e 3c c6 ff df 7c 53 b7 55 ac 68 d9 f4 d2 35 a9 00 12 7e fe 8c 54 0a b7 d0 26 d9 f2 d2 10 d1 fb 8d 44 96 82 73 17 29 94 07 e6 9c 83 3d 1e bc 1f 59 16 6b 5b e4 15 f0 c9 c7 fe 66 8e 0f a6 97 fd 02 29 58 d5 7c 05 6f 1c 62 99 32 e0 81 4b 5a 7d 7e 93 3a 0a df 00 09 fb 19 ec 89 a4 74 14 56 4d 7d fd ef 10 95 0e 08 4e 7b 88 a1 d5 15 5f fd df 53 f2 0d 77 9b fe b2 cb 08 1f 2e 49 2b 42 93 d5 e4 02 03 d6 21 f7 72 30 ef 0e b5 54 ad 43 93 d4 b7 64 b4 e5 7d 0f 40 79 3e 82 2a 6c c0 f0 d6 f6 d9 de cd 90 2e c2 a3 2f 33 6e e2 bd 36 cf 05 b9 d4 1c 23 e7 49 4e ea 17 fd 65 f9 8f 1e bb b3 c7 8f e6 c2 e0 c9 6a 69 Data Ascii: )''<yfZ;Uv8ShcmV-.<\|SUh5~T&Ds)=Yk[f)X\|ob2KZ}~:tVM}N{_Sw.I+B!r0TCd}@y>*l./3n6#INeji
2024-03-14 00:57:07 UTC	5108	IN	Data Raw: 99 26 45 3b 5b 85 29 d9 6b 86 7c 52 7b e6 cd 5b 95 9d 03 48 37 b4 2f 23 2f 6b df e9 7b 47 8d 22 79 ba 68 06 db 92 0e c4 49 bb 79 a3 b9 b5 fc 22 d8 29 30 b7 ea 31 95 d2 67 ac f7 6b bf 2d 4f 63 97 fb 1c 03 6b 28 13 89 0c dd ad 79 30 47 5c 40 da 1d 8e 2e e8 92 4a 3a 65 6c 45 bb 01 01 34 29 b8 af c7 a8 1c e3 fc b2 25 ec 47 11 3f f5 0b 06 a7 06 73 f6 7e c1 6b 1d d3 45 6e 0d d8 da 55 28 71 cf 28 66 7e c1 f7 59 f6 2b db 06 03 5c e5 05 5c 50 59 79 0c 8d 3c f0 2a c1 23 1f 35 c9 a9 68 66 15 3d 14 bf e5 e8 38 ff b4 94 8d bb 2c 25 18 b8 b0 6b 25 fc 1f b6 72 27 34 db 67 a5 27 fd 02 6f d2 83 50 6b ab f8 3f 16 83 2a f2 21 8c a7 75 11 9d 8f 57 da ad a2 70 b3 8c fd 27 b6 73 2f 24 6a c2 b1 54 45 4c 9c b8 b0 1c 05 02 20 34 43 49 c9 42 f1 e8 59 12 d7 17 eb 0f 11 50 1f 23 9b Data Ascii: &E;[)k\|R{[H7/#/k{G"yhIy")01gk-Ock(y0G\@.J:elE4)%G?s~kEnU(q(f~Y+\\PYy<#5hf=8,%k%r'4g'oPk?!uWp's/$jTEL 4CIBYP#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	49989	13.225.214.59	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:08 UTC	736	OUT	GET /scripts/prod/crossdomain.html HTTP/1.1 Host: 1.b406929acabac9b095f124c81bdfcf57f.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:08 UTC	481	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 221 Connection: close Last-Modified: Tue, 13 Oct 2020 12:04:25 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 13 Mar 2024 08:30:18 GMT ETag: "21e34cf6a03f570df49e212018a567d0" X-Cache: Hit from cloudfront Via: 1.1 a7c7e4aa6d7cf400aa51dc847716996e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR50-C1 X-Amz-Cf-Id: 2fOZN52F9myzMHzB_cnhzL6plDkoeQud3So-ZpEwohkB1d0Qww03ow== Age: 59211
2024-03-14 00:57:08 UTC	221	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 63 72 6f 73 73 64 6f 6d 61 69 6e 32 2e 31 32 2e 30 2e 35 32 37 33 2e 62 39 36 63 33 35 63 63 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 76 61 72 20 63 63 41 70 70 20 3d 20 20 74 79 70 65 6f 66 20 63 64 77 70 62 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 3f 20 6e 65 77 20 63 64 77 70 62 2e 64 65 66 61 75 6c 74 2e 41 70 70 6c 69 63 61 74 69 6f 6e 28 29 20 3a 20 7b 7d 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><head></head><body><script src="crossdomain2.12.0.5273.b96c35cc.min.js"></script><script> var ccApp = typeof cdwpb !== "undefined" ? new cdwpb.default.Application() : {};</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	49990	13.225.214.11	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:08 UTC	736	OUT	GET /scripts/prod/crossdomain.html HTTP/1.1 Host: 1.c81358859121583b7adf2ace89cb39f44.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:08 UTC	481	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 221 Connection: close Last-Modified: Tue, 13 Oct 2020 12:04:25 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 13 Mar 2024 12:26:19 GMT ETag: "21e34cf6a03f570df49e212018a567d0" X-Cache: Hit from cloudfront Via: 1.1 00fd85d5c5d5bd788f272591be9ecbca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR50-C1 X-Amz-Cf-Id: DygiugBVbzmc3nfxUT2m9q2UcmLFk_FFh6w_dYFM-i-CSoXHcPT6Xw== Age: 45050
2024-03-14 00:57:08 UTC	221	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 63 72 6f 73 73 64 6f 6d 61 69 6e 32 2e 31 32 2e 30 2e 35 32 37 33 2e 62 39 36 63 33 35 63 63 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 76 61 72 20 63 63 41 70 70 20 3d 20 20 74 79 70 65 6f 66 20 63 64 77 70 62 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 3f 20 6e 65 77 20 63 64 77 70 62 2e 64 65 66 61 75 6c 74 2e 41 70 70 6c 69 63 61 74 69 6f 6e 28 29 20 3a 20 7b 7d 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><head></head><body><script src="crossdomain2.12.0.5273.b96c35cc.min.js"></script><script> var ccApp = typeof cdwpb !== "undefined" ? new cdwpb.default.Application() : {};</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	49988	54.230.163.72	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:08 UTC	736	OUT	GET /scripts/prod/crossdomain.html HTTP/1.1 Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:08 UTC	481	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 221 Connection: close Last-Modified: Tue, 13 Oct 2020 12:04:25 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 13 Mar 2024 12:20:46 GMT ETag: "21e34cf6a03f570df49e212018a567d0" X-Cache: Hit from cloudfront Via: 1.1 1fe2d6bd2a09e1a135873d28f9feccb0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C3 X-Amz-Cf-Id: FO7BCLDid9gBW_fCGtAQSSmNt6j8pgUlkmIZqTizBAbDlnFfHxJR7Q== Age: 45383
2024-03-14 00:57:08 UTC	221	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 63 72 6f 73 73 64 6f 6d 61 69 6e 32 2e 31 32 2e 30 2e 35 32 37 33 2e 62 39 36 63 33 35 63 63 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 76 61 72 20 63 63 41 70 70 20 3d 20 20 74 79 70 65 6f 66 20 63 64 77 70 62 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 3f 20 6e 65 77 20 63 64 77 70 62 2e 64 65 66 61 75 6c 74 2e 41 70 70 6c 69 63 61 74 69 6f 6e 28 29 20 3a 20 7b 7d 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><head></head><body><script src="crossdomain2.12.0.5273.b96c35cc.min.js"></script><script> var ccApp = typeof cdwpb !== "undefined" ? new cdwpb.default.Application() : {};</script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	49992	13.225.214.11	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:09 UTC	643	OUT	GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1 Host: 1.c81358859121583b7adf2ace89cb39f44.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1.c81358859121583b7adf2ace89cb39f44.com/scripts/prod/crossdomain.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:09 UTC	495	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3227 Connection: close Last-Modified: Tue, 13 Oct 2020 12:04:25 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 13 Mar 2024 15:21:43 GMT ETag: "9ee48a4da9c402e8a23ad085fb71f28f" X-Cache: Hit from cloudfront Via: 1.1 16d05722e4fd66d659ec48b5bb6f2d18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR50-C1 X-Amz-Cf-Id: yHBCnJlwrcyFEz9-sYEb22BDbkso7ZEhX9CtNqiK8YIW-oDI8Jhd4g== Age: 34527
2024-03-14 00:57:09 UTC	3227	IN	Data Raw: 76 61 72 20 63 64 77 70 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 65 29 7b 69 66 28 61 5b 65 5d 29 72 65 74 75 72 6e 20 61 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 61 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 3d 74 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 63 3d 61 Data Ascii: var cdwpb=function(t){var a={};function __webpack_require__(e){if(a[e])return a[e].exports;var r=a[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}return __webpack_require__.m=t,__webpack_require__.c=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	49993	54.230.163.72	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:09 UTC	643	OUT	GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1 Host: 1.a79ab95c1589a13f8a4cab612bc71f9f7.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1.a79ab95c1589a13f8a4cab612bc71f9f7.com/scripts/prod/crossdomain.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:09 UTC	495	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3227 Connection: close Date: Wed, 13 Mar 2024 14:20:23 GMT Last-Modified: Tue, 13 Oct 2020 12:04:25 GMT ETag: "9ee48a4da9c402e8a23ad085fb71f28f" x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 1e50ca9ac269e92d749f11227b12760c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR53-C3 X-Amz-Cf-Id: GlftX6NQf2FI3MkYBh3iB_TYcgVxSSSw6jxcM3yx2ookn8Xk7-qBvQ== Age: 38207
2024-03-14 00:57:09 UTC	3227	IN	Data Raw: 76 61 72 20 63 64 77 70 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 65 29 7b 69 66 28 61 5b 65 5d 29 72 65 74 75 72 6e 20 61 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 61 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 3d 74 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 63 3d 61 Data Ascii: var cdwpb=function(t){var a={};function __webpack_require__(e){if(a[e])return a[e].exports;var r=a[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}return __webpack_require__.m=t,__webpack_require__.c=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	49991	13.225.214.59	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:09 UTC	643	OUT	GET /scripts/prod/crossdomain2.12.0.5273.b96c35cc.min.js HTTP/1.1 Host: 1.b406929acabac9b095f124c81bdfcf57f.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://1.b406929acabac9b095f124c81bdfcf57f.com/scripts/prod/crossdomain.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:09 UTC	495	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3227 Connection: close Last-Modified: Tue, 13 Oct 2020 12:04:25 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 13 Mar 2024 11:08:42 GMT ETag: "9ee48a4da9c402e8a23ad085fb71f28f" X-Cache: Hit from cloudfront Via: 1.1 724c8c129f28bfce25c0430050f1ae72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: EWR50-C1 X-Amz-Cf-Id: Cn2FQbXhqpki6j91cgziwEmSCT3nE765wFBroKC-JEQvLvc6IJBN2w== Age: 49708
2024-03-14 00:57:09 UTC	3227	IN	Data Raw: 76 61 72 20 63 64 77 70 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 65 29 7b 69 66 28 61 5b 65 5d 29 72 65 74 75 72 6e 20 61 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 61 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 3d 74 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 63 3d 61 Data Ascii: var cdwpb=function(t){var a={};function __webpack_require__(e){if(a[e])return a[e].exports;var r=a[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}return __webpack_require__.m=t,__webpack_require__.c=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	49995	52.238.253.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:10 UTC	601	OUT	POST /api/v1/sendLogs?cid=mufasa&cdsnum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642&csid=null&ds=js&sdkVer=2.29.0.1447.ac027e4 HTTP/1.1 Host: log-5d65a0ab.us.v2.we-stats.com Connection: keep-alive Content-Length: 1192 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:10 UTC	1192	OUT	Data Raw: 72 56 56 4c 6a 2b 4e 45 45 46 37 65 37 2f 66 79 42 71 6d 42 49 39 69 78 48 63 64 4a 42 69 47 59 53 53 61 44 78 4b 36 45 4e 67 73 72 63 55 45 64 75 35 77 30 59 33 64 62 33 65 32 45 4f 59 50 45 62 78 69 4f 7a 4d 41 4e 67 54 67 41 34 6e 33 6e 46 79 44 78 59 79 68 33 32 79 48 72 53 62 67 73 55 51 35 35 31 50 66 56 56 31 56 66 6c 66 2b 2b 39 4e 4b 6e 5a 37 6d 61 66 33 31 46 30 41 51 53 73 68 4c 79 47 4f 52 5a 4b 62 4f 76 37 4d 63 76 4d 31 68 43 64 76 6b 4c 78 53 2b 5a 77 4a 39 47 67 6d 76 34 57 4a 4e 34 51 66 6b 63 45 56 71 51 4f 50 6d 51 6c 6c 70 55 71 44 2f 61 38 62 39 4f 78 2b 38 51 70 61 6d 47 54 51 54 2b 49 44 58 6a 38 78 62 6b 4e 67 50 35 36 34 4d 6a 6f 59 6b 43 75 51 52 4a 61 4a 4a 49 55 47 71 50 4c 4c 51 75 31 46 36 6e 73 79 6f 4c 70 35 64 45 50 65 72 Data Ascii: rVVLj+NEEF7e7/fyBqmBI9ixHcdJBiGYSSaDxK6ENgsrcUEdu5w0Y3db3e2EOYPEbxiOzMANgTgA4n3nFyDxYyh32yHrSbgsUQ551PfVV1Vflf++9NKnZ7maf31F0AQSshLyGORZKbOv7McvM1hCdvkLxS+ZwJ9Ggmv4WJN4QfkcEVqQOPmQllpUqD/a8b9Ox+8QpamGTQT+IDXj8xbkNgP564MjoYkCuQRJaJJIUGqPLLQu1F6nsyoLp5dEPer
2024-03-14 00:57:10 UTC	170	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Date: Thu, 14 Mar 2024 00:57:10 GMT access-control-allow-origin: * access-control-allow-credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	49997	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:10 UTC	3317	OUT	GET /TSPD/0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14?type=13 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onlinebanking.mtb.com/TSPD/?type=20 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; TSba0bc889027=0856addebbab2000960c032f97ab0a53871ea33a518f53bd553274d2c53f5ba65a095621a3f4efd90811ea1c881130007a7b2f09aac9ca31e5bd056d836537b03a634ca0b8fe45621e74648b209f36bd31e629222ac5ea9d401f055d50e7cac9; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000074=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
2024-03-14 00:57:10 UTC	147	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Content-Type: text/html Content-Length: 566 Connection: close
2024-03-14 00:57:10 UTC	566	IN	Data Raw: 32 30 30 38 37 33 39 32 62 61 66 35 30 37 31 38 30 30 33 61 64 38 62 33 65 66 39 39 31 62 64 62 35 66 39 62 33 64 66 65 30 62 31 34 34 38 39 38 62 35 30 62 65 34 64 30 62 62 64 64 62 33 34 37 38 30 66 38 30 30 30 38 35 36 61 64 64 65 62 62 61 62 32 30 30 30 66 33 65 38 32 37 65 65 62 38 64 31 63 62 31 37 62 36 37 38 62 61 37 63 38 31 37 34 66 30 33 36 37 36 37 38 31 33 35 64 36 39 66 62 32 36 35 62 37 37 33 39 34 37 34 62 36 65 30 31 38 33 33 37 30 38 32 34 61 35 32 34 36 65 30 38 63 38 30 30 38 33 66 39 64 65 34 39 64 31 35 31 33 32 62 38 62 31 63 62 33 32 66 39 62 65 30 61 30 36 34 39 36 65 31 38 63 33 36 64 64 64 61 63 35 65 37 61 34 34 37 32 30 39 62 64 36 32 62 34 36 31 34 34 32 64 37 61 66 39 36 66 63 32 32 61 66 38 61 66 65 61 34 64 64 61 31 34 63 Data Ascii: 20087392baf50718003ad8b3ef991bdb5f9b3dfe0b144898b50be4d0bbddb34780f8000856addebbab2000f3e827eeb8d1cb17b678ba7c8174f0367678135d69fb265b7739474b6e0183370824a5246e08c80083f9de49d15132b8b1cb32f9be0a06496e18c36dddac5e7a447209bd62b461442d7af96fc22af8afea4dda14c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	49996	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:10 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 1838 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:10 UTC	1838	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 62 39 65 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8b9e9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:57:10 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:10 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	49998	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:10 UTC	722	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377828527&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1833&N=16&P=3 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:10 UTC	119	OUT	Data Raw: 78 01 1d 4c 4b 0a c2 30 14 bc cb ac 43 93 b6 c1 84 77 08 2d c4 9d b8 31 06 bb 30 89 e4 a5 20 88 77 f7 d9 cd 30 ff cb 07 19 84 e5 14 ce 50 d8 84 ae bd bf 98 b4 ae 37 1e 38 3d 5a 4a 25 d6 e7 96 cb 10 6b d6 b9 16 e9 45 d0 64 8c 02 83 46 3f 7b 85 00 12 d9 76 ec 7f d7 8d 66 76 ce 4f 56 a1 cb e9 7b 6d 32 63 a1 fb ee 0e b2 d6 48 16 8e d2 3d 7c af 3f 44 0a 24 28 Data Ascii: xLK0Cw-10 w0P78=ZJ%kEdF?{vfvOV{m2cH=\|?D$(
2024-03-14 00:57:10 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:10 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	49999	52.141.217.134	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:10 UTC	385	OUT	GET /client/v3.1/web/wup?cid=mufasa HTTP/1.1 Host: wup-5d65a0ab.us.v2.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:10 UTC	273	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 14 Mar 2024 00:57:09 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 98563558-519d-4f1f-890f-b0e18303308e
2024-03-14 00:57:10 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50000	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:11 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:11 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:11 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50002	52.141.217.134	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:11 UTC	493	OUT	POST /client/v3.1/web/wup?cid=mufasa HTTP/1.1 Host: wup-5d65a0ab.us.v2.we-stats.com Connection: keep-alive Content-Length: 3850 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:11 UTC	3850	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 31 30 33 37 37 38 32 36 33 36 38 2d 73 6a 6e 30 30 30 30 33 30 37 2d 31 34 39 66 30 39 37 64 2d 38 38 32 31 2d 34 33 31 31 2d 38 36 63 36 2d 31 32 63 62 61 36 36 38 61 36 34 32 22 2c 22 63 73 69 64 22 3a 6e 75 6c 6c 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 31 30 33 37 37 38 32 34 34 39 39 2d 32 31 33 42 43 38 45 30 2d 44 36 41 34 2d 34 46 46 35 2d 38 41 35 33 2d 43 46 46 31 44 45 43 44 35 42 30 35 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 63 64 5f 61 75 74 6f 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 31 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 38 6b 74 69 65 71 53 6b 37 49 74 6e 7a 75 33 4d 78 32 4c 56 73 49 72 4f 4a 42 74 43 44 58 63 6a 57 Data Ascii: {"ds":"js","cdsnum":"1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642","csid":null,"psid":null,"muid":"1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05","context_name":"cd_auto","requestId":1,"sts":"gAAAAABl8ktieqSk7Itnzu3Mx2LVsIrOJBtCDXcjW
2024-03-14 00:57:12 UTC	317	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 626 Connection: close date: Thu, 14 Mar 2024 00:57:11 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: 62a4fd99-c890-406a-8b56-6bd6d6c795e0
2024-03-14 00:57:12 UTC	626	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 38 6b 74 6f 61 79 54 4f 39 41 39 76 6d 4e 30 33 4d 6c 5a 47 6a 6f 44 7a 48 49 49 39 32 4f 41 4d 61 61 4b 5a 6f 44 41 65 59 38 39 5f 32 6c 49 4f 51 67 34 41 52 6a 69 35 66 59 47 79 4b 32 53 50 35 50 48 6f 6f 54 49 42 46 59 4a 4a 36 5a 34 66 44 5f 59 6e 5a 74 6b 68 4d 61 69 78 46 35 4b 75 67 63 4d 75 39 63 4a 5a 35 38 32 4e 43 52 66 75 48 4a 4c 64 4a 5a 79 54 62 73 74 63 68 56 5f 72 42 67 73 64 4c 57 2d 57 38 6b 43 45 4f 2d 47 7a 63 74 64 78 62 72 75 6c 6e 58 44 49 32 49 6d 42 6f 39 6a 62 79 52 6b 47 50 75 57 54 73 37 71 34 42 58 66 36 58 5f 65 74 78 55 45 75 54 75 51 4e 52 45 33 75 62 4b 47 65 4e 64 31 41 74 67 37 52 43 69 69 50 73 38 5f 59 4e 41 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 38 6b Data Ascii: {"std":"gAAAAABl8ktoayTO9A9vmN03MlZGjoDzHII92OAMaaKZoDAeY89_2lIOQg4ARji5fYGyK2SP5PHooTIBFYJJ6Z4fD_YnZtkhMaixF5KugcMu9cJZ582NCRfuHJLdJZyTbstchV_rBgsdLW-W8kCEO-GzctdxbrulnXDI2ImBo9jbyRkGPuWTs7q4BXf6X_etxUEuTuQNRE3ubKGeNd1Atg7RCiiPs8_YNA==","sts":"gAAAAABl8k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50003	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:12 UTC	4156	OUT	GET /TSPD/0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14?type=14 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://onlinebanking.mtb.com/TSPD/?type=20 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS5075d88f071=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14:087392baf504a800ca7cfb090ffa2d61c465d276e864737563fe1fa355e51564adfaa6681290605687471ce298dc92eefd331a0dfbf083dea943b01823e02a0fb30ef230c05a16128ba8d664d3e5e3c487785641921ad448569b73790d588becf0756260e8db733f2291d38f75bac56ba4e1c5ab06b6fef2d71c3c097afe8c7b17b086b2613a094177dd98dbd897a1f6142333c248cc9fee4571385fabf3a813ee15366c67ac2cf06426113508e6d354; utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; TSba0bc889027=0856addebbab2000960c032f97ab0a53871ea33a518f53bd553274d2c53f5ba65a095621a3f4efd90811ea1c881130007a7b2f09aac9ca31e5bd056d836537b03a634ca0b8fe45621e74648b209f36bd31e629222ac5ea9d401f055d50e7cac9; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=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; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b242190a3fdfd7654cb892c1310b61e0147d82c5f80da2ac49c4eafa9553f9a43651ef1de954d42f6a58a4bdd0abdb2ea688
2024-03-14 00:57:12 UTC	566	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Content-Type: text/html Content-Length: 209 Connection: close Set-Cookie: TSPD_101=0856addebbab2800c2bcdec9e4cb1a368a55732bf354f598a089fd2b30ee21984312588d68337f599568958edcd7d25e087912d78805180058981c14cfc18d6215a159c28c1aef84ff1e5c1414b3890f; Path=/ Set-Cookie: TSba0bc889027=0856addebbab2000fed19594a3b8dddf93a6cba51124219b5ee1f23a3ca78883b4f9f2917e93fd0308c3f163531130003a408a2e5e4547b6c83086bf5b22be3b745e3acfc2612b35f84948ae507a34003c54b25d9d28ac8218ce5dc5ec346687; Path=/
2024-03-14 00:57:12 UTC	209	IN	Data Raw: 3c 73 63 72 69 70 74 3e 0d 0a 76 61 72 20 71 73 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 0d 0a 69 66 20 28 71 73 20 26 26 20 71 73 2e 69 6e 64 65 78 4f 66 28 27 3f 64 6f 63 75 6d 65 6e 74 44 6f 6d 61 69 6e 54 53 3d 27 29 20 3d 3d 20 30 29 20 7b 0d 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 20 3d 20 71 73 2e 73 75 62 73 74 72 69 6e 67 28 27 3f 64 6f 63 75 6d 65 6e 74 44 6f 6d 61 69 6e 54 53 3d 27 2e 6c 65 6e 67 74 68 29 3b 0d 0a 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 62 6f 64 79 20 69 64 3d 27 63 6c 6e 74 63 61 70 5f 73 75 63 63 65 73 73 27 3e 3c 2f 62 6f 64 79 3e Data Ascii: <script>var qs = window.location.search;if (qs && qs.indexOf('?documentDomainTS=') == 0) { document.domain = qs.substring('?documentDomainTS='.length);}</script><body id='clntcap_success'></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50004	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:12 UTC	3904	OUT	POST /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&bp=3&app=893c324bd7e5ac65&crc=4091269084&en=zgefxirc&end=1 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive Content-Length: 832 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onlinebanking.mtb.com/Login/LoginHelp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; TSba0bc889027=0856addebbab2000960c032f97ab0a53871ea33a518f53bd553274d2c53f5ba65a095621a3f4efd90811ea1c881130007a7b2f09aac9ca31e5bd056d836537b03a634ca0b8fe45621e74648b209f36bd31e629222ac5ea9d401f055d50e7cac9; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf509d0008f97aa1a4e8c7c8f128e314aa8b7710a410e89400dd4bb27c7aae7141ce59440e5735300d2d24c7df2540e7b2dd8d52a7c9c1ad01f1fc6728be86de4ad26211028791386d66f93ed01a10746fd242048b6b12da8071c8ba0bc6818a63e0e059c3f9c55546292c81cf0c0a90265e8ef6f1e550868441afae37cd9b33f2947febbc2fea0b2331dad13ed433be4f7e2830136a443ca0cc2d6e75f5b860e3385836b608793c83d3c189208f09db84764797c53973439a4f1fedc5f72977454f4ce5b450a2bed8a5235efaf34516dfaa3e27a; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b242190a3fdfd7654cb892c1310b61e0147d82c5f80da2ac49c4eafa9553f9a43651ef1de954d42f6a58a4bdd0abdb2ea688
2024-03-14 00:57:12 UTC	832	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 31 30 33 37 37 38 31 39 34 35 39 25 37 43 30 25 37 43 64 6e 25 37 43 2d 31 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 32 25 37 43 53 63 72 69 70 74 25 32 30 65 72 72 6f 72 2e 25 37 43 5f 65 72 72 6f 72 5f 25 37 43 2d 25 37 43 31 37 31 30 33 37 37 38 32 32 35 30 35 25 37 43 31 37 31 30 33 37 37 38 32 32 35 30 35 25 37 43 64 6e 25 37 43 2d 31 25 32 43 33 25 37 43 33 25 37 43 45 72 72 6f 72 25 37 43 5f 74 79 70 65 5f 25 37 43 2d 25 37 43 31 37 31 30 33 37 37 38 32 32 35 30 37 25 37 43 31 37 31 30 33 37 37 38 32 32 35 30 37 25 37 43 64 6e 25 37 43 2d 31 25 32 43 33 25 37 43 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1710377819459%7C0%7Cdn%7C-1%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%2C2%7C2%7CScript%20error.%7C_error_%7C-%7C1710377822505%7C1710377822505%7Cdn%7C-1%2C3%7C3%7CError%7C_type_%7C-%7C1710377822507%7C1710377822507%7Cdn%7C-1%2C3%7C
2024-03-14 00:57:12 UTC	844	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 X-SRV: B-OLB-227 P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT' X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Access-Control-Allow-Origin: https://digitalbanking.mtb.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST,GET,OPTIONS Date: Thu, 14 Mar 2024 00:57:12 GMT Content-Length: 121 Set-Cookie: TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TSba0bc889027=0856addebbab2000ccc985d13ffc3a8cee951d7fdf77cede6299c118cb96f9e6b5cc8c0574ea1c5508c3dc4e0c113000814759e73939621bc83086bf5b22be3b745e3acfc2612b3568df2b61e86ce684fa6f7d2878f7b31627c859ba10050c2c; Path=/
2024-03-14 00:57:12 UTC	121	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 67 68 6a 71 72 75 78 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 31 37 32 36 38 34 30 38 36 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfghjqrux\|version=\|buildNumber=10285240307101407\|lastModification=1710172684086

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50001	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:12 UTC	721	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377830067&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=1041&N=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 123 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:12 UTC	123	OUT	Data Raw: 78 01 1d 4c 4b 0a c3 20 14 bc cb ac 25 9a 44 aa bc 43 b4 05 bb 2b d9 c4 4a b3 a8 5a d4 40 20 e4 ee 7d cd 66 98 ff 8e 0d f4 dc 11 41 b8 df dc 03 02 2b d3 a5 b5 6f 25 29 f3 5c bb 1a de 25 84 e4 f3 67 8d a9 f3 39 ca 98 13 f7 3c 68 50 4a a0 82 7a 3b 5a 01 07 62 59 4e 6c 7f d7 f4 6a 34 c6 0e 5a a0 f1 e9 b6 14 9e 55 a6 e7 ee 05 d2 5a 71 e6 ae dc bd 1c d3 f1 03 31 a0 26 16 Data Ascii: xLK %DC+JZ@ }fA+o%)\%g9<hPJz;ZbYNlj4ZUZq1&
2024-03-14 00:57:12 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:12 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50006	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:12 UTC	3798	OUT	GET /TSPD/0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14?type=13 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS5075d88f071=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14:087392baf504a800ca7cfb090ffa2d61c465d276e864737563fe1fa355e51564adfaa6681290605687471ce298dc92eefd331a0dfbf083dea943b01823e02a0fb30ef230c05a16128ba8d664d3e5e3c487785641921ad448569b73790d588becf0756260e8db733f2291d38f75bac56ba4e1c5ab06b6fef2d71c3c097afe8c7b17b086b2613a094177dd98dbd897a1f6142333c248cc9fee4571385fabf3a813ee15366c67ac2cf06426113508e6d354; utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; TSba0bc889027=0856addebbab2000960c032f97ab0a53871ea33a518f53bd553274d2c53f5ba65a095621a3f4efd90811ea1c881130007a7b2f09aac9ca31e5bd056d836537b03a634ca0b8fe45621e74648b209f36bd31e629222ac5ea9d401f055d50e7cac9; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=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; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b242190a3fdfd7654cb892c1310b61e0147d82c5f80da2ac49c4eafa9553f9a43651ef1de954d42f6a58a4bdd0abdb2ea688

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50005	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:12 UTC	508	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377828527&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1833&N=16&P=3 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:12 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:12 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50007	52.141.217.134	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:12 UTC	385	OUT	GET /client/v3.1/web/wup?cid=mufasa HTTP/1.1 Host: wup-5d65a0ab.us.v2.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:12 UTC	273	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 14 Mar 2024 00:57:11 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 87d9bcbf-4984-4d63-bd19-e93c7c18da70
2024-03-14 00:57:12 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50008	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:13 UTC	507	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377830067&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=1041&N=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:13 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:13 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50009	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:13 UTC	3781	OUT	GET /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&bp=3&app=893c324bd7e5ac65&crc=4091269084&en=zgefxirc&end=1 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main__se=1%3Bexp-session; utag_main__ss=1%3Bexp-session; utag_main__st=1710379594109%3Bexp-session; utag_main_ses_id=1710377794109%3Bexp-session; utag_main__pn=1%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtPC=4$377821888_974h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; rxvt=1710379622511\|1710377821892; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=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; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b242190a3fdfd7654cb892c1310b61e0147d82c5f80da2ac49c4eafa9553f9a43651ef1de954d42f6a58a4bdd0abdb2ea688; TSPD_101=0856addebbab2800c2bcdec9e4cb1a368a55732bf354f598a089fd2b30ee21984312588d68337f599568958edcd7d25e087912d78805180058981c14cfc18d6215a159c28c1aef84ff1e5c1414b3890f; TSba0bc889027=0856addebbab2000ccc985d13ffc3a8cee951d7fdf77cede6299c118cb96f9e6b5cc8c0574ea1c5508c3dc4e0c113000814759e73939621bc83086bf5b22be3b745e3acfc2612b3568df2b61e86ce684fa6f7d2878f7b31627c859ba10050c2c
2024-03-14 00:57:13 UTC	992	IN	HTTP/1.1 200 OK X-SRV: B-OLB-227 P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT' X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Access-Control-Allow-Origin: https://digitalbanking.mtb.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST,GET,OPTIONS Date: Thu, 14 Mar 2024 00:57:12 GMT Content-Length: 6 Set-Cookie: TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TSPD_101=0856addebbab28008a357d933abb3f8f3533bae03e725db219f09d6369d774922e240476d43f16e0ea5747418e1ea555087ba6c53205180049a6bcdc37ebec3bee757dcfe761509665cb42d8d2431f12; Path=/ Set-Cookie: TSba0bc889027=0856addebbab200093b6aa1d2ce592e0153c879ba3e388e6ae1c222f73b386cbf206f79cfd7d9d5208d04bfd50113000952151cd6af84a95f8e1aef117a261282e021156a09d7512f8b3348e35ba8c6d94b416148caa7e7034664b4f3bf66e3f; Path=/
2024-03-14 00:57:13 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50010	52.238.253.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:14 UTC	600	OUT	POST /api/v1/sendLogs?cid=mufasa&cdsnum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642&csid=null&ds=js&sdkVer=2.29.0.1447.ac027e4 HTTP/1.1 Host: log-5d65a0ab.us.v2.we-stats.com Connection: keep-alive Content-Length: 232 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:14 UTC	232	OUT	Data Raw: 6c 63 2f 42 44 63 49 77 44 49 58 68 53 59 41 73 41 44 52 70 51 6d 4b 75 4d 41 59 58 32 34 32 68 55 74 71 69 70 6d 55 43 4e 6d 41 44 45 48 75 77 42 74 74 51 69 51 45 51 31 33 66 34 50 37 33 62 39 64 48 6b 34 2f 75 77 36 37 75 63 31 62 35 72 73 47 36 56 52 42 7a 47 50 71 71 6c 71 72 37 44 61 52 6a 4f 65 62 74 65 36 78 56 36 51 41 4c 48 32 67 56 41 58 55 70 41 79 30 67 62 62 59 69 39 46 68 43 2f 34 71 35 52 64 56 5a 6a 69 78 65 73 45 31 4b 4b 6a 37 46 50 72 32 65 4b 6c 35 6a 6d 39 39 7a 4f 2f 69 54 4a 46 68 73 77 67 4a 4f 44 44 46 53 41 45 32 30 73 42 30 32 56 73 44 67 76 76 38 6e 35 6e 2b 51 55 4c 31 30 49 44 72 53 5a 6a 70 62 6b 73 52 4b 44 48 41 4d 77 6c 53 44 57 2f 69 59 58 48 77 3d 3d Data Ascii: lc/BDcIwDIXhSYAsADRpQmKuMAYX242hUtqipmUCNmADEHuwBttQiQEQ13f4P73b9dHk4/uw67uc1b5rsG6VRBzGPqqlqr7DaRjOebte6xV6QALH2gVAXUpAy0gbbYi9FhC/4q5RdVZjixesE1KKj7FPr2eKl5jm99zO/iTJFhswgJODDFSAE20sB02VsDgvv8n5n+QUL10IDrSZjpbksRKDHAMwlSDW/iYXHw==
2024-03-14 00:57:14 UTC	170	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Date: Thu, 14 Mar 2024 00:57:14 GMT access-control-allow-origin: * access-control-allow-credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50013	18.164.116.55	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:15 UTC	581	OUT	GET /utag/mtbank/olb-legacy/prod/utag.8.js?utv=ut4.51.202212232259 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:15 UTC	606	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11791 Connection: close Date: Thu, 14 Mar 2024 00:57:16 GMT Last-Modified: Thu, 16 Nov 2023 22:10:37 GMT ETag: "059d82ec7480e5b4097c28ae7ea4da81" x-amz-server-side-encryption: AES256 x-amz-version-id: SWMFvc6K5khzFdTRN_FmEZr6BxUDiF90 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7edae070a6a25cc68c970c1111701a20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: EQe8EttaDPf3rr8Lb28HcJmv7q2spQyyxDzep3sVVvmQwi3bFOzLLg== Cache-Control: max-age=1296000
2024-03-14 00:57:15 UTC	1478	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 38 20 75 74 34 2e 30 2e 32 30 32 33 31 31 31 36 32 32 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 67 2e 76 Data Ascii: //tealium universal tag - utag.8 ut4.0.202311162210, Copyright 2023 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cfg.v
2024-03-14 00:57:15 UTC	10313	IN	Data Raw: 65 4f 66 3b 7d 0a 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 2c 22 6c 69 6e 6b 22 3a 31 7d 3b 75 2e 74 6f 42 6f 6f 6c 65 61 6e 3d 66 75 6e 63 74 69 6f 6e 28 76 61 6c 29 7b 76 61 6c 3d 76 61 6c 7c 7c 22 22 3b 72 65 74 75 72 6e 20 76 61 6c 3d 3d 3d 74 72 75 65 7c 7c 76 61 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 22 74 72 75 65 22 7c 7c 76 61 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 22 6f 6e 22 3b 7d 3b 75 2e 63 6c 65 61 72 45 6d 70 74 79 4b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 62 6a 65 63 74 29 7b 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 6f 62 6a 65 63 74 29 7b 69 66 28 6f 62 6a 65 63 74 5b 6b 65 79 5d 3d 3d 3d 22 22 7c 7c 6f 62 6a 65 63 74 5b 6b 65 79 5d 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 64 65 6c 65 74 65 20 6f 62 Data Ascii: eOf;}u.ev={"view":1,"link":1};u.toBoolean=function(val){val=val\|\|"";return val===true\|\|val.toLowerCase()==="true"\|\|val.toLowerCase()==="on";};u.clearEmptyKeys=function(object){for(var key in object){if(object[key]===""\|\|object[key]===undefined){delete ob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50012	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:15 UTC	4352	OUT	GET /TSPD/?type=22 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Security-Request: required x-dtpc: 4$377821888_974h7vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onlinebanking.mtb.com/Login/LoginHelp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS5075d88f071=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14:087392baf504a800ca7cfb090ffa2d61c465d276e864737563fe1fa355e51564adfaa6681290605687471ce298dc92eefd331a0dfbf083dea943b01823e02a0fb30ef230c05a16128ba8d664d3e5e3c487785641921ad448569b73790d588becf0756260e8db733f2291d38f75bac56ba4e1c5ab06b6fef2d71c3c097afe8c7b17b086b2613a094177dd98dbd897a1f6142333c248cc9fee4571385fabf3a813ee15366c67ac2cf06426113508e6d354; utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf509d0008f97aa1a4e8c7c8f128e314aa8b7710a410e89400dd4bb27c7aae7141ce59440e5735300d2d24c7df2540e7b2dd8d52a7c9c1ad01f1fc6728be86de4ad26211028791386d66f93ed01a10746fd242048b6b12da8071c8ba0bc6818a63e0e059c3f9c55546292c81cf0c0a90265e8ef6f1e550868441afae37cd9b33f2947febbc2fea0b2331dad13ed433be4f7e2830136a443ca0cc2d6e75f5b860e3385836b608793c83d3c189208f09db84764797c53973439a4f1fedc5f72977454f4ce5b450a2bed8a5235efaf34516dfaa3e27a; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b242190a3fdfd7654cb892c1310b61e0147d82c5f80da2ac49c4eafa9553f9a43651ef1de954d42f6a58a4bdd0abdb2ea688; TSPD_101=0856addebbab28008a357d933abb3f8f3533bae03e725db219f09d6369d774922e240476d43f16e0ea5747418e1ea555087ba6c53205180049a6bcdc37ebec3bee757dcfe761509665cb42d8d2431f12; TSba0bc889027=0856addebbab200093b6aa1d2ce592e0153c879ba3e388e6ae1c222f73b386cbf206f79cfd7d9d5208d04bfd50113000952151cd6af84a95f8e1aef117a261282e021156a09d7512f8b3348e35ba8c6d94b416148caa7e7034664b4f3bf66e3f; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; TS5075d88f077=0856addebbab2800376acecbbdd1aea74cc8ad1814ec26cb456e8f086969e0c442af5978690f37185fc3af6696d979d8081543aadf172000032773c6378b4d1a5e8afd9fe6d6b7949bf3d0100d34ee0cde124aaa86aad530; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h7vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:15 UTC	373	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Content-Type: text/html Content-Length: 0 Connection: close Set-Cookie: TSba0bc889027=0856addebbab2000a61a6f14091b3a06fc56cbfe9066214ccf6f7d88cff45b907f8aca9d19dd0c430893b95f45113000eaa84ed3e250df3af96a14687db0ae1958583693253030687f9422c63a240f681faa8f1b0463ab52a959595cd8aaeb81; Path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50015	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:15 UTC	2047	OUT	GET /Documents/html/homepage/favicon.ico HTTP/1.1 Host: asset.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h7vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:15 UTC	791	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 15822 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 04 May 2022 18:18:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1 X-Frame-Options: SAMEORIGIN X-Vhost: publish Date: Thu, 14 Mar 2024 00:11:27 GMT Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" ETag: "3dce-5de33a8b9cac0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c1685d59e35fdb859ab8a1f97feb5652.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: BPtlT7FHJ2XXhxsojtXgs4Zr20mLkARnuFhHVdbMdree7BHER4tPPg== Age: 2795 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:15 UTC	15593	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 02 00 00 00 f6 1f 19 22 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR,,"tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-03-14 00:57:15 UTC	229	IN	Data Raw: 24 21 02 81 40 12 22 10 48 42 04 02 81 24 44 20 90 84 08 04 02 49 88 40 20 09 11 08 04 92 10 81 40 12 22 10 08 24 21 02 81 24 44 20 10 48 42 04 02 49 88 40 20 90 84 08 04 92 10 81 40 20 09 11 08 24 21 02 81 40 12 22 10 48 42 04 02 49 88 40 20 90 84 08 04 92 10 81 40 20 09 11 08 24 21 02 81 40 12 22 10 48 42 04 02 81 24 44 20 90 84 08 04 02 49 88 40 20 09 11 08 04 92 10 81 40 12 22 10 08 24 21 02 81 24 44 20 10 48 42 04 02 49 88 40 20 90 84 08 04 92 10 81 40 20 09 11 08 24 21 02 81 40 12 22 10 48 42 04 02 81 24 44 20 90 84 08 04 02 49 88 40 20 09 11 08 04 92 10 81 40 12 22 10 08 24 21 02 81 24 44 20 10 01 e3 ff 05 18 00 8d 08 d9 ef 26 a3 d0 cf 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: $!@"HB$D I@ @"$!$D HBI@ @ $!@"HBI@ @ $!@"HB$D I@ @"$!$D HBI@ @ $!@"HB$D I@ @"$!$D &IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50014	172.67.20.158	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:15 UTC	609	OUT	GET /qscripts/quantum-mtb.js HTTP/1.1 Host: cdn.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"171035041707217096569823831710316802438"
2024-03-14 00:57:15 UTC	569	IN	HTTP/1.1 304 Not Modified Date: Thu, 14 Mar 2024 00:57:15 GMT Connection: close vary: Accept-Encoding etag: W/"171035041707217096569823831710316802438" Cache-Control: public, max-age=300, stale-while-revalidate=21600, stale-if-error=21600 access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept x-content-type-options: no-sniff strict-transport-security: max-age=31536000 x-robots-tag: noindex CF-Cache-Status: HIT Age: 4 Server: cloudflare CF-RAY: 86404f005e7ac413-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50016	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:15 UTC	722	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377833947&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1968&N=17&P=4 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 122 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:15 UTC	122	OUT	Data Raw: 78 01 1d 8c 4d 0e c2 20 14 84 ef 32 6b 52 a0 ad 01 de 21 d4 04 77 c6 8d 48 ec 42 a0 01 9a 98 18 ef ee ab bb f9 e6 ef fa 41 02 e1 7c f2 17 08 6c 2c 97 de d7 46 52 96 7b 1b 5a 7c d6 18 73 28 af 2d e5 21 94 24 53 c9 dc 0b a0 51 29 81 06 d2 76 b2 02 1e c4 58 41 b3 d3 02 7d f7 8d 56 93 31 76 74 cc 7c fb 5e 2a 0f 1b cb ff f2 01 3a cc 8e 33 7f dc bb df db 0f 8c 08 24 ab Data Ascii: xM 2kR!wHBA\|l,FR{Z\|s(-!$SQ)vXA}V1vt\|^*:3$
2024-03-14 00:57:15 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:15 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50018	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:15 UTC	4065	OUT	GET /TSPD/?type=22 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS5075d88f071=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14:087392baf504a800ca7cfb090ffa2d61c465d276e864737563fe1fa355e51564adfaa6681290605687471ce298dc92eefd331a0dfbf083dea943b01823e02a0fb30ef230c05a16128ba8d664d3e5e3c487785641921ad448569b73790d588becf0756260e8db733f2291d38f75bac56ba4e1c5ab06b6fef2d71c3c097afe8c7b17b086b2613a094177dd98dbd897a1f6142333c248cc9fee4571385fabf3a813ee15366c67ac2cf06426113508e6d354; utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=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; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b242190a3fdfd7654cb892c1310b61e0147d82c5f80da2ac49c4eafa9553f9a43651ef1de954d42f6a58a4bdd0abdb2ea688; TSPD_101=0856addebbab28008a357d933abb3f8f3533bae03e725db219f09d6369d774922e240476d43f16e0ea5747418e1ea555087ba6c53205180049a6bcdc37ebec3bee757dcfe761509665cb42d8d2431f12; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; TS5075d88f077=0856addebbab2800376acecbbdd1aea74cc8ad1814ec26cb456e8f086969e0c442af5978690f37185fc3af6696d979d8081543aadf172000032773c6378b4d1a5e8afd9fe6d6b7949bf3d0100d34ee0cde124aaa86aad530; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h7vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TSba0bc889027=0856addebbab2000a61a6f14091b3a06fc56cbfe9066214ccf6f7d88cff45b907f8aca9d19dd0c430893b95f45113000eaa84ed3e250df3af96a14687db0ae1958583693253030687f9422c63a240f681faa8f1b0463ab52a959595cd8aaeb81
2024-03-14 00:57:15 UTC	373	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Content-Type: text/html Content-Length: 0 Connection: close Set-Cookie: TSba0bc889027=0856addebbab2000ae29d17cd02f1d71bc506cd3cf2586d5d259fff543d890a6c98f443c9fbac0cf08319a21a4113000c8aa9f5cd662e954f96a14687db0ae1958583693253030687f9422c63a240f681faa8f1b0463ab52a959595cd8aaeb81; Path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50019	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:16 UTC	752	OUT	POST /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377834432&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&S=0&N=0&P=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 792 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:16 UTC	792	OUT	Data Raw: 78 01 85 54 db 6e ab 46 14 fd 15 6b 1e 2a 55 21 81 19 18 6e d2 79 f0 25 36 8e ed f8 86 63 9f 54 d5 11 86 31 60 ae 06 0c 31 69 fe bd 7b 82 5c 55 7d e9 0b 2c f6 ac 7d 5d 7b f8 e3 13 55 c8 44 25 12 d0 07 32 31 d1 25 01 dd 00 48 44 11 50 73 b7 04 c8 34 24 4d 40 2e 50 81 f9 3b bc 5c e2 e8 d4 75 3c 2c 31 45 c1 ae e4 9e 34 87 c8 98 1c 89 47 c9 c9 51 80 56 f2 38 54 d6 05 94 f3 1c 16 8b f3 5e 13 56 41 6f 57 b2 62 ea f5 b2 a2 b7 72 ca d2 cd 3c d6 fb ab b7 f8 cd ee 0d 9c 34 02 c7 6b 11 03 3f a8 aa bc 34 45 31 4b e3 30 65 47 38 0a 53 ff 29 a9 8e 4f 6e 96 88 f3 cc 0f d3 ee c9 03 83 97 cb c0 49 f1 39 f2 90 c9 ab 2d 90 49 28 34 c4 62 28 45 83 3a 5a 64 9e 9c b8 64 02 ca 90 09 07 39 32 3f 91 83 4c 99 ca 02 3a 22 53 25 40 82 26 b1 42 78 ff 10 86 4a df 01 38 50 b1 80 4e 77 Data Ascii: xTnFk*U!ny%6cT1`1i{\U},}]{UD%21%HDPs4$M@.P;\u<,1E4GQV8T^VAoWbr<4k?4E1K0eG8S)OnI9-I(4b(E:Zdd92?L:"S%@&BxJ8PNw
2024-03-14 00:57:16 UTC	972	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:16 GMT Content-Type: application/json Content-Length: 90 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: https://onlinebanking.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex
2024-03-14 00:57:16 UTC	90	IN	Data Raw: 31 31 65 38 36 31 62 39 39 34 32 36 38 32 66 61 61 32 63 36 37 32 64 32 65 33 61 36 31 30 62 66 2f 30 38 39 31 35 63 33 35 33 36 31 62 36 66 65 62 38 36 63 62 66 64 34 36 37 32 34 61 38 36 38 39 2f 36 35 64 35 35 39 35 66 62 39 31 30 36 61 63 63 66 65 62 38 63 65 63 66 Data Ascii: 11e861b9942682faa2c672d2e3a610bf/08915c35361b6feb86cbfd46724a8689/65d5595fb9106accfeb8cecf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50020	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:16 UTC	749	OUT	POST /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377834434&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=c2a85cad10e441c0cf7a2312b2d52fa4 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 2016 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:16 UTC	2016	OUT	Data Raw: 78 01 d5 1a 69 6f db 38 f6 af 68 fc 61 3f 0c c2 d8 4d 77 80 4e da 74 90 26 e9 c6 3b 49 93 6d 9c c1 16 d3 85 c1 48 b4 c5 46 d7 4a b4 1b cf f1 df f7 3d 52 a4 68 8a b6 65 c7 05 66 0d 43 94 c8 a7 77 1f 3c f4 e6 bb f3 9b b3 d1 a7 db 8b 20 16 69 f2 f6 4d 7d 65 34 7a fb a6 1f cb e6 21 8f 16 6f df 7c 47 c8 bf ae ff 79 77 f3 e1 72 74 7d 75 fc 7b ef 45 0f 2e 59 ef b8 87 cf bd 83 1e ed 1d ff fa 7b ef 48 f7 26 34 9b 42 ef 1c 00 58 d6 fb f3 cf 03 6b 2c 4c 68 55 d5 83 e3 71 25 78 f8 b8 20 93 3c 17 ac 0c 9c 67 42 12 9e 3d 56 80 e0 3f 07 bd 33 49 a2 21 7c 71 7a 5e 13 36 83 2f 91 3e 12 fd 5c 13 35 d0 77 67 1f 87 b7 23 0d 2f 19 5a 31 a6 09 19 5c 01 92 97 6f 98 ae cf d9 33 08 6c 89 6a 7f fc 74 67 ff 1b d1 0c e0 a7 9c c1 e8 7e 34 1c 5d 5d 68 b3 b4 c8 5e b2 a4 08 be 72 11 07 Data Ascii: xio8ha?MwNt&;ImHFJ=RhefCw< iM}e4z!o\|Gywrt}u{E.Y{H&4BXk,LhUq%x <gB=V?3I!\|qz^6/>\5wg#/Z1\o3ljtg~4]]h^r
2024-03-14 00:57:16 UTC	948	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:16 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://onlinebanking.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50022	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:16 UTC	508	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377833947&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1968&N=17&P=4 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:16 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:16 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50021	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:16 UTC	721	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377834632&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=1182&N=3 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 126 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:16 UTC	126	OUT	Data Raw: 78 01 1d 8c 4d 0e c2 20 14 84 ef 32 6b 52 a0 ad 01 de 21 d4 04 77 c6 8d 48 ec 42 c0 40 9b 34 69 7a 77 5f dd cd 37 7f 1b 56 d0 7d 43 02 e1 7a f1 37 08 2c 2c a7 79 fe 36 92 b2 3c 5b d7 e2 bb c6 98 43 f9 2c 29 77 a1 24 99 4a e6 5e 00 f5 4a 09 34 90 b6 83 15 f0 20 c6 0a 1a 9d 16 98 0f df 68 35 18 63 7b c7 cc b7 eb 54 79 d8 58 fe 97 2f d0 69 74 9c f9 f3 d1 dd 1f fb 0f 7d 03 26 99 Data Ascii: xM 2kR!wHB@4izw_7V}Cz7,,y6<[C,)w$J^J4 h5c{TyX/it}&
2024-03-14 00:57:16 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:16 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50023	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:16 UTC	779	OUT	POST /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377835114&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 529 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:16 UTC	529	OUT	Data Raw: 78 01 95 92 4b 8f a2 50 10 85 ff 0a b9 8b d9 c8 b4 f7 c1 e5 95 f4 42 45 c0 f6 81 02 0a dd 93 59 20 d0 80 3c 44 51 50 1c ff fb 30 dd 9d 49 a6 93 5e cc ea a6 72 eb 3b 75 ea a4 6e 20 4c c3 2b 90 6f 1f 2f a8 b1 9c 43 cb f1 a3 8c 12 25 b7 d7 f3 c9 26 1e c6 b8 dd b5 96 f9 54 54 70 36 6c 2f c1 eb ae 3f 3a ae a6 de 73 6c d2 49 c2 ab d5 22 73 17 db ba 40 57 92 5d db e5 72 9f ef 4b 75 94 f8 42 a3 97 66 24 09 a3 29 6d f9 91 7f 35 67 b5 72 88 53 e5 a4 f9 89 20 a4 90 0c ce 61 19 3f f5 a3 9e 90 95 33 b7 25 b4 b2 95 b5 96 2a fc b5 58 8f 2f fd 60 b6 e3 36 c5 7c 6d 62 b5 d8 e8 b3 d3 34 16 48 da 60 d4 ea f8 b0 d7 6b 87 54 4f d9 60 d5 23 e3 e7 1c f5 ca 17 71 e5 07 a7 76 18 8d 7a cd ea b8 5e 42 dd b8 5a cb a3 db 98 bc a7 eb ae 3d 71 71 c4 3b e2 d4 3e 59 13 b3 d6 28 56 e9 61 Data Ascii: xKPBEY <DQP0I^r;un L+o/C%&TTp6l/?:slI"s@W]rKuBf$)m5grS a?3%*X/`6\|mb4H`kTO`#qvz^BZ=qq;>Y(Va
2024-03-14 00:57:16 UTC	948	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:16 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://onlinebanking.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50024	52.141.217.134	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:16 UTC	493	OUT	POST /client/v3.1/web/wup?cid=mufasa HTTP/1.1 Host: wup-5d65a0ab.us.v2.we-stats.com Connection: keep-alive Content-Length: 3698 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:16 UTC	3698	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 31 30 33 37 37 38 32 36 33 36 38 2d 73 6a 6e 30 30 30 30 33 30 37 2d 31 34 39 66 30 39 37 64 2d 38 38 32 31 2d 34 33 31 31 2d 38 36 63 36 2d 31 32 63 62 61 36 36 38 61 36 34 32 22 2c 22 63 73 69 64 22 3a 6e 75 6c 6c 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 31 30 33 37 37 38 32 34 34 39 39 2d 32 31 33 42 43 38 45 30 2d 44 36 41 34 2d 34 46 46 35 2d 38 41 35 33 2d 43 46 46 31 44 45 43 44 35 42 30 35 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 63 64 5f 61 75 74 6f 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 32 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 38 6b 74 6f 5f 39 4b 48 51 35 63 66 55 45 48 37 72 44 58 68 33 66 65 30 31 58 62 6f 78 61 72 4d 36 Data Ascii: {"ds":"js","cdsnum":"1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642","csid":null,"psid":null,"muid":"1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05","context_name":"cd_auto","requestId":2,"sts":"gAAAAABl8kto_9KHQ5cfUEH7rDXh3fe01XboxarM6
2024-03-14 00:57:17 UTC	317	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 626 Connection: close date: Thu, 14 Mar 2024 00:57:16 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: 48319cf4-1a52-4da2-b350-c10ca2b5cab8
2024-03-14 00:57:17 UTC	626	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 38 6b 74 74 6b 6b 4a 39 34 48 41 34 38 48 36 59 5f 36 63 69 4f 6d 62 6b 72 58 35 6e 51 75 43 75 37 72 4a 46 4d 78 47 52 54 49 71 44 52 6e 34 41 7a 4e 58 77 39 72 4b 50 64 75 45 33 71 45 4e 57 73 44 66 75 51 76 56 5a 45 68 73 4c 7a 5f 51 76 68 49 34 62 6a 46 62 33 43 35 68 4b 48 78 4f 67 6d 50 31 5a 51 48 56 53 37 65 67 30 57 33 4d 30 35 52 6e 63 36 39 77 53 61 52 4e 7a 2d 47 53 6e 6f 74 4c 56 63 61 56 55 46 4a 45 57 34 53 58 6a 56 65 35 63 37 37 51 6c 53 74 30 4c 2d 66 56 4c 5a 49 6d 6f 4d 69 52 50 34 73 79 76 42 47 6f 46 6c 6b 32 67 78 58 37 49 4e 44 62 53 6a 39 48 68 5a 54 68 38 76 49 65 47 55 59 69 55 6b 32 43 48 42 39 4d 79 6f 31 36 77 46 67 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 38 6b Data Ascii: {"std":"gAAAAABl8kttkkJ94HA48H6Y_6ciOmbkrX5nQuCu7rJFMxGRTIqDRn4AzNXw9rKPduE3qENWsDfuQvVZEhsLz_QvhI4bjFb3C5hKHxOgmP1ZQHVS7eg0W3M05Rnc69wSaRNz-GSnotLVcaVUFJEW4SXjVe5c77QlSt0L-fVLZImoMiRP4syvBGoFlk2gxX7INDbSj9HhZTh8vIeGUYiUk2CHB9Myo16wFg==","sts":"gAAAAABl8k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50027	142.251.40.226	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:16 UTC	1455	OUT	GET /td/rul/990489911?random=1710377835159&cv=11&fst=1710377835159&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&hn=www.googleadservices.com&frm=0&tiba=Help%20with%20UserId%20or%20Passcode%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
2024-03-14 00:57:17 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:57:17 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-14 00:57:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50026	142.251.40.130	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:16 UTC	1311	OUT	GET /pagead/viewthroughconversion/990489911/?random=1710377835159&cv=11&fst=1710377835159&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&hn=www.googleadservices.com&frm=0&tiba=Help%20with%20UserId%20or%20Passcode%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
2024-03-14 00:57:17 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:57:17 UTC	549	IN	Data Raw: 39 30 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 907(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-14 00:57:17 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-14 00:57:17 UTC	517	IN	Data Raw: 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 33 37 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 62 30 76 38 38 32 31 38 37 35 33 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6f 6e 6c 69 6e 65 62 61 6e 6b 69 6e 67 2e 6d 74 62 2e 63 6f 6d 25 32 46 4c 6f 67 69 6e 25 32 46 4c 6f 67 69 6e 48 65 6c 70 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 Data Ascii: 1\x26fst\x3d1710374400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43b0v882187536za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp\x26frm\x3d0\x26tiba\x3
2024-03-14 00:57:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50025	52.238.253.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:16 UTC	599	OUT	POST /api/v1/sendLogs?cid=mufasa&cdsnum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642&csid=null&ds=js&sdkVer=2.29.0.1447.ac027e4 HTTP/1.1 Host: log-5d65a0ab.us.v2.we-stats.com Connection: keep-alive Content-Length: 64 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:16 UTC	64	OUT	Data Raw: 6d 39 53 38 4a 4c 38 6f 4d 33 31 4a 62 6d 4a 6d 33 70 4b 38 78 4e 7a 55 54 53 56 36 4a 5a 6d 35 71 53 47 5a 4f 54 6b 42 69 65 6d 70 50 76 6d 4a 4b 59 76 4c 45 6e 50 4f 6d 69 38 6b 58 69 55 41 Data Ascii: m9S8JL8oM31JbmJm3pK8xNzUTSV6JZm5qSGZOTkBiempPvmJKYvLEnPOmi8kXiUA
2024-03-14 00:57:17 UTC	170	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Date: Thu, 14 Mar 2024 00:57:17 GMT access-control-allow-origin: * access-control-allow-credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50029	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:16 UTC	529	OUT	GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377834432&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&S=0&N=0&P=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:17 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:17 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50028	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:16 UTC	525	OUT	GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377834434&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=c2a85cad10e441c0cf7a2312b2d52fa4 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:17 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:17 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50030	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:17 UTC	507	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377834632&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=1182&N=3 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:17 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:17 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50031	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:17 UTC	747	OUT	POST /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377835775&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1169&N=5&P=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 204 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:17 UTC	204	OUT	Data Raw: 78 01 6d 90 3f 0f 82 30 14 c4 bf 0a b9 b9 03 6d 81 c4 c6 45 c5 44 16 31 e2 a0 21 0c 26 2e 1a 20 0e e0 9f 90 7e 77 5f 5b 81 18 9c da f4 7e 77 bd f7 f2 0e 0d 14 ce 60 b8 d3 39 df ac 17 31 dd af 50 9c e1 06 95 77 e0 50 1d 6a 12 b3 d5 3e d9 1d 48 3d d3 7b a1 75 c1 70 b1 5c b6 85 0a 35 73 51 55 43 c4 c3 78 5a 28 11 fa 91 76 d8 54 27 68 d4 fd 41 27 fb 0b 2a 12 82 e1 0d 15 f0 c8 f9 79 0f 1c 09 48 4c d7 65 1a 9f bc f0 8b 4b df e1 22 b0 78 40 df ba 3e e9 2f ee 49 8f 7b fc bf 69 d2 41 52 98 e9 20 66 36 34 92 7d 68 d5 07 90 60 00 29 5d 49 31 46 0c 6b 78 9a 31 cd 34 34 55 dd 96 a5 75 10 67 97 e7 eb e2 03 75 42 5d bb Data Ascii: xm?0mED1!&. ~w_[~w`91PwPj>H={up\5sQUCxZ(vT'hA'*yHLeK"x@>/I{iAR f64}h`)]I1Fkx144UuguB]
2024-03-14 00:57:17 UTC	948	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:17 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://onlinebanking.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50032	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:17 UTC	556	OUT	GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377835114&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:17 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:17 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50033	52.141.217.134	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:17 UTC	385	OUT	GET /client/v3.1/web/wup?cid=mufasa HTTP/1.1 Host: wup-5d65a0ab.us.v2.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:17 UTC	273	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 14 Mar 2024 00:57:16 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 0fece1b2-688d-4165-bdf0-ec9056d1b9c2
2024-03-14 00:57:17 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50034	142.250.80.100	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:17 UTC	1307	OUT	GET /pagead/1p-user-list/990489911/?random=1710377835159&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&frm=0&tiba=Help%20with%20UserId%20or%20Passcode%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqXxzSwY80AGtf901wcKZG14Qd5_fn8aObE7ImkdqPOLoFoYNA&random=3783927305&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://onlinebanking.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:17 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50035	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:17 UTC	4266	OUT	POST /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&bp=3&app=893c324bd7e5ac65&crc=88002536&en=zgefxirc&end=1 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive Content-Length: 2323 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onlinebanking.mtb.com/Login/LoginHelp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=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; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b242190a3fdfd7654cb892c1310b61e0147d82c5f80da2ac49c4eafa9553f9a43651ef1de954d42f6a58a4bdd0abdb2ea688; TSPD_101=0856addebbab28008a357d933abb3f8f3533bae03e725db219f09d6369d774922e240476d43f16e0ea5747418e1ea555087ba6c53205180049a6bcdc37ebec3bee757dcfe761509665cb42d8d2431f12; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS5075d88f077=0856addebbab2800376acecbbdd1aea74cc8ad1814ec26cb456e8f086969e0c442af5978690f37185fc3af6696d979d8081543aadf172000de7c48e1ffd49a935e8afd9fe6d6b794090b38eafd2530ab446a8bf96d8375db; TSba0bc889027=0856addebbab2000ae29d17cd02f1d71bc506cd3cf2586d5d259fff543d890a6c98f443c9fbac0cf08319a21a4113000c8aa9f5cd662e954f96a14687db0ae1958583693253030687f9422c63a240f681faa8f1b0463ab52a959595cd8aaeb81
2024-03-14 00:57:17 UTC	2323	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 31 30 33 37 37 38 31 39 34 35 39 25 37 43 31 37 31 30 33 37 37 38 33 34 31 35 36 25 37 43 64 6e 25 37 43 37 39 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 38 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 31 30 33 37 37 38 31 39 34 35 39 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 32 34 35 30 25 35 45 70 63 25 37 43 56 43 44 25 37 43 32 30 32 33 25 37 43 56 43 44 53 25 37 43 31 25 37 43 56 43 53 25 37 43 31 34 37 35 30 25 37 43 56 43 4f 25 37 43 31 36 37 34 34 25 37 43 56 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1710377819459%7C1710377834156%7Cdn%7C79%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C8%7C_event_%7C1710377819459%7C_vc_%7CV%7C2450%5Epc%7CVCD%7C2023%7CVCDS%7C1%7CVCS%7C14750%7CVCO%7C16744%7CV
2024-03-14 00:57:17 UTC	844	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 X-SRV: B-OLB-227 P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT' X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Access-Control-Allow-Origin: https://digitalbanking.mtb.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST,GET,OPTIONS Date: Thu, 14 Mar 2024 00:57:17 GMT Content-Length: 121 Set-Cookie: TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TSba0bc889027=0856addebbab20005fa40b179c47416310846714170e476c9ec77fe3d277fa308a15b3089e2d5eca0889d30153113000c027c54663752bc193be5d96b0e7ac8c4b5b0c132e1c0aaf2b41a14927ed71d8ee70c135f5de276aecfb44f29ab36ece; Path=/
2024-03-14 00:57:17 UTC	121	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 67 68 6a 71 72 75 78 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 31 37 32 36 38 34 30 38 36 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfghjqrux\|version=\|buildNumber=10285240307101407\|lastModification=1710172684086

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50037	34.66.3.160	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:17 UTC	490	OUT	OPTIONS /mtb/hash-check HTTP/1.1 Host: rl.quantummetric.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://onlinebanking.mtb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:18 UTC	424	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:18 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: * Access-Control-Allow-Origin: https://onlinebanking.mtb.com Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50038	142.251.40.132	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:17 UTC	1066	OUT	GET /pagead/1p-user-list/990489911/?random=1710377835159&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&frm=0&tiba=Help%20with%20UserId%20or%20Passcode%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqXxzSwY80AGtf901wcKZG14Qd5_fn8aObE7ImkdqPOLoFoYNA&random=3783927305&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:18 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50036	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:18 UTC	524	OUT	GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377835775&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1169&N=5&P=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:18 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:18 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50039	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:18 UTC	3971	OUT	GET /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&bp=3&app=893c324bd7e5ac65&crc=88002536&en=zgefxirc&end=1 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf509d0008f97aa1a4e8c7c8f128e314aa8b7710a410e89400dd4bb27c7aae7141ce59440e5735300d2d24c7df2540e7b2dd8d52a7c9c1ad01f1fc6728be86de4ad26211028791386d66f93ed01a10746fd242048b6b12da8071c8ba0bc6818a63e0e059c3f9c55546292c81cf0c0a90265e8ef6f1e550868441afae37cd9b33f2947febbc2fea0b2331dad13ed433be4f7e2830136a443ca0cc2d6e75f5b860e3385836b608793c83d3c189208f09db84764797c53973439a4f1fedc5f72977454f4ce5b450a2bed8a5235efaf34516dfaa3e27a; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b242190a3fdfd7654cb892c1310b61e0147d82c5f80da2ac49c4eafa9553f9a43651ef1de954d42f6a58a4bdd0abdb2ea688; TSPD_101=0856addebbab28008a357d933abb3f8f3533bae03e725db219f09d6369d774922e240476d43f16e0ea5747418e1ea555087ba6c53205180049a6bcdc37ebec3bee757dcfe761509665cb42d8d2431f12; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS5075d88f077=0856addebbab2800376acecbbdd1aea74cc8ad1814ec26cb456e8f086969e0c442af5978690f37185fc3af6696d979d8081543aadf172000de7c48e1ffd49a935e8afd9fe6d6b794090b38eafd2530ab446a8bf96d8375db; TSba0bc889027=0856addebbab20005fa40b179c47416310846714170e476c9ec77fe3d277fa308a15b3089e2d5eca0889d30153113000c027c54663752bc193be5d96b0e7ac8c4b5b0c132e1c0aaf2b41a14927ed71d8ee70c135f5de276aecfb44f29ab36ece
2024-03-14 00:57:18 UTC	801	IN	HTTP/1.1 200 OK X-SRV: B-OLB-227 P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT' X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Access-Control-Allow-Origin: https://digitalbanking.mtb.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST,GET,OPTIONS Date: Thu, 14 Mar 2024 00:57:18 GMT Content-Length: 6 Set-Cookie: TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TSba0bc889027=0856addebbab2000db11172a40a95554103a17068c97a90398b6e52d670cf34c0b844a4649471462082bbf79471130008f08c28cdfeafa0e1442a1bfaf7fa8d6464c7f85300dee88b5bdb04484ba12f3fe797c2ecef6b81cc41df334dbd16ffb; Path=/
2024-03-14 00:57:18 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50041	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:18 UTC	3903	OUT	GET /Enrollment/Enroll HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; TS01e71088028=01fe6ed147e8271b36d1c1eaf89c8808554df4a18c6781db003e99e60a297ce8ddf5f207945f003d8e28439ef5aa4cabb9873caba2; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; TS5075d88f029=0856addebbab2800e14564d3f7d2f26bd8d697a297e7560c5ada9d23b18aa1d9f269927bf33000aaeb1fb04961728fdd; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=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; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b242190a3fdfd7654cb892c1310b61e0147d82c5f80da2ac49c4eafa9553f9a43651ef1de954d42f6a58a4bdd0abdb2ea688; TSPD_101=0856addebbab28008a357d933abb3f8f3533bae03e725db219f09d6369d774922e240476d43f16e0ea5747418e1ea555087ba6c53205180049a6bcdc37ebec3bee757dcfe761509665cb42d8d2431f12; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS5075d88f077=0856addebbab2800376acecbbdd1aea74cc8ad1814ec26cb456e8f086969e0c442af5978690f37185fc3af6696d979d8081543aadf172000de7c48e1ffd49a935e8afd9fe6d6b794090b38eafd2530ab446a8bf96d8375db; TSba0bc889027=0856addebbab20005fa40b179c47416310846714170e476c9ec77fe3d277fa308a15b3089e2d5eca0889d30153113000c027c54663752bc193be5d96b0e7ac8c4b5b0c132e1c0aaf2b41a14927ed71d8ee70c135f5de276aecfb44f29ab36ece
2024-03-14 00:57:19 UTC	1342	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://M.MTB.COM/Enrollment X-SRV: B-OLB-227 P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT' X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Access-Control-Allow-Origin: https://digitalbanking.mtb.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST,GET,OPTIONS X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true Server-Timing: dtSInfo;desc="0", dtRpid;desc="1630163778" Date: Thu, 14 Mar 2024 00:57:18 GMT Content-Length: 1084 Set-Cookie: TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TS01e71088028=01fe6ed1478a46ae7e94834696d866ac4d0ee4121d6781db003e99e60a297ce8ddf5f2079448e6d175203b4fa2be575bbffa8d5587; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TS5075d88f029=0856addebbab2800f9ae826e139056de67dbdb8f17f12eeda36b3cb078567c2d39d1a50430c2893db4d491a90711858c; Max-Age=30; Path=/ Set-Cookie: TSba0bc889027=0856addebbab20000a5036c14ae9e4ed2e5ca9910d4e31e154352c78feeb4860f0bd18b86b3644670886dd432511300006db3d4bcc700ea86caf4d72d15fa29a6a02ff2fdd21245cb5828e0a668009e3cb14584a81591625770d88ff38029671; Path=/
2024-03-14 00:57:19 UTC	1084	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 72 75 78 69 74 61 67 65 6e 74 6a 73 5f 49 43 41 32 4e 56 66 67 68 6a 71 72 75 78 5f 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 2e 6a 73 22 20 64 61 74 61 2d 64 74 63 6f 6e 66 69 67 3d 22 72 69 64 3d 52 49 44 5f 2d 39 31 35 37 35 37 34 35 7c 72 70 69 64 3d 31 36 33 30 31 36 33 37 37 38 7c 64 6f 6d 61 69 6e 3d 6d 74 62 2e 63 6f 6d 7c 72 65 70 6f 72 74 55 72 6c 3d 2f 72 62 5f 65 64 65 61 64 65 65 30 2d 30 31 36 35 2d 34 62 39 65 2d 61 39 31 66 2d 30 30 38 35 31 38 33 61 63 34 65 31 7c 61 70 70 3d 38 39 33 63 33 32 34 62 64 37 Data Ascii: <html><head><title>Object moved</title><script type="text/javascript" src="/ruxitagentjs_ICA2NVfghjqrux_10285240307101407.js" data-dtconfig="rid=RID_-91575745\|rpid=1630163778\|domain=mtb.com\|reportUrl=/rb_edeadee0-0165-4b9e-a91f-0085183ac4e1\|app=893c324bd7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50043	34.66.3.160	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:18 UTC	586	OUT	POST /mtb/hash-check HTTP/1.1 Host: rl.quantummetric.com Connection: keep-alive Content-Length: 16 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:18 UTC	16	OUT	Data Raw: 5b 22 55 35 41 48 6c 59 64 72 64 6b 4d 3d 22 5d Data Ascii: ["U5AHlYdrdkM="]
2024-03-14 00:57:18 UTC	346	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:18 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://onlinebanking.mtb.com Vary: Origin Strict-Transport-Security: max-age=15724800; includeSubDomains Access-Control-Allow-Methods: *
2024-03-14 00:57:18 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50045	34.66.3.160	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:18 UTC	358	OUT	GET /mtb/hash-check HTTP/1.1 Host: rl.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:19 UTC	327	IN	HTTP/1.1 404 Not Found Date: Thu, 14 Mar 2024 00:57:19 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 15 Connection: close Vary: Origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15724800; includeSubDomains Access-Control-Allow-Methods: * Access-Control-Allow-Credentials: true
2024-03-14 00:57:19 UTC	15	IN	Data Raw: 68 61 73 68 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: hash not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50046	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:19 UTC	2077	OUT	GET /Enrollment HTTP/1.1 Host: m.mtb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_rcs-3Acss_0; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:19 UTC	1409	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: text/html; charset=utf-8 Expires: 0 Set-Cookie: ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; path=/; HttpOnly; SameSite=Lax X-SRV: P-NAO-002 X-OneAgent-JS-Injection: true X-ruxit-JS-Agent: true Server-Timing: dtSInfo;desc="0", dtRpid;desc="-767003769" Set-Cookie: dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; Path=/; Domain=.mtb.com Date: Thu, 14 Mar 2024 00:57:19 GMT Connection: close Set-Cookie: TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; Path=/ Set-Cookie: TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; path=/; domain=.mtb.com Set-Cookie: TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; Max-Age=30; Path=/ Set-Cookie: TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be; Path=/ Transfer-Encoding: chunked
2024-03-14 00:57:19 UTC	8602	IN	Data Raw: 32 31 39 32 0d 0a 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 63 6c 61 73 73 3d 22 5f 5f 73 74 69 63 6b 79 2d 66 6f 6f 74 65 72 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 77 69 6e 64 6f 77 5b 22 6c 6f 61 64 65 72 43 6f 6e 66 69 67 22 5d 20 3d 20 22 2f 54 53 50 44 2f 3f 74 79 70 65 3d 32 30 22 3b 0d 0a 7d 29 28 29 3b 0d 0a 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 54 53 50 44 2f 3f 74 79 70 65 3d 31 38 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 3c 73 Data Ascii: 2192<!doctype html><html lang="en" class="__sticky-footer"><head><script type="text/javascript">(function(){window["loaderConfig"] = "/TSPD/?type=20";})();</script><script type="text/javascript" src="/TSPD/?type=18"></script><s
2024-03-14 00:57:19 UTC	3448	IN	Data Raw: 64 37 31 0d 0a 6c 69 6e 65 3f 0d 0a 20 20 20 20 20 20 20 20 3c 2f 70 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 65 6c 6c 20 5f 5f 73 70 61 63 65 72 2d 73 65 63 74 69 6f 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 0d 0a 3c 21 2d 2d 20 73 65 6c 65 63 74 20 61 63 63 6f 75 6e 74 20 74 79 70 65 20 2d 2d 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 74 62 2d 6c 69 73 74 2d 73 65 6c 65 63 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 62 75 6c 6c 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 74 62 2d 6c 69 Data Ascii: d71line? </p> </div> </div> <div class="cell __spacer-section"> ... select account type --> <div class="mtb-list-select"> <ul class="no-bullet"> <li class="mtb-li
2024-03-14 00:57:19 UTC	6099	IN	Data Raw: 31 37 63 62 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 68 31 3e 45 6c 69 67 69 62 69 6c 69 74 79 20 66 6f 72 20 63 6f 6d 62 69 6e 65 64 20 6f 6e 6c 69 6e 65 20 61 63 63 6f 75 6e 74 20 61 63 63 65 73 73 3c 2f 68 31 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 74 62 2d 72 65 76 65 61 6c 2d 62 6f 64 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 72 69 64 2d 78 20 67 72 69 64 2d 70 61 64 64 69 6e 67 2d 78 20 67 72 69 64 2d 78 5f 5f 70 61 64 64 65 64 20 6d 74 62 2d 72 65 76 65 61 6c 2d 62 6f 64 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 65 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 6c Data Ascii: 17cb <h1>Eligibility for combined online account access</h1> </div> <div class="mtb-reveal-body"> <div class="grid-x grid-padding-x grid-x__padded mtb-reveal-body"> <div class="cell"> <p class="l
2024-03-14 00:57:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50050	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:20 UTC	2682	OUT	GET /assets/css/foundation-all.css HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be
2024-03-14 00:57:20 UTC	606	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: text/css Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-842429534" Date: Thu, 14 Mar 2024 00:57:19 GMT Content-Length: 210130 Set-Cookie: TS1b6f618f027=0856addebbab2000f1f11b416d20355f6dc1006387c3a6899189f002a6910d9517c50a7827400a1d08463f942111300067a519ae7e2624e4815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; Path=/
2024-03-14 00:57:20 UTC	6885	IN	Data Raw: ef bb bf 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 36 65 6d 29 7b 2e 72 65 76 65 61 6c 2c 2e 72 65 76 65 61 6c 2e 6c 61 72 67 65 2c 2e 72 65 76 65 61 6c 2e 73 6d 61 6c 6c 2c 2e 72 65 76 65 61 6c 2e 74 69 6e 79 7b 72 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 7d 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 Data Ascii: @charset "UTF-8";@media print,screen and (min-width:36em){.reveal,.reveal.large,.reveal.small,.reveal.tiny{right:auto;left:auto;margin:0 auto}}/! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-webkit-tex
2024-03-14 00:57:20 UTC	14526	IN	Data Raw: 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 75 74 66 38 2c 3c 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 65 72 73 69 6f 6e 3d 27 31 2e 31 27 20 77 69 64 74 68 3d 27 33 32 27 20 68 65 69 67 68 74 3d 27 32 34 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 33 32 20 32 34 27 3e 3c 70 6f 6c 79 67 6f 6e 20 70 6f 69 6e 74 73 3d 27 30 2c 30 20 33 32 2c 30 20 31 36 2c 32 34 27 20 73 74 79 6c 65 3d 27 66 69 6c 6c 3a 20 72 67 62 25 32 38 30 2c 20 31 32 30 2c 20 38 36 Data Ascii: :1rem;font-weight:300;line-height:1.25;color:#333;background-image:url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' version='1.1' width='32' height='24' viewBox='0 0 32 24'><polygon points='0,0 32,0 16,24' style='fill: rgb%280, 120, 86
2024-03-14 00:57:20 UTC	7263	IN	Data Raw: 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 7d 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 33 7b 77 69 64 74 68 3a 32 35 25 7d 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 7d 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 37 25 7d 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 36 7b 77 69 64 74 68 3a 35 30 25 7d 2e 67 72 69 64 2d 78 3e 2e 78 78 78 6c 61 72 67 65 2d 37 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 25 7d 2e 67 72 69 Data Ascii: {width:auto}.grid-x>.xxxlarge-1{width:8.33333%}.grid-x>.xxxlarge-2{width:16.66667%}.grid-x>.xxxlarge-3{width:25%}.grid-x>.xxxlarge-4{width:33.33333%}.grid-x>.xxxlarge-5{width:41.66667%}.grid-x>.xxxlarge-6{width:50%}.grid-x>.xxxlarge-7{width:58.33333%}.gri
2024-03-14 00:57:20 UTC	16384	IN	Data Raw: 2e 73 6d 61 6c 6c 2d 75 70 2d 38 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 31 32 2e 35 25 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 36 65 6d 29 7b 2e 6d 65 64 69 75 6d 2d 75 70 2d 31 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 64 69 75 6d 2d 75 70 2d 32 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 35 30 25 7d 2e 6d 65 64 69 75 6d 2d 75 70 2d 33 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 25 7d 2e 6d 65 64 69 75 6d 2d 75 70 2d 34 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 32 35 25 7d 2e 6d 65 64 69 75 6d 2d 75 70 2d 35 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 32 30 25 7d 2e 6d 65 64 69 75 6d 2d 75 70 2d 36 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 Data Ascii: .small-up-8>.cell{width:12.5%}@media print,screen and (min-width:36em){.medium-up-1>.cell{width:100%}.medium-up-2>.cell{width:50%}.medium-up-3>.cell{width:33.33333%}.medium-up-4>.cell{width:25%}.medium-up-5>.cell{width:20%}.medium-up-6>.cell{width:16.6666
2024-03-14 00:57:20 UTC	12668	IN	Data Raw: 68 3a 38 33 2e 33 33 33 33 33 25 7d 2e 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 6c 61 72 67 65 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 37 25 7d 2e 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 6c 61 72 67 65 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 34 65 6d 29 7b 2e 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 6c 61 72 67 65 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 6c 61 72 67 65 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 7d 2e 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c Data Ascii: h:83.33333%}.large-margin-collapse>.large-11{width:91.66667%}.large-margin-collapse>.large-12{width:100%}}@media screen and (min-width:64em){.large-margin-collapse>.xlarge-1{width:8.33333%}.large-margin-collapse>.xlarge-2{width:16.66667%}.large-margin-col
2024-03-14 00:57:20 UTC	14526	IN	Data Raw: 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 6d 61 6c 6c 2d 37 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 25 7d 2e 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 6d 61 6c 6c 2d 38 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 37 25 7d 2e 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 6d 61 6c 6c 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 6d 61 6c 6c 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 25 7d 2e 78 78 78 6c 61 72 67 65 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 6d 61 6c 6c 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 37 25 7d 2e 78 78 78 6c 61 72 67 Data Ascii: large-margin-collapse>.small-7{width:58.33333%}.xxxlarge-margin-collapse>.small-8{width:66.66667%}.xxxlarge-margin-collapse>.small-9{width:75%}.xxxlarge-margin-collapse>.small-10{width:83.33333%}.xxxlarge-margin-collapse>.small-11{width:91.66667%}.xxxlarg
2024-03-14 00:57:20 UTC	14526	IN	Data Raw: 65 6d 29 7d 2e 78 78 6c 61 72 67 65 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 78 6c 61 72 67 65 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 31 36 2e 36 36 36 36 37 25 20 2b 20 2e 35 72 65 6d 29 7d 2e 78 78 6c 61 72 67 65 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 78 6c 61 72 67 65 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 32 35 25 20 2b 20 2e 35 72 65 6d 29 7d 2e 78 78 6c 61 72 67 65 2d 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 25 7d 2e 67 72 69 64 Data Ascii: em)}.xxlarge-offset-2{margin-left:16.66667%}.grid-margin-x>.xxlarge-offset-2{margin-left:calc(16.66667% + .5rem)}.xxlarge-offset-3{margin-left:25%}.grid-margin-x>.xxlarge-offset-3{margin-left:calc(25% + .5rem)}.xxlarge-offset-4{margin-left:33.33333%}.grid
2024-03-14 00:57:20 UTC	14526	IN	Data Raw: 31 72 65 6d 29 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 34 38 65 6d 29 7b 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6c 61 72 67 65 2d 61 75 74 6f 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6c 61 72 67 65 2d 73 68 72 69 6e 6b 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6c 61 72 67 65 2d 31 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 38 2e 33 33 33 33 33 25 20 2d 20 31 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6c 61 72 67 65 2d 32 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 36 2e 36 36 36 36 37 25 20 2d 20 31 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6c 61 72 67 Data Ascii: 1rem)}}@media print,screen and (min-width:48em){.grid-margin-y>.large-auto{height:auto}.grid-margin-y>.large-shrink{height:auto}.grid-margin-y>.large-1{height:calc(8.33333% - 1rem)}.grid-margin-y>.large-2{height:calc(16.66667% - 1rem)}.grid-margin-y>.larg
2024-03-14 00:57:20 UTC	14526	IN	Data Raw: 6e 2d 77 69 64 74 68 3a 34 38 65 6d 29 7b 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6c 61 72 67 65 2d 61 75 74 6f 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6c 61 72 67 65 2d 73 68 72 69 6e 6b 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6c 61 72 67 65 2d 31 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 38 2e 33 33 33 33 33 25 20 2d 20 31 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6c 61 72 67 65 2d 32 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 36 2e 36 36 36 36 37 25 20 2d 20 31 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6c 61 72 67 65 2d 33 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 32 35 25 20 2d 20 31 72 65 6d 29 7d 2e 67 72 69 64 2d Data Ascii: n-width:48em){.grid-margin-y>.large-auto{height:auto}.grid-margin-y>.large-shrink{height:auto}.grid-margin-y>.large-1{height:calc(8.33333% - 1rem)}.grid-margin-y>.large-2{height:calc(16.66667% - 1rem)}.grid-margin-y>.large-3{height:calc(25% - 1rem)}.grid-
2024-03-14 00:57:20 UTC	7263	IN	Data Raw: 2e 73 65 63 6f 6e 64 61 72 79 3a 66 6f 63 75 73 2e 64 69 73 61 62 6c 65 64 2c 2e 62 75 74 74 6f 6e 2e 63 6c 65 61 72 2e 73 65 63 6f 6e 64 61 72 79 3a 66 6f 63 75 73 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 62 75 74 74 6f 6e 2e 63 6c 65 61 72 2e 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 2c 2e 62 75 74 74 6f 6e 2e 63 6c 65 61 72 2e 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 2e 64 69 73 61 62 6c 65 64 2c 2e 62 75 74 74 6f 6e 2e 63 6c 65 61 72 2e 73 65 63 6f 6e 64 61 72 79 3a 68 6f 76 65 72 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 62 75 74 74 6f 6e 2e 63 6c 65 61 72 2e 73 65 63 6f 6e 64 61 72 79 5b 64 69 73 61 62 6c 65 64 5d 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 62 75 74 74 6f 6e 2e 63 6c 65 61 72 2e 73 75 63 63 65 73 73 Data Ascii: .secondary:focus.disabled,.button.clear.secondary:focus[disabled],.button.clear.secondary:hover,.button.clear.secondary:hover.disabled,.button.clear.secondary:hover[disabled],.button.clear.secondary[disabled]{border-color:transparent}.button.clear.success

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50049	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:20 UTC	2671	OUT	GET /assets/css/mtb.css HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be
2024-03-14 00:57:20 UTC	605	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: text/css Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1937475464" Date: Thu, 14 Mar 2024 00:57:19 GMT Content-Length: 69424 Set-Cookie: TS1b6f618f027=0856addebbab20009d3c304f23bc1170c60fa05affea7582c0e2d90d37e88592b69a102248f6548008ebac0a861130004259e856014adf76815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; Path=/
2024-03-14 00:57:20 UTC	14149	IN	Data Raw: 2e 6d 2d 69 63 6f 6e 2c 20 2e 6d 74 62 2d 66 6f 72 6d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 3a 3a 61 66 74 65 72 2c 20 2e 6d 74 62 2d 66 6f 72 6d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 2c 20 2e 6d 74 62 2d 66 6f 72 6d 72 61 64 69 6f 20 6c 61 62 65 6c 3a 3a 61 66 74 65 72 2c 20 2e 6d 74 62 2d 66 6f 72 6d 72 61 64 69 6f 20 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 26 54 20 50 47 20 43 75 73 74 6f 6d 20 46 6f 6e 74 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b Data Ascii: .m-icon, .mtb-formcheckbox label::after, .mtb-formcheckbox label::before, .mtb-formradio label::after, .mtb-formradio label::before { font-family: "M&T PG Custom Font" !important; display: inline-block; speak: none; font-style: normal;
2024-03-14 00:57:20 UTC	4859	IN	Data Raw: 74 74 6f 6d 3a 20 31 72 65 6d 0d 0a 7d 0d 0a 0d 0a 2e 6d 74 62 2d 66 6f 72 6d 5f 5f 73 65 63 74 69 6f 6e 2d 73 70 61 63 65 72 2d 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 2e 33 37 35 72 65 6d 0d 0a 7d 0d 0a 0d 0a 2e 6d 74 62 2d 66 6f 72 6d 2d 2d 72 65 76 69 65 77 20 3e 20 2e 63 65 6c 6c 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 0d 0a 7d 0d 0a 0d 0a 2e 6d 74 62 2d 66 6f 72 6d 2d 2d 72 65 76 69 65 77 20 64 64 2c 20 2e 6d 74 62 2d 66 6f 72 6d 2d 2d 72 65 76 69 65 77 20 64 74 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 72 65 6d 20 31 72 65 6d 20 Data Ascii: ttom: 1rem}.mtb-form__section-spacer-button { margin-bottom: 2.375rem}.mtb-form--review > .cell { background: #efefef}.mtb-form--review dd, .mtb-form--review dt { font-weight: 300; color: #333; margin: 1rem 1rem
2024-03-14 00:57:20 UTC	2404	IN	Data Raw: 74 69 6f 6e 3a 20 72 69 67 68 74 20 2d 31 37 70 78 20 63 65 6e 74 65 72 0d 0a 7d 0d 0a 0d 0a 2e 66 6f 72 6d 2d 65 72 72 6f 72 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 72 65 6d 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 31 64 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 2e 36 32 35 72 65 6d 20 2e 39 33 37 35 72 65 6d 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 0d 0a 7d 0d 0a 0d 0a 20 20 20 20 2e 66 6f 72 6d 2d 65 72 72 6f 72 2e 69 73 2d 76 69 73 69 62 6c 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 31 72 65 6d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 2e 69 6e 70 75 74 2d 67 72 6f Data Ascii: tion: right -17px center}.form-error { margin-top: -1rem; background-color: #fff1d0; padding: .625rem .9375rem; color: #333; font-weight: 300} .form-error.is-visible { margin-top: -1rem }.input-gro
2024-03-14 00:57:20 UTC	14526	IN	Data Raw: 65 6c 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6d 74 62 2d 66 6f 72 6d 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 3a 63 68 65 63 6b 65 64 20 2b 20 6c 61 62 65 6c 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 39 31 65 22 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6d 74 62 2d 66 6f 72 6d 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 3a 66 6f 63 75 73 20 2b 20 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 23 33 62 39 39 66 63 20 61 75 74 6f 20 35 70 78 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 2e 72 65 76 65 61 6c 2e Data Ascii: el::after { content: "" } .mtb-formradio input[type=radio]:checked + label::after { content: "\e91e" } .mtb-formradio input[type=radio]:focus + label::before { outline: #3b99fc auto 5px }.reveal.
2024-03-14 00:57:20 UTC	16384	IN	Data Raw: 0a 7d 0d 0a 0d 0a 20 20 20 20 2e 6d 74 62 2d 61 63 63 6f 75 6e 74 2d 67 72 69 64 20 3e 20 2e 63 65 6c 6c 20 2e 5f 5f 61 63 74 69 6f 6e 2d 70 61 6e 65 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 35 34 70 78 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2e 6d 74 62 2d 61 63 63 6f 75 6e 74 2d 67 72 69 64 20 3e 20 2e 63 65 6c 6c 20 2e 5f 5f 61 63 74 69 6f 6e 2d 70 61 6e 65 6c 20 2e 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 30 20 30 20 34 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 2e 6d 74 62 2d 61 63 63 Data Ascii: } .mtb-account-grid > .cell .__action-panel { text-align: right; width: 54px } .mtb-account-grid > .cell .__action-panel .button { padding: 0 0 0 4px; margin: 0 } .mtb-acc
2024-03-14 00:57:20 UTC	5405	IN	Data Raw: 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 31 2e 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 31 2e 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 0d 0a 7d 0d 0a 0d 0a 2e 6d 2d 69 63 6f 6e 5f 5f 73 70 69 6e 2d 66 61 73 74 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 2e 37 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 70 69 6e 20 2e 37 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 0d 0a 7d 0d 0a 0d 0a 2e 6d 2d 69 63 6f 6e 5f 5f 73 70 69 6e 2d 73 6c 6f 77 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 Data Ascii: -webkit-animation: spin 1.5s linear infinite; animation: spin 1.5s linear infinite}.m-icon__spin-fast { -webkit-animation: spin .7s linear infinite; animation: spin .7s linear infinite}.m-icon__spin-slow { -webkit-ani
2024-03-14 00:57:20 UTC	11697	IN	Data Raw: 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 70 61 73 73 69 6e 67 2d 72 65 76 65 72 73 65 20 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 0d 0a 7d 0d 0a 0d 0a 2e 6d 2d 69 63 6f 6e 5f 5f 72 65 76 65 72 73 65 2d 73 6c 6f 77 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 70 61 73 73 69 6e 67 2d 72 65 76 65 72 73 65 20 33 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 70 61 73 73 69 6e 67 2d 72 65 76 65 72 73 65 20 33 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 6c 6c 69 6e 67 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 Data Ascii: animation: passing-reverse 1s linear infinite}.m-icon__reverse-slow { -webkit-animation: passing-reverse 3s linear infinite; animation: passing-reverse 3s linear infinite}@-webkit-keyframes falling { 0% { -webkit-tra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50051	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:20 UTC	2652	OUT	GET /TSPD/?type=18 HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be
2024-03-14 00:57:20 UTC	153	IN	HTTP/1.1 200 OK Content-Encoding: gzip Cache-Control: public, max-age=86400 Content-Type: text/javascript Content-Length: 3248 Connection: close
2024-03-14 00:57:20 UTC	3248	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 00 cd 5a 6d 53 e3 46 12 fe ee 5f 01 fe c0 4a e7 81 d2 e8 5d d6 0a 2a 95 ec d5 e1 72 e2 aa 53 aa ee ca c4 a7 32 58 80 88 d6 e6 2c 79 17 04 fe ef f7 f4 cc e8 c5 40 b2 cb 86 dc dd 07 23 8d 34 dd d3 d3 fd f4 db 88 cf d9 72 b1 fa 7c f4 d3 3f 7e f8 67 b4 bf ff b9 1d 85 e5 fa fe 41 bb dc 2c 2f ca 6c b5 d4 f4 f6 7e af 4a 30 fc 34 5f ef 15 d1 3e 0f 9b c7 89 56 e8 0f 97 ab b5 46 af 92 c8 08 8b c3 c3 50 4f 06 51 ae 2d 56 17 9b 8f e9 b2 3c aa 6f 3e e4 29 5d d8 72 93 e7 7a b8 4e cb cd 1a 0c b6 0d af 5c 2b 58 22 17 99 44 fd 4f 59 3f 4c a2 e4 f1 71 99 7e de 1b d7 d3 e3 0a 93 1a 01 b1 76 71 54 a4 e5 77 65 b9 ce ce 37 65 aa f5 17 f3 72 7e d8 1f 4c 58 72 34 71 34 bd 59 47 32 df ca c5 db 35 c7 d8 55 79 9d 15 47 a7 93 88 87 e2 6e bc c2 36 c4 5d 7e Data Ascii: ZmSF_J]*rS2X,y@#4r\|?~gA,/l~J04_>VFPOQ-V<o>)]rzN\+X"DOY?Lq~vqTwe7er~LXr4q4YG25UyGn6]~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50052	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:20 UTC	2732	OUT	GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=17 HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be
2024-03-14 00:57:20 UTC	154	IN	HTTP/1.1 200 OK Content-Encoding: gzip Cache-Control: public, max-age=86400 Content-Type: text/javascript Content-Length: 34890 Connection: close
2024-03-14 00:57:20 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 00 ec bd 69 73 db 48 96 28 fa 9d bf c2 52 54 7b 80 12 a4 02 90 58 49 d3 8a be 33 1d 71 a9 e0 0c 5f 0c 27 e2 f5 a3 ad 61 c8 32 6d 53 86 45 b5 20 2f 05 93 ef b7 bf b3 64 26 12 0b 49 88 96 ab fa 4e bc 88 72 89 04 91 fb c9 b3 2f 5f 97 b7 6f 57 5f cf fe e3 ff fe b7 bf 0f 8f 8e be 96 df 06 0f f7 bf 7f b7 de 7d be bd 7e 58 ae 6e 2d bb f2 f9 cb d5 fd b3 62 f8 fd ed e2 fa fe f7 bb 87 be fe a5 b0 bf 63 b3 fb c5 c3 e7 fb db 67 17 d3 c9 7f 9c dd 5d dd e7 0b cb 7c a3 18 16 67 f9 5d b6 7c b0 8e b3 63 7b 80 7d e5 c3 e3 e3 c1 bb d5 bd 85 5f e6 43 77 30 7f 51 9c 65 8b db f7 0f 1f 06 27 27 73 3b 3f 19 4e 1f ee 97 b7 ef cf de dd af 3e fd eb 87 ab fb 7f 5d bd 5d 58 c5 ab f9 a5 3d 90 a3 e5 1b e8 dc de 5c 5f 3d 5c 7f b0 e6 f6 f7 cd 66 a3 7e 82 a9 5e Data Ascii: isH(RT{XI3q_'a2mSE /d&INr/_oW_}~Xn-bcg]\|g]\|c{}_Cw0Qe''s;?N>]]X=\_=\f~^
2024-03-14 00:57:20 UTC	16384	IN	Data Raw: 86 14 23 7f c7 f3 e7 bd 8a f9 df 37 68 ac 52 d1 48 45 f1 56 cb 66 e7 30 2a bb 2c 43 c1 c9 9e be 8f c6 70 9c 1e 41 0a 55 fe a4 d2 36 6c 8d 67 08 9e 48 3d 43 18 c2 4a 95 c1 63 56 0c b3 59 69 d2 ad eb 27 29 91 69 b3 08 d4 b2 c0 a2 63 79 f3 87 51 41 71 d3 ae aa 43 33 54 f8 32 6d dd b2 4b 67 ac 6a 37 1e 79 03 23 3e 38 88 03 15 1f 3c c4 09 82 88 91 06 38 16 a3 bf b3 e9 e8 9c ea 88 5e 4c 81 22 f7 8d 86 22 f2 77 36 cc 47 e7 30 e4 04 6b 17 98 cd 92 d8 dd dd 6c 0c 14 7f 8c ad 54 a6 1c 7e 0b 64 a8 04 ab 32 07 82 ea c6 5f 9e 4d a4 2b c4 6c 36 94 85 a1 e1 2e 0d c6 05 55 61 fd 95 8f 83 d3 a5 60 45 e4 6c 76 36 9b 5a 46 dd d3 7a 79 48 34 d1 c7 a9 34 d1 cf 6c d8 2e 9b ca 6a cd 54 0a 9e 96 79 e0 34 b2 19 ee cf ee 7e 29 c4 9e 0c 13 08 e8 7e 18 f6 7d 1f f3 bb 6d eb 73 3c a3 Data Ascii: #7hRHEVf0*,CpAU6lgH=CJcVYi')icyQAqC3T2mKgj7y#>8<8^L""w6G0klT~d2_M+l6.Ua`Elv6ZFzyH44l.jTy4~)~}ms<
2024-03-14 00:57:20 UTC	2122	IN	Data Raw: 8c 7f 6f 4a 37 a4 6b c3 36 69 af 65 79 3d 81 34 cb ba e1 1f 0c 3b cb 86 cc fb 39 a3 c6 8c 2c 4b 57 2d 84 54 cd 00 d5 d7 af 4f 7a c1 8f 26 eb b1 f1 23 5a d8 df 00 b8 cf fc f4 ee b7 ef 74 f2 59 87 a5 4b 6d 52 98 64 cf 0f d5 60 0c 38 ff b5 19 d3 63 65 27 9a 8a 49 29 ee 24 64 9d 00 6d 89 9a 1c 2f d4 3a d2 e4 71 a4 7c 24 73 18 01 6d 1a 85 b0 53 6b e8 b0 5a 8d 8f 95 2e 53 3c ba f7 b1 aa 13 1e 12 9b 85 50 40 97 4b 2a 0d 8c 06 93 e6 88 5f 96 6f de 9c 75 03 4a 77 4a d7 74 2e de 9b e4 06 6a 33 1d 2c 5a bf 5d 5f 46 2c 7d a0 83 c5 db d8 88 d8 fb f6 c2 50 c3 e1 af 80 73 db 26 76 32 56 5b 9e dd 9c 6f a5 0b 7b a9 4c 74 b1 91 6a d1 d8 e3 57 80 f8 f5 eb af 1f 63 2c 54 fa bc ab f6 bd c0 78 d8 6c 07 20 8d ba 94 22 ad 3a 61 3d 9d ea 29 45 ca bf 8c 20 cb 9a 92 b6 db 2d 83 ba Data Ascii: oJ7k6iey=4;9,KW-TOz&#ZtYKmRd`8ce'I)$dm/:q\|$smSkZ.S<P@K*_ouJwJt.j3,Z]_F,}Ps&v2V[o{LtjWc,Txl ":a=)E -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50048	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:20 UTC	2684	OUT	GET /ruxitagentjs_ICA2NVfhqru_10285240307101407.js HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be
2024-03-14 00:57:20 UTC	588	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=31536000, immutable,no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: text/javascript; charset=utf-8 Expires: Fri, 14 Mar 2025 00:57:20 GMT,0 Last-Modified: Wed, 03 Mar 2010 07:01:40 GMT X-SRV: P-NAO-002 Date: Thu, 14 Mar 2024 00:57:19 GMT Content-Length: 199816 Set-Cookie: TS1b6f618f027=0856addebbab2000089487698b8ac071d7b4e7bc8155a51c75bc60d4e88d86629abf9c7724b3247d08ff8a4eb9113000fc5ee46770a6dd4c815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; Path=/
2024-03-14 00:57:20 UTC	15796	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 61 6e 64 20 6c 69 63 65 6e 73 65 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 79 6e 61 74 72 61 63 65 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 74 72 75 73 74 2d 63 65 6e 74 65 72 2f 63 75 73 74 6f 6d 65 72 73 2f 72 65 70 6f 72 74 73 2f 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 22 2e 63 6f 6e 63 61 74 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 2c 22 3d 22 29 2e 63 6f 6e 63 61 74 28 22 31 22 2c 22 3b 53 61 6d 65 53 69 74 65 3d 4c 61 78 22 29 3b 76 61 72 20 42 61 3d 2d 31 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 22 5f 5f 64 54 43 6f 6f 6b 69 65 22 29 3b 64 6f 63 75 6d 65 6e Data Ascii: /* Copyright and licenses see https://www.dynatrace.com/company/trust-center/customers/reports/ */(function(){function Ka(){document.cookie="".concat("__dTCookie","=").concat("1",";SameSite=Lax");var Ba=-1!==document.cookie.indexOf("__dTCookie");documen
2024-03-14 00:57:20 UTC	588	IN	Data Raw: 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 71 3d 28 31 36 36 34 35 32 35 2a 71 2b 31 30 31 33 39 30 34 32 32 33 29 25 78 3b 72 65 74 75 72 6e 20 71 2f 78 7d 7d 66 75 6e 63 74 69 6f 6e 20 43 63 28 67 2c 71 29 7b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 67 29 7c 7c 69 73 4e 61 4e 28 71 29 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 33 33 2a 68 65 28 29 29 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 68 65 28 29 2a 28 71 2d 67 2b 31 29 29 2b 67 7d 66 75 6e 63 74 69 6f 6e 20 57 64 28 67 29 7b 69 66 28 21 67 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 71 3d 4e 61 2e 63 72 79 70 74 6f 7c 7c 4e 61 2e 6d 73 43 72 79 70 74 6f 3b 69 66 28 71 26 26 2d 31 3d 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 47 6f 6f 67 6c 65 62 6f 74 22 29 29 71 Data Ascii: rn function(){q=(1664525q+1013904223)%x;return q/x}}function Cc(g,q){return isNaN(g)\|\|isNaN(q)?Math.floor(33he()):Math.floor(he()*(q-g+1))+g}function Wd(g){if(!g)return"";var q=Na.crypto\|\|Na.msCrypto;if(q&&-1===navigator.userAgent.indexOf("Googlebot"))q
2024-03-14 00:57:20 UTC	2641	IN	Data Raw: 71 2e 64 54 5f 3b 69 66 28 78 26 26 22 65 61 22 69 6e 20 78 26 26 22 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 22 3d 3d 3d 78 2e 76 65 72 73 69 6f 6e 29 72 65 74 75 72 6e 20 78 2e 74 64 74 6f 28 29 3b 71 3d 71 21 3d 3d 71 2e 70 61 72 65 6e 74 3f 71 2e 70 61 72 65 6e 74 3a 76 6f 69 64 20 30 7d 7d 63 61 74 63 68 28 57 29 7b 7d 72 65 74 75 72 6e 20 67 7d 66 75 6e 63 74 69 6f 6e 20 4d 63 28 67 2c 71 2c 78 29 7b 76 61 72 20 57 3d 6b 61 28 22 70 63 6c 22 29 3b 57 3d 67 2e 6c 65 6e 67 74 68 2d 57 3b 30 3c 57 26 26 67 2e 73 70 6c 69 63 65 28 30 2c 57 29 3b 57 3d 46 28 51 61 28 68 64 28 29 2c 78 29 29 3b 66 6f 72 28 76 61 72 20 49 3d 5b 5d 2c 78 61 3d 57 3f 22 22 2e 63 6f 6e 63 61 74 28 57 2c 22 24 22 29 3a 22 22 2c 48 62 3d 30 3b 48 62 3c 67 2e 6c 65 6e Data Ascii: q.dT_;if(x&&"ea"in x&&"10285240307101407"===x.version)return x.tdto();q=q!==q.parent?q.parent:void 0}}catch(W){}return g}function Mc(g,q,x){var W=ka("pcl");W=g.length-W;0<W&&g.splice(0,W);W=F(Qa(hd(),x));for(var I=[],xa=W?"".concat(W,"$"):"",Hb=0;Hb<g.len
2024-03-14 00:57:20 UTC	16384	IN	Data Raw: 67 29 3b 67 3d 4c 28 6b 64 28 29 29 3b 41 28 67 29 3b 71 61 28 4a 64 28 29 29 3b 71 61 28 6b 64 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 61 28 67 29 7b 76 61 72 20 71 3d 7b 53 64 3a 30 2c 4b 63 3a 30 7d 3b 69 66 28 67 3d 4c 28 6b 64 28 29 2c 67 29 29 74 72 79 7b 76 61 72 20 78 3d 67 2e 73 70 6c 69 74 28 22 7c 22 29 3b 32 3d 3d 3d 78 2e 6c 65 6e 67 74 68 26 26 28 71 2e 53 64 3d 70 61 72 73 65 49 6e 74 28 78 5b 30 5d 29 2c 71 2e 4b 63 3d 70 61 72 73 65 49 6e 74 28 78 5b 31 5d 29 29 7d 63 61 74 63 68 28 57 29 7b 7d 72 65 74 75 72 6e 20 71 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 67 29 7b 67 3d 66 61 28 67 29 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 69 6e 28 67 2e 53 64 2c 67 2e 4b 63 2b 50 68 29 7d 66 75 6e 63 74 69 6f 6e 20 75 61 28 67 29 7b 51 66 3d 67 7d Data Ascii: g);g=L(kd());A(g);qa(Jd());qa(kd())}function fa(g){var q={Sd:0,Kc:0};if(g=L(kd(),g))try{var x=g.split("\|");2===x.length&&(q.Sd=parseInt(x[0]),q.Kc=parseInt(x[1]))}catch(W){}return q}function la(g){g=fa(g);return Math.min(g.Sd,g.Kc+Ph)}function ua(g){Qf=g}
2024-03-14 00:57:20 UTC	7809	IN	Data Raw: 3d 66 3f 76 6f 69 64 20 30 3a 66 2e 67 43 50 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6b 3f 76 6f 69 64 20 30 3a 0a 6b 2e 63 61 6c 6c 28 66 29 3b 72 65 74 75 72 6e 20 62 3d 66 3d 6e 3f 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 5f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3a 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 29 7b 72 65 74 75 72 6e 22 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 22 7d 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 29 7b 72 65 74 75 72 6e 21 21 28 61 26 26 22 65 61 22 69 6e 20 61 29 7d 66 75 6e 63 74 69 6f 6e 20 56 61 28 29 7b 76 61 72 20 61 3d 73 62 2e 64 54 5f 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 62 3d 73 62 2e 70 61 72 65 6e 74 3b 62 26 26 62 21 3d 3d 73 62 3b 29 7b 76 61 72 20 66 3d 62 2e 64 54 5f 3b 69 66 28 49 61 28 66 29 26 26 22 31 30 Data Ascii: =f?void 0:f.gCP)\|\|void 0===k?void 0:k.call(f);return b=f=n?"".concat(n,"_").concat(a):a}}function Ba(){return"10285240307101407"}function Ia(a){return!!(a&&"ea"in a)}function Va(){var a=sb.dT_;try{for(var b=sb.parent;b&&b!==sb;){var f=b.dT_;if(Ia(f)&&"10
2024-03-14 00:57:20 UTC	7263	IN	Data Raw: 20 42 3d 61 2e 73 6c 69 63 65 28 6e 29 3b 6b 2e 70 75 73 68 28 42 29 7d 69 66 28 66 29 66 6f 72 28 61 3d 6b 2e 6c 65 6e 67 74 68 2c 62 3d 30 3b 62 3c 61 3b 62 2b 2b 29 6b 5b 62 5d 3d 66 2e 72 65 70 6c 61 63 65 28 2f 23 69 6e 64 65 78 23 2f 2c 62 2b 31 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 23 74 6f 74 61 6c 23 2f 2c 61 2b 22 22 29 2b 6b 5b 62 5d 3b 72 65 74 75 72 6e 20 6b 7d 66 75 6e 63 74 69 6f 6e 20 71 63 28 61 29 7b 72 65 74 75 72 6e 21 31 3d 3d 3d 61 3f 30 3a 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 32 3a 31 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 29 7b 76 6f 69 64 20 30 3d 3d 3d 62 26 26 28 62 3d 51 62 28 22 72 74 75 22 29 29 3b 69 66 28 21 61 29 72 65 74 75 72 6e 22 22 3b 76 61 72 20 66 3d 51 62 28 22 72 74 70 22 29 3b 69 Data Ascii: B=a.slice(n);k.push(B)}if(f)for(a=k.length,b=0;b<a;b++)k[b]=f.replace(/#index#/,b+1+"").replace(/#total#/,a+"")+k[b];return k}function qc(a){return!1===a?0:"number"===typeof a?2:1}function F(a,b){void 0===b&&(b=Qb("rtu"));if(!a)return"";var f=Qb("rtp");i
2024-03-14 00:57:20 UTC	7263	IN	Data Raw: 4d 4c 22 3d 3d 3d 62 7c 7c 22 42 4f 44 59 22 3d 3d 3d 62 7c 7c 22 48 45 41 44 22 3d 3d 3d 62 7c 7c 22 23 44 4f 43 55 4d 45 4e 54 22 3d 3d 3d 62 29 72 65 74 75 72 6e 22 50 61 67 65 3a 20 22 2b 61 67 3b 69 66 28 61 26 26 22 53 45 4c 45 43 54 22 3d 3d 3d 61 2e 6e 6f 64 65 4e 61 6d 65 29 7b 76 61 72 20 66 3d 61 2e 6e 6f 64 65 4e 61 6d 65 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 6e 75 6c 6c 2c 6b 3d 50 61 28 61 2e 69 64 29 2c 6e 3d 65 62 28 6b 2c 61 2e 6e 61 6d 65 2c 66 29 2c 42 3d 6e 75 6c 6c 3b 69 66 28 21 61 2e 6d 75 6c 74 69 70 6c 65 29 7b 76 61 72 20 4b 3d 61 2e 6f 70 74 69 6f 6e 73 26 26 2d 31 3c 61 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3f 61 2e 6f 70 74 69 6f 6e 73 5b 61 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 Data Ascii: ML"===b\|\|"BODY"===b\|\|"HEAD"===b\|\|"#DOCUMENT"===b)return"Page: "+ag;if(a&&"SELECT"===a.nodeName){var f=a.nodeName?a.nodeName.toUpperCase():null,k=Pa(a.id),n=eb(k,a.name,f),B=null;if(!a.multiple){var K=a.options&&-1<a.selectedIndex?a.options[a.selectedIndex
2024-03-14 00:57:20 UTC	14526	IN	Data Raw: 65 74 75 72 6e 28 77 61 2e 76 65 28 29 7c 7c 61 7c 7c 62 29 26 26 21 77 61 2e 73 68 28 29 7d 29 2c 42 3d 44 64 3b 69 66 28 62 29 7b 42 3d 5b 5d 3b 44 64 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 4b 3d 30 3b 4b 3c 6e 2e 6c 65 6e 67 74 68 3b 4b 2b 2b 29 7b 76 61 72 20 65 61 3d 6e 5b 4b 5d 3b 4f 28 28 66 3d 7b 7d 2c 66 2e 6b 69 6e 64 3d 32 3c 3d 65 61 2e 73 74 61 74 75 73 3f 22 41 43 54 49 4f 4e 5f 42 45 41 43 4f 4e 5f 46 4f 52 43 45 44 22 3a 22 41 43 54 49 4f 4e 5f 43 4c 4f 53 45 44 22 2c 66 2e 64 65 74 61 69 6c 3d 0a 28 6b 3d 7b 7d 2c 6b 2e 61 3d 65 61 2e 73 74 61 72 74 2c 6b 2e 73 3d 65 61 2e 73 74 6f 70 2c 6b 2e 72 3d 65 61 2e 4a 61 28 29 2c 6b 2e 69 3d 65 61 2e 69 64 2c 6b 2e 66 3d 21 30 2c 6b 2e 74 3d 65 61 2e 74 79 70 65 2c 6b 2e 78 3d 65 61 2e 78 68 72 55 Data Ascii: eturn(wa.ve()\|\|a\|\|b)&&!wa.sh()}),B=Dd;if(b){B=[];Dd=[];for(var K=0;K<n.length;K++){var ea=n[K];O((f={},f.kind=2<=ea.status?"ACTION_BEACON_FORCED":"ACTION_CLOSED",f.detail=(k={},k.a=ea.start,k.s=ea.stop,k.r=ea.Ja(),k.i=ea.id,k.f=!0,k.t=ea.type,k.x=ea.xhrU
2024-03-14 00:57:20 UTC	14526	IN	Data Raw: 20 6e 3d 51 67 5b 6b 5d 2c 42 3d 6e 2e 44 2c 4b 3d 49 63 28 42 29 3b 69 66 28 4b 26 26 62 26 26 62 5b 30 5d 21 3d 3d 6e 2e 70 67 26 26 43 62 28 4b 2e 78 68 72 55 72 6c 7c 7c 22 22 29 3d 3d 3d 6e 2e 78 68 72 55 72 6c 26 26 6e 2e 78 68 72 55 72 6c 3d 3d 3d 43 62 28 66 7c 7c 22 22 29 29 7b 62 3d 42 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 30 7d 69 66 28 62 29 72 65 74 75 72 6e 20 62 3b 61 2e 65 62 3d 21 30 3b 72 65 74 75 72 6e 20 61 65 28 61 29 2e 69 64 7d 66 75 6e 63 74 69 6f 6e 20 59 67 28 61 29 7b 76 61 72 20 62 3d 61 2e 79 61 2c 66 3d 6e 75 6c 6c 3b 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 62 26 26 28 66 3d 49 63 28 62 29 29 3b 61 2e 79 61 3d 66 3f 66 2e 69 64 3a 21 30 3b 72 65 74 75 72 6e 20 6c 66 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 58 67 28 Data Ascii: n=Qg[k],B=n.D,K=Ic(B);if(K&&b&&b[0]!==n.pg&&Cb(K.xhrUrl\|\|"")===n.xhrUrl&&n.xhrUrl===Cb(f\|\|"")){b=B;break a}}b=0}if(b)return b;a.eb=!0;return ae(a).id}function Yg(a){var b=a.ya,f=null;"number"===typeof b&&(f=Ic(b));a.ya=f?f.id:!0;return lf(a)}function Xg(
2024-03-14 00:57:20 UTC	7263	IN	Data Raw: 2c 22 5f 74 79 70 65 5f 22 2c 61 29 2c 62 2e 66 69 6c 65 26 26 28 42 3d 62 2e 66 69 6c 65 2c 30 3c 3d 62 2e 6c 69 6e 65 26 26 28 42 2b 3d 22 7c 22 2b 62 2e 6c 69 6e 65 29 2c 30 3c 3d 62 2e 63 6f 6c 75 6d 6e 26 26 28 42 2b 3d 22 7c 22 2b 62 2e 63 6f 6c 75 6d 6e 29 2c 45 68 28 22 5f 6c 6f 63 61 74 69 6f 6e 5f 22 2c 42 2c 61 29 29 2c 28 42 3d 62 2e 69 6e 63 6f 6d 70 6c 65 74 65 53 74 61 63 6b 29 26 26 45 68 28 22 5f 69 73 74 61 63 6b 5f 22 2c 42 2c 61 29 2c 5a 68 28 62 2c 22 73 74 61 63 6b 22 2c 22 5f 73 74 61 63 6b 5f 22 2c 61 29 2c 5a 68 28 62 2c 22 63 6f 64 65 22 2c 22 5f 63 6f 64 65 5f 22 2c 61 29 2c 5a 68 28 62 2c 22 74 69 6d 65 73 74 61 6d 70 22 2c 22 5f 74 73 5f 22 2c 61 29 2c 5a 68 28 62 2c 22 64 65 62 75 67 49 6e 66 6f 22 2c 0a 22 5f 64 65 62 75 67 Data Ascii: ,"_type_",a),b.file&&(B=b.file,0<=b.line&&(B+="\|"+b.line),0<=b.column&&(B+="\|"+b.column),Eh("_location_",B,a)),(B=b.incompleteStack)&&Eh("_istack_",B,a),Zh(b,"stack","_stack_",a),Zh(b,"code","_code_",a),Zh(b,"timestamp","_ts_",a),Zh(b,"debugInfo","_debug

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50047	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:20 UTC	2722	OUT	GET /assets/img/mtb-logo.svg HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab2000e4a8c79ec3c4b38c72dbb75e37411dd412bd930dbb052388835833e24cad0f7b084311201c113000ddd4c08a30b257616caf4d72d15fa29aa035c94252191dd502cca3d2438e8fd3139f21ceb26961415e693fb567f617be
2024-03-14 00:57:20 UTC	609	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: image/svg+xml Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1950987431" Date: Thu, 14 Mar 2024 00:57:19 GMT Content-Length: 2039 Set-Cookie: TS1b6f618f027=0856addebbab200015a3532df2a3d4d9400b0f8a47c82271846aef8b7232c9e9af380f1811a457c608fe4dce4b113000f27990bd7063fa28815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; Path=/
2024-03-14 00:57:20 UTC	2039	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 32 20 33 33 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 32 2e 31 36 20 31 35 2e 37 32 63 33 2e 36 36 2d 2e 38 33 20 36 2e 30 32 2d 33 2e 34 37 20 36 2e 30 32 2d 37 2e 35 31 20 30 2d 34 2e 39 31 2d 33 2e 32 2d 38 2e 32 2d 39 2e 38 32 2d 38 2e 32 68 2d 31 30 2e 37 76 33 32 2e 34 34 68 31 31 2e 30 37 63 36 2e 39 20 30 20 31 30 2e 36 31 2d 33 2e 32 34 20 31 30 2e 36 31 2d 38 2e 37 36 20 30 2d 34 2e 34 31 2d 32 2e 36 34 2d 37 2e 32 33 2d 37 2e 31 38 2d 37 2e 39 37 7a 4d 39 39 2e 37 20 31 2e 36 38 68 38 2e 36 32 63 35 2e 32 34 20 30 20 37 2e 37 34 20 32 2e 35 35 20 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 182 33" fill="#FFF"><path d="M112.16 15.72c3.66-.83 6.02-3.47 6.02-7.51 0-4.91-3.2-8.2-9.82-8.2h-10.7v32.44h11.07c6.9 0 10.61-3.24 10.61-8.76 0-4.41-2.64-7.23-7.18-7.97zM99.7 1.68h8.62c5.24 0 7.74 2.55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50053	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:20 UTC	2736	OUT	GET /assets/img/mtb-equalhousinglender.svg HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20009d3c304f23bc1170c60fa05affea7582c0e2d90d37e88592b69a102248f6548008ebac0a861130004259e856014adf76815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
2024-03-14 00:57:20 UTC	609	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: image/svg+xml Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1468127653" Date: Thu, 14 Mar 2024 00:57:20 GMT Content-Length: 230 Set-Cookie: TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; Path=/
2024-03-14 00:57:20 UTC	230	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 31 2e 39 39 22 20 66 69 6c 6c 3d 22 23 37 36 37 36 37 36 22 3e 3c 70 61 74 68 20 64 3d 22 4d 38 2e 30 39 20 30 4c 30 20 34 2e 36 76 31 2e 36 37 68 31 2e 32 34 76 35 2e 37 32 68 31 33 2e 35 56 36 2e 32 37 48 31 36 56 34 2e 36 35 7a 6d 2d 35 2e 32 20 34 2e 37 39 6c 35 2e 32 2d 33 2e 30 36 20 35 2e 31 20 33 2e 30 36 76 35 2e 37 34 48 32 2e 38 38 7a 6d 32 2e 34 33 20 32 2e 31 38 68 35 2e 33 39 76 2d 31 2e 34 48 35 2e 33 32 7a 6d 30 20 32 2e 31 68 35 2e 33 39 76 2d 31 2e 34 48 35 2e 33 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 11.99" fill="#767676"><path d="M8.09 0L0 4.6v1.67h1.24v5.72h13.5V6.27H16V4.65zm-5.2 4.79l5.2-3.06 5.1 3.06v5.74H2.88zm2.43 2.18h5.39v-1.4H5.32zm0 2.1h5.39v-1.4H5.32z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50054	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:20 UTC	2725	OUT	GET /assets/img/mtb-entrust.svg HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab200015a3532df2a3d4d9400b0f8a47c82271846aef8b7232c9e9af380f1811a457c608fe4dce4b113000f27990bd7063fa28815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
2024-03-14 00:57:20 UTC	609	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: image/svg+xml Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1798166898" Date: Thu, 14 Mar 2024 00:57:20 GMT Content-Length: 1349 Set-Cookie: TS1b6f618f027=0856addebbab200013fac294aba977be1ad2e90d26629a8030c61d984715e1f23b6d9126f3b2feba0801a651451130000b20a75016d2d80c815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; Path=/
2024-03-14 00:57:20 UTC	1349	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 33 34 2e 37 20 31 34 38 2e 35 22 20 66 69 6c 6c 3d 22 23 37 36 37 36 37 36 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 34 36 2e 32 68 38 34 76 2d 33 37 2e 37 48 34 33 2e 32 56 39 32 2e 31 68 33 37 56 35 34 2e 35 68 2d 33 37 56 34 30 2e 32 48 38 34 56 32 2e 35 48 30 6d 31 36 30 2e 39 20 32 39 2e 36 63 2d 31 33 2e 38 20 30 2d 32 34 2e 36 20 31 31 2e 34 2d 32 38 2e 36 20 32 33 2e 35 6c 2d 2e 34 2d 2e 35 20 31 2e 31 2d 32 30 2e 37 48 39 31 2e 35 76 31 31 31 2e 37 48 31 33 33 56 39 32 2e 34 63 30 2d 31 31 2e 34 2e 36 2d 31 39 20 38 2e 37 2d 31 39 20 37 20 30 20 37 2e 36 20 36 2e 38 20 37 2e 36 20 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 634.7 148.5" fill="#767676"><path d="M0 146.2h84v-37.7H43.2V92.1h37V54.5h-37V40.2H84V2.5H0m160.9 29.6c-13.8 0-24.6 11.4-28.6 23.5l-.4-.5 1.1-20.7H91.5v111.7H133V92.4c0-11.4.6-19 8.7-19 7 0 7.6 6.8 7.6 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50055	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:20 UTC	2482	OUT	GET /assets/img/mtb-logo.svg HTTP/1.1 Host: m.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab200015a3532df2a3d4d9400b0f8a47c82271846aef8b7232c9e9af380f1811a457c608fe4dce4b113000f27990bd7063fa28815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
2024-03-14 00:57:20 UTC	759	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: image/svg+xml Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1516711014" Date: Thu, 14 Mar 2024 00:57:20 GMT Set-Cookie: TS43d740f8029=0856addebbab2800e83cacbcb1b1ce742445ef798dbfb74ff2e31ec212091176130f67e2c01d67cc0109fcab14652e22; Max-Age=30; Path=/ Set-Cookie: TS1b6f618f027=0856addebbab2000c9a38aa2bdaf3467c995fecf705bc95fe43448c2272593c4382500d04e2ab246089c8cdef8113000404795ea9d83e1cb815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; Path=/ Transfer-Encoding: chunked
2024-03-14 00:57:20 UTC	2046	IN	Data Raw: 37 66 37 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 32 20 33 33 22 20 66 69 6c 6c 3d 22 23 46 46 46 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 32 2e 31 36 20 31 35 2e 37 32 63 33 2e 36 36 2d 2e 38 33 20 36 2e 30 32 2d 33 2e 34 37 20 36 2e 30 32 2d 37 2e 35 31 20 30 2d 34 2e 39 31 2d 33 2e 32 2d 38 2e 32 2d 39 2e 38 32 2d 38 2e 32 68 2d 31 30 2e 37 76 33 32 2e 34 34 68 31 31 2e 30 37 63 36 2e 39 20 30 20 31 30 2e 36 31 2d 33 2e 32 34 20 31 30 2e 36 31 2d 38 2e 37 36 20 30 2d 34 2e 34 31 2d 32 2e 36 34 2d 37 2e 32 33 2d 37 2e 31 38 2d 37 2e 39 37 7a 4d 39 39 2e 37 20 31 2e 36 38 68 38 2e 36 32 63 35 2e 32 34 20 30 20 37 2e 37 34 20 Data Ascii: 7f7<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 182 33" fill="#FFF"><path d="M112.16 15.72c3.66-.83 6.02-3.47 6.02-7.51 0-4.91-3.2-8.2-9.82-8.2h-10.7v32.44h11.07c6.9 0 10.61-3.24 10.61-8.76 0-4.41-2.64-7.23-7.18-7.97zM99.7 1.68h8.62c5.24 0 7.74
2024-03-14 00:57:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50056	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	2704	OUT	GET /assets/fonts/mandtbaltoweb-book.woff HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://m.mtb.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://m.mtb.com/assets/css/mtb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; TS1b6f618f027=0856addebbab200013fac294aba977be1ad2e90d26629a8030c61d984715e1f23b6d9126f3b2feba0801a651451130000b20a75016d2d80c815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
2024-03-14 00:57:21 UTC	687	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: application/font-woff Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:23 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0:dtagent10285240307101407f8p3" X-SRV: P-NAO-002 Timing-Allow-Origin: * Server-Timing: dtSInfo;desc="0", dtRpid;desc="1204547067", dtTao;desc="1" Date: Thu, 14 Mar 2024 00:57:20 GMT Content-Length: 67671 Set-Cookie: TS1b6f618f027=0856addebbab200005830686fca172a16d536d11416025b1d39361dac99748d42e4771c8aa479a5b08d1bfeca7113000a542f08b695359c635356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f; Path=/
2024-03-14 00:57:21 UTC	6804	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 08 57 00 12 00 00 00 02 ba dc 00 01 00 00 00 01 06 e0 00 00 01 77 00 00 02 e6 00 00 00 00 00 00 00 00 47 50 4f 53 00 00 e3 58 00 00 1f 25 00 00 96 26 50 09 d2 5b 47 53 55 42 00 01 02 80 00 00 04 5f 00 00 08 32 1d c3 0d fa 4c 54 53 48 00 00 06 90 00 00 01 18 00 00 02 27 71 c2 bb bc 4f 53 2f 32 00 00 02 10 00 00 00 58 00 00 00 60 6a 14 81 0b 56 44 4d 58 00 00 07 a8 00 00 03 7b 00 00 0b ba f8 5c e2 8d 63 6d 61 70 00 00 30 98 00 00 03 fd 00 00 08 ca aa 5a b1 ea 63 76 74 20 00 00 36 ac 00 00 00 44 00 00 00 44 0d 97 02 d7 66 70 67 6d 00 00 34 98 00 00 01 02 00 00 01 73 06 59 9c 37 67 6c 79 66 00 00 3b 38 00 00 9c 66 00 01 81 b0 26 79 6b 82 68 64 6d 78 00 00 0b 24 00 00 25 71 00 00 5a 98 e5 1c 5d 0e 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFFWwGPOSX%&P[GSUB_2LTSH'qOS/2X`jVDMX{\cmap0Zcvt 6DDfpgm4sY7glyf;8f&ykhdmx$%qZ]head
2024-03-14 00:57:21 UTC	5096	IN	Data Raw: e5 c2 49 78 5e 39 c1 b2 68 7f 06 77 70 02 6a 3d bb c9 4e dd 86 55 1e 70 43 38 31 ca 09 2e 95 8f 85 9a 16 22 1e a6 c7 2b 53 33 03 92 a5 0b d3 02 f8 3a f9 85 93 77 39 30 73 9b 34 f2 53 e1 84 0b 31 11 35 92 23 f4 92 13 e2 01 4e ea 0b 1d 51 9d 17 ef 6d 0f 3d 66 9d 09 bd 2d bf 9a 6b a9 ea 4c 4e b2 4f 65 1d 7a ab 4f 0f 85 97 18 13 2c 9c 84 e1 c2 89 b6 ae 38 19 ee 1d 68 cd c5 c4 13 e1 04 ca 86 1f c9 6a 4b 4e 32 f8 74 59 19 39 c1 28 a6 84 d8 e2 e0 24 87 92 d1 85 71 45 5e 18 5c e5 1d 1e 47 cd 98 64 f8 17 31 20 50 4e 1a a6 03 28 99 34 cf 05 27 34 41 6e 0b bb 61 a2 9c 2c 69 64 ca a3 87 3c 2c 38 05 04 a9 a1 e0 fd 08 19 42 ea 03 e5 d8 c0 5f 14 43 97 55 f4 d8 2c b5 84 13 37 bc 60 52 79 4e 6f 0c fb d0 fe ac 69 84 93 c4 2b 36 d9 29 00 33 0f 18 27 a7 07 46 99 41 bf 3a 23 Data Ascii: Ix^9hwpj=NUpC81."+S3:w90s4S15#NQm=f-kLNOezO,8hjKN2tY9($qE^\Gd1 PN(4'4Ana,id<,8B_CU,7`RyNoi+6)3'FA:#
2024-03-14 00:57:21 UTC	7026	IN	Data Raw: 05 9c fc f2 7f c1 65 00 27 48 e7 61 e8 5a 38 b1 3d 38 09 f1 28 39 a9 d4 53 c2 e1 8c 12 12 3b 04 eb d3 65 ec 2f e7 a8 3c f5 af e7 fb e9 fe 38 f5 e7 e9 fb 34 a2 32 b2 6d 6f 5b ac af cf 5b 44 81 36 7c e3 e9 95 69 8c 9c c3 d5 a8 52 c1 c9 69 3c df 9f e7 10 4c 75 d0 54 bd cc 5f 98 28 da 7e b4 f7 fd f0 7a b6 55 ff eb 3d f5 55 52 db c2 c9 09 9c dc ff f2 7d 7c e6 ff f9 db 37 c8 2e d3 b4 88 a3 e2 7f 85 13 56 8b 58 16 ed df 74 55 9d e2 5d e0 e4 7e 13 72 42 22 94 13 80 21 3f 0e 24 27 78 06 fd e8 16 4e d4 fb 7c 87 c8 71 cc af 17 70 72 9e 1d c9 a0 46 44 8b 13 e7 1f 7a 46 07 4e 24 bd 7a 77 46 c7 b3 97 be cc 7a 13 7e 7d bd 27 27 e7 8a 83 a7 76 9c 98 9d 10 8f aa 1a de fe 8f c7 74 af d3 c3 7b 4e c6 76 18 7f 9c ca 64 3b ff 51 e3 8f af ff 4b 4e c6 4f 65 1d 7a ab 8f 99 c9 9c Data Ascii: e'HaZ8=8(9S;e/<842mo[[D6\|iRi<LuT_(~zU=UR}\|7.VXtU]~rB"!?$'xN\|qprFDzFN$zwFz~}''vt{Nvd;QKNOez
2024-03-14 00:57:21 UTC	9667	IN	Data Raw: 47 95 0c a9 16 15 40 bb 04 d6 4b 20 5d 02 25 04 c8 0e da b1 3f 76 5d 07 7d 58 e1 e3 f3 65 17 da 55 a8 05 28 8d ba 16 80 6f c1 25 5c 2f df ff a0 04 f6 48 e0 24 01 48 dc cc 64 cd 20 62 68 10 e4 d3 20 ab ca 48 d6 c3 1e 9a 95 34 1a 2e 6b 88 96 13 67 a4 6c c8 1b d8 84 c0 63 03 81 c7 06 a4 d5 06 02 8f 0d b6 47 1b 2c 1a 1b 09 82 2f 42 79 05 ca 3b 50 3e 80 22 04 1e 14 b1 6d c0 53 c0 e0 ed 82 87 36 93 c8 78 9a 08 53 9a 6c 91 53 30 3e 69 8a 93 57 9d 26 c6 87 9a e6 a1 15 e1 81 0d 87 70 d2 52 42 fa 54 e0 2c 52 19 da 14 de 5f d9 d0 db d4 b8 da 37 90 7e f5 ba 4d 93 bd 1b ef 67 4b 22 03 cc b1 7c 43 79 5d f7 a2 e5 ae 0d 3b b6 0f d5 7f 62 f4 ae ae 4e 9c 4f d7 f4 7b 40 57 1f 51 4a d9 33 a8 61 f6 89 35 59 4a df 05 42 d3 95 0a cc 0e cd eb 4a 10 20 a8 11 01 0e 98 80 d3 9b 03 Data Ascii: G@K ]%?v]}XeU(o%\/H$Hd bh H4.kglcG,/By;P>"mS6xSlS0>iW&pRBT,R_7~MgK"\|Cy];bNO{@WQJ3a5YJBJ
2024-03-14 00:57:21 UTC	2548	IN	Data Raw: ae bd 3c ce 2d c8 b3 be 77 96 85 f8 d9 9d c6 19 de 42 4b 56 9a e5 42 e4 38 4b 3e 30 ea 93 d0 ec a3 ca 0d 84 b5 23 fa 7a c0 e5 11 be 56 32 f4 d7 e3 99 66 3f f7 8b ab 75 f5 0f 42 fd 5d 73 f4 f5 68 57 fb 90 9f 91 f7 3b ac ff 19 af 9f 3e 4b f6 36 7c 3e d6 58 94 a1 e9 2b a9 fe 65 fc 33 3c bf 44 f9 f9 f4 1e 45 dc 01 f5 28 b6 bd cb 9f ff 59 dd 73 84 3d 1e d7 e2 3a be 16 3d 5a 7b 54 8b e8 d7 cd f4 97 f5 31 f5 80 06 45 a2 56 57 4f fd 2a 88 af a7 f7 d6 c6 d7 e3 7b d7 f3 f7 3a 79 3d e9 57 c4 7b 3f 43 7f 19 8f a9 87 f7 06 44 ad ae 9e de eb 8d af a7 f7 96 6a f5 b8 ef 2a 87 d9 36 ca 2d 71 fa 02 f9 e7 4f c6 a5 9d d7 6c bf 5a 6a fa 63 52 5e b5 c6 e7 74 a2 1b ac d2 a3 c7 0a a4 48 18 f9 3b e2 d3 19 a2 f8 2c 09 06 8b 65 23 a5 f8 c0 44 b6 3b 45 1e 7d a6 29 b0 82 ae ea 2b fb Data Ascii: <-wBKVB8K>0#zV2f?uB]shW;>K6\|>X+e3<DE(Ys=:=Z{T1EVWO{:y=W{?CDj6-qOlZjcR^tH;,e#D;E})+
2024-03-14 00:57:21 UTC	1274	IN	Data Raw: 2a ce ed ca a7 11 94 ca 82 02 a1 17 48 12 a7 3f e3 69 21 15 53 44 fe ab 75 24 22 8e e1 d1 ab b1 b3 b5 3c 07 73 c8 0f 93 9b f9 92 65 d6 82 71 f8 b1 47 06 04 1c 01 e0 01 19 10 70 9d 30 e9 63 28 42 32 ed ab 6e 01 81 50 34 53 c0 34 72 9a e6 16 16 f9 64 b1 13 fb a0 15 d9 f2 64 36 1f fd 31 0f 5a 3a 87 bf 1b 0f 4e aa a5 83 a9 c9 e9 2e 4f 66 44 c9 83 16 89 da 34 aa e5 3e d0 f9 a8 e3 c1 e0 eb c7 60 98 9e 85 f2 12 0e d7 28 57 b0 57 4e a1 88 41 91 5c 95 b0 58 2b 95 e7 f0 dc e5 51 3e a6 e2 3c dc 02 72 8e 39 0e 55 cf 40 79 11 0a 5e 10 14 0d e2 c1 5b a2 b5 97 f0 93 aa ad 20 fb 60 6d 05 c8 60 15 40 1a 2a 28 3b 56 08 83 a1 f9 23 43 f4 c8 fb a1 ea 04 94 17 90 00 21 f9 e1 db 93 1f 84 0e 03 df c3 4a 40 ca 28 89 6a b0 eb fd 3a b6 cf 52 c2 36 6e bc ca ef 63 e1 8c f9 c5 08 44 Data Ascii: H?i!SDu$"<seqGp0c(B2nP4S4rdd61Z:N.OfD4>`(WWNA\X+Q><r9U@y^[ `m`@(;V#C!J@(j:R6ncD
2024-03-14 00:57:21 UTC	10704	IN	Data Raw: f5 31 c9 16 d4 df f2 5c 0b 4b 45 46 9b 22 ef e6 65 0b c6 f5 59 6d 5a 57 38 33 c7 1a 63 13 31 74 ed e4 89 18 6a 54 53 73 39 66 ba 59 59 dd 37 d8 dd be c6 62 c8 14 d9 6e 6a aa ab 6b a2 39 1a 3a b8 de a5 7c fa d7 aa 45 4d e5 fc b7 6a 40 fe 3b 43 f0 df c9 b3 f2 df 0e 1d ff ed 90 fc f7 b3 89 f8 ef 8c 0b f0 df d2 e3 c3 2d 52 b9 b8 a5 e3 67 ad dc 54 af 8f 75 a5 9d c9 8d 9f d0 71 e3 6e 99 8b 34 c6 0f 99 1f 71 e1 e6 f3 8c 89 cb 1f 25 b9 91 ec 0d c2 d4 91 21 81 85 b1 f9 12 a3 b9 72 a9 45 a9 54 25 79 77 1d cb 8e d4 99 b8 74 2f 31 e6 85 a4 c7 c9 53 ba a1 2c 87 b2 09 ca 6e 28 d7 41 b9 15 ca fd 48 4d 62 98 77 3d af 3e 93 35 8f 72 e2 24 2a 8a c3 36 36 11 10 c3 9b 1f 97 bc f9 5a 00 b6 43 b9 1a ca 61 e2 cd 13 32 ec e4 7a 5b 41 4f 89 e5 dc a3 8c ba a7 92 f9 81 49 17 71 e6 Data Ascii: 1\KEF"eYmZW83c1tjTSs9fYY7bnjk9:\|EMj@;C-RgTuqn4q%!rET%ywt/1S,n(AHMbw=>5r$*66ZCa2z[AOIq
2024-03-14 00:57:21 UTC	14526	IN	Data Raw: c7 40 4e 82 bc 0c f2 3a c8 2f 41 de 01 11 c6 a2 1c a8 f4 1c 45 dd 2a 19 f1 cb 65 e0 60 ff 5a f6 44 ab 5e 16 bd ba b9 67 61 d7 b2 aa f2 be be d9 dd cd 0b a2 7a 2d d7 af 99 d8 dd 55 df 33 fb b6 4d a3 b7 db de 9c 3f d8 5f 5b db d9 da 50 53 33 7b 76 7f cc a2 ad d7 f5 56 cf b3 98 97 56 2e dc b5 6e 13 8c 7f b0 ca 55 73 69 9e 33 29 bf e5 bd d8 9b 57 37 52 ec 0d b5 18 8e cf c8 65 78 95 4c 1c 92 89 04 99 98 2f 13 27 3c 9e fb 53 c1 1d 3d 60 69 6c 08 a1 de be be 3a 72 e3 12 e4 2d 82 2e 64 11 24 a4 07 30 b9 fe dc 07 89 27 64 03 d9 2c 28 01 c2 09 c8 c7 84 16 0b c1 7c 32 6e 33 ea 3a 90 b7 2d 23 b4 9c e1 b0 44 41 e6 f6 b8 7f c7 e2 dd b7 b3 e5 ab 96 2c 99 ab ae 70 df dc 5a c5 fe c3 9d d7 fa 99 cf 70 bd be 13 fa 47 12 94 91 1d a3 73 24 68 11 f4 ec 62 37 2d a2 bf 56 f0 d0 Data Ascii: @N:/AE*e`ZD^gaz-U3M?_[PS3{vVV.nUsi3)W7RexL/'<S=`il:r-.d$0'd,(\|2n3:-#DA,pZpGs$hb7-V
2024-03-14 00:57:21 UTC	7263	IN	Data Raw: f6 9c b2 c0 d2 f9 92 63 87 3f 0e b2 5d 96 e2 ef ad d1 7a 1c b7 d8 c3 c3 25 7f 79 1c 36 16 fd 4a ec 37 e4 7c cf d3 b7 49 45 cf d1 58 0e 77 7a 66 d0 5b a3 5a e6 74 54 64 82 92 5f 26 bd cf c9 9b 1a 69 d0 3f 48 53 2a 76 a6 5e 17 53 e8 a4 a4 9a c4 4a 39 85 b6 c1 d4 93 40 74 41 69 47 2a 4a 30 52 52 82 31 35 25 9e 29 2a 01 e9 aa 0a 9d e6 5a 59 85 51 4b a2 ae c2 b0 35 59 58 61 3c 61 4c 65 c9 ee 5a 69 c9 ee 44 6d 49 98 28 8b 30 6c 8c eb 42 88 93 85 11 c6 69 f3 83 ac 73 cc fa 85 82 1d 79 9e af b7 36 97 c3 3e ab 46 f5 5a 60 01 18 51 f5 2d aa 12 0b 5b a4 71 e8 36 55 45 d6 d7 d7 d2 08 85 96 59 92 8a 75 16 92 9a d0 72 d7 31 4a 4b ce 49 a9 85 ba aa b5 3e d2 88 2d dc f1 25 9b aa 72 8b 18 a3 46 82 c6 58 70 41 6a c5 65 f7 a0 e7 87 63 50 7f 8f 6b 5e 96 a3 11 22 a9 9b 29 a2 Data Ascii: c?]z%y6J7\|IEXwzf[ZtTd_&i?HSv^SJ9@tAiGJ0RR15%)*ZYQK5YXa<aLeZiDmI(0lBisy6>FZ`Q-[q6UEYur1JKI>-%rFXpAjecPk^")
2024-03-14 00:57:21 UTC	2763	IN	Data Raw: 44 53 79 26 fc e0 64 9e c5 b3 f0 ac f2 86 3b f8 16 be 15 e7 b7 f1 6d 78 6a 36 df 8e 7c ee e0 3b 69 17 cf e5 79 f4 1c df cd f7 d0 5e be 97 3f 4b cf f3 02 5e 48 2f f0 43 bc 88 f6 f3 62 7e 8c f6 f1 e3 fc 04 1d e0 25 bc 04 65 2d e5 a5 54 c3 cb 78 19 72 78 92 9f a4 ed bc 9c 97 d3 d5 bc 82 57 e0 ca 4a f8 dc 39 bc 8a 57 a1 ac a7 f8 29 7a 00 de 77 35 ad e5 35 bc 06 57 e0 85 69 1b af e5 f5 38 df c0 1b e8 65 de c8 1b e9 5a de c4 9b e8 7e de cc 9b 69 3e 6f e1 2d 34 91 b7 f2 56 1a c3 db 78 1b dd c6 db 79 3b dd c2 3b 78 07 8d e0 9d bc 13 4f ed e2 5d 34 9d 77 f3 6e e4 03 6f 4e ab f9 19 7e 06 e7 f0 e9 38 7f 8e 9f c3 f9 5e de 4b 9b f8 79 7e 9e b6 f0 0b fc 02 ce f7 f1 3e 9c ef e7 17 71 f7 20 1f a4 cf c0 eb 1f a2 2a fe 1c bf 84 2b f0 fe 54 c9 af f0 e7 71 0e 0c a0 1b f9 8b Data Ascii: DSy&d;mxj6\|;iy^?K^H/Cb~%e-TxrxWJ9W)zw55Wi8eZ~i>o-4Vxy;;xO]4wnoN~8^Ky~>q *+Tq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50060	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	2702	OUT	GET /assets/fonts/mandtpg-iconfont.woff HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://m.mtb.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://m.mtb.com/assets/css/mtb.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; TS1b6f618f027=0856addebbab200013fac294aba977be1ad2e90d26629a8030c61d984715e1f23b6d9126f3b2feba0801a651451130000b20a75016d2d80c815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
2024-03-14 00:57:21 UTC	686	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: application/font-woff Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:23 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0:dtagent10285240307101407f8p3" X-SRV: P-NAO-002 Timing-Allow-Origin: * Server-Timing: dtSInfo;desc="0", dtRpid;desc="-422339291", dtTao;desc="1" Date: Thu, 14 Mar 2024 00:57:20 GMT Content-Length: 4476 Set-Cookie: TS1b6f618f027=0856addebbab20006c815ea58b46371102ed414a80e730c0af6a1b706d2e1d0d48d9ddf092fa13180893888cf41130002bb5a6a36936626435356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f; Path=/
2024-03-14 00:57:21 UTC	4476	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 11 7c 00 0b 00 00 00 00 1e 24 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 53 55 42 00 00 01 08 00 00 00 3b 00 00 00 54 20 8b 25 7a 4f 53 2f 32 00 00 01 44 00 00 00 41 00 00 00 56 3f 24 4b ae 63 6d 61 70 00 00 01 88 00 00 00 ed 00 00 03 4c eb a9 ad e3 67 6c 79 66 00 00 02 78 00 00 0b a3 00 00 13 90 be 7d c5 57 68 65 61 64 00 00 0e 1c 00 00 00 33 00 00 00 36 12 2e 96 4c 68 68 65 61 00 00 0e 50 00 00 00 1e 00 00 00 24 07 d9 04 05 68 6d 74 78 00 00 0e 70 00 00 00 1c 00 00 00 90 88 de ff f8 6c 6f 63 61 00 00 0e 8c 00 00 00 4a 00 00 00 4a 4f fa 4a de 6d 61 78 70 00 00 0e d8 00 00 00 1f 00 00 00 20 01 3a 00 a5 6e 61 6d 65 00 00 0e f8 00 00 01 5e 00 00 02 b2 a7 4a 4c 17 70 6f 73 74 00 00 10 58 00 00 01 Data Ascii: wOFF\|$GSUB;T %zOS/2DAV?$KcmapLglyfx}Whead36.LhheaP$hmtxplocaJJOJmaxp :name^JLpostX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50059	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	2662	OUT	GET /scripts/jquery-3.3.1.js HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
2024-03-14 00:57:21 UTC	768	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: application/javascript Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-874024216" Date: Thu, 14 Mar 2024 00:57:20 GMT Set-Cookie: TS43d740f8029=0856addebbab280079536335d6406e1b4d513fb947f165850a2e13ac351747e8b47f481d7dca3e32142b123fb49abd68; Max-Age=30; Path=/ Set-Cookie: TS1b6f618f027=0856addebbab200069819704cada47a6c50e851a67e95d540d1d8084fe5f7e6d767c8b05f0afc68a0870f73f10113000bcb756bca8f5bd3935356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f; Path=/ Transfer-Encoding: chunked
2024-03-14 00:57:21 UTC	15616	IN	Data Raw: 34 30 30 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 33 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 Data Ascii: 4000/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("
2024-03-14 00:57:21 UTC	776	IN	Data Raw: 6c 64 4e 6f 64 65 73 5b 64 5d 3b 77 68 69 6c 65 28 70 3d 2b 2b 64 26 26 70 26 26 70 5b 67 5d 7c 7c 28 78 3d 64 3d 30 29 7c 7c 68 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 70 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 78 26 26 70 3d 3d 3d 74 29 7b 63 5b 65 5d 3d 5b 54 2c 64 2c 78 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 6d 26 26 28 78 3d 64 3d 28 6c 3d 28 63 3d 28 66 3d 28 70 3d 74 29 5b 62 5d 7c 7c 28 70 5b 62 5d 3d 7b 7d 29 29 5b 70 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 66 5b 70 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 65 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 54 26 26 6c 5b 31 5d 29 2c 21 31 3d 3d 3d 78 29 77 68 69 6c 65 28 70 3d 2b 2b 64 26 26 70 26 26 70 5b 67 5d 7c 7c 28 78 3d 64 3d 30 29 7c 7c 68 2e 70 6f 70 28 29 29 69 66 28 28 73 3f 70 Data Ascii: ldNodes[d];while(p=++d&&p&&p[g]\|\|(x=d=0)\|\|h.pop())if(1===p.nodeType&&++x&&p===t){c[e]=[T,d,x];break}}else if(m&&(x=d=(l=(c=(f=(p=t)[b]\|\|(p[b]={}))[p.uniqueID]\|\|(f[p.uniqueID]={}))[e]\|\|[])[0]===T&&l[1]),!1===x)while(p=++d&&p&&p[g]\|\|(x=d=0)\|\|h.pop())if((s?p
2024-03-14 00:57:21 UTC	2617	IN	Data Raw: 61 33 32 0d 0a 2c 6e 3d 5b 5d 2c 72 3d 73 28 65 2e 72 65 70 6c 61 63 65 28 42 2c 22 24 31 22 29 29 3b 72 65 74 75 72 6e 20 72 5b 62 5d 3f 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 29 7b 76 61 72 20 6f 2c 61 3d 72 28 65 2c 6e 75 6c 6c 2c 69 2c 5b 5d 29 2c 73 3d 65 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 73 2d 2d 29 28 6f 3d 61 5b 73 5d 29 26 26 28 65 5b 73 5d 3d 21 28 74 5b 73 5d 3d 6f 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 74 5b 30 5d 3d 65 2c 72 28 74 2c 6e 75 6c 6c 2c 6f 2c 6e 29 2c 74 5b 30 5d 3d 6e 75 6c 6c 2c 21 6e 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 65 28 65 Data Ascii: a32,n=[],r=s(e.replace(B,"$1"));return r[b]?se(function(e,t,n,i){var o,a=r(e,null,i,[]),s=e.length;while(s--)(o=a[s])&&(e[s]=!(t[s]=o))}):function(e,i,o){return t[0]=e,r(t,null,o,n),t[0]=null,!n.pop()}}),has:se(function(e){return function(t){return oe(e
2024-03-14 00:57:21 UTC	9675	IN	Data Raw: 32 35 63 33 0d 0a 66 28 21 6e 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 3f 73 2e 6c 65 6e 67 74 68 3a 73 3f 6f 65 2e 65 72 72 6f 72 28 65 29 3a 6b 28 65 2c 75 29 2e 73 6c 69 63 65 28 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 65 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 22 22 3b 74 3c 6e 3b 74 2b 2b 29 72 2b 3d 65 5b 74 5d 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 64 69 72 2c 69 3d 74 2e 6e 65 78 74 2c 6f 3d 69 7c 7c 72 2c 61 3d 6e 26 26 22 70 61 72 65 6e 74 4e 6f 64 65 22 3d 3d 3d 6f 2c 73 3d 43 2b 2b 3b 72 65 74 75 72 6e 20 74 2e 66 69 72 73 74 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 77 68 69 6c 65 28 74 3d 74 Data Ascii: 25c3f(!n)break}return t?s.length:s?oe.error(e):k(e,u).slice(0)};function ve(e){for(var t=0,n=e.length,r="";t<n;t++)r+=e[t].value;return r}function me(e,t,n){var r=t.dir,i=t.next,o=i\|\|r,a=n&&"parentNode"===o,s=C++;return t.first?function(t,n,i){while(t=t
2024-03-14 00:57:21 UTC	14534	IN	Data Raw: 33 38 62 65 0d 0a 43 61 6c 6c 62 61 63 6b 73 28 22 6d 65 6d 6f 72 79 22 29 2c 77 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6d 65 6d 6f 72 79 22 29 2c 32 5d 2c 5b 22 72 65 73 6f 6c 76 65 22 2c 22 64 6f 6e 65 22 2c 77 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 77 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 30 2c 22 72 65 73 6f 6c 76 65 64 22 5d 2c 5b 22 72 65 6a 65 63 74 22 2c 22 66 61 69 6c 22 2c 77 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 77 2e 43 61 6c 6c 62 61 63 6b 73 28 22 6f 6e 63 65 20 6d 65 6d 6f 72 79 22 29 2c 31 2c 22 72 65 6a 65 63 74 65 64 22 5d 5d 2c 72 3d 22 70 65 6e 64 69 6e 67 22 2c 69 3d 7b 73 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: 38beCallbacks("memory"),w.Callbacks("memory"),2],["resolve","done",w.Callbacks("once memory"),w.Callbacks("once memory"),0,"resolved"],["reject","fail",w.Callbacks("once memory"),w.Callbacks("once memory"),1,"rejected"]],r="pending",i={state:function(){
2024-03-14 00:57:21 UTC	14534	IN	Data Raw: 33 38 62 65 0d 0a 2c 5f 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 65 2e 74 61 72 67 65 74 2c 22 61 22 29 7d 7d 2c 62 65 66 6f 72 65 75 6e 6c 6f 61 64 3a 7b 70 6f 73 74 44 69 73 70 61 74 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 6f 69 64 20 30 21 3d 3d 65 2e 72 65 73 75 6c 74 26 26 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 26 26 28 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 65 2e 72 65 73 75 6c 74 29 7d 7d 7d 7d 2c 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 29 7d 2c 77 2e 45 Data Ascii: 38be,_default:function(e){return N(e.target,"a")}},beforeunload:{postDispatch:function(e){void 0!==e.result&&e.originalEvent&&(e.originalEvent.returnValue=e.result)}}}},w.removeEvent=function(e,t,n){e.removeEventListener&&e.removeEventListener(t,n)},w.E
2024-03-14 00:57:21 UTC	14534	IN	Data Raw: 33 38 62 65 0d 0a 28 29 7b 61 2e 75 6e 71 75 65 75 65 64 2d 2d 2c 77 2e 71 75 65 75 65 28 65 2c 22 66 78 22 29 2e 6c 65 6e 67 74 68 7c 7c 61 2e 65 6d 70 74 79 2e 66 69 72 65 28 29 7d 29 7d 29 29 3b 66 6f 72 28 72 20 69 6e 20 74 29 69 66 28 69 3d 74 5b 72 5d 2c 69 74 2e 74 65 73 74 28 69 29 29 7b 69 66 28 64 65 6c 65 74 65 20 74 5b 72 5d 2c 6f 3d 6f 7c 7c 22 74 6f 67 67 6c 65 22 3d 3d 3d 69 2c 69 3d 3d 3d 28 67 3f 22 68 69 64 65 22 3a 22 73 68 6f 77 22 29 29 7b 69 66 28 22 73 68 6f 77 22 21 3d 3d 69 7c 7c 21 79 7c 7c 76 6f 69 64 20 30 3d 3d 3d 79 5b 72 5d 29 63 6f 6e 74 69 6e 75 65 3b 67 3d 21 30 7d 64 5b 72 5d 3d 79 26 26 79 5b 72 5d 7c 7c 77 2e 73 74 79 6c 65 28 65 2c 72 29 7d 69 66 28 28 75 3d 21 77 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 74 29 29 Data Ascii: 38be(){a.unqueued--,w.queue(e,"fx").length\|\|a.empty.fire()})}));for(r in t)if(i=t[r],it.test(i)){if(delete t[r],o=o\|\|"toggle"===i,i===(g?"hide":"show")){if("show"!==i\|\|!y\|\|void 0===y[r])continue;g=!0}d[r]=y&&y[r]\|\|w.style(e,r)}if((u=!w.isEmptyObject(t))
2024-03-14 00:57:21 UTC	14534	IN	Data Raw: 33 38 62 65 0d 0a 75 74 7c 61 70 70 7c 61 70 70 2d 73 74 6f 72 61 67 65 7c 2e 2b 2d 65 78 74 65 6e 73 69 6f 6e 7c 66 69 6c 65 7c 72 65 73 7c 77 69 64 67 65 74 29 3a 24 2f 2c 4d 74 3d 2f 5e 28 3f 3a 47 45 54 7c 48 45 41 44 29 24 2f 2c 52 74 3d 2f 5e 5c 2f 5c 2f 2f 2c 49 74 3d 7b 7d 2c 57 74 3d 7b 7d 2c 24 74 3d 22 2a 2f 22 2e 63 6f 6e 63 61 74 28 22 2a 22 29 2c 42 74 3d 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 42 74 2e 68 72 65 66 3d 43 74 2e 68 72 65 66 3b 66 75 6e 63 74 69 6f 6e 20 46 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 74 2c 74 3d 22 2a 22 29 3b 76 61 72 20 72 2c 69 3d 30 2c 6f 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 Data Ascii: 38beut\|app\|app-storage\|.+-extension\|file\|res\|widget):$/,Mt=/^(?:GET\|HEAD)$/,Rt=/^\/\//,It={},Wt={},$t="/".concat(""),Bt=r.createElement("a");Bt.href=Ct.href;function Ft(e){return function(t,n){"string"!=typeof t&&(n=t,t="*");var r,i=0,o=t.toLowerCase(
2024-03-14 00:57:21 UTC	170	IN	Data Raw: 61 34 0d 0a 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 29 3b 76 61 72 20 4a 74 3d 65 2e 6a 51 75 65 72 79 2c 4b 74 3d 65 2e 24 3b 72 65 74 75 72 6e 20 77 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 24 3d 3d 3d 77 26 26 28 65 2e 24 3d 4b 74 29 2c 74 26 26 65 2e 6a 51 75 65 72 79 3d 3d 3d 77 26 26 28 65 2e 6a 51 75 65 72 79 3d 4a 74 29 2c 77 7d 2c 74 7c 7c 28 65 2e 6a 51 75 65 72 79 3d 65 2e 24 3d 77 29 2c 77 7d 29 3b 0d 0a 0d 0a Data Ascii: a4],function(){return w});var Jt=e.jQuery,Kt=e.$;return w.noConflict=function(t){return e.$===w&&(e.$=Kt),t&&e.jQuery===w&&(e.jQuery=Jt),w},t\|\|(e.jQuery=e.$=w),w});
2024-03-14 00:57:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50057	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	2496	OUT	GET /assets/img/mtb-equalhousinglender.svg HTTP/1.1 Host: m.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; rxvt=1710379633697\|1710377821892; dtPC=4$377821888_974h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
2024-03-14 00:57:21 UTC	759	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: image/svg+xml Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-784792603" Date: Thu, 14 Mar 2024 00:57:20 GMT Set-Cookie: TS43d740f8029=0856addebbab2800a1f192b5520f6861a6633bf421be429b71d07eeeb1588ed47a1c6fd7c6833c909a5e23c291fa2b8e; Max-Age=30; Path=/ Set-Cookie: TS1b6f618f027=0856addebbab20001d91b8740f497fef2e06dba1a52772c2bd742971c552230022855fd41e6aabb008ed73a001113000fe64fdc2dcecda4d35356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f; Path=/ Transfer-Encoding: chunked
2024-03-14 00:57:21 UTC	236	IN	Data Raw: 65 36 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 31 2e 39 39 22 20 66 69 6c 6c 3d 22 23 37 36 37 36 37 36 22 3e 3c 70 61 74 68 20 64 3d 22 4d 38 2e 30 39 20 30 4c 30 20 34 2e 36 76 31 2e 36 37 68 31 2e 32 34 76 35 2e 37 32 68 31 33 2e 35 56 36 2e 32 37 48 31 36 56 34 2e 36 35 7a 6d 2d 35 2e 32 20 34 2e 37 39 6c 35 2e 32 2d 33 2e 30 36 20 35 2e 31 20 33 2e 30 36 76 35 2e 37 34 48 32 2e 38 38 7a 6d 32 2e 34 33 20 32 2e 31 38 68 35 2e 33 39 76 2d 31 2e 34 48 35 2e 33 32 7a 6d 30 20 32 2e 31 68 35 2e 33 39 76 2d 31 2e 34 48 35 2e 33 32 7a 22 2f 3e 3c 2f 73 76 67 3e 0d 0a Data Ascii: e6<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 11.99" fill="#767676"><path d="M8.09 0L0 4.6v1.67h1.24v5.72h13.5V6.27H16V4.65zm-5.2 4.79l5.2-3.06 5.1 3.06v5.74H2.88zm2.43 2.18h5.39v-1.4H5.32zm0 2.1h5.39v-1.4H5.32z"/></svg>
2024-03-14 00:57:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50062	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	2659	OUT	GET /scripts/foundation.js HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892
2024-03-14 00:57:21 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: application/javascript Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="2000176196" Date: Thu, 14 Mar 2024 00:57:20 GMT Content-Length: 178110 Set-Cookie: TS1b6f618f027=0856addebbab2000efc9b58dab812fe22989d09cee9014fadaa4c1ae18afbd348cbe9d83c07fda9808e267ab3b11300080ccea44bf998b5435356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f; Path=/
2024-03-14 00:57:21 UTC	15764	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 65 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 65 28 74 2e 6a 51 75 65 72 79 29 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 69 29 Data Ascii: !function(t,e){if("object"==typeof exports&&"object"==typeof module)module.exports=e(require("jquery"));else if("function"==typeof define&&define.amd)define(["jquery"],e);else{var i="object"==typeof exports?e(require("jquery")):e(t.jQuery);for(var n in i)
2024-03-14 00:57:21 UTC	620	IN	Data Raw: 72 72 6f 72 53 65 6c 65 63 74 6f 72 3a 22 2e 66 6f 72 6d 2d 65 72 72 6f 72 22 2c 66 6f 72 6d 45 72 72 6f 72 43 6c 61 73 73 3a 22 69 73 2d 76 69 73 69 62 6c 65 22 2c 61 31 31 79 41 74 74 72 69 62 75 74 65 73 3a 21 30 2c 61 31 31 79 45 72 72 6f 72 4c 65 76 65 6c 3a 22 61 73 73 65 72 74 69 76 65 22 2c 6c 69 76 65 56 61 6c 69 64 61 74 65 3a 21 31 2c 76 61 6c 69 64 61 74 65 4f 6e 42 6c 75 72 3a 21 31 2c 70 61 74 74 65 72 6e 73 3a 7b 61 6c 70 68 61 3a 2f 5e 5b 61 2d 7a 41 2d 5a 5d 2b 24 2f 2c 61 6c 70 68 61 5f 6e 75 6d 65 72 69 63 3a 2f 5e 5b 61 2d 7a 41 2d 5a 30 2d 39 5d 2b 24 2f 2c 69 6e 74 65 67 65 72 3a 2f 5e 5b 2d 2b 5d 3f 5c 64 2b 24 2f 2c 6e 75 6d 62 65 72 3a 2f 5e 5b 2d 2b 5d 3f 5c 64 2a 28 3f 3a 5b 5c 2e 5c 2c 5d 5c 64 2b 29 3f 24 2f 2c 63 61 72 64 3a Data Ascii: rrorSelector:".form-error",formErrorClass:"is-visible",a11yAttributes:!0,a11yErrorLevel:"assertive",liveValidate:!1,validateOnBlur:!1,patterns:{alpha:/^[a-zA-Z]+$/,alpha_numeric:/^[a-zA-Z0-9]+$/,integer:/^[-+]?\d+$/,number:/^[-+]?\d*(?:[\.\,]\d+)?$/,card:
2024-03-14 00:57:21 UTC	2609	IN	Data Raw: 29 2b 24 2f 2c 75 72 6c 3a 2f 5e 28 28 3f 3a 28 68 74 74 70 73 3f 7c 66 74 70 73 3f 7c 66 69 6c 65 7c 73 73 68 7c 73 66 74 70 29 3a 5c 2f 5c 2f 7c 77 77 77 5c 64 7b 30 2c 33 7d 5b 2e 5d 7c 5b 61 2d 7a 30 2d 39 2e 5c 2d 5d 2b 5b 2e 5d 5b 61 2d 7a 5d 7b 32 2c 34 7d 5c 2f 29 28 3f 3a 5b 5e 5c 73 28 29 3c 3e 5d 2b 7c 5c 28 28 3f 3a 5b 5e 5c 73 28 29 3c 3e 5d 2b 7c 28 3f 3a 5c 28 5b 5e 5c 73 28 29 3c 3e 5d 2b 5c 29 29 29 2a 5c 29 29 2b 28 3f 3a 5c 28 28 3f 3a 5b 5e 5c 73 28 29 3c 3e 5d 2b 7c 28 3f 3a 5c 28 5b 5e 5c 73 28 29 3c 3e 5d 2b 5c 29 29 29 2a 5c 29 7c 5b 5e 5c 73 60 21 28 29 5c 5b 5c 5d 7b 7d 3b 3a 5c 27 22 2e 2c 3c 3e 3f 5c 78 61 62 5c 78 62 62 5c 75 32 30 31 63 5c 75 32 30 31 64 5c 75 32 30 31 38 5c 75 32 30 31 39 5d 29 29 24 2f 2c 64 6f 6d 61 69 6e Data Ascii: )+$/,url:/^((?:(https?\|ftps?\|file\|ssh\|sftp):\/\/\|www\d{0,3}[.]\|[a-z0-9.\-]+[.][a-z]{2,4}\/)(?:[^\s()<>]+\|\((?:[^\s()<>]+\|(?:\([^\s()<>]+\)))\))+(?:\((?:[^\s()<>]+\|(?:\([^\s()<>]+\)))\)\|[^\s`!()\[\]{};:\'".,<>?\xab\xbb\u201c\u201d\u2018\u2019]))$/,domain
2024-03-14 00:57:21 UTC	16384	IN	Data Raw: 7d 28 69 2c 6c 2e 50 6c 75 67 69 6e 29 2c 65 3d 69 2c 28 6e 3d 5b 7b 6b 65 79 3a 22 5f 73 65 74 75 70 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 61 2e 64 65 66 61 75 6c 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 69 2e 64 65 66 61 75 6c 74 73 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 29 2c 65 29 2c 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 41 63 63 6f 72 64 69 6f 6e 22 2c 74 68 69 73 2e 5f 69 6e 69 74 28 29 2c 73 2e 4b 65 79 62 6f 61 72 64 2e 72 65 67 69 73 74 65 72 28 22 41 63 63 6f 72 64 69 6f 6e 22 2c 7b 45 4e 54 45 52 3a 22 74 6f 67 67 6c 65 22 2c 53 50 41 43 45 3a 22 74 6f 67 67 6c 65 22 2c 41 52 52 4f 57 5f 44 4f 57 4e 3a 22 Data Ascii: }(i,l.Plugin),e=i,(n=[{key:"_setup",value:function(t,e){this.$element=t,this.options=a.default.extend({},i.defaults,this.$element.data(),e),this.className="Accordion",this._init(),s.Keyboard.register("Accordion",{ENTER:"toggle",SPACE:"toggle",ARROW_DOWN:"
2024-03-14 00:57:21 UTC	15072	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 2f 28 5b 61 2d 7a 5d 29 28 5b 41 2d 5a 5d 29 2f 67 2c 22 24 31 2d 24 32 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3f 72 28 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 3a 72 28 74 2e 63 6c 61 73 73 4e 61 6d 65 29 7d 65 2e 50 6c 75 67 69 6e 3d 61 7d 2c 22 2e 2f 6a 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 2e 63 6f 72 65 2e 75 74 69 6c 73 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 Data Ascii: );function r(t){return t.replace(/([a-z])([A-Z])/g,"$1-$2").toLowerCase()}function l(t){return void 0!==t.constructor.name?r(t.constructor.name):r(t.className)}e.Plugin=a},"./js/foundation.core.utils.js":function(t,e,i){"use strict";Object.defineProperty(
2024-03-14 00:57:21 UTC	14526	IN	Data Raw: 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 29 7c 7c 74 68 69 73 2e 24 63 75 72 72 65 6e 74 41 6e 63 68 6f 72 2e 61 74 74 72 28 22 69 64 22 29 7c 7c 28 30 2c 72 2e 47 65 74 59 6f 44 69 67 69 74 73 29 28 36 2c 22 64 64 2d 61 6e 63 68 6f 72 22 29 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 7b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 22 74 72 75 65 22 2c 22 64 61 74 61 2d 79 65 74 69 2d 62 6f 78 22 3a 74 2c 22 64 61 74 61 2d 72 65 73 69 7a 65 22 3a 74 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 65 7d 29 2c 66 28 68 28 69 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 5f 69 6e 69 74 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 28 29 Data Ascii: is.$element.attr("aria-labelledby")\|\|this.$currentAnchor.attr("id")\|\|(0,r.GetYoDigits)(6,"dd-anchor");this.$element.attr({"aria-hidden":"true","data-yeti-box":t,"data-resize":t,"aria-labelledby":e}),f(h(i.prototype),"_init",this).call(this),this._events()
2024-03-14 00:57:21 UTC	7263	IN	Data Raw: 65 64 42 6f 75 6e 64 3a 74 68 69 73 2e 5f 6f 6e 50 6f 73 74 45 71 75 61 6c 69 7a 65 64 2e 62 69 6e 64 28 74 68 69 73 29 7d 3b 76 61 72 20 69 2c 6e 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 69 6d 67 22 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 65 71 75 61 6c 69 7a 65 4f 6e 3f 28 69 3d 74 68 69 73 2e 5f 63 68 65 63 6b 4d 51 28 29 2c 28 30 2c 64 2e 64 65 66 61 75 6c 74 29 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 63 68 61 6e 67 65 64 2e 7a 66 2e 6d 65 64 69 61 71 75 65 72 79 22 2c 74 68 69 73 2e 5f 63 68 65 63 6b 4d 51 2e 62 69 6e 64 28 74 68 69 73 29 29 29 3a 74 68 69 73 2e 5f 65 76 65 6e 74 73 28 29 2c 28 76 6f 69 64 20 30 21 3d 3d 69 26 26 21 31 3d 3d 3d 69 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 29 26 26 28 6e 2e 6c 65 6e 67 74 68 3f 28 Data Ascii: edBound:this._onPostEqualized.bind(this)};var i,n=this.$element.find("img");this.options.equalizeOn?(i=this._checkMQ(),(0,d.default)(window).on("changed.zf.mediaquery",this._checkMQ.bind(this))):this._events(),(void 0!==i&&!1===i\|\|void 0===i)&&(n.length?(
2024-03-14 00:57:21 UTC	5096	IN	Data Raw: 2f 66 6f 75 6e 64 61 74 69 6f 6e 2e 63 6f 72 65 2e 70 6c 75 67 69 6e 2e 6a 73 22 29 2c 72 3d 69 28 22 2e 2f 6a 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 2e 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 2e 6a 73 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 28 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 Data Ascii: /foundation.core.plugin.js"),r=i("./js/foundation.smoothScroll.js");function o(t){return(o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!
2024-03-14 00:57:21 UTC	2167	IN	Data Raw: 66 6f 75 6e 64 61 74 69 6f 6e 2e 63 6f 72 65 2e 75 74 69 6c 73 2e 6a 73 22 29 2c 72 3d 69 28 22 2e 2f 6a 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 2e 75 74 69 6c 2e 6b 65 79 62 6f 61 72 64 2e 6a 73 22 29 2c 6c 3d 69 28 22 2e 2f 6a 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 2e 75 74 69 6c 2e 6d 65 64 69 61 51 75 65 72 79 2e 6a 73 22 29 2c 75 3d 69 28 22 2e 2f 6a 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 2e 63 6f 72 65 2e 70 6c 75 67 69 6e 2e 6a 73 22 29 2c 63 3d 69 28 22 2e 2f 6a 73 2f 66 6f 75 6e 64 61 74 69 6f 6e 2e 75 74 69 6c 2e 74 72 69 67 67 65 72 73 2e 6a 73 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 28 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 Data Ascii: foundation.core.utils.js"),r=i("./js/foundation.util.keyboard.js"),l=i("./js/foundation.util.mediaQuery.js"),u=i("./js/foundation.core.plugin.js"),c=i("./js/foundation.util.triggers.js");function o(t){return(o="function"==typeof Symbol&&"symbol"==typeof S
2024-03-14 00:57:21 UTC	14526	IN	Data Raw: 7d 2c 7b 6b 65 79 3a 22 5f 69 6e 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 69 64 22 29 3b 69 66 28 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 22 74 72 75 65 22 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 65 6e 74 49 64 3f 74 68 69 73 2e 24 63 6f 6e 74 65 6e 74 3d 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 22 23 22 2b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 65 6e 74 49 64 29 3a 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 73 69 62 6c 69 6e 67 73 28 22 5b 64 61 74 61 2d 6f 66 66 2d 63 61 6e 76 61 73 2d 63 6f 6e 74 65 6e 74 5d 22 29 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 24 63 6f 6e 74 Data Ascii: },{key:"_init",value:function(){var t=this.$element.attr("id");if(this.$element.attr("aria-hidden","true"),this.options.contentId?this.$content=(0,s.default)("#"+this.options.contentId):this.$element.siblings("[data-off-canvas-content]").length?this.$cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50061	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	2663	OUT	GET /assets/js/tealium_prod.js HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892
2024-03-14 00:57:21 UTC	617	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: application/javascript Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1359477550" Date: Thu, 14 Mar 2024 00:57:20 GMT Content-Length: 262 Set-Cookie: TS1b6f618f027=0856addebbab200099d4b5527f0cf0e5cdcb7ec7f9e0163083ac64a539f3628cb1a405fa3efd827d08cb470d4b11300077a0e26847728e2b35356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f; Path=/
2024-03-14 00:57:21 UTC	262	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 0d 0a 20 20 20 20 61 20 3d 20 27 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 74 69 71 63 64 6e 2e 63 6f 6d 2f 75 74 61 67 2f 6d 74 62 61 6e 6b 2f 6f 6c 62 2d 6c 65 67 61 63 79 2f 70 72 6f 64 2f 75 74 61 67 2e 6a 73 27 3b 0d 0a 20 20 20 20 62 3d 64 6f 63 75 6d 65 6e 74 3b 63 3d 27 73 63 72 69 70 74 27 3b 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 63 29 3b 64 2e 73 72 63 3d 61 3b 64 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 27 2b 63 3b 64 2e 61 73 79 6e 63 3d 74 72 75 65 3b 0d 0a 20 20 20 20 61 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 63 29 5b 30 5d 3b 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 61 29 3b 0d 0a Data Ascii: (function(a,b,c,d){ a = 'https://tags.tiqcdn.com/utag/mtbank/olb-legacy/prod/utag.js'; b=document;c='script';d=b.createElement(c);d.src=a;d.type='text/java'+c;d.async=true; a=b.getElementsByTagName(c)[0];a.parentNode.insertBefore(d,a);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50063	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	2484	OUT	GET /assets/img/mtb-entrust.svg HTTP/1.1 Host: m.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; TS1b6f618f027=0856addebbab200013fac294aba977be1ad2e90d26629a8030c61d984715e1f23b6d9126f3b2feba0801a651451130000b20a75016d2d80c815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
2024-03-14 00:57:21 UTC	759	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: image/svg+xml Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1158665594" Date: Thu, 14 Mar 2024 00:57:20 GMT Set-Cookie: TS43d740f8029=0856addebbab28003ee8931a721d2c5b46382b9ba9355f7babf62432529345cd184e7921c0f067feecea2a83aedf0c1d; Max-Age=30; Path=/ Set-Cookie: TS1b6f618f027=0856addebbab20007ffabe43e088db686445710f63c80cd2c2c070778431530a809825c1307e08c308a7464ab31130004a834c0c1de22a6e35356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f; Path=/ Transfer-Encoding: chunked
2024-03-14 00:57:21 UTC	1356	IN	Data Raw: 35 34 35 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 33 34 2e 37 20 31 34 38 2e 35 22 20 66 69 6c 6c 3d 22 23 37 36 37 36 37 36 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 34 36 2e 32 68 38 34 76 2d 33 37 2e 37 48 34 33 2e 32 56 39 32 2e 31 68 33 37 56 35 34 2e 35 68 2d 33 37 56 34 30 2e 32 48 38 34 56 32 2e 35 48 30 6d 31 36 30 2e 39 20 32 39 2e 36 63 2d 31 33 2e 38 20 30 2d 32 34 2e 36 20 31 31 2e 34 2d 32 38 2e 36 20 32 33 2e 35 6c 2d 2e 34 2d 2e 35 20 31 2e 31 2d 32 30 2e 37 48 39 31 2e 35 76 31 31 31 2e 37 48 31 33 33 56 39 32 2e 34 63 30 2d 31 31 2e 34 2e 36 2d 31 39 20 38 2e 37 2d 31 39 20 37 20 30 20 37 2e 36 20 36 2e 38 20 Data Ascii: 545<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 634.7 148.5" fill="#767676"><path d="M0 146.2h84v-37.7H43.2V92.1h37V54.5h-37V40.2H84V2.5H0m160.9 29.6c-13.8 0-24.6 11.4-28.6 23.5l-.4-.5 1.1-20.7H91.5v111.7H133V92.4c0-11.4.6-19 8.7-19 7 0 7.6 6.8
2024-03-14 00:57:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50058	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	2661	OUT	GET /scripts/Moe/errorMsg.js HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892
2024-03-14 00:57:21 UTC	617	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: application/javascript Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-17859184" Date: Thu, 14 Mar 2024 00:57:20 GMT Content-Length: 2830 Set-Cookie: TS1b6f618f027=0856addebbab2000ce1120c39359b018e99b0226fff73e12eccc8dd05bfc6f83e01c9451e2faf2610896ccdc7f113000807fd9f85277f50535356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f; Path=/
2024-03-14 00:57:21 UTC	2830	IN	Data Raw: 0d 0a 76 61 72 20 65 72 72 6f 72 4d 73 67 20 3d 20 7b 0d 0a 20 20 20 20 50 41 49 43 6f 6e 66 69 72 6d 45 6c 69 67 62 6c 65 3a 20 22 50 6c 65 61 73 65 20 63 6f 6e 66 69 72 6d 20 79 6f 75 72 20 65 6c 69 67 69 62 69 6c 69 74 79 20 62 65 66 6f 72 65 20 63 6f 6e 74 69 6e 75 69 6e 67 2e 22 2c 0d 0a 20 20 20 20 46 69 65 6c 64 42 6c 61 6e 6b 3a 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 20 7b 20 72 65 74 75 72 6e 20 78 20 2b 20 22 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 20 7d 2c 0d 0a 20 20 20 20 53 65 63 75 72 74 79 41 6e 73 77 65 72 42 6c 61 6e 6b 3a 20 66 75 6e 63 74 69 6f 6e 20 28 6e 29 20 7b 20 72 65 74 75 72 6e 20 22 20 41 6e 73 77 65 72 20 74 6f 20 53 65 63 75 72 69 74 79 20 51 75 65 73 74 69 6f 6e 20 22 2b 6e 2b 22 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 Data Ascii: var errorMsg = { PAIConfirmEligble: "Please confirm your eligibility before continuing.", FieldBlank: function (x) { return x + " is required." }, SecurtyAnswerBlank: function (n) { return " Answer to Security Question "+n+" is required."

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50064	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	748	OUT	POST /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377839946&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1556&N=14&P=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 779 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:21 UTC	779	OUT	Data Raw: 78 01 85 54 e1 6e db 36 10 7e 15 81 80 f5 cb 76 44 52 b2 64 b5 c4 10 27 ed 1a 60 49 ba 36 43 57 14 c1 40 89 94 c4 56 22 05 89 b6 92 65 7e f7 1d e5 c8 68 dd 76 b3 0c f1 74 77 df 77 c7 3b 1e 3f 3d 21 85 52 8c f1 1c 15 28 0d e6 68 87 52 84 e6 c8 c2 62 a4 13 40 c2 31 0e 68 1c 27 94 26 34 9a 23 81 d2 90 02 e0 fd 0d 98 c2 fd 7c a4 20 df 52 bc 91 75 eb 0d ca 56 de 1f bd ec ae 84 67 3a ef 2d ef fb dc 08 e9 fd e3 5d fb 77 de 86 eb 2f ff 1f 89 38 7e 97 0d 07 df 16 d6 97 6f 5e 9d 5f 82 0c 69 53 32 47 9f 51 fa e9 09 61 94 3e 21 0d d6 f7 17 ef ae de de 81 99 83 fe 7e bf bf 1f d3 4d e2 ef 58 36 b7 97 1f 0f 2c 18 b6 74 c2 72 f5 fa dd f9 f5 ab 67 96 27 44 26 76 5e d7 66 00 b5 2b d2 67 a3 f4 82 8b 85 d2 56 76 b2 b7 8b b2 33 db 16 ed 5d a4 23 40 70 cb 17 96 97 a5 d2 e5 42 Data Ascii: xTn6~vDRd'`I6CW@V"e~hvtww;?=!R(hRb@1h'&4#\| RuVg:-]w/8~o^_iS2GQa>!~MX6,trg'D&v^f+gVv3]#@pB
2024-03-14 00:57:21 UTC	948	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:21 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://onlinebanking.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50065	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	2660	OUT	GET /scripts/Moe/mtb-app.js HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; TS1b6f618f027=0856addebbab20005faa59a6a447af737b8ffb981660009a96fb5cbf4fd507e31f73ebc2f7eb6349087f8718cf113000edfacfed06861f26815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892
2024-03-14 00:57:21 UTC	619	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: application/javascript Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1914237045" Date: Thu, 14 Mar 2024 00:57:21 GMT Content-Length: 2158 Set-Cookie: TS1b6f618f027=0856addebbab2000620f3b1abbd372a5924713776214aa44fb465cace26efeb79ae036800e1113d208065b2f0f113000b683563b0c1540cc35356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f; Path=/
2024-03-14 00:57:21 UTC	2158	IN	Data Raw: 2f 2f 46 6f 75 6e 64 61 74 69 6f 6e 2e 52 65 76 65 61 6c 2e 64 65 66 61 75 6c 74 73 2e 63 6c 6f 73 65 4f 6e 43 6c 69 63 6b 20 3d 20 66 61 6c 73 65 3b 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 66 6f 75 6e 64 61 74 69 6f 6e 28 29 3b 0d 0a 0d 0a 76 61 72 20 72 65 67 65 78 4b 65 79 73 20 3d 20 7b 0d 0a 20 20 20 20 63 6f 6d 70 61 6e 79 4e 61 6d 65 41 6c 6c 6f 77 3a 20 22 5b 5e 5c 5c 25 5c 5c 7d 5c 5c 5d 5c 5c 5c 22 5c 5c 3c 5c 5c 3e 5c 5c 7e 5d 22 2c 0d 0a 20 20 20 20 70 61 73 73 6f 63 64 65 41 6c 6c 6f 77 3a 20 2f 5b 5e 5c 23 5c 26 5c 2a 20 5d 2f 67 69 0d 0a 7d 0d 0a 0d 0a 72 67 78 43 6f 6d 70 61 6e 79 4e 61 6d 65 20 3d 20 2f 5b 5c 25 5c 7d 5c 5d 5c 22 5c 3c 5c 3e 5c 7e 5d 2f 3b 0d 0a 72 67 78 43 61 72 64 46 6f 72 6d 61 74 20 3d 20 2f 5e 5b 30 2d 39 5d 7b 31 Data Ascii: //Foundation.Reveal.defaults.closeOnClick = false;$(document).foundation();var regexKeys = { companyNameAllow: "[^\\%\\}\\]\\\"\\<\\>\\~]", passocdeAllow: /[^\#\&\* ]/gi}rgxCompanyName = /[\%\}\]\"\<\>\~]/;rgxCardFormat = /^[0-9]{1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50066	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	2673	OUT	GET /scripts/Moe/formInputValidations.js HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab2800237073c5c58717a323aa2f8e152529653f9f6acb50cb4202432a8fa84c2be8dca38beb4a85a66fc3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; TS1b6f618f027=0856addebbab200013fac294aba977be1ad2e90d26629a8030c61d984715e1f23b6d9126f3b2feba0801a651451130000b20a75016d2d80c815d6ae688857c4945cbcbd9dc13a29ce27d05e9240e97b6d32bcb4cb98ddc6c50968ff03320ee44
2024-03-14 00:57:21 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: application/javascript Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="-1772765714" Date: Thu, 14 Mar 2024 00:57:21 GMT Content-Length: 14257 Set-Cookie: TS1b6f618f027=0856addebbab2000be9283b3ff8594be0a544e90d0f5efbc2bdc0a735159125a36211fb19982368e08d265f9bd11300018577e78ddbde80835356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f; Path=/
2024-03-14 00:57:21 UTC	14257	IN	Data Raw: ef bb bf 76 61 72 20 77 61 74 63 68 65 72 3b 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 0d 0a 7d 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 66 69 78 66 6f 72 4e 75 6c 6c 6f 72 55 6e 64 65 66 69 6e 65 64 28 73 74 72 69 6e 67 56 61 6c 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 28 73 74 72 69 6e 67 56 61 6c 20 3d 3d 20 6e 75 6c 6c 20 7c 7c 20 73 74 72 69 6e 67 56 61 6c 20 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 3f 20 22 22 20 3a 20 73 74 72 69 6e 67 56 61 6c 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 73 42 6c 61 6e 6b 28 73 74 72 69 6e 67 56 61 6c 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 73 74 72 69 6e 67 56 61 6c 20 3d 20 66 69 78 66 6f 72 4e 75 6c 6c 6f 72 55 6e 64 65 66 69 6e Data Ascii: var watcher;$(document).ready(function () {});function fixforNullorUndefined(stringVal) { return (stringVal == null \|\| stringVal == undefined) ? "" : stringVal;}function isBlank(stringVal) { var stringVal = fixforNullorUndefin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50067	52.141.217.134	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	493	OUT	POST /client/v3.1/web/wup?cid=mufasa HTTP/1.1 Host: wup-5d65a0ab.us.v2.we-stats.com Connection: keep-alive Content-Length: 1958 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:21 UTC	1958	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 31 30 33 37 37 38 32 36 33 36 38 2d 73 6a 6e 30 30 30 30 33 30 37 2d 31 34 39 66 30 39 37 64 2d 38 38 32 31 2d 34 33 31 31 2d 38 36 63 36 2d 31 32 63 62 61 36 36 38 61 36 34 32 22 2c 22 63 73 69 64 22 3a 6e 75 6c 6c 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 31 30 33 37 37 38 32 34 34 39 39 2d 32 31 33 42 43 38 45 30 2d 44 36 41 34 2d 34 46 46 35 2d 38 41 35 33 2d 43 46 46 31 44 45 43 44 35 42 30 35 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 63 64 5f 61 75 74 6f 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 33 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 38 6b 74 74 45 6c 55 6b 39 6f 73 6b 6b 43 4c 39 72 33 34 2d 6b 6d 4e 33 55 5a 31 64 58 56 4c 6c 6a Data Ascii: {"ds":"js","cdsnum":"1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642","csid":null,"psid":null,"muid":"1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05","context_name":"cd_auto","requestId":3,"sts":"gAAAAABl8kttElUk9oskkCL9r34-kmN3UZ1dXVLlj
2024-03-14 00:57:21 UTC	317	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 626 Connection: close date: Thu, 14 Mar 2024 00:57:20 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: a295c585-93d7-413e-93c5-a84f0eb7cde4
2024-03-14 00:57:21 UTC	626	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 38 6b 74 78 59 4e 61 67 78 63 31 6e 53 74 61 63 35 53 41 66 6e 62 4e 4a 4f 58 49 57 49 49 6a 35 35 6e 6e 48 57 44 44 46 66 47 53 34 2d 57 73 51 63 42 76 70 6c 6a 5f 76 75 6c 48 2d 31 78 4b 51 5a 58 61 74 57 4c 69 42 46 33 4e 7a 6b 35 6a 43 70 7a 33 4c 41 41 37 6f 44 4a 79 35 62 37 51 64 50 2d 45 41 48 47 34 61 58 72 6e 38 43 64 6c 47 68 32 34 71 6a 5a 71 45 69 61 79 74 51 35 76 4f 66 4f 6d 49 48 56 7a 59 4c 6e 53 6e 44 7a 4f 67 6d 31 5f 38 46 65 66 79 50 64 59 52 64 56 46 56 32 68 35 34 31 46 4b 4a 48 53 65 69 36 50 57 4c 69 4e 42 4b 57 6d 47 42 43 6f 37 32 35 58 69 34 71 39 37 54 4f 4c 49 77 31 32 2d 35 67 46 6d 5f 72 6b 30 79 54 5a 44 76 67 67 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 38 6b Data Ascii: {"std":"gAAAAABl8ktxYNagxc1nStac5SAfnbNJOXIWIIj55nnHWDDFfGS4-WsQcBvplj_vulH-1xKQZXatWLiBF3Nzk5jCpz3LAA7oDJy5b7QdP-EAHG4aXrn8CdlGh24qjZqEiaytQ5vOfOmIHVzYLnSnDzOgm1_8FefyPdYRdVFV2h541FKJHSei6PWLiNBKWmGBCo725Xi4q97TOLIw12-5gFm_rk0yTZDvgg==","sts":"gAAAAABl8k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50068	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:21 UTC	2674	OUT	GET /scripts/Moe/Enrollment/enrollment.js HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__se=2%3Bexp-session; utag_main__ss=0%3Bexp-session; utag_main__st=1710379633676%3Bexp-session; utag_main__pn=2%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; TS43d740f8029=0856addebbab2800a1f192b5520f6861a6633bf421be429b71d07eeeb1588ed47a1c6fd7c6833c909a5e23c291fa2b8e; TS1b6f618f027=0856addebbab20001d91b8740f497fef2e06dba1a52772c2bd742971c552230022855fd41e6aabb008ed73a001113000fe64fdc2dcecda4d35356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f
2024-03-14 00:57:21 UTC	619	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: application/javascript Expires: 0 Last-Modified: Fri, 23 Feb 2024 06:35:24 GMT Accept-Ranges: bytes ETag: "09e97b2266da1:0" X-SRV: P-NAO-002 Server-Timing: dtSInfo;desc="0", dtRpid;desc="1808754745" Date: Thu, 14 Mar 2024 00:57:21 GMT Content-Length: 47660 Set-Cookie: TS1b6f618f027=0856addebbab2000bafc01cf581547ed4033476b5262de1a7dea7e6349c62b3a9e6b5f60e685f7ce08970ff7f6113000be971cc6cd813c5635356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f; Path=/
2024-03-14 00:57:21 UTC	14135	IN	Data Raw: 76 61 72 20 74 69 6d 65 72 3b 0d 0a 76 61 72 20 65 78 69 74 74 69 6d 65 72 3b 0d 0a 76 61 72 20 63 68 61 6e 67 65 46 6f 63 75 73 54 6f 41 6e 73 77 65 72 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 76 61 6c 69 64 61 74 65 20 3d 20 7b 0d 0a 20 20 20 20 41 63 63 6f 75 6e 74 4e 75 6d 62 65 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 29 20 7b 20 76 61 6c 69 64 61 74 65 41 63 63 6f 75 6e 74 4e 75 6d 62 65 72 28 65 6c 65 6d 65 6e 74 29 20 7d 2c 0d 0a 20 20 20 20 53 53 4e 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 29 20 7b 20 76 61 6c 69 64 61 74 65 53 53 4e 28 65 6c 65 6d 65 6e 74 29 20 7d 2c 0d 0a 20 20 20 20 43 6f 6d 70 61 6e 79 54 61 78 49 64 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 65 6d 65 6e 74 29 20 7b 20 76 61 6c 69 64 61 74 Data Ascii: var timer;var exittimer;var changeFocusToAnswer = true;var validate = { AccountNumber: function (element) { validateAccountNumber(element) }, SSN: function (element) { validateSSN(element) }, CompanyTaxId: function (element) { validat
2024-03-14 00:57:22 UTC	14526	IN	Data Raw: 0d 0a 7d 29 3b 0d 0a 0d 0a 24 28 22 2e 6a 73 2d 61 64 64 41 63 63 6f 75 6e 74 46 6f 72 6d 42 6f 78 22 29 2e 6f 6e 28 27 6f 66 66 2e 7a 66 2e 74 6f 67 67 6c 65 72 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 6a 73 2d 66 6f 72 6d 46 69 65 6c 64 50 61 72 65 6e 74 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 22 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 43 68 65 63 6b 53 74 61 72 74 69 6e 67 42 69 6e 4e 75 6d 62 65 72 28 78 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6e 75 6d 54 6f 43 6f 6d 70 61 72 65 20 3d 20 53 74 72 69 6e 67 28 78 29 2e 72 65 70 6c 61 63 65 28 2f 5e 30 2b 2f 2c 20 22 22 29 2e 6d 61 74 63 68 28 2f 5e 2e 7b 34 7d 2f 29 5b 30 5d 3b 0d 0a 20 20 20 20 Data Ascii: });$(".js-addAccountFormBox").on('off.zf.toggler', function () { $(this).find(".js-formFieldParent").removeClass("hide");});function CheckStartingBinNumber(x) { var numToCompare = String(x).replace(/^0+/, "").match(/^.{4}/)[0];
2024-03-14 00:57:22 UTC	12122	IN	Data Raw: 66 6f 72 6d 61 74 74 79 70 65 22 29 29 3b 0d 0a 20 20 20 20 76 61 6c 20 3d 20 53 74 72 69 6e 67 28 24 28 65 6c 65 6d 65 6e 74 29 2e 76 61 6c 28 29 29 3b 0d 0a 20 20 20 20 76 61 6c 4e 75 6d 73 4f 6e 6c 79 20 3d 20 76 61 6c 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 30 2d 39 5d 2f 67 69 2c 20 22 22 29 3b 0d 0a 0d 0a 20 20 20 20 69 66 20 28 69 73 42 6c 61 6e 6b 28 76 61 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 61 64 64 45 72 72 6f 72 41 74 74 72 69 62 75 74 65 73 28 24 28 65 6c 65 6d 65 6e 74 29 2c 20 22 46 69 65 6c 64 42 6c 61 6e 6b 22 2c 20 67 65 74 4c 61 62 65 6c 54 65 78 74 28 65 6c 65 6d 65 6e 74 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 2f 5b 30 2d 39 5d 2f 2e 74 Data Ascii: formattype")); val = String($(element).val()); valNumsOnly = val.replace(/[^0-9]/gi, ""); if (isBlank(val)) { addErrorAttributes($(element), "FieldBlank", getLabelText(element)); return false; } if (/[0-9]/.t
2024-03-14 00:57:22 UTC	2548	IN	Data Raw: 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 21 68 61 73 55 70 70 65 72 43 61 73 65 28 76 61 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 61 64 64 45 72 72 6f 72 41 74 74 72 69 62 75 74 65 73 28 24 28 65 6c 65 6d 65 6e 74 29 2c 20 22 50 61 73 73 63 6f 64 65 55 43 61 73 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 21 68 61 73 4c 6f 77 65 72 43 61 73 65 28 76 61 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 61 64 64 45 72 72 6f 72 41 74 74 72 69 62 75 74 65 73 28 24 28 65 6c 65 6d 65 6e 74 29 2c 20 22 50 61 73 73 63 6f 64 65 4c 43 61 73 65 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d Data Ascii: se; } if (!hasUpperCase(val)) { addErrorAttributes($(element), "PasscodeUCase"); return false; } if (!hasLowerCase(val)) { addErrorAttributes($(element), "PasscodeLCase"); return false; }
2024-03-14 00:57:22 UTC	4329	IN	Data Raw: 72 6f 72 41 74 74 72 69 62 75 74 65 73 28 24 28 65 6c 65 6d 65 6e 74 29 2c 20 22 4d 61 78 43 68 61 72 73 22 2c 20 22 41 6e 73 77 65 72 22 2c 20 31 32 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 21 68 61 73 4c 65 74 74 65 72 73 6f 72 4e 75 6d 62 65 72 73 28 76 61 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 61 64 64 45 72 72 6f 72 41 74 74 72 69 62 75 74 65 73 28 24 28 65 6c 65 6d 65 6e 74 29 2c 20 22 53 65 63 75 72 69 74 79 41 6e 73 77 65 72 46 6f 72 6d 61 74 22 2c 20 67 65 74 4c 61 62 65 6c 54 65 78 74 28 65 6c 65 6d 65 6e 74 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 76 61 6c 69 64 65 55 Data Ascii: rorAttributes($(element), "MaxChars", "Answer", 12); return false; } if (!hasLettersorNumbers(val)) { addErrorAttributes($(element), "SecurityAnswerFormat", getLabelText(element)); return false; } valideU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50069	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:22 UTC	525	OUT	GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377839946&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1556&N=14&P=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:22 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:22 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50070	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:22 UTC	745	OUT	POST /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377840585&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=770&N=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 77 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:22 UTC	77	OUT	Data Raw: 78 01 0d ca 31 0a 80 30 0c 40 d1 bb fc 39 48 d2 b4 b4 66 f7 14 e2 a8 e0 e0 26 2e a5 77 b7 eb e3 75 36 62 ef dc 84 99 09 17 a1 c2 47 80 f0 4e ac a6 5e 6b 73 6f 5e c6 21 9c 84 0b cf 6c 4b f6 a4 39 69 c9 a5 a9 b9 ae e3 07 ab aa 11 39 Data Ascii: x10@9Hf&.wu6bGN^kso^!lK9i9
2024-03-14 00:57:22 UTC	948	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:22 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://onlinebanking.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50071	52.141.217.134	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:22 UTC	385	OUT	GET /client/v3.1/web/wup?cid=mufasa HTTP/1.1 Host: wup-5d65a0ab.us.v2.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:22 UTC	273	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 14 Mar 2024 00:57:21 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 6f46516f-7568-463e-a238-c67d2b859701
2024-03-14 00:57:22 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50072	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:22 UTC	2814	OUT	GET /TSPD/?type=20 HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; TS43d740f8029=0856addebbab28003ee8931a721d2c5b46382b9ba9355f7babf62432529345cd184e7921c0f067feecea2a83aedf0c1d; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS1b6f618f027=0856addebbab2000bafc01cf581547ed4033476b5262de1a7dea7e6349c62b3a9e6b5f60e685f7ce08970ff7f6113000be971cc6cd813c5635356467a625a5b21a67d2aef2df962fe94c00a16bb00b894acc262b84d9b3d6bdebb4be4028938f
2024-03-14 00:57:22 UTC	664	IN	HTTP/1.1 200 OK Set-Cookie: TS43d740f8029=0856addebbab2800ff15ad7c12856165c5d54d583ba6ee06662e583aa8a9b69470999dd90ef9d111f9f6cb5676a5dbdd; Max-Age=30; Path=/ Set-Cookie: TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; Max-Age=30; Path=/ Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Content-Type: text/html Content-Length: 5991 Connection: close Set-Cookie: TS1b6f618f027=0856addebbab2000c640e92ee60f3564dfdc9592f76b9542e0e8ec2f33e8d9dc11d01fa4c137d29e08dcec22451130006a60e6af40f23d052828129d8a962027178d1395c20ae09d105a7a39796fa8abea927d2c2cdce964b17d4478d155fc50; Path=/
2024-03-14 00:57:22 UTC	5991	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 45 78 70 69 72 65 73 22 20 63 6f 6e 74 65 6e 74 3d 22 2d 31 22 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 43 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="Pragma" content="no-cache"/><meta http-equiv="Expires" content="-1"/><meta http-equiv="CacheControl" content="no-cache"/><meta http-equiv="Content-Type" content="text/html; charset=utf-8"/><link rel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50074	142.251.40.226	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:22 UTC	1428	OUT	GET /td/rul/990489911?random=1710377841052&cv=11&fst=1710377841052&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fm.mtb.com%2FEnrollment&hn=www.googleadservices.com&frm=0&tiba=Enroll%20in%20Online%20Banking%20-%20Select%20Account%20Type%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://m.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
2024-03-14 00:57:22 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:57:22 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-14 00:57:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50073	142.251.40.130	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:22 UTC	1304	OUT	GET /pagead/viewthroughconversion/990489911/?random=1710377841052&cv=11&fst=1710377841052&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fm.mtb.com%2FEnrollment&hn=www.googleadservices.com&frm=0&tiba=Enroll%20in%20Online%20Banking%20-%20Select%20Account%20Type%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
2024-03-14 00:57:22 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:57:22 UTC	549	IN	Data Raw: 39 30 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 90c(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-14 00:57:22 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-14 00:57:22 UTC	522	IN	Data Raw: 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 33 37 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 62 30 76 38 38 32 31 38 37 35 33 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 2e 6d 74 62 2e 63 6f 6d 25 32 46 45 6e 72 6f 6c 6c 6d 65 6e 74 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 45 6e 72 6f 6c 6c 25 32 30 69 6e 25 32 30 4f 6e 6c 69 Data Ascii: 1\x26fst\x3d1710374400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43b0v882187536za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fm.mtb.com%2FEnrollment\x26frm\x3d0\x26tiba\x3dEnroll%20in%20Onli
2024-03-14 00:57:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50075	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:22 UTC	523	OUT	GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377840585&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=770&N=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:22 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:22 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50077	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:22 UTC	2734	OUT	GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=11 HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/TSPD/?type=20 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; TS1b6f618f027=0856addebbab2000c640e92ee60f3564dfdc9592f76b9542e0e8ec2f33e8d9dc11d01fa4c137d29e08dcec22451130006a60e6af40f23d052828129d8a962027178d1395c20ae09d105a7a39796fa8abea927d2c2cdce964b17d4478d155fc50
2024-03-14 00:57:23 UTC	155	IN	HTTP/1.1 200 OK Content-Encoding: gzip Cache-Control: public, max-age=86400 Content-Type: text/javascript Content-Length: 122337 Connection: close
2024-03-14 00:57:23 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 00 e4 bd 6b 8f db 48 96 28 f8 5d bf c2 4e f4 78 c4 12 9d 43 06 23 18 a4 64 39 31 77 6e 03 2b 41 77 04 8c ee 62 07 74 e7 10 2e 3b ab 4b 1a 96 b3 d6 cc ea ae a6 ad ff be e7 15 c1 a0 44 a5 d3 ae ea 5e 2c 16 dd ae 94 c4 88 60 3c 4e 9c f7 e3 af fb 0f ef ef ff 7a fd ef ff d7 ff fc cf e5 f3 e7 7f ed bf 2d 1e 3e fe ed d3 f4 87 5f 3e bc 7b d8 df 7f 98 46 83 cf 7f 79 fb f1 59 b7 fc f4 fe ee dd c7 bf fd fc 30 f7 4f ba e8 13 76 fb 78 f7 f0 cb c7 0f cf d6 bb ed bf 5f ff fc f6 63 7b 37 0d 5b 74 cb ee ba fd b9 d9 3f 4c af 9a ab 68 81 63 b5 cb ab ab c5 0f f7 1f a7 f8 a5 5e 26 8b fa 55 77 dd dc 7d f8 f3 c3 8f 8b d9 ac 8e da d9 72 f7 f0 71 ff e1 cf d7 3f 7c bc ff e9 df 7e 7c fb f1 df ee df df 4d bb 37 f5 6d b4 90 b7 b5 47 18 3c 3a be 7b fb f0 ee Data Ascii: kH(]NxC#d91wn+Awbt.;KD^,`<Nz->_>{FyY0Ovx_c{7[t?Lhc^&Uw}rq?\|~\|M7mG<:{
2024-03-14 00:57:23 UTC	16384	IN	Data Raw: a2 8c c8 67 27 81 57 02 dd 0a cb ce a8 98 8b 66 b5 5e ee 86 01 15 b6 b7 7f 67 02 38 99 f8 ff b9 64 9c 5a 45 8b 03 91 2f c4 60 80 58 91 54 a1 25 9f 49 64 6d e6 a4 f3 ce c9 77 ef b0 47 12 a9 4b 56 f2 ee d6 a4 85 25 1d 6f 16 57 48 5a 95 a5 cc 7d 3a 6e 90 98 5a 54 13 a1 86 f7 90 50 cb 84 15 bc 3b 24 bb 58 cb 1b cb 66 02 e2 6b fc eb df 7b 4a a8 11 11 d2 6f 3f f0 94 7a a2 e1 dc 6d c5 29 da 39 59 11 f1 20 6a 4a a8 18 b3 59 65 6f 87 28 f8 a2 4a 76 14 95 1f 30 37 4b 0e d7 04 1b 3f 42 7c 1e a3 65 ac a2 2c ed 17 a8 c6 61 7d 5d 9b 27 d1 58 26 43 4e 4f 79 46 28 61 a0 c3 fe 09 e4 a7 de 3d 3a 99 dd fa b7 8f 51 3d c6 78 ac be a8 88 36 5c 02 f2 f1 4d 6b c6 78 8b cb f3 1c ee 53 f2 15 0c c5 97 f6 4b 3d 6d ac 89 1b 0c 15 cc 1c 30 a5 d8 63 e6 1e 93 06 a8 92 8d 2b 8b 2d 7e d3 Data Ascii: g'Wf^g8dZE/`XT%IdmwGKV%oWHZ}:nZTP;$Xfk{Jo?zm)9Y jJYeo(Jv07K?B\|e,a}]'X&CNOyF(a=:Q=x6\MkxSK=m0c+-~
2024-03-14 00:57:23 UTC	16384	IN	Data Raw: d4 c2 b2 55 3f 19 fa 73 8c 8f 64 33 34 26 e6 e1 77 0f 16 c4 66 8f 59 21 ff 61 c8 aa ee 0e e5 62 17 6a 1a c6 67 fc d7 b7 91 df c0 2d 72 80 4a 9c 98 8a a9 1d 97 31 ad 3b 81 7c db 27 4f d4 43 c7 b3 8e c3 eb 90 6c 7a 55 cd 8a 2a 1d 9a 56 bd 5c d3 1e 88 5a bb 5a 4f f6 bd 5e b5 ea 45 b3 62 d8 61 bc a4 1d 2f 16 13 4e a5 0c eb 9b ad c0 d9 30 69 f9 40 0a 4e d4 1f 0f 2e 22 42 c5 cf 41 38 07 61 69 59 66 be 90 d4 74 39 3e 09 86 db c4 68 22 12 c6 20 4d 66 e6 cc df e4 a7 18 20 e6 b3 e0 b9 a7 ba d5 c6 ea 50 4d 17 d8 22 ed 99 07 8b e4 66 b3 54 3b c8 7a e9 d9 a7 29 b5 97 61 ca fe b8 75 7e 70 c2 95 91 14 dc ab ed e8 6b 20 03 5b da 94 69 cd 92 b0 53 22 f3 e2 3c d0 9e df b3 e9 5d 4e 8b 2d 29 0f 57 5b f8 f0 89 78 e1 82 eb 04 9f 62 e0 41 a7 63 7d 1b c8 62 5a fe 49 fe 5b 0b f3 Data Ascii: U?sd34&wfY!abjg-rJ1;\|'OClzU*V\ZZO^Eba/N0i@N."BA8aiYft9>h" Mf PM"fT;z)au~pk [iS"<]N-)W[xbAc}bZI[
2024-03-14 00:57:23 UTC	16384	IN	Data Raw: 08 a9 ac 19 44 24 61 f2 42 25 90 22 fe 6f 69 c9 bf 7d c7 98 be f9 3d d1 3e 78 85 19 09 ad 5b 33 2c 2a 3c f7 b9 8e 70 13 86 b2 49 51 1f c5 73 48 9e 0b 99 e1 8f 37 98 e1 e5 cf ba c9 8e 54 19 c6 82 dd cd 6b e1 76 c2 3c 88 bb ad 87 ca dd de f1 0c 6e 56 ef 22 4c 6e 18 66 ef ae 75 44 de f6 7c 1d 61 88 a9 11 8c 86 a5 ee c1 3b 5d d3 3b ab d4 cd dc a0 74 9f a2 ac af 77 bf 42 2c 12 db fa fe 95 ca cd 42 b6 41 27 e9 6f 36 22 85 5c ae 8b fa ad 64 8e 2c 3a 5f f0 1f 56 68 1f 56 43 c1 cc 72 77 23 ea c8 6f ca 1e 1c b6 cd 7a b0 31 de 96 73 45 fd df 74 80 f0 ce 31 43 fc ed fa b5 62 e6 6f bf 02 4a 97 32 40 59 0d bd 61 28 db 44 3b 20 85 62 17 d7 58 f1 00 55 a1 5a bc dd 55 1e ed eb 4a 77 e5 a3 bd 94 15 8a 4a 69 f2 11 33 34 ff 4a 35 b8 f2 27 41 94 8f 2b 01 7a f9 1d 6b 90 84 af Data Ascii: D$aB%"oi}=>x[3,*<pIQsH7Tkv<nV"LnfuD\|a;];twB,BA'o6"\d,:_VhVCrw#oz1sEt1CboJ2@Ya(D; bXUZUJwJi34J5'A+zk
2024-03-14 00:57:23 UTC	16384	IN	Data Raw: bd 91 f0 56 54 c0 a9 f6 ee be 5a c7 df db 72 bd 58 ef 2e 77 cf ff 1a 28 50 30 30 ae 5b f2 75 fa b2 69 50 a6 9b 77 02 c3 de d0 67 11 86 7b 7e de 0a d2 05 55 a0 5b 80 a3 ef c3 d5 96 ca 44 6f d1 26 86 b8 18 3d 8b 92 98 0b b5 76 23 d1 a3 62 73 ec 99 29 19 85 65 b8 6e a2 e7 9c 90 c5 2a e8 91 2b 30 57 ed d0 96 d3 54 3f a2 b9 c5 ee 1e ce e6 fb 3d c2 b0 68 34 ba f8 08 d9 62 ce e6 9b fd 4b 34 62 ed 66 5c 9c 9b aa 38 a0 d2 ee 59 64 fb 00 01 f2 e8 77 8b b5 c8 a1 ca 76 57 68 a3 53 e1 62 e8 25 65 4c 54 04 b1 64 4f 16 dc 62 11 33 cf 01 6d be bb 33 bd b3 fe ba e0 f6 9e 56 05 c0 84 be a7 e7 27 62 25 82 43 96 c4 38 62 ac 72 b6 85 64 c4 9e e4 28 92 4e 52 f2 bc 0c a1 49 65 f9 de fe ea 90 14 87 59 71 55 35 1e 39 2d e5 97 cb 5e 77 44 dc c7 c4 3a 6e af 17 d6 ca 71 93 a7 1e 1f Data Ascii: VTZrX.w(P00[uiPwg{~U[Do&=v#bs)en*+0WT?=h4bK4bf\8YdwvWhSb%eLTdOb3m3V'b%C8brd(NRIeYqU59-^wD:nq
2024-03-14 00:57:23 UTC	16384	IN	Data Raw: d9 27 df fd 42 ef f1 ee b7 06 6d fc 8c 67 85 3d 9a df fc c2 b2 8a e5 3e 15 d6 a2 78 63 9f 60 7a 41 56 f8 09 19 21 ad a5 25 45 d8 48 c8 db 3d ed fe 65 f7 1e df e3 ed d6 c9 07 6f f6 b6 db 1d f2 03 3b 7d 3f d1 b3 87 8f ef df 22 8d c3 05 cb 39 ff 13 78 2b ca 34 96 49 fd 2c 67 32 ed ad b7 c0 cf 1f 5a b2 d4 4b cb f5 78 0f ee ad 4c c3 bc fd 2d ad 87 95 23 1e 7e 80 39 c8 b7 5b 59 23 fb dd 87 ed 6f f8 ec cf 96 bf 6d f9 3d 1e ec 61 07 df dd 3d ec 0f 34 e6 1c 58 3b d3 d5 af c4 ff f0 78 e9 d2 2e f0 79 58 cb c3 87 5d c5 74 7a 77 71 f7 11 e7 ca 6e 77 e1 07 96 13 6f df c1 5c 01 2b e1 fb 60 d6 2a e4 1b 56 f2 10 fe f7 67 cb 80 70 1f 5d bc 65 59 e5 6d f5 60 17 82 65 38 5e 73 4b 26 b0 84 70 f6 d8 6e 7f e5 7e 1f 44 e6 12 f9 00 8f ec 8f 78 56 fc 06 d4 4e b4 6b 85 96 bf be 84 Data Ascii: 'Bmg=>xc`zAV!%EH=eo;}?"9x+4I,g2ZKxL-#~9[Y#om=a=4X;x.yX]tzwqnwo\+`*Vgp]eYm`e8^sK&pn~DxVNk
2024-03-14 00:57:23 UTC	16384	IN	Data Raw: 3d d6 93 4a e5 e7 9e 2b 65 85 92 d3 c8 05 78 a3 6c de 01 3d 70 67 9a 17 51 45 0d 01 45 9e eb d3 24 3b bf f5 29 7f 6d e2 8f 96 75 67 76 1a 33 c2 83 85 81 96 2a d0 b4 62 3f 20 a7 09 f2 3d 4e 9d 95 d9 09 5d 6b f2 82 8a 20 e6 72 9d c6 c1 75 12 5c a7 c1 75 16 5c 2b 3f 51 52 c2 5c 4c 64 d2 af 2b 6d ae fd e4 c8 f7 6e 15 b3 20 12 5f 64 dc 38 f8 2e 0f 26 91 37 42 f8 5b 28 fa c8 ca bb 71 f8 ef 47 f4 43 b0 23 ca e0 01 13 07 d7 ca 5f 17 72 cd aa 49 77 f5 aa 75 34 5f 93 ff 44 62 96 b0 11 66 cf 98 01 b8 61 47 9a 44 bb 35 25 38 42 f7 58 74 bf c6 b0 d0 26 d8 d4 07 46 7e 8d b1 c7 8e 12 cd e4 ce 9a 7c 92 97 d7 b9 6f 25 a7 30 a4 78 c0 f2 c2 b1 4f 65 e7 bf 9f 00 3e b5 85 15 04 1d 83 c2 ce 29 fd c1 26 34 c0 b7 9d 08 6d 9b 1e 48 75 9d a3 17 43 be f2 54 72 42 81 27 e0 14 8b fe Data Ascii: =J+exl=pgQEE$;)mugv3*b? =N]k ru\u\+?QR\Ld+mn _d8.&7B[(qGC#_rIwu4_DbfaGD5%8BXt&F~\|o%0xOe>)&4mHuCTrB'
2024-03-14 00:57:23 UTC	7649	IN	Data Raw: 2b f2 69 bc 66 60 63 33 ff ed 33 4d 05 cf ed 14 d2 7d 21 af 90 fe a6 8b 68 64 11 e9 f6 66 22 01 be b0 74 30 3a 47 ab c7 6a 44 29 5b a1 90 cf 72 12 96 f1 eb 9f 3f e2 f2 31 6e f0 ab ac 5f 65 4a 0e a7 33 30 64 5e 3e 26 93 3b 8c 3b d6 65 c4 b0 e6 bf 71 3c 32 2d 67 88 4b 4c e6 8f 3d 9b 3c bf 00 ed dd fe 92 64 47 2b 89 4b dc 33 d6 10 99 7c 5d a0 2b 13 19 8c e2 74 ea 4e 68 d0 03 66 94 4f 79 33 64 bc 79 93 19 0c 69 ec d5 15 15 3f ab 9a 6c ce bc f8 55 58 50 fa 0d 17 d9 54 b2 03 1d db 54 8d d4 c3 c9 2f e5 84 24 ed c5 09 78 98 d1 d5 73 0f 38 ee 5b 1c 19 39 08 d5 c5 b4 2c e4 37 d8 33 f0 63 13 b7 0d bc ac 8f 3b a7 47 a6 b4 b4 c9 f7 42 60 3f 87 46 5d d4 83 4b c1 33 1b 39 03 f2 32 cd c2 1b ad 8b 8d 98 62 35 10 59 2d 62 da bf f2 a7 52 48 9d c9 90 ef 5b 02 23 cb c3 60 63 Data Ascii: +if`c33M}!hdf"t0:GjD)[r?1n_eJ30d^>&;;eq<2-gKL=<dG+K3\|]+tNhfOy3dyi?lUXPTT/$xs8[9,73c;GB`?F]K392b5Y-bRH[#`c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50076	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:22 UTC	2734	OUT	GET /TSPD/0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3?type=12 HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://m.mtb.com/TSPD/?type=20 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; TS1b6f618f027=0856addebbab2000c640e92ee60f3564dfdc9592f76b9542e0e8ec2f33e8d9dc11d01fa4c137d29e08dcec22451130006a60e6af40f23d052828129d8a962027178d1395c20ae09d105a7a39796fa8abea927d2c2cdce964b17d4478d155fc50
2024-03-14 00:57:23 UTC	154	IN	HTTP/1.1 200 OK Content-Encoding: gzip Cache-Control: public, max-age=86400 Content-Type: text/javascript Content-Length: 37876 Connection: close
2024-03-14 00:57:23 UTC	16384	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 94 bb d7 12 a4 4a b2 25 fa 7e be a2 df 4e f7 61 4f 27 5a dc b6 7d cd 48 48 b4 4a 64 92 2f 6d 68 ad 35 63 f3 ef 43 15 b5 5b cc d8 8c dd 5b 56 56 95 40 e0 78 44 b8 2f 5f 2b 02 d6 60 fc 53 da c7 49 3a fd e9 f7 3f fd f7 ff 58 93 71 4e f6 bf 4f 79 10 27 e3 9f fe 9f ff f8 cf 60 9e c7 22 5c e6 e4 4f 6b 12 21 7f 0a fe 7e b7 30 ba a9 98 8b ae fd ed 8f 13 5a 37 36 41 fd b7 7f 6b 0e ff 6a fe 9f 7f 02 fe e3 3f 93 dd 4e f6 79 19 93 bf 2d 6d 91 5e ad ff d4 04 33 fa a7 e5 ef cd aa 06 d7 4d fb 6f cb df fb 7f fc 6a ef 5f ff 68 fb f3 e1 cb 4f 43 7f af 8b 2c 9f ff 70 e0 6f 6b 30 1e 45 9b dd 2d d6 bf b7 b7 1f ff 72 16 be ce ce bf 1e fd c7 e9 9f 86 7e dd 91 1c 89 9b 44 bf ad b7 5d 33 38 fe b6 76 45 7c 79 57 b4 7f fe cb 7f bf 1a a1 7f ba bb f8 fb Data Ascii: J%~NaO'Z}HHJd/mh5cC[[VV@xD/_+`SI:?XqNOy'`"\Ok!~0Z76Akj?Ny-m^3Moj_hOC,pok0E-r~D]38vE\|yW
2024-03-14 00:57:23 UTC	16384	IN	Data Raw: b2 ce 18 f9 a1 ed 91 df e7 29 02 d8 13 8e 81 27 89 02 af bd 27 3c 79 66 ac dd 05 14 b0 95 cf a8 b2 5a eb 3b b4 55 76 e9 38 53 ba ed 68 63 0b 6d 56 a0 2d 05 8d f8 f5 b2 2e 3c c6 ff df 7c 53 b7 55 ac 68 d9 f4 d2 35 a9 00 12 7e fe 8c 54 0a b7 d0 26 d9 f2 d2 10 d1 fb 8d 44 96 82 73 17 29 94 07 e6 9c 83 3d 1e bc 1f 59 16 6b 5b e4 15 f0 c9 c7 fe 66 8e 0f a6 97 fd 02 29 58 d5 7c 05 6f 1c 62 99 32 e0 81 4b 5a 7d 7e 93 3a 0a df 00 09 fb 19 ec 89 a4 74 14 56 4d 7d fd ef 10 95 0e 08 4e 7b 88 a1 d5 15 5f fd df 53 f2 0d 77 9b fe b2 cb 08 1f 2e 49 2b 42 93 d5 e4 02 03 d6 21 f7 72 30 ef 0e b5 54 ad 43 93 d4 b7 64 b4 e5 7d 0f 40 79 3e 82 2a 6c c0 f0 d6 f6 d9 de cd 90 2e c2 a3 2f 33 6e e2 bd 36 cf 05 b9 d4 1c 23 e7 49 4e ea 17 fd 65 f9 8f 1e bb b3 c7 8f e6 c2 e0 c9 6a 69 Data Ascii: )''<yfZ;Uv8ShcmV-.<\|SUh5~T&Ds)=Yk[f)X\|ob2KZ}~:tVM}N{_Sw.I+B!r0TCd}@y>*l./3n6#INeji
2024-03-14 00:57:23 UTC	5108	IN	Data Raw: 99 26 45 3b 5b 85 29 d9 6b 86 7c 52 7b e6 cd 5b 95 9d 03 48 37 b4 2f 23 2f 6b df e9 7b 47 8d 22 79 ba 68 06 db 92 0e c4 49 bb 79 a3 b9 b5 fc 22 d8 29 30 b7 ea 31 95 d2 67 ac f7 6b bf 2d 4f 63 97 fb 1c 03 6b 28 13 89 0c dd ad 79 30 47 5c 40 da 1d 8e 2e e8 92 4a 3a 65 6c 45 bb 01 01 34 29 b8 af c7 a8 1c e3 fc b2 25 ec 47 11 3f f5 0b 06 a7 06 73 f6 7e c1 6b 1d d3 45 6e 0d d8 da 55 28 71 cf 28 66 7e c1 f7 59 f6 2b db 06 03 5c e5 05 5c 50 59 79 0c 8d 3c f0 2a c1 23 1f 35 c9 a9 68 66 15 3d 14 bf e5 e8 38 ff b4 94 8d bb 2c 25 18 b8 b0 6b 25 fc 1f b6 72 27 34 db 67 a5 27 fd 02 6f d2 83 50 6b ab f8 3f 16 83 2a f2 21 8c a7 75 11 9d 8f 57 da ad a2 70 b3 8c fd 27 b6 73 2f 24 6a c2 b1 54 45 4c 9c b8 b0 1c 05 02 20 34 43 49 c9 42 f1 e8 59 12 d7 17 eb 0f 11 50 1f 23 9b Data Ascii: &E;[)k\|R{[H7/#/k{G"yhIy")01gk-Ock(y0G\@.J:elE4)%G?s~kEnU(q(f~Y+\\PYy<#5hf=8,%k%r'4g'oPk?!uWp's/$jTEL 4CIBYP#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50078	142.250.80.100	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:23 UTC	1300	OUT	GET /pagead/1p-user-list/990489911/?random=1710377841052&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fm.mtb.com%2FEnrollment&frm=0&tiba=Enroll%20in%20Online%20Banking%20-%20Select%20Account%20Type%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq98vi3XQMFrKMbqDHzWzb2W11nP-6BYb7XZHj_ZeUpPIeKpsW&random=3236588903&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://m.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:23 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:23 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50040	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:23 UTC	4468	OUT	POST /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&bp=3&app=893c324bd7e5ac65&crc=2683548852&en=zgefxirc&end=1 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive Content-Length: 3898 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onlinebanking.mtb.com/Login/LoginHelp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=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; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b242190a3fdfd7654cb892c1310b61e0147d82c5f80da2ac49c4eafa9553f9a43651ef1de954d42f6a58a4bdd0abdb2ea688; TSPD_101=0856addebbab28008a357d933abb3f8f3533bae03e725db219f09d6369d774922e240476d43f16e0ea5747418e1ea555087ba6c53205180049a6bcdc37ebec3bee757dcfe761509665cb42d8d2431f12; utag_main__ss=0%3Bexp-session; TS5075d88f077=0856addebbab2800376acecbbdd1aea74cc8ad1814ec26cb456e8f086969e0c442af5978690f37185fc3af6696d979d8081543aadf172000de7c48e1ffd49a935e8afd9fe6d6b794090b38eafd2530ab446a8bf96d8375db; TS01e71088028=01fe6ed1478a46ae7e94834696d866ac4d0ee4121d6781db003e99e60a297ce8ddf5f2079448e6d175203b4fa2be575bbffa8d5587; TS5075d88f029=0856addebbab2800f9ae826e139056de67dbdb8f17f12eeda36b3cb078567c2d39d1a50430c2893db4d491a90711858c; TSba0bc889027=0856addebbab20000a5036c14ae9e4ed2e5ca9910d4e31e154352c78feeb4860f0bd18b86b3644670886dd432511300006db3d4bcc700ea86caf4d72d15fa29a6a02ff2fdd21245cb5828e0a668009e3cb14584a81591625770d88ff38029671; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; dtPC=4$377839576_29h1vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; rxvt=1710379639588\|1710377821892; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session
2024-03-14 00:57:23 UTC	3898	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 4c 6f 67 69 6e 25 32 46 4c 6f 67 69 6e 48 65 6c 70 24 74 76 74 3d 31 37 31 30 33 37 37 38 31 39 34 35 39 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 73 68 3d 31 30 32 34 24 6e 69 3d 34 67 7c 37 2e 30 35 24 72 74 3d 31 2d 31 37 31 30 33 37 37 38 31 39 34 35 39 25 33 42 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6f 6e 6c 69 6e 65 62 61 6e 6b 69 6e 67 2e 6d 74 62 2e 63 6f 6d 25 32 46 54 53 50 44 25 32 46 30 38 35 36 61 64 64 65 62 62 61 62 32 30 30 30 37 36 65 38 63 35 33 66 31 33 39 64 39 66 31 35 39 35 33 36 62 34 32 63 33 32 62 62 36 63 36 30 36 65 66 64 62 31 32 31 37 37 64 63 65 33 32 64 63 34 31 30 65 36 66 63 39 65 61 61 37 64 63 33 Data Ascii: $tvn=%2FLogin%2FLoginHelp$tvt=1710377819459$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$sh=1024$ni=4g\|7.05$rt=1-1710377819459%3Bhttps%3A%2F%2Fonlinebanking.mtb.com%2FTSPD%2F0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3
2024-03-14 00:57:23 UTC	844	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 X-SRV: B-OLB-227 P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT' X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Access-Control-Allow-Origin: https://digitalbanking.mtb.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST,GET,OPTIONS Date: Thu, 14 Mar 2024 00:57:23 GMT Content-Length: 121 Set-Cookie: TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TSba0bc889027=0856addebbab2000694f96165a88996171f4a0be0059e0ac78d0d0e343494a6643c54a3fe48e162508f8f879bf113000b4278e644ef5cc7cac2285ceab533bd14674bd47a64f6fb634f1e127cd263e09f158f02bdd1962cab6baf09a83f4b685; Path=/
2024-03-14 00:57:23 UTC	121	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 67 68 6a 71 72 75 78 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 31 37 32 36 38 34 30 38 36 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfghjqrux\|version=\|buildNumber=10285240307101407\|lastModification=1710172684086

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50079	142.251.40.132	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:23 UTC	1071	OUT	GET /pagead/1p-user-list/990489911/?random=1710377841052&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v882187536za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fm.mtb.com%2FEnrollment&frm=0&tiba=Enroll%20in%20Online%20Banking%20-%20Select%20Account%20Type%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq98vi3XQMFrKMbqDHzWzb2W11nP-6BYb7XZHj_ZeUpPIeKpsW&random=3236588903&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:24 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:24 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50080	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:23 UTC	2839	OUT	GET /TSPD/?type=22 HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; TS1b6f618f027=0856addebbab2000c640e92ee60f3564dfdc9592f76b9542e0e8ec2f33e8d9dc11d01fa4c137d29e08dcec22451130006a60e6af40f23d052828129d8a962027178d1395c20ae09d105a7a39796fa8abea927d2c2cdce964b17d4478d155fc50; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h2vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28
2024-03-14 00:57:23 UTC	373	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Content-Type: text/html Content-Length: 0 Connection: close Set-Cookie: TS1b6f618f027=0856addebbab2000ca6b3d81d4b7d1af00a8e02af1029fa8f8f93fd02afafc314affe4adcb6657eb084de9399b113000cb74280ed75ed9d7ac2285ceab533bd1e581c347ef487a3ce7d6d70ad53d508459454afe92ea77f410c3e0627194b85f; Path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50081	24.75.29.69	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:23 UTC	4173	OUT	GET /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&bp=3&app=893c324bd7e5ac65&crc=2683548852&en=zgefxirc&end=1 HTTP/1.1 Host: onlinebanking.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; ASP.NET_SessionId=dkuf1eft1xtjriaiie3ukaoi; mtbcookie=ffffffffc3a03fe945525d5f4f58455e445a4a42378b; TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; TS00000000076=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; TSPD_101_DID=0856addebbab2800d120e7d489c3d974720d3e9dc64e0138c0493f127e003c3d1868f71491786a5f9fb12485a9dc2c14087392baf5063800190300dd6450b242190a3fdfd7654cb892c1310b61e0147d82c5f80da2ac49c4eafa9553f9a43651ef1de954d42f6a58a4bdd0abdb2ea688; TSPD_101=0856addebbab28008a357d933abb3f8f3533bae03e725db219f09d6369d774922e240476d43f16e0ea5747418e1ea555087ba6c53205180049a6bcdc37ebec3bee757dcfe761509665cb42d8d2431f12; utag_main__ss=0%3Bexp-session; TS5075d88f077=0856addebbab2800376acecbbdd1aea74cc8ad1814ec26cb456e8f086969e0c442af5978690f37185fc3af6696d979d8081543aadf172000de7c48e1ffd49a935e8afd9fe6d6b794090b38eafd2530ab446a8bf96d8375db; TS01e71088028=01fe6ed1478a46ae7e94834696d866ac4d0ee4121d6781db003e99e60a297ce8ddf5f2079448e6d175203b4fa2be575bbffa8d5587; TS5075d88f029=0856addebbab2800f9ae826e139056de67dbdb8f17f12eeda36b3cb078567c2d39d1a50430c2893db4d491a90711858c; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TSba0bc889027=0856addebbab2000694f96165a88996171f4a0be0059e0ac78d0d0e343494a6643c54a3fe48e162508f8f879bf113000b4278e644ef5cc7cac2285ceab533bd14674bd47a64f6fb634f1e127cd263e09f158f02bdd1962cab6baf09a83f4b685
2024-03-14 00:57:24 UTC	801	IN	HTTP/1.1 200 OK X-SRV: B-OLB-227 P3P: CP='CAO DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT' X-FRAME-OPTIONS: ALLOW-FROM https://mtb.com/ Access-Control-Allow-Origin: https://digitalbanking.mtb.com Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST,GET,OPTIONS Date: Thu, 14 Mar 2024 00:57:23 GMT Content-Length: 6 Set-Cookie: TS01e71088=01fb46a9269e542c080217a3b70c35d676cd6ed725e2051e25a2c0af8d3dd18eadabce3f689fedf2b2d01abd61e32d32e5328d67f9; Path=/; Domain=.onlinebanking.mtb.com Set-Cookie: TSba0bc889027=0856addebbab2000a0f7a0630d2834a54e5da5884b4516c87363cc118e62031f712e75f74a0ebb05088a352fc3113000f5b35fe1dd0d485b89b74e0016d06e0b6ae46c5dda8d6a1c1ab85f6207232e93da25f67a6816b8dc956c8a82026ad1fb; Path=/
2024-03-14 00:57:24 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50082	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:24 UTC	2663	OUT	GET /TSPD/?type=22 HTTP/1.1 Host: m.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS1b6f618f027=0856addebbab2000ca6b3d81d4b7d1af00a8e02af1029fa8f8f93fd02afafc314affe4adcb6657eb084de9399b113000cb74280ed75ed9d7ac2285ceab533bd1e581c347ef487a3ce7d6d70ad53d508459454afe92ea77f410c3e0627194b85f
2024-03-14 00:57:24 UTC	373	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Content-Type: text/html Content-Length: 0 Connection: close Set-Cookie: TS1b6f618f027=0856addebbab2000349107771aca3f07d72aa46077d5581a0e6371abb2d62b00961d427d923a7c6a08766db28b113000adc6d110ca912b7c89b74e0016d06e0be5f8e673858826630df0e25be3c7eac932fd480ee4ad205ccf29550ffa44bfbf; Path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50083	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:24 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 1838 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:24 UTC	1838	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 62 39 65 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8b9e9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:57:24 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:24 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50084	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:24 UTC	3514	OUT	GET /TSPD/0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f5?type=13 HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://m.mtb.com/TSPD/?type=20 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS1b6f618f027=0856addebbab2000ca6b3d81d4b7d1af00a8e02af1029fa8f8f93fd02afafc314affe4adcb6657eb084de9399b113000cb74280ed75ed9d7ac2285ceab533bd1e581c347ef487a3ce7d6d70ad53d508459454afe92ea77f410c3e0627194b85f; TS00000000074=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
2024-03-14 00:57:24 UTC	147	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Content-Type: text/html Content-Length: 566 Connection: close
2024-03-14 00:57:24 UTC	566	IN	Data Raw: 32 30 30 38 61 37 64 37 33 39 34 30 30 37 31 38 30 30 64 34 31 33 33 30 31 31 34 63 65 33 62 32 34 31 39 62 33 64 66 65 30 62 31 34 34 38 39 38 62 35 30 62 65 34 64 30 62 62 64 64 62 33 34 37 38 30 66 38 30 30 30 38 35 36 61 64 64 65 62 62 61 62 32 30 30 30 65 65 39 31 64 62 62 66 39 33 61 38 61 63 38 39 37 64 39 32 38 37 39 34 38 31 63 39 38 36 31 35 30 38 36 64 31 66 32 63 61 35 66 65 39 65 33 37 64 65 38 66 32 30 62 36 64 30 65 31 61 61 30 37 30 38 66 64 39 31 37 37 30 35 30 38 63 38 30 30 64 61 34 39 30 64 66 64 64 38 37 38 37 36 31 61 62 31 63 62 33 32 66 39 62 65 30 61 30 36 34 39 36 65 31 38 63 33 36 64 64 64 61 63 35 65 37 61 65 36 37 62 33 38 64 36 62 39 31 66 33 34 63 64 64 66 34 64 30 62 30 30 37 61 63 32 66 38 33 31 62 66 30 37 35 38 31 36 31 Data Ascii: 2008a7d73940071800d41330114ce3b2419b3dfe0b144898b50be4d0bbddb34780f8000856addebbab2000ee91dbbf93a8ac897d92879481c98615086d1f2ca5fe9e37de8f20b6d0e1aa0708fd91770508c800da490dfdd878761ab1cb32f9be0a06496e18c36dddac5e7ae67b38d6b91f34cddf4d0b007ac2f831bf0758161

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50085	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:25 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:25 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:25 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50088	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:25 UTC	3303	OUT	GET /TSPD/0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f5?type=13 HTTP/1.1 Host: m.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS00000000076=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; TS1b6f618f027=0856addebbab2000349107771aca3f07d72aa46077d5581a0e6371abb2d62b00961d427d923a7c6a08766db28b113000adc6d110ca912b7c89b74e0016d06e0be5f8e673858826630df0e25be3c7eac932fd480ee4ad205ccf29550ffa44bfbf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50089	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:25 UTC	3850	OUT	POST /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fm.mtb.com%2FEnrollment&bp=3&app=ea7c4b59f27d43eb&crc=87346429&en=zgefxirc&end=1 HTTP/1.1 Host: m.mtb.com Connection: keep-alive Content-Length: 1432 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://m.mtb.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS00000000076=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; TS1b6f618f027=0856addebbab2000349107771aca3f07d72aa46077d5581a0e6371abb2d62b00961d427d923a7c6a08766db28b113000adc6d110ca912b7c89b74e0016d06e0be5f8e673858826630df0e25be3c7eac932fd480ee4ad205ccf29550ffa44bfbf
2024-03-14 00:57:25 UTC	1432	OUT	Data Raw: 24 61 3d 31 25 37 43 31 25 37 43 5f 6c 6f 61 64 5f 25 37 43 5f 6c 6f 61 64 5f 25 37 43 2d 25 37 43 31 37 31 30 33 37 37 38 33 36 38 32 39 25 37 43 31 37 31 30 33 37 37 38 34 32 32 31 31 25 37 43 64 6e 25 37 43 31 34 39 25 37 43 73 76 74 72 67 25 37 43 31 25 37 43 73 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 37 43 74 76 74 72 67 25 37 43 31 25 37 43 74 76 6d 25 37 43 69 31 25 35 45 73 6b 30 25 35 45 73 68 30 25 32 43 32 25 37 43 33 25 37 43 5f 65 76 65 6e 74 5f 25 37 43 31 37 31 30 33 37 37 38 33 36 38 32 39 25 37 43 5f 76 63 5f 25 37 43 56 25 37 43 32 38 30 35 25 35 45 70 63 25 37 43 56 43 44 25 37 43 31 30 36 30 25 37 43 56 43 44 53 25 37 43 30 25 37 43 56 43 53 25 37 43 36 34 33 34 25 37 43 56 43 4f 25 37 43 37 34 35 34 25 37 43 56 43 Data Ascii: $a=1%7C1%7C_load_%7C_load_%7C-%7C1710377836829%7C1710377842211%7Cdn%7C149%7Csvtrg%7C1%7Csvm%7Ci1%5Esk0%5Esh0%7Ctvtrg%7C1%7Ctvm%7Ci1%5Esk0%5Esh0%2C2%7C3%7C_event_%7C1710377836829%7C_vc_%7CV%7C2805%5Epc%7CVCD%7C1060%7CVCDS%7C0%7CVCS%7C6434%7CVCO%7C7454%7CVC
2024-03-14 00:57:25 UTC	468	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: text/plain; charset=utf-8 Expires: 0 X-SRV: P-NAO-002 Date: Thu, 14 Mar 2024 00:57:25 GMT Content-Length: 118 Set-Cookie: TS1b6f618f027=0856addebbab200092b04460ce292667f9f01c9cfc36770f819862498276084f6e60035d8b792b4a08d540cc25113000916a473d15d5f20ef59a3d53c9520eddc8107102518070a50a94b5164e0e0b6ec9fd199b46cdaabe1fa687dd021e001c; Path=/
2024-03-14 00:57:25 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 31 37 32 36 38 34 30 38 36 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10285240307101407\|lastModification=1710172684086

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50086	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:25 UTC	721	OUT	POST /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377844196&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&S=0&N=0&P=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 787 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://m.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:25 UTC	787	OUT	Data Raw: 78 01 7d 54 c9 8e e3 36 14 fc 15 81 87 00 41 ab 5b 22 b5 0b 98 43 5b 56 db f2 d2 e3 7d 0b 82 81 16 ca 92 b5 d9 5a bc 75 e6 df e7 51 1e 07 39 e5 a4 32 59 ac f7 58 f5 e8 bf be 50 8d 4c 54 21 1e 5d 91 89 89 2e f2 e8 06 40 24 32 8f 2e cf 95 08 99 86 a8 f1 c8 07 2a 30 ff 84 4f 20 13 5f 22 44 f2 0d 45 92 b1 eb a9 58 0e 64 d5 25 7a 48 75 c5 50 28 d0 2a 64 12 09 2b 2a 8f 8e ac 86 9d 97 45 9a 72 71 ce 7d cf d3 38 a7 5c c7 cd 93 38 df 73 af dc 9c a6 d4 af b9 77 df 2f 9a bc e6 16 b7 23 e5 fe e1 c6 7f 2c 5a 0e 48 35 65 0a 0a 51 5d 1f 2b 53 10 b2 b7 ac f6 de fc 22 13 1e 9a 19 cd 6b 20 f9 14 38 f2 9e a1 00 99 50 d6 2f a1 03 11 6e 44 53 e8 05 cb 06 8f ee c8 0c dd b4 a2 3c 2a 90 09 3b 47 64 7e 21 97 dd 93 ed 7a 2d 4b 69 2f aa 48 2a ec 83 90 8c 65 26 c1 80 02 a6 84 0c 48 Data Ascii: x}T6A["C[V}ZuQ92YXPLT!].@$2.0O _"DEXd%zHuP(d+Erq}8\8sw/#,ZH5eQ]+S"k 8P/nDS<;Gd~!z-Ki/H*e&H
2024-03-14 00:57:26 UTC	960	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:26 GMT Content-Type: application/json Content-Length: 90 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: https://m.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex
2024-03-14 00:57:26 UTC	90	IN	Data Raw: 31 31 65 38 36 31 62 39 39 34 32 36 38 32 66 61 61 32 63 36 37 32 64 32 65 33 61 36 31 30 62 66 2f 30 38 39 31 35 63 33 35 33 36 31 62 36 66 65 62 38 36 63 62 66 64 34 36 37 32 34 61 38 36 38 39 2f 34 66 36 66 65 66 35 66 38 36 66 35 31 63 34 61 35 39 30 63 33 66 36 39 Data Ascii: 11e861b9942682faa2c672d2e3a610bf/08915c35361b6feb86cbfd46724a8689/4f6fef5f86f51c4a590c3f69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50087	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:25 UTC	718	OUT	POST /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377844198&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=d42c3223c95341ab614d46a28fe8595e HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 4238 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://m.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:25 UTC	4238	OUT	Data Raw: 78 01 ed 1c 6b 73 db 36 f2 af b0 9e b1 3e dc 84 b6 64 39 89 e3 46 b9 b1 1d a5 d1 d5 af c6 4a 7b 99 eb 8d 06 12 21 89 31 5f 25 29 d9 6e af ff fd 76 f1 12 08 82 22 e5 28 e9 b5 17 25 16 29 e2 b5 d8 37 16 4b bc fc e6 f5 d5 d9 f0 c3 75 df 99 e7 61 f0 ea a5 f8 a6 c4 7b f5 72 7f ce 2e e3 d8 7b 78 f5 f2 1b d7 fd e1 e2 1f 37 57 97 6f 87 17 e7 c7 bf ed 74 76 e0 2b da 39 de c1 df 3b 4f 76 c8 ce f1 bf 7e db 39 90 4f 03 12 cd e0 e9 12 2a d0 68 e7 f7 df 9f 68 65 93 80 64 99 28 1c 8d b2 dc 9f dc 3e b8 d3 38 ce 69 0a 35 ff fd 64 e7 8c f5 b5 1a a1 7f f2 5a 8c a0 0a bb 38 10 f6 fe b3 e8 5d d5 be 39 7b 37 b8 1e ca fa 6c e4 2d 97 49 00 15 0c 0e 82 cd 46 52 8f 7e 8e 9a 00 d6 bc fa 67 1a d3 81 0f a7 8e c2 d1 45 7f 78 22 b0 a7 d3 6c 4e d2 8c e6 82 6a ef 87 6f dc 23 db a4 1b f7 Data Ascii: xks6>d9FJ{!1_%)nv"(%)7Kua{r.{x7Wotv+9;Ov~9O*hhed(>8i5dZ8]9{7l-IFR~gEx"lNjo#
2024-03-14 00:57:26 UTC	936	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:25 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://m.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50090	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:26 UTC	4353	OUT	GET /TSPD/0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f5?type=14 HTTP/1.1 Host: m.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://m.mtb.com/TSPD/?type=20 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TS43d740f8071=0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f5:08a7d7394004a800db19551b54ecadadc465d276e864737563fe1fa355e51564adfaa6681290605687471ce298dc92eefd331a0dfbf083dea943b01823e02a0fb30ef230c05a16128ba8d664d3e5e3c487785641921ad448569b73790d588becf0756260e8db733f2291d38f75bac56ba4e1c5ab06b6fef2d71c3c097afe8c7b17b086b2613a094177dd98dbd897a1f6142333c248cc9fee4571385fabf3a813ee15366c67ac2cf06426113508e6d354; utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS00000000076=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; TS1b6f618f027=0856addebbab2000349107771aca3f07d72aa46077d5581a0e6371abb2d62b00961d427d923a7c6a08766db28b113000adc6d110ca912b7c89b74e0016d06e0be5f8e673858826630df0e25be3c7eac932fd480ee4ad205ccf29550ffa44bfbf; TSPD_101_DID=0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f508a7d73940063800b28096b74a6ce3147e4afc4ec81108df48bc2703a62306ff9df5fa29f4b549efaf2fd903b891a1e10b8d44027292e7a1b194576b8312cb32
2024-03-14 00:57:26 UTC	566	IN	HTTP/1.1 200 OK Cache-Control: no-store, must-revalidate, no-cache, max-age=0 Content-Type: text/html Content-Length: 209 Connection: close Set-Cookie: TSPD_101=0856addebbab2800b86f4dd0872f5a1bba779326914488d747b699aa217cf85bae4974edc4385bad68c5a0688e6b737c086f2598690518000f9c2df27df6dd4e15a159c28c1aef84ff1e5c1414b3890f; Path=/ Set-Cookie: TS1b6f618f027=0856addebbab20001741ef78d4151fdae44bf17fc9fb62571295902ce89ef6e6b0e0b31b3d5bd91408b2fae9ac1130004eee8fe6619723d6dac7b1d20608fc14ee0a4ff8c74a9c935949d21f2575f6dcccf752082b8d0a83e21f26fc1d7028ec; Path=/
2024-03-14 00:57:26 UTC	209	IN	Data Raw: 3c 73 63 72 69 70 74 3e 0d 0a 76 61 72 20 71 73 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 0d 0a 69 66 20 28 71 73 20 26 26 20 71 73 2e 69 6e 64 65 78 4f 66 28 27 3f 64 6f 63 75 6d 65 6e 74 44 6f 6d 61 69 6e 54 53 3d 27 29 20 3d 3d 20 30 29 20 7b 0d 0a 20 20 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 20 3d 20 71 73 2e 73 75 62 73 74 72 69 6e 67 28 27 3f 64 6f 63 75 6d 65 6e 74 44 6f 6d 61 69 6e 54 53 3d 27 2e 6c 65 6e 67 74 68 29 3b 0d 0a 7d 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 62 6f 64 79 20 69 64 3d 27 63 6c 6e 74 63 61 70 5f 73 75 63 63 65 73 73 27 3e 3c 2f 62 6f 64 79 3e Data Ascii: <script>var qs = window.location.search;if (qs && qs.indexOf('?documentDomainTS=') == 0) { document.domain = qs.substring('?documentDomainTS='.length);}</script><body id='clntcap_success'></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50094	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:26 UTC	2284	OUT	GET /personal-banking/online-mobile-services HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:26 UTC	803	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Content-Length: 151069 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:26 GMT ETag: "24e1d-6139294d9d519" Last-Modified: Wed, 13 Mar 2024 22:49:03 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 8e923e72a50f75048382f193bf6c8c4e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: TM7HoFrrwXWOyUCBPmHUPxrjvH9-DyNk0nqh6K8I_lPTazsO5xsnuw== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:26 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4f 6e 6c 69 6e 65 20 26 61 6d 70 3b 20 4d 6f 62 69 6c 65 20 42 61 6e 6b 69 6e 67 20 53 65 72 76 69 63 65 73 20 20 7c 20 4d 26 61 6d 70 3b 54 20 42 61 6e 6b 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 6e 72 6f 6c 6c 20 69 6e 20 4d 26 61 6d 70 3b 54 20 42 61 6e 6b 26 23 33 39 3b 73 20 4f 6e 6c 69 6e 65 20 26 61 6d 70 3b 20 4d 6f 62 69 6c 65 20 42 61 6e 6b 69 6e 67 20 73 65 72 76 69 63 65 73 20 74 6f 20 65 61 73 69 6c 79 20 61 6e 64 20 63 6f 6e 76 65 6e 69 65 6e 74 6c 79 20 6d 61 6e Data Ascii: <!DOCTYPE HTML><html><head><meta charset="UTF-8"/><title>Online & Mobile Banking Services \| M&T Bank</title><meta name="description" content="Enroll in M&T Bank's Online & Mobile Banking services to easily and conveniently man
2024-03-14 00:57:26 UTC	16384	IN	Data Raw: 22 4d 31 39 20 31 36 63 32 2e 36 2d 32 2e 38 36 20 36 2e 31 36 2d 34 2e 36 34 20 31 30 2d 35 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 09 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 09 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 69 63 6f 6e 2d 69 6e 66 6f 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 20 32 38 22 3e 0a 09 09 3c 67 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 30 32 20 2d 33 34 29 20 74 72 61 6e 73 6c 61 74 65 28 31 32 30 32 20 33 34 29 22 3e 0a 09 09 09 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 34 22 20 63 79 3d 22 31 34 22 20 72 3d 22 31 34 22 2f 3e 0a 09 09 09 3c 63 69 72 63 6c 65 20 63 78 3d 22 31 34 22 20 63 79 3d 22 39 22 20 72 3d 22 32 22 20 66 69 6c 6c 3d 22 23 31 38 38 Data Ascii: "M19 16c2.6-2.86 6.16-4.64 10-5"/> </g></symbol><symbol id="icon-info" viewBox="0 0 28 28"><g stroke="none" transform="translate(-1202 -34) translate(1202 34)"><circle cx="14" cy="14" r="14"/><circle cx="14" cy="9" r="2" fill="#188
2024-03-14 00:57:26 UTC	16384	IN	Data Raw: 34 2e 33 37 30 38 34 36 37 20 43 36 32 2e 34 36 37 35 33 32 35 2c 36 37 2e 37 36 35 31 38 36 39 20 36 32 2e 34 36 37 35 33 32 35 2c 37 31 2e 31 35 39 33 33 34 34 20 36 32 2e 34 36 35 33 36 33 32 2c 37 34 2e 35 35 33 36 37 34 36 20 43 36 32 2e 34 36 33 33 34 36 35 2c 37 37 2e 32 39 31 30 39 35 36 20 36 31 2e 35 31 31 38 33 32 37 2c 37 38 2e 36 39 37 31 32 36 37 20 35 39 2e 30 34 31 33 38 30 31 2c 37 39 2e 36 33 32 35 35 32 20 43 35 39 2e 30 30 32 33 32 39 36 2c 37 39 2e 36 34 37 34 30 33 31 20 35 38 2e 39 37 37 32 31 32 35 2c 37 39 2e 37 30 33 31 34 32 39 20 35 38 2e 39 34 35 38 36 32 31 2c 37 39 2e 37 33 39 39 38 31 33 20 4c 33 2e 39 34 35 30 36 33 32 2c 37 39 2e 37 33 39 39 38 31 33 20 43 33 2e 33 36 39 39 33 38 31 38 2c 37 39 2e 34 37 32 38 35 34 37 20 Data Ascii: 4.3708467 C62.4675325,67.7651869 62.4675325,71.1593344 62.4653632,74.5536746 C62.4633465,77.2910956 61.5118327,78.6971267 59.0413801,79.632552 C59.0023296,79.6474031 58.9772125,79.7031429 58.9458621,79.7399813 L3.9450632,79.7399813 C3.36993818,79.4728547
2024-03-14 00:57:26 UTC	16384	IN	Data Raw: 2e 35 56 31 39 2e 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f 3e 0a 0a 09 09 09 3c 70 61 74 68 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 36 22 20 64 3d 22 4d 38 20 32 37 2e 32 56 32 37 2e 32 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f 3e 0a 09 09 09 3c 70 61 74 68 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 36 22 20 64 3d 22 4d 31 30 20 32 37 2e 32 56 32 37 2e 32 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f 3e 0a 09 09 09 3c 70 61 74 68 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 36 22 20 64 3d 22 4d 31 39 2e 35 20 32 37 2e 32 56 32 37 2e 32 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f 3e 0a 09 09 09 3c 70 61 74 68 Data Ascii: .5V19.5" stroke-linecap="square"/><path stroke-width="6" d="M8 27.2V27.2" stroke-linecap="square"/><path stroke-width="6" d="M10 27.2V27.2" stroke-linecap="square"/><path stroke-width="6" d="M19.5 27.2V27.2" stroke-linecap="square"/><path
2024-03-14 00:57:26 UTC	9888	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 61 75 74 6f 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 0a 0a 20 20 20 20 0a 3c 2f 73 74 79 6c 65 3e 3c 2f 64 69 76 3e 0a 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 74 79 6c 65 3e 0a 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 74 79 70 65 3d 22 73 65 63 74 69 6f 6e 22 5d 20 3e 20 2a 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 22 62 73 5f 73 65 63 74 69 6f 6e 2d 36 38 34 36 30 31 35 33 30 22 5d 5b 63 6c 61 73 73 2a 3d 22 62 67 2d 22 5d 3a 62 65 66 6f 72 65 20 7b 0a Data Ascii: background-size: auto 100%; } } </style></div> </div></div><style> section[data-component-type="section"] > [data-component-id="bs_section-684601530"][class="bg-"]:before {
2024-03-14 00:57:26 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 74 79 70 65 3d 22 73 65 63 74 69 6f 6e 22 5d 20 3e 20 2a 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 22 62 73 5f 73 65 63 74 69 6f 6e 2d 39 39 30 31 36 32 31 32 30 22 5d 5b 63 6c 61 73 73 2a 3d 22 62 67 2d 67 72 61 64 69 65 6e 74 22 5d 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 2d 6d 6f 62 69 6c 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 0a Data Ascii: section[data-component-type="section"] > [data-component-id="bs_section-990162120"][class="bg-gradient"]:before { background: var(---mobile); } } @media screen and (max-width:767px){
2024-03-14 00:57:26 UTC	16384	IN	Data Raw: 65 6e 74 20 20 20 22 20 64 61 74 61 2d 75 6e 2d 70 75 62 6c 69 73 68 65 64 3d 22 74 72 75 65 22 3e 0a 0a 20 20 20 20 0a 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 78 66 2d 63 6f 6e 74 65 6e 74 2d 68 65 69 67 68 74 22 3e 0a 20 20 20 20 0a 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 65 6d 2d 47 72 69 64 20 61 65 6d 2d 47 72 69 64 2d 2d 31 32 20 61 65 6d 2d 47 72 69 64 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 32 20 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 74 79 70 65 3d 22 63 6f 6c 75 6d 6e 22 20 63 6c 61 73 73 3d 22 63 6f 6c 75 6d 6e 73 20 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 20 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 32 22 3e 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii: ent " data-un-published="true"> <div class="xf-content-height"> <div class="aem-Grid aem-Grid--12 aem-Grid--default--12 "> <div data-component-type="column" class="columns aem-GridColumn aem-GridColumn--default--12">
2024-03-14 00:57:26 UTC	16384	IN	Data Raw: 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 22 62 73 5f 63 74 61 42 74 6e 2d 31 34 38 33 30 30 33 37 38 35 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 20 20 6d 74 62 2d 63 68 65 76 72 6f 6e 20 20 6d 74 62 2d 66 6f 6e 74 2d 73 69 7a 65 2d 31 36 20 20 20 20 72 6f 75 6e 64 65 64 2d 30 20 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 20 20 53 68 6f 77 20 6f 6e 20 41 6c 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 69 67 69 74 61 6c 61 6d 62 61 73 73 61 64 6f 72 2e 6d 74 62 2e 63 6f 6d 2f 65 6e 2f 68 6f 6d 65 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 56 69 65 77 20 41 6c 6c 20 44 65 6d 6f 73 22 20 64 61 74 61 2d 62 74 6e 2d 73 74 79 6c 65 3d 22 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 22 20 64 61 74 61 2d 74 61 Data Ascii: a-component-id="bs_ctaBtn-1483003785" class="btn btn-secondary mtb-chevron mtb-font-size-16 rounded-0 position-relative Show on All" href="https://digitalambassador.mtb.com/en/home" aria-label="View All Demos" data-btn-style="btn-secondary" data-ta
2024-03-14 00:57:26 UTC	16384	IN	Data Raw: 6f 6e 2d 70 68 6f 6e 65 2d 64 61 72 6b 2d 67 72 65 65 6e 2e 73 76 67 22 20 63 6c 61 73 73 3d 22 6d 74 62 2d 68 65 69 67 68 74 2d 65 6d 2d 31 20 63 74 61 2d 62 74 6e 2d 69 63 6f 6e 22 2f 3e 0a 09 09 3c 2f 73 70 61 6e 3e 0a 09 09 3c 73 70 61 6e 20 64 61 74 61 2d 63 74 61 2d 74 65 78 74 2d 66 6f 72 3d 22 62 73 5f 63 74 61 42 74 6e 2d 35 31 35 36 34 31 30 37 39 22 20 63 6c 61 73 73 3d 22 66 6c 65 78 2d 66 69 6c 6c 20 20 20 20 20 63 74 61 2d 62 74 6e 2d 74 65 78 74 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 62 74 6e 2d 74 65 78 74 20 22 3e 31 2d 38 30 30 2d 37 32 34 2d 32 34 34 30 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 0a 09 3c 2f 73 70 61 6e 3e 0a 0a 20 20 20 20 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 0a 0a 09 09 73 70 61 6e 5b 64 Data Ascii: on-phone-dark-green.svg" class="mtb-height-em-1 cta-btn-icon"/></span><span data-cta-text-for="bs_ctaBtn-515641079" class="flex-fill cta-btn-text"><span class="btn-text ">1-800-724-2440</span></span></span> <style> span[d
2024-03-14 00:57:27 UTC	10109	IN	Data Raw: 20 0a 3c 2f 73 74 79 6c 65 3e 3c 2f 64 69 76 3e 0a 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2e 63 6f 6e 74 61 69 6e 65 72 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 22 62 73 5f 63 6f 6c 75 6d 6e 2d 36 37 38 30 37 37 38 38 33 22 5d 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 29 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 Data Ascii: </style></div></div></div> </div></div><style> .container[data-component-id="bs_column-678077883"] { background-image: url(); background-position: center; background-size: 100%;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50097	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:26 UTC	3994	OUT	GET /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fm.mtb.com%2FEnrollment&bp=3&app=ea7c4b59f27d43eb&crc=87346429&en=zgefxirc&end=1 HTTP/1.1 Host: m.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS00000000076=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; TSPD_101_DID=0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f508a7d73940063800b28096b74a6ce3147e4afc4ec81108df48bc2703a62306ff9df5fa29f4b549efaf2fd903b891a1e10b8d44027292e7a1b194576b8312cb32; TSPD_101=0856addebbab2800b86f4dd0872f5a1bba779326914488d747b699aa217cf85bae4974edc4385bad68c5a0688e6b737c086f2598690518000f9c2df27df6dd4e15a159c28c1aef84ff1e5c1414b3890f; TS1b6f618f027=0856addebbab20001741ef78d4151fdae44bf17fc9fb62571295902ce89ef6e6b0e0b31b3d5bd91408b2fae9ac1130004eee8fe6619723d6dac7b1d20608fc14ee0a4ff8c74a9c935949d21f2575f6dcccf752082b8d0a83e21f26fc1d7028ec
2024-03-14 00:57:26 UTC	616	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Expires: 0 X-SRV: P-NAO-002 Date: Thu, 14 Mar 2024 00:57:25 GMT Content-Length: 6 Set-Cookie: TSPD_101=0856addebbab28002af27e37b16536547d36f5514d908e2a76eff2f85e55962c7ec47766a25b15a54b1e850615a6bbc708824bb86705180024499e2a4e478e24ee757dcfe761509665cb42d8d2431f12; Path=/ Set-Cookie: TS1b6f618f027=0856addebbab2000b2ced5399d180b26a9eecaba54b83c191b9e4885030a789ea5305361787945cd08b6844c22113000106f2097209d5748dac7b1d20608fc14ee0a4ff8c74a9c935949d21f2575f6dc619fc031b3d97ed59f57ec529c59839b; Path=/
2024-03-14 00:57:26 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50092	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:26 UTC	745	OUT	POST /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377844947&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=847&N=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 15 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:26 UTC	15	OUT	Data Raw: 78 01 ab 56 4a 55 b2 32 ad 05 00 08 46 02 11 Data Ascii: xVJU2F
2024-03-14 00:57:26 UTC	948	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:26 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://onlinebanking.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50091	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:26 UTC	722	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377844959&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=2105&N=18&P=5 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 121 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:26 UTC	121	OUT	Data Raw: 78 01 1d 8c 41 0a c2 30 14 44 ef 32 eb d0 a4 36 90 f0 0f a1 42 bb 13 37 c6 60 17 26 91 fc 14 0a c5 bb fb e3 6e 66 78 6f 6e 07 12 08 d7 cb bc 40 61 93 b8 b6 f6 61 d2 ba 3c 78 e0 f8 aa 31 e6 50 de 5b ca 43 28 49 a7 92 85 0b a0 93 31 0a 0c 1a fd e4 15 66 90 d4 0a b2 0a ad af 6e 34 93 73 de f6 2e a7 fb 5a 45 63 89 7f ef 29 84 f5 b6 8b e7 7e f1 bd ff 00 69 81 24 6d Data Ascii: xA0D26B7`&nfxon@aa<x1P[C(I1fn4s.ZEc)~i$m
2024-03-14 00:57:26 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:26 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50093	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:26 UTC	748	OUT	POST /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377845112&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 505 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://m.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:26 UTC	505	OUT	Data Raw: 78 01 95 92 cb 92 a2 40 10 45 7f 85 a8 c5 6c a4 5b aa a0 e4 11 d1 0b 41 44 54 ba 41 45 d0 89 59 f0 14 04 41 91 97 da fe fb 38 b6 33 0b 7b 35 ab dc dc 93 37 4f 44 5e 40 90 04 27 20 5c 1e 13 d4 48 28 78 e9 28 ba 31 92 9a 55 77 b9 6b 2a 67 92 9c ba 78 37 55 d6 32 d5 76 8c e3 28 e6 2c f3 d0 9c 13 ce 5f cf f6 ad 6f 64 1c ab 23 cf e8 f4 83 e5 c9 37 f7 b6 31 a5 db dc ed 9e 98 02 55 92 ec 22 ab 58 4b ea ca 72 98 b1 6f c8 8a 9f f7 0a 48 89 1b 38 32 55 5b 5b e8 ab c3 99 ca 64 31 0c bb eb 61 45 e1 6d 13 cd 87 9c ba 9b 9c 2c 5d 52 78 5c 39 dd 22 3a 0e d4 41 b7 5e c0 6c e7 f5 eb c0 92 ad 49 2f 5a 2d cf 41 43 b9 96 e1 ca f5 d8 85 ba 8f 3a 26 84 7e 33 51 f8 ed 34 52 3e 18 46 72 07 d6 38 f2 72 2f d8 4a e2 06 d3 33 54 ac 54 de 0b 35 bb 17 d4 f4 41 96 92 f7 c9 dc d1 87 23 Data Ascii: x@El[ADTAEYA83{57OD^@' \H(x(1Uwk*gx7U2v(,_od#71U"XKroH82U[[d1aEm,]Rx\9":A^lI/Z-AC:&~3Q4R>Fr8r/J3TT5A#
2024-03-14 00:57:26 UTC	936	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:26 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://m.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50095	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:26 UTC	2232	OUT	GET /etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap.css HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:27 UTC	816	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 546887 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 28 Jul 2022 20:28:56 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600, public Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "85847-5e4e361f97200" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 fc527c9e0a8a22ce61e1580f7382bcf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: ffkZPaGKfHHz9gR6LtAWkDW4jGjsz_zUxPfZCLAWeqVIoL1HqDS3KA== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 47 72 69 64 20 76 35 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 23 Data Ascii: /! Bootstrap Grid v5.1.3 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d6efd;--bs-indigo:#
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 79 2d 61 75 74 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 30 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 31 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 32 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 33 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 34 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e Data Ascii: argin-bottom:3rem!important}.my-auto{margin-top:auto!important;margin-bottom:auto!important}.mt-0{margin-top:0!important}.mt-1{margin-top:.25rem!important}.mt-2{margin-top:.5rem!important}.mt-3{margin-top:1rem!important}.mt-4{margin-top:1.5rem!important}.
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 6c 67 2d 6e 6f 6e 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 66 69 6c 6c 7b 66 6c 65 78 3a 31 20 31 20 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 72 6f 77 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 72 6f 77 2d 72 65 76 65 72 73 65 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 2d 72 65 76 65 72 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 6c 67 2d 63 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 7b Data Ascii: !important}.d-lg-none{display:none!important}.flex-lg-fill{flex:1 1 auto!important}.flex-lg-row{flex-direction:row!important}.flex-lg-column{flex-direction:column!important}.flex-lg-row-reverse{flex-direction:row-reverse!important}.flex-lg-column-reverse{
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 79 2d 78 78 6c 2d 35 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 79 2d 78 78 6c 2d 61 75 74 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 78 78 6c 2d 30 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 78 78 6c 2d 31 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 78 78 6c 2d 32 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e Data Ascii: .5rem!important}.my-xxl-5{margin-top:3rem!important;margin-bottom:3rem!important}.my-xxl-auto{margin-top:auto!important;margin-bottom:auto!important}.mt-xxl-0{margin-top:0!important}.mt-xxl-1{margin-top:.25rem!important}.mt-xxl-2{margin-top:.5rem!importan
2024-03-14 00:57:27 UTC	14841	IN	Data Raw: 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 7d 2e 67 2d 78 78 6c 2d 31 2c 2e 67 78 2d 78 78 6c 2d 31 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 30 2e 32 35 72 65 6d 7d 2e 67 2d 78 78 6c 2d 31 2c 2e 67 79 2d 78 78 6c 2d 31 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 32 35 72 65 6d 7d 2e 67 2d 78 78 6c 2d 32 2c 2e 67 78 2d 78 78 6c 2d 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 30 2e 35 72 65 6d 7d 2e 67 2d 78 78 6c 2d 32 2c 2e 67 79 2d 78 78 6c 2d 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 35 72 65 6d 7d 2e 67 2d 78 78 6c 2d 33 2c 2e 67 78 2d 78 78 6c 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 72 65 6d 7d 2e 67 2d 78 78 6c 2d 33 2c 2e 67 79 2d 78 78 6c 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 72 65 6d 7d 2e Data Ascii: --bs-gutter-y:0}.g-xxl-1,.gx-xxl-1{--bs-gutter-x:0.25rem}.g-xxl-1,.gy-xxl-1{--bs-gutter-y:0.25rem}.g-xxl-2,.gx-xxl-2{--bs-gutter-x:0.5rem}.g-xxl-2,.gy-xxl-2{--bs-gutter-y:0.5rem}.g-xxl-3,.gx-xxl-3{--bs-gutter-x:1rem}.g-xxl-3,.gy-xxl-3{--bs-gutter-y:1rem}.
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 62 65 74 77 65 65 6e 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 61 72 6f 75 6e 64 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 61 72 6f 75 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 6d 64 2d 73 74 72 65 74 63 68 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 Data Ascii: lign-content:flex-end!important}.align-content-md-center{align-content:center!important}.align-content-md-between{align-content:space-between!important}.align-content-md-around{align-content:space-around!important}.align-content-md-stretch{align-content:s
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 78 2d 78 6c 2d 31 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 78 2d 78 6c 2d 32 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 78 2d 78 6c 2d 33 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 78 2d 78 6c 2d 34 7b 70 61 Data Ascii: t:0!important;padding-right:0!important}.px-xl-1{padding-left:.25rem!important;padding-right:.25rem!important}.px-xl-2{padding-left:.5rem!important;padding-right:.5rem!important}.px-xl-3{padding-left:1rem!important;padding-right:1rem!important}.px-xl-4{pa
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 33 30 7d 2e 73 74 69 63 6b 79 2d 74 6f 70 7b 70 6f 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 73 74 69 63 6b 79 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 32 30 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 73 74 69 63 6b 79 2d 73 6d 2d 74 6f 70 7b 70 6f 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 73 74 69 63 6b 79 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 32 30 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 73 74 69 63 6b 79 2d 6d 64 2d 74 6f 70 7b 70 6f 73 69 74 69 6f 6e 3a 2d 77 65 62 6b 69 74 2d 73 74 69 63 Data Ascii: :0;left:0;z-index:1030}.sticky-top{position:-webkit-sticky;position:sticky;top:0;z-index:1020}@media (min-width:576px){.sticky-sm-top{position:-webkit-sticky;position:sticky;top:0;z-index:1020}}@media (min-width:768px){.sticky-md-top{position:-webkit-stic
2024-03-14 00:57:27 UTC	10463	IN	Data Raw: 72 74 61 6e 74 7d 2e 66 6c 6f 61 74 2d 73 6d 2d 6e 6f 6e 65 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 73 6d 2d 69 6e 6c 69 6e 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 73 6d 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 73 6d 2d 62 6c 6f 63 6b 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 73 6d 2d 67 72 69 64 7b 64 69 73 70 6c 61 79 3a 67 72 69 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 73 6d 2d 74 61 62 6c 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 64 2d 73 6d 2d 74 61 62 6c 65 2d 72 6f 77 7b 64 69 73 Data Ascii: rtant}.float-sm-none{float:none!important}.d-sm-inline{display:inline!important}.d-sm-inline-block{display:inline-block!important}.d-sm-block{display:block!important}.d-sm-grid{display:grid!important}.d-sm-table{display:table!important}.d-sm-table-row{dis
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 67 69 6e 2d 74 6f 70 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 32 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 79 2d 6d 64 2d 32 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 79 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 79 2d 6d 64 2d 34 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e Data Ascii: gin-top:.25rem!important;margin-bottom:.25rem!important}.my-md-2{margin-top:.5rem!important;margin-bottom:.5rem!important}.my-md-3{margin-top:1rem!important;margin-bottom:1rem!important}.my-md-4{margin-top:1.5rem!important;margin-bottom:1.5rem!important}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50098	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	506	OUT	GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377844198&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=d42c3223c95341ab614d46a28fe8595e HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:27 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:27 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50099	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	510	OUT	GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377844196&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&S=0&N=0&P=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:27 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:27 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50102	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	2243	OUT	GET /etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap-components.css HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:27 UTC	818	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 58513 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600, public Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:12:40 GMT Last-Modified: Tue, 12 Mar 2024 21:52:41 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish ETag: "e491-6137dad623c40" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8cdf4e2d4f4070992665477c4dbca0c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: Acvp9JrtQKaImuCZVPVl0X6XcYHuMr6RhMuXAe5C4Pi4eWBukuCjgw== Age: 2687 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2f 2a 2a 42 61 73 65 20 43 6f 6c 6f 72 73 2a 2a 2f 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 3a 23 66 66 66 66 66 66 3b 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 38 35 36 3b 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 3a 23 38 30 62 63 30 30 3b 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 74 65 72 74 69 61 72 79 3a 23 66 66 64 30 33 65 3b 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 62 75 73 69 6e 65 73 73 3a 23 30 39 35 36 38 36 3b 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 62 6c 61 63 6b 3a 23 30 30 30 30 30 30 3b 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 62 65 69 67 65 3a 23 65 62 65 63 64 63 3b 0a 20 20 20 20 2d 2d 63 6f 6c 6f 72 2d 67 6f 6c 64 3a 20 23 46 46 44 30 33 Data Ascii: :root { /Base Colors/ --color-white:#ffffff; --color-primary:#007856; --color-secondary:#80bc00; --color-tertiary:#ffd03e; --color-business:#095686; --color-black:#000000; --color-beige:#ebecdc; --color-gold: #FFD03
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 2d 7a 2d 69 6e 64 65 78 2d 32 20 7b 20 7a 2d 69 6e 64 65 78 3a 20 33 3b 7d 0a 2e 6d 74 62 2d 7a 2d 69 6e 64 65 78 2d 33 20 7b 20 7a 2d 69 6e 64 65 78 3a 20 33 3b 7d 0a 2e 6d 74 62 2d 68 65 69 67 68 74 2d 65 6d 2d 31 20 7b 20 68 65 69 67 68 74 3a 20 31 65 6d 3b 7d 0a 2e 6d 74 62 2d 68 65 69 67 68 74 2d 65 6d 2d 32 20 7b 20 68 65 69 67 68 74 3a 20 32 65 6d 3b 7d 0a 2e 6d 74 62 2d 68 65 69 67 68 74 2d 65 6d 2d 33 20 7b 20 68 65 69 67 68 74 3a 20 33 65 6d 3b 7d 0a 0a 2e 63 6f 6d 70 6f 6e 65 6e 74 2d 63 6f 6c 6c 61 70 73 65 20 7e 20 2a 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 6d 74 62 2d 73 72 2d 6f 6e 6c 79 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 Data Ascii: -z-index-2 { z-index: 3;}.mtb-z-index-3 { z-index: 3;}.mtb-height-em-1 { height: 1em;}.mtb-height-em-2 { height: 2em;}.mtb-height-em-3 { height: 3em;}.component-collapse ~ * { display: none !important;}.mtb-sr-only { position: absolute;
2024-03-14 00:57:27 UTC	11977	IN	Data Raw: 73 65 6c 2d 6e 61 76 20 3e 20 2a 20 3e 20 62 75 74 74 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 33 35 64 65 67 29 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 2e 32 35 65 6d 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 74 79 70 65 3d 22 61 72 74 69 63 6c 65 63 61 72 6f 75 73 65 6c 22 5d 20 2e 61 72 74 69 63 6c 65 2d 63 61 72 6f 75 73 65 6c 2d 6e 61 76 20 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 6e 61 76 64 6f 74 29 20 3e 20 2a 20 7b 0a 20 20 20 20 20 20 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 30 3b 0a 20 20 20 20 20 20 Data Ascii: sel-nav > * > button:first-child:after { transform:rotate(135deg); margin-left:0.25em; } [data-component-type="articlecarousel"] .article-carousel-nav button:not(.navdot) > * { white-space:nowrap; opacity:0;
2024-03-14 00:57:27 UTC	13768	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 32 2e 31 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 5b 63 6c 61 73 73 20 2a 3d 22 69 63 6f 6e 2d 6c 69 6e 6b 2d 22 5d 20 7b 0a 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 37 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 Data Ascii: portant; height: 2.1rem !important; vertical-align: middle; background-position:bottom; background-size:contain; } [class *="icon-link-"] { vertical-align: middle; font-size: 0.75rem !important;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50101	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	2229	OUT	GET /etc.clientlibs/mtb-web/clientlibs/clientlib-bootstrap.css HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:27 UTC	813	IN	HTTP/1.1 200 OK Content-Type: text/css;charset=utf-8 Content-Length: 6704 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Tue, 11 Jul 2023 20:54:21 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600, public Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "1a30-6003c4da59940" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 f25b89e7ef738cb8bb7e28e041d8fe54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: a9cWym2WhtEb39raqqYMjhe2I1M4dFsLOfoOt3Fc1JrETf8nhphfQw== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:27 UTC	6704	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 42 61 6c 74 6f 2d 42 6f 6f 6b 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 66 6f 6e 74 73 2f 4d 54 42 5f 42 61 6c 74 6f 2f 57 65 62 66 6f 6e 74 73 2f 6d 61 6e 64 74 62 61 6c 74 6f 77 65 62 2d 62 6f 6f 6b 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 3b 20 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 42 61 6c 74 6f 2d 4c 69 67 68 74 27 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 63 6c 69 65 6e 74 6c 69 62 2d 73 69 74 65 2f 72 65 73 6f 75 72 63 65 73 2f 66 6f 6e 74 73 2f 4d 54 42 5f 42 61 6c 74 6f 2f 57 65 62 66 6f 6e 74 73 2f 6d Data Ascii: @font-face { font-family: 'Balto-Book'; src: url("clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-book.woff") format("woff"); }@font-face { font-family: 'Balto-Light'; src: url("clientlib-site/resources/fonts/MTB_Balto/Webfonts/m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50100	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	2217	OUT	GET /etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap.js HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:27 UTC	828	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 59219 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Tue, 21 Feb 2023 21:18:23 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600, public Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "e753-5f53c51d045c0" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 cc4ee60e87dead01c9e2d4b985af043e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: -MRYAVLnhmz3NTcZErLu5VzxNSzNgoiZrhKvEPWQu_KvkTbvcUSYTg== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.1.3 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 73 2e 73 6c 69 64 65 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 29 69 2e 74 6f 28 65 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 69 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 24 7b 6e 7d 22 60 29 3b 69 5b 6e 5d 28 29 7d 65 6c 73 65 20 73 2e 69 6e 74 65 72 76 61 6c 26 26 73 2e 72 69 64 65 26 26 28 69 2e 70 61 75 73 65 28 29 2c 69 2e 63 79 63 6c 65 28 29 29 7d 73 74 61 74 69 63 20 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 74 Data Ascii: g"==typeof e?e:s.slide;if("number"==typeof e)i.to(e);else if("string"==typeof n){if(void 0===i[n])throw new TypeError(`No method named "${n}"`);i[n]()}else s.interval&&s.ride&&(i.pause(),i.cycle())}static jQueryInterface(t){return this.each((function(){at
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 79 70 65 6f 66 20 74 3f 74 3a 7b 7d 7d 2c 68 28 47 74 2c 74 2c 74 65 29 2c 74 7d 5f 73 68 6f 77 45 6c 65 6d 65 6e 74 28 74 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 5f 69 73 41 6e 69 6d 61 74 65 64 28 29 2c 69 3d 59 2e 66 69 6e 64 4f 6e 65 28 22 2e 6d 6f 64 61 6c 2d 62 6f 64 79 22 2c 74 68 69 73 2e 5f 64 69 61 6c 6f 67 29 3b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d Data Ascii: ypeof t?t:{}},h(Gt,t,te),t}_showElement(t){const e=this._isAnimated(),i=Y.findOne(".modal-body",this._dialog);this._element.parentNode&&this._element.parentNode.nodeType===Node.ELEMENT_NODE\|\|document.body.append(this._element),this._element.style.display=
2024-03-14 00:57:27 UTC	10067	IN	Data Raw: 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 44 65 66 61 75 6c 74 5b 65 5d 21 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 5b 65 5d 26 26 28 74 5b 65 5d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 5b 65 5d 29 3b 72 65 74 75 72 6e 20 74 7d 5f 63 6c 65 61 6e 54 69 70 43 6c 61 73 73 28 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 67 65 74 54 69 70 45 6c 65 6d 65 6e 74 28 29 2c 65 3d 6e 65 77 20 52 65 67 45 78 70 28 60 28 5e 7c 5c 5c 73 29 24 7b 74 68 69 73 2e 5f 67 65 74 42 61 73 69 63 43 6c 61 73 73 50 72 65 66 69 78 28 29 7d 5c 5c 53 2b 60 2c 22 67 22 29 2c 69 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 2e 6d 61 74 63 68 28 65 29 3b 6e 75 6c 6c 21 3d 3d 69 26 26 69 2e 6c 65 6e 67 74 68 3e 30 26 26 69 2e 6d 61 70 28 28 74 3d 3e 74 Data Ascii: this.constructor.Default[e]!==this._config[e]&&(t[e]=this._config[e]);return t}_cleanTipClass(){const t=this.getTipElement(),e=new RegExp(`(^\|\\s)${this._getBasicClassPrefix()}\\S+`,"g"),i=t.getAttribute("class").match(e);null!==i&&i.length>0&&i.map((t=>t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50104	18.164.116.52	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	2221	OUT	GET /content/dam/mtb-web/images/mtb_logo_white.svg HTTP/1.1 Host: www.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:27 UTC	598	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=iso-8859-1 Content-Length: 274 Connection: close Cache-Control: no-cache="set-cookie" Date: Wed, 13 Mar 2024 00:57:34 GMT Location: https://www3.mtb.com/content/dam/mtb-web/images/mtb_logo_white.svg Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: SAMEORIGIN X-Cache: Hit from cloudfront Via: 1.1 c70c0d114d0fcf32b9941c29c00266de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: NThLLE44sDjj7mDAlugiIpaCQ6zvYL3uZ9na2eBgcDjmE7IQeA5UwQ== Age: 86393
2024-03-14 00:57:27 UTC	274	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 33 2e 6d 74 62 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 64 61 6d 2f 6d 74 62 2d 77 65 62 2f 69 6d 61 67 65 73 2f 6d 74 62 5f 6c 6f 67 6f 5f 77 68 69 74 65 2e 73 76 67 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www3.mtb.com/content/dam/mtb-web/images/mtb_logo_white.svg">here</a>.<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50103	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	2228	OUT	GET /etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap-components.js HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:27 UTC	828	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 20043 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Tue, 12 Mar 2024 20:17:55 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600, public Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "4e4b-6137c5a78c2c0" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 baec235d174153a8f2e92ea724643824.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: q4gCbLOvHfV08XJUbXIqlxQbABFOko78VBgnf2rTiNdQ5-Bm9oiLSg== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:27 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 73 6f 72 74 4f 62 6a 65 63 74 41 72 72 61 79 42 79 4b 65 79 28 61 29 7b 0a 09 69 66 28 61 29 7b 0a 09 09 6b 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 5b 30 5d 29 5b 30 5d 3b 0a 09 09 76 61 72 20 70 20 3d 20 70 72 6f 6d 70 74 28 22 53 6f 72 74 20 62 79 20 6f 6e 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 3a 20 5c 72 5c 6e 22 20 2b 20 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 5b 30 5d 29 2e 6a 6f 69 6e 28 22 20 7c 20 22 29 29 2c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 5b 30 5d 29 5b 30 5d 29 3b 0a 09 09 69 66 28 70 29 7b 0a 09 09 20 20 20 20 6b 20 3d 20 70 2e 74 72 69 6d 28 29 3b 0a 09 09 20 20 20 20 72 65 74 75 72 6e 20 61 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: function sortObjectArrayByKey(a){if(a){k = Object.keys(a[0])[0];var p = prompt("Sort by on of the following: \r\n" + (Object.keys(a[0]).join(" \| ")),Object.keys(a[0])[0]);if(p){ k = p.trim(); return a.sort(function(a,b) {
2024-03-14 00:57:27 UTC	3659	IN	Data Raw: 65 65 64 62 75 6d 62 4c 69 6e 6b 45 6c 65 6d 65 6e 74 20 3d 20 63 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 20 63 61 74 63 68 28 65 72 72 29 7b 20 73 70 65 65 64 62 75 6d 62 4c 69 6e 6b 45 6c 65 6d 65 6e 74 20 3d 20 75 6e 64 65 66 69 6e 65 64 7d 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 53 70 65 65 64 62 75 6d 70 43 6f 6e 74 69 6e 75 65 28 29 7b 0a 20 20 20 20 69 66 28 73 70 65 65 64 62 75 6d 62 4c 69 6e 6b 45 6c 65 6d 65 6e 74 29 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 69 6e 6b 44 65 73 74 69 6e 61 74 69 6f 6e 20 3d 20 73 70 65 65 64 62 75 6d 62 4c 69 6e 6b 45 6c 65 6d 65 6e Data Ascii: eedbumbLinkElement = c.currentTarget; } ); }); } catch(err){ speedbumbLinkElement = undefined}}function handleSpeedbumpContinue(){ if(speedbumbLinkElement){ var linkDestination = speedbumbLinkElemen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50106	34.66.3.160	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	478	OUT	OPTIONS /mtb/hash-check HTTP/1.1 Host: rl.quantummetric.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://m.mtb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:27 UTC	412	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:27 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: * Access-Control-Allow-Origin: https://m.mtb.com Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50107	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	721	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377846067&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=1325&N=4 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 124 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:27 UTC	124	OUT	Data Raw: 78 01 1d 8c 41 0a c2 30 14 44 ef 32 eb d0 a4 36 90 f0 0f a1 42 dd 89 1b 63 b0 0b 93 48 7e 0a 85 d2 bb fb e3 6e 66 78 6f 76 6c a0 fb 8e 04 c2 f5 32 df a0 b0 4a 5c 5a fb 32 69 5d 9e 3c 70 7c d7 18 73 28 9f 35 e5 21 94 a4 53 c9 c2 05 d0 c9 18 05 06 8d 7e f2 0a 33 48 6a 05 59 85 d6 57 37 9a c9 39 6f 7b 97 d3 6d a9 a2 b1 c4 bf f7 12 c2 7a db c5 73 bf 38 1e c7 0f 58 cd 26 5b Data Ascii: xA0D26BcH~nfxovl2J\Z2i]<p\|s(5!S~3HjYW79o{mzs8X&[
2024-03-14 00:57:27 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:27 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50109	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	716	OUT	POST /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377846062&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1157&N=5&P=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 168 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://m.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:27 UTC	168	OUT	Data Raw: 78 01 65 8f bb 0a c2 40 10 45 7f 65 98 c2 6a 84 6c 1e 6e d8 4e c1 52 2d 92 4e 2c 24 ae b2 b8 4e 44 36 6a 88 f9 77 27 b1 b0 48 77 e1 9c 3b 97 d9 77 e8 d0 c4 4a 11 9e d1 44 84 4f 34 b8 e6 47 ed 3d 38 86 1d 7b c7 16 56 47 be 3a be c0 1c 0a eb 6d 15 60 59 55 75 c3 01 ca f6 6e e1 03 9b 59 39 3a 48 18 a4 5f db 21 48 52 5a 45 89 d6 79 9a 64 71 46 78 92 25 c2 62 8b 26 eb a9 1b d5 5b 10 55 36 3b 6c 04 e6 a9 ee 47 4d 4d b9 48 7f 1e 4d f9 6b e0 59 42 f8 46 c3 8d f7 84 ad 3c f4 3b 17 ab 45 7f f8 02 4a 40 3f ff Data Ascii: xe@EejlnNR-N,$ND6jw'Hw;wJDO4G=8{VG:m`YUunY9:H_!HRZEydqFx%b&[U6;lGMMHMkYBF<;EJ@?
2024-03-14 00:57:27 UTC	936	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:27 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://m.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50113	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	2222	OUT	GET /content/dam/mtb-web/images/mtb_logo_white.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:27 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3639 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 12 Oct 2022 17:21:17 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "e37-5ead99ed33d40" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 06d42d2d80190e168b9494192458b51a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 6e5XZk4d1VZH7TFrj4oDcBJFjPHsccVDZj4pZ9rGG9v67AsEbce-VQ== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:27 UTC	3198	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 30 2e 39 20 34 35 2e 35 34 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 34 2e 39 2c 34 2e 33 34 48 30 76 2d 32 63 2e 33 2c 30 2c 2e 36 2d 2e 31 2e 39 2d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 240.9 45.54"><defs><style>.cls-1{fill:#fff;fill-rule:evenodd;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M4.9,4.34H0v-2c.3,0,.6-.1.9-
2024-03-14 00:57:27 UTC	441	IN	Data Raw: 2e 31 2d 37 61 31 37 2e 37 35 2c 31 37 2e 37 35 2c 30 2c 30 2c 30 2d 37 2e 36 2d 2e 36 63 2d 34 2e 35 2e 35 2d 38 2e 33 2c 33 2e 34 2d 39 2e 33 2c 37 2e 34 61 31 31 2e 32 2c 31 31 2e 32 2c 30 2c 30 2c 30 2c 32 2e 36 2c 31 30 2e 36 2c 37 2c 37 2c 30 2c 30 2c 31 2c 2e 38 2c 31 41 36 31 2e 30 36 2c 36 31 2e 30 36 2c 30 2c 30 2c 30 2c 35 33 2e 39 2c 32 37 63 2d 35 2e 35 2c 33 2e 38 2d 35 2c 31 32 2e 32 2e 31 2c 31 35 2e 36 2c 33 2e 35 2c 32 2e 33 2c 37 2e 34 2c 32 2e 39 2c 31 31 2e 34 2c 32 2e 39 61 32 32 2e 32 31 2c 32 32 2e 32 31 2c 30 2c 30 2c 30 2c 31 32 2d 33 2e 36 2c 31 2e 32 36 2c 31 2e 32 36 2c 30 2c 30 2c 31 2c 31 2e 32 2e 31 2c 31 30 2e 36 39 2c 31 30 2e 36 39 2c 30 2c 30 2c 30 2c 37 2e 38 2c 32 2e 39 68 32 33 2e 39 61 35 2e 37 2c 35 2e 37 2c 30 2c Data Ascii: .1-7a17.75,17.75,0,0,0-7.6-.6c-4.5.5-8.3,3.4-9.3,7.4a11.2,11.2,0,0,0,2.6,10.6,7,7,0,0,1,.8,1A61.06,61.06,0,0,0,53.9,27c-5.5,3.8-5,12.2.1,15.6,3.5,2.3,7.4,2.9,11.4,2.9a22.21,22.21,0,0,0,12-3.6,1.26,1.26,0,0,1,1.2.1,10.69,10.69,0,0,0,7.8,2.9h23.9a5.7,5.7,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50108	52.141.217.134	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	493	OUT	POST /client/v3.1/web/wup?cid=mufasa HTTP/1.1 Host: wup-5d65a0ab.us.v2.we-stats.com Connection: keep-alive Content-Length: 1538 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:27 UTC	1538	OUT	Data Raw: 7b 22 64 73 22 3a 22 6a 73 22 2c 22 63 64 73 6e 75 6d 22 3a 22 31 37 31 30 33 37 37 38 32 36 33 36 38 2d 73 6a 6e 30 30 30 30 33 30 37 2d 31 34 39 66 30 39 37 64 2d 38 38 32 31 2d 34 33 31 31 2d 38 36 63 36 2d 31 32 63 62 61 36 36 38 61 36 34 32 22 2c 22 63 73 69 64 22 3a 6e 75 6c 6c 2c 22 70 73 69 64 22 3a 6e 75 6c 6c 2c 22 6d 75 69 64 22 3a 22 31 37 31 30 33 37 37 38 32 34 34 39 39 2d 32 31 33 42 43 38 45 30 2d 44 36 41 34 2d 34 46 46 35 2d 38 41 35 33 2d 43 46 46 31 44 45 43 44 35 42 30 35 22 2c 22 63 6f 6e 74 65 78 74 5f 6e 61 6d 65 22 3a 22 63 64 5f 61 75 74 6f 22 2c 22 72 65 71 75 65 73 74 49 64 22 3a 34 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 38 6b 74 78 48 38 62 59 4d 43 55 67 4f 6d 5f 5f 42 6d 35 6e 4a 43 47 42 36 7a 74 70 64 33 5a 45 46 Data Ascii: {"ds":"js","cdsnum":"1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642","csid":null,"psid":null,"muid":"1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05","context_name":"cd_auto","requestId":4,"sts":"gAAAAABl8ktxH8bYMCUgOm__Bm5nJCGB6ztpd3ZEF
2024-03-14 00:57:27 UTC	317	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 626 Connection: close date: Thu, 14 Mar 2024 00:57:26 GMT server: uvicorn access-control-allow-origin: * access-control-allow-credentials: true cache-control: no-cache, no-store pragma: no-cache tail-id: 4007332c-e127-4611-993a-e67b9b1f91f9
2024-03-14 00:57:27 UTC	626	IN	Data Raw: 7b 22 73 74 64 22 3a 22 67 41 41 41 41 41 42 6c 38 6b 74 33 4d 61 45 59 6e 65 49 5f 54 43 33 78 50 44 4f 71 45 51 35 36 45 6c 70 42 44 56 64 32 49 65 66 61 50 43 59 49 46 4b 4c 64 4e 4a 38 4e 45 45 34 68 52 64 49 76 41 55 64 6b 6e 58 52 2d 2d 70 65 2d 4f 37 4b 4d 76 41 71 67 4e 47 30 43 44 49 45 43 4d 6c 74 72 74 56 71 78 5f 46 57 5a 46 38 38 79 64 57 4f 77 6c 75 62 79 59 31 47 73 30 73 51 36 6b 55 47 43 75 75 57 5a 6a 4b 6a 37 5a 79 61 6c 39 43 76 54 48 71 46 70 69 70 67 61 44 47 53 66 38 55 41 5f 72 59 41 65 78 75 2d 30 4b 79 4c 58 4f 45 64 55 6e 4f 5a 6b 54 49 66 74 70 32 79 33 4f 77 41 62 6a 53 75 71 7a 50 35 57 68 56 2d 57 2d 4b 2d 76 48 31 78 5a 6c 50 57 35 2d 79 42 2d 57 50 59 56 5a 77 3d 3d 22 2c 22 73 74 73 22 3a 22 67 41 41 41 41 41 42 6c 38 6b Data Ascii: {"std":"gAAAAABl8kt3MaEYneI_TC3xPDOqEQ56ElpBDVd2IefaPCYIFKLdNJ8NEE4hRdIvAUdknXR--pe-O7KMvAqgNG0CDIECMltrtVqx_FWZF88ydWOwlubyY1Gs0sQ6kUGCuuWZjKj7Zyal9CvTHqFpipgaDGSf8UA_rYAexu-0KyLXOEdUnOZkTIftp2y3OwAbjSuqzP5WhV-W-K-vH1xZlPW5-yB-WPYVZw==","sts":"gAAAAABl8k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50114	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	2252	OUT	GET /content/dam/mtb-web/images/ehl.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:27 UTC	792	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8289 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 17 Feb 2021 16:35:20 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "2061-5bb8ace070200" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 4a1ea8b67dc2325b2469ed51d3e186ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: WjJbLhTQFK23jkoIgGHobpglY0VjNexgr0ViJvSEIG4dvTO0vAoEJg== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:27 UTC	8289	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 af 00 00 01 f7 08 06 00 00 00 95 54 b6 9a 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ed dd 41 6e 1c 57 96 2e e0 88 82 e7 d5 3b 10 77 20 7a 05 66 ad c0 f4 0a 8a b5 02 4b 2b b0 b4 02 51 2b 10 3d eb 99 a8 15 88 1c f6 e0 41 d4 f0 cd c4 d9 9b 3d 13 e8 49 03 0d 44 e3 da 27 dd 29 59 a4 32 99 91 91 e7 44 7c 1f 50 b3 2a 15 95 49 31 7f 9e b8 f7 fc fd 30 0c 1d 00 e3 eb fb fe df 86 61 f8 cd 4b 0b 30 9e bf 79 2d 01 c6 d5 42 6b df f7 97 5d d7 fd ff be ef 5f 78 79 01 c6 63 f2 0a 30 a2 be ef 4f bb ae bb e8 ba ee ef 6b 7f ea 75 d7 75 67 c3 30 7c f2 5a 03 ec c6 e4 15 60 04 31 6d 3d ef ba ee ed 17 c1 b5 f9 a1 eb ba 9b be ef cf bc d6 00 bb 31 79 05 d8 51 df f7 27 31 6d Data Ascii: PNGIHDRTpHYs.#.#x?v IDATxAnW.;w zfK+Q+=A=ID')Y2D\|P*I10aK0y-Bk]_xyc0Okuug0\|Z`1m=1yQ'1m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50110	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	508	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377844959&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=2105&N=18&P=5 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:27 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:27 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50118	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	2277	OUT	GET /content/dam/mtb-web/images/woman-laptop-hero-pink-shirt.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	767	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 137918 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "21abe-5be60c5c96000" Last-Modified: Thu, 25 Mar 2021 18:42:08 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish X-Cache: Miss from cloudfront Via: 1.1 ef73a156d5c211fdbb7e4231f2a0edca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: eTE7C-KGFG0KLST9IveKKQ02CQQaDJJ4bBzmBaoFJ2rpprvynyMUpg== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	15617	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xm
2024-03-14 00:57:28 UTC	16384	IN	Data Raw: a8 c2 9d da d5 d3 53 a4 4a a7 72 4e 5a 35 a7 56 6d 8a af 2b 75 75 4b 42 eb 16 23 e9 b4 b5 5a 74 63 51 ae 50 7f 22 e8 88 c5 d2 a8 23 19 53 66 55 63 46 d5 77 af 52 a2 54 5e 95 db a0 d4 c4 f6 75 26 ae 36 63 c1 bb 89 2d de 8d f8 19 ea b7 c4 7a 2e 3a 1b a5 25 da a9 ea 5e 5b bd 4f 3f 4f 57 11 da c4 70 ed df 7d 97 5f 03 9d 76 91 9d e8 42 70 69 69 4f b2 a4 d5 c5 2c 8a c6 dd 1b ab 4f 4a 12 2e a8 dc 77 17 4f 34 6f 56 3a 3c 36 4a b9 6a 56 a6 fd 51 75 46 3a 8d 39 5e f7 c5 55 c6 ca 8f 83 b7 37 d5 d3 54 7a bf 9e fc 3c 1f d5 cf e5 e5 a9 e9 6d 9e 87 93 18 84 41 46 51 49 51 85 6d 8b 6d 79 b2 0b 38 d6 ab 72 31 fb 91 35 67 2f b0 fb 33 2a de 16 05 a8 5a b6 9e 4e ab ea 4b 65 16 8e bc 27 7f 2f a5 fb 6f 13 1e d5 b7 3e c7 1b f2 82 bb f5 5e ca 75 75 8c 97 83 4c ef 1c 6c 7a ae fb Data Ascii: SJrNZ5Vm+uuKB#ZtcQP"#SfUcFwRT^u&6c-z.:%^[O?OWp}_vBpiiO,OJ.wO4oV:<6JjVQuF:9^U7Tz<mAFQIQmmy8r15g/3*ZNKe'/o>^uuLlz
2024-03-14 00:57:28 UTC	16384	IN	Data Raw: aa b4 bc c0 37 45 55 b1 44 c5 a6 9b ea cc d5 8c db ff 00 81 1a 63 f1 08 89 75 2a 56 ab 92 fb 8d c7 3a a5 7d b7 a2 d8 e9 1c eb 99 91 15 4f 36 f7 3a c7 3e a2 9d c8 ea b5 35 2b 8d 8f 43 ec eb 4a f6 4c e1 3b 91 b6 a1 ea 4e 6f f0 47 5e 6b 3d 47 d5 bd bf 6f 1a 31 93 b3 1f ab 37 1f 44 d9 df 97 1b 1e 82 f7 b1 71 73 f0 16 4e 7c 7b a7 2f c8 96 8d b6 6b c6 54 d7 93 e6 3f 6c f3 f0 f1 ee 64 59 8a f4 fa 97 6e 92 49 1e 7e bd 6e fc f5 ae 1e 1f b9 f9 4c 39 46 cd 8c af c9 a4 ad 5c f1 5e 66 27 58 e9 63 ea de c9 e6 33 79 6b 2a 19 96 e3 da a8 9c d7 99 e8 e2 ec 79 bb 99 5e d1 60 ab b1 93 92 54 85 54 13 5b a3 6e 6c b0 30 55 d4 ae 37 d9 35 a3 5e 29 04 d5 bb 76 ae 46 f4 a2 df 6a fe 57 d1 95 75 ba d6 36 b2 ef 5a d7 6e 81 16 d5 a8 3a 46 9a 24 06 a8 da fa 77 fd 0d f6 3f c4 0b 11 8d Data Ascii: 7EUDcuV:}O6:>5+CJL;NoG^k=Go17DqsN\|{/kT?ldYnI~nL9F\^f'Xc3yky^`TT[nl0U75^)vFjWu6Zn:F$w?
2024-03-14 00:57:28 UTC	16384	IN	Data Raw: d7 da 78 8e 42 1c 87 19 8f 97 1d ee c1 77 af 09 2d 24 be d3 db c5 d9 af 0f 73 2a e7 43 6c b0 90 10 96 a0 64 f6 28 c3 76 44 64 90 12 da 41 5a a7 34 11 af ba a0 6c 8d 4a a9 22 3e 8a 79 9d c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 ad c0 00 00 00 20 00 08 00 00 08 0a 86 06 2c 0c 40 80 00 40 00 20 00 10 c0 80 00 43 03 10 20 00 10 00 0c 64 06 99 6e 04 Data Ascii: xBw-$s*Cld(vDdAZ4lJ">y ,@@ C dn
2024-03-14 00:57:28 UTC	7831	IN	Data Raw: 08 94 b4 a8 57 27 3e ed 74 fb 0c d5 8e 54 a5 59 79 99 b5 a7 4b 8a 5e b4 25 4a ec de ac 72 eb d6 89 af b0 d3 31 fa 07 8d bc b2 38 dc 4b e9 d5 5c b3 6e 5f 6c 53 3e 8f 1f 51 f3 bb 99 6a dc 63 a5 4d b0 92 00 41 a2 ab 5c 9a 08 c6 ba 54 0f a6 1e 57 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 2b 70 00 00 00 60 40 00 00 02 20 28 00 08 00 10 0a 01 00 02 0c Data Ascii: W'>tTYyK^%Jr18K\n_lS>QjcMA\TWp+p`@ (
2024-03-14 00:57:28 UTC	16384	IN	Data Raw: 2a 81 95 56 c1 1f 49 3c ae e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 56 e0 00 00 00 04 00 00 00 08 00 00 08 00 10 0a 01 01 00 00 00 86 06 2c a3 5c 90 1a 2e 22 0a b7 15 18 56 db 32 03 70 0a 80 02 18 1a ae 6c 05 3b bb 94 55 ba 16 2a 5c 0a e7 e6 fe 46 41 e6 72 7f d4 66 45 4b af 40 28 dd 08 ab 70 0d 71 d2 44 a2 cd b2 2a fe 3e 85 1d 2b 1d 0b 19 74 71 Data Ascii: VI<V,\."V2pl;U\FArfEK@(pqD*>+tq
2024-03-14 00:57:28 UTC	969	IN	Data Raw: 45 de 3f 2a 56 b2 2d dd 83 a4 ad c9 49 7c 9d 46 e5 49 1f 74 c4 bf 0b f8 d6 6f c1 d6 37 61 19 a7 f1 55 3d f2 eb c3 d4 ca dc f6 65 65 87 50 3e 9e 79 5d c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 ad c0 00 00 00 08 00 00 00 00 88 00 14 02 00 04 00 05 0a 20 00 40 00 00 00 43 03 16 06 a9 a0 2b 5d 40 55 5a 4c 8a b5 07 54 02 7b 01 52 f8 14 a7 d4 ab 15 2e Data Ascii: E?*V-I\|FIto7aU=eeP>y] @C+]@UZLT{R.
2024-03-14 00:57:28 UTC	16384	IN	Data Raw: 36 2b 5c a8 4d d3 ce 84 6d 95 ae af af 80 46 f8 3d 74 e8 11 9d dd 8a cb 95 9d 2d 1b f3 33 5d 79 72 2d 71 d7 73 f2 fb 55 61 8f 5f eb 5f 6b d3 04 b7 66 6c d7 6f 2f 18 ec 4f 9a e2 78 bc 4b 38 bc 73 8d e5 2a a8 4a aa ae 6b 49 39 2d ea 3c a4 73 fd 7d 75 76 b8 7e f1 9f 27 1c 68 72 b8 72 9c 65 07 fd 5b 49 e8 d2 d7 e1 b1 9f 65 b9 b1 bf 4e 6e 56 bc 6c c8 e7 e0 c3 22 2f 59 45 3e 9e 02 5d 8d 66 5c 71 b3 bf 3b 7f 23 8f 4e fc b9 b7 56 e8 e4 eb 1c ac e8 27 16 24 6a 57 d5 bf 64 f9 df d5 f1 97 78 9b b2 ad ee 3e 55 b7 5e b6 a7 aa fb 1d 51 ea fe 7e be 31 f3 7f b7 d7 97 cb fc be 9b e2 7a 1e 16 12 0a d4 e8 15 84 94 62 bb a5 a2 03 91 ca 72 91 b7 06 93 a1 3a ae bc 71 af 15 ca 72 53 b9 37 ea d0 f2 fb 3b 7b bd 5e bc 79 6e 57 94 fa 5f d3 87 aa e4 b4 8c 56 f5 3c dd f4 f6 71 c3 3e Data Ascii: 6+\MmF=t-3]yr-qsUa__kflo/OxK8s*JkI9-<s}uv~'hrre[IeNnVl"/YE>]f\q;#NV'$jWdx>U^Q~1zbr:qrS7;{^ynW_V<q>
2024-03-14 00:57:28 UTC	16384	IN	Data Raw: 12 0a 16 dc ba b0 5a ab 97 0a 4b bb 6a 84 8a b4 22 8f 4f ef 0c b2 5a ad 42 b1 7e 7b 05 6c 4c aa ce 2c 23 67 72 a5 3a 04 7e dd 3d 2f 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 95 b8 00 00 00 00 08 80 a0 00 80 00 00 00 00 00 04 00 00 00 00 00 05 00 00 00 80 00 43 03 16 06 b9 22 a2 b5 e8 d5 32 0e 5e 5c 6b 6e 48 34 e2 e4 bf 4d 4a b1 cf b8 46 dc fc bf Data Ascii: ZKj"OZB~{lL,#gr:~=/C"2^\knH4MJF
2024-03-14 00:57:28 UTC	15197	IN	Data Raw: b3 7c e6 45 25 95 76 36 93 e8 93 93 35 3d 5d 38 df e8 e6 3d 67 17 fb 2b c5 5a ed 96 54 e7 79 f5 4d d1 7d 88 df ff 00 5f fc d7 3e bf af fc 47 af c0 f6 0f b7 70 e1 1f a7 89 6d 35 d7 b5 36 6e 7a 79 8e 77 df d5 fc af df f6 e7 13 7a cb b7 3b 30 71 da 8d 23 57 d7 2a 4f 67 51 e5 b9 3f da 5f 6f e6 55 c2 d7 d2 94 ba c3 43 8d fe 79 f8 77 e7 fa ba 8f 25 cb fe c6 5f 83 72 c3 c8 aa e9 19 af e2 8e 5d 7a 7a 77 e7 fa b9 bf 6f 29 9f fb 51 ee 5c 7a f6 d9 57 12 ff 00 2b 33 e3 d4 fc 3a 4f 6f 17 f2 e3 5e f6 27 b9 6d ba 3c 1b 8f e0 aa 67 e7 fc 2d ea 7f 96 0b d8 be e8 9a 6d 60 dc a2 f1 54 2e df f0 4b 3f cb 9b 99 c2 72 78 ad c2 fd 89 db 75 f5 77 26 4f 36 e4 52 78 b7 56 8f 43 5a 96 0e 12 8a 63 59 f1 6b 7d de 65 4c 4c 26 f5 ab 29 63 62 bc 90 67 13 f5 48 8c 7b d0 1a dd c7 5d 40 97 Data Ascii: \|E%v65=]8=g+ZTyM}_>Gpm56nzywz;0q#W*OgQ?_oUCyw%_r]zzwo)Q\zW+3:Oo^'m<g-m`T.K?rxuw&O6RxVCZcYk}eLL&)cbgH{]@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50111	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	537	OUT	GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377845112&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:27 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:27 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50116	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	2311	OUT	GET /content/dam/mtb-web/wcm-asset/documents/html/homepage/images/assets/icon-phone-dark-green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1003 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 04 May 2022 18:19:30 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "3eb-5de33aa92d080" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 baec235d174153a8f2e92ea724643824.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: TRRP97uvjCvCkzsfd-pSpaUapQclBnc3J6YbE0P0j-9LfZjP0sR6Vg== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	1003	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50112	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	523	OUT	GET /?T=B&u=https%3A%2F%2Fonlinebanking.mtb.com%2FLogin%2FLoginHelp&t=1710377833835&v=1710377844947&H=65d5595fb9106accfeb8cecf&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=847&N=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:27 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:27 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50115	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	2291	OUT	GET /content/dam/mtb-web/images/online-and-mobile-services/icon-move-money.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	789	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1616 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "650-5c06c76a3cac0" Last-Modified: Tue, 20 Apr 2021 19:29:23 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f458ab1245bb4f257969c1da8e708f88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: QR5F4blivjqgLpRHq0qjySqcOAkHPRaqd9ZLVFnLT-zyWi8Fpa5rcA== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	1616	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 36 34 70 78 22 20 68 65 69 67 68 74 3d 22 36 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 69 63 6f 6e 5f 6d 6f 76 65 20 6d 6f 6e 65 79 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 5f 6d 6f 76 65 2d 6d 6f 6e 65 79 22 20 73 74 72 6f 6b 65 3d 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="64px" height="64px" viewBox="0 0 64 64" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>icon_move money</title> <g id="icon_move-money" stroke="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50117	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	2286	OUT	GET /content/dam/mtb-web/images/online-and-mobile-services/icon_coins.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	789	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2085 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "825-5c06c76854640" Last-Modified: Tue, 20 Apr 2021 19:29:21 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 d4b67fda8355378cec4afc079701f8e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: veoeysVlaqw9cwNZDu4OpdFuaczoahtGCBT7yFMIuDDgygC1Hg6q5w== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	2085	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 36 34 70 78 22 20 68 65 69 67 68 74 3d 22 36 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 69 63 6f 6e 5f 63 6f 69 6e 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 5f 63 6f 69 6e 73 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="64px" height="64px" viewBox="0 0 64 64" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>icon_coins</title> <g id="icon_coins" stroke="none" stro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50105	18.164.116.52	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:27 UTC	2221	OUT	GET /content/dam/mtb-web/images/mtb_logo_green.svg HTTP/1.1 Host: www.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	598	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=iso-8859-1 Content-Length: 274 Connection: close Cache-Control: no-cache="set-cookie" Date: Wed, 13 Mar 2024 13:17:16 GMT Location: https://www3.mtb.com/content/dam/mtb-web/images/mtb_logo_green.svg Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: SAMEORIGIN X-Cache: Hit from cloudfront Via: 1.1 ae4e162eb9c0a598fcb6475e70daa530.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: iOpePBzYWtPXrVUmpBcF2k-vAEuiLax8QnhsIEt69dNl2lREeYfvoA== Age: 42012

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50120	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:28 UTC	2288	OUT	GET /content/dam/mtb-web/images/online-and-mobile-services/icon_devices.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	789	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2392 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "958-5c06c76948880" Last-Modified: Tue, 20 Apr 2021 19:29:22 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ef24c2f85065aa2c39cf270c915f3398.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: Uo8yatcQ2ZL_pd4up6ERwTdTN5mWHleitH_k2JbWJwVbj6LpwIASeA== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	2392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 36 34 70 78 22 20 68 65 69 67 68 74 3d 22 36 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 69 63 6f 6e 5f 64 65 76 69 63 65 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 5f 64 65 76 69 63 65 73 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="64px" height="64px" viewBox="0 0 64 64" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>icon_devices</title> <g id="icon_devices" stroke="none"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50119	34.66.3.160	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:28 UTC	574	OUT	POST /mtb/hash-check HTTP/1.1 Host: rl.quantummetric.com Connection: keep-alive Content-Length: 46 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://m.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:28 UTC	46	OUT	Data Raw: 5b 22 72 45 57 38 65 4b 79 42 75 53 34 3d 22 2c 22 70 49 53 33 6a 68 51 56 4c 6b 55 3d 22 2c 22 66 56 65 45 74 75 73 32 71 43 34 3d 22 5d Data Ascii: ["rEW8eKyBuS4=","pIS3jhQVLkU=","fVeEtus2qC4="]
2024-03-14 00:57:28 UTC	334	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:28 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://m.mtb.com Vary: Origin Strict-Transport-Security: max-age=15724800; includeSubDomains Access-Control-Allow-Methods: *
2024-03-14 00:57:28 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50122	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:28 UTC	2272	OUT	GET /content/dam/mtb-web/images/svg/icon_location_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	794	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 788 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:03:05 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "314-5da2fd0cd8040" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 baec235d174153a8f2e92ea724643824.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: WxwwBoDXfBTqmmek2hUWlXSAs6ws3GNI2bpjJWlU33FMm9BYxD2clw== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	788	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50123	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:28 UTC	2201	OUT	GET /content/dam/mtb-web/scripts/fe_utilities.js HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	805	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9301 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 13 Mar 2024 14:53:29 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "2455-6138bf00c8c40" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 fc527c9e0a8a22ce61e1580f7382bcf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: S9YZ3wTBLBB8VfYZuSFGDp_K000X3h2Oha7gBKsA3u-SpCZKhDZckw== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	9301	IN	Data Raw: 76 61 72 20 69 6e 41 75 74 68 6f 72 45 6e 76 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 20 72 65 74 75 72 6e 20 20 2f 5e 61 78 70 5c 2d 61 75 74 68 6f 72 5c 2d 5b 61 2d 7a 5d 7b 32 2c 7d 5c 2e 6d 74 62 5c 2e 63 6f 6d 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 20 7d 3b 0d 0a 76 61 72 20 69 6e 41 75 74 68 6f 72 45 6e 76 45 64 69 74 69 6e 67 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 20 72 65 74 75 72 6e 20 28 69 6e 41 75 74 68 6f 72 45 6e 76 20 26 26 20 2f 5e 5c 2f 65 64 69 74 6f 72 2e 68 74 6d 6c 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 29 20 7d 3b 0d 0a 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 6a 73 6f 6e 41 72 72 61 79 51 75 65 72 79 28 71 2c 66 2c 77 Data Ascii: var inAuthorEnv = function(){ return /^axp\-author\-[a-z]{2,}\.mtb\.com/.test(window.location.hostname) };var inAuthorEnvEditing = function(){ return (inAuthorEnv && /^\/editor.html/.test(window.location.pathname)) };function jsonArrayQuery(q,f,w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50124	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:28 UTC	2209	OUT	GET /content/dam/mtb-web/scripts/tealiumComponentCode.js HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	804	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3321 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 01 Feb 2024 19:30:25 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "cf9-6105706f23640" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3a80316ee74668c7049eb31054a07168.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 5EpA0LRst1VYHyBahxoOhOHTyw0AM-Z0XJDGc2HhzlgTiQOqgBkC2g== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	3321	IN	Data Raw: 2f 2f 53 54 41 52 54 20 46 4f 52 4d 20 43 4f 44 45 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 65 61 6c 69 75 6d 57 69 74 68 46 6f 72 6d 53 75 63 63 65 73 73 28 29 7b 0d 0a 09 74 72 79 7b 0d 0a 09 09 75 74 61 67 2e 6c 69 6e 6b 28 7b 0d 0a 09 09 09 74 65 61 6c 69 75 6d 5f 65 76 65 6e 74 3a 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 74 65 61 6c 69 75 6d 45 76 65 6e 74 22 29 2e 76 61 6c 75 65 2c 0d 0a 09 09 09 63 75 73 74 6f 6d 4c 69 6e 6b 4e 61 6d 65 3a 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 63 75 73 74 6f 6d 4c 69 6e 6b 4e 61 6d 65 22 29 2e 76 61 6c 75 65 2c 0d 0a 09 09 09 63 6f 6d 70 6f 6e 65 6e 74 4e 61 6d 65 3a 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 Data Ascii: //START FORM CODEfunction tealiumWithFormSuccess(){try{utag.link({tealium_event: document.querySelector("#tealiumEvent").value,customLinkName: document.querySelector("#customLinkName").value,componentName: document.querySelector("#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50121	23.20.189.8	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:28 UTC	1444	OUT	GET /m2/mtb/mbox/json?mbox=target-global-mbox&mboxSession=982bceee196b4711901768c5d35728f4&mboxPC=982bceee196b4711901768c5d35728f4.34_0&mboxPage=83fb3c1c290c4447be6936716aaf9742&mboxRid=fced150c6e93476e9906fecf9771b7df&mboxVersion=1.8.3&mboxCount=1&mboxTime=1710381446412&mboxHost=www3.mtb.com&mboxURL=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&mboxReferrer=&browserHeight=907&browserWidth=1280&browserTimeOffset=60&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_property=f7ba4290-5c00-8608-2ad1-5fc4576548bf&zipCodeCookie=&geoRegionCookie=&entity.categoryId=personal-banking%2Conline-mobile-services&user.categoryId=personal-banking%2Conline-mobile-services&loginClickedCookie=&mbox3rdPartyId= HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:28 UTC	635	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:57:28 GMT content-type: application/json;charset=UTF-8 content-length: 2362 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www3.mtb.com access-control-allow-credentials: true x-request-id: fced150c6e93476e9906fecf9771b7df pragma: no-cache cache-control: no-cache timing-allow-origin: * strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close
2024-03-14 00:57:28 UTC	2362	IN	Data Raw: 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 39 38 32 62 63 65 65 65 31 39 36 62 34 37 31 31 39 30 31 37 36 38 63 35 64 33 35 37 32 38 66 34 22 2c 22 74 6e 74 49 64 22 3a 22 39 38 32 62 63 65 65 65 31 39 36 62 34 37 31 31 39 30 31 37 36 38 63 35 64 33 35 37 32 38 66 34 2e 33 34 5f 30 22 2c 22 6f 66 66 65 72 73 22 3a 5b 7b 22 72 65 73 70 6f 6e 73 65 54 6f 6b 65 6e 73 22 3a 7b 22 65 78 70 65 72 69 65 6e 63 65 2e 69 64 22 3a 22 30 22 2c 22 61 63 74 69 76 69 74 79 2e 6e 61 6d 65 22 3a 22 43 6f 6d 6d 65 72 63 69 61 6c 20 53 63 72 69 70 74 22 2c 22 67 65 6f 2e 63 69 74 79 22 3a 22 6e 65 77 20 79 6f 72 6b 22 2c 22 61 63 74 69 76 69 74 79 2e 69 64 22 3a 22 31 33 37 34 36 30 22 2c 22 67 65 6f 2e 73 74 61 74 65 22 3a 22 6e 65 77 20 79 6f 72 6b 22 2c 22 65 78 70 65 72 Data Ascii: {"sessionId":"982bceee196b4711901768c5d35728f4","tntId":"982bceee196b4711901768c5d35728f4.34_0","offers":[{"responseTokens":{"experience.id":"0","activity.name":"Commercial Script","geo.city":"new york","activity.id":"137460","geo.state":"new york","exper

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50126	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:28 UTC	2327	OUT	GET /etc.clientlibs/mtb-web/clientlibs/clientlib-site/resources/fonts/MTB_Balto/Webfonts/mandtbaltoweb-semilight.woff HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www3.mtb.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www3.mtb.com/etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap-components.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	812	IN	HTTP/1.1 200 OK Content-Type: application/x-font-woff Content-Length: 77343 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 30 Jan 2020 22:52:25 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=86400, public Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:15:02 GMT ETag: "12e1f-59d634f851c40" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 76d4de5b65bdf749a3f97445d1b9f4d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: obUsCiFViROzb2z2nVNwktoK-jjaCaduY9HPFKrHumNMGclikNCsBw== Age: 2546 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	15572	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 2e 1f 00 12 00 00 00 03 37 7c 00 01 00 00 00 01 2c a0 00 00 01 7f 00 00 02 f0 00 00 00 00 00 00 00 00 47 50 4f 53 00 01 00 e4 00 00 27 5a 00 00 b0 62 42 37 bf 50 47 53 55 42 00 01 28 40 00 00 04 5f 00 00 08 32 1d c3 0d fa 4c 54 53 48 00 00 06 a0 00 00 01 29 00 00 02 27 09 14 fa a7 4f 53 2f 32 00 00 02 10 00 00 00 58 00 00 00 60 6a 03 7f c5 63 6d 61 70 00 00 2d 44 00 00 03 fd 00 00 08 ca aa 5a b1 ea 63 76 74 20 00 00 33 68 00 00 00 50 00 00 00 50 10 9c 05 32 66 70 67 6d 00 00 31 44 00 00 01 02 00 00 01 73 06 59 9c 37 67 61 73 70 00 01 00 d4 00 00 00 10 00 00 00 10 00 17 00 09 67 6c 79 66 00 00 38 00 00 00 bd 0a 00 01 ef 34 cf 88 12 ed 68 64 6d 78 00 00 07 cc 00 00 25 75 00 00 5a 98 45 d4 7f 22 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFF.7\|,GPOS'ZbB7PGSUB(@_2LTSH)'OS/2X`jcmap-DZcvt 3hPP2fpgm1DsY7gaspglyf84hdmx%uZE"head
2024-03-14 00:57:28 UTC	16384	IN	Data Raw: 3d c3 83 67 0c 7f 13 5a af 6b 6d 63 d3 75 2b ad 47 79 da 4b 47 a0 f5 72 1d 4a 82 43 ec 87 24 e8 07 2b f4 43 36 f6 c3 a3 92 d8 9a b4 b9 0c 54 31 70 3b 03 cf 10 c0 6d 4c c2 26 25 45 b5 31 05 2b 52 a2 16 18 2f 56 78 e5 02 13 bd 26 65 62 45 8a b1 e2 78 8d 15 27 19 6e 57 c4 3f 83 48 dc 11 2d 1b 1e 90 22 ab d2 e1 00 51 2c 96 e0 0b 57 9b 50 ab 37 90 f7 52 40 3b f1 fc aa ee 99 ab 57 03 95 0f ff d0 3b d4 ba 72 c7 8e 95 ad 43 de d6 4f 87 86 2f 18 30 23 59 17 2f 86 9f 0a 75 1d d8 64 de 74 63 57 28 fc 6b d3 2e c0 a5 1c 18 87 b0 c4 c9 47 10 97 66 2b dc 2b 82 fa 9b f5 47 35 c6 c9 8d 9a c4 b1 1d 63 db b4 87 4d 89 1a ae de f7 20 4f 64 a6 be 35 51 1f c3 e4 7a 16 06 f4 55 28 34 e5 ae 40 22 88 34 e3 18 00 9f 73 2d 62 a4 62 8c 14 b0 45 02 16 3a f5 12 5e 87 78 38 9b 6b 7b 00 Data Ascii: =gZkmcu+GyKGrJC$+C6T1p;mL&%E1+R/Vx&ebEx'nW?H-"Q,WP7R@;W;rCO/0#Y/udtcW(k.Gf++G5cM Od5QzU(4@"4s-bbE:^x8k{
2024-03-14 00:57:28 UTC	16384	IN	Data Raw: 01 f3 03 d0 ce 07 5b 00 b8 84 0e 22 9b d1 21 f2 d5 6a 15 11 e4 63 fd 91 2e d5 9b f5 f0 2d f5 1c 22 20 b5 4b 6a 3f 18 75 66 98 54 ad f5 a4 7f a2 83 eb 00 b8 9d 2e 3b ac 35 e0 5b 1a 48 83 3e 0e 55 c4 38 54 31 9d 6e 83 8c 57 6e 8e bb 79 74 14 fe bc 22 36 5f fe f0 c3 97 5b 2f 7b e4 91 cb 1e 5e 3b af 71 59 52 83 3d 54 5c 3f 7d 7a 7d 49 73 42 43 f2 8a e0 bc b5 62 b5 bc 14 fe 84 5f 7c f4 32 eb e5 8f 3e 0a d7 3f 2a da 96 9f 33 a3 3d a1 aa b6 af db da 3d af 7e 4a 42 5b d7 39 03 c0 ff 4d 11 77 ea 5d 94 47 2d 55 2f 61 6f 0d 64 6a 39 f7 a6 92 57 3f 91 9b 03 a2 61 39 8d dd a6 d3 98 f9 4a e3 8c ed aa e6 43 06 56 32 f0 20 03 d5 0c ec e2 bb 06 18 38 cc a7 d6 31 70 3e 02 23 a4 2b 50 d7 dc 40 a7 c6 79 b1 4f c8 b7 38 c1 25 bf 48 5a 79 ec 2a 98 43 c8 f0 17 24 48 16 69 96 c5 Data Ascii: ["!jc.-" Kj?ufT.;5[H>U8T1nWnyt"6_[/{^;qYR=T\?}z}IsBCb_\|2>?3==~JB[9Mw]G-U/aodj9W?a9JCV2 81p>#+P@yO8%HZyC$Hi
2024-03-14 00:57:28 UTC	16384	IN	Data Raw: 31 a5 2a e5 72 28 9b bc 3e 89 87 9e 28 29 79 a2 f4 69 f8 57 fa 44 c9 cf e1 1f dc 5e ca c4 bb 96 18 98 e7 3c 7c 66 f7 4e e6 32 f3 e5 2e 9b c4 dd b9 9b 20 75 53 72 77 4e c2 3d 9f 00 1f d9 8c 69 f9 c8 66 4c e2 23 fb 74 bc 63 fa 45 c4 26 fa c9 33 cb 3b 3b 07 07 3b 3b 97 8b f0 5a a7 b3 16 cb 3f 43 d5 f2 e5 5e 55 92 74 f4 8e ee b3 ce ea d6 e9 47 e3 e2 c5 8d 7a d3 e2 c5 4d ee db 64 e5 e6 cd aa b2 b1 ab ab 11 37 a0 e1 3d 07 5c e5 f5 9e 3b b4 7e ed c3 a9 79 e3 38 ea f2 b8 bc 71 e7 32 4b dc 7c 2f 96 b8 e3 37 c2 a9 b0 c4 9d 6c ab 7c 0e 2c 71 27 d5 92 a3 83 b2 6a 50 44 9c 62 e3 ea fe 1a 1c fd 39 77 8a 4b 2c b8 ad 9a e5 a7 bf a4 7a e8 1a b1 a5 14 a3 ed 25 ee 87 1b 44 a3 25 e4 e3 ef 5a 56 68 27 7f 8e 68 38 c7 62 d1 d8 e0 7e 98 4f 01 07 ef 9e b8 53 fb 37 3a c7 e5 26 0e Data Ascii: 1*r(>()yiWD^<\|fN2. uSrwN=ifL#tcE&3;;;;Z?C^UtGzMd7=\;~y8q2K\|/7l\|,q'jPDb9wK,z%D%ZVh'h8b~OS7:&
2024-03-14 00:57:28 UTC	12619	IN	Data Raw: 40 1f d1 b0 20 16 a4 71 61 02 b3 50 63 cc 8b ed 36 dd 5a a4 b1 e9 45 b5 77 e8 ed d3 4b a1 06 25 df ae d4 ed 91 b1 4b aa 7f cf ba d9 21 62 5c 5f 31 5f 37 3f 5c 48 d9 51 82 b6 79 4e 3b 7a ce 6c 4d c2 9c b9 98 13 01 1d 23 a1 53 3b c7 89 24 74 92 12 ce 4a e7 57 96 b0 d3 72 cd a3 b8 11 95 6b ce 74 cd fe 48 a8 6e cb 4b ea 36 d3 f2 cc 73 17 93 ba 75 59 45 73 98 1f 51 f9 46 37 7f 8c 6e a5 a4 6e dd 56 c9 10 95 93 ba f5 58 95 a4 6e 33 ac c0 a4 18 44 bc 81 d1 2d d0 ba 05 63 74 0b 22 dd 46 12 9a 8c 18 dd 46 8c 6e 23 55 dd 46 13 98 d1 a4 6e 3d d6 0a a3 db 8a da 6b d9 8e d1 2d 67 74 1b 12 dd dc c3 ea 3c d1 cd 09 75 ab 88 6e 3a df ce 6e d3 8a bd 3d da 4e 9d 39 4d db f6 8e b6 71 83 8b dd f0 9f d7 e2 97 72 83 4e c1 2d ba 45 3d 1d c2 b0 60 97 b3 81 67 e2 d4 0a a7 e4 87 d6 Data Ascii: @ qaPc6ZEwK%K!b\_1_7?\HQyN;zlM#S;$tJWrktHnK6suYEsQF7nnVXn3D-ct"FFn#UFn=k-gt<un:n=N9MqrN-E=`g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50127	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:28 UTC	2216	OUT	GET /content/dam/mtb-web/scripts/fe_utilities.css HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	790	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1592 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 13 Mar 2024 14:53:29 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "638-6138bf00c8c40" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 56e001f87fa53501872a21f09bb07046.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: pqRQOE_0-U_6qN69ygIArWNo1Ng9BzPCGjYpJ3ZAp1keoOLUtXKlVA== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	1592	IN	Data Raw: 2f 2a 41 44 44 49 4e 47 20 46 44 49 43 20 42 4f 58 2a 2f 0d 0a 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 5e 3d 27 62 73 5f 64 69 73 63 6c 6f 73 75 72 65 27 5d 20 62 2e 62 6f 78 65 64 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 30 30 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 2e 37 35 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 46 49 58 20 46 4f 45 20 44 49 53 43 4c 4f 53 55 52 45 20 4c 49 4e 45 20 53 50 41 43 49 4e 47 2a 2f 0d 0a 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 5e 3d 27 62 73 5f 64 69 73 63 6c 6f 73 75 72 65 27 5d 20 70 20 7b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 35 3b 0d 0a 7d 0d 0a Data Ascii: /ADDING FDIC BOX/[data-component-id^='bs_disclosure'] b.boxed { display: block; border: 1px solid #000000; padding: 0.75em;}/FIX FOE DISCLOSURE LINE SPACING/[data-component-id^='bs_disclosure'] p { line-height: 1.15;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50128	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:28 UTC	2222	OUT	GET /content/dam/mtb-web/images/mtb_logo_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	786	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3642 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 12 Oct 2022 17:21:16 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "e3a-5ead99ec3fb00" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 4a1ea8b67dc2325b2469ed51d3e186ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: mLUkiORaIWeqAeEWYa6XLuuh45dKuOa8OG2jt1tC1FdokBLYxWLf6Q== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	3642	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 30 2e 39 20 34 35 2e 35 34 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 37 38 35 36 3b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 34 2e 39 2c 34 2e 33 34 48 30 76 2d 32 63 2e 33 2c 30 2c 2e 36 2d 2e 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 240.9 45.54"><defs><style>.cls-1{fill:#007856;fill-rule:evenodd;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M4.9,4.34H0v-2c.3,0,.6-.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50129	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:28 UTC	2270	OUT	GET /content/dam/mtb-web/images/svg/icon_msgbox_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	794	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 557 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:09:21 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "22d-5da2fe736ce40" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 cc4ee60e87dead01c9e2d4b985af043e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: aGctX__M0ExQZhpY4thvlqHyobHPeX8QGHkZ1x0GoAcjEi7lcb6v2w== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50130	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:28 UTC	2268	OUT	GET /content/dam/mtb-web/images/svg/icon_plus_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; utag_main__se=3%3Bexp-session; utag_main__st=1710379640590%3Bexp-session; utag_main__pn=3%3Bexp-session; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0
2024-03-14 00:57:28 UTC	794	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 422 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:12:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "1a6-5da2ff43538c0" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 8ca36406fe3aa11c1641e5bc917c8a74.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: zuXoj-xdYVD7FkZiOYHAJ3cZKKPYT_m6NEtj1bOQXj3ZnMPcHJavig== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:28 UTC	422	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 37 20 38 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 37 62 35 36 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 63 78 3d 22 34 33 2e 35 22 20 63 79 3d 22 34 33 2e 35 22 20 72 3d 22 34 33 2e 35 22 2f 3e 3c 72 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 87 87"><defs><style>.cls-1{fill:#007b56;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><circle class="cls-1" cx="43.5" cy="43.5" r="43.5"/><r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50132	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	2268	OUT	GET /content/dam/mtb-web/images/svg/icon_lock_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session
2024-03-14 00:57:29 UTC	794	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 710 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:21:34 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "2c6-5da3012e77f80" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 d9b04a822e1c215374729ec159356140.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 4LNgQ7Kd2Msr9Ez6ru4WRAddwyeI95A3pQdF7kJq0YWqjH9P4EHV7w== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:29 UTC	710	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 2e 35 33 20 38 37 2e 35 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 37 38 35 36 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 30 2c 38 33 2e 36 61 34 2e 32 2c 34 2e 32 2c 30 2c 30 2c 30 2c 34 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 67.53 87.58"><defs><style>.cls-1{fill:#007856;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M0,83.6a4.2,4.2,0,0,0,4.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50131	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	2272	OUT	GET /content/dam/mtb-web/images/svg/icon_facebook_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mbox=session#982bceee196b4711901768c5d35728f4#1710379671\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622611; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session
2024-03-14 00:57:29 UTC	794	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 980 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:03:04 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "3d4-5da2fd0be3e00" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ed016821a44f073856f1ffba399e1728.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: nHe4dqZQe3FvGRkdUi94lqiOSn_CKYYgajJPFJeyD8e8RsWXC_i0IA== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:29 UTC	980	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50133	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	2271	OUT	GET /content/dam/mtb-web/images/svg/icon_twitter_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:29 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1152 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:38:42 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "480-5da30502d8880" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 10a23502057a5449ee9e08eab6e9c0d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: JMfjc7W66PuEB_2Tne6Np-cq5hyZA9vPmvRd1APCS_OkSEaumgDWCQ== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:29 UTC	1152	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 33 20 31 39 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 37 38 35 36 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 63 78 3d 22 39 36 2e 35 22 20 63 79 3d 22 39 36 2e 35 22 20 72 3d 22 39 36 2e 35 22 2f 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 193 193"><defs><style>.cls-1{fill:#007856;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><circle class="cls-1" cx="96.5" cy="96.5" r="96.5"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50134	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	2272	OUT	GET /content/dam/mtb-web/images/svg/icon_linkedin_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:29 UTC	794	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 858 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:40:12 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "35a-5da30558ad300" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3a80316ee74668c7049eb31054a07168.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: OiTl-e8chGpmbEeOQTUT0O0XUDEsxqNn7CIDMSqSQK8O8BhAkA23Kw== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:29 UTC	858	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 33 20 31 39 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 37 38 35 36 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 63 78 3d 22 39 36 2e 35 22 20 63 79 3d 22 39 36 2e 35 22 20 72 3d 22 39 36 2e 35 22 2f 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 193 193"><defs><style>.cls-1{fill:#007856;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><circle class="cls-1" cx="96.5" cy="96.5" r="96.5"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50135	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	2270	OUT	GET /content/dam/mtb-web/images/guy-on-phone-green-bg.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:29 UTC	765	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 35941 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "8c65-5e38d3cf2eb00" Last-Modified: Mon, 11 Jul 2022 20:17:16 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish X-Cache: Miss from cloudfront Via: 1.1 b601959712c1f21193a489b5759f70ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 15sS2MruQyq2XF4bbfvwXRTU5yk1CGtIoT_FO-r9hYqNl53oqhfT5A== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:29 UTC	15619	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 14 00 00 ff e1 03 2d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 30 2d 63 30 30 30 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 Data Ascii: ExifII*Ducky-http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.0-c000 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF x
2024-03-14 00:57:29 UTC	16384	IN	Data Raw: a1 aa cc 63 91 35 ee 5b a1 4b 4a 95 bf 54 6c 6a 4e 7b 4d 2f e4 b6 7b a2 72 b7 a7 57 91 c9 e1 60 c3 c9 b7 27 95 76 d5 9c ad 1c 23 6e 3b f0 b7 4f 47 b6 87 a7 97 16 3c d8 dd 6c a6 ad 6c 79 2b 84 b0 d9 e3 6a 68 fe 97 d8 dc c5 62 e6 7d 93 91 8b 81 96 be e7 16 e9 64 99 a3 17 16 f8 9b b5 2c b2 53 ba df f4 37 bc 2f 15 a5 eb 57 d0 eb c5 86 ba 5a a6 36 f5 eb 5b d3 db be bf fa 69 c5 9d 3d 0e 8a db c8 d5 c8 e3 3a af bb 55 aa fa 92 ea 38 d9 15 e1 9e 5d b4 ba dc 57 b7 5d e6 d3 31 d5 5a 6b e8 72 e5 b3 b5 e5 e9 ac 9d 79 6d e3 89 c6 ef 43 cd cb 77 4a b6 de a7 a3 d5 ae 26 7e 5e 5f 7e d9 da 4f 86 ae 4e 57 66 b1 d7 76 74 71 71 2a eb d8 e5 e3 53 c9 bc b6 f9 1e 85 1a 54 fd ce 95 c6 3c ff 00 c9 d9 e5 cb 8b 8f 5d 5f d4 cf 43 1d 3e de 25 5e c8 e5 e1 51 e6 cf 93 95 65 a3 7e 34 5f Data Ascii: c5[KJTljN{M/{rW`'v#n;OG<lly+jhb}d,S7/WZ6[i=:U8]W]1ZkrymCwJ&~^_~ONWfvtqq*ST<]_C>%^Qe~4_
2024-03-14 00:57:29 UTC	3938	IN	Data Raw: cb 5b 1c 1c 7b e9 75 d9 9e 84 b7 5d b4 68 52 70 cb 8f 9a 8e 8f 0e 4d aa f4 6c 99 33 e2 8f b3 83 af d4 d6 c9 75 34 cc 37 08 ce 89 2d 62 0c f8 cc e5 af 2b 8c 33 8a 4b 38 74 af 3d a5 fc d4 5f b3 3a e6 2d b4 9c 9c 89 af 2b 0d e2 13 9a bf 9e a6 a3 37 fd ba f5 30 b6 b0 67 28 91 a9 15 a7 3d bc 68 fd 4e 5c 7a a9 ee 6d e5 5a 5a aa 25 14 22 a1 b9 7c 42 7a b2 a0 23 df 42 bd 13 43 43 0b 5b a1 51 6c e5 2a f7 36 e4 7e 38 e3 a9 af 1a 96 9b d9 18 e6 b6 e1 5a d3 71 25 6e 4c 13 d0 a0 66 90 50 ae 64 a0 c7 f9 dc 04 ac ba 99 c7 62 33 2d 20 0c 2f b3 3c e6 e6 cd 9d f9 1c 55 fc 0e 09 22 bc ff 00 c9 df fa 4a bd d9 e4 9e 87 e4 ed 36 ad 7e 67 01 c3 d9 7a ba ce 22 3d 8b 8d 6a 47 b1 96 3d cc ce 1d 35 7a 3c 75 a9 e9 e2 5a 23 ce e3 ad 8f 4f 12 39 ec ef ab a5 44 23 25 b4 98 25 2a 0d b5 Data Ascii: [{u]hRpMl3u47-b+3K8t=_:-+70g(=hN\zmZZ%"\|Bz#BCC[Ql6~8Zq%nLfPdb3- /<U"J6~gz"=jG=5z<uZ#O9D#%%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50125	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	2268	OUT	GET /content/dam/mtb-web/images/pub-lp/banner-check.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:29 UTC	789	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1312 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "520-5d66f171c5540" Last-Modified: Tue, 25 Jan 2022 21:51:41 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 76d4de5b65bdf749a3f97445d1b9f4d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: vb5R5SD0GTV6kgJ63iFDltlpH250pckfnOkpyTEBofZT5LVbev-oKw== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:29 UTC	1312	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 38 70 78 22 20 68 65 69 67 68 74 3d 22 38 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 38 20 38 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 68 65 63 6b 6d 61 72 6b 20 49 63 6f 6e 20 43 6f 70 79 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 56 65 72 73 69 6f 6e 2d 33 2d 46 69 78 65 64 22 20 73 74 72 6f Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="88px" height="88px" viewBox="0 0 88 88" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Checkmark Icon Copy</title> <g id="Version-3-Fixed" stro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50136	142.250.81.228	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	1128	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Le0uLsfAAAAAF_ME5t3IiKGN8Hq4g0A3Kek1EB3&co=aHR0cHM6Ly93d3czLm10Yi5jb206NDQz&hl=en&v=07g0mpPGukTo20VqKa8GbTSw&size=invisible&cb=kjlgubngf9bq HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:29 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 14 Mar 2024 00:57:29 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-tQ8TLHOkTpML85optvSs3g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:57:29 UTC	361	IN	Data Raw: 32 61 64 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2adc<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-03-14 00:57:29 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2024-03-14 00:57:29 UTC	1252	IN	Data Raw: 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 Data Ascii: 9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329,
2024-03-14 00:57:29 UTC	1252	IN	Data Raw: 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a Data Ascii: 0-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}
2024-03-14 00:57:29 UTC	1252	IN	Data Raw: 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c Data Ascii: */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA,
2024-03-14 00:57:29 UTC	1252	IN	Data Raw: 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b Data Ascii: l(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal;
2024-03-14 00:57:29 UTC	1252	IN	Data Raw: 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 30 37 67 30 6d 70 50 47 75 6b 54 6f 32 30 56 71 4b 61 38 47 62 54 53 77 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 74 51 38 54 4c 48 4f 6b 54 70 4d 4c 38 35 6f 70 74 76 53 73 33 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 Data Ascii: U+FEFF, U+FFFD;}</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/07g0mpPGukTo20VqKa8GbTSw/styles__ltr.css"><script nonce="tQ8TLHOkTpML85optvSs3g" type="text/javascript">window['__recaptcha_api'] = 'http
2024-03-14 00:57:29 UTC	1252	IN	Data Raw: 79 63 4f 44 62 57 67 58 4c 38 35 4c 6b 46 62 5f 58 44 65 7a 63 36 6e 63 63 62 68 59 45 31 69 41 49 78 44 46 36 5f 31 6f 42 41 4c 59 78 32 57 50 33 74 2d 4b 71 71 76 4c 43 67 4a 72 74 63 30 63 48 58 63 75 53 39 49 45 7a 30 6f 5a 4b 38 45 4d 50 4a 47 51 42 41 34 70 61 52 38 46 74 47 4b 67 76 65 56 34 55 68 43 4d 4a 6a 77 70 45 5f 4c 52 6c 5a 75 6d 34 6b 2d 55 5f 4f 4f 48 45 72 2d 6c 47 37 68 45 6a 46 46 39 52 62 50 78 77 32 43 63 63 6d 36 71 38 47 6e 68 32 4d 44 4c 37 6e 61 52 5a 4b 39 45 49 43 38 39 48 58 45 33 64 6b 75 75 49 49 46 31 66 6c 68 45 54 42 57 70 44 47 39 64 33 52 67 5a 6b 78 77 30 49 45 6c 71 47 6c 51 47 4b 67 39 2d 72 6e 78 47 4c 38 68 79 53 6d 73 72 5a 47 2d 39 50 4b 5a 74 43 58 59 6a 38 32 4d 6a 38 78 37 4a 34 45 43 79 49 61 70 77 75 37 67 Data Ascii: ycODbWgXL85LkFb_XDezc6nccbhYE1iAIxDF6_1oBALYx2WP3t-KqqvLCgJrtc0cHXcuS9IEz0oZK8EMPJGQBA4paR8FtGKgveV4UhCMJjwpE_LRlZum4k-U_OOHEr-lG7hEjFF9RbPxw2Cccm6q8Gnh2MDL7naRZK9EIC89HXE3dkuuIIF1flhETBWpDG9d3RgZkxw0IElqGlQGKg9-rnxGL8hySmsrZG-9PKZtCXYj82Mj8x7J4ECyIapwu7g
2024-03-14 00:57:29 UTC	1252	IN	Data Raw: 6c 64 31 72 39 5f 7a 42 47 6b 6e 33 6b 46 5a 78 4c 38 67 34 71 4b 31 2d 79 37 72 4b 73 58 69 30 6f 69 65 32 44 75 74 37 5f 73 57 72 4d 5f 51 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 74 51 38 54 4c 48 4f 6b 54 70 4d 4c 38 35 6f 70 74 76 53 73 33 67 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 32 4e 7a 64 54 61 56 46 69 59 33 68 30 53 7a 46 50 4e 57 56 72 4d 54 46 55 5a 47 78 76 61 55 49 31 65 6c 6f 77 4d 46 56 42 Data Ascii: ld1r9_zBGkn3kFZxL8g4qK1-y7rKsXi0oie2Dut7_sWrM_Q"><script type="text/javascript" nonce="tQ8TLHOkTpML85optvSs3g"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy92NzdTaVFiY3h0SzFPNWVrMTFUZGxvaUI1elowMFVB
2024-03-14 00:57:29 UTC	603	IN	Data Raw: 30 56 7a 52 34 53 30 39 51 55 57 5a 71 54 44 42 46 54 54 68 30 62 45 70 57 55 30 67 30 53 6e 42 54 62 46 4e 46 65 55 4e 68 52 6d 4e 68 55 53 38 79 52 55 4e 52 4c 7a 6c 50 57 6d 5a 51 56 58 56 4c 4e 45 68 30 65 6c 68 36 4d 57 4a 49 4b 33 63 32 52 33 6c 4f 62 30 31 6e 57 55 49 34 64 58 4a 50 62 55 56 72 52 57 34 35 4f 57 46 30 63 57 31 4a 64 57 31 32 65 47 67 34 55 33 6c 31 51 6a 52 54 55 45 4e 4e 59 30 67 78 4d 58 51 7a 4f 48 4e 46 4f 56 4a 6e 51 33 46 53 4d 6d 46 4b 65 56 4a 54 62 30 70 61 63 48 5a 56 62 57 6b 31 4e 46 6c 76 55 57 78 72 54 6d 55 78 52 47 31 4b 4d 6a 4a 4e 64 7a 55 77 64 54 51 35 4b 32 39 49 55 57 35 50 4c 7a 64 76 4d 47 64 55 61 57 70 48 51 57 4e 79 65 57 49 33 52 30 70 32 55 6d 56 35 5a 55 46 69 56 46 56 70 59 7a 56 4d 52 55 31 7a 62 54 Data Ascii: 0VzR4S09QUWZqTDBFTTh0bEpWU0g0SnBTbFNFeUNhRmNhUS8yRUNRLzlPWmZQVXVLNEh0elh6MWJIK3c2R3lOb01nWUI4dXJPbUVrRW45OWF0cW1JdW12eGg4U3l1QjRTUENNY0gxMXQzOHNFOVJnQ3FSMmFKeVJTb0pacHZVbWk1NFlvUWxrTmUxRG1KMjJNdzUwdTQ5K29IUW5PLzdvMGdUaWpHQWNyeWI3R0p2UmV5ZUFiVFVpYzVMRU1zbT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50138	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	2277	OUT	GET /content/dam/mtb-web/images/zelle-color-convenience-logo.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:29 UTC	762	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2167 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "877-5c7b7504205c0" Last-Modified: Thu, 22 Jul 2021 14:43:43 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish X-Cache: Miss from cloudfront Via: 1.1 06d42d2d80190e168b9494192458b51a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 0e1u8GOL5OBx0w_ERmI4W__epoY1qFNRDDmBMpBUIRRoWUeDE5qmwA== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:29 UTC	2167	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 34 08 03 00 00 00 75 bb c0 9a 00 00 03 00 50 4c 54 45 00 00 00 00 00 55 00 00 aa 00 00 ff 00 24 00 00 24 55 00 24 aa 00 24 ff 00 49 00 00 49 55 00 49 aa 00 49 ff 00 6d 00 00 6d 55 00 6d aa 00 6d ff 00 92 00 00 92 55 00 92 aa 00 92 ff 00 b6 00 00 b6 55 00 b6 aa 00 b6 ff 00 db 00 00 db 55 00 db aa 00 db ff 00 ff 00 00 ff 55 00 ff aa 00 ff ff 24 00 00 24 00 55 24 00 aa 24 00 ff 24 24 00 24 24 55 24 24 aa 24 24 ff 24 49 00 24 49 55 24 49 aa 24 49 ff 24 6d 00 24 6d 55 24 6d aa 24 6d ff 24 92 00 24 92 55 24 92 aa 24 92 ff 24 b6 00 24 b6 55 24 b6 aa 24 b6 ff 24 db 00 24 db 55 24 db aa 24 db ff 24 ff 00 24 ff 55 24 ff aa 24 ff ff 49 00 00 49 00 55 49 00 aa 49 00 ff 49 24 00 49 24 55 49 24 aa 49 Data Ascii: PNGIHDR4uPLTEU$$U$$IIUIImmUmmUUUU$$U$$$$$$U$$$$$I$IU$I$I$m$mU$m$m$$U$$$$U$$$$U$$$$U$$IIUIII$I$UI$I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50137	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	2262	OUT	GET /content/dam/mtb-web/images/faq-component.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:29 UTC	766	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 511124 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "7cc94-5dda3483e3f40" Last-Modified: Wed, 27 Apr 2022 14:04:05 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish X-Cache: Miss from cloudfront Via: 1.1 fc527c9e0a8a22ce61e1580f7382bcf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: TWxQIK2ONQ5SNHkL66lD9KDalAVA0KByTwQkMnTWw9drtrHbwyu2PQ== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:29 UTC	15618	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 2c 00 00 02 75 08 02 00 00 00 75 94 3c 81 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 02 2c a0 03 00 04 00 00 00 01 00 00 02 75 00 00 00 00 a2 b9 a2 ab 00 00 40 00 49 44 41 54 78 01 dc bd d7 b3 25 49 72 a7 77 b4 ba b2 44 eb e9 19 00 03 60 06 62 89 27 1a f9 c0 77 f2 af a6 f1 85 4b 33 72 49 b3 5d 2e b9 18 0e 80 85 18 d1 dd d5 aa c4 15 47 f3 fb 7e 9e 99 37 eb de aa 9a 6a cc d0 68 b6 51 b7 f2 44 7a 78 78 b8 7b 78 78 88 8c 8c 1c fe e3 7f fe e5 70 38 3c 1e 8f 75 1d f4 02 40 ee 80 f7 60 77 d1 82 57 c6 87 68 4d ea 10 0a 44 87 83 e3 a8 30 0b fe 36 fc c1 60 24 f6 5b 4a Data Ascii: PNGIHDR,uu<gAMAa8eXIfMM*i,u@IDATx%IrwD`b'wK3rI].G~7jhQDzxx{xxp8<u@`wWhMD06`$[J
2024-03-14 00:57:29 UTC	16384	IN	Data Raw: 0d be 22 c2 1d e7 b9 b5 49 9b a8 bb 2e 80 dd 7f 8a 00 4e 16 92 49 e1 f9 19 4f 12 e2 13 e4 8e 9a 2a 47 ef f0 c1 7f ca 41 be 09 87 b2 6c 66 27 83 19 53 1f 0e b5 74 48 ce 89 9a 9c b7 c4 5e 4a 4e bb e0 0c 40 99 83 5c f9 2d 7c 42 db 35 a0 2a 3c 8b 36 c3 c7 5b 07 47 be e2 ee bc 8d 57 8c 18 c4 7b 1e 1d 56 d0 fa c6 68 b5 ad 24 d5 49 90 45 e7 a8 b0 c5 18 df 2a 6d a1 ad 54 41 eb 2e 6d ef a3 7d 11 c8 d5 84 22 9e 9b d2 17 9e 55 45 80 63 47 9c 5a 40 27 e8 c5 7f e8 c6 fa 00 1d 42 34 09 98 f7 e3 71 9c 0b 90 9e cb 7e 60 eb 54 07 18 be 77 bd 65 b2 bf 66 8e 72 7d 73 fb 92 4f d6 5d df 3c e7 13 0f 7c d3 61 bb 3f 99 9f 9d 9f 9c b2 99 9b 2a e5 35 50 fc f4 fe 66 bd e6 e1 0e 1f 43 58 fb 65 61 de 21 5a cd e6 7c 68 68 be 5a 72 34 36 fb be b1 72 94 32 dc c2 0b 32 3b b9 71 3a c1 31 Data Ascii: "I.NIOGAlf'StH^JN@\-\|B5<6[GW{Vh$IEmTA.m}"UEcGZ@'B4q~`Twefr}sO]<\|a?5PfCXea!Z\|hhZr46r22;q:1
2024-03-14 00:57:30 UTC	16384	IN	Data Raw: 1c 13 70 f9 d8 ab b1 dc f4 c5 64 ff 81 37 9c 1c 21 6e b6 1f 9a aa 27 ca 3b cc ea 34 32 06 12 ff 40 17 3c 6e da a6 a0 e8 14 cb a6 ce e2 de ac 39 07 01 4b bc b8 bd d2 3c 43 4c d1 c9 d3 76 4a 10 a4 a8 4f 75 bc 12 ae 06 d1 09 4f 24 2b 4c 70 29 e5 31 36 1d 32 74 10 84 a4 2d b5 65 b3 9c 00 d8 3a 62 84 2d 6e 54 91 6b 0f c1 06 44 32 17 97 b1 fe df 71 a4 95 02 f3 2d aa 1b 80 e2 6c 91 57 78 76 12 dd 7b c3 47 49 0e 43 0c af 22 69 2e 93 ac c1 90 ea 51 5d c5 11 65 d9 55 51 30 01 66 7a 25 28 f6 26 5a 03 18 0e 78 81 0f 4d 45 e5 ac 54 38 d6 98 29 82 33 7a 1e b5 ec ca f4 b4 73 c7 c7 60 88 a5 32 01 e3 52 30 47 b2 a8 2f 21 11 3d 64 05 3f f9 5a db f0 d1 41 91 ec 50 07 e1 22 31 72 50 c9 b0 b6 08 b2 bd 4b 27 cc 06 c6 49 de 58 0b 11 02 e3 49 18 66 74 9c 92 6a 18 17 74 e4 60 83 Data Ascii: pd7!n';42@<n9K<CLvJOuO$+Lp)162t-e:b-nTkD2q-lWxv{GIC"i.Q]eUQ0fz%(&ZxMET8)3zs`2R0G/!=d?ZAP"1rPK'IXIftjt`
2024-03-14 00:57:30 UTC	16384	IN	Data Raw: 9d 6c 72 db 3c 2f 4c 46 31 62 24 17 a0 bc fc ce d5 00 57 fe 31 3f d8 a4 30 01 68 6b 1a fb d6 e4 6b 6a 51 ec bc f3 a6 4b c8 7d 70 32 ab 18 0a 6c 38 54 e9 9a b0 9d 28 aa 64 cb 96 48 6c 0b 42 ce 44 f8 6c 5c 15 c1 10 09 f2 47 b6 f9 a6 ec 15 ac a3 a0 30 c6 40 6a 8d ae d0 2d d5 a3 6c 62 64 58 e3 32 3b c2 ab 6b 1c 92 52 e9 1c 8f 4d e7 a4 c3 66 3f 97 58 32 9f 06 b9 68 66 f8 67 ad e4 b8 25 09 18 34 70 0c 88 00 76 96 31 bb 45 07 1f 3f 9f dc 99 4c 26 0c 9f b1 ee 74 88 d8 48 c6 d6 30 24 69 75 3d a3 9e e8 24 65 6b c7 92 f3 97 ca df c1 1e 93 be af 7e 78 75 de 79 8b b6 e7 e6 67 36 da 5d 5e 9e 63 fc b1 74 64 41 25 78 5d db d5 05 fa 9a ea c1 78 4c ce ce ae ae 2e df bf 79 7d 7a f6 f4 d9 f3 27 2c f8 f3 79 05 ea 88 a5 a6 ef 7f fe b3 cb d1 f9 ab 7f fe ed 7c ce 24 eb 9a 8f 99 Data Ascii: lr</LF1b$W1?0hkkjQK}p2l8T(dHlBDl\G0@j-lbdX2;kRMf?X2hfg%4pv1E?L&tH0$iu=$ek~xuyg6]^ctdA%x]xL.y}z',y\|$
2024-03-14 00:57:30 UTC	16384	IN	Data Raw: 31 b9 43 11 92 2e 04 2d 27 7e 87 9c a8 6b bb f2 84 93 f9 ca 45 37 6b 9d 4e 38 1c 75 8d 12 ad 0c a9 89 65 00 04 21 07 0a d5 ac 1c 72 47 c6 0b 1f d2 6a 89 73 8f fa ca c3 08 0e 15 e2 53 7d ae 08 2d a4 c5 0f e3 8d 19 48 12 26 a4 fd bc 7f 6f d9 26 ac 35 ed b1 ab 46 fc 49 43 5a 0a 6d 97 87 7b cb 8f f4 30 4e 14 0d 6c 24 c8 62 21 01 91 ff a1 13 61 2a 25 b5 34 09 46 84 e4 e1 7b 74 9f f5 94 8a ab a5 4a 54 3d 46 59 8b 81 06 14 4b 10 3b cc 7f 5c f9 30 95 28 b4 24 8e 5d b2 fc 7c ca d6 9e 54 31 15 96 4d 78 4b 45 9a 02 bd 8e ac b9 41 ca f3 7f d4 a2 d0 a3 74 6a 78 98 e9 2e 0a b5 b8 b4 22 ed ed f0 64 7e 65 2d 6d d2 08 8c e2 7c a0 45 f1 ee c3 6c 8c d7 16 db f8 ad 43 38 f0 34 d2 4f f8 a9 e4 08 2b d6 62 4d 0f 36 4b 61 b6 ae a3 62 88 bd dc 21 4e 25 9f 6c c4 99 cf 2a cb 7c 7c Data Ascii: 1C.-'~kE7kN8ue!rGjsS}-H&o&5FICZm{0Nl$b!a%4F{tJT=FYK;\0($]\|T1MxKEAtjx."d~e-m\|ElC84O+bM6Kab!N%l\|\|
2024-03-14 00:57:30 UTC	16384	IN	Data Raw: ad 3b 9b 93 cb 8b 6b 0b 8b 33 24 a7 fd 97 2f 9e b4 5a 9d c3 c3 8f 7e fa b3 e5 b5 35 7b eb 53 88 21 08 de 8f 69 25 57 19 7d 83 5a 1e fc 96 e5 63 00 07 8b 08 a9 28 af f2 53 ee 52 bf 31 cd 63 9e b3 6c ab 79 0f 1d e8 e7 29 6f 0b b4 0d 53 06 60 f5 b6 e4 64 1a e6 1f 05 1d b5 df 76 65 5a d5 60 bf a1 49 e5 d7 41 ab 0c a2 41 51 a1 40 99 69 a8 7a cc 6e ca 9e b8 3a 88 50 9c df 12 cc c9 90 5e a1 3d 4c 7d d0 38 c4 19 4b 39 44 49 3d 05 f4 02 53 06 61 0c 4f 0e 65 89 63 63 a2 ec 26 91 65 6e 7e 01 04 8c 1d ee 1c f4 8e 67 45 87 a3 e3 6a 1d 72 db 9a 9e ab 8f cd 08 3a d7 c4 c5 af 6e 6c 35 b7 df a8 65 aa d1 68 1f ec 2e 8a 2d f3 f8 e1 cc eb 5a cb d1 38 0b a2 72 d7 77 5e bd 3a 78 f3 da 16 e6 5e a7 ad 57 0a a1 2c 03 9d f1 85 29 9c 87 d1 c4 a4 23 3b 88 44 a4 e3 08 12 64 88 c0 21 Data Ascii: ;k3$/Z~5{S!i%W}Zc(SR1cly)oS`dveZ`IAAQ@izn:P^=L}8K9DI=SaOecc&en~gEjr:nl5eh.-Z8rw^:x^W,)#;Dd!
2024-03-14 00:57:30 UTC	16384	IN	Data Raw: 83 e7 80 4c c2 f0 f0 53 3d a0 8b 10 2e c1 35 cd 55 f4 c2 3e 6d 6c 56 e1 0e f0 04 68 3b 43 9a 79 30 1e 9a 21 bf 91 d6 5a 6d cb 84 14 f8 e1 64 01 10 71 53 08 92 03 1b 49 73 4b f6 ff 26 fe af 62 4e 2f 4f bb 56 5f 64 62 ea 79 95 eb 61 68 10 51 2c 2b 32 7c 00 5e 2a ca 8d 78 74 66 22 b4 d9 2e 33 33 3e aa 8e eb c3 93 8f df bd cc cd bb 09 79 ba 99 78 33 e5 d6 6c 37 8b aa b2 55 9f a7 71 a5 ba d1 d2 6e a6 0c 0b f1 ca 27 d5 e3 e8 27 c3 0c 3f e0 26 50 eb f3 aa 8a db 0a ef bf 1d 54 21 8b c6 54 1f dd 32 3e 55 d7 6e 2b 67 50 c0 e0 ef fb f2 a8 ef 96 99 18 7c 35 fa b7 b4 24 c3 72 ad a8 e1 f0 8e 66 be f5 be 2a a1 a2 3d 08 82 f8 8f ad 5e 6f bf 2d 6a fd a1 23 bd ea eb 6b f5 b5 d5 c5 cd f5 d5 ad cd ad bb ae 7b 0f ef de 59 6d ac 34 16 56 ec 6b 21 bb 08 7b 40 d4 8e e5 c4 66 44 Data Ascii: LS=.5U>mlVh;Cy0!ZmdqSIsK&bN/OV_dbyahQ,+2\|^xtf".33>yx3l7Uqn''?&PT!T2>Un+gP\|5$rf=^o-j#k{Ym4Vk!{@fD
2024-03-14 00:57:30 UTC	15803	IN	Data Raw: 17 70 46 ef 10 bb 52 54 69 87 a4 2c a4 cf 4f 25 3c 28 cf 5d ab ee c6 23 da c3 a9 6d 45 82 c2 39 16 68 94 cd f5 e9 88 71 a3 2e 58 e1 6a 30 e6 08 99 86 7d 3b fd 9c 87 02 28 b1 f1 12 31 4e bb b8 cc f1 79 bf 7b 7e 32 14 00 86 8f b1 01 52 b9 02 8d 97 a0 69 a5 23 0e 03 5d b6 90 bf bb 7b 00 4b cb 1b 73 d3 c8 e2 b3 69 65 e9 5e 1c 10 34 33 49 59 d7 89 79 d4 b7 75 80 20 2a 06 55 6d 68 c1 b7 b9 28 73 a8 39 8a ac 94 a2 52 07 63 74 02 27 0d 75 c7 44 63 5a 14 69 37 5b 5c e1 46 3c 5f 66 1c 77 1e 27 4a 28 80 1f f0 31 30 53 2e 0f eb a3 5f 69 3a a7 16 ea 88 48 86 27 4e f8 9b e6 be 40 02 a3 26 52 07 63 43 83 ce 53 09 9c d8 3b 39 3f ec d9 d3 94 33 52 1d 73 32 9a 39 11 11 07 14 5c 2c 7d ab 16 ce e6 ec 5f 98 da b2 ff ca a6 28 fb 55 79 57 cf da df 66 09 93 0f 7c 38 34 8c 36 46 Data Ascii: pFRTi,O%<(]#mE9hq.Xj0};(1Ny{~2Ri#]{Ksie^43IYyu *Umh(s9Rct'uDcZi7[\F<_fw'J(10S._i:H'N@&RcCS;9?3Rs29\,}_(UyWf\|846F
2024-03-14 00:57:30 UTC	16384	IN	Data Raw: 1e 15 26 59 b6 09 99 28 ad 56 46 d1 fb f3 80 5b 94 44 53 23 7c 25 af 42 42 33 5f 09 7e 95 97 58 84 0d 79 89 99 22 06 ec 10 5a ff 87 af 58 80 98 27 e3 a7 a0 72 29 c1 38 5c 96 a0 99 a1 47 99 4a 6e 25 ba bc 2e 74 0a 15 d1 e6 f0 21 ff 94 9c 01 0c fd ca 38 ba 90 2a f4 0b d7 16 9c c4 8c 75 4a 4c 83 67 97 15 88 53 81 a0 85 9e 3b 6b 2d 9e f7 8f e7 45 e9 32 4b b5 e5 60 7f 7f 7d 6d 8d f9 c3 06 2c 0b 45 76 63 ad cd cd 3e 79 f6 dc 64 b6 7c b2 b6 b6 2a 9e b3 a5 0e ac fa 64 96 d7 61 29 7f 86 b5 f3 52 b1 a9 95 ea b4 1b d0 48 ef 2f 31 3b 90 a8 97 b6 5d dd 8e ff c6 4b 58 15 f5 59 ef 2a 10 fc 86 f3 ab 26 40 4c f4 9a e2 d1 28 0e fa 42 e7 f3 bd ff fb 7f fa 1f 7f fe ef fe d5 77 de da 7e b0 b9 2a b2 03 64 b8 fd ee 83 6f fd a7 ff b8 b5 79 97 52 02 ca 90 66 69 6d 79 70 b8 70 d4 Data Ascii: &Y(VF[DS#\|%BB3_~Xy"ZX'r)8\GJn%.t!8uJLgS;k-E2K`}m,Evc>yd\|da)RH/1;]KXY&@L(Bw~doyRfimypp
2024-03-14 00:57:30 UTC	16384	IN	Data Raw: 81 d1 5f 35 35 69 00 dc 68 f6 a6 11 b5 a8 8b 94 4d 17 1e 4f 90 5c 85 97 80 77 b0 15 ed f5 e6 60 e0 be ee 89 d9 b3 f1 83 5d 9b cf e3 3c 9c 0d 87 34 60 2c 92 8e b0 a5 13 ba 0b 22 b8 6c 69 4b b0 bf c2 03 58 86 2f ac 62 9d 6d 84 0c 71 da c1 cd 8a 7d ed ae 68 48 15 be 41 0f e0 82 91 bd ed e1 60 af d7 75 b1 0a 22 76 98 45 ce 69 8b ce c1 e2 c0 35 28 c8 8d 63 f0 7e 6b 77 88 50 d8 12 e2 52 d8 06 ec 88 1d 03 4c b1 91 ed bc a3 5d 57 48 83 64 3b 13 8e e5 a4 2f 55 8c cb b4 20 b8 10 cf e6 4d f8 10 51 d4 6d d3 7b ce d8 1f 41 7e 62 fc c9 e0 d0 6f 70 45 ad ee 86 89 54 a8 6a 9f ac bd 30 21 47 5b 8a 12 24 27 c5 23 09 d3 4e 60 85 86 39 c7 d7 6d 56 85 ce cd 4c df 58 1e 5e 9b 1f 12 db 19 6e 74 a6 8f 0c 87 ed 70 95 c7 a1 67 f6 74 92 03 bf d7 3e f4 00 63 27 51 b6 99 c4 e5 a2 85 Data Ascii: _55ihMO\w`]<4`,"liKX/bmq}hHA`u"vEi5(c~kwPRL]WHd;/U MQm{A~bopETj0!G[$'#N`9mVLX^ntpgt>c'Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50139	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	2282	OUT	GET /content/dam/mtb-web/images/personal-home-page/deposit-checks.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:29 UTC	792	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5235 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 16 Apr 2020 22:05:54 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "1473-5a36fa2f1b480" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 b601959712c1f21193a489b5759f70ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 3rkORR4f4oI5tMCokKAgRbO8N5eVJNvhNcVOLFqmrzSpScD5aBQT2A== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:29 UTC	5235	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 53 08 06 00 00 00 57 94 0f 4a 00 00 0a 15 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 35 30 2c 20 32 30 31 39 2f 31 30 2f 30 31 2d 31 38 3a 30 33 3a 31 36 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDRSWJiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50140	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	2279	OUT	GET /content/dam/mtb-web/images/personal-home-page/android-ios.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:29 UTC	763	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 7379 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "1cd3-5a36fa3103900" Last-Modified: Thu, 16 Apr 2020 22:05:56 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish X-Cache: Miss from cloudfront Via: 1.1 8fd21502425077e617fde7325b45e112.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: v85ROL2lQpl_g9bp8vHGFTEXi16XBie7sWMwZLezqeYhUxoPxLbSHw== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:29 UTC	7379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 53 08 06 00 00 00 57 94 0f 4a 00 00 0a 15 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 35 30 2c 20 32 30 31 39 2f 31 30 2f 30 31 2d 31 38 3a 30 33 3a 31 36 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDRSWJiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50142	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	2287	OUT	GET /content/dam/mtb-web/images/personal-home-page/track-your-spending.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:30 UTC	792	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 9422 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 16 Apr 2020 22:06:13 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "24ce-5a36fa4139f40" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3a80316ee74668c7049eb31054a07168.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: gSEC0KGDyYQx_Kaz_mZVQLIKWk-wP0ounb5eh0Llg77v_aX5fna3mg== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:30 UTC	9422	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 53 08 06 00 00 00 57 94 0f 4a 00 00 13 35 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 35 30 2c 20 32 30 31 39 2f 31 30 2f 30 31 2d 31 38 3a 30 33 3a 31 36 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDRSWJ5iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50141	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:29 UTC	2298	OUT	GET /content/dam/mtb-web/images/icon-search-green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/etc.clientlibs/axp-common/clientlibs/clientlib-bootstrap-components.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:30 UTC	794	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 631 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 06 Apr 2023 20:10:17 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "277-5f8b07f495c40" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3a80316ee74668c7049eb31054a07168.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: LxyGDfvP218iivhrgR7df52akY-j6woXr-aDyg1X31JnywRx_PNsUQ== Permissions-Policy: browsing-topics=()
2024-03-14 00:57:30 UTC	631	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 33 2e 32 38 20 35 35 2e 37 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 35 70 78 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 2c 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 6e 6f 6e 65 3b 0a 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 53.28 55.72"> <defs> <style> .cls-1 { stroke-width: 5px; } .cls-1, .cls-2 { fill: none;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50143	199.232.36.157	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:30 UTC	625	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "32ad004436155ec972bc50e6238b5b67" If-Modified-Since: Thu, 27 Oct 2022 18:55:37 GMT
2024-03-14 00:57:30 UTC	332	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 14 Mar 2024 00:57:30 GMT Cache-Control: no-cache ETag: "32ad004436155ec972bc50e6238b5b67" X-Served-By: cache-lga21981-LGA X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50144	44.209.137.118	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:30 UTC	690	OUT	GET /spx?dxver=4.0.0&shaid=34249&tdr=&plh=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&cb=55960873835234740 HTTP/1.1 Host: dx.mountain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guid=c0f80a26-e19d-11ee-bc79-65977b46ee41
2024-03-14 00:57:30 UTC	350	IN	HTTP/1.1 200 OK vary: origin,access-control-request-method,access-control-request-headers,accept-encoding expires: Thu, 01 Jan 1970 00:00:00 GMT content-type: application/javascript;charset=utf-8 content-length: 29999 date: Thu, 14 Mar 2024 00:57:29 GMT x-envoy-upstream-service-time: 3 be: spx-prod server: istio-envoy connection: close
2024-03-14 00:57:30 UTC	16034	IN	Data Raw: 76 61 72 20 64 63 6d 5f 63 69 64 2c 64 63 6d 5f 74 69 64 2c 64 63 6d 5f 67 69 64 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 5f 67 61 22 29 5b 31 5d 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 64 63 6d 5f 63 69 64 3d 64 5b 32 5d 2b 22 2e 22 2b 64 5b 33 5d 2c 64 63 6d 5f 74 69 64 3d 67 61 2e 67 65 74 41 6c 6c 28 29 5b 30 5d 2e 62 2e 64 61 74 61 2e 76 61 6c 75 65 73 5b 22 3a 74 72 61 63 6b 69 6e 67 49 64 22 5d 3b 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 5f 67 69 64 22 29 5b 31 5d 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 64 63 6d 5f 67 69 64 3d 64 5b 32 5d 2b 22 Data Ascii: var dcm_cid,dcm_tid,dcm_gid;!function(){try{var d=document.cookie.split("_ga")[1].split(";")[0].split(".");dcm_cid=d[2]+"."+d[3],dcm_tid=ga.getAll()[0].b.data.values[":trackingId"];d=document.cookie.split("_gid")[1].split(";")[0].split(".");dcm_gid=d[2]+"
2024-03-14 00:57:30 UTC	314	IN	Data Raw: 20 20 20 20 20 20 64 63 6d 5f 63 69 64 20 3d 20 75 6e 64 65 66 69 6e 65 64 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 44 63 6d 54 69 64 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 63 6d 5f 74 69 64 20 3d 20 67 61 2e 67 65 74 41 6c 6c 28 29 5b 30 5d 2e 62 2e 64 61 74 61 2e 76 61 6c 75 65 73 5b 22 3a 74 72 61 63 6b 69 6e 67 49 64 22 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 63 6d 5f 74 69 64 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 65 63 75 74 69 6f 6e 5f 77 6f 72 6b 66 6c 6f 77 2e 64 63 6d 5f 74 69 64 20 3d 20 22 4f 4b 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: dcm_cid = undefined } } function getDcmTid() { try { dcm_tid = ga.getAll()[0].b.data.values[":trackingId"]; if (dcm_tid !== undefined) { execution_workflow.dcm_tid = "OK";
2024-03-14 00:57:30 UTC	8349	IN	Data Raw: 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 44 63 6d 47 69 64 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 63 6d 5f 67 69 64 41 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 5f 67 69 64 22 29 5b 31 5d 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2e 73 70 6c 69 74 28 22 2e 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 63 6d 5f 67 69 64 20 3d 20 64 63 6d 5f 67 69 64 41 5b 32 5d 20 2b 20 22 2e 22 20 2b 20 64 63 6d 5f 67 69 64 41 5b 33 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 63 6d 5f 67 69 64 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 78 Data Ascii: } } function getDcmGid() { try { var dcm_gidA = document.cookie.split("_gid")[1].split(";")[0].split("."); dcm_gid = dcm_gidA[2] + "." + dcm_gidA[3]; if (dcm_gid !== undefined) { ex
2024-03-14 00:57:30 UTC	5302	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 67 61 5f 63 6c 69 65 6e 74 5f 69 64 20 3d 20 22 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 61 5f 69 6e 66 6f 2e 67 61 5f 63 6c 69 65 6e 74 5f 69 64 20 3d 20 67 61 5f 63 6c 69 65 6e 74 5f 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 67 61 5f 69 6e 66 6f 2e 73 68 70 74 20 3d 20 73 68 70 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 63 6d 5f 63 69 64 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 7c 7c 20 64 63 6d 5f 63 69 64 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 2e 75 6e 64 65 66 69 6e 65 64 22 20 7c 7c 20 64 63 6d 5f 63 69 64 20 3d 3d 20 22 6e 75 6c 6c 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 63 6d 5f 63 69 64 20 3d 20 22 22 Data Ascii: ga_client_id = ""; } ga_info.ga_client_id = ga_client_id; ga_info.shpt = shpt; if (dcm_cid == "undefined" \|\| dcm_cid == "undefined.undefined" \|\| dcm_cid == "null") { dcm_cid = ""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50145	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:30 UTC	1991	OUT	GET /content/dam/mtb-web/images/mtb_logo_white.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:30 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3639 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 12 Oct 2022 17:21:17 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "e37-5ead99ed33d40" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 10a23502057a5449ee9e08eab6e9c0d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: uRJ5VVep5QdNtAvC4MibL3GoZ_oM-aQDlGFsXgMEHv2u281ANGnWGQ== Age: 3 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:30 UTC	3639	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 30 2e 39 20 34 35 2e 35 34 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 34 2e 39 2c 34 2e 33 34 48 30 76 2d 32 63 2e 33 2c 30 2c 2e 36 2d 2e 31 2e 39 2d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 240.9 45.54"><defs><style>.cls-1{fill:#fff;fill-rule:evenodd;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M4.9,4.34H0v-2c.3,0,.6-.1.9-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50146	34.67.98.25	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:31 UTC	588	OUT	POST /v1/p HTTP/1.1 Host: aiq-in.mtb.com Connection: keep-alive Content-Length: 1054 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:31 UTC	1054	OUT	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 33 2d 31 34 54 30 30 3a 35 37 3a 32 39 2e 36 36 34 5a 22 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 33 65 63 32 61 34 30 39 2d 64 32 61 33 2d 34 39 66 38 2d 62 64 36 35 2d 30 35 65 38 62 38 37 34 33 32 38 63 22 2c 22 74 79 70 65 22 3a 22 70 61 67 65 22 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 70 61 74 68 22 3a 22 2f 70 65 72 73 6f 6e 61 6c 2f 6f 6e 6c 69 6e 65 2d 61 6e 64 2d 6d 6f 62 69 6c 65 2e 68 74 6d 6c 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 65 61 72 63 68 22 3a 22 22 2c 22 74 69 74 6c 65 22 3a 22 4f 6e 6c 69 6e 65 20 26 20 4d 6f 62 69 6c 65 20 42 61 6e 6b 69 6e 67 20 53 65 72 76 69 63 65 73 20 7c 20 4d 26 54 20 Data Ascii: {"timestamp":"2024-03-14T00:57:29.664Z","integrations":{},"anonymousId":"3ec2a409-d2a3-49f8-bd65-05e8b874328c","type":"page","properties":{"path":"/personal/online-and-mobile.html","referrer":"","search":"","title":"Online & Mobile Banking Services \| M&T
2024-03-14 00:57:31 UTC	377	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 16 Connection: close Access-Control-Allow-Headers: Content-Type,Authorization Access-Control-Allow-Origin: * Access-Control-Max-Age: 900 X-Request-Id: ee3919fd-8781-4e93-a647-812c61081a63 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-03-14 00:57:31 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50152	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:31 UTC	1985	OUT	GET /personal-banking/online-mobile-services HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:31 UTC	810	IN	HTTP/1.1 200 OK Content-Type: text/html;charset=utf-8 Content-Length: 151069 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:26 GMT ETag: "24e1d-6139294d9d519" Last-Modified: Wed, 13 Mar 2024 22:49:03 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 33aae203c47fd9e0f18a8f3f6d37fbfc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: BFiwgDrMO5YdXE4OyplHD1J-g8v8ar9p7Os_YCtgFnBeGxNeymy33g== Age: 5 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:31 UTC	15574	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 09 3c 74 69 74 6c 65 3e 4f 6e 6c 69 6e 65 20 26 61 6d 70 3b 20 4d 6f 62 69 6c 65 20 42 61 6e 6b 69 6e 67 20 53 65 72 76 69 63 65 73 20 20 7c 20 4d 26 61 6d 70 3b 54 20 42 61 6e 6b 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 6e 72 6f 6c 6c 20 69 6e 20 4d 26 61 6d 70 3b 54 20 42 61 6e 6b 26 23 33 39 3b 73 20 4f 6e 6c 69 6e 65 20 26 61 6d 70 3b 20 4d 6f 62 69 6c 65 20 42 61 6e 6b 69 6e 67 20 73 65 72 76 69 63 65 73 20 74 6f 20 65 61 73 69 6c 79 20 61 6e 64 20 63 6f 6e 76 65 6e 69 65 6e 74 6c 79 20 6d 61 6e Data Ascii: <!DOCTYPE HTML><html><head><meta charset="UTF-8"/><title>Online & Mobile Banking Services \| M&T Bank</title><meta name="description" content="Enroll in M&T Bank's Online & Mobile Banking services to easily and conveniently man
2024-03-14 00:57:31 UTC	16384	IN	Data Raw: 2e 33 37 20 32 38 20 31 34 20 32 38 7a 22 2f 3e 0a 09 09 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 36 20 32 36 76 37 2e 35 63 30 20 31 2e 33 38 2d 35 2e 33 37 20 32 2e 35 2d 31 32 20 32 2e 35 53 32 20 33 34 2e 38 38 20 32 20 33 33 2e 35 56 32 36 22 2f 3e 0a 09 09 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 36 20 33 33 76 37 2e 35 63 30 20 31 2e 33 38 2d 35 2e 33 37 20 32 2e 35 2d 31 32 20 32 2e 35 53 32 20 34 31 2e 38 38 20 32 20 34 30 2e 35 56 33 33 22 2f 3e 0a 09 09 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 36 20 34 32 76 37 2e 35 63 30 20 31 2e 33 38 2d 35 2e 33 37 20 32 2e 35 2d 31 32 20 32 2e 35 53 32 20 35 30 2e 38 38 20 32 20 34 39 2e 35 56 34 32 22 2f 3e 0a 09 09 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 36 20 34 38 76 37 2e 35 63 30 20 Data Ascii: .37 28 14 28z"/> <path d="M26 26v7.5c0 1.38-5.37 2.5-12 2.5S2 34.88 2 33.5V26"/> <path d="M26 33v7.5c0 1.38-5.37 2.5-12 2.5S2 41.88 2 40.5V33"/> <path d="M26 42v7.5c0 1.38-5.37 2.5-12 2.5S2 50.88 2 49.5V42"/> <path d="M26 48v7.5c0
2024-03-14 00:57:31 UTC	22	IN	Data Raw: 2e 35 33 33 32 37 30 36 2c 35 2e 39 30 39 36 35 36 36 32 20 43 35 Data Ascii: .5332706,5.90965662 C5
2024-03-14 00:57:31 UTC	788	IN	Data Raw: 39 2e 35 33 32 37 32 30 36 2c 34 2e 33 32 30 39 37 36 35 33 20 35 39 2e 30 36 35 39 34 37 32 2c 33 2e 38 32 33 39 34 37 34 34 20 35 37 2e 35 37 30 34 37 35 34 2c 33 2e 38 32 33 37 35 34 35 37 20 43 34 30 2e 30 39 33 37 38 38 33 2c 33 2e 38 32 32 35 39 37 33 34 20 32 32 2e 36 31 37 32 38 34 34 2c 33 2e 38 32 32 34 30 34 34 37 20 35 2e 31 34 30 37 38 30 35 37 2c 33 2e 38 32 33 37 35 34 35 37 20 43 33 2e 36 39 33 31 35 39 35 35 2c 33 2e 38 32 33 39 34 37 34 34 20 33 2e 32 31 32 30 38 35 38 39 2c 34 2e 33 33 33 38 39 38 39 20 33 2e 32 31 31 39 30 32 35 35 2c 35 2e 38 36 33 31 37 34 36 36 20 43 33 2e 32 31 30 39 38 35 38 37 2c 32 38 2e 37 37 34 33 34 34 37 20 33 2e 32 31 30 39 38 35 38 37 2c 35 31 2e 36 38 35 35 31 34 38 20 33 2e 32 31 31 39 30 32 35 35 2c 37 Data Ascii: 9.5327206,4.32097653 59.0659472,3.82394744 57.5704754,3.82375457 C40.0937883,3.82259734 22.6172844,3.82240447 5.14078057,3.82375457 C3.69315955,3.82394744 3.21208589,4.3338989 3.21190255,5.86317466 C3.21098587,28.7743447 3.21098587,51.6855148 3.21190255,7
2024-03-14 00:57:31 UTC	16384	IN	Data Raw: 34 2e 33 37 30 38 34 36 37 20 43 36 32 2e 34 36 37 35 33 32 35 2c 36 37 2e 37 36 35 31 38 36 39 20 36 32 2e 34 36 37 35 33 32 35 2c 37 31 2e 31 35 39 33 33 34 34 20 36 32 2e 34 36 35 33 36 33 32 2c 37 34 2e 35 35 33 36 37 34 36 20 43 36 32 2e 34 36 33 33 34 36 35 2c 37 37 2e 32 39 31 30 39 35 36 20 36 31 2e 35 31 31 38 33 32 37 2c 37 38 2e 36 39 37 31 32 36 37 20 35 39 2e 30 34 31 33 38 30 31 2c 37 39 2e 36 33 32 35 35 32 20 43 35 39 2e 30 30 32 33 32 39 36 2c 37 39 2e 36 34 37 34 30 33 31 20 35 38 2e 39 37 37 32 31 32 35 2c 37 39 2e 37 30 33 31 34 32 39 20 35 38 2e 39 34 35 38 36 32 31 2c 37 39 2e 37 33 39 39 38 31 33 20 4c 33 2e 39 34 35 30 36 33 32 2c 37 39 2e 37 33 39 39 38 31 33 20 43 33 2e 33 36 39 39 33 38 31 38 2c 37 39 2e 34 37 32 38 35 34 37 20 Data Ascii: 4.3708467 C62.4675325,67.7651869 62.4675325,71.1593344 62.4653632,74.5536746 C62.4633465,77.2910956 61.5118327,78.6971267 59.0413801,79.632552 C59.0023296,79.6474031 58.9772125,79.7031429 58.9458621,79.7399813 L3.9450632,79.7399813 C3.36993818,79.4728547
2024-03-14 00:57:31 UTC	16384	IN	Data Raw: 2e 35 56 31 39 2e 35 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f 3e 0a 0a 09 09 09 3c 70 61 74 68 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 36 22 20 64 3d 22 4d 38 20 32 37 2e 32 56 32 37 2e 32 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f 3e 0a 09 09 09 3c 70 61 74 68 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 36 22 20 64 3d 22 4d 31 30 20 32 37 2e 32 56 32 37 2e 32 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f 3e 0a 09 09 09 3c 70 61 74 68 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 36 22 20 64 3d 22 4d 31 39 2e 35 20 32 37 2e 32 56 32 37 2e 32 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 73 71 75 61 72 65 22 2f 3e 0a 09 09 09 3c 70 61 74 68 Data Ascii: .5V19.5" stroke-linecap="square"/><path stroke-width="6" d="M8 27.2V27.2" stroke-linecap="square"/><path stroke-width="6" d="M10 27.2V27.2" stroke-linecap="square"/><path stroke-width="6" d="M19.5 27.2V27.2" stroke-linecap="square"/><path
2024-03-14 00:57:31 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 61 75 74 6f 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 0a 0a 20 20 20 20 0a 3c 2f 73 74 79 6c 65 3e 3c 2f 64 69 76 3e 0a 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 73 74 79 6c 65 3e 0a 0a 20 20 20 20 20 20 20 20 73 65 63 74 69 6f 6e 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 74 79 70 65 3d 22 73 65 63 74 69 6f 6e 22 5d 20 3e 20 2a 5b 64 61 74 61 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 22 62 73 5f 73 65 63 74 69 6f 6e 2d 36 38 34 36 30 31 35 33 30 22 5d 5b 63 6c 61 73 73 2a 3d 22 62 67 2d 22 5d 3a 62 65 66 6f 72 65 20 7b 0a Data Ascii: background-size: auto 100%; } } </style></div> </div></div><style> section[data-component-type="section"] > [data-component-id="bs_section-684601530"][class="bg-"]:before {
2024-03-14 00:57:31 UTC	15596	IN	Data Raw: 6c 65 3d 22 62 74 6e 2d 70 72 69 6d 61 72 79 22 20 64 61 74 61 2d 74 61 67 2d 74 79 70 65 3d 22 6f 70 65 6e 41 63 63 6f 75 6e 74 43 74 61 22 3e 0a 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 2d 66 6c 65 78 20 20 20 20 22 3e 0a 09 09 0a 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 62 74 6e 2d 74 65 78 74 20 22 3e 45 6e 72 6f 6c 6c 20 4e 6f 77 3c 2f 73 70 61 6e 3e 0a 09 3c 2f 73 70 61 6e 3e 0a 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 72 75 64 53 65 6c 65 63 74 6f 72 43 6c 61 73 73 28 64 6f Data Ascii: le="btn-primary" data-tag-type="openAccountCta"><span class="d-flex "><span class="btn-text ">Enroll Now</span></span> <script> window.addEventListener("load",function(){ try { crudSelectorClass(do
2024-03-14 00:57:31 UTC	16384	IN	Data Raw: 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 69 64 3d 22 62 73 5f 63 6f 6c 75 6d 6e 2d 37 32 34 38 32 36 32 37 31 22 20 69 64 3d 22 62 73 5f 63 6f 6c 75 6d 6e 2d 37 32 34 38 32 36 32 37 31 22 20 64 61 74 61 2d 63 6f 6c 2d 76 61 72 69 61 6e 74 3d 22 63 6f 6c 73 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 66 6c 65 78 2d 6d 64 2d 6e 6f 77 72 61 70 20 20 20 20 20 20 20 22 20 64 61 74 61 2d 72 6f 77 2d 66 6f 72 3d 22 62 73 5f 63 6f 6c 75 6d 6e 2d 37 32 34 38 32 36 32 37 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 75 6c 6c 20 20 20 20 20 63 6f 6c 20 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 Data Ascii: -component-id="bs_column-724826271" id="bs_column-724826271" data-col-variant="cols"> <div class="row flex-md-nowrap " data-row-for="bs_column-724826271"> <div class="null col ">
2024-03-14 00:57:31 UTC	12052	IN	Data Raw: 6d 61 67 65 73 2f 65 68 6c 2e 70 6e 67 22 2f 3e 3c 73 70 61 6e 3e 45 71 75 61 6c 20 48 6f 75 73 69 6e 67 20 4c 65 6e 64 65 72 2e 20 4d 65 6d 62 65 72 20 46 44 49 43 2e 20 42 61 6e 6b 20 4e 4d 4c 53 20 23 33 38 31 30 37 36 2e 3c 2f 73 70 61 6e 3e 20 26 63 6f 70 79 3b 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6a 73 2d 74 68 69 73 59 65 61 72 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 3e 20 4d 26 54 20 42 61 6e 6b 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 Data Ascii: mages/ehl.png"/><span>Equal Housing Lender. Member FDIC. Bank NMLS #381076.</span> ©<span class="js-thisYear"></span><span> M&T Bank. All rights reserved.</span></p> </div> </div> <div clas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50153	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:31 UTC	1980	OUT	GET /content/dam/mtb-web/images/ehl.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:31 UTC	793	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8289 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 17 Feb 2021 16:35:20 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "2061-5bb8ace070200" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f458ab1245bb4f257969c1da8e708f88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: AgGFzhQbx2aYw0TmxktCIpoobi3Xx9k2FRVhnjdbCSKzt0PFjn-EpQ== Age: 4 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:31 UTC	6396	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 af 00 00 01 f7 08 06 00 00 00 95 54 b6 9a 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 9c ed dd 41 6e 1c 57 96 2e e0 88 82 e7 d5 3b 10 77 20 7a 05 66 ad c0 f4 0a 8a b5 02 4b 2b b0 b4 02 51 2b 10 3d eb 99 a8 15 88 1c f6 e0 41 d4 f0 cd c4 d9 9b 3d 13 e8 49 03 0d 44 e3 da 27 dd 29 59 a4 32 99 91 91 e7 44 7c 1f 50 b3 2a 15 95 49 31 7f 9e b8 f7 fc fd 30 0c 1d 00 e3 eb fb fe df 86 61 f8 cd 4b 0b 30 9e bf 79 2d 01 c6 d5 42 6b df f7 97 5d d7 fd ff be ef 5f 78 79 01 c6 63 f2 0a 30 a2 be ef 4f bb ae bb e8 ba ee ef 6b 7f ea 75 d7 75 67 c3 30 7c f2 5a 03 ec c6 e4 15 60 04 31 6d 3d ef ba ee ed 17 c1 b5 f9 a1 eb ba 9b be ef cf bc d6 00 bb 31 79 05 d8 51 df f7 27 31 6d Data Ascii: PNGIHDRTpHYs.#.#x?v IDATxAnW.;w zfK+Q+=A=ID')Y2D\|P*I10aK0y-Bk]_xyc0Okuug0\|Z`1m=1yQ'1m
2024-03-14 00:57:31 UTC	1893	IN	Data Raw: 2b 00 c0 ba ff 28 b4 b2 f4 63 64 c4 d1 8c 16 5e 43 85 f5 59 ed b0 f0 71 d7 75 ff 99 e0 6b 01 00 d8 d6 7f 0f c3 d0 8e 6c 3e 4f 9e bb ee f6 71 b4 74 d4 f0 1a 23 e1 51 d3 f5 88 da 41 e1 7f 0c c3 f0 2c e9 d7 07 00 b0 b1 61 18 ce bb ae 6b 03 b9 eb a4 af da 8b c7 b6 68 3d 64 ec c9 eb ea 85 cc f6 22 b6 75 5e c7 63 ac 67 00 00 c8 a2 85 c3 61 18 4e 12 de 3d ba 8e 4c 38 ba d1 c3 6b c8 72 7c a0 7d 0d 3f b5 69 eb 58 37 dc 00 00 b2 89 73 a5 df 27 b9 7f b4 97 e3 02 2b 7b 09 af 31 22 3e f4 e3 f9 76 90 f9 68 18 86 cb 03 7f 1d 00 00 7b 17 c7 37 4f 12 14 48 9d ed 73 68 b8 af c9 6b 7b 01 2f 0e 74 13 ae a5 fd 7f b5 83 cc a6 ad 00 c0 92 b4 ec 13 f7 7b fe 71 a0 12 a9 5f f7 3d 38 dc 5b 78 0d 53 1f 1f b8 8e b3 ad 17 13 fe 7f 02 00 a4 12 f7 7c 8e 27 1e 24 de 4e f1 e4 7d af e1 35 Data Ascii: +(cd^CYqukl>Oqt#QA,akh=d"u^cgaN=L8kr\|}?iX7s'+{1">vh{7OHshk{/t{q_=8[xS\|'$N}5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50154	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:31 UTC	2039	OUT	GET /content/dam/mtb-web/wcm-asset/documents/html/homepage/images/assets/icon-phone-dark-green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:31 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1003 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 04 May 2022 18:19:30 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "3eb-5de33aa92d080" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 45c692e896f6d5351f0f0a998ed4f588.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: e3KlGRg0DC30zosvZSBKhPOvFBvQ26uprPW3zpCtFeU2w2DhjfheCQ== Age: 4 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:31 UTC	1003	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50161	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	951	OUT	GET /tr/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377849513&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=431bc3&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=9110447352330543%2C3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:32 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=92, rtx=0, c=10, mss=1274, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:57:32 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50150	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	507	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fhome-page&t=1710377817055&v=1710377846067&H=96735d5e9df8c047dcec5877&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=1325&N=4 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:32 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:32 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50151	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	505	OUT	GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377846062&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1157&N=5&P=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:32 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:32 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50167	18.210.229.244	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	538	OUT	GET /is HTTP/1.1 Host: 18.210.229.244 Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:32 UTC	405	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:57:32 GMT access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: Accept, Content-Type, x-requested-with, X-Custom-Header x-application-context: application:prod:8080 content-type: text/plain;charset=utf-8 content-length: 32 x-envoy-upstream-service-time: 2 server: istio-envoy connection: close
2024-03-14 00:57:32 UTC	32	IN	Data Raw: 54 4a 51 52 48 66 54 37 6a 53 47 51 6f 4c 66 31 35 4b 58 41 53 50 77 6a 59 63 43 64 4e 78 56 76 Data Ascii: TJQRHfT7jSGQoLf15KXASPwjYcCdNxVv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50165	34.66.3.160	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	358	OUT	GET /mtb/hash-check HTTP/1.1 Host: rl.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:32 UTC	327	IN	HTTP/1.1 404 Not Found Date: Thu, 14 Mar 2024 00:57:32 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 15 Connection: close Vary: Origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15724800; includeSubDomains Access-Control-Allow-Methods: * Access-Control-Allow-Credentials: true
2024-03-14 00:57:32 UTC	15	IN	Data Raw: 68 61 73 68 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: hash not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50169	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	2019	OUT	GET /content/dam/mtb-web/images/online-and-mobile-services/icon-move-money.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:32 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1616 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "650-5c06c76a3cac0" Last-Modified: Tue, 20 Apr 2021 19:29:23 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8e923e72a50f75048382f193bf6c8c4e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: C-eTqVDVMYVkhBDLCF6x9nwutMXGwC66hqoQ-qhfCfaKxVwQY2BDGw== Age: 5 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:32 UTC	1616	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 36 34 70 78 22 20 68 65 69 67 68 74 3d 22 36 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 69 63 6f 6e 5f 6d 6f 76 65 20 6d 6f 6e 65 79 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 5f 6d 6f 76 65 2d 6d 6f 6e 65 79 22 20 73 74 72 6f 6b 65 3d 22 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="64px" height="64px" viewBox="0 0 64 64" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>icon_move money</title> <g id="icon_move-money" stroke="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50166	104.244.42.131	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	1022	OUT	GET /i/adsct?bci=3&eci=2&event_id=e93ed9a0-d247-4b43-9df0-5837f620e6d0&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=19df694f-4070-4cbc-b3b1-7531989d2106&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_5UBAyvKoxs+QXpDa5ElW/A=="
2024-03-14 00:57:32 UTC	401	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:57:31 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: cdd31dbfe64b4c47 strict-transport-security: max-age=631138519 x-response-time: 68 x-connection-hash: 90b25bf433609b2b595778bf6516496f2b736e9491fe24ca3dba0c3cc909aa10 connection: close
2024-03-14 00:57:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50164	142.251.40.226	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	1447	OUT	GET /td/rul/948713993?random=1710377850003&cv=11&fst=1710377850003&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
2024-03-14 00:57:32 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:57:32 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-14 00:57:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50168	23.20.189.8	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	1246	OUT	GET /m2/mtb/mbox/json?mbox=target-global-mbox&mboxSession=982bceee196b4711901768c5d35728f4&mboxPC=982bceee196b4711901768c5d35728f4.34_0&mboxPage=83fb3c1c290c4447be6936716aaf9742&mboxRid=fced150c6e93476e9906fecf9771b7df&mboxVersion=1.8.3&mboxCount=1&mboxTime=1710381446412&mboxHost=www3.mtb.com&mboxURL=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&mboxReferrer=&browserHeight=907&browserWidth=1280&browserTimeOffset=60&screenHeight=1024&screenWidth=1280&colorDepth=24&devicePixelRatio=1&screenOrientation=landscape&webGLRenderer=ANGLE%20(Google%2C%20Vulkan%201.3.0%20(SwiftShader%20Device%20(Subzero)%20(0x0000C0DE))%2C%20SwiftShader%20driver)&at_property=f7ba4290-5c00-8608-2ad1-5fc4576548bf&zipCodeCookie=&geoRegionCookie=&entity.categoryId=personal-banking%2Conline-mobile-services&user.categoryId=personal-banking%2Conline-mobile-services&loginClickedCookie=&mbox3rdPartyId= HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:32 UTC	544	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:57:32 GMT content-type: application/json;charset=UTF-8 content-length: 2362 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding x-request-id: fced150c6e93476e9906fecf9771b7df pragma: no-cache cache-control: no-cache timing-allow-origin: * strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close
2024-03-14 00:57:32 UTC	2362	IN	Data Raw: 7b 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 39 38 32 62 63 65 65 65 31 39 36 62 34 37 31 31 39 30 31 37 36 38 63 35 64 33 35 37 32 38 66 34 22 2c 22 74 6e 74 49 64 22 3a 22 39 38 32 62 63 65 65 65 31 39 36 62 34 37 31 31 39 30 31 37 36 38 63 35 64 33 35 37 32 38 66 34 2e 33 34 5f 30 22 2c 22 6f 66 66 65 72 73 22 3a 5b 7b 22 72 65 73 70 6f 6e 73 65 54 6f 6b 65 6e 73 22 3a 7b 22 65 78 70 65 72 69 65 6e 63 65 2e 69 64 22 3a 22 30 22 2c 22 61 63 74 69 76 69 74 79 2e 6e 61 6d 65 22 3a 22 43 6f 6d 6d 65 72 63 69 61 6c 20 53 63 72 69 70 74 22 2c 22 67 65 6f 2e 63 69 74 79 22 3a 22 6e 65 77 20 79 6f 72 6b 22 2c 22 61 63 74 69 76 69 74 79 2e 69 64 22 3a 22 31 33 37 34 36 30 22 2c 22 67 65 6f 2e 73 74 61 74 65 22 3a 22 6e 65 77 20 79 6f 72 6b 22 2c 22 65 78 70 65 72 Data Ascii: {"sessionId":"982bceee196b4711901768c5d35728f4","tntId":"982bceee196b4711901768c5d35728f4.34_0","offers":[{"responseTokens":{"experience.id":"0","activity.name":"Commercial Script","geo.city":"new york","activity.id":"137460","geo.state":"new york","exper

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50147	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	2014	OUT	GET /content/dam/mtb-web/images/online-and-mobile-services/icon_coins.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:32 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2085 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "825-5c06c76854640" Last-Modified: Tue, 20 Apr 2021 19:29:21 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 50670fc09f8465be7ae4adcf6e33ab7a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: ldL_rHRxLeG1b-jdMQANdS7SZMsXAddqd34NX4JgzwNRMdiYbN6EXg== Age: 4 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:32 UTC	2085	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 36 34 70 78 22 20 68 65 69 67 68 74 3d 22 36 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 69 63 6f 6e 5f 63 6f 69 6e 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 5f 63 6f 69 6e 73 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 74 72 6f Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="64px" height="64px" viewBox="0 0 64 64" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>icon_coins</title> <g id="icon_coins" stroke="none" stro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50160	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	1061	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377849513&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=431bc3&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=9110447352330543%2C3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger;navigation-source, event-source Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:32 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:57:32 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:57:32 UTC	1449	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f
2024-03-14 00:57:32 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50149	108.139.29.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	2016	OUT	GET /content/dam/mtb-web/images/online-and-mobile-services/icon_devices.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:32 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2392 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "958-5c06c76948880" Last-Modified: Tue, 20 Apr 2021 19:29:22 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c1685d59e35fdb859ab8a1f97feb5652.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: U53HholkZU1Ier-YXimyLdUOJguogjgBX0MczP8luGeds9RKB86v1A== Age: 4 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:32 UTC	2392	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 36 34 70 78 22 20 68 65 69 67 68 74 3d 22 36 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 69 63 6f 6e 5f 64 65 76 69 63 65 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 69 63 6f 6e 5f 64 65 76 69 63 65 73 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="64px" height="64px" viewBox="0 0 64 64" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>icon_devices</title> <g id="icon_devices" stroke="none"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50148	52.141.217.134	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	385	OUT	GET /client/v3.1/web/wup?cid=mufasa HTTP/1.1 Host: wup-5d65a0ab.us.v2.we-stats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:32 UTC	273	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json Content-Length: 31 Connection: close date: Thu, 14 Mar 2024 00:57:31 GMT server: uvicorn allow: POST cache-control: no-cache, no-store pragma: no-cache tail-id: 4d4c89e5-25bd-4ae7-9464-22d05ccf8e74
2024-03-14 00:57:32 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50162	104.244.42.197	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	1001	OUT	GET /i/adsct?bci=3&eci=2&event_id=e93ed9a0-d247-4b43-9df0-5837f620e6d0&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=19df694f-4070-4cbc-b3b1-7531989d2106&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=08022923-6d5c-4a53-a3f5-ff7758503d68
2024-03-14 00:57:32 UTC	393	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:57:31 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: ce19fa216dbb17ac strict-transport-security: max-age=0 x-response-time: 75 x-connection-hash: 490847d01b3f6e640610b70e9db2b8cea5ee7faddd103fb436d2d72f122c7e0e connection: close
2024-03-14 00:57:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50155	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	7706	OUT	GET /ct?id=40173&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1710377849374&hl=1&op=0&ag=300509663&rand=039167918211825692209190281822906515871721721876095212061057089825222820180102626127&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=%7B%7D&cri=skuHn8DrGl&pto=4242&ver=59&gac=1166952759.1710377814&mei=&ap=&fe=0&duid=1.1710377811.4AAk1vNijWsJXg6B&suid=1.1710377811.LyfUeGgwomjj9ERX&tuid=1.1710377849.m4DuZcqmgIggfo8U&fbc=1.1710377812856.447036686&gtm=WyJwYWdlX3ZpZXciXQ%3D%3D&it=66%2C3082%2C221&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=bec920d0e19d11eebe7167b27d74fe06&spa=1&urid=0&ab=&sck=- HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:32 UTC	244	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/javascript Date: Thu, 14 Mar 2024 00:57:32 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close Transfer-Encoding: chunked
2024-03-14 00:57:32 UTC	935	IN	Data Raw: 65 36 37 0d 0a 74 79 70 65 6f 66 20 5f 5f 63 74 63 67 5f 63 74 5f 34 30 31 37 33 5f 65 78 65 63 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 5f 5f 63 74 63 67 5f 63 74 5f 34 30 31 37 33 5f 65 78 65 63 28 7b 22 74 63 22 3a 22 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 66 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 35 30 65 66 38 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 Data Ascii: e67typeof __ctcg_ct_40173_exec === 'function' && __ctcg_ct_40173_exec({"tc":"37dfbd8ee84e00126beec432ed4f8f9f9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b940263007294
2024-03-14 00:57:32 UTC	2358	IN	Data Raw: 36 63 38 32 63 32 65 38 66 34 37 61 39 63 65 36 66 35 34 64 36 37 33 65 63 36 61 39 35 32 34 37 63 66 62 63 30 63 35 39 31 34 66 66 65 31 65 65 37 34 61 65 32 38 63 34 66 38 34 30 66 64 62 37 37 66 63 31 32 30 66 39 36 34 63 62 31 37 61 64 34 30 63 35 61 32 32 65 63 36 31 62 32 31 65 32 61 37 39 37 36 34 33 38 33 61 36 39 31 64 32 62 30 63 35 64 31 37 61 39 65 36 38 62 36 34 64 33 30 36 61 35 35 39 35 63 31 35 37 62 38 62 65 38 31 36 38 61 63 36 35 63 37 35 61 61 61 61 64 35 61 38 62 64 37 32 63 33 65 61 65 35 66 63 38 35 66 66 61 38 66 39 34 61 34 64 33 34 66 65 34 31 39 38 62 32 35 64 36 39 38 33 34 30 36 33 31 64 64 66 36 35 34 66 36 64 37 65 62 34 32 37 62 64 37 63 37 32 63 62 65 62 63 31 36 30 39 36 36 39 64 37 32 35 38 39 62 37 32 64 63 64 62 38 30 Data Ascii: 6c82c2e8f47a9ce6f54d673ec6a95247cfbc0c5914ffe1ee74ae28c4f840fdb77fc120f964cb17ad40c5a22ec61b21e2a79764383a691d2b0c5d17a9e68b64d306a5595c157b8be8168ac65c75aaaad5a8bd72c3eae5fc85ffa8f94a4d34fe4198b25d698340631ddf654f6d7eb427bd7c72cbebc1609669d72589b72dcdb80
2024-03-14 00:57:32 UTC	406	IN	Data Raw: 65 65 32 33 37 37 31 31 61 30 65 63 65 30 62 34 32 61 36 63 34 62 62 35 61 30 33 39 61 36 62 37 31 64 33 39 34 39 62 35 33 38 39 38 39 66 38 64 64 35 33 32 32 61 36 32 32 65 34 34 34 33 39 30 37 64 65 34 34 32 32 36 33 63 37 38 66 34 37 31 32 64 65 39 34 66 31 64 63 65 33 61 65 30 31 62 65 37 39 66 35 32 63 63 37 32 66 63 31 39 33 31 30 39 35 61 65 65 61 32 31 33 36 65 38 38 32 30 64 22 7d 2c 22 22 2c 7b 22 62 6e 67 22 3a 7b 22 61 75 64 22 3a 5b 7b 22 63 6c 69 65 6e 74 49 64 22 3a 22 33 33 31 30 30 30 33 31 32 22 2c 22 74 79 70 65 22 3a 22 62 69 6e 67 22 7d 5d 7d 2c 22 66 62 6b 22 3a 7b 22 61 75 64 22 3a 5b 7b 22 63 6c 69 65 6e 74 49 64 22 3a 22 31 39 39 34 35 33 34 36 36 37 35 32 34 38 38 38 22 2c 22 74 79 70 65 22 3a 22 66 61 63 65 62 6f 6f 6b 22 7d 5d Data Ascii: ee237711a0ece0b42a6c4bb5a039a6b71d3949b538989f8dd5322a622e4443907de442263c78f4712de94f1dce3ae01be79f52cc72fc1931095aeea2136e8820d"},"",{"bng":{"aud":[{"clientId":"331000312","type":"bing"}]},"fbk":{"aud":[{"clientId":"1994534667524888","type":"facebook"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50159	76.13.32.146	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	948	OUT	GET /sp.pl?a=10000&d=Thu%2C%2014%20Mar%202024%2000%3A57%3A29%20GMT&n=-1&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
2024-03-14 00:57:32 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:32 GMT Expires: Thu, 14 Mar 2024 00:57:32 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU; Expires=Fri, 14 Mar 2025 06:57:32 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-14 00:57:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50157	76.13.32.146	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	885	OUT	GET /sp.pl?a=10000&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10087193&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&tagmgr=tealium HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
2024-03-14 00:57:32 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:32 GMT Expires: Thu, 14 Mar 2024 00:57:32 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU; Expires=Fri, 14 Mar 2025 06:57:32 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-14 00:57:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50158	76.13.32.146	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:32 UTC	895	OUT	GET /sp.pl?a=10000&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
2024-03-14 00:57:32 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:32 GMT Expires: Thu, 14 Mar 2024 00:57:32 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: image/gif Accept-Ranges: bytes Content-Length: 43 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU; Expires=Fri, 14 Mar 2025 06:57:32 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-03-14 00:57:32 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff ff ff ff 21 f9 04 04 14 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50173	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:33 UTC	892	OUT	GET /tr/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377850381&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=8d7516&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:33 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=92, rtx=0, c=10, mss=1274, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:57:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50171	142.251.40.130	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:33 UTC	1323	OUT	GET /pagead/viewthroughconversion/948713993/?random=1710377850003&cv=11&fst=1710377850003&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
2024-03-14 00:57:33 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:57:33 UTC	549	IN	Data Raw: 39 31 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 91c(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-14 00:57:33 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-14 00:57:33 UTC	538	IN	Data Raw: 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 33 37 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 62 30 76 38 37 34 30 31 30 37 38 31 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 33 2e 6d 74 62 2e 63 6f 6d 25 32 46 70 65 72 73 6f 6e 61 6c 2d 62 61 6e 6b 69 6e 67 25 32 46 6f 6e 6c 69 6e 65 2d 6d 6f 62 69 6c 65 2d 73 65 72 76 69 63 65 73 5c 78 32 36 66 72 6d 5c Data Ascii: 1\x26fst\x3d1710374400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43b0v874010781za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services\x26frm\
2024-03-14 00:57:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50192	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1002	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377850381&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=8d7516&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:34 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:57:34 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:57:34 UTC	1449	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f
2024-03-14 00:57:34 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50188	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	2005	OUT	GET /content/dam/mtb-web/images/woman-laptop-hero-pink-shirt.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:34 UTC	774	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 137918 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:27 GMT ETag: "21abe-5be60c5c96000" Last-Modified: Thu, 25 Mar 2021 18:42:08 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish X-Cache: Hit from cloudfront Via: 1.1 f391dfb0806f29cccc5f1df3e1ae836e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 9MYQs48GDvUzVgwLWFZL_hVmuwnnP78-RRKkoeY1ULxFteX3JjSBvg== Age: 7 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:34 UTC	15610	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2c 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<,http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xm
2024-03-14 00:57:34 UTC	16384	IN	Data Raw: e7 57 dd a3 ae bd 51 a8 c2 9d da d5 d3 53 a4 4a a7 72 4e 5a 35 a7 56 6d 8a af 2b 75 75 4b 42 eb 16 23 e9 b4 b5 5a 74 63 51 ae 50 7f 22 e8 88 c5 d2 a8 23 19 53 66 55 63 46 d5 77 af 52 a2 54 5e 95 db a0 d4 c4 f6 75 26 ae 36 63 c1 bb 89 2d de 8d f8 19 ea b7 c4 7a 2e 3a 1b a5 25 da a9 ea 5e 5b bd 4f 3f 4f 57 11 da c4 70 ed df 7d 97 5f 03 9d 76 91 9d e8 42 70 69 69 4f b2 a4 d5 c5 2c 8a c6 dd 1b ab 4f 4a 12 2e a8 dc 77 17 4f 34 6f 56 3a 3c 36 4a b9 6a 56 a6 fd 51 75 46 3a 8d 39 5e f7 c5 55 c6 ca 8f 83 b7 37 d5 d3 54 7a bf 9e fc 3c 1f d5 cf e5 e5 a9 e9 6d 9e 87 93 18 84 41 46 51 49 51 85 6d 8b 6d 79 b2 0b 38 d6 ab 72 31 fb 91 35 67 2f b0 fb 33 2a de 16 05 a8 5a b6 9e 4e ab ea 4b 65 16 8e bc 27 7f 2f a5 fb 6f 13 1e d5 b7 3e c7 1b f2 82 bb f5 5e ca 75 75 8c 97 83 Data Ascii: WQSJrNZ5Vm+uuKB#ZtcQP"#SfUcFwRT^u&6c-z.:%^[O?OWp}_vBpiiO,OJ.wO4oV:<6JjVQuF:9^U7Tz<mAFQIQmmy8r15g/3*ZNKe'/o>^uu
2024-03-14 00:57:34 UTC	16384	IN	Data Raw: 4e 4d aa 78 14 62 04 aa b4 bc c0 37 45 55 b1 44 c5 a6 9b ea cc d5 8c db ff 00 81 1a 63 f1 08 89 75 2a 56 ab 92 fb 8d c7 3a a5 7d b7 a2 d8 e9 1c eb 99 91 15 4f 36 f7 3a c7 3e a2 9d c8 ea b5 35 2b 8d 8f 43 ec eb 4a f6 4c e1 3b 91 b6 a1 ea 4e 6f f0 47 5e 6b 3d 47 d5 bd bf 6f 1a 31 93 b3 1f ab 37 1f 44 d9 df 97 1b 1e 82 f7 b1 71 73 f0 16 4e 7c 7b a7 2f c8 96 8d b6 6b c6 54 d7 93 e6 3f 6c f3 f0 f1 ee 64 59 8a f4 fa 97 6e 92 49 1e 7e bd 6e fc f5 ae 1e 1f b9 f9 4c 39 46 cd 8c af c9 a4 ad 5c f1 5e 66 27 58 e9 63 ea de c9 e6 33 79 6b 2a 19 96 e3 da a8 9c d7 99 e8 e2 ec 79 bb 99 5e d1 60 ab b1 93 92 54 85 54 13 5b a3 6e 6c b0 30 55 d4 ae 37 d9 35 a3 5e 29 04 d5 bb 76 ae 46 f4 a2 df 6a fe 57 d1 95 75 ba d6 36 b2 ef 5a d7 6e 81 16 d5 a8 3a 46 9a 24 06 a8 da fa 77 fd Data Ascii: NMxb7EUDcuV:}O6:>5+CJL;NoG^k=Go17DqsN\|{/kT?ldYnI~nL9F\^f'Xc3yky^`TT[nl0U75^)vFjWu6Zn:F$w
2024-03-14 00:57:34 UTC	16384	IN	Data Raw: 4e 2f c1 ad 53 2c 8c d7 da 78 8e 42 1c 87 19 8f 97 1d ee c1 77 af 09 2d 24 be d3 db c5 d9 af 0f 73 2a e7 43 6c b0 90 10 96 a0 64 f6 28 c3 76 44 64 90 12 da 41 5a a7 34 11 af ba a0 6c 8d 4a a9 22 3e 8a 79 9d c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 ad c0 00 00 00 20 00 08 00 00 08 0a 86 06 2c 0c 40 80 00 40 00 20 00 10 c0 80 00 43 03 10 20 00 10 Data Ascii: N/S,xBw-$s*Cld(vDdAZ4lJ">y ,@@ C
2024-03-14 00:57:34 UTC	16384	IN	Data Raw: cb 62 28 95 26 ba 16 08 94 b4 a8 57 27 3e ed 74 fb 0c d5 8e 54 a5 59 79 99 b5 a7 4b 8a 5e b4 25 4a ec de ac 72 eb d6 89 af b0 d3 31 fa 07 8d bc b2 38 dc 4b e9 d5 5c b3 6e 5f 6c 53 3e 8f 1f 51 f3 bb 99 6a dc 63 a5 4d b0 92 00 41 a2 ab 5c 9a 08 c6 ba 54 0f a6 1e 57 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 2b 70 00 00 00 60 40 00 00 02 20 28 00 08 Data Ascii: b(&W'>tTYyK^%Jr18K\n_lS>QjcMA\TWp+p`@ (
2024-03-14 00:57:34 UTC	16384	IN	Data Raw: 95 8a 57 1d 3c 86 2b 47 9f 42 a9 1d cc 8d b0 69 ea 59 0d 5c e3 b5 cb b1 17 bb b9 04 97 fe 24 74 f5 fd c6 3b fa af d7 70 8f f4 6d aa d1 28 47 f0 3e 9b e5 29 e6 dc b5 6a db 94 a5 b0 57 16 f6 4d b9 26 d1 5a 91 c7 cd bd ab f0 23 71 c3 cc 9e 92 75 31 5b 8e 7d 8e 4a 76 a6 ea f4 1a d7 8a c7 fb 87 d5 ea 4a 8e 7f 27 db 3b 6c c7 51 db 9a f0 5c ee 1b 84 9d e8 2d 7a af 14 72 ae ba e4 43 29 4e 29 3e 8d 3f b1 97 13 5f 4b c7 e4 23 7f 86 b6 a2 ea bb 3f 81 df f0 e3 67 cb e7 1c bc 5c 72 ee 7c 4f 3f 4e fc b8 76 25 db cd e1 be 9f 56 2f ef 2f 1f 6e 5e c8 fb b4 bb 2e e1 27 bf a5 7e 07 a6 c7 1d ca f0 1c b4 3e 9e 6b d3 43 cf d4 f9 76 9d 37 63 63 f7 db 46 7c 57 48 df c9 c3 6e 30 75 b5 2d e0 f6 33 8b 2a ad cc 7c 2c aa ca 1e 89 d3 55 b6 a6 6c 6e 54 ae 2b 23 b1 c6 4f b9 25 e9 7f 12 Data Ascii: W<+GBiY\$t;pm(G>)jWM&Z#qu1[}JvJ';lQ\-zrC)N)>?_K#?g\r\|O?Nv%V//n^.'~>kCv7ccF\|WHn0u-3*\|,UlnT+#O%
2024-03-14 00:57:34 UTC	16384	IN	Data Raw: 38 78 18 12 6b ba da 7f 11 91 9f 97 6f 1f 86 e2 e8 bf a3 1f b0 63 3e 55 b6 e7 09 c5 b8 35 f4 63 f6 0f 84 da a5 fe d9 c6 da 9f fa 4a 9f 02 e4 5d ab 90 c6 c0 8a ac 2d c6 9f 00 96 d6 69 e3 c7 68 20 8d 37 b3 a1 08 ba 24 8a 38 3c af 3b d9 16 aa 1a 9c bc 1f 3d ce ca 69 ae e3 97 7d ba f1 c3 c8 5e bd 2b d7 1e b5 3c fd 57 79 31 a2 e4 29 f1 32 d3 53 ea b7 60 c4 a5 a8 4c 6f b5 1a b2 a5 ab d6 37 35 1c ea 8f 2f 57 6e 29 3d 2a db 25 23 95 15 ab d3 e6 61 b8 c9 15 52 9a a3 08 d8 9f 81 51 66 0f 52 8d b1 9d 1a 7f 69 53 1e c3 f6 ff 00 94 fd 37 2c f1 a5 2a 5b c9 8f 6d 3a 77 2d 51 db d3 d6 57 0f 77 3b cb e8 ce 6f ea 26 7b 1e 17 d6 4f 23 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 8xkoc>U5cJ]-ih 7$8<;=i}^+<Wy1)2S`Lo75/Wn)=%#aRQfRiS7,[m:w-QWw;o&{O#
2024-03-14 00:57:34 UTC	16384	IN	Data Raw: b9 29 28 a4 b4 a0 46 eb 5c 95 e9 34 93 d0 0b d6 b3 6e d3 56 19 5c b7 91 71 ad 65 a1 59 5b c6 b5 dc ea f5 43 0d 77 30 b1 20 e2 99 a9 19 bd 3a 2a 76 6c ae 85 c6 75 ce e4 b9 7b 56 a0 f5 41 64 78 6e 73 dc ea 3d ca 0f 5f 13 97 55 e9 e7 87 8e cb f7 35 f9 4d fa 8c 3a 4e 5a 6d f3 d3 ad 5c fe f1 12 c7 43 1f dc 2e aa 3d d5 2a 78 ad c3 99 94 9f e6 fb ca 98 b3 1e 46 af f3 0d 4c 6d 86 6f 9e 85 31 b9 66 f9 84 65 1c c6 fa 8d 31 9b ca ae ec 6a 63 38 e6 68 ab b2 1a 31 9e 72 e8 c1 8c 56 6a 55 75 28 95 9a bc 74 03 5c b3 d2 61 71 8b ce 5d db 91 71 83 cd ff 00 98 0c 27 9d d2 a1 58 7e b9 78 81 84 b3 fa 54 26 30 79 89 f5 15 58 4f 29 74 64 69 ad e4 d7 a8 46 12 ca 54 dc 23 07 96 45 61 2c bd 02 a3 f5 55 d9 84 47 ea a9 d4 84 60 f2 ea b7 2a b0 fd 6f 4a 90 60 f2 5f 89 55 ae 59 1a ee Data Ascii: )(F\4nV\qeY[Cw0 :vlu{VAdxns=_U5M:NZm\C.=xFLmo1fe1jc8h1rVjUu(t\aq]q'X~xT&0yXO)tdiFT#Ea,UG`*oJ`_UY
2024-03-14 00:57:34 UTC	7620	IN	Data Raw: 33 22 a5 f9 77 3f 24 4a dc 42 84 61 07 39 3d b6 0b 6a 9c e6 db 6f c4 54 62 db a9 94 40 11 6f f2 b5 4d 98 8a cd e8 54 15 35 fb 80 6b b9 51 29 bf b4 a8 9d 42 36 58 96 b4 5a 16 2b 7b 08 d1 4f ea 50 a3 f7 2d 4e ef 11 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 15 01 50 Data Ascii: 3"w?$JBa9=joTb@oMT5kQ)B6XZ+{OP-NPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50184	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	2000	OUT	GET /content/dam/mtb-web/images/svg/icon_location_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:34 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 788 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:03:05 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "314-5da2fd0cd8040" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d3a2886dcf7e47b1e56baf628c69dc24.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: M0_0DV7Hl9x7ndl1spa_F_1C6lra78-EHjc77zCuYmhFrnubMn2Tow== Age: 6 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:34 UTC	788	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50179	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 5677 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:34 UTC	5677	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 66 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8f9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:57:34 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:34 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50182	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	961	OUT	GET /tr/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852348&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=1d9f67&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C9110447352330543%2C3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:34 UTC	468	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=92, rtx=0, c=10, mss=1274, tbw=3404, tp=-1, tpl=-1, uplat=130, ullat=130 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:57:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50189	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1071	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852348&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=1d9f67&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C9110447352330543%2C3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger=navigation-source Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:34 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:57:34 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:57:34 UTC	1449	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f
2024-03-14 00:57:34 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50186	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1991	OUT	GET /content/dam/mtb-web/images/mtb_logo_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648
2024-03-14 00:57:34 UTC	787	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 3642 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Wed, 12 Oct 2022 17:21:16 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "e3a-5ead99ec3fb00" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a9a7890bd69fb04b587cd51baf217b1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: ca5f6q4HoCPoAiOkClf4WLbyZ9u365xXjQqTOon8LI3DadDNZuVzhA== Age: 6 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:34 UTC	3198	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 30 2e 39 20 34 35 2e 35 34 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 37 38 35 36 3b 66 69 6c 6c 2d 72 75 6c 65 3a 65 76 65 6e 6f 64 64 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 34 2e 39 2c 34 2e 33 34 48 30 76 2d 32 63 2e 33 2c 30 2c 2e 36 2d 2e 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 240.9 45.54"><defs><style>.cls-1{fill:#007856;fill-rule:evenodd;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M4.9,4.34H0v-2c.3,0,.6-.1
2024-03-14 00:57:34 UTC	444	IN	Data Raw: 39 2d 36 2e 31 2d 37 61 31 37 2e 37 35 2c 31 37 2e 37 35 2c 30 2c 30 2c 30 2d 37 2e 36 2d 2e 36 63 2d 34 2e 35 2e 35 2d 38 2e 33 2c 33 2e 34 2d 39 2e 33 2c 37 2e 34 61 31 31 2e 32 2c 31 31 2e 32 2c 30 2c 30 2c 30 2c 32 2e 36 2c 31 30 2e 36 2c 37 2c 37 2c 30 2c 30 2c 31 2c 2e 38 2c 31 41 36 31 2e 30 36 2c 36 31 2e 30 36 2c 30 2c 30 2c 30 2c 35 33 2e 39 2c 32 37 63 2d 35 2e 35 2c 33 2e 38 2d 35 2c 31 32 2e 32 2e 31 2c 31 35 2e 36 2c 33 2e 35 2c 32 2e 33 2c 37 2e 34 2c 32 2e 39 2c 31 31 2e 34 2c 32 2e 39 61 32 32 2e 32 31 2c 32 32 2e 32 31 2c 30 2c 30 2c 30 2c 31 32 2d 33 2e 36 2c 31 2e 32 36 2c 31 2e 32 36 2c 30 2c 30 2c 31 2c 31 2e 32 2e 31 2c 31 30 2e 36 39 2c 31 30 2e 36 39 2c 30 2c 30 2c 30 2c 37 2e 38 2c 32 2e 39 68 32 33 2e 39 61 35 2e 37 2c 35 2e 37 Data Ascii: 9-6.1-7a17.75,17.75,0,0,0-7.6-.6c-4.5.5-8.3,3.4-9.3,7.4a11.2,11.2,0,0,0,2.6,10.6,7,7,0,0,1,.8,1A61.06,61.06,0,0,0,53.9,27c-5.5,3.8-5,12.2.1,15.6,3.5,2.3,7.4,2.9,11.4,2.9a22.21,22.21,0,0,0,12-3.6,1.26,1.26,0,0,1,1.2.1,10.69,10.69,0,0,0,7.8,2.9h23.9a5.7,5.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50185	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1998	OUT	GET /content/dam/mtb-web/images/svg/icon_msgbox_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06
2024-03-14 00:57:34 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 557 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:09:21 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "22d-5da2fe736ce40" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 baec235d174153a8f2e92ea724643824.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: De_ts6X0mibrxpjk3JItNH_8FnYCeCaXn7zmpVLdAO6QpZ4rNi_t5w== Age: 6 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:34 UTC	557	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 43 61 70 61 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50191	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	883	OUT	GET /tr/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852353&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=e992f5&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:34 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=93, rtx=0, c=10, mss=1274, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:57:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50175	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	993	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852353&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=e992f5&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:34 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:57:34 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:57:34 UTC	1449	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f
2024-03-14 00:57:34 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50181	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 1828 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:34 UTC	1828	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 66 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8f9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:57:34 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:34 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50187	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1996	OUT	GET /content/dam/mtb-web/images/svg/icon_plus_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06
2024-03-14 00:57:34 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 422 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:12:59 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:28 GMT ETag: "1a6-5da2ff43538c0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e42e8491a089e2183879e26e61dae708.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 1I8smD6d3Pu3IrgWEKg_OtwmCyG9o6VePXbzWDXjefOjSBrh0fZ8sg== Age: 6 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:34 UTC	422	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 37 20 38 37 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 37 62 35 36 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 63 78 3d 22 34 33 2e 35 22 20 63 79 3d 22 34 33 2e 35 22 20 72 3d 22 34 33 2e 35 22 2f 3e 3c 72 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 87 87"><defs><style>.cls-1{fill:#007b56;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><circle class="cls-1" cx="43.5" cy="43.5" r="43.5"/><r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50190	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	904	OUT	GET /tr/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&rl=&if=false&ts=1710377852354&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:34 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=93, rtx=0, c=10, mss=1274, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:57:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50183	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	2000	OUT	GET /content/dam/mtb-web/images/svg/icon_facebook_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.0.1710377813.60.0.0; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06
2024-03-14 00:57:34 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 980 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:03:04 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "3d4-5da2fd0be3e00" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cc4ee60e87dead01c9e2d4b985af043e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: Bil2cc48RXDMk0RtFfLGBvEQTFco5OO-D86y8VGYSysI1ZCe9coGjw== Age: 5 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:34 UTC	980	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50180	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	2376	OUT	GET /tracker/tc_imp.gif?e=37dfbd8ee84e00126beec432ed4f8f9f9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46a56a82b9eec47679c796e092818c5871d61eb72bffeb1ba131be20ecca7478c31db6bda508e1547f77303fd1f564c2acf503ed79ffca8328828bf7d8557ec4b7274a7d43169230121e118f58109ac5d6ead83c6771e217dcf965d78c9df014b3545700015a7902c7e7d17c7ab1f28cef2ea2b93e745711b3eb7b4e7c1d965b4cfd90eee559f596f65cee99bb7f13191d9e039c5335cd6f0cb2a4a1ffe606bfa990678fc86ae668500f845b6980a870d97dd75d66071d2d964d27a8f95afb48cf1be5d78e87ce9e6e5690476ff8c3dc1e85fe114185a8e030d9a8f8fc6caf0827fc727d095bb8f37ff7b6b208f792c85d4df0e21d7a82bf84fa7834a9566a27102130f9e64ee439cc6ee27f8b0098752a78f9c8334c019536ebd06421d3e5979c3ab73a442c48cdf64e5d025fc9a6c82c2e8f47a9ce6f54d673ec6a95247cfbc0c5914ffe1ee74ae28c4f840fdb77fc120f964cb17ad40c5a22ec61b21e2a79764383a691d2b0c5d17a9e68b64d306a5595c157b8be8168ac65c75aaaad5a8bd72c3eae5fc85ffa8f94a4d34fe4198b25d698340631ddf654f6d7eb427bd7c72cbebc1609669d72589b72dcdb80f91670e3d3d037c139ec8f8c6357b559904589cd3d9b9acd750039aaca07b96cf1e67ca8657653deb9bcb573fb620845f9c1de4379a13c5cc6289e133a4e5d188ff041887b73d11906ab4cef5f2428e6626171b956f4250b2a45887ed15d4e5d29e3198f0d074516a1de434de67c247ae932dd36b17334b287c61e05d8f813052be67c4aeeb68ddbb08e62732f246057bc8be8e023ffc6de7cc508c153b6b27a0296ec6f6c562cb4b2cced457f0a382acd10683020b4040a52e7a0c8e9a0d40a868b2bcd32786d3ec0d416ee237711a0ece0b42a6c4bb5a039a6b71d3949b538989f8dd5322a622e4443907de442263c78f4712de94f1dce3ae01be79f52cc72fc1931095aeea2136e8825cd0c7fdcb84818a926719d5b872479169c356de0bac&cri=skuHn8DrGl&ts=2103&cb=1710377851477 HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:34 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Thu, 14 Mar 2024 00:57:34 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2024-03-14 00:57:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50196	157.240.241.35	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1019	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&rl=&if=false&ts=1710377852354&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:34 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:57:34 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:57:34 UTC	1446	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f
2024-03-14 00:57:34 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50193	142.251.40.226	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1447	OUT	GET /td/rul/875517505?random=1710377852917&cv=11&fst=1710377852917&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
2024-03-14 00:57:34 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:57:34 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-14 00:57:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50194	142.251.40.226	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1509	OUT	GET /td/rul/875517505?random=1710377853057&cv=11&fst=1710377853057&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
2024-03-14 00:57:34 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:57:34 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-03-14 00:57:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50195	142.251.40.130	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1321	OUT	GET /pagead/viewthroughconversion/875517505/?random=1710377852690&cv=11&fst=1710377852690&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
2024-03-14 00:57:34 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:57:34 UTC	549	IN	Data Raw: 39 31 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 919(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-14 00:57:34 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-14 00:57:34 UTC	535	IN	Data Raw: 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 33 37 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 62 30 76 38 38 38 35 38 37 33 35 39 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 33 2e 6d 74 62 2e 63 6f 6d 25 32 46 70 65 72 73 6f 6e 61 6c 2d 62 61 6e 6b 69 6e 67 25 32 46 6f 6e 6c 69 6e 65 2d 6d 6f 62 69 6c 65 2d 73 65 72 76 69 63 65 73 5c 78 32 36 66 72 6d 5c Data Ascii: 1\x26fst\x3d1710374400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43b0v888587359za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services\x26frm\
2024-03-14 00:57:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50199	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1996	OUT	GET /content/dam/mtb-web/images/svg/icon_lock_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:34 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 710 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:21:34 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "2c6-5da3012e77f80" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 33aae203c47fd9e0f18a8f3f6d37fbfc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: ZSDT7S4CCSjGMIu6VfV28Bd9ps4fdkbC2fzlNrV9Zx0x_whcyVswRQ== Age: 5 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:34 UTC	710	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 37 2e 35 33 20 38 37 2e 35 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 37 38 35 36 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 64 3d 22 4d 30 2c 38 33 2e 36 61 34 2e 32 2c 34 2e 32 2c 30 2c 30 2c 30 2c 34 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 67.53 87.58"><defs><style>.cls-1{fill:#007856;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path class="cls-1" d="M0,83.6a4.2,4.2,0,0,0,4.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50197	142.251.40.130	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1323	OUT	GET /pagead/viewthroughconversion/875517505/?random=1710377852917&cv=11&fst=1710377852917&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
2024-03-14 00:57:34 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-14 00:57:34 UTC	549	IN	Data Raw: 39 31 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 91c(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-03-14 00:57:34 UTC	1252	IN	Data Raw: 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 Data Ascii: ?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg
2024-03-14 00:57:34 UTC	538	IN	Data Raw: 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 30 33 37 34 34 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 33 62 30 76 38 38 38 35 38 37 33 35 39 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 33 2e 6d 74 62 2e 63 6f 6d 25 32 46 70 65 72 73 6f 6e 61 6c 2d 62 61 6e 6b 69 6e 67 25 32 46 6f 6e 6c 69 6e 65 2d 6d 6f 62 69 6c 65 2d 73 65 72 76 69 63 65 73 5c 78 32 36 66 72 6d 5c Data Ascii: 1\x26fst\x3d1710374400000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be43b0v888587359za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services\x26frm\
2024-03-14 00:57:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50200	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1999	OUT	GET /content/dam/mtb-web/images/svg/icon_twitter_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:34 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1152 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:38:42 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "480-5da30502d8880" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 06d42d2d80190e168b9494192458b51a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: yUnQXxnbHhDTJFKVLYg7BMvw4wq1S41h_CevbW2pUEXsmoKVnDr77w== Age: 5 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:34 UTC	1152	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 33 20 31 39 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 37 38 35 36 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 63 78 3d 22 39 36 2e 35 22 20 63 79 3d 22 39 36 2e 35 22 20 72 3d 22 39 36 2e 35 22 2f 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 193 193"><defs><style>.cls-1{fill:#007856;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><circle class="cls-1" cx="96.5" cy="96.5" r="96.5"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50201	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	2000	OUT	GET /content/dam/mtb-web/images/svg/icon_linkedin_green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:34 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 858 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Mon, 14 Mar 2022 16:40:12 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "35a-5da30558ad300" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e42e8491a089e2183879e26e61dae708.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 7mKCFUtKnk6PPtJ53WSCjHJoRs_HIzb_CH-ULsGSyfj2yPFG7rYLxw== Age: 5 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:34 UTC	858	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 33 20 31 39 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 30 30 37 38 35 36 3b 7d 2e 63 6c 73 2d 32 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 63 78 3d 22 39 36 2e 35 22 20 63 79 3d 22 39 36 2e 35 22 20 72 3d 22 39 36 2e 35 22 2f 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 193 193"><defs><style>.cls-1{fill:#007856;}.cls-2{fill:#fff;}</style></defs><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><circle class="cls-1" cx="96.5" cy="96.5" r="96.5"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50203	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1998	OUT	GET /content/dam/mtb-web/images/guy-on-phone-green-bg.jpg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:34 UTC	772	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 35941 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "8c65-5e38d3cf2eb00" Last-Modified: Mon, 11 Jul 2022 20:17:16 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish X-Cache: Hit from cloudfront Via: 1.1 d4b67fda8355378cec4afc079701f8e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: ohSu5Fe6QAu86xEvQa8JVXMyzuIj535nfXuGBDAov6ieTjVon-SpYA== Age: 5 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:34 UTC	15612	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 14 00 00 ff e1 03 2d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 30 2d 63 30 30 30 20 37 39 2e 64 61 62 61 63 62 62 2c 20 32 30 32 31 2f 30 34 2f 31 34 2d 30 30 3a 33 39 3a 34 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 Data Ascii: ExifII*Ducky-http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.0-c000 79.dabacbb, 2021/04/14-00:39:44 "> <rdf:RDF x
2024-03-14 00:57:34 UTC	16384	IN	Data Raw: 55 47 23 d3 21 d7 47 a1 aa cc 63 91 35 ee 5b a1 4b 4a 95 bf 54 6c 6a 4e 7b 4d 2f e4 b6 7b a2 72 b7 a7 57 91 c9 e1 60 c3 c9 b7 27 95 76 d5 9c ad 1c 23 6e 3b f0 b7 4f 47 b6 87 a7 97 16 3c d8 dd 6c a6 ad 6c 79 2b 84 b0 d9 e3 6a 68 fe 97 d8 dc c5 62 e6 7d 93 91 8b 81 96 be e7 16 e9 64 99 a3 17 16 f8 9b b5 2c b2 53 ba df f4 37 bc 2f 15 a5 eb 57 d0 eb c5 86 ba 5a a6 36 f5 eb 5b d3 db be bf fa 69 c5 9d 3d 0e 8a db c8 d5 c8 e3 3a af bb 55 aa fa 92 ea 38 d9 15 e1 9e 5d b4 ba dc 57 b7 5d e6 d3 31 d5 5a 6b e8 72 e5 b3 b5 e5 e9 ac 9d 79 6d e3 89 c6 ef 43 cd cb 77 4a b6 de a7 a3 d5 ae 26 7e 5e 5f 7e d9 da 4f 86 ae 4e 57 66 b1 d7 76 74 71 71 2a eb d8 e5 e3 53 c9 bc b6 f9 1e 85 1a 54 fd ce 95 c6 3c ff 00 c9 d9 e5 cb 8b 8f 5d 5f d4 cf 43 1d 3e de 25 5e c8 e5 e1 51 e6 cf Data Ascii: UG#!Gc5[KJTljN{M/{rW`'v#n;OG<lly+jhb}d,S7/WZ6[i=:U8]W]1ZkrymCwJ&~^_~ONWfvtqq*ST<]_C>%^Q
2024-03-14 00:57:34 UTC	2588	IN	Data Raw: f0 5d ba 57 5d 8e ab cb 5b 1c 1c 7b e9 75 d9 9e 84 b7 5d b4 68 52 70 cb 8f 9a 8e 8f 0e 4d aa f4 6c 99 33 e2 8f b3 83 af d4 d6 c9 75 34 cc 37 08 ce 89 2d 62 0c f8 cc e5 af 2b 8c 33 8a 4b 38 74 af 3d a5 fc d4 5f b3 3a e6 2d b4 9c 9c 89 af 2b 0d e2 13 9a bf 9e a6 a3 37 fd ba f5 30 b6 b0 67 28 91 a9 15 a7 3d bc 68 fd 4e 5c 7a a9 ee 6d e5 5a 5a aa 25 14 22 a1 b9 7c 42 7a b2 a0 23 df 42 bd 13 43 43 0b 5b a1 51 6c e5 2a f7 36 e4 7e 38 e3 a9 af 1a 96 9b d9 18 e6 b6 e1 5a d3 71 25 6e 4c 13 d0 a0 66 90 50 ae 64 a0 c7 f9 dc 04 ac ba 99 c7 62 33 2d 20 0c 2f b3 3c e6 e6 cd 9d f9 1c 55 fc 0e 09 22 bc ff 00 c9 df fa 4a bd d9 e4 9e 87 e4 ed 36 ad 7e 67 01 c3 d9 7a ba ce 22 3d 8b 8d 6a 47 b1 96 3d cc ce 1d 35 7a 3c 75 a9 e9 e2 5a 23 ce e3 ad 8f 4f 12 39 ec ef ab a5 44 23 Data Ascii: ]W][{u]hRpMl3u47-b+3K8t=_:-+70g(=hN\zmZZ%"\|Bz#BCC[Ql*6~8Zq%nLfPdb3- /<U"J6~gz"=jG=5z<uZ#O9D#
2024-03-14 00:57:34 UTC	1357	IN	Data Raw: 8a 62 64 88 8a 64 62 50 32 08 85 22 32 04 28 45 04 29 05 08 85 02 82 14 0a 01 00 a0 00 3d 70 08 44 00 04 00 01 40 00 00 00 00 00 00 10 01 41 00 14 02 01 40 00 00 00 00 00 00 00 00 20 14 10 a0 08 00 14 80 00 00 80 52 00 00 00 00 00 00 10 01 48 00 02 00 01 90 a4 60 62 cc 59 93 31 61 18 b2 2d d7 c4 ac cb 12 9c 95 5e a6 b5 e4 76 ba e8 8c 5a 37 3a 98 b4 7a f4 e0 69 68 c7 c4 dc d1 8c 1d 60 d4 eb 04 f0 37 40 80 ad 3e 01 d3 a9 be 11 1d 40 d0 aa 65 e0 6c 83 24 a5 01 ad 54 b0 66 aa 65 1e 84 56 b8 7a 19 25 dc c9 22 c0 11 25 05 e8 5d 20 9a 10 34 2c ea 4e a5 28 22 93 a9 96 80 12 d4 a9 30 9e a5 d7 a0 10 c6 b3 e5 1f a1 96 a2 35 40 57 54 9a 6d cb 31 6d 27 b9 b1 d6 b1 b6 a6 8b 2a a7 0c 0d 8a fe 5e a9 19 52 fa db a1 8d 2e a1 d6 8a 60 ce b6 69 b7 65 f0 03 87 3d 9f f7 75 f5 Data Ascii: bddbP2"2(E)=pD@A@ RH`bY1a-^vZ7:zih`7@>@el$TfeVz%"%] 4,N("05@WTm1m'*^R.`ie=u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50204	142.250.80.100	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1319	OUT	GET /pagead/1p-user-list/948713993/?random=1710377850003&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqxJKr39xzdIs6ePeC4BlngANdJMFEIsv0fU8ZTGKUcEwrQ2fX&random=3758022400&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:34 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50202	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1996	OUT	GET /content/dam/mtb-web/images/pub-lp/banner-check.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:34 UTC	796	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1312 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "520-5d66f171c5540" Last-Modified: Tue, 25 Jan 2022 21:51:41 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 baec235d174153a8f2e92ea724643824.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 1X1tbF_lTqiwJFL0_YiMBqLDZAf0l40wAgyyPXTIY29MfzmtrdQYtg== Age: 5 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:34 UTC	1312	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 38 70 78 22 20 68 65 69 67 68 74 3d 22 38 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 38 20 38 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 68 65 63 6b 6d 61 72 6b 20 49 63 6f 6e 20 43 6f 70 79 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 56 65 72 73 69 6f 6e 2d 33 2d 46 69 78 65 64 22 20 73 74 72 6f Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="88px" height="88px" viewBox="0 0 88 88" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Checkmark Icon Copy</title> <g id="Version-3-Fixed" stro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50205	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:34 UTC	1990	OUT	GET /content/dam/mtb-web/images/faq-component.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:35 UTC	773	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 511124 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "7cc94-5dda3483e3f40" Last-Modified: Wed, 27 Apr 2022 14:04:05 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish X-Cache: Hit from cloudfront Via: 1.1 baec235d174153a8f2e92ea724643824.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: BiS-aQRNfFRXdgESKRz2xBWxlmkV55UJTXcPOiYQG6SsRH_Y_MS96Q== Age: 6 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:35 UTC	15611	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 2c 00 00 02 75 08 02 00 00 00 75 94 3c 81 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 38 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 02 2c a0 03 00 04 00 00 00 01 00 00 02 75 00 00 00 00 a2 b9 a2 ab 00 00 40 00 49 44 41 54 78 01 dc bd d7 b3 25 49 72 a7 77 b4 ba b2 44 eb e9 19 00 03 60 06 62 89 27 1a f9 c0 77 f2 af a6 f1 85 4b 33 72 49 b3 5d 2e b9 18 0e 80 85 18 d1 dd d5 aa c4 15 47 f3 fb 7e 9e 99 37 eb de aa 9a 6a cc d0 68 b6 51 b7 f2 44 7a 78 78 b8 7b 78 78 88 8c 8c 1c fe e3 7f fe e5 70 38 3c 1e 8f 75 1d f4 02 40 ee 80 f7 60 77 d1 82 57 c6 87 68 4d ea 10 0a 44 87 83 e3 a8 30 0b fe 36 fc c1 60 24 f6 5b 4a Data Ascii: PNGIHDR,uu<gAMAa8eXIfMM*i,u@IDATx%IrwD`b'wK3rI].G~7jhQDzxx{xxp8<u@`wWhMD06`$[J
2024-03-14 00:57:35 UTC	16384	IN	Data Raw: 66 3f 50 ec 76 cc 40 0d be 22 c2 1d e7 b9 b5 49 9b a8 bb 2e 80 dd 7f 8a 00 4e 16 92 49 e1 f9 19 4f 12 e2 13 e4 8e 9a 2a 47 ef f0 c1 7f ca 41 be 09 87 b2 6c 66 27 83 19 53 1f 0e b5 74 48 ce 89 9a 9c b7 c4 5e 4a 4e bb e0 0c 40 99 83 5c f9 2d 7c 42 db 35 a0 2a 3c 8b 36 c3 c7 5b 07 47 be e2 ee bc 8d 57 8c 18 c4 7b 1e 1d 56 d0 fa c6 68 b5 ad 24 d5 49 90 45 e7 a8 b0 c5 18 df 2a 6d a1 ad 54 41 eb 2e 6d ef a3 7d 11 c8 d5 84 22 9e 9b d2 17 9e 55 45 80 63 47 9c 5a 40 27 e8 c5 7f e8 c6 fa 00 1d 42 34 09 98 f7 e3 71 9c 0b 90 9e cb 7e 60 eb 54 07 18 be 77 bd 65 b2 bf 66 8e 72 7d 73 fb 92 4f d6 5d df 3c e7 13 0f 7c d3 61 bb 3f 99 9f 9d 9f 9c b2 99 9b 2a e5 35 50 fc f4 fe 66 bd e6 e1 0e 1f 43 58 fb 65 61 de 21 5a cd e6 7c 68 68 be 5a 72 34 36 fb be b1 72 94 32 dc c2 0b Data Ascii: f?Pv@"I.NIOGAlf'StH^JN@\-\|B5<6[GW{Vh$IEmTA.m}"UEcGZ@'B4q~`Twefr}sO]<\|a?5PfCXea!Z\|hhZr46r2
2024-03-14 00:57:35 UTC	12750	IN	Data Raw: a2 4d e0 57 87 21 d8 1c 13 70 f9 d8 ab b1 dc f4 c5 64 ff 81 37 9c 1c 21 6e b6 1f 9a aa 27 ca 3b cc ea 34 32 06 12 ff 40 17 3c 6e da a6 a0 e8 14 cb a6 ce e2 de ac 39 07 01 4b bc b8 bd d2 3c 43 4c d1 c9 d3 76 4a 10 a4 a8 4f 75 bc 12 ae 06 d1 09 4f 24 2b 4c 70 29 e5 31 36 1d 32 74 10 84 a4 2d b5 65 b3 9c 00 d8 3a 62 84 2d 6e 54 91 6b 0f c1 06 44 32 17 97 b1 fe df 71 a4 95 02 f3 2d aa 1b 80 e2 6c 91 57 78 76 12 dd 7b c3 47 49 0e 43 0c af 22 69 2e 93 ac c1 90 ea 51 5d c5 11 65 d9 55 51 30 01 66 7a 25 28 f6 26 5a 03 18 0e 78 81 0f 4d 45 e5 ac 54 38 d6 98 29 82 33 7a 1e b5 ec ca f4 b4 73 c7 c7 60 88 a5 32 01 e3 52 30 47 b2 a8 2f 21 11 3d 64 05 3f f9 5a db f0 d1 41 91 ec 50 07 e1 22 31 72 50 c9 b0 b6 08 b2 bd 4b 27 cc 06 c6 49 de 58 0b 11 02 e3 49 18 66 74 9c 92 Data Ascii: MW!pd7!n';42@<n9K<CLvJOuO$+Lp)162t-e:b-nTkD2q-lWxv{GIC"i.Q]eUQ0fz%(&ZxMET8)3zs`2R0G/!=d?ZAP"1rPK'IXIft
2024-03-14 00:57:35 UTC	16384	IN	Data Raw: 24 9e b4 a2 25 87 e2 4b 53 97 29 b5 45 24 0a cc b6 67 7b e3 1a 69 0b ca bd 29 b0 97 de 39 1d 50 47 82 16 91 a8 72 d4 13 b6 87 3b ce bc a7 cf c9 38 3a af b7 b3 ab cb 25 07 6c 98 82 3a b8 e2 2e 39 0a 61 0a b7 ae 58 0e 1c f9 b8 d9 90 fe 81 77 29 40 4f 97 0d d1 b7 bd d1 de f1 cb 0e ca 98 d5 0c a6 58 cc bb 86 7c 8c 9e 49 67 a9 29 22 c9 5d 19 c7 84 29 51 da 3c 72 84 5d b0 01 10 0a c8 6e 6b fe 08 44 f4 08 41 02 bd 90 0d 25 cb 96 32 c7 3b 82 79 03 c7 fe 3e 73 53 e3 f1 18 0f df 0d a1 e7 c4 bd 3b f4 23 d8 f4 76 34 60 36 0c e9 e3 ea 32 fb 40 f4 2b 40 3b bd 78 8f 4c b3 5f e0 fa ea 1a 45 cf c4 16 17 5a 0f 8e 47 83 f1 98 7d 6e 77 1b 3e 88 d0 1d 9e 4c c8 00 5b c3 76 00 66 ea 5c ea e1 db ad 74 bb ba 87 73 66 cd ae cf af 2f af 18 08 1d 1f 0f 6f 6e 37 b3 d9 15 a6 85 c1 1c Data Ascii: $%KS)E$g{i)9PGr;8:%l:.9aXw)@OX\|Ig)"])Q<r]nkDA%2;y>sS;#v4`62@+@;xL_EZG}nw>L[vf\tsf/on7
2024-03-14 00:57:35 UTC	16384	IN	Data Raw: aa 80 a4 a1 37 d4 61 28 54 f0 71 86 6b 7e 0e 4c 9d 87 2c 7e 7f b9 f3 c2 16 3b 6a 99 18 21 df d8 a9 08 61 c5 4e 2b a1 9f a9 53 b1 8d 71 f3 14 92 13 6b 42 b5 5a 61 b1 a4 c2 d1 90 b2 61 ec 45 51 3d 74 91 f4 1f bd 40 4d d5 ab 91 b0 b3 ea 93 e4 5a 6e 0a a6 6e 25 f0 04 71 3d a0 1e 82 44 12 c3 95 f6 a6 c5 69 91 10 9f da 24 2e 81 49 3a 1a 18 52 d5 f4 2e 2c b2 72 90 cb e8 aa 6c 5a 31 91 26 85 26 59 42 53 60 3d a6 89 9e c6 5c 64 f4 da 22 e5 93 7f ad ec 51 79 81 69 bb c2 93 5b 8e a3 80 fc a8 5b 0b 4b 25 93 44 df 8d 8a ac 58 a3 c4 f5 b1 e5 94 08 21 2c 2d 41 e0 a1 0e 79 17 3f bd 1e 46 0e 58 11 70 bc a4 53 b2 a7 c7 b2 cb de fd f0 74 81 99 7d 7a 87 44 ea 77 79 6e b9 9f 0e bc bb e2 d8 d4 f2 42 36 30 ca 7c ce cc 3d 6e d3 4c c8 c1 c0 32 a2 fe 67 84 a6 5a ad 14 29 73 62 5d Data Ascii: 7a(Tqk~L,~;j!aN+SqkBZaaEQ=t@MZnn%q=Di$.I:R.,rlZ1&&YBS`=\d"Qyi[[K%DX!,-Ay?FXpSt}zDwynB60\|=nL2gZ)sb]
2024-03-14 00:57:35 UTC	16384	IN	Data Raw: f6 f6 72 68 2d 06 8a df 9d 31 b1 bc 95 c7 92 53 ab cc 4c e2 31 4a 53 ac 83 72 2f 3d c7 b5 2d 81 79 6d 39 82 05 f2 5d 67 9b 3e a8 df d6 f6 f6 c1 d1 c1 fe b7 df fe ee ff fc bf b7 5e bd e2 60 cd 8e 26 db 42 17 17 61 eb 35 2e a5 0b 1d be 00 d1 1c 92 b0 40 2c 5a 5e 29 43 3e 55 ea 63 db fb b6 e0 30 ea 5c 0e ac e4 56 fd 37 73 7a 3a f0 10 76 83 95 86 f1 2c 90 ae bc 5a 84 82 1b 3e 40 20 12 95 7e 51 19 9d 67 2c 90 bb 9a 14 a5 af a1 8d fd 14 7a ca 05 80 3c cd 45 98 62 fc 37 eb 50 a5 33 b2 20 78 8a e6 ab a9 80 91 e3 f2 6a 50 5c 5d c6 9a c4 a0 f5 ec ca 90 88 51 1c bf 15 f1 38 67 ca c1 b8 84 cd c7 ab 57 9f 18 40 71 74 54 a3 b5 10 03 fe 05 33 4a dc 09 02 43 4b 15 cb 4c 25 d3 4c 5a 0d f3 8e b2 8b f3 89 cc 1f 31 29 53 b5 9b 87 eb 9c 16 85 6b 06 ab c6 97 0a 79 54 e4 38 40 Data Ascii: rh-1SL1JSr/=-ym9]g>^`&Ba5.@,Z^)C>Uc0\V7sz:v,Z>@ ~Qg,z<Eb7P3 xjP\]Q8gW@qtT3JCKL%LZ1)SkyT8@
2024-03-14 00:57:35 UTC	16384	IN	Data Raw: 21 c0 12 03 69 ab a8 92 84 70 5f e1 c0 26 72 14 a6 7d 73 95 42 43 a3 51 17 4b 90 75 37 1e 59 3a 02 77 c1 7f d6 28 ee 37 06 ed 7c a5 5f 54 25 2a 2c cc b5 bf cc c2 5d 04 46 34 07 1b 66 ab 0e 1a 97 b8 16 25 6a 0f 1a 08 5b 39 8b 2f e1 1d b9 51 71 55 62 0b e6 7c 6b 89 ee 1d b5 ff bf 5f fd ea 67 1f 7f f2 d1 e6 d6 37 2f 5f ed 36 9b 0b 22 85 cf cf e1 34 ed 9a e2 ee 74 d0 6e cd 4d cf da cc fa d5 f3 97 ff f8 c7 3f fa 09 87 ec da 54 fb 88 b5 a2 77 ff ee 9d 2f 3e fb f4 9b a7 cf 0c 93 8f 1a cd d6 ff fb 6f ff ed c6 dd 47 ff f3 bf f8 97 13 17 31 8d 55 04 73 38 2f 6e 6e 85 cc 6a 0a ab 6c a3 53 d9 07 be c1 f7 c9 36 b8 94 63 34 02 15 e1 9f a4 ba 09 6a 94 54 65 19 66 86 c1 4b ce 78 b7 3b 5f 43 0c d3 f3 5e d3 e6 51 b3 a5 88 64 0b 1c 01 17 e1 0f 4a de 48 11 e1 77 60 65 72 83 Data Ascii: !ip_&r}sBCQKu7Y:w(7\|_T%*,]F4f%j[9/QqUb\|k_g7/_6"4tnM?Tw/>oG1Us8/nnjlS6c4jTefKx;_C^QdJHw`er
2024-03-14 00:57:35 UTC	16384	IN	Data Raw: 78 65 84 43 d9 63 24 46 84 0d aa c6 aa 7b d4 01 1b 3a df 5b df f8 68 a6 b5 3c ec f7 b8 17 89 45 cb d4 5e 66 5f 99 8d 91 0e f4 29 c3 0c 15 0a eb 89 40 56 16 bf 3c 81 b7 cc 4c 9d c2 a2 2f e1 c9 c1 42 17 20 06 d8 57 48 29 c5 bd 44 57 79 9f 0c f5 66 f2 f7 5a 62 fd fc 35 f9 7f e5 ab c9 c2 bf c6 fd b8 3d b5 25 e3 c7 d7 14 55 a7 b1 0c 6e 82 72 37 5d 99 bc 99 8c d8 3c 0c c9 df 02 9c 72 5b 1e c7 77 bf 91 9b 0a f9 5a d4 24 48 bf 52 e1 e3 0f dd 68 7a fd 55 42 6e ae 06 7d b2 c0 20 10 ca 53 f0 e8 32 13 16 84 d6 bb b2 51 74 61 66 79 ba c5 cc c5 e3 33 2b 2e 8b e7 dd 0e 06 c0 20 60 13 c0 ca da 2a db 18 3a c3 6d 8a 16 bf b5 b3 6d e1 e7 2f 7f f2 97 7f fa 83 3f fd ee 7b ef bf f3 d6 1d 6e c5 43 24 fc fc e4 e1 b3 27 c2 c7 65 5d 67 ea 62 7d b5 dd b2 87 31 73 9f 9a 31 5a 5a 59 Data Ascii: xeCc$F{:[h<E^f_)@V<L/B WH)DWyfZb5=%Unr7]<r[wZ$HRhzUBn} S2Qtafy3+. `*:mm/?{nC$'e]gb}1s1ZZY
2024-03-14 00:57:35 UTC	16384	IN	Data Raw: 02 ad 23 e0 21 bf 9c 62 45 52 11 42 92 dc 7e 26 28 1c 47 a7 5d 0b e6 4b fc 89 7b 03 58 77 7b e7 d6 bd 3b f7 36 56 78 1a 2f ad 21 36 6b eb cd f6 2a dc a6 3c b1 e0 20 9e f0 3a 32 58 a6 00 f2 5c 6c 04 01 8e 4a ca 4f 54 08 37 99 60 70 36 f2 5e c8 5e e8 b1 49 54 94 a5 d8 c4 24 d4 2b b7 de 27 3f 4e 19 72 ea 4a c9 97 4c 48 72 56 8d 0a f1 34 13 e2 68 a4 10 fd 50 33 42 8c 30 69 73 e9 72 be 72 15 36 f7 c5 28 78 59 aa 33 fa a9 26 33 f9 ea aa f9 33 f1 bd 42 15 62 86 0f 4e eb a3 5a c9 92 4a 34 8b cf 2d 27 5f 9c 70 15 dc 68 2b ac 4b 35 da 0e 0c a8 75 25 b8 ca 70 1a ad 4e 2c 63 5e 64 2d 47 35 5b 07 49 80 19 b4 05 21 f2 ab 99 2e 2e 64 a8 09 63 0d c3 7f a3 b9 ca be 9f 85 0d ff f4 1a a9 d0 87 d2 ef da f7 dc ba 0a 17 ca df bc 0b 9f d0 e0 72 93 37 15 52 a5 bd 63 cc 2c 65 e4 Data Ascii: #!bERB~&(G]K{Xw{;6Vx/!6k*< :2X\lJOT7`p6^^IT$+'?NrJLHrV4hP3B0isrr6(xY3&33BbNZJ4-'_ph+K5u%pN,c^d-G5[I!..dcr7Rc,e
2024-03-14 00:57:35 UTC	16384	IN	Data Raw: a6 0f 98 36 71 ac 42 94 9c 6d 4d cf b6 5d ef 39 b5 c0 b3 2a d7 aa e5 bc 01 e4 83 39 e4 4c f8 54 7a 10 aa a3 19 9e da 5b 55 ea 56 7d 0b 41 8a 2b d2 8a 66 d0 db 03 d7 b3 9c 4a f7 b3 cd 84 8f 04 99 61 75 59 17 84 e8 e7 93 fd fa d3 c9 ea a3 0c 87 f6 51 57 8c 22 5a 83 63 41 da f4 3c 63 41 46 a7 df 0b c5 70 ad 1f 5c 8d f6 27 9b d5 d4 57 ed 9c a1 0f 95 18 6b 1f 1f cf f7 9c c2 98 99 ee db d6 3e e6 d8 58 72 64 6f b5 e3 22 a1 0e 54 7e 74 f7 f3 4f 3f fe 78 f1 da 9a 4b 05 a3 85 d1 3d 9b 18 31 1b cb 50 ab cc 6f 79 54 5f 8a 4c e3 2f e2 4a 4b ea 4b 1a 23 6f 99 97 f3 cf a5 04 49 2e 52 e7 6f 7d 55 46 0d 97 40 93 20 01 2a 9e 48 1a 53 ad 89 c3 fe e6 4f fe df 95 ef fe c3 b9 e5 6b fb 7b db 36 d5 fa 07 d3 dd de ea 21 f1 7e f3 c1 b8 9b 1e fe f2 3f fb cf 97 e7 df fd eb 7f f1 e9 Data Ascii: 6qBmM]99LTz[UV}A+fJauYQW"ZcA<cAFp\'Wk>Xrdo"T~tO?xK=1PoyT_L/JKK#oI.Ro}UF@ HSOk{6!~?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50208	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	2010	OUT	GET /content/dam/mtb-web/images/personal-home-page/deposit-checks.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:35 UTC	793	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5235 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 16 Apr 2020 22:05:54 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "1473-5a36fa2f1b480" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d4b67fda8355378cec4afc079701f8e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: 9lFQyimAf46AGRFlYowixVB4zopRx7yhb9-4f8rrWqy0R-9YxyhRMg== Age: 6 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:35 UTC	5235	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 53 08 06 00 00 00 57 94 0f 4a 00 00 0a 15 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 35 30 2c 20 32 30 31 39 2f 31 30 2f 30 31 2d 31 38 3a 30 33 3a 31 36 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDRSWJiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50214	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	2005	OUT	GET /content/dam/mtb-web/images/zelle-color-convenience-logo.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:35 UTC	769	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2167 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "877-5c7b7504205c0" Last-Modified: Thu, 22 Jul 2021 14:43:43 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish X-Cache: Hit from cloudfront Via: 1.1 e42e8491a089e2183879e26e61dae708.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: K2cyef-UqH48ZOeKNb-MabDhIlOTQ9KFjQOb3aUYo64kJlfKysd2JA== Age: 6 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:35 UTC	2167	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 34 08 03 00 00 00 75 bb c0 9a 00 00 03 00 50 4c 54 45 00 00 00 00 00 55 00 00 aa 00 00 ff 00 24 00 00 24 55 00 24 aa 00 24 ff 00 49 00 00 49 55 00 49 aa 00 49 ff 00 6d 00 00 6d 55 00 6d aa 00 6d ff 00 92 00 00 92 55 00 92 aa 00 92 ff 00 b6 00 00 b6 55 00 b6 aa 00 b6 ff 00 db 00 00 db 55 00 db aa 00 db ff 00 ff 00 00 ff 55 00 ff aa 00 ff ff 24 00 00 24 00 55 24 00 aa 24 00 ff 24 24 00 24 24 55 24 24 aa 24 24 ff 24 49 00 24 49 55 24 49 aa 24 49 ff 24 6d 00 24 6d 55 24 6d aa 24 6d ff 24 92 00 24 92 55 24 92 aa 24 92 ff 24 b6 00 24 b6 55 24 b6 aa 24 b6 ff 24 db 00 24 db 55 24 db aa 24 db ff 24 ff 00 24 ff 55 24 ff aa 24 ff ff 49 00 00 49 00 55 49 00 aa 49 00 ff 49 24 00 49 24 55 49 24 aa 49 Data Ascii: PNGIHDR4uPLTEU$$U$$IIUIImmUmmUUUU$$U$$$$$$U$$$$$I$IU$I$I$m$mU$m$m$$U$$$$U$$$$U$$$$U$$IIUIII$I$UI$I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50207	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	2007	OUT	GET /content/dam/mtb-web/images/personal-home-page/android-ios.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:35 UTC	770	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 7379 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "1cd3-5a36fa3103900" Last-Modified: Thu, 16 Apr 2020 22:05:56 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish X-Cache: Hit from cloudfront Via: 1.1 d3041c3025b9205db460853b5b9626bc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: TejUOQ3EE5r49MIeyADb7GcBb1qMMLZCyix1P47i_Lbvec6wMqLzZw== Age: 6 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:35 UTC	6396	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 53 08 06 00 00 00 57 94 0f 4a 00 00 0a 15 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 35 30 2c 20 32 30 31 39 2f 31 30 2f 30 31 2d 31 38 3a 30 33 3a 31 36 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDRSWJiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://
2024-03-14 00:57:35 UTC	983	IN	Data Raw: 91 59 e2 62 8d 5d 05 21 d5 e4 c3 27 88 8b ba 01 17 97 4f 24 18 8b 68 0f c0 59 59 d4 0b c0 12 bb 68 76 38 73 e6 cc 73 b0 50 86 a3 90 88 13 a1 d9 23 7e 16 dc ff de 2b af bc f2 07 dc 7f 03 65 f0 1c c7 41 9c 90 2e 67 fb be 8d a6 6e 34 85 73 74 5f f0 03 5a ce b5 d8 a9 5e 5a 68 81 c9 c9 bd 25 2b f7 ba 2b 0b 70 18 0e 28 08 f2 f3 f3 bb 56 ad 5a 55 f6 c2 0b 2f d4 f4 b3 66 22 72 60 d6 8c 9a d0 c2 cd d2 a5 4b 0f e1 19 95 1c f3 66 57 e1 c8 25 08 68 b5 71 d1 a2 45 da f0 f0 70 3f eb f1 a0 3f 8a 71 e3 c6 69 e8 5b 51 cf 3f ff bc 1f 38 89 f5 ca 68 a2 54 2a 15 91 91 91 7e 4f 3e f9 a4 c6 09 10 5d f5 79 d8 7f 29 d4 51 6c b3 fb 4a 13 2d 0e 35 34 34 d4 2f 58 b0 e0 17 ec 67 83 48 4d 04 51 1a c2 fe e9 ec 61 50 50 10 89 8d 8d ed 40 9a d5 88 f8 5a 1f 86 06 12 15 0d 2e 11 44 57 eb Data Ascii: Yb]!'O$hYYhv8ssP#~+eA.gn4st_Z^Zh%++p(VZU/f"r`KfW%hqEp??qi[Q?8hT*~O>]y)QlJ-544/XgHMQaPP@Z.DW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50218	142.250.80.100	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	1316	OUT	GET /pagead/1p-user-list/875517505/?random=1710377852690&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNx60R0dtaYwl8YqhICxdLYoHx-X-L9nAncQTwuT-Ro_7kH3P&random=906024691&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:35 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50213	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	1994	OUT	GET /content/dam/mtb-web/images/icon-search-green.svg HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:35 UTC	795	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 631 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 06 Apr 2023 20:10:17 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher1useast1-28503640 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "277-5f8b07f495c40" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cc4ee60e87dead01c9e2d4b985af043e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: iuYiL6L1jCz3yxNBoL0NzBhJ9gnbNTrj2dF_DCFXp_7rOxHPoDEd-w== Age: 6 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:35 UTC	631	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 33 2e 32 38 20 35 35 2e 37 32 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 35 70 78 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 2c 20 2e 63 6c 73 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 6e 6f 6e 65 3b 0a 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_2" data-name="Layer 2" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 53.28 55.72"> <defs> <style> .cls-1 { stroke-width: 5px; } .cls-1, .cls-2 { fill: none;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50211	104.244.42.133	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	769	OUT	GET /i/adsct?bci=3&eci=2&event_id=e93ed9a0-d247-4b43-9df0-5837f620e6d0&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=19df694f-4070-4cbc-b3b1-7531989d2106&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=08022923-6d5c-4a53-a3f5-ff7758503d68
2024-03-14 00:57:35 UTC	392	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:57:35 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 5ddf8a53ae8a6447 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 49fe5cdf02a0c34a1748df22d3066ca281783ada6625e0492180e9b977cf7964 connection: close
2024-03-14 00:57:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50206	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	2015	OUT	GET /content/dam/mtb-web/images/personal-home-page/track-your-spending.png HTTP/1.1 Host: www3.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:35 UTC	793	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 9422 Connection: close Accept-Ranges: bytes Content-Disposition: inline Last-Modified: Thu, 16 Apr 2020 22:06:13 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Date: Thu, 14 Mar 2024 00:57:29 GMT ETag: "24ce-5a36fa4139f40" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a9a7890bd69fb04b587cd51baf217b1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: NSnz-6QUeV5LLfK00U46usvxqxMcpKk51fHpR4ab4x3Qds-EAPPhNg== Age: 6 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:35 UTC	9422	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 53 08 06 00 00 00 57 94 0f 4a 00 00 13 35 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 35 30 2c 20 32 30 31 39 2f 31 30 2f 30 31 2d 31 38 3a 30 33 3a 31 36 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f Data Ascii: PNGIHDRSWJ5iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50212	104.244.42.67	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	790	OUT	GET /i/adsct?bci=3&eci=2&event_id=e93ed9a0-d247-4b43-9df0-5837f620e6d0&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=19df694f-4070-4cbc-b3b1-7531989d2106&tw_document_href=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nvk8o&type=javascript&version=2.3.29 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_5UBAyvKoxs+QXpDa5ElW/A=="
2024-03-14 00:57:35 UTC	401	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:57:34 GMT perf: 7469935968 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: f98b6787d512544d strict-transport-security: max-age=631138519 x-response-time: 78 x-connection-hash: 894447d16b67a1533ca30480b9c09c112bd1cc4ec261d1dd0f8110685ac25d98 connection: close
2024-03-14 00:57:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50219	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	756	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377849513&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=431bc3&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=9110447352330543%2C3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:35 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:57:35 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:57:35 UTC	1479	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50209	142.251.40.130	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	1848	OUT	GET /pagead/viewthroughconversion/875517505/?random=569208666&cv=11&fst=1710377853057&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMu-1ra2qOjfGRJPQ2hFSThKM0Zyd1lRMU9DanZjam8tLURSQVJJbUFNc3luckJ6MjQwbmhoUFRnak85ZlZZRFRSV2FGU0R3SURZWlNZcTdIQXpSa3ZnSXphbxpYQ2hBSThKM0Zyd1lROVBicjk1cnd5ZFE0RWk0QTJ5cWprbll0ckNuaEdSeFY3SmlyTEtVcERpeElsOEsxNV9tLTd5SmNNajlBWnZia25raDdTelliZUxFdyITCKq624PG8oQDFckl0AQdS_8DHjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlR7MDwklQKglGs61--_fdyHd6-9kndOI8PxbtIBZbTIVD26B-VkM1HyMZv
2024-03-14 00:57:35 UTC	1791	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/875517505/?random=569208666&cv=11&fst=1710377853057&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMu-1ra2qOjfGRJPQ2hFSThKM0Zyd1lRMU9DanZjam8tLURSQVJJbUFNc3luckJ6MjQwbmhoUFRnak85ZlZZRFRSV2FGU0R3SURZWlNZcTdIQXpSa3ZnSXphbxpYQ2hBSThKM0Zyd1lROVBicjk1cnd5ZFE0RWk0QTJ5cWprbll0ckNuaEdSeFY3SmlyTEtVcERpeElsOEsxNV9tLTd5SmNNajlBWnZia25raDdTelliZUxFdyITCKq624PG8oQDFckl0AQdS_8DHjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI&is_vtc=1&cid=CAQSKQB7FLtqWjlv5Cz-Emj3mPWUoy-30QxpYc7nmefNSMlllMPKir3h4H2F&random=2140994703 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50215	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 2083 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:35 UTC	2083	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 66 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8f9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:57:35 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50210	34.67.98.25	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	1952	OUT	GET /v1/p HTTP/1.1 Host: aiq-in.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:35 UTC	244	IN	HTTP/1.1 404 Not Found Date: Thu, 14 Mar 2024 00:57:35 GMT Content-Type: text/plain Content-Length: 18 Connection: close X-Request-Id: 036548c9-6aab-4c4c-86cf-d7efeb235def Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-03-14 00:57:35 UTC	18	IN	Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50228	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	719	OUT	GET /tr/?id=293418718495934&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377849513&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=431bc3&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&cas=9110447352330543%2C3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:35 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:57:35 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50217	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	716	OUT	POST /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377853582&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1392&N=9&P=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 237 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://m.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:35 UTC	237	OUT	Data Raw: 78 01 9d 92 4b 8b c2 30 14 85 ff 4a b8 eb 2c 72 f3 30 6d 98 8d 65 5c 0c a8 5d 8c 0b cb e0 62 b4 0a 82 d3 82 e3 93 a1 ff dd 9b d6 84 41 0a 82 64 71 f3 38 9c fb 9d 4b be fe 60 0b 4e 4b 0e 1b 70 82 c3 09 1c 00 87 03 95 7a ed 37 b4 43 8b 42 59 9b 68 65 a4 e1 50 82 1b a4 29 87 cf 29 b8 b4 e1 9d 41 f2 df 20 1f 67 6e 92 8f dc a8 da d7 bb 5d 51 1f f7 93 ef aa 9c 0d 57 ab fa 58 1d 7e 9f fb 0b 6f eb 19 e6 a4 fd a0 fa 96 e5 ef 05 33 0c 19 2a e6 17 32 eb 0f 4c 91 e0 42 40 46 72 b8 52 10 6d 5b 40 94 3a 58 9c 97 24 21 66 b4 32 5c e5 2f ba 26 d2 04 8b 9f fe be b1 eb ab e0 31 f9 79 d3 61 47 e8 90 23 2a 7a 53 98 3b 97 d4 ed 3c 0c 62 1b de 2a a5 1e d1 1f 24 18 de 7b d1 a3 2f 7d 00 9a b3 11 dd 9c 45 b3 b8 01 cf c8 85 32 Data Ascii: xK0J,r0me\]bAdq8K`NKpz7CBYheP))A gn]QWX~o32LB@FrRm[@:X$!f2\/&1yaG#zS;<b*${/}E2
2024-03-14 00:57:35 UTC	936	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:35 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://m.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50216	142.250.80.100	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	1319	OUT	GET /pagead/1p-user-list/875517505/?random=1710377852917&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqRSBicCHg_SchU3gm9kxo6DFjWIFDoxf5PR6dxX4k2U2SWj_e&random=1822853294&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:35 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50221	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	660	OUT	GET /tr/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377850381&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=8d7516&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:35 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3404, tp=-1, tpl=-1, uplat=1, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:57:35 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50226	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	651	OUT	GET /tr/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852353&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=e992f5&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:35 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3402, tp=-1, tpl=-1, uplat=1, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:57:35 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50222	76.13.32.146	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	716	OUT	GET /sp.pl?a=10000&d=Thu%2C%2014%20Mar%202024%2000%3A57%3A29%20GMT&n=-1&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
2024-03-14 00:57:35 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:35 GMT Expires: Thu, 14 Mar 2024 00:57:35 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU; Expires=Fri, 14 Mar 2025 06:57:35 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50227	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	672	OUT	GET /tr/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&rl=&if=false&ts=1710377852354&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:35 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3404, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:57:35 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50230	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	729	OUT	GET /tr/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852348&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=1d9f67&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C9110447352330543%2C3625895447511716%2C3109015925860109&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:35 UTC	464	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: GOOD; q=0.7, rtt=87, rtx=0, c=10, mss=1274, tbw=3403, tp=-1, tpl=-1, uplat=2, ullat=1 Alt-Svc: h3=":443"; ma=86400 Date: Thu, 14 Mar 2024 00:57:35 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50231	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	2144	OUT	GET /tracker/tc_imp.gif?e=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&cri=skuHn8DrGl&ts=2103&cb=1710377851477 HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:35 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Thu, 14 Mar 2024 00:57:35 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2024-03-14 00:57:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50223	76.13.32.146	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	653	OUT	GET /sp.pl?a=10000&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10087193&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&tagmgr=tealium HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
2024-03-14 00:57:35 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:35 GMT Expires: Thu, 14 Mar 2024 00:57:35 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU; Expires=Fri, 14 Mar 2025 06:57:35 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50232	142.251.40.132	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	1087	OUT	GET /pagead/1p-user-list/948713993/?random=1710377850003&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v874010781za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqxJKr39xzdIs6ePeC4BlngANdJMFEIsv0fU8ZTGKUcEwrQ2fX&random=3758022400&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:35 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50229	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:35 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50224	76.13.32.146	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	663	OUT	GET /sp.pl?a=10000&b=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&.yp=10108773&f=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&enc=UTF-8&yv=1.15.1&et=custom&tagmgr=tealium HTTP/1.1 Host: sp.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU
2024-03-14 00:57:35 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:35 GMT Expires: Thu, 14 Mar 2024 00:57:35 GMT Pragma: no-cache Cache-Control: no-cache, private, must-revalidate Content-Type: application/x-javascript Accept-Ranges: bytes Content-Length: 0 Server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBFZL8mUCEFCoWehXr9S9WtBNzbR1Xs0FEgEBAQGc82X8ZdxU0iMA_eMAAA&S=AQAAAtrN4jnv4LOflHHassS96sU; Expires=Fri, 14 Mar 2025 06:57:35 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50234	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	766	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=293418718495934&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852348&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=1d9f67&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&cas=6069323493143196%2C9110447352330543%2C3625895447511716%2C3109015925860109&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:35 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:57:35 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:57:35 UTC	1479	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50233	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	4262	OUT	POST /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fm.mtb.com%2FEnrollment&bp=3&app=ea7c4b59f27d43eb&crc=1977812690&en=zgefxirc&end=1 HTTP/1.1 Host: m.mtb.com Connection: keep-alive Content-Length: 4018 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://m.mtb.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://m.mtb.com/Enrollment Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS00000000076=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; TSPD_101_DID=0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f508a7d73940063800b28096b74a6ce3147e4afc4ec81108df48bc2703a62306ff9df5fa29f4b549efaf2fd903b891a1e10b8d44027292e7a1b194576b8312cb32; TSPD_101=0856addebbab28002af27e37b16536547d36f5514d908e2a76eff2f85e55962c7ec47766a25b15a54b1e850615a6bbc708824bb86705180024499e2a4e478e24ee757dcfe761509665cb42d8d2431f12; TS1b6f618f027=0856addebbab2000b2ced5399d180b26a9eecaba54b83c191b9e4885030a789ea5305361787945cd08b6844c22113000106f2097209d5748dac7b1d20608fc14ee0a4ff8c74a9c935949d21f2575f6dc619fc031b3d97ed59f57ec529c59839b; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:35 UTC	4018	OUT	Data Raw: 24 74 76 6e 3d 25 32 46 45 6e 72 6f 6c 6c 6d 65 6e 74 24 74 76 74 3d 31 37 31 30 33 37 37 38 33 36 38 32 39 24 74 76 6d 3d 69 31 25 33 42 6b 30 25 33 42 68 30 24 74 76 74 72 67 3d 31 24 77 3d 31 32 38 30 24 68 3d 39 30 37 24 73 77 3d 31 32 38 30 24 73 68 3d 31 30 32 34 24 6e 69 3d 34 67 7c 36 2e 33 24 72 74 3d 31 2d 31 37 31 30 33 37 37 38 33 36 38 32 39 25 33 42 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 2e 6d 74 62 2e 63 6f 6d 25 32 46 54 53 50 44 25 32 46 30 38 35 36 61 64 64 65 62 62 61 62 32 30 30 30 37 36 65 38 63 35 33 66 31 33 39 64 39 66 31 35 39 35 33 36 62 34 32 63 33 32 62 62 36 63 36 30 36 65 66 64 62 31 32 31 37 37 64 63 65 33 32 64 63 34 31 30 65 36 66 63 39 65 61 61 37 64 63 33 25 33 46 74 79 70 65 25 33 44 31 31 25 37 43 62 34 36 31 34 Data Ascii: $tvn=%2FEnrollment$tvt=1710377836829$tvm=i1%3Bk0%3Bh0$tvtrg=1$w=1280$h=907$sw=1280$sh=1024$ni=4g\|6.3$rt=1-1710377836829%3Bhttps%3A%2F%2Fm.mtb.com%2FTSPD%2F0856addebbab200076e8c53f139d9f159536b42c32bb6c606efdb12177dce32dc410e6fc9eaa7dc3%3Ftype%3D11%7Cb4614
2024-03-14 00:57:36 UTC	468	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Content-Type: text/plain; charset=utf-8 Expires: 0 X-SRV: P-NAO-002 Date: Thu, 14 Mar 2024 00:57:35 GMT Content-Length: 118 Set-Cookie: TS1b6f618f027=0856addebbab200096d04935692b9b2d96fa760c82f45e0baedb1add4c0a0e2861c2deb371158b58088d0199e9113000af1cca7249304dda83e21b67363b74c7edd3498ed4de1644987db49a50e6c805776a0b2cbab68c05c9c0660ad124a777; Path=/
2024-03-14 00:57:36 UTC	118	IN	Data Raw: 4f 4b 28 4f 41 29 7c 6e 61 6d 65 3d 72 75 78 69 74 61 67 65 6e 74 6a 73 7c 66 65 61 74 75 72 65 48 61 73 68 3d 49 43 41 32 4e 56 66 68 71 72 75 7c 76 65 72 73 69 6f 6e 3d 7c 62 75 69 6c 64 4e 75 6d 62 65 72 3d 31 30 32 38 35 32 34 30 33 30 37 31 30 31 34 30 37 7c 6c 61 73 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 3d 31 37 31 30 31 37 32 36 38 34 30 38 36 Data Ascii: OK(OA)\|name=ruxitagentjs\|featureHash=ICA2NVfhqru\|version=\|buildNumber=10285240307101407\|lastModification=1710172684086

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50235	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	697	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=PageView&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377850381&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=8d7516&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&cs_cc=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:35 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:57:35 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:57:35 UTC	1479	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50236	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	688	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=290387871401930&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com&rl=&if=false&ts=1710377852353&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=1&o=4124&fbp=fb.1.1710377812856.447036686&pm=1&hrl=e992f5&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&cs_cc=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:35 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:57:35 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:57:35 UTC	1479	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50237	31.13.71.36	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	709	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=1994534667524888&ev=CHEQ&dl=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&rl=&if=false&ts=1710377852354&sw=1280&sh=1024&v=2.9.149&r=stable&a=tmtealium&ec=0&o=4126&fbp=fb.1.1710377812856.447036686&ler=empty&cdl=API_unavailable&it=1710377848557&coo=false&dpo=LDU&dpoco=0&dpost=0&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ps_n=0
2024-03-14 00:57:35 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-03-14 00:57:35 UTC	1609	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-03-14 00:57:35 UTC	1479	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 72 65 61 64 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-ua-arch=(), ch-ua-bitness=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50239	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 2025 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:35 UTC	2025	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 66 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8f9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:57:36 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50240	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:36 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50241	142.251.40.132	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:35 UTC	1084	OUT	GET /pagead/1p-user-list/875517505/?random=1710377852690&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dpage_view&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqNx60R0dtaYwl8YqhICxdLYoHx-X-L9nAncQTwuT-Ro_7kH3P&random=906024691&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:36 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50242	142.251.40.132	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:36 UTC	1087	OUT	GET /pagead/1p-user-list/875517505/?random=1710377852917&cv=11&fst=1710374400000&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqRSBicCHg_SchU3gm9kxo6DFjWIFDoxf5PR6dxX4k2U2SWj_e&random=1822853294&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:36 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50243	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:36 UTC	505	OUT	GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377853582&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1392&N=9&P=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:36 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:36 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50244	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:36 UTC	715	OUT	POST /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377854436&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=739&N=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 133 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://m.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:36 UTC	133	OUT	Data Raw: 78 01 6d cd b1 0a c2 30 14 46 e1 77 f9 e7 8b 24 4d c3 4d ee a6 90 ad a5 8b 8b 88 83 b4 0a 42 4d a0 69 45 28 7d 77 03 2e 0e ee 87 f3 ad 08 90 f3 8a 07 a4 ae 08 77 88 22 bc 20 00 61 86 68 d6 ca 30 bb da d8 ca 6e f4 ed dc 6f d7 35 07 69 bb 20 21 4e 69 1c 4f 69 99 da 6b 1c 8e fb be 4f 4b 9c f3 bf cd 85 70 83 18 42 1e 20 5e 31 e1 9d 0b a5 8a fc 2c fe 4e b1 71 5c 3c ed bd 71 5e 5b b7 7d 00 b6 2a 29 e7 Data Ascii: xm0Fw$MMBMiE(}w.w" ah0no5i !NiOikOKpB ^1,Nq\<q^[}*)
2024-03-14 00:57:36 UTC	936	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:36 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://m.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50238	142.250.80.100	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:36 UTC	2030	OUT	GET /pagead/1p-conversion/875517505/?random=569208666&cv=11&fst=1710377853057&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMu-1ra2qOjfGRJPQ2hFSThKM0Zyd1lRMU9DanZjam8tLURSQVJJbUFNc3luckJ6MjQwbmhoUFRnak85ZlZZRFRSV2FGU0R3SURZWlNZcTdIQXpSa3ZnSXphbxpYQ2hBSThKM0Zyd1lROVBicjk1cnd5ZFE0RWk0QTJ5cWprbll0ckNuaEdSeFY3SmlyTEtVcERpeElsOEsxNV9tLTd5SmNNajlBWnZia25raDdTelliZUxFdyITCKq624PG8oQDFckl0AQdS_8DHjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI&is_vtc=1&cid=CAQSKQB7FLtqWjlv5Cz-Emj3mPWUoy-30QxpYc7nmefNSMlllMPKir3h4H2F&random=2140994703 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:36 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50245	35.81.173.170	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:36 UTC	1600	OUT	GET /st?ga_tracking_id=G-ZTNQ6ZK8T0&ga_client_id=1166952759.1710377814&shpt=Online%20%26%20Mobile%20Banking%20Services%20%20%7C%20M%26T%20Bank&ga_info=%7B%22status%22%3A%22One%20of%20the%20required%20properties%20not%20evaluated%20(mntnis%2C%20ga_tracking_id%2C%20ga_client_id%2C%20shpt).%22%2C%22ga_tracking_id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22ga_client_id%22%3A%221166952759.1710377814%22%2C%22shpt%22%3A%22Online%20%26%20Mobile%20Banking%20Services%20%20%7C%20M%26T%20Bank%22%2C%22dcm_cid%22%3A%221166952759.1710377814%22%2C%22execution_workflow%22%3A%7B%22iteration%22%3A29%2C%22getClientIdByCookie%22%3A%22OK%22%2C%22shpt%22%3A%22OK%22%2C%22dcm_cid%22%3A%22OK%22%7D%7D&dcm_cid=1166952759.1710377814&available_ga=%5B%7B%22id%22%3A%22G-ZTNQ6ZK8T0%22%2C%22sess_id%22%3A%221710377813%22%7D%5D&hardcoded_ga=G-ZTNQ6ZK8T0&dxver=4.0.0&shaid=34249&plh=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&cb=55960873835234740&shadditional=googletagmanager%3Dtrue%2Cga4%3Dtrue%2Ctealium%3Dtrue HTTP/1.1 Host: px.mountain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guid=c0f80a26-e19d-11ee-bc79-65977b46ee41; tt=H4sIAAAAAAAAAKtWKlOyMqoFAP609q8HAAAA
2024-03-14 00:57:36 UTC	447	IN	HTTP/1.1 200 OK date: Thu, 14 Mar 2024 00:57:36 GMT content-type: application/javascript;charset=utf-8 access-control-allow-origin: * p3p: CP="NON DSP COR NID CURa ADMa DEVa PSAa PSDa OUR STP UNI COM NAV INT STA PRE" set-cookie: guid=c0f80a26-e19d-11ee-bc79-65977b46ee41;Domain=mountain.com;Max-Age=63113852;Path=/;SameSite=None;Secure x-envoy-upstream-service-time: 12 server: istio-envoy connection: close transfer-encoding: chunked
2024-03-14 00:57:36 UTC	1567	IN	Data Raw: 36 31 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 22 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5c 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 20 7b 77 69 6e 64 6f 77 2e 6d 6e 74 6e 20 3d 20 7b 69 73 5f 76 69 65 77 61 62 6c 65 5f 76 65 72 69 66 69 65 64 5f 76 69 73 69 74 3a 5c 5c 5c 27 66 61 6c 73 65 5c 5c 5c 27 2c 20 69 73 5f 63 72 6f 73 73 5f 64 65 76 69 63 65 3a 5c 5c 5c 27 66 61 6c 73 65 5c 5c 5c 27 2c 20 63 72 65 61 74 69 76 65 5f 67 72 6f 75 70 5f 69 64 3a 5c 5c 5c 27 5c 5c 5c 27 2c 20 63 72 65 61 74 69 76 65 5f 67 72 6f 75 70 5f 6e 61 6d 65 3a 5c 5c 5c 27 5c 5c 5c 27 2c 20 69 6d 70 72 65 73 73 69 6f 6e 5f 65 70 6f 63 68 5f 6d 69 63 72 6f 73 3a 5c 5c 5c 27 5c 5c 5c 27 2c 20 76 69 73 69 74 5f 74 72 61 63 6b 69 6e 67 Data Ascii: 613(function(){var c="!function(){var e=\'(function(){try {window.mntn = {is_viewable_verified_visit:\\\'false\\\', is_cross_device:\\\'false\\\', creative_group_id:\\\'\\\', creative_group_name:\\\'\\\', impression_epoch_micros:\\\'\\\', visit_tracking

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50246	24.75.29.68	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:36 UTC	3996	OUT	GET /rb_edeadee0-0165-4b9e-a91f-0085183ac4e1?type=js3&sn=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0&svrid=4&flavor=post&vi=UCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0&modifiedSince=1710172684086&rf=https%3A%2F%2Fm.mtb.com%2FEnrollment&bp=3&app=ea7c4b59f27d43eb&crc=1977812690&en=zgefxirc&end=1 HTTP/1.1 Host: m.mtb.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; ASP.NET_SessionId=5uv0tujx1kbkg4x5nm4n5lkn; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS0145b678=01fb46a9267aaba47de90e46038130a4ecd84021329e8424a9672dccdf4955883b31c2abe46d84d4c1c30febb91ba46c8411f25f78297a18b92c876d1fa51d103fd26d067e; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; TS43d740f8029=0856addebbab28008904e803062ca0647d098433b7ef3c8f6e4359ca8757fef47da82b9dc6172081f73cd507f3f0751a; rxvt=1710379642191\|1710377821892; TS43d740f8077=0856addebbab2800d0c7eb116316fcf73adb92ca9f4e7c845742a20dd6cc23b1a2b0428fa86143d789317d5395de75f308b39fa3e8172000b31b10172a6648c6f04f3d575c476acad1b33ff1d217cf37fff91c0433354c28; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; TS00000000076=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; TSPD_101_DID=0856addebbab280072a33922b87f447f08effaae550a01547974856c3f5be29b71bcf5579a75636a891c19bc8b5b77f508a7d73940063800b28096b74a6ce3147e4afc4ec81108df48bc2703a62306ff9df5fa29f4b549efaf2fd903b891a1e10b8d44027292e7a1b194576b8312cb32; TSPD_101=0856addebbab28002af27e37b16536547d36f5514d908e2a76eff2f85e55962c7ec47766a25b15a54b1e850615a6bbc708824bb86705180024499e2a4e478e24ee757dcfe761509665cb42d8d2431f12; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0; TS1b6f618f027=0856addebbab200096d04935692b9b2d96fa760c82f45e0baedb1add4c0a0e2861c2deb371158b58088d0199e9113000af1cca7249304dda83e21b67363b74c7edd3498ed4de1644987db49a50e6c805776a0b2cbab68c05c9c0660ad124a777
2024-03-14 00:57:36 UTC	425	IN	HTTP/1.1 200 OK Cache-Control: no-cache, must-revalidate, pre-check=0, post-check=0, max-age=0, s-maxage=0 Expires: 0 X-SRV: P-NAO-002 Date: Thu, 14 Mar 2024 00:57:35 GMT Content-Length: 6 Set-Cookie: TS1b6f618f027=0856addebbab2000b55b3d7f7ea009d5b38fb7c488388e5b84d8ba720e1c1f1e8344619b94bbd53a08321a47eb1130003c54edeb482f5f21746e7b5a2334072c9f31c500214cd4fe6db0196eb142bc7b3e0802412c9052945ce09050f9277c9c; Path=/
2024-03-14 00:57:36 UTC	6	IN	Data Raw: 46 4c 28 4f 41 29 Data Ascii: FL(OA)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50247	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:36 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:36 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50248	52.238.253.184	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:36 UTC	600	OUT	POST /api/v1/sendLogs?cid=mufasa&cdsnum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642&csid=null&ds=js&sdkVer=2.29.0.1447.ac027e4 HTTP/1.1 Host: log-5d65a0ab.us.v2.we-stats.com Connection: keep-alive Content-Length: 116 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onlinebanking.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:36 UTC	116	OUT	Data Raw: 6d 39 69 79 4f 4c 63 34 2f 61 5a 6a 63 47 70 65 69 59 4b 70 51 6e 6c 70 67 55 4a 6d 6e 6b 4a 4a 52 71 70 43 54 6d 4a 78 69 59 4b 78 41 52 41 6f 35 42 62 72 4b 59 41 56 4a 43 71 55 35 4a 63 6b 35 69 6a 6b 70 77 48 56 51 74 55 56 70 78 59 58 5a 2b 62 6e 4c 53 34 74 79 6c 6c 57 6e 6c 2b 55 6e 56 71 30 4e 43 65 31 4c 44 56 48 5a 46 46 78 48 6a 4d 41 Data Ascii: m9iyOLc4/aZjcGpeiYKpQnlpgUJmnkJJRqpCTmJxiYKxARAo5BbrKYAVJCqU5Jck5ijkpwHVQtUVpxYXZ+bnLS4tyllWnl+UnVq0NCe1LDVHZFFxHjMA
2024-03-14 00:57:36 UTC	170	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Date: Thu, 14 Mar 2024 00:57:36 GMT access-control-allow-origin: * access-control-allow-credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50250	142.251.40.132	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:36 UTC	1798	OUT	GET /pagead/1p-conversion/875517505/?random=569208666&cv=11&fst=1710377853057&bg=ffffff&guid=ON&async=1&gtm=45be43b0v888587359za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&label=BSiSCJb47pUYEMGsvaED&hn=www.googleadservices.com&frm=0&tiba=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1830439468.1710377812&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COG9sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMu-1ra2qOjfGRJPQ2hFSThKM0Zyd1lRMU9DanZjam8tLURSQVJJbUFNc3luckJ6MjQwbmhoUFRnak85ZlZZRFRSV2FGU0R3SURZWlNZcTdIQXpSa3ZnSXphbxpYQ2hBSThKM0Zyd1lROVBicjk1cnd5ZFE0RWk0QTJ5cWprbll0ckNuaEdSeFY3SmlyTEtVcERpeElsOEsxNV9tLTd5SmNNajlBWnZia25raDdTelliZUxFdyITCKq624PG8oQDFckl0AQdS_8DHjICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI&is_vtc=1&cid=CAQSKQB7FLtqWjlv5Cz-Emj3mPWUoy-30QxpYc7nmefNSMlllMPKir3h4H2F&random=2140994703 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:37 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 14 Mar 2024 00:57:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-14 00:57:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50249	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:36 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:36 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50251	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:36 UTC	504	OUT	GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377854436&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=739&N=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:36 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:36 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50252	108.139.29.6	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:36 UTC	2229	OUT	GET /favicon.ico HTTP/1.1 Host: www3.mtb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www3.mtb.com/personal-banking/online-mobile-services Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: utag_main__sn=1; utag_main_ses_id=1710377794109%3Bexp-session; ajs_anonymous_id=3ec2a409-d2a3-49f8-bd65-05e8b874328c; at_check=true; mboxEdgeCluster=34; _cq_duid=1.1710377811.4AAk1vNijWsJXg6B; _cq_suid=1.1710377811.LyfUeGgwomjj9ERX; _gcl_au=1.1.1830439468.1710377812; _fbp=fb.1.1710377812856.447036686; _ga=GA1.1.1166952759.1710377814; QuantumMetricSessionID=11e861b9942682faa2c672d2e3a610bf; QuantumMetricUserID=08915c35361b6feb86cbfd46724a8689; TS0128739d=019f8203fddc08dc3975b0a39d1e71003feb580f0472d7d8e843b36d67ccf0f355dee3fce9829f331d6d602feb17dc52950522779c5ae3ef139e7d6267a9d01b81e2541d20; rxVisitor=1710377821890TOFDP3HKVGN2D1A4CGEJV6R3E8KOFRTV; dtSa=-; cdContextId=1; bmuid=1710377824499-213BC8E0-D6A4-4FF5-8A53-CFF1DECD5B05; cdSNum=1710377826368-sjn0000307-149f097d-8821-4311-86c6-12cba668a642; utag_main__ss=0%3Bexp-session; dtCookie=v_4_srv_4_sn_984EE5E70B0EDC5EE4FADD9BF95210E2_perc_100000_ol_0_mul_1_app-3A893c324bd7e5ac65_1_app-3A1ce138bfdcbaa26d_1_app-3Aea7c4b59f27d43eb_1_rcs-3Acss_0; TS01ff5c42=01fb46a926d0b917f48de077c01f2acc2d94774c269e8424a9672dccdf4955883b31c2abe4e1a742782dd9a12346c18aecc45cda1992b4c741b5845140161a881f4131c4a3; rxvt=1710379642191\|1710377821892; dtPC=4$377839576_29h-vUCUIPFAVTBUCROBJJCCMFEORKPTCUTNM-0e0; utag_main__se=4%3Bexp-session; utag_main__st=1710379647198%3Bexp-session; utag_main__pn=4%3Bexp-session; mbox=session#982bceee196b4711901768c5d35728f4#1710379708\|PC#982bceee196b4711901768c5d35728f4.34_0#1773622648; _uetsid=bec81be0e19d11ee8a8a71f100dc712f; _uetvid=bec920d0e19d11eebe7167b27d74fe06; _ga_ZTNQ6ZK8T0=GS1.1.1710377813.1.1.1710377852.21.0.0
2024-03-14 00:57:37 UTC	820	IN	HTTP/1.1 404 Not Found Content-Type: text/html;charset=utf-8 Content-Length: 130300 Connection: close Accept-Ranges: bytes Cache-Control: max-age=3600 Cache-Control: no-cache="set-cookie" Content-Disposition: inline Date: Thu, 14 Mar 2024 00:56:12 GMT ETag: "1fcfc-6139217a0ba2e" Last-Modified: Wed, 13 Mar 2024 22:14:02 GMT Server: Apache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Dispatcher: dispatcher2useast1-28503851 X-Frame-Options: SAMEORIGIN X-Vhost: publish Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 babb61789095288ef1d09146c15e7f1e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P2 X-Amz-Cf-Id: qhnYZm0osymvsQnMl9tgw7-zUCFUXCp5UpwQNcqnO21O03Fr9olMwQ== Age: 85 Permissions-Policy: browsing-topics=()
2024-03-14 00:57:37 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 2f 3e 0a 09 3c 74 69 74 6c 65 3e 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 09 0a 09 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 65 6d 70 6c 61 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 63 6f 6e 74 65 6e 74 2d 70 61 67 65 22 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 72 74 69 63 6c 65 3a 70 75 62 6c Data Ascii: <!DOCTYPE HTML><html lang="en"><head><meta charset="UTF-8"/><title>404</title><meta name="template" content="content-page"/><meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1"/><meta property="article:publ
2024-03-14 00:57:37 UTC	16384	IN	Data Raw: 67 65 22 20 68 72 65 66 3d 22 2f 63 6f 6d 6d 65 72 63 69 61 6c 22 3e 43 6f 6d 6d 65 72 63 69 61 6c 20 48 6f 6d 65 20 50 61 67 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 69 67 61 74 69 6f 6e 2d 63 68 69 6c 64 22 20 72 6f 6c 65 3d 22 6c 69 73 74 69 74 65 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 69 6e 6b 20 6e 61 76 69 67 61 74 69 6f 6e 2d 63 68 69 6c 64 2d 6c 69 6e 6b 20 22 20 61 72 69 61 2d 6c 61 62 Data Ascii: ge" href="/commercial">Commercial Home Page</a> </li> <li class="navigation-child" role="listitem"> <a class="navigation-link navigation-child-link " aria-lab
2024-03-14 00:57:37 UTC	16384	IN	Data Raw: 69 63 6f 6e 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 20 31 33 22 3e 0a 09 09 3c 67 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 6c 2d 6e 61 76 2d 69 63 6f 6e 22 20 73 74 72 6f 6b 65 3d 22 23 45 45 45 44 45 43 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 09 09 09 3c 70 61 74 68 20 64 3d 22 4d 31 32 20 36 2e 32 35 43 31 32 20 39 2e 34 33 20 39 2e 34 33 20 31 32 20 36 2e 32 35 20 31 32 53 2e 35 20 39 2e 34 33 2e 35 20 36 2e 32 35 43 2e 35 20 33 2e 30 38 20 33 2e 30 37 2e 35 20 36 2e 32 35 2e 35 53 31 32 20 33 2e 30 38 20 31 32 20 36 2e 32 35 7a 22 3e 3c 2f 70 61 74 68 3e 0a 09 09 09 3c 70 61 74 68 20 64 3d 22 4d 36 2e 32 35 2e 35 63 31 2e 33 35 20 31 2e 33 38 20 32 2e 32 20 33 2e 34 34 20 32 2e 32 20 35 2e 37 35 20 30 20 32 2e 33 2d 2e 38 35 20 34 2e 33 Data Ascii: icon" viewBox="0 0 13 13"><g class="global-nav-icon" stroke="#EEEDEC" fill="none"><path d="M12 6.25C12 9.43 9.43 12 6.25 12S.5 9.43.5 6.25C.5 3.08 3.07.5 6.25.5S12 3.08 12 6.25z"></path><path d="M6.25.5c1.35 1.38 2.2 3.44 2.2 5.75 0 2.3-.85 4.3
2024-03-14 00:57:37 UTC	11977	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 69 63 6f 6e 20 2d 66 61 63 65 62 6f 6f 6b 2d 73 6f 63 69 61 6c 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 46 61 63 65 62 6f 6f 6b 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 69 63 6f 6e 2d 66 61 63 65 62 6f 6f 6b 2d 73 6f 63 69 61 6c 22 3e 3c 2f 75 73 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 Data Ascii: <svg class="footer-icon -facebook-social" aria-hidden="true"> <title>Facebook</title> <use xlink:href="#icon-facebook-social"></use> </s
2024-03-14 00:57:37 UTC	16384	IN	Data Raw: 28 29 7b 0d 0a 09 66 69 78 53 70 65 65 64 42 75 6d 70 4d 6f 64 61 6c 28 29 3b 0d 0a 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 0a 3c 2f 64 69 76 3e 0a 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 69 73 63 6c 6f 73 75 72 65 20 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 20 61 65 6d 2d 47 72 69 64 43 6f 6c 75 6d 6e 2d 2d 64 65 66 61 75 6c 74 2d 2d 31 32 22 3e 0a 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 69 73 63 6c 6f 73 75 72 65 20 63 6f 6d 70 6f 6e 65 6e 74 22 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 64 69 Data Ascii: (){fixSpeedBumpModal();});</script></div></div> </div></div></div></div></div><div class="disclosure aem-GridColumn aem-GridColumn--default--12"><div class="disclosure component"> <div class="_hidden"> </div> <di
2024-03-14 00:57:37 UTC	16384	IN	Data Raw: 32 2e 38 20 32 2e 37 63 30 20 30 20 2e 39 2e 38 20 31 2e 39 20 31 2e 32 20 30 20 30 20 2e 37 2e 33 20 31 2e 36 2e 31 20 30 20 30 20 2e 33 2d 2e 31 2e 36 2d 2e 34 20 30 20 30 20 2e 36 2d 2e 35 20 31 2e 31 2d 2e 36 20 30 20 30 20 2e 38 2d 2e 34 20 32 20 2e 32 20 30 20 30 20 31 2e 31 2e 34 20 32 2e 34 20 31 2e 35 20 30 20 30 20 2e 37 2e 35 2e 36 20 31 2e 33 20 30 20 30 2d 2e 31 2e 35 2d 2e 35 20 31 20 30 20 30 2d 31 2e 32 20 31 2e 36 2d 33 2e 34 20 31 2e 35 20 30 20 30 2d 32 20 2e 31 2d 34 2e 35 2d 31 2e 33 20 30 20 30 2d 31 2e 34 2d 2e 36 2d 33 2e 37 2d 32 2e 33 20 30 20 30 2d 2e 37 2d 2e 35 2d 33 2d 32 2e 39 2d 32 2e 33 2d 32 2e 33 2d 32 2e 39 2d 33 2d 32 2e 39 2d 33 2d 31 2e 38 2d 32 2e 32 2d 32 2e 33 2d 33 2e 36 2d 32 2e 33 2d 33 2e 36 2d 31 2e 34 2d 32 Data Ascii: 2.8 2.7c0 0 .9.8 1.9 1.2 0 0 .7.3 1.6.1 0 0 .3-.1.6-.4 0 0 .6-.5 1.1-.6 0 0 .8-.4 2 .2 0 0 1.1.4 2.4 1.5 0 0 .7.5.6 1.3 0 0-.1.5-.5 1 0 0-1.2 1.6-3.4 1.5 0 0-2 .1-4.5-1.3 0 0-1.4-.6-3.7-2.3 0 0-.7-.5-3-2.9-2.3-2.3-2.9-3-2.9-3-1.8-2.2-2.3-3.6-2.3-3.6-1.4-2
2024-03-14 00:57:37 UTC	16384	IN	Data Raw: 35 2e 31 35 20 31 2e 34 37 2d 31 2e 38 36 2e 38 2d 32 2e 36 34 20 32 2e 34 38 2d 32 2e 35 34 20 34 2e 34 37 2e 31 20 32 2e 30 34 20 31 2e 31 38 20 33 2e 34 37 20 33 2e 30 37 20 34 2e 32 37 20 32 2e 37 20 31 2e 31 32 20 36 2e 34 38 2e 34 20 38 2e 35 35 2d 31 2e 36 36 20 31 2e 39 2d 31 2e 38 37 20 32 2e 33 35 2d 34 2e 32 33 20 32 2e 32 37 2d 36 2e 36 32 4d 33 2e 31 20 36 2e 38 34 63 2d 2e 35 35 2d 2e 31 37 2d 31 2d 2e 33 2d 31 2e 35 32 2d 2e 34 37 2e 37 2d 32 2e 31 20 31 2e 39 37 2d 33 2e 36 20 33 2e 38 37 2d 34 2e 35 37 43 38 2e 30 32 2e 35 20 31 30 2e 37 2e 34 33 20 31 33 2e 33 38 20 31 2e 34 63 32 2e 36 36 2e 39 37 20 33 2e 39 32 20 33 2e 31 35 20 34 2e 31 32 20 35 2e 38 32 2e 32 33 20 32 2e 39 38 2e 31 38 20 35 2e 39 38 2e 32 20 38 2e 39 38 2e 30 34 20 Data Ascii: 5.15 1.47-1.86.8-2.64 2.48-2.54 4.47.1 2.04 1.18 3.47 3.07 4.27 2.7 1.12 6.48.4 8.55-1.66 1.9-1.87 2.35-4.23 2.27-6.62M3.1 6.84c-.55-.17-1-.3-1.52-.47.7-2.1 1.97-3.6 3.87-4.57C8.02.5 10.7.43 13.38 1.4c2.66.97 3.92 3.15 4.12 5.82.23 2.98.18 5.98.2 8.98.04
2024-03-14 00:57:37 UTC	16384	IN	Data Raw: 2c 32 33 2e 38 38 37 36 35 33 39 20 43 32 38 2e 34 36 32 32 34 35 36 2c 32 34 2e 30 37 31 39 35 32 36 20 32 38 2e 34 35 35 39 31 33 34 2c 32 34 2e 32 35 36 38 34 35 38 20 32 38 2e 34 36 33 33 36 33 2c 32 34 2e 34 34 30 39 34 36 33 20 43 32 38 2e 35 31 34 39 35 31 31 2c 32 35 2e 37 32 39 30 35 35 36 20 32 39 2e 34 30 37 30 33 34 32 2c 32 36 2e 37 38 35 33 30 35 32 20 33 30 2e 35 35 38 35 34 37 37 2c 32 36 2e 39 32 35 38 30 38 32 20 43 33 31 2e 37 37 37 32 39 33 33 2c 32 37 2e 30 37 34 36 33 34 33 20 33 32 2e 38 39 35 36 35 36 33 2c 32 36 2e 32 37 37 33 39 33 38 20 33 33 2e 31 32 35 34 37 34 38 2c 32 34 2e 39 35 31 34 33 34 20 43 33 33 2e 32 34 38 30 31 39 38 2c 32 34 2e 32 34 34 37 35 37 34 20 33 33 2e 32 33 34 37 39 36 39 2c 32 33 2e 34 37 33 34 37 37 32 Data Ascii: ,23.8876539 C28.4622456,24.0719526 28.4559134,24.2568458 28.463363,24.4409463 C28.5149511,25.7290556 29.4070342,26.7853052 30.5585477,26.9258082 C31.7772933,27.0746343 32.8956563,26.2773938 33.1254748,24.951434 C33.2480198,24.2447574 33.2347969,23.4734772
2024-03-14 00:57:37 UTC	3635	IN	Data Raw: 2d 31 2e 36 34 2d 2e 33 33 2d 32 2e 32 33 2d 2e 39 32 2d 2e 36 2d 2e 36 2d 2e 39 32 2d 31 2e 33 38 2d 2e 39 32 2d 32 2e 32 32 76 2d 31 2e 35 36 63 30 2d 2e 38 34 2e 33 33 2d 31 2e 36 33 2e 39 32 2d 32 2e 32 32 2e 36 2d 2e 36 20 31 2e 34 2d 2e 39 32 20 32 2e 32 32 2d 2e 39 32 7a 22 2f 3e 0a 09 09 3c 2f 67 3e 0a 20 20 20 20 3c 2f 73 79 6d 62 6f 6c 3e 0a 0a 09 3c 73 79 6d 62 6f 6c 20 69 64 3d 22 69 63 6f 6e 2d 70 69 65 2d 63 68 61 72 74 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 35 37 22 3e 0a 09 20 20 20 20 3c 73 74 79 6c 65 3e 0a 09 20 20 20 20 20 20 20 20 2e 69 63 6f 6e 2d 70 69 65 2d 63 68 61 72 74 20 7b 20 73 74 72 6f 6b 65 3a 20 23 33 32 35 33 41 34 3b 20 7d 0a 09 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 09 09 3c 67 20 63 6c 61 73 73 3d 22 69 Data Ascii: -1.64-.33-2.23-.92-.6-.6-.92-1.38-.92-2.22v-1.56c0-.84.33-1.63.92-2.22.6-.6 1.4-.92 2.22-.92z"/></g> </symbol><symbol id="icon-pie-chart" viewBox="0 0 60 57"> <style> .icon-pie-chart { stroke: #3253A4; } </style><g class="i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50253	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:37 UTC	758	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377856220&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&S=0&N=0&P=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 780 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:37 UTC	780	OUT	Data Raw: 78 01 7d 54 5d 73 a2 4a 10 fd 2b d6 3c 6c d5 2d 49 9c e1 1b aa f6 41 25 46 45 8c 09 46 0d b7 ee 03 1f 03 22 08 84 4f 35 bb ff 7d 7b f4 ba b5 4f fb 34 87 e6 f4 e9 9e 3e 0d ff 7e a1 1a e9 a8 42 1c 3a 21 9d f0 2a e6 d0 19 00 e6 45 0e 75 f7 c8 1e e9 1a 56 38 e4 03 15 98 ff c0 c1 7b 42 88 05 aa 06 2e 0e 45 4f 75 79 57 d6 84 50 d4 88 ec 11 ec 85 32 d0 2a a4 f3 58 50 79 89 43 05 2b f2 92 a5 71 46 7b df 7a 56 ee c5 29 ed 8d dc 2c 89 b3 a8 67 d3 b2 8d 7d 5a f5 7e f4 ac 6f eb 6b 18 b2 9b 32 85 9c 7d 5d 17 95 3e 18 74 5d 27 3c 1e 6b ef d1 cf 8f 83 82 96 55 9e b9 e9 83 77 53 18 e4 57 e5 87 e3 55 f7 a1 fa 5f 0f 44 7c 0a 1a 62 c4 50 80 74 19 8e 92 35 05 97 a4 29 b4 47 b0 06 b1 0b d2 43 37 ad 28 87 72 a4 c3 ab 02 e9 5f c8 05 3a 34 ee 01 5d 82 18 dc 9c 60 81 07 36 e8 f0 Data Ascii: x}T]sJ+<l-IA%FEF"O5}{O4>~B:!EuV8{B.EOuyWP2XPyC+qF{zV),g}Z~ok2}]>t]'<kUwSWU_D\|bPt5)GC7(r_:4]`6
2024-03-14 00:57:38 UTC	963	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:38 GMT Content-Type: application/json Content-Length: 90 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex
2024-03-14 00:57:38 UTC	90	IN	Data Raw: 31 31 65 38 36 31 62 39 39 34 32 36 38 32 66 61 61 32 63 36 37 32 64 32 65 33 61 36 31 30 62 66 2f 30 38 39 31 35 63 33 35 33 36 31 62 36 66 65 62 38 36 63 62 66 64 34 36 37 32 34 61 38 36 38 39 2f 32 39 33 31 61 36 36 30 38 38 64 61 31 36 31 36 33 37 39 65 65 66 30 32 Data Ascii: 11e861b9942682faa2c672d2e3a610bf/08915c35361b6feb86cbfd46724a8689/2931a66088da1616379eef02

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50255	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:37 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 2347 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:37 UTC	2347	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 66 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8f9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:57:38 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:38 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50254	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:38 UTC	756	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377856223&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=2b3f03e8da0f4b8a2a693f4916b10bf6 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 43410 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:38 UTC	16384	OUT	Data Raw: 78 01 ed fd e9 76 1b c9 96 ef 09 be 8a 57 9c 3a ba 37 2b 09 ca e1 98 75 52 99 4b 62 48 21 9d 43 2a 06 0d 31 e4 a9 8e 05 02 20 81 10 a6 00 40 52 54 f6 cd d5 1f ea 11 ea 01 ee ea 6f f5 a5 d7 ea 57 c8 7e 93 7a 92 fe fd b7 b9 3b 1c ee e6 20 48 51 53 1c 31 42 80 c3 dc dd 86 6d 7b de db cc fe e5 7f f9 fa db 83 17 3f 7f f7 28 18 ae 26 e3 7f fd 97 f8 73 d0 ed ff eb bf dc 1d da d7 f1 ac 7f f9 af ff f2 bf 54 2a df 1f fd f5 f9 b7 cf 9e bc 38 3a bc f7 1f 5f 55 bf e2 63 fa d5 bd af f4 fb ab bd af ba 5f dd fb f7 ff 7d ef ab 03 be b2 37 1f 3d f8 3a be f9 1f 5f 45 c9 2b bd 71 77 b9 a4 f8 9c d7 bb ab ca 60 3c 98 0c a6 ab ca a4 bb 78 3d 58 7c f5 3f fe 47 b1 9e a3 47 2f 1e 14 eb 19 ae 56 f3 ca e0 f7 b3 d1 79 5c d9 6c 31 3a 1d 4d 2b ab c5 a8 3b a6 9e bd 6c 9b b3 e9 8a 46 e2 Data Ascii: xvW:7+uRKbH!C1 @RToW~z; HQS1Bm{?(&sT8:_Uc_}7=:_E+qw`<x=X\|?GG/Vy\l1:M+;lF
2024-03-14 00:57:38 UTC	16384	OUT	Data Raw: 91 86 55 40 7c c1 01 54 d8 e9 c0 bb d1 84 28 0e 1b 2c df 83 f4 a4 96 85 6d 34 41 14 5f ac dd 1a 52 1a c7 b8 2a 43 17 43 b7 db 43 76 d5 1a f0 4d b8 a9 7c 44 28 3c e8 68 aa 01 c6 5e b3 c5 9a 2d e4 3d 2a 02 1a 32 a4 4b 9d ac d9 41 68 fa 86 c1 b2 26 24 0c fa 2d cc 1b 33 9b aa 5a a8 ae c1 81 e2 a4 48 b9 36 ac 90 c5 44 0d 29 3c 2c 7d c6 85 82 80 6a a1 10 72 1b 5d 0d 9e 8e 85 4e 6c bf cd 4b 62 37 70 bf a8 05 0b 55 d7 d0 67 9b 11 19 c6 48 05 b3 19 d1 7e 95 22 89 4f 1a 00 a0 2a d0 35 ac 08 58 2b 96 be b8 6d d8 82 74 d1 35 9a 68 23 70 37 18 19 e9 38 ac 3b 69 a0 59 a1 c1 4a 7d 10 45 2b 6f 24 6a b7 d0 9f a4 c5 84 a8 f7 35 c4 ae 72 2e 60 84 51 87 49 92 a4 a8 d1 3b 26 09 35 10 d5 a0 c3 6c 30 5d b0 bc 16 3d a3 0c be cc aa 3f 24 1b 8b 6c 59 c0 07 8c a5 1b a1 93 76 a4 ee Data Ascii: U@\|T(,m4A_RCCCvM\|D(<h^-=2KAh&$-3ZH6D)<,}jr]NlKb7pUgH~"O*5X+mt5h#p78;iYJ}E+o$j5r.`QI;&5l0]=?$lYv
2024-03-14 00:57:38 UTC	10642	OUT	Data Raw: 3b 37 eb 5e 4b 20 cb 52 d6 89 99 b7 94 2e 9d 1b 51 76 f9 fd ae 39 ab f1 c8 85 7d 3b 6b 57 37 1f f7 ad e4 35 85 6d 8e 8f 68 b1 0e df f5 c3 8b 0b b1 49 02 16 f8 9f 8d 21 97 37 34 3e 4a 16 6a cc b8 0a b1 d5 d2 cc a6 ec a0 7c b3 96 48 f2 eb ce 93 cd 4e 46 d6 5d 99 62 fa c7 3b c0 c7 52 1c 73 78 95 25 e1 eb a4 98 7a 04 c3 ae 69 9c f5 76 87 05 79 1d 6f c8 dd 6f 83 27 69 9c 25 6f 16 c6 70 93 03 52 be e1 c4 93 d5 70 a0 3d 6a b5 29 39 41 0b fe 2d 2f 08 0a 2b 7b d3 4e 49 f9 bf ff 5f ff 67 77 7a 69 a7 81 2a f1 bf 24 bd 15 00 fb c4 f4 95 fa 59 39 bf 7b df f3 56 8b 85 79 26 3f 38 2b 7a 62 e8 d7 db 2d 0e 9a eb 44 d7 d8 1d e4 8a 37 4b e6 ad 06 89 af 38 e2 a6 62 07 d0 e4 85 62 f6 28 8a f8 90 da a8 1e 1f 52 9b 5c e8 40 0a 1f ef d0 94 69 87 8d 6f a7 6c 02 32 20 a1 e8 68 76 Data Ascii: ;7^K R.Qv9};kW75mhI!74>Jj\|HNF]b;Rsx%zivyoo'i%opRp=j)9A-/+{NI_gwzi*$Y9{Vy&?8+zb-D7K8bb(R\@iol2 hv
2024-03-14 00:57:38 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:38 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50256	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:38 UTC	785	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377856867&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 498 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:38 UTC	498	OUT	Data Raw: 78 01 95 92 4d af 9a 40 14 86 ff 0a 99 c5 dd 68 95 e1 1b 92 bb 00 11 41 44 51 10 95 a6 0b 45 c0 71 10 2d f2 a1 58 ff 7b 29 d7 34 e9 6d ba e8 ea 4c 4e ce f3 9c f7 24 f3 00 21 0e ef 40 7a bc 2a 28 29 09 5d 16 53 14 db 6a 3c ad 8a 11 d4 70 05 15 c6 dd 1b b5 e8 19 be af 2c 10 54 ed 5b a7 24 75 5f c8 47 df e5 e3 ed 1a f7 0d 46 b1 fa ea b4 af 5b e4 5d d6 07 78 b9 35 b1 e7 ab 51 8d 47 e3 79 3c 89 8a 14 da 63 d3 ac b4 93 da 59 c2 81 43 6e e2 cc cc c9 52 4d ac 91 c0 ac bc 32 bb f2 e5 dd 36 82 d0 09 8e 9d ad ed 39 38 dd 6f cf ab 52 44 74 c6 e2 8b 56 e8 eb fb 2c 1b f4 4f d8 b1 bc f1 3c f0 fd 49 31 28 11 77 d5 fc 5a 71 9a 38 77 2e 9c b2 13 b7 83 e8 09 3f 14 bc 50 28 a7 15 c7 88 ea fa 82 f6 97 15 de e3 63 cd d5 25 99 c9 16 23 d0 63 73 11 53 a6 9c 0d 29 27 9a d1 7e b5 Data Ascii: xM@hADQEq-X{)4mLN$!@z*()]Sj<p,T[$u_GF[]x5QGy<cYCnRM2698oRDtV,O<I1(wZq8w.?P(c%#csS)'~
2024-03-14 00:57:38 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:38 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50257	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:38 UTC	544	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377856220&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&S=0&N=0&P=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:38 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:38 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50258	3.227.190.204	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:38 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:38 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:38 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50259	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:38 UTC	540	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377856223&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=1&Y=1&X=2b3f03e8da0f4b8a2a693f4916b10bf6 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:38 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:38 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50262	216.239.32.181	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:38 UTC	1421	OUT	POST /g/collect?v=2&tid=G-ZTNQ6ZK8T0&gtm=45je43b0v890340193za200&_p=1710377848566&gcd=13l3l3l3l1&npa=0&dma=0&gdid=dYmQxMT&cid=1166952759.1710377814&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&sid=1710377813&sct=1&seg=1&dl=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&dt=Online%20%26%20Mobile%20Banking%20Services%20%7C%20M%26T%20Bank&_s=1&tfd=12435 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 286 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www3.mtb.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-14 00:57:38 UTC	286	OUT	Data Raw: 65 6e 3d 70 61 67 65 5f 76 69 65 77 26 5f 65 65 3d 31 26 65 70 2e 63 68 61 6e 6e 65 6c 6d 69 78 5f 73 65 73 73 69 6f 6e 5f 69 64 3d 48 69 4d 73 6b 54 43 70 6e 73 66 37 69 54 35 4e 26 65 70 2e 63 68 61 6e 6e 65 6c 6d 69 78 5f 65 76 65 6e 74 5f 69 64 3d 48 69 4d 73 6b 54 43 70 6e 73 66 37 69 54 35 4e 26 65 70 2e 63 68 61 6e 6e 65 6c 6d 69 78 5f 63 6f 6e 76 5f 69 64 3d 48 69 4d 73 6b 54 43 70 6e 73 66 37 69 54 35 4e 2d 48 69 4d 73 6b 54 43 70 6e 73 66 37 69 54 35 4e 26 65 70 6e 2e 63 68 61 6e 6e 65 6c 6d 69 78 5f 74 69 6d 65 73 74 61 6d 70 3d 31 37 31 30 33 37 37 38 34 38 35 37 31 26 5f 65 74 3d 31 30 26 75 70 2e 63 68 61 6e 6e 65 6c 6d 69 78 5f 69 64 3d 31 31 36 36 39 35 32 37 35 39 2e 31 37 31 30 33 37 37 38 31 34 0d 0a 65 6e 3d 43 51 26 5f 65 65 3d 31 26 Data Ascii: en=page_view&_ee=1&ep.channelmix_session_id=HiMskTCpnsf7iT5N&ep.channelmix_event_id=HiMskTCpnsf7iT5N&ep.channelmix_conv_id=HiMskTCpnsf7iT5N-HiMskTCpnsf7iT5N&epn.channelmix_timestamp=1710377848571&_et=10&up.channelmix_id=1166952759.1710377814en=CQ&_ee=1&
2024-03-14 00:57:39 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www3.mtb.com Date: Thu, 14 Mar 2024 00:57:39 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50260	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:39 UTC	753	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377857501&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1153&N=5&P=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 218 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:39 UTC	218	OUT	Data Raw: 78 01 6d 90 3d 0f 82 30 10 86 ff ca e5 06 a7 c6 50 5a c0 34 4e c6 c5 01 19 70 d0 18 07 3f aa 69 c4 9a 28 a0 06 f9 ef 1e 05 e3 20 ed d0 bb de fb 3e 77 ed ba 42 83 ca e7 9c e1 11 95 c7 b0 44 85 89 cd 8c d5 30 80 f8 ba 33 99 86 c9 d6 9e 8d 3d 41 aa 6f a5 d9 eb 3b bc 21 1e 2c dc 35 32 cc c9 71 d5 4d 40 11 8f b8 27 a2 68 14 d0 12 0c 0f 74 c3 30 9d a3 0a 6a 56 39 e9 25 27 29 75 a9 b0 70 72 59 b7 b2 ff 3a 89 fc 50 92 b1 c1 78 ff f5 87 ab cb 61 c8 f0 89 ca 16 59 c6 f0 d5 06 ad 47 06 d1 d7 b5 a4 a6 33 1a 74 3c 49 a6 2b e0 21 70 b7 45 77 36 99 00 0f fc 26 27 29 f1 42 49 bf 41 38 29 02 37 c0 88 7f 59 49 3f ab 25 76 dc 7e c6 ef 11 fd 75 5e 6f 3e 13 6b 61 82 Data Ascii: xm=0PZ4Np?i( >wBD03=Ao;!,52qM@'ht0jV9%')uprY:PxaYG3t<I+!pEw6&')BIA8)7YI?%v~u^o>ka
2024-03-14 00:57:39 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:39 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50261	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:39 UTC	571	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377856867&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&U=08915c35361b6feb86cbfd46724a8689&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:39 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:39 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50263	34.66.3.160	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:39 UTC	481	OUT	OPTIONS /mtb/hash-check HTTP/1.1 Host: rl.quantummetric.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www3.mtb.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:39 UTC	415	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:39 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: * Access-Control-Allow-Origin: https://www3.mtb.com Vary: Origin Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50264	34.66.3.160	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:39 UTC	578	OUT	POST /mtb/hash-check HTTP/1.1 Host: rl.quantummetric.com Connection: keep-alive Content-Length: 841 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:39 UTC	841	OUT	Data Raw: 5b 22 37 58 71 65 32 77 77 65 76 70 4d 3d 22 2c 22 4f 4f 79 78 61 4c 4f 4f 58 41 4d 3d 22 2c 22 64 6b 33 6a 4b 4f 39 63 62 41 41 3d 22 2c 22 4a 70 50 7e 56 54 62 54 6d 56 77 3d 22 2c 22 68 4e 64 78 44 44 31 50 38 32 59 3d 22 2c 22 4a 4f 4c 51 62 46 33 6a 33 6f 34 3d 22 2c 22 58 6d 71 7a 5a 4a 50 52 74 37 59 3d 22 2c 22 53 52 59 79 52 39 61 56 65 54 73 3d 22 2c 22 71 32 73 72 53 51 78 69 76 79 77 3d 22 2c 22 7e 62 43 61 69 58 2b 4c 79 50 63 3d 22 2c 22 44 73 77 50 32 63 47 71 57 66 38 3d 22 2c 22 4a 71 39 47 49 31 4e 51 78 41 59 3d 22 2c 22 54 6a 42 74 79 68 37 66 33 36 73 3d 22 2c 22 41 71 66 65 42 72 79 61 4e 34 45 3d 22 2c 22 73 34 69 64 7a 76 73 48 35 69 73 3d 22 2c 22 36 77 6b 72 34 6f 52 45 46 39 55 3d 22 2c 22 57 36 4e 46 53 54 6e 78 35 51 4d 3d 22 Data Ascii: ["7Xqe2wwevpM=","OOyxaLOOXAM=","dk3jKO9cbAA=","JpP~VTbTmVw=","hNdxDD1P82Y=","JOLQbF3j3o4=","XmqzZJPRt7Y=","SRYyR9aVeTs=","q2srSQxivyw=","~bCaiX+LyPc=","DswP2cGqWf8=","Jq9GI1NQxAY=","TjBtyh7f36s=","AqfeBryaN4E=","s4idzvsH5is=","6wkr4oREF9U=","W6NFSTnx5QM="
2024-03-14 00:57:39 UTC	337	IN	HTTP/1.1 200 OK Date: Thu, 14 Mar 2024 00:57:39 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www3.mtb.com Vary: Origin Strict-Transport-Security: max-age=15724800; includeSubDomains Access-Control-Allow-Methods: *
2024-03-14 00:57:39 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50265	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:39 UTC	539	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377857501&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1153&N=5&P=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:39 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:39 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50266	34.66.3.160	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:40 UTC	358	OUT	GET /mtb/hash-check HTTP/1.1 Host: rl.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:40 UTC	327	IN	HTTP/1.1 404 Not Found Date: Thu, 14 Mar 2024 00:57:40 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 15 Connection: close Vary: Origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15724800; includeSubDomains Access-Control-Allow-Methods: * Access-Control-Allow-Credentials: true
2024-03-14 00:57:40 UTC	15	IN	Data Raw: 68 61 73 68 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: hash not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50267	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:40 UTC	716	OUT	POST /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377858952&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1970&N=21&P=3 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 41 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://m.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:40 UTC	41	OUT	Data Raw: 78 01 8b ae 56 2a 51 b2 52 2a 4f 53 d2 51 4a 51 b2 32 34 d1 51 0a f6 53 b2 32 32 ac d5 81 ca 24 41 65 6a 63 01 fe 81 0b 57 Data Ascii: xVQROSQJQ24QS22$AejcW
2024-03-14 00:57:40 UTC	936	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:40 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://m.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50268	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:41 UTC	714	OUT	POST /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377859601&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=905&N=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 16 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://m.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:41 UTC	16	OUT	Data Raw: 78 01 ab 56 4a 55 b2 32 34 a8 05 00 0a 2e 02 3d Data Ascii: xVJU24.=
2024-03-14 00:57:41 UTC	936	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:41 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://m.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50269	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:41 UTC	506	OUT	GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377858952&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1970&N=21&P=3 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:41 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:41 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50270	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:41 UTC	504	OUT	GET /?T=B&u=https%3A%2F%2Fm.mtb.com%2FEnrollment&t=1710377843525&v=1710377859601&H=4f6fef5f86f51c4a590c3f69&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=905&N=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:41 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:41 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50271	34.72.33.225	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:42 UTC	754	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377861224&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1554&N=12&P=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 176 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:42 UTC	176	OUT	Data Raw: 78 01 3d 8e b9 0e 83 30 10 44 ff 65 6b 73 93 98 b8 4c 9f 43 82 2e 4a c1 e1 04 24 1f c8 06 14 09 f1 ef 99 50 c4 8d 9f d6 33 de f7 58 69 20 91 17 8c 5e 24 62 46 0b 09 ba 54 e7 60 49 c5 28 9d b7 a6 56 c2 1a 35 18 19 d4 a6 0b b4 6d 06 25 89 d1 84 9c dd 01 94 f0 24 ce 38 2f 0e 38 19 a3 0e 93 f8 c8 a8 bc 02 d2 8d ad a4 91 be df ca 0a c5 19 d8 4f d3 e8 45 14 d9 c6 87 5e be 9d 94 a6 b5 6a d6 26 6c ad 8e b4 35 c8 b5 24 d2 18 42 1e 77 96 73 fc b6 fb 39 c8 9e 52 ec c7 fc bf 16 af 3f 9f 4f ef 50 f4 c0 bd b9 6b 64 db f3 0b 57 eb 3d a8 Data Ascii: x=0DeksLC.J$P3Xi ^$bFT`I(V5m%$8/8OE^j&l5$Bws9R?OPkdW=
2024-03-14 00:57:43 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:43 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50272	54.83.110.109	443	5744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:42 UTC	668	OUT	POST /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive Content-Length: 2353 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www3.mtb.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:42 UTC	2353	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 65 63 34 33 32 65 64 34 66 38 66 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 61 31 31 38 63 36 61 32 34 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 63 38 32 64 30 38 38 30 33 37 65 36 63 34 66 61 62 37 66 32 35 35 35 38 65 33 65 64 61 36 62 39 34 30 32 36 33 30 30 37 32 39 34 35 30 35 36 35 37 33 64 30 33 30 65 39 33 62 61 33 39 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 32 33 32 66 31 34 63 36 36 61 61 31 33 32 66 37 38 31 36 63 34 35 32 65 35 34 32 65 63 38 62 63 35 39 61 37 65 65 34 36 Data Ascii: e=37dfbd8ee84e00126beec432ed4f8f9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5a118c6a2417071a10acf9f29f671c82d088037e6c4fab7f25558e3eda6b9402630072945056573d030e93ba391c77be26bb25cb43e29232f14c66aa132f7816c452e542ec8bc59a7ee46
2024-03-14 00:57:43 UTC	279	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www3.mtb.com Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:43 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
477	192.168.2.4	50273	3.227.190.204	443

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:43 UTC	398	OUT	GET /mon HTTP/1.1 Host: obs.segreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=e0c14bcde7ba9559c6c5a72f887ae4bc
2024-03-14 00:57:43 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 14 Mar 2024 00:57:43 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
478	192.168.2.4	50274	34.72.33.225	443

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:43 UTC	752	OUT	POST /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377861877&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=730&N=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive Content-Length: 181 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www3.mtb.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:43 UTC	181	OUT	Data Raw: 78 01 3d 4e cb 0a 83 30 10 fc 97 3d 47 8d 8f a2 ee b1 d0 63 69 41 6f a5 07 1f 69 15 4c 22 46 45 10 ff bd 83 87 ee 65 87 dd 79 ed 74 23 7e ed d4 13 27 99 a0 0f b1 14 b4 12 d3 bd bc 7a 6b c4 a3 9a 9c 35 d5 c0 d6 0c bd 51 5e 65 5a 4f db ba 1f 14 09 9a 89 c3 34 94 71 9a 66 17 4c 7c bc 05 6d a7 9d 86 c3 f3 51 94 20 2d 80 dd 3c 8f 8e 83 c0 d6 ce 77 ea 3b 29 65 1a 3b 2c da f8 8d d5 81 b6 06 bc 86 38 92 08 77 d8 71 92 0a 2a ce 2e 13 8a e5 11 b2 70 ff 87 e1 8b 6c da ba 09 42 07 78 2a 5b 30 e4 59 42 01 e1 81 43 2e c1 dd a0 8d e5 f1 03 ff e8 40 6d Data Ascii: x=N0=GciAoiL"FEeyt#~'zk5Q^eZO4qfL\|mQ -<w;)e;,8wq.plBx[0YBC.@m
2024-03-14 00:57:43 UTC	939	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:43 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www3.mtb.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port
479	192.168.2.4	50275	34.72.33.225	443

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:43 UTC	540	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377861224&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&z=1&S=1554&N=12&P=2 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:43 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:43 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port
480	192.168.2.4	50277	34.72.33.225	443

Timestamp	Bytes transferred	Direction	Data
2024-03-14 00:57:44 UTC	538	OUT	GET /?T=B&u=https%3A%2F%2Fwww3.mtb.com%2Fpersonal-banking%2Fonline-mobile-services&t=1710377855553&v=1710377861877&H=2931a66088da1616379eef02&s=11e861b9942682faa2c672d2e3a610bf&z=1&Q=2&S=730&N=1 HTTP/1.1 Host: mtb-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-14 00:57:44 UTC	848	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 14 Mar 2024 00:57:44 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://*.appcues.net; X-Robots-Tag: noindex

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4268, Parent PID: 2840

General

Target ID:	0
Start time:	01:56:10
Start date:	14/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5744, Parent PID: 4268

General

Target ID:	2
Start time:	01:56:12
Start date:	14/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=1996,i,10392077466193736227,16724924904900396291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6456, Parent PID: 2840

General

Target ID:	3
Start time:	01:56:16
Start date:	14/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mtb-repo.pages.dev/
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1720, Parent PID: 4268

General

Target ID:	7
Start time:	01:57:05
Start date:	14/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6456 --field-trial-handle=1996,i,10392077466193736227,16724924904900396291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7116, Parent PID: 4268

General

Target ID:	8
Start time:	01:57:05
Start date:	14/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6524 --field-trial-handle=1996,i,10392077466193736227,16724924904900396291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly