Edit tour

Windows Analysis Report
https://prosayverso.com.ar/BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr

Overview

General Information

Sample URL:	https://prosayverso.com.ar/BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr
Analysis ID:	1513823
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Suricata IDS alerts for network traffic

Yara detected HtmlPhish54

AI detected landing page (webpage, office document or email)

Phishing site detected (based on favicon image match)

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Found iframes

HTML body contains low number of good links

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3032 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2008,i,9578029193489776218,941450397769680343,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://prosayverso.com.ar/BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.2.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.13.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.6.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 2 entries

Suricata Signatures

ETPRO PHISHING JS/PsyduckPockeball Payload Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-19T13:51:49.886266+0200	2857090	1	Successful Credential Theft Detected	89.187.28.95	443	192.168.2.5	49713	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://prosayverso.com.ar/BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr

Avira URL Cloud: detection malicious, Label: phishing

Phishing

Yara detected HtmlPhish54

Source: Yara match	File source: 0.2.id.script.csv, type: HTML
Source: Yara match	File source: 1.13.i.script.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 1.8.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML
Source: Yara match	File source: 1.6.pages.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML

Phishing site detected (based on favicon image match)

Source: https://carner.com.co	Matcher: Template: microsoft matched with high similarity
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	Matcher: Template: microsoft matched with high similarity

Phishing site detected (based on image similarity)

Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Matcher: Template: microsoft matched

Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: Iframe src: https://3008d61a-d43c7a7f.carner.com.co/Prefetch/Prefetch.aspx
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: Iframe src: https://3008d61a-d43c7a7f.carner.com.co/Prefetch/Prefetch.aspx
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: Iframe src: https://3008d61a-d43c7a7f.carner.com.co/Prefetch/Prefetch.aspx

HTTP Parser: Number of links: 0

Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444

HTTP Parser: Base64 decoded: a[href="http://www.salidzini.lv/"][style="display: block; width: 88px; height: 31px; overflow: hidden; position: relative;"]

Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No favicon
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No favicon
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No favicon
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No favicon
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No favicon
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No favicon
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No favicon

Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No <meta name="author".. found
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No <meta name="author".. found
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No <meta name="author".. found
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No <meta name="author".. found

Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No <meta name="copyright".. found
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No <meta name="copyright".. found
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No <meta name="copyright".. found
Source: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49725 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49754 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2857090 - Severity 1 - ETPRO PHISHING JS/PsyduckPockeball Payload Inbound : 89.187.28.95:443 -> 192.168.2.5:49713

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49725 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103

Source: global traffic	HTTP traffic detected: GET /BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr HTTP/1.1Host: prosayverso.com.arConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI= HTTP/1.1Host: adobe-esign.carner.com.coConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI= HTTP/1.1Host: adobe-esign.carner.com.coConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=k6+3cwBOZAzDOc9&MD=zU4UUtaO HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://adobe-esign.carner.com.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1Host: adobe-esign.carner.com.coConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://adobe-esign.carner.com.coSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="Sec-WebSocket-Key: IcVnQOWR74n0gF0/cChjSg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true HTTP/1.1Host: adobe-esign.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: adobe-esign.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://adobe-esign.carner.com.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_NXCGegEOpKB5nrI5GnSS3g2.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://adobe-esign.carner.com.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://adobe-esign.carner.com.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: l1ve.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_NXCGegEOpKB5nrI5GnSS3g2.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1Host: adobe-esign.carner.com.coConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://adobe-esign.carner.com.coSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1Sec-WebSocket-Key: QrDGCXFU1G8Z/jng4nv/MA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /Prefetch/Prefetch.aspx HTTP/1.1Host: 3008d61a-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1Host: adobe-esign.carner.com.coConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://adobe-esign.carner.com.coSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0Sec-WebSocket-Key: 6fhOxwY6XKyk7mE5U25Exg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=k6+3cwBOZAzDOc9&MD=zU4UUtaO HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1Host: adobe-esign.carner.com.coConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://adobe-esign.carner.com.coSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0Sec-WebSocket-Key: hPZAxsZCnq1T0L/0aKmV1Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /intersnack.fr/winauth/ssoprobe?client-request-id=69f7109e-440f-44a1-8d54-6a6d8f785924&_=1726746754609 HTTP/1.1Host: 778ac986-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /common/instrumentation/dssostatus HTTP/1.1Host: adobe-esign.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0; ai_session=GcKLOHD5gWddsSjrPiLtB3\|1726746756985\|1726746756985
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://adobe-esign.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1Host: adobe-esign.carner.com.coConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://adobe-esign.carner.com.coSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0; ai_session=GcKLOHD5gWddsSjrPiLtB3\|1726746756985\|1726746756985Sec-WebSocket-Key: pJ8CgqF7DTMpjHwQpU9TFw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: 62d417d4-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
Source: global traffic	HTTP traffic detected: GET /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1Host: 43936c8e-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a
Source: global traffic	HTTP traffic detected: GET /fwlink/p/?LinkID=733247 HTTP/1.1Host: 985d1866-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a
Source: global traffic	HTTP traffic detected: GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1Host: adobe-esign.carner.com.coConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://adobe-esign.carner.com.coSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0; ai_session=GcKLOHD5gWddsSjrPiLtB3\|1726746756985\|1726746756985; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; MSFPC=GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465Sec-WebSocket-Key: LJJh6/PD0XyhZp6mkVFdKw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /account-billing/761a662d-8032-88f4-03f3-c9ba8ba0e00b HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a
Source: global traffic	HTTP traffic detected: GET /fwlink/p/?LinkID=733247 HTTP/1.1Host: 985d1866-d43c7a7f.carner.com.coConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a
Source: global traffic	HTTP traffic detected: GET /account-billing/761a662d-8032-88f4-03f3-c9ba8ba0e00b HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048
Source: global traffic	HTTP traffic detected: GET /en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048
Source: global traffic	HTTP traffic detected: GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1Host: adobe-esign.carner.com.coConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://adobe-esign.carner.com.coSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0; ai_session=GcKLOHD5gWddsSjrPiLtB3\|1726746756985\|1726746756985; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; MSFPC=GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465Sec-WebSocket-Key: V5vHqcFmM9MXT/nffgRJOg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYo HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /css/glyphs/glyphs.css?v=N9jMfMIoO_s7OATN0j5LYqmO9MCqHDjfpaUV2RuaEy8 HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /css/Article/css.css?v=Z6ZkkY_X8iTM42LbcHhEDNaT4e9rMO_zPAbxEsFxAvo HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /css/Article/article.css?v=joejkGC7jmgVPaXv6QYy20tWjgmkhh7L7Q1GHYOzoYs HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /css/SearchBox/search-box.css?v=bybwzGBajHicVXspVs540UfV0swW0vCbOmBjBryj9N4 HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /css/sitewide/articleCss-overwrite.css?v=D0lQRoIlvFHSQBRTb-gAQ5KkFe8B8NuSoliBjnT5xZ4 HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231 HTTP/1.1Host: wwwms.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cab8c6cd-d43c7a7f.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /css/MeControlCallout/teaching-callout.css?v=690pjf05o15fVEafEpUwgaF8vqVfOkp5wP1Jl9gE99U HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /css/Article/left-nav.css?v=P4vuAkZCGQgjSSlYzU6z5FtdGykZHjeUthqLptyBPAk HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /css/Article/multimedia-left-nav.css?v=T9eShvohNWNoeaREOFqDtfJEADMJbYbmEACZdn17tME HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE1Mu3b?ver=5c31 HTTP/1.1Host: 7085cdbe-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cab8c6cd-d43c7a7f.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0 HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"Origin: https://cab8c6cd-d43c7a7f.carner.com.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /css/fonts/support-icons/mdl2/latest_v4_70.woff2 HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"Origin: https://cab8c6cd-d43c7a7f.carner.com.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cab8c6cd-d43c7a7f.carner.com.co/css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /css/fonts/support-icons/fluent/latest_v1_95.woff2 HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"Origin: https://cab8c6cd-d43c7a7f.carner.com.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cab8c6cd-d43c7a7f.carner.com.co/css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /lib/oneds/dist/ms.analytics-web-4.0.2.min.js?v=O7wAAOKAVN2-OLLnoh3KjWb9pW6khEi85GWLxrUYqXA HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /lib/uhf/dist/uhfbundle.js?v=of4Bk4iHW2lu2zc7UaUcCo47rVLNSJYX0ELAcivbHkg HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /js/Support.Main.min.js?v=Ig9b0I5GejGhCpyhVI41gM7rYGTq_AR6z-NcJYm-xU8 HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1Host: baa50082-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cab8c6cd-d43c7a7f.carner.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1Host: adobe-esign.carner.com.coConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://adobe-esign.carner.com.coSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0; ai_session=GcKLOHD5gWddsSjrPiLtB3\|1726746756985\|1726746756985; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; MSFPC=GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="Sec-WebSocket-Key: GOwBGSg/aWbpXfXZ4BZYlg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /cms/api/am/imageFileData/RE1Mu3b?ver=5c31 HTTP/1.1Host: 7085cdbe-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1Host: baa50082-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0 HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
Source: global traffic	HTTP traffic detected: GET /js/shimmerExperiment.Main.min.js?v=srYmQ6fE_kpOEpNK2BnwKTzAAYG3jYCRr__zYXzrlrE HTTP/1.1Host: cab8c6cd-d43c7a7f.carner.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="

Source: global traffic	DNS traffic detected: DNS query: prosayverso.com.ar
Source: global traffic	DNS traffic detected: DNS query: adobe-esign.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 62d417d4-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: bef1f851-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: 253ba5ef-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: l1ve.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: 3008d61a-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: 778ac986-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: 43936c8e-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: 985d1866-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: cab8c6cd-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: wwwms.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: 7085cdbe-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: 2b6dbd78-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: f1a02cab-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: 3eed3fe7-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: f3885db7-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: baa50082-d43c7a7f.carner.com.co
Source: global traffic	DNS traffic detected: DNS query: 45004a77-d43c7a7f.carner.com.co

Source: unknown

HTTP traffic detected: POST /?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI= HTTP/1.1Host: adobe-esign.carner.com.coConnection: keep-aliveContent-Length: 5041Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://adobe-esign.carner.com.coContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 19 Sep 2024 11:52:10 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 8a5c490a-cb9b-44bb-a768-163708750e00x-ms-ests-server: 2.1.18947.4 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 19 Sep 2024 11:52:10 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 694a64f9-c718-4c9d-acfb-d895f2db1000x-ms-ests-server: 2.1.18947.4 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 19 Sep 2024 11:52:23 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: aeeffb98-2a3f-4592-ba77-f8d6b7ec1200x-ms-ests-server: 2.1.18947.4 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 19 Sep 2024 11:52:28 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: no-store, no-cachex-ms-correlation-id: 9631c8a4-002e-4b47-90f1-af3cccb54d1dx-ua-compatible: IE=Edgex-cache: CONFIG_NOCACHEx-msedge-ref: Ref A: 29BE412393BE446BB955B74C3B55BE5C Ref B: TYO01EDGE3917 Ref C: 2024-09-19T11:52:27Zaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 19 Sep 2024 11:52:30 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 97e41d41-c574-454d-8b9d-6d51cc852500x-ms-ests-server: 2.1.18947.4 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 19 Sep 2024 11:52:40 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 01b8881e-a123-4ce2-91bf-475c139a1400x-ms-ests-server: 2.1.18947.4 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 19 Sep 2024 11:52:52 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 7b213d71-c314-4f80-880d-6e7a68eb0f00x-ms-ests-server: 2.1.18947.4 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 19 Sep 2024 11:53:06 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: c136a56b-c6e3-4b56-8a9c-befd5ce40f00x-ms-ests-server: 2.1.18947.4 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 19 Sep 2024 11:53:22 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 2fb8f1b1-b8f3-4ff8-828c-203a8bf01300x-ms-ests-server: 2.1.18947.4 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 19 Sep 2024 11:53:40 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: ad6b1e36-d227-4c7d-a404-988e11171500x-ms-ests-server: 2.1.18947.4 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49754 version: TLS 1.2

Source: classification engine

Classification label: mal80.phis.win@18/75@56/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2008,i,9578029193489776218,941450397769680343,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://prosayverso.com.ar/BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2008,i,9578029193489776218,941450397769680343,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

LLM: Page contains button: 'Sign in with another account' Source: '1.8.pages.csv'

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://prosayverso.com.ar/BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Link
prosayverso.com.ar	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://cab8c6cd-d43c7a7f.carner.com.co/css/Article/left-nav.css?v=P4vuAkZCGQgjSSlYzU6z5FtdGykZHjeUthqLptyBPAk	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/css/fonts/support-icons/fluent/latest_v1_95.woff2	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/css/sitewide/articleCss-overwrite.css?v=D0lQRoIlvFHSQBRTb-gAQ5KkFe8B8NuSoliBjnT5xZ4	0%	Avira URL Cloud	safe
https://adobe-esign.carner.com.co/d43c7a7fa2684abba15ce6c35d46a4c2/	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/css/glyphs/glyphs.css?v=N9jMfMIoO_s7OATN0j5LYqmO9MCqHDjfpaUV2RuaEy8	0%	Avira URL Cloud	safe
https://adobe-esign.carner.com.co/common/instrumentation/dssostatus	0%	Avira URL Cloud	safe
https://wwwms.carner.com.co/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231	0%	Avira URL Cloud	safe
https://43936c8e-d43c7a7f.carner.com.co/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0	0%	Avira URL Cloud	safe
https://adobe-esign.carner.com.co/favicon.ico	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYo	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/account-billing/761a662d-8032-88f4-03f3-c9ba8ba0e00b	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/css/Article/css.css?v=Z6ZkkY_X8iTM42LbcHhEDNaT4e9rMO_zPAbxEsFxAvo	0%	Avira URL Cloud	safe
https://985d1866-d43c7a7f.carner.com.co/fwlink/p/?LinkID=733247	0%	Avira URL Cloud	safe
https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js	0%	Avira URL Cloud	safe
https://3008d61a-d43c7a7f.carner.com.co/Prefetch/Prefetch.aspx	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/js/Support.Main.min.js?v=Ig9b0I5GejGhCpyhVI41gM7rYGTq_AR6z-NcJYm-xU8	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/ConvergedLogin_PCore_NXCGegEOpKB5nrI5GnSS3g2.js	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/css/SearchBox/search-box.css?v=bybwzGBajHicVXspVs540UfV0swW0vCbOmBjBryj9N4	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/css/Article/multimedia-left-nav.css?v=T9eShvohNWNoeaREOFqDtfJEADMJbYbmEACZdn17tME	0%	Avira URL Cloud	safe
https://l1ve.carner.com.co/Me.htm?v=3	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	0%	Avira URL Cloud	safe
https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/css/MeControlCallout/teaching-callout.css?v=690pjf05o15fVEafEpUwgaF8vqVfOkp5wP1Jl9gE99U	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/css/Article/article.css?v=joejkGC7jmgVPaXv6QYy20tWjgmkhh7L7Q1GHYOzoYs	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/lib/oneds/dist/ms.analytics-web-4.0.2.min.js?v=O7wAAOKAVN2-OLLnoh3KjWb9pW6khEi85GWLxrUYqXA	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Avira URL Cloud	safe
https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2	0%	Avira URL Cloud	safe
https://43936c8e-d43c7a7f.carner.com.co/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.6&apikey=b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951&upload-time=1726746774616&ext.intweb.msfpc=GUID%3Dfd81e2f977444a259e8d5fcf6f13ad9a%26HASH%3Dfd81%26LV%3D202409%26V%3D4%26LU%3D1726746770465&time-delta-to-apply-millis=11307&w=0&NoResponseBody=true	0%	Avira URL Cloud	safe
https://778ac986-d43c7a7f.carner.com.co/intersnack.fr/winauth/ssoprobe?client-request-id=69f7109e-440f-44a1-8d54-6a6d8f785924&_=1726746754609	0%	Avira URL Cloud	safe
https://baa50082-d43c7a7f.carner.com.co/meversion?partner=SMCConvergence&market=en-us&uhf=1	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/css/fonts/support-icons/mdl2/latest_v4_70.woff2	0%	Avira URL Cloud	safe
https://cab8c6cd-d43c7a7f.carner.com.co/lib/uhf/dist/uhfbundle.js?v=of4Bk4iHW2lu2zc7UaUcCo47rVLNSJYX0ELAcivbHkg	0%	Avira URL Cloud	safe
https://7085cdbe-d43c7a7f.carner.com.co/cms/api/am/imageFileData/RE1Mu3b?ver=5c31	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
2b6dbd78-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
7085cdbe-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
f1a02cab-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
prosayverso.com.ar	144.217.158.133	true	false	0%, Virustotal, Browse	unknown
bef1f851-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
3eed3fe7-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
cab8c6cd-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
43936c8e-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
wwwms.carner.com.co	89.187.28.95	true	true		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
baa50082-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
f3885db7-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
778ac986-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
45004a77-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
62d417d4-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
253ba5ef-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
www.google.com	172.217.16.196	true	false	0%, Virustotal, Browse	unknown
3008d61a-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown
adobe-esign.carner.com.co	89.187.28.95	true	true		unknown
l1ve.carner.com.co	89.187.28.95	true	true		unknown
985d1866-d43c7a7f.carner.com.co	89.187.28.95	true	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cab8c6cd-d43c7a7f.carner.com.co/css/fonts/support-icons/fluent/latest_v1_95.woff2	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/css/Article/left-nav.css?v=P4vuAkZCGQgjSSlYzU6z5FtdGykZHjeUthqLptyBPAk	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/css/sitewide/articleCss-overwrite.css?v=D0lQRoIlvFHSQBRTb-gAQ5KkFe8B8NuSoliBjnT5xZ4	true	Avira URL Cloud: safe	unknown
https://adobe-esign.carner.com.co/d43c7a7fa2684abba15ce6c35d46a4c2/	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/css/glyphs/glyphs.css?v=N9jMfMIoO_s7OATN0j5LYqmO9MCqHDjfpaUV2RuaEy8	true	Avira URL Cloud: safe	unknown
https://prosayverso.com.ar/BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr	true		unknown
https://wwwms.carner.com.co/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231	true	Avira URL Cloud: safe	unknown
https://adobe-esign.carner.com.co/common/instrumentation/dssostatus	true	Avira URL Cloud: safe	unknown
https://43936c8e-d43c7a7f.carner.com.co/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0	true	Avira URL Cloud: safe	unknown
https://adobe-esign.carner.com.co/favicon.ico	true	Avira URL Cloud: safe	unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYo	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/account-billing/761a662d-8032-88f4-03f3-c9ba8ba0e00b	true	Avira URL Cloud: safe	unknown
https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	true		unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/css/Article/css.css?v=Z6ZkkY_X8iTM42LbcHhEDNaT4e9rMO_zPAbxEsFxAvo	true	Avira URL Cloud: safe	unknown
https://985d1866-d43c7a7f.carner.com.co/fwlink/p/?LinkID=733247	true	Avira URL Cloud: safe	unknown
https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true	true	Avira URL Cloud: safe	unknown
https://62d417d4-d43c7a7f.carner.com.co/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js	true	Avira URL Cloud: safe	unknown
https://3008d61a-d43c7a7f.carner.com.co/Prefetch/Prefetch.aspx	true	Avira URL Cloud: safe	unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/js/Support.Main.min.js?v=Ig9b0I5GejGhCpyhVI41gM7rYGTq_AR6z-NcJYm-xU8	true	Avira URL Cloud: safe	unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/ConvergedLogin_PCore_NXCGegEOpKB5nrI5GnSS3g2.js	true	Avira URL Cloud: safe	unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/css/SearchBox/search-box.css?v=bybwzGBajHicVXspVs540UfV0swW0vCbOmBjBryj9N4	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/css/Article/multimedia-left-nav.css?v=T9eShvohNWNoeaREOFqDtfJEADMJbYbmEACZdn17tME	true	Avira URL Cloud: safe	unknown
https://l1ve.carner.com.co/Me.htm?v=3	true	Avira URL Cloud: safe	unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	true	Avira URL Cloud: safe	unknown
https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=	true	Avira URL Cloud: safe	unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/css/MeControlCallout/teaching-callout.css?v=690pjf05o15fVEafEpUwgaF8vqVfOkp5wP1Jl9gE99U	true	Avira URL Cloud: safe	unknown
https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444	false		unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/css/Article/article.css?v=joejkGC7jmgVPaXv6QYy20tWjgmkhh7L7Q1GHYOzoYs	true	Avira URL Cloud: safe	unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	true	Avira URL Cloud: safe	unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js	true	Avira URL Cloud: safe	unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/lib/oneds/dist/ms.analytics-web-4.0.2.min.js?v=O7wAAOKAVN2-OLLnoh3KjWb9pW6khEi85GWLxrUYqXA	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b	true	Avira URL Cloud: safe	unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	true	Avira URL Cloud: safe	unknown
https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	true	Avira URL Cloud: safe	unknown
https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2	true	Avira URL Cloud: safe	unknown
https://43936c8e-d43c7a7f.carner.com.co/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.6&apikey=b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951&upload-time=1726746774616&ext.intweb.msfpc=GUID%3Dfd81e2f977444a259e8d5fcf6f13ad9a%26HASH%3Dfd81%26LV%3D202409%26V%3D4%26LU%3D1726746770465&time-delta-to-apply-millis=11307&w=0&NoResponseBody=true	true	Avira URL Cloud: safe	unknown
https://778ac986-d43c7a7f.carner.com.co/intersnack.fr/winauth/ssoprobe?client-request-id=69f7109e-440f-44a1-8d54-6a6d8f785924&_=1726746754609	true	Avira URL Cloud: safe	unknown
https://baa50082-d43c7a7f.carner.com.co/meversion?partner=SMCConvergence&market=en-us&uhf=1	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/css/fonts/support-icons/mdl2/latest_v4_70.woff2	true	Avira URL Cloud: safe	unknown
https://cab8c6cd-d43c7a7f.carner.com.co/lib/uhf/dist/uhfbundle.js?v=of4Bk4iHW2lu2zc7UaUcCo47rVLNSJYX0ELAcivbHkg	true	Avira URL Cloud: safe	unknown
https://7085cdbe-d43c7a7f.carner.com.co/cms/api/am/imageFileData/RE1Mu3b?ver=5c31	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
144.217.158.133	prosayverso.com.ar	Canada	16276	OVHFR	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
89.187.28.95	2b6dbd78-d43c7a7f.carner.com.co	Ukraine	39810	UA-WICOMWiMAXUkraineAutonomousSystemUA	true
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1513823
Start date and time:	2024-09-19 13:50:50 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://prosayverso.com.ar/BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@18/75@56/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://985d1866-d43c7a7f.carner.com.co/fwlink/p/?LinkID=733247

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 172.217.23.110, 108.177.15.84, 34.104.35.123, 88.221.110.91, 192.229.221.95, 13.95.31.18, 20.242.39.171, 142.250.185.227, 2.16.100.168, 172.217.16.206
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Sep 19 10:51:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.975462041222935
Encrypted:	false
SSDEEP:	48:8LdkTI0mHwZidAKZdA19ehwiZUklqehjy+3:82vRroy
MD5:	423F75EA6E42998692E5ED4A75D1BBCA
SHA1:	18113ADD67C26E9FE3CB5B5772307CD3D3C0B0A0
SHA-256:	D5F9FB414A4E06705B219FED34FE29B3C8EF5450288233B68A02FF30003A9C27
SHA-512:	43123646F2447D9D273B5F3A92BB04B47D72E664EC8FC9D736533415EDD604616970311A2058BDF2536BA68E7B36807C314295AC961A5DC92EF6554187DB8F06
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....}.L....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I3Ys^....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V3Ys^....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V3Ys^....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V3Ys^..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V3Yw^...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........m+.z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Sep 19 10:51:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9893569479697013
Encrypted:	false
SSDEEP:	48:8adkTI0mHwZidAKZdA1weh/iZUkAQkqehYy+2:8lvRZ9Qpy
MD5:	3D9C1D584255F798243B2F5424059671
SHA1:	C7B91702F7A25730256B640CC2B7BD61922C3C18
SHA-256:	553E1CF05B8817B52D4E66E70B5F7B430966675EDFAAA31193C8201D71485381
SHA-512:	64348D03B986FE182A1181532FA95F7AC1AE4E94982CFCBA97316457D983D8DDB2CEBBCC4BA0E6F7B0B67119E7B6308BEC66D250BBFF9775C3534D939B868BDB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....L.L....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I3Ys^....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V3Ys^....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V3Ys^....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V3Ys^..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V3Yw^...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........m+.z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.002063950836007
Encrypted:	false
SSDEEP:	48:8xFdkTI0sHwZidAKZdA14tseh7sFiZUkmgqeh7s2y+BX:8xMvHpn0y
MD5:	DA56C1EFDD92D4379E7FE545BB907742
SHA1:	C8EA011BD9BFD3316E63C3A3B08737EA77BC8E10
SHA-256:	18C53B06B3D50FD17B02567FE9B15D6BCD50CDD7FF470FF95B7E94119C5987A6
SHA-512:	2BDCF554DF59E7644B1F5E148A8422B82C0802C0D39A6E8236E82EFFFC87F6D1BC3A3559A712D2D7C15597F60AE899A7D9D9EEADDCFD1DCF7EE8106A6561F7C2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I3Ys^....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V3Ys^....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V3Ys^....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V3Ys^..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........m+.z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Sep 19 10:51:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.987037131887365
Encrypted:	false
SSDEEP:	48:8QdkTI0mHwZidAKZdA1vehDiZUkwqehMy+R:8nvR6uy
MD5:	E7B07B8B6464B53801217B1AFD5CB202
SHA1:	9F87F8FCDBBA73EF5202FDB747744A94B7842415
SHA-256:	D6DACDB96213904CCD4BD6CC658A91AEE7D05ADDB53A8EE6137D1D589DCBD552
SHA-512:	88772FF6A5C5768445D5E7E9D9BF28E0D42259063A4E61CB9BBFBFEA0D11EB618249D9273D60C11C6C0A6C5C9C7CF1E0438C8488776F1E5A35D3A2647177A595
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....s.L....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I3Ys^....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V3Ys^....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V3Ys^....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V3Ys^..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V3Yw^...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........m+.z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Sep 19 10:51:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9783964816723896
Encrypted:	false
SSDEEP:	48:8cdkTI0mHwZidAKZdA1hehBiZUk1W1qehCy+C:8bvR69iy
MD5:	584D99C1FAE075A02CE9B4859C60519F
SHA1:	4CA2C64CF3830EA39AED49FC71E29D16DC02BF99
SHA-256:	8B71CA7AE9232A48AEEA46AF1FD25AFA6E8B7ED202B408107DD38B90360D4AB8
SHA-512:	CBC0E35EC9E505787691128DF73EF6EC9E2D6A644825E404FD46A12C945D9D44E3A02A5524537ECC2A89DCDB001D9E30B940E3F542277D8BC19A5600C86C05CA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......L....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I3Ys^....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V3Ys^....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V3Ys^....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V3Ys^..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V3Yw^...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........m+.z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Sep 19 10:51:44 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9887123290745286
Encrypted:	false
SSDEEP:	48:8DdkTI0mHwZidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb0y+yT+:8+vRET/TbxWOvTb0y7T
MD5:	CE81397E47BAAA9B54982541B075D959
SHA1:	6DFC757416DCD72F1C58C723648CB5C12B435715
SHA-256:	3F0AC477747808FC4359BD20450F2D28FAE7D1A3B7CC9FA7BFDF35374E3CACFF
SHA-512:	D82976DCC0675AA51D98406883A1E5260371E2DD936B70C431D280DC7668BE91A5FA25691703A8BFCD5AC18CBD7DE32E59C72896010C416A9E2BDCB9CEC4A98E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......L....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I3Ys^....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V3Ys^....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V3Ys^....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V3Ys^..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V3Yw^...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........m+.z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 141814
Category:	dropped
Size (bytes):	49810
Entropy (8bit):	7.994955234767606
Encrypted:	true
SSDEEP:	1536:OJjEIl8SoeMX+a/CmMJI7lVzmfYXPiMksDmuJ:OJjNiS7Mu8jVKfSiKauJ
MD5:	F5FC82EEB10889B0A47A876A7C95B986
SHA1:	31528BD1BFD3F1FCBFCE4B7F0D541265A23C42CF
SHA-256:	E91C5771484A8D925EEEBD86B7742F8966DA0F64716C7EE4CE55C1AFF079A888
SHA-512:	9010F7BFDE05768997E9549F04DA106787C56A5CECFEE77921E0B2C6AF0E6A8060CFB2D58A1905DF4AB08741F7E860830AF0EFB742074E55CA48BD9CF880BC7F
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL.......... .........t.....@.o?."...=..:_.y..T..RU..T...Z...O.....28.W..._...+.....I..p.........w~\...Q..C7.^%.aT.Q.M..MD\....w'.q..W.;Q.F..b....'Ph(&.c...E^......Y............gx.KA..#Qq..j..K...,.DTy..Gw.c...q8N.....>.. =....F....2....Q...R...g..1.C..\|..SG..:.....:.e.`.\...V........p&[....n+.......Yu..o6J.n."z.&N&.....!+.W......s.6r.D.....{..q/.....:\|...Sh....8..S1......X...T..a...W..Fsk....h..u.$..^_.....>r.@D.Qx...{..v....7......G.E..kv.t6..T..{...WO.q8....>.....\B.rp.....2...x...aUa...JRM.-...nT.....qm..ym.N.9..x.ODp..u.Z...2...C.:.A.&.SQ.s..c.(.. +..dR...\]./....Y}:...._1-\|p..l@.D\q.........k...j.....;..j.9..w.8..Us.;...yi.y'..X....2.6#.....u X..C..Lr^\|;.&.J....\|.....&....X.o...Yidi.O..Z..~.V...E..#SZKJ8..Co..n.8.........1....9..D...XRge...MP.&.3....Se...b.5v..N.a...'......c.i...9...l..Z.`.F.._%>U.'.."..;.N......D$.}..~\|....u......3..L...EiU8.L.r.<D.o.s......~'\......."9..p.?>...'...d..nZ.S..H.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1257
Entropy (8bit):	7.848273656392979
Encrypted:	false
SSDEEP:	24:kYnhylgxIL2JpXwA5JkMuoDLvacjYHrLcHUnfqWj4+iekKn84PAuVMRJVhoqu:kPgxvJyikMuULE/oUfqk4bLSMRJVhoqu
MD5:	D644A207FF13F30C5FB9F7EDFDF59D49
SHA1:	069510158957E9F3E864CAA82EDED18410D49799
SHA-256:	4F8AC0632B6B1F4A34E314B5CCE6C2A4D1085240584F9364292072F904E09354
SHA-512:	6E4EE9A272F7FBCB45368C85AEB78F3A7C9728CDB5931A8F5A46D6E39466FFD8781F62D44EE2E521E99FEA023E44D6EFBB2F6F1521EBFF2B7C074099EAA83D22
Malicious:	false
Reputation:	low
URL:	https://cab8c6cd-d43c7a7f.carner.com.co/css/Article/left-nav.css?v=P4vuAkZCGQgjSSlYzU6z5FtdGykZHjeUthqLptyBPAk
Preview:	.3....YU...hL<..............U......~.:....D-{{...I..=..E..A.H....-q.G.tBoo......A.+../$u.y.....7z/...sJ.K...os./59..iZ`...M.\8.......;.....y.n..`ZQ......U.g....".2k...VXMz...^.[.....'.....<,..n..[R;.9{..K.../k.[...&@.......:.i.CX0..`...d`....N....6-.K:...>...F..A.......(...7....,.U.{.(....='Oq.(.n.!..W\.(.^Up....\.....'N..i.........`...M.#~+20.v.....+......-........S.f-R.qcP.HQ..T...R!lhf..qb.........B..R..........]<.....vj..3~B....%&....e..Pqu.\|.C.........@.".Lh..%dL0.....VL.....ZCw..@....F..n...&.&.us.$M..l.nA..Ah.9...%........^..I.Y...v...L..I..r............g.;..!.....m.cT7.5[.....W...naj..C.-X.53..... d... .....".0.#;...8..q.Qy&.lI......9.........N..P......-......HM..b7.?.1....v.....aFW.5,.c...(1$.\|.......Y...6g[..:/h..........gx.......IYT..H.hi.....+..f.....C.3..J\|#...V....."_.. ot.9..7..v/..84'."...I..[.H.$....2.(....&4K`f..$.#...).3.&g......J...Cj.".I....i.4p...o.rD&.t8.qM.2V...@....D..c...^...Z7..o..h...3r.9.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57443
Category:	dropped
Size (bytes):	16326
Entropy (8bit):	7.987366580233851
Encrypted:	false
SSDEEP:	384:jTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:jTtTJjHlgneqTz658ht/eAQw
MD5:	210F3C4E623D333CB94746CEC563DE09
SHA1:	887911B0BCA564AFEC25787B44A98F16EBF7ACA3
SHA-256:	4792643ECEBF0EEAA641474C9A1BA39D16D2F924C6B5A6FCB8FC443A5FE59F44
SHA-512:	A5E1705DFFE4359F5920F540207C06B658CC12B80A9FEBA14503430CDE090947E5EB231C99922A76DB46664F2D448A23DF7C05C26CA89A264F30073F2812611B
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1906
Entropy (8bit):	7.911426294522455
Encrypted:	false
SSDEEP:	48:upVeV6HxzPZ92L0BTVr5FZrkoqIJyzuIA0TC:LV652L0hV9FK4Jyzun
MD5:	026DA20F0D3ABD586C33A2CA4C4393BD
SHA1:	6AFB90605159E008B6EA5D6B702421D6F89BFEEB
SHA-256:	F77ECB2F1D53844F5207DD11194F2EF432AC624069FD2F75331B822718D182F7
SHA-512:	4298C27CE44C8B189B36CA2DA699C1B1D01023A36BF8E6D84B96AD1BBE5FA2ED4DEA061547B8162CEB7B8761F5467E9926B324ED306213148D3E347A509365DD
Malicious:	false
Reputation:	low
URL:	https://cab8c6cd-d43c7a7f.carner.com.co/css/Article/multimedia-left-nav.css?v=T9eShvohNWNoeaREOFqDtfJEADMJbYbmEACZdn17tME
Preview:	..0..O..i...N#.....].)...%.@.W(Q.G.-s.k...[r....H...R.."..j....d&?.?{].Z}.....yJu:....@8..G..Eq.._..?..I}=Hw...-:.}.y.`..9..%?.C=5.B......X...%t..ev...5..<.......O......_.V...n..........I.q..+..CL?..d..........riF.....\|. G....x...e.....'I....O..8~.ak.......$M..:@....0C.&w..Qv..k...&W'.q.+....!//....`...(.............M..#vn.zs.a.:.{.....`..v...X..-oy{Q..<.Y.i..y=...}ZG......1.\|..\..Y..o..L.`.~J4.C6.....Z....kv~..V.....-.....F.....J....k...}KY.^x....E)...<....XY..uz3E2>+B5.z._q....2..Z'P}..........-(3..H....u..........K.....:..........r.5.2.W:.Q+.....;.M\."...5.e.A....v...vk........qCodG.U.w...f.f}.w.%,..9qU.A.y..V..kgj.G%}.>..\..&FA..t.0.].v....>1>..A.v...../...,........Y.0^.i4[..O...'.......... XZ..)..g9..4+.....T..WF.cH.......;...3m........Pv....I.......t.. j.0....cI`.s...c....%..:....mtg.t>..>I#.avP.+...$Y.Fz....,...~.6...h....S....v....[.O.s..W}T3.P...V.".1}..D.@.......f;......>.9.][.[%.r....f...f.;5.....)..,...HA.n$.Y..J.......Q

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 190253
Category:	downloaded
Size (bytes):	61137
Entropy (8bit):	7.995656539880523
Encrypted:	true
SSDEEP:	1536:kx0WdJL5Rchz+uKdY1VCJAEMEhaqnYv2Vv/Qicb8aaxiYN+:kHdbRchz+ndYzCJAEMEav25u8aaIYN+
MD5:	9D69415BD929BC96935E19BE90BF0A8C
SHA1:	182438F082CEA5570D2ED963D2E82961B01AEAE2
SHA-256:	541C69D6747914555C342D4438AD58EF1EEEC454350E86B98D8668AE85B49F5D
SHA-512:	BD7F8A99EA1B48A13B848A23E58EB07C7034569B83C4C47E2FA9044AB8022C09CBF15287D2393B21A00A86BE9462D59F6EF6DBAFBAE34386DA2B7C43549A54A6
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W..`...8..^Y.m&.%NF..@`K.M...J.H..OU........'..4......Z.8..7.M......;.....4..K....z..<.rON.O..../.IT.i.2.......Y..N?ign..I{....k8......wU6..c.<KZY.-<.;.fI...,.n...2.>..8.,.!...(.#....xl.o.f.$./..\|3......s..j.}6..M...()X.......%.5..E..Y:cYq{t;k.xd.9...8.....<...x>aYm.M#...a..E.........E.....&...<....I.../.6.........)....6.s'N6..$a..,Na.k..T12..(.`r.X.+.6..o+./.4/.h;.l.....qry.........e...Z...eS..ZU........\|d.YC.gV#..x.:.V.s.z.,g2...X...p^.k...2E...7L....vR_...Kod]....M.%G)`{.6..Y..l.^.....8G..O.y...z..."NX....o-...d..=.'7.\...M".bC..V%{._XT....s....h....aQ..U.R;h..v....2..4... .?..~....1r.._......5..I.a.?,..?..U....?L..wlh$.a.....6.Q.O. ....5...X..Y.6....fYZO....y..Or..z]B..y..;o.....o.rS..HG.{K...Y&P...........#.x'.5..m.......s.6....6...."z...fM.6.......4@...%+.."6C.%./6'...2<.7...J5..l7.p9......(..WM...T}...:..o..9l.MX...-.i....a.)..[.09S .K)...e6i?.....x.9.0.7...V...\|.........u..g...n..mk-^..e.O/6...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Applesoft BASIC program data, first line number 19
Category:	downloaded
Size (bytes):	1041
Entropy (8bit):	7.793200691335472
Encrypted:	false
SSDEEP:	24:4pWrglq9CZsW7j9FPEDoQZlGWWxau6aIg9lp3xKMoX6Jk/b:16nKescQ7WsurIsp3UMBJk/b
MD5:	8335DB88158AF44B5F5DD78D16B021A7
SHA1:	0764F0F3BBA7C04BC5CEEA9AE60867EB3BAB19ED
SHA-256:	723E61EB345AF37F9E3BEA775D67E3D118A6943BF99D096864243BB64AC60F46
SHA-512:	469A9140C61F4C6D9200073AD4C8259703DFD60BF66ADB4922EB0535F0CFD4510794EC340B8C6DC68E7DEE36AFCF3D763BBF01F6EC4617AFE4A43ADFBBA03F1B
Malicious:	false
Reputation:	low
URL:	https://cab8c6cd-d43c7a7f.carner.com.co/css/MeControlCallout/teaching-callout.css?v=690pjf05o15fVEafEpUwgaF8vqVfOkp5wP1Jl9gE99U
Preview:	.....w?.._.U.."....P.J...Qv.?...lS..(.s.].m..Iys..I.8.'e....S3.....d{.kc....#..>......V..80....k.Jj.rEq0.._..#.J.I0..X....lE[...._@...P#.W.KI[...^..:n.?.V...7..k...^.....2ja..a..FYaa.......ed.(Z2.P.\|VX..K.....q..........I.<#95.Zo...V...D.aA. ....k..8..EME..m.....'..r.M........U(&......-w ..&]...>.....P#.....w.7.O.v..U.._..K..v.....sI..o.9>..:....s...6..6x.g]GT.-x...v.e}1..sR....U.....ymX.ew3....ft.r..f.....0........@.s.z)... .i..&.)5...B.z..Yn....n...O4.^....He.....-.....$#$.......Pm.G/...6..x/......K)H./...X^....9>...}y.>.,Z-.(....A.%.:.s0jH...)J.. ....-.!J....H3q.+.%...p..+.....e+.o.....S..)M@K...N.........F==.c...k.F...XTEwn.>...t......X.E.....M.7.....I...)d.Dk0)c...!.4..e.L.>.j(sbT/...QXhf......3..."TU.x.H.H@A.E].kr....e.<.._ir.&D....g.AmIY............;.!`...!......q}u\|.......?......o..E......aVU=i............(..5!>'.....g.............._.X..5\.6....&}..Xq"...F..V^..s&..*4....fSB.....}B.J..>`.u.....vL.vUw.v...+.X... ...3.u.\|M..l..f...

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407078
Category:	downloaded
Size (bytes):	116416
Entropy (8bit):	7.997558970019424
Encrypted:	true
SSDEEP:	3072:0RFW4tFiJicPvy8EOpI/i5g38ii8Z/ykTGgjDlBT6cmO:kgAFaiYy8Ca5g3lBZ5qaH6G
MD5:	8C99A372B10F08FD325B4E7747BBB3E7
SHA1:	765CDB6B258F44FFC305DD91F3CA66B8AD05D2D0
SHA-256:	55F44F471D89BD7600A2229D373D32D81308A4DBA070A465A4E2A113774EBEF1
SHA-512:	8C98E9ED69F6843BD43768E9BF3D3E5BCDE67CB765E472AB2DC660724579077D47A941C4D8D8167498DC6C06886350D4A881186A86EA3608A603F47DF8F1C551
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.ZC/.x...7.os...S/.A...0G..=?...5.......N.+.K.mx...j.T_...:..u8.uP._pJ..}\|.{......2..`..._...\..g....j..xb^^...a.y.....S..R...4....q.Y..^T....X,.....m..~v,.....WP.U...:O".coRX...7..S...zI.........mq.w...E.-z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.aZ=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).fz......<a....4q..6.x.G>~..........frk..?M#^Q.z..A..M.f......$S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M...'.X.n/..mW.\|......p...w../...>\...l.......h...q>.w...FC[

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 7017
Category:	dropped
Size (bytes):	2425
Entropy (8bit):	7.932827738221867
Encrypted:	false
SSDEEP:	48:XKOdeiIfs+JSK6Mm84Bi1edVbv4OtQF3lFxfGLtNqOb8ssfl6n1:jok+JSK6Mm8HoFw3l/fGLOssfK1
MD5:	8FADE0B64A3DE6548A13E702A1DF6C83
SHA1:	322BF6D845A01ABCDAF426B947B78195B62B87AF
SHA-256:	84A692ECCD22F9C883E3D415296CA0FD7C75118B7AD3958A0A7194F88F967E9E
SHA-512:	896630C36688F0885F06DF262258640238B846BDEA4A4793B31D3E1230C273996A34B247FFDE664EB7C64B38B638678E4F6D049B888AC08A5AFCA13011013276
Malicious:	false
Reputation:	low
Preview:	...........Xms.8..>.B.U..c..=d<SY..do&...[W.)J..k.%.$C.$..Z~...e...U.m....~.V.._+o.......N;=t}.z./;g.......{.....1F._/`..YH.\.XQ....D..!c!...E._2.......E...)...Li.4..."..I..`.g...vA?.ml.8.&"..}......0.Sm!<pEQ.}.4`$@...B..F...&`D%0^6. ,)RT...:..pQ.H.ZUj&..Rqp~.\|P8L...a.L.....m.....%'...e...h&....z..!.[.R;f\|..\.....2....b.".....R.wD.b.P...$.&.9H..IJ#.........(.G.9.-.&...)S.-`..w%...]!k..<.5.k.......U.^.1.$..`.t....d.b.. cX._..{}U.........M2._..0...<\..pS....P...KR.._...<1D........).....X.......l7NT`}..<....7.[...,.9.....C.<n....K.v.\..#.k;>\...#..V..a....A...;.....v.fo.S'.......L..z`8zR.G..2...g..h..4N$ah..K.U.N.17E.<..;]x...C<...u.....C}..._d.$...4..G......Jpv.3....K...B:#.......K=Q..W...A....U..AH}g..)./...e.;J....."Wi.t.@.:.......v.L...)...h.....y.......PO..L..e.w1P...C!f.Zc..@<9...P(.>..l.(....y.O^.A.j(....q....\.....0ju.I....[8.1...E.@.v..q..3X%.Z..J`..Tz.%&:c......e.fI...}7...\|d...1..RAk`...p.q/./Z.`.>.H..'..5.=..6,...e..2..Q..[.4qEe.FB.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57443
Category:	downloaded
Size (bytes):	16326
Entropy (8bit):	7.987366580233851
Encrypted:	false
SSDEEP:	384:jTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:jTtTJjHlgneqTz658ht/eAQw
MD5:	210F3C4E623D333CB94746CEC563DE09
SHA1:	887911B0BCA564AFEC25787B44A98F16EBF7ACA3
SHA-256:	4792643ECEBF0EEAA641474C9A1BA39D16D2F924C6B5A6FCB8FC443A5FE59F44
SHA-512:	A5E1705DFFE4359F5920F540207C06B658CC12B80A9FEBA14503430CDE090947E5EB231C99922A76DB46664F2D448A23DF7C05C26CA89A264F30073F2812611B
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407078
Category:	dropped
Size (bytes):	116416
Entropy (8bit):	7.997558970019424
Encrypted:	true
SSDEEP:	3072:0RFW4tFiJicPvy8EOpI/i5g38ii8Z/ykTGgjDlBT6cmO:kgAFaiYy8Ca5g3lBZ5qaH6G
MD5:	8C99A372B10F08FD325B4E7747BBB3E7
SHA1:	765CDB6B258F44FFC305DD91F3CA66B8AD05D2D0
SHA-256:	55F44F471D89BD7600A2229D373D32D81308A4DBA070A465A4E2A113774EBEF1
SHA-512:	8C98E9ED69F6843BD43768E9BF3D3E5BCDE67CB765E472AB2DC660724579077D47A941C4D8D8167498DC6C06886350D4A881186A86EA3608A603F47DF8F1C551
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.ZC/.x...7.os...S/.A...0G..=?...5.......N.+.K.mx...j.T_...:..u8.uP._pJ..}\|.{......2..`..._...\..g....j..xb^^...a.y.....S..R...4....q.Y..^T....X,.....m..~v,.....WP.U...:O".coRX...7..S...zI.........mq.w...E.-z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.aZ=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).fz......<a....4q..6.x.G>~..........frk..?M#^Q.z..A..M.f......$S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M...'.X.n/..mW.\|......p...w../...>\...l.......h...q>.w...FC[

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	2624
Entropy (8bit):	7.92902048842448
Encrypted:	false
SSDEEP:	48:YxpyW2HgqA8qHr6HlDLZxqZm0iFildDVnSWNkdyAyjkbUdT/J8LDcMApjYsjON//:YxpyW2Hgq4WHlRxqZm0iAllVS4PRkUdk
MD5:	7046F0A16D3888C363C370E3CA0442F5
SHA1:	EFE9AEA0926642A669B6B373F14D738B4CC9F3D7
SHA-256:	ADC264466BE0561311ABF57A5134F33B56CD3A551B81DEE263387DAEFCFA10BC
SHA-512:	74275D5066E53B2A64C098093EE41E627A399E144FB14DC8BAE46154377B4B4846F426B13F900A6E7BA54A3EB9DA5B12329EB497A0384D46116D51CCD3AE1C90
Malicious:	false
Reputation:	low
URL:	https://cab8c6cd-d43c7a7f.carner.com.co/css/glyphs/glyphs.css?v=N9jMfMIoO_s7OATN0j5LYqmO9MCqHDjfpaUV2RuaEy8
Preview:	....^]~U.......4...5:i... .........b..i......n.lit..h...m...R..W...Jy.....a..J7L.8......cc..._P.Y.k..U.......B...+.}...x...~x.'A...z....H+.:q.......~..?Y.~...f.....O^.aPQ.Zi...ce............F...........>..@...v..\|3..C.W.U.G.1n...\|s..7.\|.......G...z.......&.,!x.5w....._.9..J.>s...._R9.1.+..D.{..2.}...#_y.\|W..K..o..{...=..@...B.]YW..._..._B]aEfEE.]g/...`.....(IT.'.e......l..\@....#......Y...c..9.....S.j0X...9..d#Jk..-..g..d...x...hDM.w.........6.[....D1..."...n(.Q.,.b..-...,...D...X.".q........,..#.$.ly..J}Y.N.f.j..R+?..S,.1.U.!)3..M.0..tmyP..O..@..Hx.....:x.d.m..:ye.4Ds3...1........8..-$..z.......B...Wud$..i[..=..<l.W(..`...Jm.....JP...>'.:.=....G..P.xZK.8...J..k.'.N.B%:.>M...q.\3&.uK.)=.,.c.M.xy3.h..9.`....\|....f.1(.l....)...6..:.^.!#...\|........iR..p.a...t...1.0......v.r..Q.../!..`.!....u..id9e.3....c"m....z.J...d.Y...9.DV.-...&%........7.....,.$..?.Qr.X.9..7+.r..T.....@.%...f..M.;e..B.(..g..%5....<R.t....{q(#..9w.....'...e....UY..>LhTIA...B

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 171688
Category:	downloaded
Size (bytes):	22760
Entropy (8bit):	7.9895478855888165
Encrypted:	false
SSDEEP:	384:eHTqfHy2f4rU1lILZnomIIOTBGNh7N3rj2v406FHhwm4i6n1QWC2U7lAk3R:wqa2ssINe1Wh7pjT0KHhL6SRV3R
MD5:	A0A173A2931BC59267835F2319480B52
SHA1:	CB731D34FD301CAB66E0DD205E910A820ABABFFD
SHA-256:	329402E073F36DE81A1903069A787900DCC2D9E525CE240AE058ECD552FC8D03
SHA-512:	8611CEDE2148EBDE22A751D03EFD331051DF32E12C336183D4FE3DAAE5648C50E036525F43C3AF5912F7C7311520ACE06B30830E02084AF184D545B74E02D7A5
Malicious:	false
Reputation:	low
URL:	https://wwwms.carner.com.co/onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231
Preview:	...........k.$....~E...v.+.#..U..#E...HI....b........TFdU..p'..'.n.....!.n.K........v......0.ED5.8...L7sssw3sss.o$..X.Up..?.N..X.W..........O..~[..ht.\|/K.EYl...P..+.....Y.....c...Wq....]q..}...e.C.=fq.l.....i..r.y....X.y...H.<O.{H....?......'..:....HA...*....a.O..u]l..2.5..k.4.Dx.$.......}....:=...,.r...$E.....f...8V[6...O.N.&C.....<...&.<!....../JLI..).....![.~."G....O..3...#s....NE.<`:.j.%..T.P..'.9.N...u...l...o....B.......aCS]rM.<..h.eE.G..+....w].... ...6...#KNy\|....iO.}....e...#jKB..@..9Gd.S...<GSS.......D....=^..=.......t_.(/....d...lGh..r..eU..i.yC.?fh.....=..<.,.N......z.6..>.A.]6......V.I\|.......).1q.J.....y...B....{....vs...M...2.!.z.Y..2$mJ.&.....n.E....t.&..o..A\..z%\|.N.8.K..Mv........QB.).....i..?Csp.?.....%.-r..i...t^g.!...Vy....u^...c..=D./.w.Z.%Z.h.w1.`W...!=..S.g.T........\|...l...-.i..#:.xB...nv=.Iw..8..W...LAsD_..Xpg....}..x...W...9....J..8T.]...X...._...3.k.G.#..xl..0.()g.....w.Y...o...q&..y...n_..`......Q.tH?....>.X

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113401
Category:	downloaded
Size (bytes):	20414
Entropy (8bit):	7.979510858152841
Encrypted:	false
SSDEEP:	384:VkqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IMU7ULgCsHqZo9v8:gCGEiL/w7R8DW9Z5BU7UMZHqok
MD5:	7E18E71D589531855CF589482EAB8174
SHA1:	05F69583C81A69910337CFC736EDC8CE67544DBF
SHA-256:	7C0DF71DA7BB0F2C55BE83B8BA31FCA820E7F856CDA39A0BD009584B6FB36B3B
SHA-512:	C758593F92BBC29804E45ACE4A4F3FC6EB7B76C032F43A0DDCDD2D220842F6542BDA22BFCBFD01D458FAED546C798F5B195A1E67ADAF1580E4DE95CC38D2443A
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	16567
Entropy (8bit):	7.98860903910329
Encrypted:	false
SSDEEP:	384:o2qk0uu63px0BpL+MO63LRsEAqlM48PDecUKsi5JA17eC5Xftrxvbms0v:lq2Vix+MO4LQqlM48ARi5J051rdJ0v
MD5:	C64B6760DECF93A1B989FF54AD688C6E
SHA1:	F8D7D02A768A239FE002044803A84BFCFEA2CBEE
SHA-256:	292FBA2A2FA923D5923B14ADEE9A9693DA7B71089D2CEE768B9F4508B190E31B
SHA-512:	167BFDFE381C1572810E74DCBA316097C5AA0E77B14C779EF5B396E3DF33769A10E12FEFF31B8DBB3457FE855DA5733C7F99E09E5CC47E79E0EE6549FEBC302C
Malicious:	false
Reputation:	low
URL:	https://cab8c6cd-d43c7a7f.carner.com.co/css/Article/article.css?v=joejkGC7jmgVPaXv6QYy20tWjgmkhh7L7Q1GHYOzoYs
Preview:	[.........:\|...L.:]Qr..!..$EMR.-...'..;....%\|....-:,.v....l.^ns[........^.......{....x..$=.7PdP.u@l..v;..w..d.EJq..c.Yv.;J2..Fp+..'...(....h..:......s..B.c..5}...{..("" .l{..l~.kw.....M.......:....mL.3.1....{s.zc.....vm./.\|?.%.._....8hSMNd...$...D.0!.$.........<...}A...NM...B]....8......o...G6..b7........q,C....../q...l.qf.jSB...S...`J........GW:y..-.,M...C.....`.@M#t....#e.l.....[Sk.V....=.dc........7.E.......E.8.?....G..6}?O.lq..........lqqq..A.G...l.X..k.U.~.f.wR].#4O6a.1.....w.bv.G.w.-...w......$.H2M.mR(8Y.xn.e..l.3<P...(GA.$a.@.)....a......Zx`.}_..Q3.........].2t>....9..9t...c..SD\|.B...../.z..........i.~1...7.........G.QE....>$.,.0.fCb....I..s).\@.I./M.t:.^?.T.3<.>.g..'2........v....q.=..o/J"Tb.l).E....}p../`k.......H.".G.i./`........B.0.2.4..2..0.V?A...0!5&.......-..^=.%....,O...............5m.Z.2...y&.K.lr..6..[.?.O..8Z.m...-D.z....G......2.r.<....G1:....K$......E..)...[.?..=...d.<LI.......'..a.......9..Z.......@X.7."...

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 449658
Category:	downloaded
Size (bytes):	122186
Entropy (8bit):	7.997482301201213
Encrypted:	true
SSDEEP:	3072:ZK8AznM4xVUyDQxQtVMQLzXCkzZHa4Z+F9kg:ZCMwUykQLzSkz1OF9P
MD5:	99B8C468B4C0105D452D883F764CB3E7
SHA1:	D051F25B48617CCD0E4F730CDC6C3B7A53B4CFA4
SHA-256:	8666632DDBB526A9C3822B4EAFB30F5C95F851A818C6DFA7BF4147A1C95444F0
SHA-512:	A2A6740FBFF88E31809519BE903CA120B4E246464ADB9C42276EC61D66DF7AB6F49142D94FC4C20B12FA032553014F072E3513E3E6BFF47B426EA500D4ED7C6D
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/ConvergedLogin_PCore_NXCGegEOpKB5nrI5GnSS3g2.js
Preview:	...........{w.8.8.....fn..(..o+..:NR..$...Merd.v.%.$.1.......([NU....s.Q.H... .....w.......Oit..).OK7...KW.......lp...`...../.M<......[..R......y....K3.7.l.4..Y)y`.y...$..^.@.1...R......%....J..gP.7..(..W.....0..V...j..#.Yi..,=?x.C..s.0.'I)b...x...&....R..$....ji......-......\.pB...a.^.]./`.X&.....2.o...$,.....l<^0-..f1...Yu..w.$..0c.=a.}...xT"d....{..@.... .es0q.4bl.D..1:~-y.9t.F..X...9.qn..g/fUI...q....r.f..k...Q.Y.I2.....^..W.;.XTu........... .G....o.....1/z.f...c.K.8..^ [.R..,7.Wr..0....V........:...ag....X.U..w)(...F.'..A....nkwz...;=.j.c.....U..... ..xVx....1...A.&.sV}...s.(.3 +...m.......S./.2~@+...X...@.D\..Ue.'Pe..&wV..T..ww...8.....?x..\)WVb..r....4k....!.........d..%.]...%..Pi....g..o....4...(...1.e.D.~....Z..:..P.=....X.(._...W.....N1.F....@.VZ%y.....t..'Q....Y..h'.Y..A...4.a.b.k..=..V!D.V".>..pE.Q...bb`...@ki.+0-..).).X....T....-.zZ7P.H...{..=..i.......N..d.....\|fE..<D^.G........l..}....S........{zi.XYC ...M.yJ..

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	670
Entropy (8bit):	7.728595278405632
Encrypted:	false
SSDEEP:	12:BZNfLQvYI3HC2gP2GkODIgEKy7V8jNJyz3OiLzIs0FIHG2ooOpfa/gTOCk:pEvYcHCHOC9y7Vcjq31AszApf6
MD5:	42FDB1C6001263D77F92BC2884CE6A2F
SHA1:	2EDF66BE09943C7634A884A401D5D0D5D570AF40
SHA-256:	EB376F6104AB9071399429267F4A7246EF5EFBADFF74055855CDB315B2599546
SHA-512:	AB9248F2C214D3D1216974D66D077201B3AB48E401237D778CBADC1159E6DE6D213BB103FF513A643B49694412C02964C06E528C5700AA9E627CEA3425D33675
Malicious:	false
Reputation:	low
URL:	https://cab8c6cd-d43c7a7f.carner.com.co/css/SearchBox/search-box.css?v=bybwzGBajHicVXspVs540UfV0swW0vCbOmBjBryj9N4
Preview:	......O.._...k.`...6.(cY...-.Bhu.)P.Jk.C+.u..(.........$.}.q...Z......f..N...Rh.?......?......z.....?.k2./...$..Y.6.pL~.P\|y!......2.[./bI.../%.d".c.A....8.L.........(..i.....C.j.M....&...y..Q.:6Y..g.(..<_ .t.&.....o..&0..9.T..h...v*...J.....i..wh....e}....#.K..P"5+S.V....L..-...0......aL...P.G.U.....<Oya.0...,.M..Q.`A.``.o.[9....4....n.......u..c....."X].;>..z...<.E..L....X...N.u.%.O..r......Pf. ..\.2.0z+r..J..e..(7..T.sG.W..:H\54..]T.......s1N.ey.=.....uH.}..'.s2.cH....K.G.Ts..l...../\|..Z......~.(&..0$.1.......C...hn.hE..)....&..7.m0..e..i..>./.G.xD.z].QU..".........o$.....G....Gq.8_......7y...LA.<...t.5t.w.{(...C.....e...``.:oaw3..I...l.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 449658
Category:	dropped
Size (bytes):	122186
Entropy (8bit):	7.997482301201213
Encrypted:	true
SSDEEP:	3072:ZK8AznM4xVUyDQxQtVMQLzXCkzZHa4Z+F9kg:ZCMwUykQLzSkz1OF9P
MD5:	99B8C468B4C0105D452D883F764CB3E7
SHA1:	D051F25B48617CCD0E4F730CDC6C3B7A53B4CFA4
SHA-256:	8666632DDBB526A9C3822B4EAFB30F5C95F851A818C6DFA7BF4147A1C95444F0
SHA-512:	A2A6740FBFF88E31809519BE903CA120B4E246464ADB9C42276EC61D66DF7AB6F49142D94FC4C20B12FA032553014F072E3513E3E6BFF47B426EA500D4ED7C6D
Malicious:	false
Reputation:	low
Preview:	...........{w.8.8.....fn..(..o+..:NR..$...Merd.v.%.$.1.......([NU....s.Q.H... .....w.......Oit..).OK7...KW.......lp...`...../.M<......[..R......y....K3.7.l.4..Y)y`.y...$..^.@.1...R......%....J..gP.7..(..W.....0..V...j..#.Yi..,=?x.C..s.0.'I)b...x...&....R..$....ji......-......\.pB...a.^.]./`.X&.....2.o...$,.....l<^0-..f1...Yu..w.$..0c.=a.}...xT"d....{..@.... .es0q.4bl.D..1:~-y.9t.F..X...9.qn..g/fUI...q....r.f..k...Q.Y.I2.....^..W.;.XTu........... .G....o.....1/z.f...c.K.8..^ [.R..,7.Wr..0....V........:...ag....X.U..w)(...F.'..A....nkwz...;=.j.c.....U..... ..xVx....1...A.&.sV}...s.(.3 +...m.......S./.2~@+...X...@.D\..Ue.'Pe..&wV..T..ww...8.....?x..\)WVb..r....4k....!.........d..%.]...%..Pi....g..o....4...(...1.e.D.~....Z..:..P.=....X.(._...W.....N1.F....@.VZ%y.....t..'Q....Y..h'.Y..A...4.a.b.k..=..V!D.V".>..pE.Q...bb`...@ki.+0-..).).X....T....-.zZ7P.H...{..=..i.......N..d.....\|fE..<D^.G........l..}....S........{zi.XYC ...M.yJ..

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 379
Category:	dropped
Size (bytes):	254
Entropy (8bit):	7.073949007476455
Encrypted:	false
SSDEEP:	6:XtMG99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:Xx99kRX1YQBDFCnDXdWYtrE
MD5:	DE27409124B16BD9FD100A4541F14B54
SHA1:	071BBE8F6F76CFA82F1D565EB39899E56DC45313
SHA-256:	EFDBF66A9CC530152E00CEC6A67A9AD3BE5E392678CFD758671DFD72B0EDDD41
SHA-512:	E76D116B715763F5AE7528ADECB956CCE52D0EF920BBF05BC8E7BD04A559B08A9FE417AC05C5C3338571E25AFBE0C4C4D57A868A4E132E837179AAC5267FE824
Malicious:	false
Reputation:	low
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 379
Category:	downloaded
Size (bytes):	254
Entropy (8bit):	7.073949007476455
Encrypted:	false
SSDEEP:	6:XtMG99k8e6my4IIFqXUJ59lDFCnhUGlZX8My/dOtrE:Xx99kRX1YQBDFCnDXdWYtrE
MD5:	DE27409124B16BD9FD100A4541F14B54
SHA1:	071BBE8F6F76CFA82F1D565EB39899E56DC45313
SHA-256:	EFDBF66A9CC530152E00CEC6A67A9AD3BE5E392678CFD758671DFD72B0EDDD41
SHA-512:	E76D116B715763F5AE7528ADECB956CCE52D0EF920BBF05BC8E7BD04A559B08A9FE417AC05C5C3338571E25AFBE0C4C4D57A868A4E132E837179AAC5267FE824
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
Preview:	..........mP.n. ...D.xY0.\..{. 7...y.F!.....T..Y.Y..n...q^.[O}..w.SJ.j..3.....%)....x.f.K}..}\.=E.D....!.n.......Ma..G.=+.%.w..WX...9.A...........X...V...bOB&2.H....15{.fT...V-.#..m..f...V2<...~....l%4.....Ie.TL69.....vW.....v.3.v.O..}..{...

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15765
Category:	dropped
Size (bytes):	5537
Entropy (8bit):	7.959424866881452
Encrypted:	false
SSDEEP:	96:pA0JKrdHC20dEDU68MRd32z1FnU3mguu/Xr49fGajoIMGMolQNR1F:+Rdl0demz19DmSGCoUCNXF
MD5:	A5692EBB3A2099AC552FD2F0974EDB4D
SHA1:	D3AB33125A2FB91BED34F33B643488A769A91569
SHA-256:	D51AC4B37649AEA3A322A35EB371238A007CEADAAD137CA37A232ADA7CCCECC1
SHA-512:	88967DED404CD3E67FE4EF64BB74E4F0E3F832720ADD402CC014CFC4CCED22BE10A0EB21F042B09584AE776A1AE4CC32ACFECDCDD3B6F8380F430DA6DF07A0C0
Malicious:	false
Reputation:	low
Preview:	...........[}w.F...?...!.f,.M.rU.....]...&9...P,$U#lS.w.~wFB..v.lNl..;w...+...........i...uO.lk.w..v......^..z>..~z._h#?..>......Z.h~8..8J..m.....(..Z:.Z.D_.0.Z.....<..5...O.r.t.u.L..9..c?..a...}.ja..C...'..x...f....~..'.?L"..R-.C..a.1....Ls....j.(I'..K..d.U.m.B...;...<(~.~D$.3...Da0.JD.....4hi..YF}q.?.k..T.}h.@....0..)xrG$....<.$......".k......v.8w.p>.a..<....?.A.<..H.8...D~..n.b.i_D.~c}........G.....jj.......~:......<....?.^4....!..8.w.K........+....l.Z.f4u.0...\|...{...........HMi.o..........z..{>..../.U.T.-..?.V<.........w.?.Y8.c...L..w.....7&..ql...G&......5.:..H.......1g3'.~..d.M.....r.zA$.)~3. .x....Z..Qq..,H..C]....A;p..$.P..\..:$XL8..7..R.[RD......[a.v ....w.l.N...3......Cw.q"ny...w....4..w.........l..........Op...l..j..]....\.'...$.....>-......I-7I.....v......].kAO#.G...0(......,..#p.5....).F.e.}..;..{0..l..........&cN....x.OD.~.......4...yT.....O..g.,......jP7.0}.{..".s ..a'L>.i.1...-YhE.5.\|...3n.v.^o:.....S.....pB.4.K...L..Z

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1378
Category:	dropped
Size (bytes):	628
Entropy (8bit):	7.659657630123852
Encrypted:	false
SSDEEP:	12:XZEjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X2P5e3dgYLMk69Ii1epryt/Md
MD5:	144602B9BCB69A170EE0F9E900C107F7
SHA1:	ABDAC4E49652003158DD7DC561C3EC7878CEBDAF
SHA-256:	B5099539DA34B1482C022BBC78270BF471CF9349EF84BB34CA7A02B63515FA9E
SHA-512:	BF80EB1F4E3AFC5568320FE865C4C1B9BE44C1363B36B82549D5344486F157905B4C6573D5CC8418BC311CCE5BBB7C93208FDD68E1A2F72CAA311D786235AA6F
Malicious:	false
Reputation:	low
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	6176
Entropy (8bit):	7.973843609614533
Encrypted:	false
SSDEEP:	192:aWs2X0o3uuiQYN84ZDt7KBs3x9QA/4IZr:Mgeui/h7KA9QI4IB
MD5:	55751F3103DD9D8C603EC8D9C564EB29
SHA1:	FF6B29F484DF717BFC4D4118CB854B77641471D8
SHA-256:	319E6744ECE7369E87C0BE89C6EDE45A00D2CD37B3B77F17B2581A128BA225C7
SHA-512:	F487422223599D656082A17BA72BAC7D5A6882755D4141F2BB1E3898F8A06433E542FD03A869A247C8465264797A91E781464DE0558E1E825393F58A8374646F
Malicious:	false
Reputation:	low
URL:	https://cab8c6cd-d43c7a7f.carner.com.co/css/Article/css.css?v=Z6ZkkY_X8iTM42LbcHhEDNaT4e9rMO_zPAbxEsFxAvo
Preview:	..eQT.~HD5..@#e....2....>.T.. ....vmO.k..k..x...FH..n.O....Dwl...f...s.../.x.4L.0...P,..G}5..h$......V.>...._$..~...D..Z.Y.Y.....W..`.iX......{.]....%..X&.#\.$.k..K......gc.u..D......n.......H.._..%....?.4i..=.<...../..j..<...e...}T..\|.... ...=.V...2e....{._.D..).F"..T.mc....fw.=@....\..E.l6_..2#/.J..>..:m.........!..#..X....N..$..X.........Q..h.../o...~Lm:..V,....Eb.......l....X:..K....Q..-/.....G...".~1C.\|.)..2g.T....h......v6......q'..'.I....P$.h..p'.T.'..2b....h.....hg.....h.'.{....g..\|Qv.......%;....`[...L..};F].........u.....}..r.._=.)..#22....`7.cx...N&?...=../.g...a..-2.uIQPw.4WS..9.r..]..[g...2S...;.".....!.cY]L..f.sG...5$.l.\.t...3XB...fxO..r5.Q~.;z.jY..&...F..y.V.3n...x8._\|.[...N ..V.d...DF.`.Jj)w..yeM.0...%..$.a...@.w...&W\|.o............t..FR.....{_M..b?...x}.c....Y......@..^..3...A....[.=F.a....M....n...._...3......9..<.?.....D.!..0.gK.....a.~.............p.p....,#..jZ.D.....Z.l).L..Ax.. L.......}0. .h.p.......^.E.$.A...

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	327
Entropy (8bit):	7.389504567052753
Encrypted:	false
SSDEEP:	6:vfBQNTxvi/IXWj4VsdoGNt563wZD3KtWUOpCSkLzbrR1FCJZEshA9D:2JxaGM4qqGN9Zj2fzbt1fshA9D
MD5:	0BC238E47A878CC4BB85C9B8B4139C0A
SHA1:	5B306143C34925833776F05CD6E7B6E3AAF0FC25
SHA-256:	2416B95BAF663649237F4BC27707603E8F17A9D396AFB2BF1A9221ED507E504B
SHA-512:	77529F37CE3B1489D69CC478F818343B566D40432D4D5ECB64D9023D9DF2773E14C607147174FC460D65EE8BE6F828A676B305E1907CFB698AED4B1BCE6BFFEE
Malicious:	false
Reputation:	low
URL:	https://cab8c6cd-d43c7a7f.carner.com.co/css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYo
Preview:	....dk...:`Td.)f..y.&.L.G..=...w...,O ...g....M.>..o...:.\|...u.f.=q..p .3.p...g{..H...m.....[..V..y.ci.e.UX.p.......*..g.c.D.6.O..2....)97E..nN...[..........$5."I8.e.....y..x......P.'...cc.nG.1..veH..CW../@.`.;.2.'.........H6.d..._:t.6.@........+C.h..r.9.=..7...ZfEf...Y.n.X.....;.."......[....SS.a'..z.....

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 7017
Category:	downloaded
Size (bytes):	2425
Entropy (8bit):	7.932827738221867
Encrypted:	false
SSDEEP:	48:XKOdeiIfs+JSK6Mm84Bi1edVbv4OtQF3lFxfGLtNqOb8ssfl6n1:jok+JSK6Mm8HoFw3l/fGLOssfK1
MD5:	8FADE0B64A3DE6548A13E702A1DF6C83
SHA1:	322BF6D845A01ABCDAF426B947B78195B62B87AF
SHA-256:	84A692ECCD22F9C883E3D415296CA0FD7C75118B7AD3958A0A7194F88F967E9E
SHA-512:	896630C36688F0885F06DF262258640238B846BDEA4A4793B31D3E1230C273996A34B247FFDE664EB7C64B38B638678E4F6D049B888AC08A5AFCA13011013276
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js
Preview:	...........Xms.8..>.B.U..c..=d<SY..do&...[W.)J..k.%.$C.$..Z~...e...U.m....~.V.._+o.......N;=t}.z./;g.......{.....1F._/`..YH.\.XQ....D..!c!...E._2.......E...)...Li.4..."..I..`.g...vA?.ml.8.&"..}......0.Sm!<pEQ.}.4`$@...B..F...&`D%0^6. ,)RT...:..pQ.H.ZUj&..Rqp~.\|P8L...a.L.....m.....%'...e...h&....z..!.[.R;f\|..\.....2....b.".....R.wD.b.P...$.&.9H..IJ#.........(.G.9.-.&...)S.-`..w%...]!k..<.5.k.......U.^.1.$..`.t....d.b.. cX._..{}U.........M2._..0...<\..pS....P...KR.._...<1D........).....X.......l7NT`}..<....7.[...,.9.....C.<n....K.v.\..#.k;>\...#..V..a....A...;.....v.fo.S'.......L..z`8zR.G..2...g..h..4N$ah..K.U.N.17E.<..;]x...C<...u.....C}..._d.$...4..G......Jpv.3....K...B:#.......K=Q..W...A....U..AH}g..)./...e.;J....."Wi.t.@.:.......v.L...)...h.....y.......PO..L..e.w1P...C!f.Zc..@<9...P(.>..l.(....y.O^.A.j(....q....\.....0ju.I....[8.1...E.@.v..q..3X%.Z..J`..Tz.%&:c......e.fI...}7...\|d...1..RAk`...p.q/./Z.`.>.H..'..5.=..6,...e..2..Q..[.4qEe.FB.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1378
Category:	downloaded
Size (bytes):	628
Entropy (8bit):	7.659657630123852
Encrypted:	false
SSDEEP:	12:XZEjXb5e1vpPDySPLiDB/3YLZzrlDuLRndk6l3WZi1epo7IyhadSH8Ib1yfuI:X2P5e3dgYLMk69Ii1epryt/Md
MD5:	144602B9BCB69A170EE0F9E900C107F7
SHA1:	ABDAC4E49652003158DD7DC561C3EC7878CEBDAF
SHA-256:	B5099539DA34B1482C022BBC78270BF471CF9349EF84BB34CA7A02B63515FA9E
SHA-512:	BF80EB1F4E3AFC5568320FE865C4C1B9BE44C1363B36B82549D5344486F157905B4C6573D5CC8418BC311CCE5BBB7C93208FDD68E1A2F72CAA311D786235AA6F
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
Preview:	..........m.Mo.0.....]%F..6...rX.;..&i..].&HZ...#%...B..4.W$.....>....v8...f....g.O/.3k....ms.o....m...a8.......u..4>.]....r~8...%.....x.m.y].....u.>..7....l.]....i..fC.[O..z.)..r..........g!(.+....4.P9.0@.......R.......^q.I[..7.....Q;...6.N....a.d.%....:...6FE.}.......}s.`LV..Q.U. 8..}..y.&..I..a.\.8%..kgoo.Q6...>.5.8..!.....".t9].v.B) `.G6.V.E\..AJQU.7...J.oS..........@......l.....{.r..KP@......9YD..U......&..:..d......+/...(..:.S_...S......n..z.a...,.,&VB......eJR)...R.H3])>....9O.........KDi.O..#...-?D.1..N.p....h.#.Z.[/..!.h..$..S..Phdqd....}.....E>g..q5..J.T......u.....i.b...

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
URL:	https://7085cdbe-d43c7a7f.carner.com.co/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 141814
Category:	downloaded
Size (bytes):	49810
Entropy (8bit):	7.994955234767606
Encrypted:	true
SSDEEP:	1536:OJjEIl8SoeMX+a/CmMJI7lVzmfYXPiMksDmuJ:OJjNiS7Mu8jVKfSiKauJ
MD5:	F5FC82EEB10889B0A47A876A7C95B986
SHA1:	31528BD1BFD3F1FCBFCE4B7F0D541265A23C42CF
SHA-256:	E91C5771484A8D925EEEBD86B7742F8966DA0F64716C7EE4CE55C1AFF079A888
SHA-512:	9010F7BFDE05768997E9549F04DA106787C56A5CECFEE77921E0B2C6AF0E6A8060CFB2D58A1905DF4AB08741F7E860830AF0EFB742074E55CA48BD9CF880BC7F
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	...........m[.8.0........OL.......... .........t.....@.o?."...=..:_.y..T..RU..T...Z...O.....28.W..._...+.....I..p.........w~\...Q..C7.^%.aT.Q.M..MD\....w'.q..W.;Q.F..b....'Ph(&.c...E^......Y............gx.KA..#Qq..j..K...,.DTy..Gw.c...q8N.....>.. =....F....2....Q...R...g..1.C..\|..SG..:.....:.e.`.\...V........p&[....n+.......Yu..o6J.n."z.&N&.....!+.W......s.6r.D.....{..q/.....:\|...Sh....8..S1......X...T..a...W..Fsk....h..u.$..^_.....>r.@D.Qx...{..v....7......G.E..kv.t6..T..{...WO.q8....>.....\B.rp.....2...x...aUa...JRM.-...nT.....qm..ym.N.9..x.ODp..u.Z...2...C.:.A.&.SQ.s..c.(.. +..dR...\]./....Y}:...._1-\|p..l@.D\q.........k...j.....;..j.9..w.8..Us.;...yi.y'..X....2.6#.....u X..C..Lr^\|;.&.J....\|.....&....X.o...Yidi.O..Z..~.V...E..#SZKJ8..Co..n.8.........1....9..D...XRge...MP.&.3....Se...b.5v..N.a...'......c.i...9...l..Z.`.F.._%>U.'.."..;.N......D$.}..~\|....u......3..L...EiU8.L.r.<D.o.s......~'\......."9..p.?>...'...d..nZ.S..H.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 190253
Category:	dropped
Size (bytes):	61137
Entropy (8bit):	7.995656539880523
Encrypted:	true
SSDEEP:	1536:kx0WdJL5Rchz+uKdY1VCJAEMEhaqnYv2Vv/Qicb8aaxiYN+:kHdbRchz+ndYzCJAEMEav25u8aaIYN+
MD5:	9D69415BD929BC96935E19BE90BF0A8C
SHA1:	182438F082CEA5570D2ED963D2E82961B01AEAE2
SHA-256:	541C69D6747914555C342D4438AD58EF1EEEC454350E86B98D8668AE85B49F5D
SHA-512:	BD7F8A99EA1B48A13B848A23E58EB07C7034569B83C4C47E2FA9044AB8022C09CBF15287D2393B21A00A86BE9462D59F6EF6DBAFBAE34386DA2B7C43549A54A6
Malicious:	false
Reputation:	low
Preview:	...........iw.F.0.....'W..`...8..^Y.m&.%NF..@`K.M...J.H..OU........'..4......Z.8..7.M......;.....4..K....z..<.rON.O..../.IT.i.2.......Y..N?ign..I{....k8......wU6..c.<KZY.-<.;.fI...,.n...2.>..8.,.!...(.#....xl.o.f.$./..\|3......s..j.}6..M...()X.......%.5..E..Y:cYq{t;k.xd.9...8.....<...x>aYm.M#...a..E.........E.....&...<....I.../.6.........)....6.s'N6..$a..,Na.k..T12..(.`r.X.+.6..o+./.4/.h;.l.....qry.........e...Z...eS..ZU........\|d.YC.gV#..x.:.V.s.z.,g2...X...p^.k...2E...7L....vR_...Kod]....M.%G)`{.6..Y..l.^.....8G..O.y...z..."NX....o-...d..=.'7.\...M".bC..V%{._XT....s....h....aQ..U.R;h..v....2..4... .?..~....1r.._......5..I.a.?,..?..U....?L..wlh$.a.....6.Q.O. ....5...X..Y.6....fYZO....y..Or..z]B..y..;o.....o.rS..HG.{K...Y&P...........#.x'.5..m.......s.6....6...."z...fM.6.......4@...%+.."6C.%./6'...2<.7...J5..l7.p9......(..WM...T}...:..o..9l.MX...-.i....a.)..[.09S .K)...e6i?.....x.9.0.7...V...\|.........u..g...n..mk-^..e.O/6...

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15765
Category:	downloaded
Size (bytes):	5537
Entropy (8bit):	7.959424866881452
Encrypted:	false
SSDEEP:	96:pA0JKrdHC20dEDU68MRd32z1FnU3mguu/Xr49fGajoIMGMolQNR1F:+Rdl0demz19DmSGCoUCNXF
MD5:	A5692EBB3A2099AC552FD2F0974EDB4D
SHA1:	D3AB33125A2FB91BED34F33B643488A769A91569
SHA-256:	D51AC4B37649AEA3A322A35EB371238A007CEADAAD137CA37A232ADA7CCCECC1
SHA-512:	88967DED404CD3E67FE4EF64BB74E4F0E3F832720ADD402CC014CFC4CCED22BE10A0EB21F042B09584AE776A1AE4CC32ACFECDCDD3B6F8380F430DA6DF07A0C0
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
Preview:	...........[}w.F...?...!.f,.M.rU.....]...&9...P,$U#lS.w.~wFB..v.lNl..;w...+...........i...uO.lk.w..v......^..z>..~z._h#?..>......Z.h~8..8J..m.....(..Z:.Z.D_.0.Z.....<..5...O.r.t.u.L..9..c?..a...}.ja..C...'..x...f....~..'.?L"..R-.C..a.1....Ls....j.(I'..K..d.U.m.B...;...<(~.~D$.3...Da0.JD.....4hi..YF}q.?.k..T.}h.@....0..)xrG$....<.$......".k......v.8w.p>.a..<....?.A.<..H.8...D~..n.b.i_D.~c}........G.....jj.......~:......<....?.^4....!..8.w.K........+....l.Z.f4u.0...\|...{...........HMi.o..........z..{>..../.U.T.-..?.V<.........w.?.Y8.c...L..w.....7&..ql...G&......5.:..H.......1g3'.~..d.M.....r.zA$.)~3. .x....Z..Qq..,H..C]....A;p..$.P..\..:$XL8..7..R.[RD......[a.v ....w.l.N...3......Cw.q"ny...w....4..w.........l..........Op...l..j..]....\.'...$.....>-......I-7I.....v......].kAO#.G...0(......,..#p.5....).F.e.}..;..{0..l..........&cN....x.OD.~.......4...yT.....O..g.,......jP7.0}.{..".s ..a'L>.i.1...-YhE.5.\|...3n.v.^o:.....S.....pB.4.K...L..Z

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://62d417d4-d43c7a7f.carner.com.co/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3526
Category:	downloaded
Size (bytes):	1428
Entropy (8bit):	7.880406781974354
Encrypted:	false
SSDEEP:	24:XGcBGyRdS2UVAYglqDE3fJudoAV/ujLvU4amGvo77w4gNvFyjNw0RpYmBmy3zjFJ:XGcISdS2UpgkYzjzU4Mv6XAFrNy3zjFJ
MD5:	61B53F810E47AA0B19CB1A8D3838B4E9
SHA1:	BE64126E86B78F572BD6F8D9F50DF6E70B9A87D9
SHA-256:	37F6FEE5C6FE187EA44D2EA54237AFDCCE7BAA4AE4B2453F34810985347C5967
SHA-512:	B7BEFD99273F19FE8D70663F6921A19F699058D41C31B19666381E120109AEFB37F9FC94C19CEB0C1B52E548859FE20ECCACB8CE82375D0A3CFC04425DA52B01
Malicious:	false
Reputation:	low
URL:	https://l1ve.carner.com.co/Me.htm?v=3
Preview:	...........WMo.8...W.D...V....0A..............+S.I.-....}Y..M.C..er...........9.../....e.(.~2.'....I...wI..-S#=.r.Y.r.,...t.`.<..%.N$.^..+n6J..g...3e........f...D.$i.b..c..5..t.X.Z.E .t......n..x.....k.....S....\X...V..d5..4Y.!..!.r;.riV3}%g.....2,.R.H.;. e.X..l..Hn.t.a..E.H.E.5...._.m...Xh.0..".n..+1...xW.....y."n...I.f}.\|......E...>.......1..0[..y..pK..zs...ri..q...i.e...t..J.."\|.!h.D.hQT.Z..h.ZKT..T.X..>..<:....\|....z%.caL..].ZJ.v.pM..[/....$X8a.9....".q.I#.."..b)..-[s?...}.........\.c.(j.S ..P.....b..);..B...g5......4iu......WL.x.<.LsH.f...s....,$...V..."]A..v..c.....pl..{.@Oj.u....^7..A.d.u.3.)..G.{...-.E...cMj.m...:3\|....l.....uYM.\..5.!:.e.a..v.WV..^..~wB(}\tI.B3GGP.v..RH\|td.........u..]....2..6L..0#.[.@"4....#t.6.....F.1....W...duci..-.....5.nb.e1....E..3.%.U..V....~&-.:x.%.....O.QLj. %u.C...B.....d..<."..;.T.....[..E.y.lK.L...h........).5.*fmD...K..n.I..n...T..R.%Y.Q`.V.......................){(.z.`.0VT....F..Q.!.....%.}...vc...

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	622
Entropy (8bit):	7.603689654135309
Encrypted:	false
SSDEEP:	12:t7sqLKw0ZZgY/k0vnOUvpOWTH61ulKjUCUrDGJgviUTZYjB2vVeU6:tgHdk0vJba1ulKNCviUTZXz6
MD5:	C8E242CFC93E4E7A330FD66EA538FDC2
SHA1:	D554C2E737E9556364765339C959583E8DC5C9CB
SHA-256:	767F97A1457A277C6A78096ED9C5806C5991F3C9BE303913CAC3649464F29A55
SHA-512:	C3E89705804F64D48EE4AC53152898E767BA4B4F9BE1AA3674F504280D972EC429FD65BD6087E6C949692DFCA45E4CA9991948167B83F4A2FB1A7AC435F3B8F2
Malicious:	false
Reputation:	low
URL:	https://cab8c6cd-d43c7a7f.carner.com.co/css/sitewide/articleCss-overwrite.css?v=D0lQRoIlvFHSQBRTb-gAQ5KkFe8B8NuSoliBjnT5xZ4
Preview:	.....Z.^_.$]gM:^.^Q....2...lf.......i.Wp.F....T(....k_...j.s..h...].b.I.kx......u..p..Vb].P.Z.......N..06E.P.zp.,.%F8.g-....T~$..r......m...4..;.RSK.b...9...{t..0........n._.!..#m8..&.!t.A<S.......j.f..k...5.j]..M.i4eC...E.Pk.........Y.d(J...U(...k\b.s.6m0.{c....T.fa..,7.s...I.>.y=.}....cUFS.......o...o.#.m..G...C.;. I+......^....6Hb.8........?...@.C.@..C...!.......Z..<........H.._T.x.......MtPs...'..wU. \|oB.U......_....3..6.ul....`x..A..........g.,C2....Y....J..S.}Ie.-e?.JN.e..l..~....n.4..u.k...i., .D..E.{...0.FbA...Q...F....JK...g...u.).\....@..5&t+...k. .q.2....!.p...

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-19T13:51:49.886266+0200	2857090	ETPRO PHISHING JS/PsyduckPockeball Payload Inbound	1	89.187.28.95	443	192.168.2.5	49713	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 19, 2024 13:51:35.548296928 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:35.548360109 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:35.626379967 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:45.155594110 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:45.155608892 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:45.265243053 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:45.508523941 CEST	49709	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:45.508579969 CEST	443	49709	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:45.508677959 CEST	49709	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:45.509306908 CEST	49710	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:45.509329081 CEST	443	49710	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:45.509522915 CEST	49710	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:45.509608984 CEST	49710	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:45.509619951 CEST	443	49710	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:45.509819984 CEST	49709	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:45.509829998 CEST	443	49709	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.007744074 CEST	443	49710	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.008066893 CEST	443	49709	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.008266926 CEST	49710	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:46.008266926 CEST	49709	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:46.008285999 CEST	443	49710	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.008305073 CEST	443	49709	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.009763002 CEST	443	49709	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.009876013 CEST	49709	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:46.009931087 CEST	443	49710	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.010008097 CEST	49710	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:46.011054039 CEST	49709	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:46.011143923 CEST	443	49709	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.011293888 CEST	49710	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:46.011380911 CEST	443	49710	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.011799097 CEST	49709	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:46.011806965 CEST	443	49709	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.062890053 CEST	49710	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:46.062890053 CEST	49709	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:46.062906981 CEST	443	49710	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.194405079 CEST	49710	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:46.342642069 CEST	443	49709	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.342732906 CEST	443	49709	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.342803955 CEST	49709	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:46.349144936 CEST	49709	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:51:46.349178076 CEST	443	49709	144.217.158.133	192.168.2.5
Sep 19, 2024 13:51:46.376771927 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:46.376821041 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:46.377012014 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:46.377357960 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:46.377377033 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:46.882702112 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 19, 2024 13:51:46.883044004 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:47.212476015 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:47.258294106 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:47.628515959 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:47.628557920 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:47.632591009 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:47.632682085 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:47.635714054 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:47.635900974 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:47.636380911 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:47.636389971 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:47.641225100 CEST	49714	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:51:47.641294956 CEST	443	49714	172.217.16.196	192.168.2.5
Sep 19, 2024 13:51:47.641473055 CEST	49714	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:51:47.642096043 CEST	49714	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:51:47.642133951 CEST	443	49714	172.217.16.196	192.168.2.5
Sep 19, 2024 13:51:47.687418938 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:48.294038057 CEST	443	49714	172.217.16.196	192.168.2.5
Sep 19, 2024 13:51:48.296794891 CEST	49714	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:51:48.296838999 CEST	443	49714	172.217.16.196	192.168.2.5
Sep 19, 2024 13:51:48.298443079 CEST	443	49714	172.217.16.196	192.168.2.5
Sep 19, 2024 13:51:48.298577070 CEST	49714	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:51:48.330801964 CEST	49715	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:48.330841064 CEST	443	49715	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:48.330899954 CEST	49715	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:48.333463907 CEST	49715	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:48.333483934 CEST	443	49715	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:48.539675951 CEST	49714	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:51:48.540024996 CEST	443	49714	172.217.16.196	192.168.2.5
Sep 19, 2024 13:51:48.594146013 CEST	49714	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:51:48.594168901 CEST	443	49714	172.217.16.196	192.168.2.5
Sep 19, 2024 13:51:48.640264034 CEST	49714	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:51:48.992134094 CEST	443	49715	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:48.992228985 CEST	49715	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:48.998961926 CEST	49715	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:48.998977900 CEST	443	49715	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:48.999414921 CEST	443	49715	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:49.033174992 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.033229113 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.033250093 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.033292055 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.033328056 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.033354998 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.033375978 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.044913054 CEST	49715	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:49.211111069 CEST	49715	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:49.251437902 CEST	443	49715	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:49.288512945 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.288543940 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.288561106 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.288604975 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.288624048 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.288638115 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.288693905 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.288729906 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.288748980 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.288846016 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.398242950 CEST	443	49715	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:49.398334980 CEST	443	49715	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:49.398399115 CEST	49715	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:49.398551941 CEST	49715	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:49.398570061 CEST	443	49715	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:49.398745060 CEST	49715	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:49.398752928 CEST	443	49715	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:49.473206997 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.473264933 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.473303080 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.473328114 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.473357916 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.473371029 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.473376989 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.489001989 CEST	49716	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:49.489047050 CEST	443	49716	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:49.489187002 CEST	49716	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:49.489903927 CEST	49716	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:49.489923954 CEST	443	49716	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:49.514101982 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.542742014 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.542789936 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.542887926 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.542898893 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.542912006 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.542953968 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.543668032 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.543735981 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.543742895 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.592659950 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.659022093 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.659037113 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.659070969 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.659082890 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.659113884 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.659126043 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.659161091 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.659183025 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.798823118 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.798872948 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.798917055 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.798928022 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.798983097 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.798990965 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.800297022 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.800347090 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.800369978 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.800379038 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.800417900 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.844989061 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.845057964 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.845153093 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.845175028 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.845213890 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.845247984 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.845272064 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.845324039 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.845701933 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.845726013 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.845762968 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.845772028 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.845808983 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.847054958 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.847074032 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.847153902 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.847162962 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.847196102 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.886296988 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.886420965 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:49.886429071 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:49.886504889 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:50.017385006 CEST	49713	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:50.017416954 CEST	443	49713	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:50.149921894 CEST	443	49716	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:50.149996996 CEST	49716	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:50.151433945 CEST	49716	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:50.151443958 CEST	443	49716	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:50.151680946 CEST	443	49716	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:50.152754068 CEST	49716	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:50.195424080 CEST	443	49716	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:50.430854082 CEST	443	49716	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:50.431046963 CEST	443	49716	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:50.431114912 CEST	49716	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:50.956109047 CEST	49716	443	192.168.2.5	184.28.90.27
Sep 19, 2024 13:51:50.956149101 CEST	443	49716	184.28.90.27	192.168.2.5
Sep 19, 2024 13:51:51.258831978 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:51.258887053 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:51.258946896 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:51.259226084 CEST	49718	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:51.259236097 CEST	443	49718	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:51.259289980 CEST	49718	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:51.259582996 CEST	49718	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:51.259598970 CEST	443	49718	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:51.259784937 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:51.259804010 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:52.059206009 CEST	443	49718	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:52.059756041 CEST	49718	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:52.059777975 CEST	443	49718	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:52.060235977 CEST	443	49718	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:52.060739994 CEST	49718	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:52.060821056 CEST	443	49718	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:52.061376095 CEST	49718	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:52.061434984 CEST	49718	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:52.061465025 CEST	443	49718	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:52.115832090 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:52.253602028 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:52.802237034 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:52.802269936 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:52.803684950 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:52.804764986 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:52.804951906 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:52.951004028 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:53.311471939 CEST	443	49718	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:53.311574936 CEST	443	49718	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:53.312066078 CEST	49718	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:53.312757969 CEST	49718	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:53.312781096 CEST	443	49718	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:53.312796116 CEST	49718	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:53.312845945 CEST	49718	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:53.315280914 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:53.355432034 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:55.598845959 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:55.598913908 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:55.599008083 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:55.600336075 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:55.600368023 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:56.425754070 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:56.425883055 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:56.430152893 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:56.430162907 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:56.430566072 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:56.482680082 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:57.257956028 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:57.299478054 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:57.511511087 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:57.511584997 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:57.511605024 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:57.511625051 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:57.511642933 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:57.511657953 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:57.511676073 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:57.511686087 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:57.511707067 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:57.511738062 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:57.511745930 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:57.511761904 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:57.511883020 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:57.511945009 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:57.511950016 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:57.512084007 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:57.512136936 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:57.589329958 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:57.589396954 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:57.589725018 CEST	49725	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:57.589772940 CEST	443	49725	23.1.237.91	192.168.2.5
Sep 19, 2024 13:51:57.589848042 CEST	49725	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:57.590075970 CEST	49725	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:57.590090990 CEST	443	49725	23.1.237.91	192.168.2.5
Sep 19, 2024 13:51:57.594275951 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 19, 2024 13:51:57.594305038 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 19, 2024 13:51:58.157593012 CEST	49719	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:51:58.157617092 CEST	443	49719	40.127.169.103	192.168.2.5
Sep 19, 2024 13:51:58.180028915 CEST	443	49725	23.1.237.91	192.168.2.5
Sep 19, 2024 13:51:58.180104017 CEST	49725	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:51:58.184072971 CEST	443	49714	172.217.16.196	192.168.2.5
Sep 19, 2024 13:51:58.184210062 CEST	443	49714	172.217.16.196	192.168.2.5
Sep 19, 2024 13:51:58.184287071 CEST	49714	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:51:58.787570953 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.787606001 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.787619114 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.787636042 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.787645102 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.787655115 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.787666082 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.787688971 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.787698984 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.788054943 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.789305925 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.789334059 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.789351940 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.789381027 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.789395094 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.789414883 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.789422989 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.789433002 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.789436102 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.789453030 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.789463043 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.789506912 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.974029064 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.974044085 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.974071026 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.974147081 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.974169016 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.974215984 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.975120068 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.975128889 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.975155115 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.975171089 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.975233078 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:58.975235939 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.975331068 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.975765944 CEST	49717	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:58.975779057 CEST	443	49717	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:59.177895069 CEST	49714	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:51:59.177927017 CEST	443	49714	172.217.16.196	192.168.2.5
Sep 19, 2024 13:51:59.204607964 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:59.204637051 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:59.204705954 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:59.205346107 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:59.205362082 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:59.990386009 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:59.990802050 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:51:59.990833998 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:59.994421005 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:51:59.994510889 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:00.002019882 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:00.002278090 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:00.002655983 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:00.002679110 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:00.045310974 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:04.870754957 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:04.870820045 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:04.870841026 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:04.870888948 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:04.870902061 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:04.870944023 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:04.870979071 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:04.871016026 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:04.871016026 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:04.871016026 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:04.923280954 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.122482061 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.122507095 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.122546911 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.122611046 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.122668982 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.122704983 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.122729063 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.201953888 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.202007055 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.202071905 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.202095985 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.202131033 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.202131987 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.202167034 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.202181101 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.202204943 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.202323914 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.202414036 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.209722996 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.209758997 CEST	443	49727	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.209783077 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.209826946 CEST	49727	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.286103964 CEST	49731	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.286130905 CEST	443	49731	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.286252022 CEST	49731	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.286696911 CEST	49731	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.286711931 CEST	443	49731	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.329996109 CEST	49732	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.330065966 CEST	443	49732	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.330146074 CEST	49732	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.330446005 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.330524921 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.330704927 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.330938101 CEST	49732	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.330974102 CEST	443	49732	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.331213951 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.331248045 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.332159996 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.332185984 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.332288980 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.332472086 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.332495928 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.374433041 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.374469042 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:05.374572992 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.375441074 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:05.375471115 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.125502110 CEST	443	49731	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.125823975 CEST	49731	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.125838041 CEST	443	49731	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.126929998 CEST	443	49731	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.127296925 CEST	49731	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.127517939 CEST	443	49731	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.127620935 CEST	49731	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.137464046 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.137692928 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.137748003 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.141355991 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.141437054 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.141784906 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.141968012 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.171428919 CEST	443	49731	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.173548937 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.173844099 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.173867941 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.174783945 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.174854994 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.175261021 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.175338984 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.175440073 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.175456047 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.179076910 CEST	443	49732	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.179274082 CEST	49732	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.179300070 CEST	443	49732	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.180444956 CEST	443	49732	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.180809021 CEST	49732	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.180913925 CEST	49732	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.180922985 CEST	443	49732	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.180982113 CEST	443	49732	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.193669081 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.193928003 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.193937063 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.194113970 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.194128036 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.194787979 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.194845915 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.195146084 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.195202112 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.195319891 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.195328951 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:06.226255894 CEST	49732	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.226257086 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.242291927 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:06.242371082 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.263780117 CEST	443	49731	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.264761925 CEST	443	49731	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.265017986 CEST	49731	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.320099115 CEST	49731	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.320133924 CEST	443	49731	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.535784960 CEST	443	49732	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.535866976 CEST	443	49732	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.536235094 CEST	49732	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.539033890 CEST	49732	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.539083958 CEST	443	49732	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.565279007 CEST	49736	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.565320969 CEST	443	49736	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.565392971 CEST	49736	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.565677881 CEST	49736	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.565694094 CEST	443	49736	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.965384960 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.965447903 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.965468884 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.965529919 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.965586901 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.965626001 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.965675116 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.982738018 CEST	49737	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.982783079 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:10.982856989 CEST	49737	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.983069897 CEST	49737	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:10.983087063 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.164896965 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.164925098 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.164932966 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.164974928 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.164995909 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.165009022 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.165026903 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.165044069 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.165072918 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.415008068 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.415038109 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.415087938 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.415122986 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.415196896 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.415258884 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.415277958 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.415352106 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.416609049 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.416656017 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.416698933 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.416712999 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.416762114 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.416784048 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.421998024 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.422008991 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.422045946 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.422075987 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.422101021 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.422133923 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.422161102 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.434719086 CEST	49738	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.434756041 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.434822083 CEST	49738	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.435250044 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.435327053 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.435420036 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.435774088 CEST	49738	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.435789108 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.435962915 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.435992956 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.440568924 CEST	443	49736	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.441116095 CEST	49736	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.441124916 CEST	443	49736	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.444694042 CEST	443	49736	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.444772005 CEST	49736	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.446382046 CEST	49736	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.446548939 CEST	443	49736	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.446836948 CEST	49736	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.446845055 CEST	443	49736	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.459557056 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.459594011 CEST	443	49740	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.459659100 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.459878922 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.459894896 CEST	443	49740	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.490689039 CEST	49736	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.549632072 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.549652100 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.549720049 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.549734116 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.549777031 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.549877882 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.549968958 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.549978018 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.550028086 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.551414013 CEST	49735	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.551429987 CEST	443	49735	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.601355076 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.601414919 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.601550102 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.601593971 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.601753950 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.602979898 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.603094101 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.603107929 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.603193045 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.603257895 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.605967045 CEST	49733	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.605999947 CEST	443	49733	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.957781076 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.958213091 CEST	49737	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.958228111 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.959311962 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.959762096 CEST	49737	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:11.959935904 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:11.960078955 CEST	49737	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.007411003 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.224950075 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.233881950 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.233901978 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.237458944 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.237591982 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.243016005 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.243194103 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.243252039 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.267200947 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.268856049 CEST	49738	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.268870115 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.269205093 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.270092010 CEST	49738	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.270160913 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.270297050 CEST	49738	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.287421942 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.294717073 CEST	443	49740	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.296442032 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.296474934 CEST	443	49740	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.297003031 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.297029972 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.298619032 CEST	443	49740	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.299403906 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.301745892 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.301745892 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.301772118 CEST	443	49740	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.301834106 CEST	443	49740	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.312261105 CEST	49738	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.312271118 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.342772961 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.343368053 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:12.343405008 CEST	443	49740	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:12.395338058 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:15.276843071 CEST	443	49736	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:15.277223110 CEST	49736	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:15.277252913 CEST	443	49736	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:15.277317047 CEST	49736	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:15.284399033 CEST	49741	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:15.284435034 CEST	443	49741	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:15.284504890 CEST	49741	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:15.286917925 CEST	49741	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:15.286931992 CEST	443	49741	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.059763908 CEST	443	49740	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.060681105 CEST	443	49740	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.060807943 CEST	443	49740	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.060834885 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.060944080 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.061286926 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.061288118 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.061304092 CEST	443	49740	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.061898947 CEST	49740	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.130484104 CEST	443	49741	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.131095886 CEST	49741	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.131119013 CEST	443	49741	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.132592916 CEST	443	49741	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.133040905 CEST	49741	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.133040905 CEST	49741	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.133127928 CEST	443	49741	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.133380890 CEST	49741	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.133389950 CEST	443	49741	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.185559988 CEST	49741	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.732707024 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.732824087 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.732867956 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.732894897 CEST	49737	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.732927084 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.732944012 CEST	49737	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.732979059 CEST	49737	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.733000040 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.733061075 CEST	49737	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.733068943 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.733156919 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.733211040 CEST	49737	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.736984015 CEST	49737	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.737015963 CEST	443	49737	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.942605019 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.942667007 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.942687988 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.942728043 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.942768097 CEST	49738	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.942778111 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.942840099 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.942857027 CEST	49738	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.942982912 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.943012953 CEST	49738	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.945024967 CEST	49738	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.945444107 CEST	49738	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.945468903 CEST	443	49738	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.952778101 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.952825069 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:16.953036070 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.956866980 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:16.956886053 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:17.329577923 CEST	443	49725	23.1.237.91	192.168.2.5
Sep 19, 2024 13:52:17.329658031 CEST	49725	443	192.168.2.5	23.1.237.91
Sep 19, 2024 13:52:17.783657074 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:17.787745953 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:17.787782907 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:17.788342953 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:17.788635969 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:17.788719893 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:17.788764000 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:17.829812050 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:17.829823017 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.052155018 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.052262068 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.052284002 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.052301884 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.052334070 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.052339077 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.052357912 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.052371979 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.052388906 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.052397966 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.052424908 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.094286919 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.218625069 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.218657970 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.218709946 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.218720913 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.218729019 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.218759060 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.218775988 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.218792915 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.218822956 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.383667946 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.383703947 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.383759022 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.383771896 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.383802891 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.383821011 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.384907007 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.384927034 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.384963989 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.384968996 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.384999990 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.385013103 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.385811090 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.385860920 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.476891994 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.476958990 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.476989985 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.477034092 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.477066994 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.477139950 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.563014030 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.563096046 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.563148975 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.563173056 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.563191891 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.563222885 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.565849066 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.565924883 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.565973043 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.565979958 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.566031933 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.566059113 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.566440105 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.566498041 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.566518068 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.566524029 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.566559076 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.566708088 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.566768885 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.567190886 CEST	49739	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.567203999 CEST	443	49739	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.584638119 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.584686995 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.584757090 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.585583925 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.585603952 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.595983982 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.639431000 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.640660048 CEST	49744	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.640738010 CEST	443	49744	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:18.640822887 CEST	49744	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.641740084 CEST	49744	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:18.641769886 CEST	443	49744	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.413495064 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.414746046 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:19.414817095 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.415987968 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.417493105 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:19.417671919 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.417787075 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:19.463279963 CEST	443	49744	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.463402987 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.463682890 CEST	49744	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:19.463726044 CEST	443	49744	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.464184999 CEST	443	49744	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.464660883 CEST	49744	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:19.464744091 CEST	443	49744	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.465125084 CEST	49744	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:19.469783068 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:19.507405996 CEST	443	49744	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.908540964 CEST	443	49741	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.908701897 CEST	443	49741	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:19.908801079 CEST	49741	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:19.909182072 CEST	49741	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:19.909204006 CEST	443	49741	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:22.087446928 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:22.087497950 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:22.087538958 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:22.087560892 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:22.087585926 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:22.087627888 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:22.341046095 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:22.341070890 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:22.341106892 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:22.341144085 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:22.341181040 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:22.341228008 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:22.341234922 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:22.341320038 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:22.341375113 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:22.341798067 CEST	49742	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:22.341819048 CEST	443	49742	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.447408915 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.447438955 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.447451115 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.447475910 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.447494984 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.447505951 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.447530031 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.447566032 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.447583914 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.497329950 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.634557009 CEST	443	49744	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.634834051 CEST	49744	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.634881973 CEST	443	49744	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.635009050 CEST	49744	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.712903023 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.712922096 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.712965012 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.712982893 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.712996960 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.713004112 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.713037014 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.713052034 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.713097095 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.782516956 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.782538891 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.782578945 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.782605886 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.782613993 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.782645941 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.782664061 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.782665014 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.782687902 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.782689095 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.782702923 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.782712936 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.782747030 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.782754898 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.782789946 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.782804966 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.782838106 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.783365965 CEST	49734	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.783392906 CEST	443	49734	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.788367987 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.788404942 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.788482904 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.788770914 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.788791895 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.813734055 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.813771009 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.813828945 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.814208031 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.814218998 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.883789062 CEST	49747	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.883852005 CEST	443	49747	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:23.883918047 CEST	49747	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.884109020 CEST	49747	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:23.884124994 CEST	443	49747	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.580511093 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.580938101 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:24.580976009 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.581437111 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.582055092 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:24.582138062 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.582238913 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:24.627401114 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.648416996 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.648822069 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:24.648850918 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.650002003 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.650460005 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:24.650639057 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.650707006 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:24.695405960 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.864806890 CEST	443	49747	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.865114927 CEST	49747	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:24.865150928 CEST	443	49747	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.866589069 CEST	443	49747	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.866664886 CEST	49747	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:24.867768049 CEST	49747	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:24.867856026 CEST	443	49747	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.867948055 CEST	49747	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:24.867970943 CEST	443	49747	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:24.919044018 CEST	49747	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.123692989 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.123753071 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.123774052 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.123791933 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.123832941 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.123851061 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.123917103 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.123917103 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.123917103 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.123917103 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.123948097 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.171164036 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.380650997 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.380682945 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.380727053 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.380764008 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.380794048 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.380810976 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.380841017 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.496290922 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.496351004 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.496381998 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.496400118 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.496431112 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.496449947 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.497498989 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.497543097 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.497575998 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.497581005 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.497613907 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.497629881 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.498214960 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.498275042 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.566628933 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.566679001 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.566796064 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.566809893 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.566912889 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.582803965 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.582910061 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.582926989 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.582981110 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.654109955 CEST	49748	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.654206038 CEST	443	49748	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.654324055 CEST	49748	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.656774044 CEST	49748	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.656814098 CEST	443	49748	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.683267117 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.683327913 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.683370113 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.683406115 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.683445930 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.683471918 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.684333086 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.684413910 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.684423923 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.684447050 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.684475899 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.684567928 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.684909105 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:25.684916973 CEST	443	49743	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:25.684938908 CEST	49743	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:26.500787020 CEST	443	49748	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:26.501099110 CEST	49748	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:26.501125097 CEST	443	49748	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:26.502785921 CEST	443	49748	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:26.502854109 CEST	49748	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:26.503276110 CEST	49748	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:26.503356934 CEST	443	49748	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:26.503505945 CEST	49748	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:26.503514051 CEST	443	49748	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:26.546685934 CEST	49748	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:28.327992916 CEST	443	49747	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:28.328180075 CEST	443	49747	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:28.328252077 CEST	49747	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:28.329039097 CEST	49747	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:28.329083920 CEST	443	49747	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.505590916 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.505623102 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.505702019 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.505709887 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:29.505755901 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.505780935 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:29.546958923 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:29.586215019 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.586359978 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.586532116 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:29.586566925 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.586587906 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:29.586731911 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:29.751267910 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.751302004 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.751410961 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:29.751441002 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.751821995 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:29.752454996 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.752525091 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.752578974 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:29.752585888 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.752666950 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:29.752672911 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.752737999 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:29.752823114 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:29.753293991 CEST	49745	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:29.753310919 CEST	443	49745	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.236315012 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.236375093 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.236417055 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.236454010 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.236484051 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.236500025 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.236537933 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.238822937 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.238866091 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.238913059 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.238919973 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.238967896 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.422308922 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.422382116 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.422462940 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.422482967 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.422530890 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.423226118 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.423273087 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.423312902 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.423321009 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.423360109 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.423373938 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.424890041 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.424946070 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.425009012 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.425015926 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.425056934 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.425075054 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.487293005 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.487317085 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.487390995 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.487409115 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.487437963 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.487457991 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.608932972 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.608958006 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.609016895 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.609038115 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.609064102 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.609076023 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.609405041 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.609466076 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.609472990 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.609484911 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.609534979 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.610579967 CEST	49746	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.610599041 CEST	443	49746	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.683646917 CEST	49749	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.683692932 CEST	443	49749	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.683770895 CEST	49749	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.684108019 CEST	49750	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.684118986 CEST	443	49750	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.684194088 CEST	49750	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.684477091 CEST	49751	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.684556961 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.684694052 CEST	49751	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.684788942 CEST	49749	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.684806108 CEST	443	49749	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.684942007 CEST	49750	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.684954882 CEST	443	49750	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.685069084 CEST	49751	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.685112953 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.686188936 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.686223984 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.686290979 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.686439991 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.686450958 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.697266102 CEST	443	49748	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.697468996 CEST	443	49748	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:30.697561026 CEST	49748	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.703666925 CEST	49748	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:30.703690052 CEST	443	49748	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.078149080 CEST	49710	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:52:31.078175068 CEST	443	49710	144.217.158.133	192.168.2.5
Sep 19, 2024 13:52:31.480443001 CEST	443	49750	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.480819941 CEST	49750	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.480838060 CEST	443	49750	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.481925964 CEST	443	49750	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.482844114 CEST	49750	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.482928038 CEST	49750	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.482933044 CEST	443	49750	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.483011961 CEST	443	49750	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.485726118 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.485991001 CEST	49751	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.486015081 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.487493038 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.487567902 CEST	49751	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.488401890 CEST	49751	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.488480091 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.488518953 CEST	49751	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.506690025 CEST	443	49749	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.506970882 CEST	49749	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.506979942 CEST	443	49749	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.507448912 CEST	443	49749	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.507791996 CEST	49749	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.507882118 CEST	443	49749	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.507997990 CEST	49749	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.509057045 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.509274960 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.509293079 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.509624004 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.511238098 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.511307001 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.511647940 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.531410933 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.533279896 CEST	49751	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.533307076 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.533340931 CEST	49750	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:31.555404902 CEST	443	49749	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.559407949 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:31.578263044 CEST	49751	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:34.720624924 CEST	49753	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:34.720725060 CEST	443	49753	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:34.720829964 CEST	49753	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:34.721276045 CEST	49753	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:34.721335888 CEST	443	49753	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:34.825313091 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:34.825403929 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:34.825534105 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:34.826041937 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:34.826070070 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:35.697011948 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.697025061 CEST	443	49749	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.697076082 CEST	443	49749	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.697103024 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.697133064 CEST	49749	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.697148085 CEST	443	49749	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.697216034 CEST	443	49749	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.697221041 CEST	49751	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.697242975 CEST	49749	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.697242975 CEST	443	49750	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.697263002 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.697268009 CEST	49749	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.697302103 CEST	443	49750	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.697329044 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.697359085 CEST	49750	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.697367907 CEST	443	49750	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.697400093 CEST	49751	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.697442055 CEST	443	49750	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.697521925 CEST	49750	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.700380087 CEST	49751	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.700412035 CEST	443	49751	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.702538967 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:35.702655077 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:35.705960035 CEST	49749	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.705974102 CEST	443	49749	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.707886934 CEST	49750	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.707895041 CEST	443	49750	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.741508961 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:35.741601944 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:35.742027044 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:35.769520044 CEST	49755	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.769579887 CEST	443	49755	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.769659042 CEST	49755	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.770128012 CEST	49755	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.770164967 CEST	443	49755	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.770684004 CEST	49756	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.770719051 CEST	443	49756	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.770782948 CEST	49756	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.771640062 CEST	49756	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.771656990 CEST	443	49756	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.782183886 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:35.832144022 CEST	49757	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.832195997 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.832268000 CEST	49757	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.832668066 CEST	49757	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.832684040 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.836294889 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:35.879426956 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:35.918548107 CEST	49758	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.918621063 CEST	443	49758	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.918703079 CEST	49758	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.919130087 CEST	49758	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.919183016 CEST	443	49758	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.922396898 CEST	49759	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.922439098 CEST	443	49759	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.922506094 CEST	49759	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.922910929 CEST	49759	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.922926903 CEST	443	49759	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.926649094 CEST	49760	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.926656961 CEST	443	49760	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:35.926726103 CEST	49760	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.927021027 CEST	49760	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:35.927033901 CEST	443	49760	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.084856033 CEST	443	49753	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.085138083 CEST	49761	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.085200071 CEST	443	49761	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.085284948 CEST	49761	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.085441113 CEST	49753	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.085505009 CEST	443	49753	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.085855961 CEST	49761	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.085891962 CEST	443	49761	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.086649895 CEST	443	49753	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.087071896 CEST	49753	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.087263107 CEST	443	49753	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.087641001 CEST	49753	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.131444931 CEST	443	49753	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.306334019 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:36.306365013 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:36.306375027 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:36.306394100 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:36.306452036 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:36.306555033 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:36.306555033 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:36.306597948 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:36.306655884 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:36.307374001 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:36.307440996 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:36.307456970 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:36.307476044 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:36.307509899 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:36.307570934 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:36.307637930 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:36.341332912 CEST	49754	443	192.168.2.5	40.127.169.103
Sep 19, 2024 13:52:36.341387987 CEST	443	49754	40.127.169.103	192.168.2.5
Sep 19, 2024 13:52:36.598340988 CEST	443	49755	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.608052969 CEST	443	49756	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.617487907 CEST	49755	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.617507935 CEST	443	49755	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.617621899 CEST	49756	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.617641926 CEST	443	49756	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.618088961 CEST	443	49755	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.618206978 CEST	443	49756	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.618822098 CEST	49756	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.618994951 CEST	443	49756	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.619678020 CEST	49755	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.619766951 CEST	443	49755	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.619831085 CEST	49756	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.619908094 CEST	49755	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.667397976 CEST	443	49756	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.667407990 CEST	443	49755	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.876795053 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.877176046 CEST	49757	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.877196074 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.878654003 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.878997087 CEST	49757	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.879264116 CEST	49757	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.879379034 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.879491091 CEST	49757	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.886997938 CEST	443	49760	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.887233019 CEST	49760	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.887253046 CEST	443	49760	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.888720989 CEST	443	49760	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.888808012 CEST	49760	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.889144897 CEST	49760	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.889226913 CEST	443	49760	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.889343977 CEST	443	49759	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.889801025 CEST	49760	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.889807940 CEST	443	49760	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.890057087 CEST	49759	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.890064001 CEST	443	49759	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.890537024 CEST	443	49759	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.892138958 CEST	49759	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.892138958 CEST	49759	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.892220974 CEST	443	49759	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.908921003 CEST	443	49758	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.913074017 CEST	49758	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.913108110 CEST	443	49758	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.914199114 CEST	443	49758	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.914813042 CEST	49758	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.914813042 CEST	49758	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.914980888 CEST	443	49758	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.923443079 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.934984922 CEST	443	49761	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.935303926 CEST	49761	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.935317039 CEST	443	49761	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.936752081 CEST	443	49761	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.936863899 CEST	49761	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.938708067 CEST	49761	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.938786983 CEST	443	49761	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.938975096 CEST	49761	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.938985109 CEST	443	49761	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.965840101 CEST	49758	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.973886013 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.973912954 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.973956108 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.974006891 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.974035978 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:36.974050999 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:36.985372066 CEST	49761	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.037282944 CEST	49760	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.037282944 CEST	49759	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.037291050 CEST	49757	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.037302971 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.037307024 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.140292883 CEST	49757	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.155565023 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.155579090 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.155627012 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.155766964 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.155795097 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.155833960 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.155936003 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.341276884 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.341303110 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.341425896 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.341425896 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.341496944 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.341809988 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.342732906 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.342756033 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.342784882 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.342823029 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.342839003 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.342889071 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.342962980 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.410198927 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.410221100 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.410310030 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.410357952 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.410362959 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.410387039 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.410403013 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.410425901 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.527863979 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.527888060 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.528026104 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.528064013 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.528101921 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.528264999 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.528359890 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:37.528389931 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.528814077 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.575934887 CEST	49752	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:37.575989962 CEST	443	49752	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:38.178407907 CEST	443	49761	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:38.178571939 CEST	443	49761	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:38.178674936 CEST	49761	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:38.179349899 CEST	49761	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:38.179392099 CEST	443	49761	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:38.182295084 CEST	49762	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:38.182348967 CEST	443	49762	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:38.182429075 CEST	49762	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:38.182971954 CEST	49762	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:38.182996035 CEST	443	49762	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:38.185551882 CEST	49763	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:38.185583115 CEST	443	49763	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:38.185640097 CEST	49763	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:38.186089993 CEST	49763	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:38.186103106 CEST	443	49763	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:39.010087967 CEST	443	49762	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:39.011291981 CEST	49762	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:39.011305094 CEST	443	49762	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:39.011795044 CEST	443	49762	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:39.012274027 CEST	49762	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:39.012274027 CEST	49762	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:39.012290955 CEST	443	49762	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:39.012320042 CEST	49762	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:39.012371063 CEST	443	49762	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:39.027189970 CEST	443	49763	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:39.027468920 CEST	49763	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:39.027497053 CEST	443	49763	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:39.027950048 CEST	443	49763	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:39.028347015 CEST	49763	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:39.028347015 CEST	49763	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:39.028362989 CEST	443	49763	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:39.028424025 CEST	443	49763	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:39.063868046 CEST	49762	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:39.078598976 CEST	49763	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.243587017 CEST	443	49753	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.243933916 CEST	443	49753	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.244004011 CEST	49753	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.435879946 CEST	49753	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.435914040 CEST	443	49753	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.464273930 CEST	49764	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.464309931 CEST	443	49764	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.464368105 CEST	49764	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.477477074 CEST	49764	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.477504969 CEST	443	49764	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.556561947 CEST	443	49756	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.608078003 CEST	49756	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.669977903 CEST	443	49755	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.680984974 CEST	443	49755	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.681030989 CEST	49755	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.681058884 CEST	443	49755	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.682691097 CEST	443	49755	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.682739019 CEST	49755	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.795990944 CEST	443	49756	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.797374010 CEST	443	49756	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.797432899 CEST	49756	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.820143938 CEST	49756	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.820173979 CEST	443	49756	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.821362019 CEST	49755	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.821389914 CEST	443	49755	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.879802942 CEST	49765	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.879894972 CEST	443	49765	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.879971981 CEST	49765	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.880229950 CEST	49765	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.880260944 CEST	443	49765	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.882190943 CEST	49766	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.882211924 CEST	443	49766	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:40.882334948 CEST	49766	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.882566929 CEST	49766	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:40.882591009 CEST	443	49766	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.070528030 CEST	443	49759	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.131572962 CEST	49759	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.136369944 CEST	443	49760	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.224723101 CEST	443	49758	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.224781036 CEST	443	49758	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.224803925 CEST	443	49758	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.224848986 CEST	49758	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.224883080 CEST	443	49758	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.224909067 CEST	49758	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.224967003 CEST	443	49758	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.225023985 CEST	49758	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.230274916 CEST	49758	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.230304956 CEST	443	49758	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.243156910 CEST	49760	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.309232950 CEST	443	49764	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.311688900 CEST	443	49759	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.311712980 CEST	443	49759	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.311788082 CEST	49759	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.312470913 CEST	443	49759	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.312855005 CEST	49759	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.357637882 CEST	49764	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.371568918 CEST	443	49760	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.371754885 CEST	49760	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.371921062 CEST	443	49760	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.372093916 CEST	443	49760	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.372828960 CEST	49760	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.427380085 CEST	49764	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.427412033 CEST	443	49764	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.429630041 CEST	49760	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.429660082 CEST	443	49760	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.431226969 CEST	443	49764	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.431577921 CEST	49764	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.433032036 CEST	49764	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.433227062 CEST	443	49764	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.433357000 CEST	49764	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.433371067 CEST	443	49764	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.434102058 CEST	49759	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.434108019 CEST	443	49759	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.483690023 CEST	49764	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.548120022 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.548177004 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.548238039 CEST	49757	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.548257113 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.548430920 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.548640013 CEST	49757	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.549999952 CEST	49757	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.550017118 CEST	443	49757	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.555447102 CEST	49767	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.555495977 CEST	443	49767	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.555608988 CEST	49767	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.555814028 CEST	49767	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.555830956 CEST	443	49767	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.716147900 CEST	443	49766	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.716460943 CEST	49766	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.716470003 CEST	443	49765	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.716489077 CEST	443	49766	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.716653109 CEST	49765	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.716661930 CEST	443	49765	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.716835976 CEST	443	49766	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.717139959 CEST	443	49765	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.717156887 CEST	49766	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.717230082 CEST	443	49766	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.717417002 CEST	49765	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.717494965 CEST	443	49765	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.717556000 CEST	49766	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.717602015 CEST	49765	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:41.763400078 CEST	443	49765	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:41.763412952 CEST	443	49766	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:42.386008978 CEST	443	49767	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:42.386282921 CEST	49767	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:42.386318922 CEST	443	49767	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:42.389393091 CEST	443	49767	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:42.389487982 CEST	49767	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:42.391658068 CEST	49767	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:42.391742945 CEST	443	49767	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:42.391937017 CEST	49767	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:42.391951084 CEST	443	49767	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:42.456087112 CEST	49767	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.119358063 CEST	443	49762	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.119801044 CEST	443	49762	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.119864941 CEST	49762	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.196901083 CEST	49762	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.196953058 CEST	443	49762	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.267098904 CEST	443	49763	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.267128944 CEST	443	49763	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.267210960 CEST	443	49763	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.267221928 CEST	49763	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.267282009 CEST	49763	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.269177914 CEST	49763	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.269191027 CEST	443	49763	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.354952097 CEST	49769	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.354974985 CEST	443	49769	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.355074883 CEST	49769	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.358727932 CEST	49769	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.358741045 CEST	443	49769	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.377506971 CEST	49770	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.377516031 CEST	443	49770	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.377630949 CEST	49770	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.378132105 CEST	49770	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.378143072 CEST	443	49770	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.737602949 CEST	49771	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.737689018 CEST	443	49771	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.737905025 CEST	49771	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.738605976 CEST	49772	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.738697052 CEST	443	49772	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.738811016 CEST	49772	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.739289045 CEST	49772	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.739320040 CEST	443	49772	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:43.739588022 CEST	49771	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:43.739620924 CEST	443	49771	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.149717093 CEST	443	49769	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.150054932 CEST	49769	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.150072098 CEST	443	49769	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.150527954 CEST	443	49769	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.151118994 CEST	49769	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.151197910 CEST	443	49769	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.151412964 CEST	49769	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.195430040 CEST	443	49769	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.204075098 CEST	443	49770	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.204411030 CEST	49770	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.204420090 CEST	443	49770	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.207643032 CEST	443	49770	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.207716942 CEST	49770	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.208189964 CEST	49770	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.208267927 CEST	443	49770	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.208383083 CEST	49770	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.208389997 CEST	443	49770	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.249924898 CEST	49770	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.547132015 CEST	443	49772	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.569035053 CEST	49772	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.569098949 CEST	443	49772	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.570244074 CEST	443	49772	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.571926117 CEST	49772	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.572122097 CEST	443	49772	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.572591066 CEST	49772	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.576705933 CEST	443	49771	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.577414036 CEST	49771	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.577447891 CEST	443	49771	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.577925920 CEST	443	49771	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.578365088 CEST	49771	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.578443050 CEST	443	49771	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.578557014 CEST	49771	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:44.615442991 CEST	443	49772	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:44.619435072 CEST	443	49771	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:45.425697088 CEST	443	49764	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:45.426676989 CEST	443	49764	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:45.427547932 CEST	49764	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:45.645895958 CEST	49764	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:45.645965099 CEST	443	49764	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:45.647877932 CEST	49773	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:45.647991896 CEST	443	49773	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:45.648206949 CEST	49773	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:45.648490906 CEST	49773	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:45.648526907 CEST	443	49773	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:45.668337107 CEST	443	49765	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:45.814704895 CEST	49765	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:45.919205904 CEST	443	49765	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:45.919276953 CEST	49765	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:45.920531034 CEST	443	49765	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:45.920618057 CEST	443	49765	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:45.920643091 CEST	49765	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:45.920659065 CEST	443	49765	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:45.920670033 CEST	49765	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:45.920707941 CEST	49765	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:46.053956985 CEST	443	49766	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:46.060029030 CEST	49710	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:52:46.060156107 CEST	443	49710	144.217.158.133	192.168.2.5
Sep 19, 2024 13:52:46.060219049 CEST	49710	443	192.168.2.5	144.217.158.133
Sep 19, 2024 13:52:46.085211039 CEST	443	49766	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:46.085278988 CEST	49766	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:46.088938951 CEST	49766	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:46.088956118 CEST	443	49766	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:46.475984097 CEST	443	49773	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:46.530265093 CEST	49773	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:47.032701969 CEST	49773	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:47.032778978 CEST	443	49773	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.034400940 CEST	443	49773	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.034420967 CEST	443	49773	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.035849094 CEST	49773	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:47.081688881 CEST	443	49767	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.081713915 CEST	443	49767	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.081784964 CEST	49767	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:47.081809998 CEST	443	49767	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.082170963 CEST	443	49767	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.083724022 CEST	49767	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:47.276315928 CEST	49773	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:47.276510000 CEST	443	49773	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.277127028 CEST	49774	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:47.277127028 CEST	49773	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:47.277172089 CEST	443	49774	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.277196884 CEST	443	49773	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.277389050 CEST	49774	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:47.277707100 CEST	49773	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:47.277738094 CEST	443	49773	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.284471035 CEST	49774	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:47.284492970 CEST	443	49774	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.287906885 CEST	49767	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:47.287934065 CEST	443	49767	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:47.885457039 CEST	49775	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:52:47.885500908 CEST	443	49775	172.217.16.196	192.168.2.5
Sep 19, 2024 13:52:47.885570049 CEST	49775	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:52:47.885849953 CEST	49775	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:52:47.885867119 CEST	443	49775	172.217.16.196	192.168.2.5
Sep 19, 2024 13:52:48.116386890 CEST	443	49774	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.116929054 CEST	49774	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:48.116957903 CEST	443	49774	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.117429972 CEST	443	49774	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.118297100 CEST	49774	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:48.118427992 CEST	443	49774	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.119425058 CEST	49774	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:48.163428068 CEST	443	49774	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.466396093 CEST	443	49770	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.466840982 CEST	443	49770	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.467035055 CEST	49770	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:48.467761993 CEST	49770	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:48.467788935 CEST	443	49770	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.479159117 CEST	443	49769	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.479187965 CEST	443	49769	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.479346991 CEST	49769	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:48.479362011 CEST	443	49769	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.479799032 CEST	443	49769	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.479862928 CEST	49769	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:48.480309963 CEST	49769	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:48.480325937 CEST	443	49769	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.520219088 CEST	443	49775	172.217.16.196	192.168.2.5
Sep 19, 2024 13:52:48.520493984 CEST	49775	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:52:48.520519972 CEST	443	49775	172.217.16.196	192.168.2.5
Sep 19, 2024 13:52:48.520988941 CEST	443	49775	172.217.16.196	192.168.2.5
Sep 19, 2024 13:52:48.521998882 CEST	49775	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:52:48.522079945 CEST	443	49775	172.217.16.196	192.168.2.5
Sep 19, 2024 13:52:48.577127934 CEST	49775	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:52:48.950361967 CEST	443	49772	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.987113953 CEST	443	49772	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:48.987194061 CEST	49772	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:48.987457037 CEST	49772	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:48.987499952 CEST	443	49772	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:49.009840012 CEST	443	49771	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:49.011811018 CEST	443	49771	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:49.011878967 CEST	49771	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:49.012105942 CEST	49771	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:49.012130022 CEST	443	49771	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:49.212801933 CEST	49776	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:49.212872028 CEST	443	49776	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:49.212939024 CEST	49776	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:49.213416100 CEST	49776	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:49.213432074 CEST	443	49776	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:49.219028950 CEST	49777	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:49.219072104 CEST	443	49777	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:49.219130039 CEST	49777	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:49.219952106 CEST	49777	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:49.219966888 CEST	443	49777	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:50.012978077 CEST	443	49777	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:50.057065010 CEST	443	49776	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:50.061850071 CEST	49777	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:50.108716965 CEST	49776	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:50.691401958 CEST	49777	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:50.691406965 CEST	49776	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:50.691432953 CEST	443	49777	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:50.691438913 CEST	443	49776	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:50.692770004 CEST	443	49776	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:50.692956924 CEST	443	49777	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:50.697351933 CEST	49777	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:50.697415113 CEST	49776	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:50.697565079 CEST	443	49777	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:50.697624922 CEST	443	49776	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:50.697721004 CEST	49776	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:50.697777987 CEST	49777	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:50.739422083 CEST	443	49776	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:50.743391991 CEST	443	49777	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:51.540827036 CEST	443	49773	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:51.540925026 CEST	443	49773	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:51.540980101 CEST	49773	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:51.543690920 CEST	49773	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:51.543731928 CEST	443	49773	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:51.594023943 CEST	49778	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:51.594074965 CEST	443	49778	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:51.594135046 CEST	49778	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:51.594676971 CEST	49778	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:51.594691992 CEST	443	49778	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:52.328365088 CEST	443	49774	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:52.328571081 CEST	49774	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:52.328660011 CEST	443	49774	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:52.328773975 CEST	49774	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:52.434591055 CEST	443	49778	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:52.434982061 CEST	49778	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:52.435009003 CEST	443	49778	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:52.436007023 CEST	443	49778	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:52.436077118 CEST	49778	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:52.436572075 CEST	49778	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:52.436572075 CEST	49778	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:52.436590910 CEST	443	49778	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:52.436638117 CEST	443	49778	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:52.483799934 CEST	49778	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:52.483865976 CEST	443	49778	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:52.530683994 CEST	49778	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:54.526478052 CEST	443	49776	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:54.576927900 CEST	49776	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:54.760978937 CEST	443	49776	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:54.761382103 CEST	443	49776	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:54.761538029 CEST	49776	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:54.761692047 CEST	49776	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:54.761710882 CEST	443	49776	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:54.801965952 CEST	443	49777	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:54.808670044 CEST	443	49777	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:54.809189081 CEST	49777	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:54.809385061 CEST	49777	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:54.809406996 CEST	443	49777	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:55.779438972 CEST	49779	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:55.779486895 CEST	443	49779	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:55.779580116 CEST	49779	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:55.780046940 CEST	49780	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:55.780092001 CEST	443	49780	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:55.780147076 CEST	49780	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:55.780756950 CEST	49780	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:55.780775070 CEST	443	49780	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:55.781012058 CEST	49779	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:55.781028032 CEST	443	49779	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:55.832551956 CEST	49781	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:55.832614899 CEST	443	49781	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:55.832747936 CEST	49781	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:55.833334923 CEST	49781	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:55.833349943 CEST	443	49781	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:56.748311043 CEST	443	49778	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:56.748442888 CEST	443	49778	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:56.748502016 CEST	49778	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:56.751286983 CEST	443	49780	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:56.752383947 CEST	443	49779	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:56.752432108 CEST	443	49781	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:56.776396990 CEST	49781	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:56.776432991 CEST	443	49781	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:56.776767015 CEST	49779	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:56.776788950 CEST	443	49779	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:56.777018070 CEST	443	49781	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:56.777131081 CEST	49780	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:56.777146101 CEST	443	49780	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:56.778266907 CEST	443	49779	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:56.778338909 CEST	49779	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:56.781049967 CEST	443	49780	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:56.781122923 CEST	49780	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:56.831012964 CEST	49781	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:57.011792898 CEST	49781	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:57.012029886 CEST	443	49781	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:57.059570074 CEST	49781	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:57.306297064 CEST	49779	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:57.306529999 CEST	443	49779	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:57.310198069 CEST	49780	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:57.310391903 CEST	443	49780	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:57.312748909 CEST	49781	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:57.312788010 CEST	49781	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:57.312839031 CEST	443	49781	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:57.313225985 CEST	49779	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:57.313252926 CEST	443	49779	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:57.360411882 CEST	49780	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:57.360430956 CEST	443	49780	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:57.360439062 CEST	49779	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:57.404977083 CEST	49780	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:57.462613106 CEST	49778	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:52:57.462699890 CEST	443	49778	89.187.28.95	192.168.2.5
Sep 19, 2024 13:52:58.425460100 CEST	443	49775	172.217.16.196	192.168.2.5
Sep 19, 2024 13:52:58.425631046 CEST	443	49775	172.217.16.196	192.168.2.5
Sep 19, 2024 13:52:58.425928116 CEST	49775	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:53:00.018280029 CEST	49775	443	192.168.2.5	172.217.16.196
Sep 19, 2024 13:53:00.018305063 CEST	443	49775	172.217.16.196	192.168.2.5
Sep 19, 2024 13:53:00.859699965 CEST	443	49779	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:00.860750914 CEST	443	49779	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:00.860817909 CEST	49779	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:00.986695051 CEST	49779	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:00.986716032 CEST	443	49779	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:01.230933905 CEST	49783	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:01.230967999 CEST	443	49783	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:01.231025934 CEST	49783	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:01.231681108 CEST	49783	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:01.231692076 CEST	443	49783	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:01.284661055 CEST	443	49781	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:01.284756899 CEST	443	49781	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:01.284843922 CEST	49781	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:01.292953968 CEST	49781	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:01.292974949 CEST	443	49781	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:01.324639082 CEST	49784	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:01.324685097 CEST	443	49784	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:01.324785948 CEST	49784	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:01.325064898 CEST	49784	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:01.325088978 CEST	443	49784	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:02.029891968 CEST	443	49783	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:02.077126026 CEST	49783	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:02.151674032 CEST	443	49784	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:02.202080011 CEST	49784	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:02.228864908 CEST	49784	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:02.228871107 CEST	443	49784	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:02.229157925 CEST	49783	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:02.229176044 CEST	443	49783	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:02.232858896 CEST	443	49784	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:02.232923031 CEST	49784	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:02.233797073 CEST	443	49783	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:02.233869076 CEST	49783	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:02.234201908 CEST	49784	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:02.234380007 CEST	443	49784	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:02.235933065 CEST	49783	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:02.236129045 CEST	443	49783	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:02.262187004 CEST	49784	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:02.262202978 CEST	443	49784	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:02.262470007 CEST	49783	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:02.262491941 CEST	443	49783	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:02.306833029 CEST	49783	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:02.306834936 CEST	49784	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:06.318037987 CEST	443	49784	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:06.318526030 CEST	443	49784	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:06.318564892 CEST	49784	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:06.318627119 CEST	443	49784	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:06.318660021 CEST	49784	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:06.319433928 CEST	49784	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:06.639940977 CEST	443	49783	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:06.640228033 CEST	443	49783	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:06.640716076 CEST	49783	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:06.641690969 CEST	49783	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:06.641707897 CEST	443	49783	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:06.643413067 CEST	49780	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:06.687418938 CEST	443	49780	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:10.176709890 CEST	443	49780	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:10.176979065 CEST	443	49780	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:10.177052021 CEST	49780	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:10.199902058 CEST	49780	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:10.199937105 CEST	443	49780	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:10.257917881 CEST	49785	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:10.258022070 CEST	443	49785	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:10.258122921 CEST	49785	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:10.258970022 CEST	49785	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:10.259005070 CEST	443	49785	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:11.102308035 CEST	443	49785	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:11.103034973 CEST	49785	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:11.103063107 CEST	443	49785	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:11.103534937 CEST	443	49785	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:11.105865955 CEST	49785	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:11.105957985 CEST	443	49785	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:11.106872082 CEST	49785	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:11.147404909 CEST	443	49785	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:15.311625004 CEST	443	49785	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:15.311759949 CEST	443	49785	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:15.311836004 CEST	49785	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:15.376060009 CEST	49785	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:15.376127958 CEST	443	49785	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:15.380497932 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:15.380565882 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:15.380645037 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:15.380978107 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:15.381002903 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:16.422894001 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:16.423208952 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:16.423281908 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:16.423666954 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:16.424285889 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:16.424369097 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:16.424443960 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:16.467407942 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:17.331429958 CEST	49788	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:17.331491947 CEST	443	49788	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:17.331948042 CEST	49788	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:17.332464933 CEST	49788	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:17.332482100 CEST	443	49788	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:18.164086103 CEST	443	49788	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:18.164539099 CEST	49788	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:18.164557934 CEST	443	49788	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:18.164874077 CEST	443	49788	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:18.165208101 CEST	49788	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:18.165263891 CEST	443	49788	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:18.165436029 CEST	49788	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:18.211401939 CEST	443	49788	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:22.310070038 CEST	443	49788	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:22.310466051 CEST	49788	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:22.310480118 CEST	443	49788	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:22.310523033 CEST	443	49788	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:22.310537100 CEST	49788	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:22.310600996 CEST	49788	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:22.905970097 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:22.906011105 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:22.906023026 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:22.906090975 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:22.906169891 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:22.906232119 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:22.906232119 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:22.907776117 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:22.907810926 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:22.907845020 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:22.907847881 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:22.907874107 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:22.907893896 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:22.910017967 CEST	49787	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:22.910053015 CEST	443	49787	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.004302979 CEST	49789	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.004342079 CEST	443	49789	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.004488945 CEST	49789	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.006208897 CEST	49789	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.006223917 CEST	443	49789	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.024393082 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.024401903 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.024569035 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.025146008 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.025168896 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.025247097 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.026216984 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.026258945 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.026318073 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.026763916 CEST	49793	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.026809931 CEST	443	49793	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.026865005 CEST	49793	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.027776957 CEST	49794	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.027791023 CEST	443	49794	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.027846098 CEST	49794	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.028455019 CEST	49793	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.028476000 CEST	443	49793	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.028866053 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.028882980 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.029206991 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.029221058 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.030189037 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.030199051 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.034576893 CEST	49794	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.034603119 CEST	443	49794	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.040309906 CEST	49795	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.040330887 CEST	443	49795	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.040472031 CEST	49795	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.043329000 CEST	49795	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.043344021 CEST	443	49795	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.047096968 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.047185898 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.047270060 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.047566891 CEST	49797	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.047593117 CEST	443	49797	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.047724009 CEST	49797	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.049082041 CEST	49797	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.049094915 CEST	443	49797	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.049515009 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.049554110 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.068093061 CEST	49798	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.068100929 CEST	443	49798	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.068202019 CEST	49798	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.070193052 CEST	49798	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.070203066 CEST	443	49798	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.081044912 CEST	49799	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.081073046 CEST	443	49799	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.081144094 CEST	49799	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.083595037 CEST	49799	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.083623886 CEST	443	49799	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.088937998 CEST	49800	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.088954926 CEST	443	49800	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.089014053 CEST	49800	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.091515064 CEST	49800	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.091525078 CEST	443	49800	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.105623960 CEST	49801	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.105639935 CEST	443	49801	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.105736971 CEST	49801	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.108578920 CEST	49801	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.108593941 CEST	443	49801	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.116130114 CEST	49802	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.116137981 CEST	443	49802	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.116298914 CEST	49802	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.117938995 CEST	49802	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.117953062 CEST	443	49802	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.136281967 CEST	49803	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.136303902 CEST	443	49803	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.136364937 CEST	49803	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.136774063 CEST	49803	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.136786938 CEST	443	49803	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.144973993 CEST	49804	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.145009995 CEST	443	49804	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.145067930 CEST	49804	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.146261930 CEST	49804	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.146272898 CEST	443	49804	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.861469030 CEST	443	49789	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.861515999 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.861792088 CEST	443	49795	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.861802101 CEST	49789	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.861816883 CEST	443	49789	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.861936092 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.861979008 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.862016916 CEST	49795	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.862052917 CEST	443	49795	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.862191916 CEST	443	49789	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.862488985 CEST	49789	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.862596989 CEST	443	49789	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.862670898 CEST	49789	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.862694025 CEST	443	49789	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.862997055 CEST	443	49797	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.863049030 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.863084078 CEST	443	49795	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.863123894 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.863146067 CEST	49795	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.863251925 CEST	49797	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.863276005 CEST	443	49797	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.863626003 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.863884926 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.863894939 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.864778996 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.864824057 CEST	443	49797	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.864839077 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.864888906 CEST	49797	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.865125895 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.865190983 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.865340948 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.865408897 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.865434885 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.865494013 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.865506887 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.866094112 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.866249084 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.866257906 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.866379023 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.866432905 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.866663933 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.866734028 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.866750956 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.866787910 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.869266987 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.869326115 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.869632006 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.869709969 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.869769096 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.869796991 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.880049944 CEST	443	49794	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.880230904 CEST	49794	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.880244017 CEST	443	49794	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.881206989 CEST	443	49794	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.881263018 CEST	49794	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.881540060 CEST	49794	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.881598949 CEST	443	49794	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.881664038 CEST	49794	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.881685019 CEST	443	49794	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.882632971 CEST	443	49793	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.882833958 CEST	49793	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.882843971 CEST	443	49793	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.883958101 CEST	443	49793	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.884274006 CEST	49793	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.884387016 CEST	49793	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.884454966 CEST	443	49793	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.900558949 CEST	443	49798	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.900758028 CEST	49798	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.900777102 CEST	443	49798	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.904274940 CEST	443	49798	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.904339075 CEST	49798	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.917330980 CEST	443	49800	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.917536974 CEST	49800	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.917548895 CEST	443	49800	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.918555021 CEST	443	49800	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.918616056 CEST	49800	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.919274092 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.919275999 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.919281960 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.919287920 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.919316053 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.919337034 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.930260897 CEST	443	49799	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.930493116 CEST	49799	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.930514097 CEST	443	49799	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.934011936 CEST	443	49799	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.934076071 CEST	49799	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.935308933 CEST	49794	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.935308933 CEST	49793	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.935319901 CEST	443	49794	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.953893900 CEST	443	49802	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.954154968 CEST	49802	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.954165936 CEST	443	49802	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.955056906 CEST	443	49802	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.955121994 CEST	49802	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.959252119 CEST	443	49801	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.959438086 CEST	49801	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.959445000 CEST	443	49801	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.959827900 CEST	443	49801	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.960093021 CEST	49801	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.960195065 CEST	443	49801	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.967396975 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.967405081 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.967550039 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.969204903 CEST	443	49803	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.969475031 CEST	49803	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.969490051 CEST	443	49803	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.970350027 CEST	443	49803	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:23.970412970 CEST	49803	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:23.982559919 CEST	49794	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.012243986 CEST	443	49804	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.012515068 CEST	49804	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.012562037 CEST	443	49804	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.013778925 CEST	49801	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.016109943 CEST	443	49804	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.016187906 CEST	49804	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.638346910 CEST	49795	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.638464928 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.638519049 CEST	49797	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.638576031 CEST	443	49795	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.638607025 CEST	49798	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.638627052 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.638823032 CEST	443	49797	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.638845921 CEST	49800	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.638907909 CEST	443	49800	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.638909101 CEST	443	49798	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.639445066 CEST	49799	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.639636993 CEST	49802	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.639731884 CEST	443	49799	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.639786005 CEST	443	49802	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.639938116 CEST	49803	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.640065908 CEST	49804	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.640225887 CEST	443	49803	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.640347004 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.640372992 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.640400887 CEST	443	49804	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.682265043 CEST	49795	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.682266951 CEST	49797	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.682281971 CEST	49799	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.682286024 CEST	49803	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.682286024 CEST	49800	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.682291031 CEST	443	49795	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.682297945 CEST	443	49797	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.682315111 CEST	443	49803	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.682317972 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.682321072 CEST	443	49799	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.682326078 CEST	443	49800	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.682326078 CEST	49798	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.682328939 CEST	49804	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.682329893 CEST	49802	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.682332039 CEST	443	49798	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.682343960 CEST	443	49802	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.682373047 CEST	443	49804	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:24.728003025 CEST	49800	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.728002071 CEST	49797	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.728003025 CEST	49803	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.728013992 CEST	49802	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.728013992 CEST	49795	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.728014946 CEST	49799	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.728115082 CEST	49798	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:24.728126049 CEST	49804	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.845642090 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.845659018 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.845664978 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.845731974 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.845745087 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.845788002 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.845793962 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.845808983 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.845860004 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.848484993 CEST	49791	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.848498106 CEST	443	49791	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.849096060 CEST	49805	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.849119902 CEST	443	49805	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.849195957 CEST	49805	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.849939108 CEST	49805	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.849947929 CEST	443	49805	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.858619928 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.858676910 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.858736992 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.858767033 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.859221935 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.859285116 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.863065004 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.863082886 CEST	443	49790	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.863095999 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.863142014 CEST	49790	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.863504887 CEST	49806	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.863524914 CEST	443	49806	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.863642931 CEST	49806	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.864734888 CEST	49806	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.864749908 CEST	443	49806	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.901254892 CEST	443	49789	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.901643038 CEST	443	49789	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.901916981 CEST	49789	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.903110981 CEST	49789	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.903120041 CEST	443	49789	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.903579950 CEST	49807	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.903664112 CEST	443	49807	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.903770924 CEST	49807	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.904313087 CEST	443	49793	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.904623985 CEST	49807	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.904654980 CEST	443	49807	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.905239105 CEST	443	49793	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:27.905303001 CEST	49793	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.907778025 CEST	49793	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:27.907789946 CEST	443	49793	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.065707922 CEST	443	49794	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.066019058 CEST	443	49794	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.066243887 CEST	49794	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.066977024 CEST	49794	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.066996098 CEST	443	49794	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.576951981 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.576982975 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.576991081 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.577020884 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.577029943 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.577039957 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.577136040 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.577136040 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.577153921 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.577388048 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.583405972 CEST	49792	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.583415985 CEST	443	49792	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.702896118 CEST	443	49805	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.706924915 CEST	443	49806	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.706981897 CEST	49805	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.706995010 CEST	443	49805	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.707287073 CEST	443	49805	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.708717108 CEST	49805	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.708761930 CEST	443	49805	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.709362030 CEST	49806	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.709371090 CEST	443	49806	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.709526062 CEST	49805	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.709568024 CEST	443	49805	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.709836960 CEST	443	49806	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.711972952 CEST	49806	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.712049007 CEST	443	49806	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.714481115 CEST	49806	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.714509964 CEST	443	49806	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.745840073 CEST	443	49807	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.755335093 CEST	49807	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.755378962 CEST	443	49807	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.756696939 CEST	443	49807	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.757715940 CEST	49807	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.757716894 CEST	49807	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.757824898 CEST	443	49807	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.758291006 CEST	49807	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.758311033 CEST	443	49807	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.815447092 CEST	49807	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.882210970 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.882236004 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.882272005 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.882286072 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.882308006 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.882479906 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.882481098 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:28.882553101 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:28.937068939 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:29.047966003 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:29.047976017 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:29.048044920 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:29.048194885 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:29.048194885 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:29.050498962 CEST	49796	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:29.050539970 CEST	443	49796	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.759289980 CEST	443	49806	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.759517908 CEST	443	49806	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.759582043 CEST	49806	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.761625051 CEST	443	49805	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.761707067 CEST	443	49805	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.761749029 CEST	49805	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.767637968 CEST	443	49807	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.767694950 CEST	443	49807	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.767751932 CEST	49807	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.767816067 CEST	443	49807	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.768930912 CEST	443	49807	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.768996000 CEST	49807	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.853638887 CEST	49805	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.853667021 CEST	443	49805	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.855381966 CEST	49806	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.855391026 CEST	443	49806	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.856812954 CEST	49807	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.856848001 CEST	443	49807	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.857954979 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.857992887 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.858050108 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.858475924 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.858489990 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.859152079 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.859258890 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:32.859334946 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.859926939 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:32.859963894 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.546711922 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.546752930 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.546886921 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.551033974 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.551037073 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.551052094 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.551074982 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.551345110 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.551742077 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.551754951 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.672780037 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.672827005 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.672930002 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.679898977 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.679915905 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.679919958 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.679975033 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.680144072 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.680543900 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.680566072 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.687146902 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.695741892 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.730950117 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.730967045 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.734630108 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.734730959 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.736888885 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.745434999 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.745441914 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.746583939 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.746583939 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.746594906 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.746629953 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.746915102 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.761256933 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.761482000 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.775428057 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.775480986 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.799427986 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.799437046 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.847320080 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.933871031 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.933939934 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.933979034 CEST	49815	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.934029102 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.934065104 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.934096098 CEST	49815	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.935070038 CEST	49815	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.935086966 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:33.935214996 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:33.935236931 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.433016062 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.450872898 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.476468086 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.499917984 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.508160114 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.508193016 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.508585930 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.508600950 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.508650064 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.510216951 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.510461092 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.511394978 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.511468887 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.512706995 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.512811899 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.513283014 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.513312101 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.513736010 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.513767004 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.515798092 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.516801119 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.516815901 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.520106077 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.520174026 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.521619081 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.521770954 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.522139072 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.522149086 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.563041925 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.563110113 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.572807074 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.573144913 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.573167086 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.576673031 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.576731920 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.577435017 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.577610970 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.577773094 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.577781916 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.623692989 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.732803106 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.733109951 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.733122110 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.734210014 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.734554052 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.734725952 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.734729052 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.734833956 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.758430958 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.758737087 CEST	49815	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.758761883 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.759954929 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.760040998 CEST	49815	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.760445118 CEST	49815	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.760555029 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.761043072 CEST	49815	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.761050940 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:34.778150082 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:34.809420109 CEST	49815	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:35.334003925 CEST	49816	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:35.334110022 CEST	443	49816	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:35.334206104 CEST	49816	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:35.334477901 CEST	49816	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:35.334515095 CEST	443	49816	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:36.229888916 CEST	443	49816	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:36.230367899 CEST	49816	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:36.230415106 CEST	443	49816	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:36.230746031 CEST	443	49816	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:36.231214046 CEST	49816	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:36.231276989 CEST	443	49816	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:36.231518984 CEST	49816	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:36.231538057 CEST	443	49816	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:37.562625885 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:37.562669992 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:37.562745094 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:37.562777042 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:37.562794924 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:37.562832117 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:37.562868118 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:37.564130068 CEST	49808	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:37.564142942 CEST	443	49808	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:37.586770058 CEST	49817	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:37.586823940 CEST	443	49817	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:37.586899996 CEST	49817	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:37.587188005 CEST	49817	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:37.587198019 CEST	443	49817	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.421894073 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.421930075 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.421936989 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.421972990 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.421987057 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.421998978 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.422029972 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.422069073 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.422102928 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.446898937 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.446926117 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.446933031 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.446960926 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.447025061 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.447056055 CEST	49815	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.447056055 CEST	49815	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.447779894 CEST	49815	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.449723005 CEST	49815	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.449747086 CEST	443	49815	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.466866970 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.468043089 CEST	49818	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.468089104 CEST	443	49818	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.468327999 CEST	49818	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.468630075 CEST	49818	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.468642950 CEST	443	49818	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.484560013 CEST	443	49817	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.484997034 CEST	49817	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.485006094 CEST	443	49817	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.486511946 CEST	443	49817	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.486673117 CEST	49817	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.487060070 CEST	49817	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.487137079 CEST	443	49817	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.487304926 CEST	49817	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.487310886 CEST	443	49817	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.528101921 CEST	49817	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.609440088 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.609468937 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.609515905 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.609534025 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.609637976 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.609672070 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.609672070 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.609709024 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.609751940 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.609810114 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.609977961 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.610929012 CEST	49809	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.610963106 CEST	443	49809	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.611290932 CEST	49819	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.611335039 CEST	443	49819	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.612241030 CEST	49819	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.612756968 CEST	49819	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.612776041 CEST	443	49819	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.642435074 CEST	49820	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.642468929 CEST	443	49820	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.642682076 CEST	49820	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.642682076 CEST	49820	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.642720938 CEST	443	49820	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.650804996 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.702183962 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:38.815217018 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:38.859144926 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.040446043 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.040457964 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.040513992 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.040528059 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.040537119 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.040601015 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.040632963 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.040632963 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.040662050 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.107758999 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.107777119 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.107821941 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.107840061 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.107894897 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.178606987 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.178618908 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.178661108 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.178687096 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.178695917 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.178716898 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.178734064 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.178761959 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.178899050 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.178992987 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.179033995 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.179250002 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.179266930 CEST	443	49810	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.179277897 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.179330111 CEST	49810	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.179775000 CEST	49821	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.179821014 CEST	443	49821	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.180526018 CEST	49821	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.181579113 CEST	49821	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.181590080 CEST	443	49821	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.302933931 CEST	443	49818	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.303173065 CEST	49818	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.303199053 CEST	443	49818	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.304187059 CEST	443	49818	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.304246902 CEST	49818	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.304771900 CEST	49818	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.304831028 CEST	443	49818	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.304960012 CEST	49818	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.304969072 CEST	443	49818	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.356195927 CEST	49818	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.434469938 CEST	443	49820	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.435415983 CEST	49820	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.435425043 CEST	443	49820	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.436342001 CEST	443	49820	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.436813116 CEST	49820	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.437894106 CEST	49820	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.437894106 CEST	49820	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.437906027 CEST	443	49820	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.437956095 CEST	443	49820	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.456425905 CEST	443	49819	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.456871986 CEST	49819	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.456892967 CEST	443	49819	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.457499027 CEST	443	49819	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.457926989 CEST	49819	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.458005905 CEST	443	49819	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.458097935 CEST	49819	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.458126068 CEST	443	49819	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.482099056 CEST	49820	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.482106924 CEST	443	49820	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.497544050 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.497566938 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.497575045 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.497597933 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.497626066 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.497632027 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.497662067 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.497675896 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.497678041 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.497709990 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.497715950 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.497726917 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.497749090 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.497780085 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.497802973 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.500058889 CEST	49814	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.500071049 CEST	443	49814	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.504564047 CEST	49822	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.504595995 CEST	443	49822	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.504823923 CEST	49822	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.505060911 CEST	49822	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.505070925 CEST	443	49822	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.530616045 CEST	49820	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.559194088 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.559206963 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.559228897 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.559243917 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.559254885 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.559258938 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.559287071 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.559322119 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.559329033 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.559365034 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.560244083 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.560254097 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.560273886 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.560306072 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.560311079 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.560334921 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.560352087 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.560364962 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.560447931 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.560883045 CEST	49811	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.560898066 CEST	443	49811	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.564471006 CEST	49823	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.564471006 CEST	49824	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.564507961 CEST	443	49823	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.564524889 CEST	443	49824	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.566468000 CEST	49823	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.566468000 CEST	49824	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.566468000 CEST	49824	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.566468000 CEST	49823	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.566519022 CEST	443	49824	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.566526890 CEST	443	49823	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.607765913 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.607827902 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.607851028 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.607886076 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.607897997 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.607929945 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.607930899 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.607948065 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.607954025 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.607969999 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.608050108 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.609107018 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.609149933 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.609179020 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.609188080 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.609227896 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.609760046 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.609811068 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.609822989 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.609860897 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.609951019 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.610142946 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.612073898 CEST	49813	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.612085104 CEST	443	49813	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.615436077 CEST	49825	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.615473986 CEST	443	49825	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.615533113 CEST	49825	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.615783930 CEST	49825	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.615797043 CEST	443	49825	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.617086887 CEST	49826	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.617094994 CEST	443	49826	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.617161989 CEST	49826	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.617386103 CEST	49826	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.617393970 CEST	443	49826	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.664119959 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.664155006 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.664161921 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.664184093 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.664202929 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.664206028 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.664227009 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.664244890 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.664254904 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.704212904 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.920808077 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.920823097 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.920850992 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.920876980 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.920902014 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.920921087 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.920954943 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.994792938 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.994808912 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.994856119 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.994873047 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.994903088 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.994929075 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.996320963 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.996356010 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.996387005 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.996395111 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.996417999 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:39.996428013 CEST	443	49812	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:39.996478081 CEST	49812	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:40.003846884 CEST	443	49821	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:40.056687117 CEST	49821	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:40.221683979 CEST	443	49816	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:40.225650072 CEST	443	49816	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:40.225718021 CEST	49816	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:40.352627039 CEST	443	49822	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:40.393013954 CEST	49822	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:40.396424055 CEST	443	49823	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:40.412664890 CEST	443	49824	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:40.441325903 CEST	49823	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:40.457288980 CEST	49824	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:40.457925081 CEST	443	49826	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:40.483522892 CEST	443	49825	89.187.28.95	192.168.2.5
Sep 19, 2024 13:53:40.505543947 CEST	49826	443	192.168.2.5	89.187.28.95
Sep 19, 2024 13:53:40.537480116 CEST	49825	443	192.168.2.5	89.187.28.95

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 19, 2024 13:51:43.467205048 CEST	53	52969	1.1.1.1	192.168.2.5
Sep 19, 2024 13:51:43.509355068 CEST	53	50734	1.1.1.1	192.168.2.5
Sep 19, 2024 13:51:44.511833906 CEST	53	63293	1.1.1.1	192.168.2.5
Sep 19, 2024 13:51:45.397861004 CEST	57617	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:51:45.398031950 CEST	60829	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:51:45.499733925 CEST	53	60829	1.1.1.1	192.168.2.5
Sep 19, 2024 13:51:45.503679991 CEST	53	57617	1.1.1.1	192.168.2.5
Sep 19, 2024 13:51:46.353303909 CEST	59983	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:51:46.353481054 CEST	65505	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:51:46.369946003 CEST	53	59983	1.1.1.1	192.168.2.5
Sep 19, 2024 13:51:46.380369902 CEST	53	65505	1.1.1.1	192.168.2.5
Sep 19, 2024 13:51:47.631902933 CEST	59757	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:51:47.632807016 CEST	51041	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:51:47.638971090 CEST	53	59757	1.1.1.1	192.168.2.5
Sep 19, 2024 13:51:47.639655113 CEST	53	51041	1.1.1.1	192.168.2.5
Sep 19, 2024 13:51:59.178721905 CEST	51032	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:51:59.179142952 CEST	52674	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:51:59.197417021 CEST	53	51032	1.1.1.1	192.168.2.5
Sep 19, 2024 13:51:59.203943968 CEST	53	52674	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:01.696361065 CEST	53	52372	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:05.346671104 CEST	64357	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:05.346914053 CEST	61056	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:05.363044024 CEST	53	64357	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:05.373591900 CEST	53	61056	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:10.537982941 CEST	49925	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:10.538259029 CEST	60746	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:10.558979034 CEST	53	60746	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:10.564691067 CEST	53	49925	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:10.989011049 CEST	63028	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:10.989165068 CEST	52833	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:11.015324116 CEST	53	63028	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:11.027313948 CEST	53	52833	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:11.433079004 CEST	60378	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:11.433568954 CEST	59872	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:11.451572895 CEST	53	59872	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:11.459088087 CEST	53	60378	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:20.496248007 CEST	53	65519	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:23.848704100 CEST	62004	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:23.848891020 CEST	57270	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:23.862981081 CEST	53	57270	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:23.883208036 CEST	53	62004	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:35.833252907 CEST	52183	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:35.833554029 CEST	57323	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:36.078771114 CEST	53	57323	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:36.078818083 CEST	53	52183	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:40.438692093 CEST	60281	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:40.438853979 CEST	52690	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:40.448606968 CEST	53	60281	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:40.459070921 CEST	53	52690	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:43.207144022 CEST	53	57860	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:43.350353003 CEST	60503	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:43.350749016 CEST	63069	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:43.368735075 CEST	53	60503	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:43.376080036 CEST	53	63069	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:43.570935011 CEST	53	61230	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:47.080826044 CEST	50414	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:47.091018915 CEST	53	50414	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:47.107640028 CEST	64412	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:47.119961023 CEST	53	64412	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:51.560815096 CEST	62294	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:51.561006069 CEST	60594	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:51.578238964 CEST	53	62294	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:51.608119965 CEST	53	60594	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:55.749376059 CEST	49269	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:55.749695063 CEST	61096	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:52:55.773935080 CEST	53	49269	1.1.1.1	192.168.2.5
Sep 19, 2024 13:52:55.775182009 CEST	53	61096	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:00.993269920 CEST	62792	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:00.993671894 CEST	62387	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:01.004873037 CEST	53	62387	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:01.005012989 CEST	53	62792	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:11.586723089 CEST	53	62528	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.012300968 CEST	53411	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.013175011 CEST	59237	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.013616085 CEST	56369	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.014056921 CEST	62786	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.014581919 CEST	54303	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.018413067 CEST	56832	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.027472973 CEST	53	54303	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.029222012 CEST	53	59237	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.034992933 CEST	53	62786	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.041753054 CEST	51807	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.042105913 CEST	57923	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.044753075 CEST	53	53411	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.047652960 CEST	53	56832	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.062952995 CEST	53	56369	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.063431025 CEST	53	51807	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.068846941 CEST	52710	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.069298983 CEST	55904	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.082755089 CEST	62119	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.083148956 CEST	52422	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.086247921 CEST	53	52710	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.087321043 CEST	53	55904	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.090321064 CEST	58117	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.091095924 CEST	57897	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.095312119 CEST	53	52422	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.103081942 CEST	53	58117	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.104583025 CEST	53	57897	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.107590914 CEST	56498	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.108026981 CEST	61775	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.108197927 CEST	53	57923	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.114980936 CEST	53	62119	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.118500948 CEST	56674	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.118765116 CEST	59112	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:23.122836113 CEST	53	61775	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.129836082 CEST	53	59112	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.133615971 CEST	53	56674	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:23.141705990 CEST	53	56498	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:37.573056936 CEST	54875	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:37.573708057 CEST	54772	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:37.584865093 CEST	53	54875	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:37.584887981 CEST	53	54772	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:38.455530882 CEST	56986	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:38.455530882 CEST	54520	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:38.467025995 CEST	53	56986	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:38.467598915 CEST	53	54520	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:38.619066000 CEST	50438	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:38.619066000 CEST	57563	53	192.168.2.5	1.1.1.1
Sep 19, 2024 13:53:38.630743980 CEST	53	57563	1.1.1.1	192.168.2.5
Sep 19, 2024 13:53:38.642028093 CEST	53	50438	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 19, 2024 13:51:46.380446911 CEST	192.168.2.5	1.1.1.1	c22e	(Port unreachable)	Destination Unreachable
Sep 19, 2024 13:52:51.608172894 CEST	192.168.2.5	1.1.1.1	c234	(Port unreachable)	Destination Unreachable
Sep 19, 2024 13:53:23.047744036 CEST	192.168.2.5	1.1.1.1	c234	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 19, 2024 13:51:45.397861004 CEST	192.168.2.5	1.1.1.1	0x418e	Standard query (0)	prosayverso.com.ar	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:51:45.398031950 CEST	192.168.2.5	1.1.1.1	0x548d	Standard query (0)	prosayverso.com.ar	65	IN (0x0001)	false
Sep 19, 2024 13:51:46.353303909 CEST	192.168.2.5	1.1.1.1	0xf66f	Standard query (0)	adobe-esign.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:51:46.353481054 CEST	192.168.2.5	1.1.1.1	0x93d1	Standard query (0)	adobe-esign.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:51:47.631902933 CEST	192.168.2.5	1.1.1.1	0x514e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:51:47.632807016 CEST	192.168.2.5	1.1.1.1	0xc1de	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 19, 2024 13:51:59.178721905 CEST	192.168.2.5	1.1.1.1	0xf9e9	Standard query (0)	62d417d4-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:51:59.179142952 CEST	192.168.2.5	1.1.1.1	0x91c6	Standard query (0)	62d417d4-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:52:05.346671104 CEST	192.168.2.5	1.1.1.1	0xf357	Standard query (0)	62d417d4-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:05.346914053 CEST	192.168.2.5	1.1.1.1	0x8b20	Standard query (0)	62d417d4-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:52:10.537982941 CEST	192.168.2.5	1.1.1.1	0x691	Standard query (0)	bef1f851-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:10.538259029 CEST	192.168.2.5	1.1.1.1	0x7f39	Standard query (0)	bef1f851-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:52:10.989011049 CEST	192.168.2.5	1.1.1.1	0x6455	Standard query (0)	253ba5ef-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:10.989165068 CEST	192.168.2.5	1.1.1.1	0xd949	Standard query (0)	253ba5ef-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:52:11.433079004 CEST	192.168.2.5	1.1.1.1	0xed0e	Standard query (0)	l1ve.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:11.433568954 CEST	192.168.2.5	1.1.1.1	0x64fd	Standard query (0)	l1ve.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:52:23.848704100 CEST	192.168.2.5	1.1.1.1	0x91d0	Standard query (0)	3008d61a-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:23.848891020 CEST	192.168.2.5	1.1.1.1	0x680b	Standard query (0)	3008d61a-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:52:35.833252907 CEST	192.168.2.5	1.1.1.1	0x6691	Standard query (0)	778ac986-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:35.833554029 CEST	192.168.2.5	1.1.1.1	0x56af	Standard query (0)	778ac986-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:52:40.438692093 CEST	192.168.2.5	1.1.1.1	0x69dd	Standard query (0)	43936c8e-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:40.438853979 CEST	192.168.2.5	1.1.1.1	0xab86	Standard query (0)	43936c8e-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:52:43.350353003 CEST	192.168.2.5	1.1.1.1	0x2f33	Standard query (0)	adobe-esign.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:43.350749016 CEST	192.168.2.5	1.1.1.1	0x3abd	Standard query (0)	adobe-esign.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:52:47.080826044 CEST	192.168.2.5	1.1.1.1	0xf55d	Standard query (0)	adobe-esign.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:47.107640028 CEST	192.168.2.5	1.1.1.1	0x5a81	Standard query (0)	adobe-esign.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:52:51.560815096 CEST	192.168.2.5	1.1.1.1	0xba2b	Standard query (0)	43936c8e-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:51.561006069 CEST	192.168.2.5	1.1.1.1	0x461d	Standard query (0)	43936c8e-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:52:55.749376059 CEST	192.168.2.5	1.1.1.1	0xe051	Standard query (0)	985d1866-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:55.749695063 CEST	192.168.2.5	1.1.1.1	0xe591	Standard query (0)	985d1866-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:00.993269920 CEST	192.168.2.5	1.1.1.1	0xfdcb	Standard query (0)	cab8c6cd-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:00.993671894 CEST	192.168.2.5	1.1.1.1	0x6cdc	Standard query (0)	cab8c6cd-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:23.012300968 CEST	192.168.2.5	1.1.1.1	0xcf6e	Standard query (0)	wwwms.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.013175011 CEST	192.168.2.5	1.1.1.1	0xc5d1	Standard query (0)	wwwms.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:23.013616085 CEST	192.168.2.5	1.1.1.1	0xcc6e	Standard query (0)	7085cdbe-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.014056921 CEST	192.168.2.5	1.1.1.1	0xd81a	Standard query (0)	7085cdbe-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:23.014581919 CEST	192.168.2.5	1.1.1.1	0x98f9	Standard query (0)	2b6dbd78-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.018413067 CEST	192.168.2.5	1.1.1.1	0xbfe5	Standard query (0)	2b6dbd78-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:23.041753054 CEST	192.168.2.5	1.1.1.1	0xfb9a	Standard query (0)	f1a02cab-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.042105913 CEST	192.168.2.5	1.1.1.1	0x29e5	Standard query (0)	f1a02cab-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:23.068846941 CEST	192.168.2.5	1.1.1.1	0xd84c	Standard query (0)	3eed3fe7-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.069298983 CEST	192.168.2.5	1.1.1.1	0x9834	Standard query (0)	3eed3fe7-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:23.082755089 CEST	192.168.2.5	1.1.1.1	0xf344	Standard query (0)	f3885db7-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.083148956 CEST	192.168.2.5	1.1.1.1	0xc7a9	Standard query (0)	f3885db7-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:23.090321064 CEST	192.168.2.5	1.1.1.1	0x2343	Standard query (0)	62d417d4-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.091095924 CEST	192.168.2.5	1.1.1.1	0xd5e4	Standard query (0)	62d417d4-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:23.107590914 CEST	192.168.2.5	1.1.1.1	0xc51f	Standard query (0)	baa50082-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.108026981 CEST	192.168.2.5	1.1.1.1	0x7ee	Standard query (0)	baa50082-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:23.118500948 CEST	192.168.2.5	1.1.1.1	0xfb15	Standard query (0)	45004a77-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.118765116 CEST	192.168.2.5	1.1.1.1	0x98c	Standard query (0)	45004a77-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:37.573056936 CEST	192.168.2.5	1.1.1.1	0x285	Standard query (0)	7085cdbe-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:37.573708057 CEST	192.168.2.5	1.1.1.1	0xd6e6	Standard query (0)	7085cdbe-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:38.455530882 CEST	192.168.2.5	1.1.1.1	0x896f	Standard query (0)	baa50082-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:38.455530882 CEST	192.168.2.5	1.1.1.1	0xe4d	Standard query (0)	baa50082-d43c7a7f.carner.com.co	65	IN (0x0001)	false
Sep 19, 2024 13:53:38.619066000 CEST	192.168.2.5	1.1.1.1	0xa939	Standard query (0)	cab8c6cd-d43c7a7f.carner.com.co	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:38.619066000 CEST	192.168.2.5	1.1.1.1	0x19a9	Standard query (0)	cab8c6cd-d43c7a7f.carner.com.co	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 19, 2024 13:51:45.503679991 CEST	1.1.1.1	192.168.2.5	0x418e	No error (0)	prosayverso.com.ar		144.217.158.133	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:51:46.369946003 CEST	1.1.1.1	192.168.2.5	0xf66f	No error (0)	adobe-esign.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:51:47.638971090 CEST	1.1.1.1	192.168.2.5	0x514e	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:51:47.639655113 CEST	1.1.1.1	192.168.2.5	0xc1de	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 19, 2024 13:51:56.962167978 CEST	1.1.1.1	192.168.2.5	0x9085	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 19, 2024 13:51:56.962167978 CEST	1.1.1.1	192.168.2.5	0x9085	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:51:59.197417021 CEST	1.1.1.1	192.168.2.5	0xf9e9	No error (0)	62d417d4-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:05.363044024 CEST	1.1.1.1	192.168.2.5	0xf357	No error (0)	62d417d4-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:10.564691067 CEST	1.1.1.1	192.168.2.5	0x691	No error (0)	bef1f851-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:10.642975092 CEST	1.1.1.1	192.168.2.5	0xeaa8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 19, 2024 13:52:10.642975092 CEST	1.1.1.1	192.168.2.5	0xeaa8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:11.015324116 CEST	1.1.1.1	192.168.2.5	0x6455	No error (0)	253ba5ef-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:11.459088087 CEST	1.1.1.1	192.168.2.5	0xed0e	No error (0)	l1ve.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:23.883208036 CEST	1.1.1.1	192.168.2.5	0x91d0	No error (0)	3008d61a-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:35.699217081 CEST	1.1.1.1	192.168.2.5	0xe296	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 19, 2024 13:52:35.699217081 CEST	1.1.1.1	192.168.2.5	0xe296	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:36.078818083 CEST	1.1.1.1	192.168.2.5	0x6691	No error (0)	778ac986-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:40.448606968 CEST	1.1.1.1	192.168.2.5	0x69dd	No error (0)	43936c8e-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:43.368735075 CEST	1.1.1.1	192.168.2.5	0x2f33	No error (0)	adobe-esign.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:47.091018915 CEST	1.1.1.1	192.168.2.5	0xf55d	No error (0)	adobe-esign.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:51.578238964 CEST	1.1.1.1	192.168.2.5	0xba2b	No error (0)	43936c8e-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:55.773935080 CEST	1.1.1.1	192.168.2.5	0xe051	No error (0)	985d1866-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:52:56.368474007 CEST	1.1.1.1	192.168.2.5	0x1ae8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 19, 2024 13:52:56.368474007 CEST	1.1.1.1	192.168.2.5	0x1ae8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:01.005012989 CEST	1.1.1.1	192.168.2.5	0xfdcb	No error (0)	cab8c6cd-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.027472973 CEST	1.1.1.1	192.168.2.5	0x98f9	No error (0)	2b6dbd78-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.044753075 CEST	1.1.1.1	192.168.2.5	0xcf6e	No error (0)	wwwms.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.062952995 CEST	1.1.1.1	192.168.2.5	0xcc6e	No error (0)	7085cdbe-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.063431025 CEST	1.1.1.1	192.168.2.5	0xfb9a	No error (0)	f1a02cab-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.086247921 CEST	1.1.1.1	192.168.2.5	0xd84c	No error (0)	3eed3fe7-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.103081942 CEST	1.1.1.1	192.168.2.5	0x2343	No error (0)	62d417d4-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.114980936 CEST	1.1.1.1	192.168.2.5	0xf344	No error (0)	f3885db7-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.133615971 CEST	1.1.1.1	192.168.2.5	0xfb15	No error (0)	45004a77-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:23.141705990 CEST	1.1.1.1	192.168.2.5	0xc51f	No error (0)	baa50082-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:37.584865093 CEST	1.1.1.1	192.168.2.5	0x285	No error (0)	7085cdbe-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:38.467025995 CEST	1.1.1.1	192.168.2.5	0x896f	No error (0)	baa50082-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false
Sep 19, 2024 13:53:38.642028093 CEST	1.1.1.1	192.168.2.5	0xa939	No error (0)	cab8c6cd-d43c7a7f.carner.com.co		89.187.28.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

prosayverso.com.ar

adobe-esign.carner.com.co

fs.microsoft.com

https:

62d417d4-d43c7a7f.carner.com.co

l1ve.carner.com.co

3008d61a-d43c7a7f.carner.com.co

778ac986-d43c7a7f.carner.com.co

43936c8e-d43c7a7f.carner.com.co

cab8c6cd-d43c7a7f.carner.com.co

wwwms.carner.com.co

7085cdbe-d43c7a7f.carner.com.co

baa50082-d43c7a7f.carner.com.co

slscr.update.microsoft.com

bef1f851-d43c7a7f.carner.com.co

985d1866-d43c7a7f.carner.com.co

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	144.217.158.133	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:51:46 UTC	702	OUT	GET /BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr HTTP/1.1 Host: prosayverso.com.ar Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 11:51:46 UTC	407	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 19 Sep 2024 11:51:46 GMT Server: Apache X-Powered-By: PHP/8.2.23 Location: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=#/common/authorize?document=0.49033626750593-0ff1-0.21877839333321&auth=10.71958143204431-0.96895770587444 Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:51:47 UTC	732	OUT	GET /?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI= HTTP/1.1 Host: adobe-esign.carner.com.co Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 11:51:49 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:51:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-09-19 11:51:49 UTC	7100	IN	Data Raw: 31 62 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 30 4c 35 28 4c 2c 6e 29 7b 76 61 72 20 42 3d 61 30 4c 34 28 29 3b 72 65 74 75 72 6e 20 61 30 4c 35 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 79 29 7b 75 3d 75 2d 30 78 64 39 3b 76 61 72 20 58 3d 42 5b 75 5d 3b 72 65 74 75 72 6e 20 58 3b 7d 2c 61 30 4c 35 28 4c 2c 6e 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 4c 2c 6e 29 7b 76 61 72 20 75 49 3d 61 30 4c 35 2c 42 3d 4c 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 75 3d 70 61 72 73 65 49 6e 74 28 75 49 28 30 78 31 61 Data Ascii: 1bb4<!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> function a0L5(L,n){var B=a0L4();return a0L5=function(u,y){u=u-0xd9;var X=B[u];return X;},a0L5(L,n);}(function(L,n){var uI=a0L5,B=L();while(!![]){try{var u=parseInt(uI(0x1a
2024-09-19 11:51:49 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a 6e 21 30 78 31 3b 7d 63 61 74 63 68 28 42 5a 29 7b 72 65 74 75 72 6e 21 30 78 31 3b 7d 76 61 72 20 42 71 3d 21 30 78 31 3b 74 72 79 7b 76 61 72 20 42 57 3d 7b 7d 3b 42 57 5b 42 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 79 39 3d 61 30 4c 35 3b 69 66 28 79 39 28 30 78 34 64 39 29 21 3d 3d 79 39 28 30 78 33 36 65 29 29 72 65 74 75 72 6e 7b 27 6e 65 78 74 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 27 64 6f 6e 65 27 3a 42 71 3d 21 30 78 30 7d 3b 7d 7d 3b 65 6c 73 65 7b 76 61 72 20 42 68 3d 4c 73 28 30 78 31 36 37 62 29 2c 42 59 3d 4c 57 28 30 78 32 35 31 39 29 2c 42 53 3d 4c 66 28 30 78 31 33 36 31 29 2c 42 49 3d 42 68 28 30 78 31 36 63 62 29 3b 4c 4b 5b 79 39 28 30 78 34 38 61 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 3ffan!0x1;}catch(BZ){return!0x1;}var Bq=!0x1;try{var BW={};BW[Bi]=function(){var y9=a0L5;if(y9(0x4d9)!==y9(0x36e))return{'next':function(){return{'done':Bq=!0x0};}};else{var Bh=Ls(0x167b),BY=LW(0x2519),BS=Lf(0x1361),BI=Bh(0x16cb);LK[y9(0x48a)]=function(
2024-09-19 11:51:49 UTC	16384	IN	Data Raw: 0d 0a 34 30 30 30 0d 0a 6c 28 30 78 31 61 37 37 29 2c 42 41 3d 42 69 28 27 69 74 65 72 61 74 6f 72 27 29 2c 42 6f 3d 41 72 72 61 79 5b 58 6a 28 30 78 32 62 64 29 5d 3b 42 4f 5b 58 6a 28 30 78 34 38 61 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 42 6a 29 7b 76 61 72 20 58 43 3d 58 6a 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 78 30 21 3d 3d 42 6a 26 26 28 42 4a 5b 58 43 28 30 78 33 37 36 29 5d 3d 3d 3d 42 6a 7c 7c 42 6f 5b 42 41 5d 3d 3d 3d 42 6a 29 3b 7d 3b 7d 2c 30 78 31 33 33 32 3a 66 75 6e 63 74 69 6f 6e 28 42 4f 2c 42 4b 2c 42 6c 29 7b 76 61 72 20 58 62 3d 61 30 4c 35 2c 42 69 3d 42 6c 28 30 78 34 66 65 29 3b 42 4f 5b 27 65 78 70 6f 72 74 73 27 5d 3d 41 72 72 61 79 5b 58 62 28 30 78 32 38 64 29 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 42 4a 29 7b 76 61 72 20 58 4e Data Ascii: 4000l(0x1a77),BA=Bi('iterator'),Bo=Array[Xj(0x2bd)];BO[Xj(0x48a)]=function(Bj){var XC=Xj;return void 0x0!==Bj&&(BJ[XC(0x376)]===Bj\|\|Bo[BA]===Bj);};},0x1332:function(BO,BK,Bl){var Xb=a0L5,Bi=Bl(0x4fe);BO['exports']=Array[Xb(0x28d)]\|\|function(BJ){var XN
2024-09-19 11:51:49 UTC	10	IN	Data Raw: 4c 51 2c 4c 44 29 29 2c 0d 0a Data Ascii: LQ,LD)),
2024-09-19 11:51:49 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 4c 70 5b 52 68 28 30 78 32 35 62 29 5d 3d 3d 3d 4c 4f 29 72 65 74 75 72 6e 20 4c 6b 3b 66 6f 72 28 76 61 72 20 42 68 3d 30 78 31 3b 42 68 3c 3d 4c 6a 5b 27 6c 65 6e 67 74 68 27 5d 2d 30 78 31 3b 42 68 2b 2b 29 69 66 28 42 68 28 4c 64 2c 4c 67 5b 42 68 5d 29 2c 4c 6f 5b 27 6c 65 6e 67 74 68 27 5d 3d 3d 3d 42 5a 29 72 65 74 75 72 6e 20 4c 59 3b 4c 6d 3d 4c 45 3d 4c 78 3b 7d 65 6c 73 65 7b 76 61 72 20 42 57 3d 42 41 28 42 71 29 3b 69 66 28 42 69 28 42 57 2c 42 43 29 29 72 65 74 75 72 6e 20 42 57 5b 42 43 5d 3b 76 61 72 20 42 5a 3d 42 57 5b 27 63 6f 6e 73 74 72 75 63 74 6f 72 27 5d 3b 72 65 74 75 72 6e 20 42 4a 28 42 5a 29 26 26 42 57 20 69 6e 73 74 61 6e 63 65 6f 66 20 42 5a 3f 42 5a 5b 52 68 28 30 78 32 62 64 29 5d 3a 42 57 20 69 6e 73 74 Data Ascii: 4000Lp[Rh(0x25b)]===LO)return Lk;for(var Bh=0x1;Bh<=Lj['length']-0x1;Bh++)if(Bh(Ld,Lg[Bh]),Lo['length']===BZ)return LY;Lm=LE=Lx;}else{var BW=BA(Bq);if(Bi(BW,BC))return BW[BC];var BZ=BW['constructor'];return BJ(BZ)&&BW instanceof BZ?BZ[Rh(0x2bd)]:BW inst
2024-09-19 11:51:49 UTC	8	IN	Data Raw: 29 2b 27 29 5f 27 0d 0a Data Ascii: )+')_'
2024-09-19 11:51:49 UTC	9306	IN	Data Raw: 32 34 35 32 0d 0a 2b 42 6f 28 2b 2b 42 4a 2b 42 41 2c 30 78 32 34 29 3b 7d 3b 7d 2c 30 78 31 33 39 65 3a 66 75 6e 63 74 69 6f 6e 28 42 4f 2c 42 4b 2c 42 6c 29 7b 76 61 72 20 72 34 3d 61 30 4c 35 2c 42 69 3d 42 6c 28 30 78 31 37 38 64 29 3b 42 4f 5b 72 34 28 30 78 34 38 61 29 5d 3d 42 69 26 26 21 53 79 6d 62 6f 6c 5b 72 34 28 30 78 32 32 30 29 5d 26 26 72 34 28 30 78 33 31 37 29 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 5b 27 69 74 65 72 61 74 6f 72 27 5d 3b 7d 2c 30 78 66 33 38 3a 66 75 6e 63 74 69 6f 6e 28 42 4f 2c 42 4b 2c 42 6c 29 7b 76 61 72 20 42 69 3d 42 6c 28 30 78 31 37 65 29 2c 42 4a 3d 42 6c 28 30 78 32 31 31 39 29 3b 42 4f 5b 27 65 78 70 6f 72 74 73 27 5d 3d 42 69 26 26 42 4a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 35 3d 61 30 4c Data Ascii: 2452+Bo(++BJ+BA,0x24);};},0x139e:function(BO,BK,Bl){var r4=a0L5,Bi=Bl(0x178d);BO[r4(0x48a)]=Bi&&!Symbol[r4(0x220)]&&r4(0x317)==typeof Symbol['iterator'];},0xf38:function(BO,BK,Bl){var Bi=Bl(0x17e),BJ=Bl(0x2119);BO['exports']=Bi&&BJ(function(){var r5=a0L
2024-09-19 11:51:49 UTC	16384	IN	Data Raw: 33 66 66 39 0d 0a 3d 3d 3d 42 78 3f 42 65 3a 42 78 2b 42 57 28 27 30 27 2c 30 78 37 2d 42 65 5b 72 51 28 30 78 32 35 62 29 5d 29 2b 42 65 3b 7d 72 65 74 75 72 6e 20 42 78 3b 7d 65 6c 73 65 7b 69 66 28 72 51 28 30 78 32 62 61 29 3d 3d 3d 4c 73 28 4c 57 29 29 74 68 72 6f 77 20 6e 65 77 20 4c 66 28 72 51 28 30 78 32 38 35 29 29 3b 72 65 74 75 72 6e 20 42 65 28 42 59 29 3b 7d 7d 3b 42 69 28 7b 27 74 61 72 67 65 74 27 3a 72 49 28 30 78 65 62 29 2c 27 70 72 6f 74 6f 27 3a 21 30 78 30 2c 27 66 6f 72 63 65 64 27 3a 42 43 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 55 3d 72 49 3b 72 65 74 75 72 6e 20 72 55 28 30 78 34 30 31 29 21 3d 3d 42 47 28 30 2e 30 30 30 30 38 2c 30 78 33 29 7c 7c 27 31 27 21 3d 3d 42 47 28 30 2e 39 2c 30 78 30 29 7c 7c 72 55 28 30 78 Data Ascii: 3ff9===Bx?Be:Bx+BW('0',0x7-Be[rQ(0x25b)])+Be;}return Bx;}else{if(rQ(0x2ba)===Ls(LW))throw new Lf(rQ(0x285));return Be(BY);}};Bi({'target':rI(0xeb),'proto':!0x0,'forced':BC(function(){var rU=rI;return rU(0x401)!==BG(0.00008,0x3)\|\|'1'!==BG(0.9,0x0)\|\|rU(0x
2024-09-19 11:51:49 UTC	16384	IN	Data Raw: 0a 34 30 30 30 0d 0a 65 74 75 72 6e 7b 27 64 6f 6e 65 27 3a 75 37 3d 21 30 78 30 7d 3b 7d 7d 3b 7d 2c 75 33 28 75 47 29 3b 7d 65 6c 73 65 7b 76 61 72 20 75 71 3d 42 68 28 75 4e 29 2c 75 57 3d 42 41 28 75 79 2c 74 68 69 73 2c 75 71 29 3b 72 65 74 75 72 6e 21 28 74 68 69 73 3d 3d 3d 75 34 26 26 42 71 28 75 52 2c 75 71 29 26 26 21 42 71 28 75 7a 2c 75 71 29 29 26 26 28 21 28 75 57 7c 7c 21 42 71 28 74 68 69 73 2c 75 71 29 7c 7c 21 42 71 28 75 52 2c 75 71 29 7c 7c 42 71 28 74 68 69 73 2c 42 61 29 26 26 74 68 69 73 5b 42 61 5d 5b 75 71 5d 29 7c 7c 75 57 29 3b 7d 7d 2c 75 6f 3d 66 75 6e 63 74 69 6f 6e 28 75 4e 2c 75 71 29 7b 76 61 72 20 6d 5a 3d 6d 6a 2c 75 57 3d 42 47 28 75 4e 29 2c 75 5a 3d 42 68 28 75 71 29 3b 69 66 28 75 57 21 3d 3d 75 34 7c 7c 21 42 71 28 Data Ascii: 4000eturn{'done':u7=!0x0};}};},u3(uG);}else{var uq=Bh(uN),uW=BA(uy,this,uq);return!(this===u4&&Bq(uR,uq)&&!Bq(uz,uq))&&(!(uW\|\|!Bq(this,uq)\|\|!Bq(uR,uq)\|\|Bq(this,Ba)&&this[Ba][uq])\|\|uW);}},uo=function(uN,uq){var mZ=mj,uW=BG(uN),uZ=Bh(uq);if(uW!==u4\|\|!Bq(
2024-09-19 11:51:49 UTC	9	IN	Data Raw: 30 30 27 2b 28 42 43 0d 0a Data Ascii: 00'+(BC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:51:49 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-19 11:51:49 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=190476 Date: Thu, 19 Sep 2024 11:51:49 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:51:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-19 11:51:50 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=190479 Date: Thu, 19 Sep 2024 11:51:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-19 11:51:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:51:52 UTC	969	OUT	POST /?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI= HTTP/1.1 Host: adobe-esign.carner.com.co Connection: keep-alive Content-Length: 5041 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://adobe-esign.carner.com.co Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 11:51:52 UTC	5041	OUT	Data Raw: 39 79 71 33 66 7a 6a 79 62 7a 3d 25 35 42 25 35 42 25 32 32 37 32 36 35 37 31 32 35 33 33 34 34 32 35 33 33 34 25 32 32 25 32 43 25 32 32 31 36 63 36 62 37 65 32 35 33 37 34 34 37 37 36 39 25 32 32 25 32 43 25 32 32 33 33 33 37 32 35 33 33 34 33 32 35 33 37 34 33 32 25 32 32 25 32 43 25 32 32 35 33 37 34 34 37 36 33 36 32 35 33 37 34 33 32 35 25 32 32 25 32 43 25 32 32 33 33 34 34 36 64 33 31 36 38 32 35 33 37 34 36 32 25 32 32 25 32 43 25 32 32 35 33 33 34 33 33 38 33 31 33 39 33 33 33 39 33 30 25 32 32 25 32 43 25 32 32 33 38 33 38 33 37 33 39 33 36 33 33 33 38 33 30 33 25 32 32 25 32 43 25 32 32 32 33 36 33 32 25 32 32 25 35 44 25 32 43 25 32 32 38 31 39 33 39 30 38 38 37 39 25 32 32 25 32 43 25 32 32 39 37 31 37 34 31 39 25 32 32 25 32 43 35 25 35 44 Data Ascii: 9yq3fzjybz=%5B%5B%2272657125334425334%22%2C%2216c6b7e2537447769%22%2C%2233372533432537432%22%2C%2253744763625374325%22%2C%2233446d31682537462%22%2C%2253343383139333930%22%2C%2238383739363338303%22%2C%2223632%22%5D%2C%228193908879%22%2C%229717419%22%2C5%5D
2024-09-19 11:51:53 UTC	457	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 19 Sep 2024 11:51:53 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI= set-cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; Domain=carner.com.co; HttpOnly; Path=/; SameSite=None; Secure
2024-09-19 11:51:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49717	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:51:53 UTC	973	OUT	GET /?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI= HTTP/1.1 Host: adobe-esign.carner.com.co Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:51:58 UTC	779	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:51:58 GMT Content-Type: text/html; charset=utf-8 Content-Length: 57887 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: de592e1d-1d82-449f-9eca-140cd71d1500 x-ms-ests-server: 2.1.18947.4 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:51:58 UTC	15600	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b4 7d f9 5f db 48 b2 f8 ef f3 57 80 df 7c b1 b4 08 63 f9 e0 b0 a3 f1 72 98 0c 21 c1 84 2b 38 1e bf 3c 59 92 b1 82 2d 39 92 6c 20 e0 ff fd 5b 55 7d a8 e5 83 cc db dd b7 9f 9d 20 b5 fa a8 ae ae ae bb db ef d6 8f 5b 47 d7 ed 8b e6 da 20 19 0d ff f8 ed 1d fb b3 f6 6e e0 d9 2e fc 5d 7b 97 f8 c9 d0 c3 a7 b5 4b cf f5 23 cf 49 fc e0 1e 3f 6c cb 2f ef 46 5e 62 af 39 61 90 78 41 62 e5 12 ef 29 d9 c6 7e ea 6b ce c0 8e 62 2f b1 26 49 7f 6b 2f 07 63 24 e3 2d ef c7 c4 9f 5a b9 23 56 7d eb fa 79 ec e5 b6 97 74 73 da b4 3c f7 de cb b6 ba db ba 39 d8 3a 0a 47 63 3b f1 7b c3 e5 0d 1f 7d 37 19 58 ae 37 f5 1d 6f 8b 5e 8c 35 3f f0 13 df 1e 6e c5 8e 3d f4 2c b3 50 34 d6 46 f6 93 3f 9a 8c 78 51 09 8b 26 b1 17 d1 bb 0d 7d 5b cf 5e 9c 5b 0b ec 91 67 Data Ascii: }_HW\|cr!+8<Y-9l [U} [G n.]{K#I?l/F^b9axAb)~kb/&Ik/c$-Z#V}yts<9:Gc;{}7X7o^5?n=,P4F?xQ&}[^[g
2024-09-19 11:51:58 UTC	16384	IN	Data Raw: 35 a8 c3 d5 e1 1d 73 35 75 26 f3 f6 88 96 17 29 29 79 a2 28 da d4 c2 ef 04 44 85 bc 0e c8 e9 25 8f de c8 fc 62 72 ea 0b 13 74 b5 f5 75 50 d6 37 11 00 6e 18 66 ea d2 d8 fb 29 4f de c7 45 f0 1c e2 c9 f8 8c ce 29 36 78 91 79 78 d4 1c 52 54 fa f6 05 7b 20 0d 09 30 db 3a ee b4 6e 57 1d 05 02 28 98 c5 34 48 b0 1d 98 56 5d 54 84 d5 54 2a 62 3c f0 ad 3e 93 6e 23 54 6f 66 b8 37 92 65 7b c3 40 45 83 e6 d1 b2 06 49 9d 07 36 06 2d a6 44 d1 4c 5a 64 19 16 19 b7 5e 6f 4d 51 13 b8 d0 15 66 a9 90 ea a1 95 5c d7 93 f3 0e 35 9a 1f ec 0e a4 22 1f 0c 4c ed 16 a9 3b 77 ef a0 4c d1 00 0f b5 41 9b b6 5a 2f fd 7d 1c d0 66 50 07 e4 d3 39 14 38 c9 9f bf 9f 3a b7 79 01 a2 59 ec e9 8d 24 d2 12 d7 48 bc f9 7b f3 07 03 1c 50 e0 72 dc 19 0c 52 cc 3f 23 a3 02 85 a5 c6 26 43 f3 b0 e7 28 Data Ascii: 5s5u&))y(D%brtuP7nf)OE)6xyxRT{ 0:nW(4HV]TT*b<>n#Tof7e{@EI6-DLZd^oMQf\5"L;wLAZ/}fP98:yY$H{PrR?#&C(
2024-09-19 11:51:58 UTC	10657	IN	Data Raw: 3f dd de 3a 14 c6 c9 f5 46 f0 66 84 b9 c5 93 27 f4 45 e6 d2 a1 2f c0 ed 59 0d 78 d0 b8 7e 6d 15 8b 17 98 17 e6 e9 05 04 9f 9b 55 cd d1 a1 59 f9 0c 99 51 78 f4 36 28 25 03 03 22 4b e3 da 70 4c ec 96 ea 2c fd 6b b3 f4 b3 29 d2 1c c9 39 af 65 c7 92 4b 1e 8c 6d d5 ac 13 97 83 3e 93 cb d1 cc 41 3a 66 3d d4 0b b4 5d 0c fc d3 b4 c8 2a 6a d9 9b 1e a4 cc 7e dc e9 d1 86 b8 6d 9a 5f c4 51 4e 39 a1 c9 a0 60 8a 49 a5 b6 4c 5d 58 0a db 5c ad 69 5a 46 37 f7 66 e8 ca 9b 21 cd d0 30 00 f9 a3 c7 23 0d 5c 8a 34 f5 a6 41 9c 43 b6 07 4e 2e eb 9d d1 a6 f5 0d 21 1f 5a eb 1c 22 74 ec 9b 3b af d7 ae 6e 54 7b 87 6c 13 0a 2c 9d c8 dc 46 85 83 ee f8 e8 72 c0 d6 49 5c e7 60 cd 5d 96 d6 d1 6c e5 82 43 e4 2c 79 24 5f 10 fe 20 02 65 27 0f 10 13 81 88 d0 33 b3 fe a2 1d 67 a5 92 33 88 25 Data Ascii: ?:Ff'E/Yx~mUYQx6(%"KpL,k)9eKm>A:f=]*j~m_QN9`IL]X\iZF7f!0#\4ACN.!Z"t;nT{l,FrI\`]lC,y$_ e'3g3%
2024-09-19 11:51:58 UTC	15246	IN	Data Raw: 23 3b b2 ba 0d 68 9f 56 2e 71 7c 5a 51 c0 b8 1e a8 e0 e0 7a 98 d1 d9 1d db d1 d9 1d 5b c4 0f 27 67 f1 0d e7 2c e6 4c 84 fb 9c b2 98 02 d5 90 a4 98 dc 54 18 6a f8 80 33 16 97 36 87 88 67 4b 38 49 2e 41 10 93 1b f6 47 0a 70 c3 11 3f bd 99 52 ce ea 9c fa ae cf f2 9d 7e 3e e7 a8 58 88 4a 32 e0 63 1a 70 18 b9 6f c8 13 52 2d c5 7d fa 6b 90 5d d9 95 38 2a 03 94 f8 8c 1e 25 e7 49 c2 07 ad e0 23 9d e9 8d 4a 04 df a9 64 1a f6 9d 45 fe b8 32 b2 6e 54 0a fc ca 02 de 52 96 b7 58 aa 1a 95 9d 48 ea ce 75 be cd 4e c9 94 93 e7 65 99 f0 fa ef d9 06 e8 c8 81 7c 94 c9 fd a2 67 87 5d 8a 9d 99 63 75 b9 83 c8 38 77 1c 84 a7 be eb a7 ac 69 60 30 99 eb c0 f5 1c 36 2b 80 21 50 cc 22 d1 9e c3 4d bd 8c 32 3d 87 b5 d3 26 b9 a6 6a 43 b5 23 92 ed 87 62 c5 34 00 f6 08 9d a3 93 6c 9f dc Data Ascii: #;hV.q\|ZQz['g,LTj36gK8I.AGp?R~>XJ2cpoR-}k]8*%I#JdE2nTRXHuNe\|g]cu8wi`06+!P"M2=&jC#b4l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:51:57 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=k6+3cwBOZAzDOc9&MD=zU4UUtaO HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-19 11:51:57 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: be145f6b-66f2-4614-a673-8f63b0cf44c2 MS-RequestId: 2cd3bc6c-4302-4816-b1c7-d776d543a1a4 MS-CV: QZBA2oCu6kODZous.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 19 Sep 2024 11:51:56 GMT Connection: close Content-Length: 24490
2024-09-19 11:51:57 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-19 11:51:57 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49727	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:51:59 UTC	646	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://adobe-esign.carner.com.co sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 11:52:04 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:04 GMT Content-Type: application/x-javascript Content-Length: 49810 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 3654438 cache-control: public, max-age=31536000 etag: 0x8DCB563C85A43C4 last-modified: Mon, 05 Aug 2024 15:32:14 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8fc9352a-d01e-00e2-154d-e9f70d000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:04 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 e0 ce 9d 06 ba 9b 19 20 0c 81 e9 d9 05 96 cb 89 15 f0 74 b0 b3 b6 c3 cb 40 ce 6f 3f f5 22 d9 b2 e3 d0 3d bb e7 3a 5f 9e 79 09 b6 54 92 a5 52 55 a9 aa 54 92 d6 7f 5a f9 9f ca 4f 95 b5 1f ff a7 32 38 ef 9d 9d 57 fa 9f 2a e7 5f 0e cf f6 2b a7 f0 f6 8f ca 49 ff fc 70 ef e0 c7 eb c1 8f e2 ff e7 77 7e 5c 19 fb 13 51 81 bf 43 37 16 5e 25 0c 2a 61 54 f1 83 51 18 4d c3 c8 4d 44 5c b9 87 df c8 77 27 95 71 14 de 57 92 3b 51 99 46 e1 1f 62 94 c4 95 89 1f 27 50 68 28 26 e1 63 a5 0a d5 45 5e e5 d4 8d 92 e7 ca e1 a9 59 87 fa 05 d4 e6 df fa 01 94 1e 85 d3 67 78 be 4b 2a 41 98 f8 23 51 71 03 8f 6a 9b c0 4b 10 8b ca 2c f0 44 54 79 bc f3 47 77 95 63 7f 14 85 71 38 4e 2a 91 18 09 Data Ascii: m[80OL t@o?"=:_yTRUTZO28W_+Ipw~\QC7^%aTQMMD\w'qW;QFb'Ph(&cE^YgxKA#QqjK,DTyGwcq8N
2024-09-19 11:52:05 UTC	16384	IN	Data Raw: a0 69 f3 cd 6c a4 b8 51 18 e1 f2 1b 2e 99 19 fa 1b e8 60 6e 72 87 c0 69 aa 6d 2c 24 65 50 29 bd 65 50 69 52 06 d5 9f 78 59 3e bc 48 d1 8b eb b0 99 c2 b5 90 94 95 df e3 cf 7e 9c 65 5a 9a 3a 9a dd f8 3e 4c 56 0f e3 03 03 b1 39 07 27 d2 e7 33 a4 70 bd a6 b7 a0 52 6e 55 91 c7 46 fe 5d 2a 4d 30 67 66 83 06 5d 5b 48 5b 42 51 8b 23 f9 43 60 d9 57 d3 b5 a3 78 36 49 b2 0f e7 92 33 e8 7d 11 d0 94 93 7f cf f2 c9 da e1 70 15 0d 4a 4f 2d 50 62 86 34 5e a0 d6 d1 fb 83 80 d9 d7 3f 45 ee cc e3 18 05 fd f3 b9 64 50 6d f0 35 87 b2 62 0a e3 fa 50 a9 a4 8c d3 f4 35 fb 1e da 24 e1 f4 59 23 fc 65 39 86 45 b2 0d f8 e5 ad a1 fb 3e 4c 59 3d 6f a1 f0 af 40 bf a1 8c 9f 8f 5d db 58 9a 5b a2 a2 53 81 85 d4 12 85 bd 50 b3 4c 5d a2 be 17 80 b5 1c 28 30 9d a2 83 00 67 31 ac 01 b8 1a f8 Data Ascii: ilQ.`nrim,$eP)ePiRxY>H~eZ:>LV9'3pRnUF]*M0gf][H[BQ#C`Wx6I3}pJO-Pb4^?EdPm5bP5$Y#e9E>LY=o@]X[SPL](0g1
2024-09-19 11:52:05 UTC	16384	IN	Data Raw: fb 6e e1 d2 4b 92 f0 a0 cf a1 20 a7 47 9b f1 39 46 a5 cf e5 2b 67 30 aa c2 bd 64 8b bd 7f 0e 27 ff be 72 1c 16 90 6f 64 d5 f3 6f 2c e7 d4 72 05 48 e4 59 03 52 4e 91 ed 3d 3f 3f e6 87 27 9e 2b 39 be ed 9d 6f 09 fe 09 42 f8 4d 78 be 8b 50 e4 43 e2 15 10 1d a7 a3 6b 01 6a ac be ef 2e 43 5c 1f 88 bf 82 df d7 9c 65 74 57 7b 96 11 37 a8 92 9d d9 48 52 8a cf b3 2e 18 31 79 5d af 47 ce 43 b9 de 30 c6 51 33 4e c5 02 b4 22 82 98 8a 61 8d 53 2a f2 ab 51 af 71 80 64 17 78 15 47 23 c6 01 e6 33 46 03 19 88 fa 5a 3d 69 fa 23 b1 ce b8 12 e4 61 2b 6c a5 00 a5 ed d3 a7 91 84 48 fb 35 11 41 38 87 c0 00 b9 51 6f e1 1a 8e 93 9e df 0c ce a3 2b 04 d1 cd 6e 90 c5 b7 86 57 ba c1 49 5f 68 2d f7 00 a0 c4 b9 5b c9 e4 18 f5 d9 2e bc 33 05 56 1b c6 ca d4 7f 39 0b 38 36 07 e3 80 fd 2f Data Ascii: nK G9F+g0d'rodo,rHYRN=??'+9oBMxPCkj.C\etW{7HR.1y]GC0Q3N"aS*QqdxG#3FZ=i#a+lH5A8Qo+nWI_h-[.3V986/
2024-09-19 11:52:05 UTC	3353	IN	Data Raw: 95 a6 ba de 33 5b 01 38 1a 7e 32 d0 63 22 cd d8 a8 21 08 d7 ac 8a 4c fd 4b c5 97 47 7e 9c 4c 57 86 4d 77 5c 5a 06 03 f9 34 b3 78 f2 73 e8 78 03 7a d0 18 68 61 01 ed 3b 3e 15 9e 5d bc c3 42 0c 80 5f 53 3e a7 25 bb 80 ff b7 91 3a 9a 44 8b a7 98 da 57 1f a6 dc 48 c5 e8 a4 8c 14 59 f0 3a 09 96 3e 80 65 f0 ab 6f 11 29 19 d0 3e 60 ac 73 25 b4 9e f8 2a 6e dd ba e5 61 03 65 21 23 da d6 3d f0 10 72 2c e2 3b 56 f9 c4 be 80 c8 e3 a8 b0 60 9b 80 cb e0 e6 ac ee 35 23 9c 8f d4 2f 19 69 ba b6 47 5c c6 8c 37 6f 40 db 55 56 23 b8 d2 f3 0d 4c ba b2 d9 44 14 5c 79 be b9 a1 a4 b4 7d ac 0d 73 53 61 99 f9 2e d6 17 3b b0 a1 21 b7 b7 67 d4 17 e4 9c 07 cc bc 32 07 d1 96 8c e4 b2 57 6b be c5 7f f6 c8 5d 0b 93 2a 1d ad fb d8 da 46 3b f5 e4 c3 43 c0 63 2f 5a 0e a6 c4 76 84 03 a6 7d Data Ascii: 3[8~2c"!LKG~LWMw\Z4xsxzha;>]B_S>%:DWHY:>eo)>`s%nae!#=r,;V`5#/iG\7o@UV#LD\y}sSa.;!g2Wk]F;Cc/Zv}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49731	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:06 UTC	666	OUT	GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1 Host: adobe-esign.carner.com.co Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://adobe-esign.carner.com.co Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg==" Sec-WebSocket-Key: IcVnQOWR74n0gF0/cChjSg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-19 11:52:10 UTC	741	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 19 Sep 2024 11:52:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 8a5c490a-cb9b-44bb-a768-163708750e00 x-ms-ests-server: 2.1.18947.4 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:52:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49733	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:06 UTC	1005	OUT	GET /?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true HTTP/1.1 Host: adobe-esign.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-09-19 11:52:10 UTC	779	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:10 GMT Content-Type: text/html; charset=utf-8 Content-Length: 65087 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: cb8c8b69-2e16-4cc2-9ae1-35fa68c81500 x-ms-ests-server: 2.1.18947.4 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:52:10 UTC	6441	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 5b 77 e2 4a b2 30 f8 be 7f 05 c5 da c7 05 c7 32 c5 dd d8 94 da 8d 01 db d8 c6 d8 06 5f b0 8f 97 97 90 12 90 2d 24 2c 09 30 ae 32 6f f3 4b e6 61 d6 79 98 b7 f9 07 fd c7 26 22 32 75 03 5c 55 bb 7b f7 3a f3 cd b7 7b f5 2e 4b a9 bc 44 46 c6 3d 23 93 af 9f 6a ad 6a a7 7b 5e 8f 0d dd 91 f1 b7 df be e2 9f 98 6a 28 8e 23 c7 e3 31 4d b7 e5 b8 e1 da f1 98 a1 98 03 39 ce cc f8 df 7e 8b 7d 1d 32 45 83 bf b1 af ae ee 1a 0c 9f 62 6d 7d 60 c6 74 33 e6 5a b1 b9 35 b1 63 8a aa 5a 13 d3 c5 4a 5f fc 5a 5f 47 cc 55 62 aa 65 ba cc 74 e5 b8 cb 5e dd 2f 38 60 39 a6 0e 15 db 61 ae 3c 71 fb 5b a5 38 00 e3 8e b7 d8 cb 44 9f ca f1 2a af be d5 99 8f 59 fc cb 9a 6e 1a 75 99 69 03 16 6d 75 bb 75 55 d9 aa 5a a3 b1 e2 ea 3d 63 7d c3 99 ae b9 43 59 63 Data Ascii: [wJ02_-$,02oKay&"2u\U{:{.KDF=#jj{^j(#1M9~}2Ebm}`t3Z5cZJ_Z_GUbet^/8`9a<q[8D*YnuimuuUZ=c}CYc
2024-09-19 11:52:11 UTC	16384	IN	Data Raw: 4d 6b 66 7e e1 ee 11 1e 7d 04 cd 3a 11 42 07 34 75 d5 b0 26 c0 b2 b8 25 a8 92 e9 02 bd 67 73 f9 62 3f 9d d5 3e 3a be 18 49 12 6f 8d 69 e7 aa e2 ec 4f 5c 37 d8 a7 10 f8 0d 99 50 4b 3b 41 23 f0 d4 a6 7c 87 6f 59 75 f7 41 5f d2 06 08 5a 72 16 0c 0a 82 c6 65 cb 7b 31 15 d5 d5 a7 b8 4b 62 a9 13 87 f6 9d a0 43 c5 e0 db 85 42 f9 1f 56 57 77 c1 96 72 d7 6b 07 e7 b8 81 34 f0 e4 70 e4 23 e6 da 32 9b 46 00 60 22 23 44 6c 34 ec fa 84 cd 69 8a 57 d5 f3 f0 26 62 64 86 9c a2 96 77 8d d0 40 04 33 40 7d 86 f5 3d 31 2d f5 19 4c c2 8a 33 37 69 0b 09 5a 9b 2e 10 66 86 e7 cd d3 70 1c d5 61 6a ad 6a 61 15 f2 93 53 ac 5f 9c 21 08 62 ed 4b 26 95 fe e2 d9 e2 7d 05 68 f0 40 01 93 dc fa 27 7b 12 47 2c bf e8 b8 93 e5 7c e9 f3 be 1e 95 47 36 19 2b f3 fe 60 30 7c d1 15 7d fb 79 c7 b1 Data Ascii: Mkf~}:B4u&%gsb?>:IoiO\7PK;A#\|oYuA_Zre{1KbCBVWwrk4p#2F`"#Dl4iW&bdw@3@}=1-L37iZ.fpajjaS_!bK&}h@'{G,\|G6+`0\|}y
2024-09-19 11:52:11 UTC	16384	IN	Data Raw: b5 a1 1e 88 de fa 8f bc 06 c1 d5 cd 0d 61 aa 00 e1 b3 bf fc 9a 6a 61 15 bf 50 d2 56 2d 2e 93 f5 c8 a6 75 71 6c fc 78 f2 da 10 a2 7f 5a 08 82 5e c0 d8 9b 8a 0d 23 6d 9f 2d 97 40 ac 50 ad 65 07 9c 39 c5 df 8c 1c 4d 52 b5 5d 2a af 1c ce 24 47 3a 4a 63 ef 0c 12 ed 9b 3e 83 d4 a4 64 cf a0 84 1d da 94 33 48 dc cc 31 9e c1 ae d1 1d 06 a4 63 cb 7c 9b 5d 86 36 28 0a e5 fb 12 ef 24 6d 76 e6 5e 8f cd 16 6d 45 97 09 27 be 85 1e 8c 64 e2 cd b5 85 d6 9d f4 02 fa 51 81 0d 3f f6 15 99 6e 0e 94 b8 a1 d8 cf 9b 86 4f 8f ec f9 13 7c 9c ea 88 8d 41 5d 9f 5e aa 94 ef a9 8c ca 61 5d de 58 19 85 06 ed a1 96 f3 c2 2e f7 60 ba 4a 6c e8 ec 9f db f5 fe 19 49 c6 94 c4 03 36 14 6b 04 a2 7b b3 33 a9 77 4e 9a 98 c3 be 7e 41 65 50 09 79 6e 8a 34 d5 c7 b1 49 49 a9 27 ef 4f b0 54 a4 57 e5 Data Ascii: ajaPV-.uqlxZ^#m-@Pe9MR]*$G:Jc>d3H1c\|]6($mv^mE'dQ?nO\|A]^a]X.`JlI6k{3wN~AePyn4II'OTW
2024-09-19 11:52:11 UTC	16384	IN	Data Raw: 8a bf 36 d5 7b 82 d9 15 9c b7 5e ca 13 65 99 96 5d f4 c0 e3 c1 e2 69 64 6a 08 1b 78 ca 0a 26 ae bc e4 89 38 6c 16 e2 af ea 50 50 ef 95 97 49 1f b6 39 66 f1 3b f5 5d 6a 94 fc d2 88 fa 93 35 1d cb f4 b0 19 bf 8a e2 0f f5 42 ac 44 cb f8 54 51 e0 29 99 7d c4 b6 56 37 0e 0b f1 07 75 75 0a f3 ea a9 8b 61 af be 98 47 50 c8 5a 91 ed 26 69 73 33 9e 16 68 6e 3f 2e 48 61 05 56 66 f5 86 6f 51 fc 77 21 7e 15 2a 11 40 f1 a0 df 38 78 bb ea 2b c3 7a bc cb f2 ba 7a 52 bd cf 9a 0b bb ea c0 83 d0 1d 3f b2 6f 7a 74 25 3c 2d aa 76 05 98 34 58 3e 41 15 35 41 0d 0c d8 74 96 4e c6 93 11 a3 76 17 d0 55 c2 c1 87 23 93 0f 34 1b c4 82 cf 56 a3 71 c5 05 b1 c5 24 f3 1b 05 c4 3e 40 b2 29 35 38 df 4c 32 f7 b0 11 c6 9f 0a a8 f6 32 6c 98 7a f6 05 65 d5 25 7c c4 cb 9e 0b 50 85 23 2e be c3 Data Ascii: 6{^e]idjx&8lPPI9f;]j5BDTQ)}V7uuaGPZ&is3hn?.HaVfoQw!~*@8x+zzR?ozt%<-v4X>A5AtNvU#4Vq$>@)58L22lze%\|P#.
2024-09-19 11:52:11 UTC	9494	IN	Data Raw: 82 f7 e7 55 e2 af f8 fd 79 8d db 1f f5 0d ef cf c6 b2 bc 51 97 4d ee d5 d4 d7 f1 c4 55 74 f8 d8 89 d3 6b 05 a7 a9 e8 78 29 ee 7c c6 79 6f bc a1 8f 05 3d bd 1f 94 04 ab dc 8e 51 31 35 de 71 8e 56 62 c6 d8 38 dd f1 2a e3 86 56 62 36 24 81 1d 49 6c 21 7a 7d 29 ae 1b 04 39 e4 ca 92 49 d3 59 92 cf 52 cd 6b c6 e4 28 73 4c 8e 2c e6 c9 a2 08 1d a8 2c e8 e5 0b a9 83 c0 ed f0 97 04 eb 1f 99 07 2b 6f d0 f5 17 d0 be 84 75 e0 6e 50 03 04 5b 49 ae 1a 1c f0 61 98 a4 5f 28 15 4a 59 98 b1 74 33 d4 83 fe 1c 6f 3a 72 be d1 51 5c 63 68 64 93 2b 91 b1 0c 65 5c 7e fb 91 f3 27 29 12 30 36 81 d2 ba f4 6b 09 94 d6 25 79 65 ff 5a 02 25 fb 91 3f f9 e7 04 4a dc 32 9a 4a 50 06 25 fd 93 1f ff 21 85 92 9c 9d 51 f9 97 92 28 c5 ae 8a 58 92 89 c8 a2 04 73 30 3c 80 7f 9e 46 69 4d ee 1e 99 Data Ascii: UyQMUtkx)\|yo=Q15qVb8*Vb6$Il!z})9IYRk(sL,,+ounP[Ia_(JYt3o:rQ\chd+e\~')06k%yeZ%?J2JP%!Q(Xs0<FiM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49732	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:06 UTC	831	OUT	GET /favicon.ico HTTP/1.1 Host: adobe-esign.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-09-19 11:52:10 UTC	738	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 19 Sep 2024 11:52:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 694a64f9-c718-4c9d-acfb-d895f2db1000 x-ms-ests-server: 2.1.18947.4 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:52:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49735	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:06 UTC	541	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:11 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:11 GMT Content-Type: application/x-javascript Content-Length: 49810 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 3654444 cache-control: public, max-age=31536000 etag: 0x8DCB563C85A43C4 last-modified: Mon, 05 Aug 2024 15:32:14 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8fc9352a-d01e-00e2-154d-e9f70d000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:11 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 e0 ce 9d 06 ba 9b 19 20 0c 81 e9 d9 05 96 cb 89 15 f0 74 b0 b3 b6 c3 cb 40 ce 6f 3f f5 22 d9 b2 e3 d0 3d bb e7 3a 5f 9e 79 09 b6 54 92 a5 52 55 a9 aa 54 92 d6 7f 5a f9 9f ca 4f 95 b5 1f ff a7 32 38 ef 9d 9d 57 fa 9f 2a e7 5f 0e cf f6 2b a7 f0 f6 8f ca 49 ff fc 70 ef e0 c7 eb c1 8f e2 ff e7 77 7e 5c 19 fb 13 51 81 bf 43 37 16 5e 25 0c 2a 61 54 f1 83 51 18 4d c3 c8 4d 44 5c b9 87 df c8 77 27 95 71 14 de 57 92 3b 51 99 46 e1 1f 62 94 c4 95 89 1f 27 50 68 28 26 e1 63 a5 0a d5 45 5e e5 d4 8d 92 e7 ca e1 a9 59 87 fa 05 d4 e6 df fa 01 94 1e 85 d3 67 78 be 4b 2a 41 98 f8 23 51 71 03 8f 6a 9b c0 4b 10 8b ca 2c f0 44 54 79 bc f3 47 77 95 63 7f 14 85 71 38 4e 2a 91 18 09 Data Ascii: m[80OL t@o?"=:_yTRUTZO28W_+Ipw~\QC7^%aTQMMD\w'qW;QFb'Ph(&cE^YgxKA#QqjK,DTyGwcq8N
2024-09-19 11:52:11 UTC	16384	IN	Data Raw: a0 69 f3 cd 6c a4 b8 51 18 e1 f2 1b 2e 99 19 fa 1b e8 60 6e 72 87 c0 69 aa 6d 2c 24 65 50 29 bd 65 50 69 52 06 d5 9f 78 59 3e bc 48 d1 8b eb b0 99 c2 b5 90 94 95 df e3 cf 7e 9c 65 5a 9a 3a 9a dd f8 3e 4c 56 0f e3 03 03 b1 39 07 27 d2 e7 33 a4 70 bd a6 b7 a0 52 6e 55 91 c7 46 fe 5d 2a 4d 30 67 66 83 06 5d 5b 48 5b 42 51 8b 23 f9 43 60 d9 57 d3 b5 a3 78 36 49 b2 0f e7 92 33 e8 7d 11 d0 94 93 7f cf f2 c9 da e1 70 15 0d 4a 4f 2d 50 62 86 34 5e a0 d6 d1 fb 83 80 d9 d7 3f 45 ee cc e3 18 05 fd f3 b9 64 50 6d f0 35 87 b2 62 0a e3 fa 50 a9 a4 8c d3 f4 35 fb 1e da 24 e1 f4 59 23 fc 65 39 86 45 b2 0d f8 e5 ad a1 fb 3e 4c 59 3d 6f a1 f0 af 40 bf a1 8c 9f 8f 5d db 58 9a 5b a2 a2 53 81 85 d4 12 85 bd 50 b3 4c 5d a2 be 17 80 b5 1c 28 30 9d a2 83 00 67 31 ac 01 b8 1a f8 Data Ascii: ilQ.`nrim,$eP)ePiRxY>H~eZ:>LV9'3pRnUF]*M0gf][H[BQ#C`Wx6I3}pJO-Pb4^?EdPm5bP5$Y#e9E>LY=o@]X[SPL](0g1
2024-09-19 11:52:11 UTC	16384	IN	Data Raw: fb 6e e1 d2 4b 92 f0 a0 cf a1 20 a7 47 9b f1 39 46 a5 cf e5 2b 67 30 aa c2 bd 64 8b bd 7f 0e 27 ff be 72 1c 16 90 6f 64 d5 f3 6f 2c e7 d4 72 05 48 e4 59 03 52 4e 91 ed 3d 3f 3f e6 87 27 9e 2b 39 be ed 9d 6f 09 fe 09 42 f8 4d 78 be 8b 50 e4 43 e2 15 10 1d a7 a3 6b 01 6a ac be ef 2e 43 5c 1f 88 bf 82 df d7 9c 65 74 57 7b 96 11 37 a8 92 9d d9 48 52 8a cf b3 2e 18 31 79 5d af 47 ce 43 b9 de 30 c6 51 33 4e c5 02 b4 22 82 98 8a 61 8d 53 2a f2 ab 51 af 71 80 64 17 78 15 47 23 c6 01 e6 33 46 03 19 88 fa 5a 3d 69 fa 23 b1 ce b8 12 e4 61 2b 6c a5 00 a5 ed d3 a7 91 84 48 fb 35 11 41 38 87 c0 00 b9 51 6f e1 1a 8e 93 9e df 0c ce a3 2b 04 d1 cd 6e 90 c5 b7 86 57 ba c1 49 5f 68 2d f7 00 a0 c4 b9 5b c9 e4 18 f5 d9 2e bc 33 05 56 1b c6 ca d4 7f 39 0b 38 36 07 e3 80 fd 2f Data Ascii: nK G9F+g0d'rodo,rHYRN=??'+9oBMxPCkj.C\etW{7HR.1y]GC0Q3N"aS*QqdxG#3FZ=i#a+lH5A8Qo+nWI_h-[.3V986/
2024-09-19 11:52:11 UTC	3353	IN	Data Raw: 95 a6 ba de 33 5b 01 38 1a 7e 32 d0 63 22 cd d8 a8 21 08 d7 ac 8a 4c fd 4b c5 97 47 7e 9c 4c 57 86 4d 77 5c 5a 06 03 f9 34 b3 78 f2 73 e8 78 03 7a d0 18 68 61 01 ed 3b 3e 15 9e 5d bc c3 42 0c 80 5f 53 3e a7 25 bb 80 ff b7 91 3a 9a 44 8b a7 98 da 57 1f a6 dc 48 c5 e8 a4 8c 14 59 f0 3a 09 96 3e 80 65 f0 ab 6f 11 29 19 d0 3e 60 ac 73 25 b4 9e f8 2a 6e dd ba e5 61 03 65 21 23 da d6 3d f0 10 72 2c e2 3b 56 f9 c4 be 80 c8 e3 a8 b0 60 9b 80 cb e0 e6 ac ee 35 23 9c 8f d4 2f 19 69 ba b6 47 5c c6 8c 37 6f 40 db 55 56 23 b8 d2 f3 0d 4c ba b2 d9 44 14 5c 79 be b9 a1 a4 b4 7d ac 0d 73 53 61 99 f9 2e d6 17 3b b0 a1 21 b7 b7 67 d4 17 e4 9c 07 cc bc 32 07 d1 96 8c e4 b2 57 6b be c5 7f f6 c8 5d 0b 93 2a 1d ad fb d8 da 46 3b f5 e4 c3 43 c0 63 2f 5a 0e a6 c4 76 84 03 a6 7d Data Ascii: 3[8~2c"!LKG~LWMw\Z4xsxzha;>]B_S>%:DWHY:>eo)>`s%nae!#=r,;V`5#/iG\7o@UV#LD\y}sSa.;!g2Wk]F;Cc/Zv}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49736	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:11 UTC	436	OUT	OPTIONS /api/report?catId=GW+estsfd+dub2 HTTP/1.1 Host: bef1f851-d43c7a7f.carner.com.co Connection: keep-alive Origin: https://adobe-esign.carner.com.co Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 11:52:15 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding access-control-allow-headers: content-type access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-09-19 11:52:15 UTC	12	IN	Data Raw: 37 0d 0a 4f 50 54 49 4f 4e 53 0d 0a Data Ascii: 7OPTIONS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49737	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:11 UTC	671	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://adobe-esign.carner.com.co sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 11:52:16 UTC	729	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:16 GMT Content-Type: text/css Content-Length: 20414 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 6622170 cache-control: public, max-age=31536000 etag: 0x8DC9BAA0E5931F9 last-modified: Wed, 03 Jul 2024 21:49:46 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a118d96c-901e-00e2-294f-ce1955000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:16 UTC	15655	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-09-19 11:52:16 UTC	4759	IN	Data Raw: 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 5d 71 27 8b f1 12 a2 08 34 b3 5d 51 23 fb f8 b7 98 8b 21 ef ed 1b 07 ec 4b 8b e1 7e 9a ad 02 8f 30 cd da 14 7f 83 b9 d0 6e c2 6f 39 ba e4 dc e8 bc 05 d9 71 Data Ascii: bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.+76s^]q'4]Q#!K~0no9q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49739	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:12 UTC	648	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_NXCGegEOpKB5nrI5GnSS3g2.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://adobe-esign.carner.com.co sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 11:52:18 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:17 GMT Content-Type: application/x-javascript Content-Length: 122186 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 1702816 cache-control: public, max-age=31536000 etag: 0x8DCC771092FD3BD last-modified: Wed, 28 Aug 2024 14:52:27 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 12101f20-701e-0004-500d-fb0c60000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:18 UTC	13688	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 77 e3 38 8e 38 fa ff fd 14 8e 66 6e da ee 28 2e cb 6f 2b ad ce 3a 4e 52 95 e9 24 ce c4 a9 ea 9e 4d 65 72 64 89 76 d4 91 25 af 24 e7 31 8e f7 b3 ff 00 90 94 28 5b 4e 55 cd ee b9 f7 dc 73 e7 51 b1 48 f0 05 82 20 00 82 e0 87 9f 77 fe af d2 cf a5 fd ef ff 4f 69 74 d3 bf be 29 0d 4f 4b 37 9f ce ae 8f 4b 57 f0 f5 8f d2 e5 f0 e6 6c 70 f2 fd f5 60 a3 f8 ff 9b 07 2f 2e 4d 3c 9f 95 e0 ef d8 8e 99 5b 0a 83 52 18 95 bc c0 09 a3 79 18 d9 09 8b 4b 33 f8 37 f2 6c bf 34 89 c2 59 29 79 60 a5 79 14 fe c9 9c 24 2e f9 5e 9c 40 a1 31 f3 c3 e7 52 19 aa 8b dc d2 95 1d 25 af a5 b3 ab 4a 15 ea 67 50 9b 37 f5 02 28 ed 84 f3 57 f8 fd 90 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 11 b8 2c 2a 3d 3f 78 ce 43 e9 c2 73 a2 30 0e 27 49 29 62 0e Data Ascii: {w88fn(.o+:NR$Merdv%$1([NUsQH wOit)OK7KWlp`/.M<[RyK37l4Y)y`y$.^@1R%JgP7(W0Vj#Yi,*=?xCs0'I)b
2024-09-19 11:52:18 UTC	16384	IN	Data Raw: 96 bb e7 73 16 48 25 4f aa d4 13 b4 93 d2 0d 4b 5b ed ce 21 cd c3 15 5f 9f d8 f9 32 3f 86 d5 17 a2 93 62 1c f9 d2 eb a3 92 63 f2 c9 82 c9 79 6b e5 44 28 34 00 13 8a c7 db b3 d7 e9 2c 0f d8 17 c9 ce 42 6e cc 08 59 8c 42 9f 5b 36 10 8d c4 38 10 1f e2 68 82 e8 92 73 a3 ed 85 98 36 b5 22 4e 8e 33 2b c9 91 d9 c1 c2 8a 77 77 f9 73 0b 20 ab c7 6b a7 e1 da 81 24 3c a8 29 36 df a7 c8 84 77 6b 9c a7 13 41 19 c6 0a 88 83 d3 04 74 51 9f ea 73 7d 06 34 80 c2 06 a0 44 9a 87 9e ac 26 6b ec 8f e5 7c b1 ec b5 f8 07 8b 26 d4 61 9e 5f 96 72 c9 87 a7 8a 7e bf c6 49 f4 81 55 3b 18 fc f2 70 30 90 a6 a5 91 55 43 d7 97 43 4d 33 07 e9 23 84 00 f8 82 87 60 a9 1a 31 f8 f9 49 2f 0f 40 97 f8 19 2a 7d ce 0f 01 3a 6f f1 de 23 2d 8f f4 17 7d bc b9 f8 9e c9 c6 75 90 b5 fb 6a b1 3d b5 41 Data Ascii: sH%OK[!_2?bcykD(4,BnYB[68hs6"N3+wws k$<)6wkAtQs}4D&k\|&a_r~IU;p0UCCM3#`1I/@*}:o#-}uj=A
2024-09-19 11:52:18 UTC	16384	IN	Data Raw: d9 b8 f5 84 6b c5 b6 72 f2 ca fe cc 91 cc 94 ce 3b 80 8a f2 ad 77 6f ce 84 3b f0 be 70 84 0d a5 ce 93 4c 91 07 cb 2d 17 3e f1 c6 35 dd 7d f4 8f bd a6 9c 59 af 9b ce c9 85 af 6c 2b fc 2d 7c c8 a4 37 9b 63 e1 04 9b 52 89 a2 c6 34 d9 02 a5 0a bf 72 e8 ad 53 f8 d7 08 9e 6a fd 58 d6 84 c1 2a fc 7c 91 d6 be 32 66 d3 4f 08 79 6c a2 48 6a 70 d4 49 b5 30 d1 65 65 c9 52 60 2d 02 e8 83 bf d1 92 15 58 4b 84 78 bb c9 8c c6 c3 8e 2e eb 70 45 72 ed c4 8e 58 2f d0 4d 2c ed ec 28 90 58 53 0b b1 a2 a6 7b c7 09 5d 4c b8 07 34 09 6f 42 92 0b 37 2a 80 c7 60 0a c7 ec 41 77 1f c5 d7 a7 70 38 89 c8 97 51 5f 3a 61 46 17 46 ca 5b 28 a5 a0 fb 22 cd 2f 28 a5 7d 29 fc 31 d1 65 25 df 45 ca e1 6e d3 bd 2d 7b 89 3e 41 e7 4a 4a 23 18 12 ce 02 63 90 90 16 8e 46 43 a1 0d f8 ea 61 f9 cb 97 Data Ascii: kr;wo;pL->5}Yl+-\|7cR4rSjX\|2fOylHjpI0eeR`-XKx.pErX/M,(XS{]L4oB7`Awp8Q_:aFF[("/(})1e%En-{>AJJ#cFCa
2024-09-19 11:52:18 UTC	16384	IN	Data Raw: f4 8d 2a 8c bc e3 6a e3 82 6d ce 35 00 fb 2e 6c 41 34 61 52 ac 75 e9 16 e3 40 76 2f f3 4a ae 49 73 ba ac 42 8c cf 2c e1 98 d6 d5 d5 6d 7a 75 65 2d d5 b9 e8 77 43 cd 6e 08 1b fb dc b1 a3 a0 0a e4 51 44 11 93 64 6d 21 05 c2 1b 71 1c 72 8b 0c e8 4c 88 88 16 21 37 8a b7 39 6e 73 f9 c0 ba 4d ad 25 c0 6b 5d 2c 04 3d 29 09 06 7c ce 00 b1 ae 6e 8f 26 e4 5c 58 40 2a b4 1f 61 64 00 a8 91 5c 92 20 89 f5 6b d0 52 d9 f1 6b 87 9a 1b 6d e4 e4 70 c9 e6 44 b2 ce cf cb 1d 2b 36 2a 94 28 3a 24 a1 15 75 e3 3e 19 41 48 34 b6 5d 84 9c 86 62 67 e3 c5 c5 18 10 77 e2 35 56 90 1b 34 c8 41 96 12 d2 96 c4 aa 21 3b 24 e4 30 9d 77 2b 85 a5 b6 17 f7 d0 74 1c 28 8b 31 16 64 15 52 b3 f2 13 f7 5f 35 6e ae 61 b9 97 62 0c 19 a3 5d b2 7e 7a 47 5a de 7c 5e 9c 9a 2c 8f 9a 14 05 f8 43 70 e2 ca Data Ascii: jm5.lA4aRu@v/JIsB,mzue-wCnQDdm!qrL!79nsM%k],=)\|n&\X@ad\ kRkmpD+6*(:$u>AH4]bgw5V4A!;$0w+t(1dR_5nab]~zGZ\|^,Cp
2024-09-19 11:52:18 UTC	2696	IN	Data Raw: 3f 30 3e 5b 6b 10 d1 dc 6b 1b 41 47 2c 7a da 8f f6 38 9b e7 51 6c bf 50 13 57 0f 48 b2 c9 93 71 bc d2 f5 16 c3 86 d4 2b 97 53 ee a7 f0 26 3c e6 48 d2 1d ac 01 88 56 af a6 59 74 f5 f5 cf 3c fe 7e c7 07 af c3 ab 78 59 5f 34 23 d1 3a 8c 62 03 e4 cc 71 0f 91 db 0c 11 93 b8 8e d5 72 79 ca 0d 13 e0 55 45 8a 35 d1 98 b6 fa af 11 7b 29 c1 19 b1 85 08 52 cb 38 e2 36 de 49 42 46 78 ec f2 1a 37 df d4 81 67 71 7b 3c ea f3 d4 01 51 65 32 7f b2 4c d6 1e 3e 46 70 55 b9 e9 3b e6 dc 54 d4 fa 72 52 e8 92 92 e5 a5 a4 5d d6 a5 b9 11 ef 26 16 08 41 e0 ea 2f 49 ee dc a5 2d 4b 5d 36 02 23 3d b2 f9 48 c7 a2 c8 25 a7 ce 92 51 40 ba b6 14 49 87 97 7f a7 74 25 0d 89 c3 3a 46 61 d6 f0 ab fd 71 81 e7 96 84 a2 35 87 1f f6 33 60 9b f8 55 0d 90 a9 e9 0c 80 39 01 9b 8f ec 3d 98 f9 2a a5 Data Ascii: ?0>[kkAG,z8QlPWHq+S&<HVYt<~xY_4#:bqryUE5{)R86IBFx7gq{<Qe2L>FpU;TrR]&A/I-K]6#=H%Q@It%:Faq53`U9=*
2024-09-19 11:52:18 UTC	16384	IN	Data Raw: a5 0b 25 6e a5 61 9f 97 c9 b4 60 74 26 3a 99 19 c6 85 55 5f 58 e7 5f 41 8d ae 8e 26 76 87 ea e2 ec f2 00 ac 75 a8 b5 1b 19 68 2f f3 78 eb 2f ad d8 21 25 5c c3 98 e1 99 b0 39 85 f1 72 5a d2 36 0a 71 32 65 95 96 07 2f ec 8f f8 05 3b 50 d4 eb 14 5c 50 f8 8a 0e 24 e6 9a d5 61 fc ab 9f 79 4f 7c 9d fe 08 20 7a 0d 15 b3 57 d6 18 33 48 16 d5 ae 17 92 a5 e4 4c 5b 96 a0 ab e0 7e 33 a4 96 cc 46 74 c4 94 a1 f3 85 f6 dd c2 3b 97 05 47 eb 84 4e c2 13 7d 51 cb 6e 8a 57 6f 00 a6 fb 05 31 3f fd d9 08 ec e7 d3 a7 87 e6 4d dc e3 ea f4 60 4e fa bf c2 3c 7d de ae 6e 66 cc fd b1 ab 6d a8 65 c0 8c 83 36 9d 96 2f 93 41 49 95 89 b3 54 7a 5a 9e 51 6d b5 24 49 31 bb 91 f1 93 4d b1 04 75 f0 e5 48 47 6e af 4a 56 d2 81 30 7b b6 d6 89 1d 6f bd 91 ca 3e a6 f9 bd 94 46 23 58 bd f1 ce b1 Data Ascii: %na`t&:U_X_A&vuh/x/!%\9rZ6q2e/;P\P$ayO\| zW3HL[~3Ft;GN}QnWo1?M`N<}nfme6/AITzZQm$I1MuHGnJV0{o>F#X
2024-09-19 11:52:18 UTC	12576	IN	Data Raw: 2c 42 87 d9 71 ec 8b 84 fb d0 cf 25 38 9f e0 59 c6 60 0f 30 9f 8b bb ed 9d ae 76 63 34 23 2e 03 99 d9 0c 8a 11 63 91 ef 01 07 b9 ed 26 50 25 22 37 13 71 b2 17 cd c8 8d 52 3f 84 61 11 b2 3c 11 31 90 5c 0a e1 c4 b0 99 c2 0c 13 c9 83 2c de cf 98 8c 66 24 c2 c0 8d 58 16 07 6e 1e ba 31 e3 10 19 8e 27 c1 c4 b3 dc 95 a1 b3 17 13 c0 8d d3 10 dc c7 0f a4 13 e6 19 83 70 cf 61 63 a8 1d 5c 06 3d c9 8e 83 fd 88 0c a3 19 25 9e 4d ca 7f 00 2d 56 86 30 3a c1 23 68 7b 1d 0c 29 74 6c b1 27 26 9b a4 36 54 70 91 39 42 72 d8 d3 41 90 67 44 44 89 e7 48 d8 51 5e b2 9f a9 33 ac 3c 70 93 d8 83 10 b4 21 8d c2 2c c9 42 0f b8 97 7b 5e 1c 46 89 f0 d9 5e 86 e4 41 d7 0b 32 b0 bd d0 91 40 3c f4 14 09 30 59 28 7f d0 6a 81 8a fb e1 e4 66 37 2e 4d 1c 99 31 16 42 72 84 21 90 23 b1 23 f0 d5 Data Ascii: ,Bq%8Y`0vc4#.c&P%"7qR?a<1\,f$Xn1'pac\=%M-V0:#h{)tl'&6Tp9BrAgDDHQ^3<p!,B{^F^A2@<0Y(jf7.M1Br!##
2024-09-19 11:52:18 UTC	16384	IN	Data Raw: d6 0a 92 52 37 ca 09 79 b4 91 fa d6 fc eb eb 1b 1c 2a e3 d4 27 20 a0 b7 ab 9d 57 ba 73 54 df da fd da 96 86 76 8a f4 26 31 2b 8e 6f 00 08 38 71 ff 44 6c 87 63 f4 b0 d0 d9 12 a1 b8 c1 9e 51 db b4 8a ad 43 91 1f 1d 15 b4 39 55 68 2f c3 0c 7d f6 0f f6 53 43 2d 7a 87 da 3e e5 d1 83 14 2b 4c cb 98 ae 3f d0 a6 7b c1 55 78 dc 50 d6 d4 8e 71 d6 ef 75 8e 32 39 1a d5 f1 ba 83 d9 15 9d 05 69 19 6c 0f e5 11 df 70 d8 84 62 44 35 d9 2a 00 87 83 d6 b7 6a 60 7d 38 79 72 54 58 3a 78 a9 b8 90 47 4d df 8f af a0 14 ce ea 2c 40 96 02 e1 68 b6 0c 32 7a a2 62 18 ef e2 3e 6f 56 77 65 da b7 b1 15 7d 80 6d b8 20 42 2e 2a 02 e0 e5 9c 41 45 a1 8f 14 c6 36 b2 56 31 af 67 ab 68 7d fe 67 93 19 98 c6 26 6e b0 aa 82 76 03 14 5b 8e fa 1e 0c 31 2e fb e3 e1 82 9c 0c 10 75 8b 3f 6f e6 e2 17 Data Ascii: R7y' WsTv&1+o8qDlcQC9Uh/}SC-z>+L?{UxPqu29ilpbD5j`}8yrTX:xGM,@h2zb>oVwe}m B.*AE6V1gh}g&nv[1.u?o
2024-09-19 11:52:18 UTC	11306	IN	Data Raw: 18 fd 67 3b 51 7f fe 94 b7 49 ff e8 ed 9c 92 44 91 f5 46 89 1e f0 d3 49 6e 0e 2f 63 74 95 c7 3d 79 c5 76 dc 26 1a 6c 18 ab e0 3e 41 0d b7 15 b2 60 8b a2 04 1d d6 56 c4 09 fc 6c 18 d0 70 db b1 0f d6 0c 64 f8 40 e2 45 a5 e9 07 08 60 f8 a7 13 33 7e 97 41 dd 21 1c de a6 e2 46 6d e9 1e 22 60 e1 9f 20 58 e1 1f 1f a8 f0 ae 82 e0 3a e5 ff d4 91 43 aa b7 13 29 00 69 94 fd 84 a0 c5 ea a9 e3 b7 f8 74 94 a6 a1 f6 c5 90 64 97 8d c4 93 16 07 80 a2 c7 eb 65 b1 5d 5e c3 86 e7 ef 2d c3 4a b2 16 c5 4d 0f 1e 17 cc 73 a2 39 df 3e e4 c9 ce c5 f9 35 1d c5 f5 f2 c1 55 88 fb c0 5c 1d f7 e5 8e 20 7f 88 a0 28 8d f8 85 16 4b 24 d2 2d 84 82 a1 6d 62 54 b0 33 ba ad df 37 ca 4b e3 20 1e 48 64 be 3b 98 ee 22 2f d2 e8 69 42 4e bc 97 d4 b8 8e 78 56 37 b2 df 5b 76 5c bb c9 0d a5 be 3f c4 Data Ascii: g;QIDFIn/ct=yv&l>A`Vlpd@E`3~A!Fm"` X:C)itde]^-JMs9>5U\ (K$-mbT37K Hd;"/iBNxV7[v\?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49738	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:12 UTC	667	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://adobe-esign.carner.com.co sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 11:52:16 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:16 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 1907114 cache-control: public, max-age=31536000 etag: 0x8DCC6D4DD76DEA7 last-modified: Tue, 27 Aug 2024 20:14:33 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: acf0a774-f01e-003b-4332-f9116a000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:16 UTC	15639	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-09-19 11:52:16 UTC	687	IN	Data Raw: 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a a6 55 51 0f ac 19 d5 8b f8 25 89 a2 43 8c b1 88 99 e8 8a 70 9a 65 32 f2 a9 8c 80 8f 9c 94 ab 9e 94 ef 3f 7a b7 f0 af ca 4b 18 34 2a af 82 Data Ascii: 9{18&h4p9K}^Qmh=h=02h<$xwIiBbd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:UQ%Cpe2?zK4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49740	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:12 UTC	805	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: l1ve.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:16 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1428 Connection: close cache-control: max-age=315360000 vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C545_BAY x-ms-request-id: eab95f0c-3358-4db6-aec5-a284f1de4c86 ppserver: PPV: 30 H: PH1PEPF00011F4C V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:52:16 UTC	1428	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 4d 6f db 38 10 bd f7 57 d8 44 11 88 1b 56 91 94 c4 89 e5 30 41 d1 ed a2 2e 9a b6 a8 ba d8 83 ab 05 18 89 b2 b9 2b 53 02 49 bb 2d 1c fd f7 1d 7d 59 b2 ba 4d da 43 0f b6 65 72 e6 f1 bd e1 cc 90 ba d2 91 12 b9 19 99 af 39 a7 c8 f0 2f e6 e4 1f b6 65 f5 28 ba 7e 32 1a 27 1b 19 19 91 49 cb 10 8e 77 49 a6 ac 2d 53 23 3d 12 72 c4 b1 59 e8 90 72 f8 2a 2c b3 12 9a 74 c6 60 da 3c 8f b8 25 f1 4e 24 96 5e c8 10 2b 6e 36 4a 8e ca 67 9b 7f c9 33 65 f4 ac 04 14 b4 1c a2 bb 66 cc df 15 44 c4 be 24 69 c6 62 1e fb 63 b7 98 35 ae a6 74 8d 58 9a 5a a2 45 20 82 74 cf 1c c3 9f da 8d 8e 9d 6e a2 a8 78 d3 dd 1e 88 db 6b 0a a2 ec 88 82 93 9d 53 84 08 b7 1c 5c 58 8b 81 e6 56 88 ae 64 35 11 e0 34 59 04 21 d1 d4 21 92 72 3b e5 72 69 56 33 7d 25 67 Data Ascii: WMo8WDV0A.+SI-}YMCer9/e(~2'IwI-S#=rYr*,t`<%N$^+n6Jg3efD$ibc5tXZE tnxkS\XVd54Y!!r;riV3}%g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49741	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:16 UTC	368	OUT	POST /api/report?catId=GW+estsfd+dub2 HTTP/1.1 Host: bef1f851-d43c7a7f.carner.com.co Connection: keep-alive Content-Length: 504 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 11:52:16 UTC	504	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 32 30 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 6f 62 65 2d 65 73 69 67 6e 2e 63 61 72 6e 65 72 2e 63 6f 6d 2e 63 6f 2f 3f 6f 72 67 61 6e 69 73 61 74 69 6f 6e 3d 69 6e 74 65 72 73 6e 61 63 6b 2e 66 72 26 64 73 65 3d 62 57 74 73 61 57 35 6e 62 47 56 79 51 47 6c 75 64 47 56 79 63 32 35 68 59 32 73 75 5a 6e 49 3d 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 38 39 2e 31 38 37 2e 32 38 Data Ascii: [{"age":0,"body":{"elapsed_time":5200,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=","sampling_fraction":1.0,"server_ip":"89.187.28
2024-09-19 11:52:19 UTC	367	IN	HTTP/1.1 429 Too Many Requests Server: nginx Date: Thu, 19 Sep 2024 11:52:19 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close request-context: appId=cid-v1:27277200-e19a-465d-951d-bb90a149c996 access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-09-19 11:52:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49742	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:17 UTC	562	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:22 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:21 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 1907120 cache-control: public, max-age=31536000 etag: 0x8DCC6D4DD76DEA7 last-modified: Tue, 27 Aug 2024 20:14:33 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: acf0a774-f01e-003b-4332-f9116a000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:22 UTC	6449	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-09-19 11:52:22 UTC	9877	IN	Data Raw: 23 47 68 ba 57 ea 6e 9b a1 77 df 90 87 78 47 c8 48 6c bd 4f a4 c1 30 13 fb 9c aa 2e 53 63 5b da 0a f2 49 b4 33 a2 70 a2 f8 ca 34 27 9b 94 cd 92 f3 fb d7 57 23 bb e0 19 8a 69 00 cc 29 49 34 2d 27 82 f7 35 18 45 b7 21 59 f7 53 7a e2 39 72 f2 08 dd 0f c8 a4 c1 d4 a3 50 53 95 c9 91 32 69 90 fe ad 42 72 a5 4e f6 02 73 bd bd 48 51 a2 be f4 e3 60 3e d7 d6 3c 76 c1 64 dc c1 ea 9b 52 0e 7d 51 79 ef b6 0f e2 14 a6 12 36 24 aa 17 1c 23 48 63 28 1f ff 5d 10 c8 05 4a a5 45 ce 28 7e ed d1 88 d5 fe a6 65 2b b8 84 53 d4 9d 0b b2 d7 98 09 ef 59 08 51 37 c5 63 e1 83 b4 9e cf c9 53 ea bb 4a 10 8a 47 c2 d6 e6 a3 f5 4d cc 3d 18 54 8b 8b 8b 32 b5 4a 3e 60 7f c7 c0 8e f7 b6 52 0e a8 a1 10 2d 86 a3 00 9d c6 13 1d 3b 44 27 b6 f2 40 48 1f d5 b4 2c d2 e2 61 19 e5 d8 ca 9a 77 83 be Data Ascii: #GhWnwxGHlO0.Sc[I3p4'W#i)I4-'5E!YSz9rPS2iBrNsHQ`><vdR}Qy6$#Hc(]JE(~e+SYQ7cSJGM=T2J>`R-;D'@H,aw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49734	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:18 UTC	709	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:23 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:23 GMT Content-Type: application/x-javascript Content-Length: 61137 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15412790 cache-control: public, max-age=31536000 etag: 0x8DB5D44A2CEB430 last-modified: Thu, 25 May 2023 17:22:37 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2230c8de-b01e-0020-515c-7ecb15000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:23 UTC	13688	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c 60 9a 94 97 38 a4 11 5e 59 a2 6d 26 da a2 25 4e 46 d6 e8 40 60 4b 82 4d 02 0c 00 4a d6 48 fc ef 4f 55 f5 8e 85 92 92 dc f7 be 27 b1 08 34 aa f7 ea ea ea ea 5a dc 9b 38 19 a7 37 ed 82 4d d8 94 15 d9 ed d9 0d 3b 9f 85 d1 d7 9f f2 34 99 05 4b bf de df 9f 9c 7a ed d9 3c bf 72 4f 4e d6 4f fd 13 df f7 2f e6 49 54 c4 69 e2 32 bf f0 13 ef ce 99 e7 ac 95 17 59 1c 15 4e 3f 69 67 6e e1 f9 49 7b ec 16 be f3 6b 38 99 b3 9f a1 02 c7 77 55 36 ef 2e 63 c5 3c 4b 5a 59 9b 2d 3c 05 3b bc 66 49 b1 1d 16 2c 89 6e 1b c0 c3 32 f8 3e cb f2 38 c7 2c ac 21 cb b9 91 e5 28 0b 23 b6 cd ae d9 a4 01 78 6c 00 6f cc 66 a3 24 8f 2f af 8a 7c 33 cd ea 8b 8f ad 16 bd 0b 73 d6 08 6a 16 7d 36 fc 06 4d 1e b3 f1 28 Data Ascii: iwF0'W`8^Ym&%NF@`KMJHOU'4Z87M;4Kz<rONO/ITi2YN?ignI{k8wU6.c<KZY-<;fI,n2>8,!(#xlof$/\|3sj}6M(
2024-09-19 11:52:23 UTC	16384	IN	Data Raw: c1 07 b6 8c 89 f8 6d a9 de c4 c3 d4 8f 33 8a 19 bb 8e d3 79 ce 49 60 1e 17 a5 33 ad 14 7b c5 66 ba 2d a9 e2 ce 34 2a 3c 9f fa 06 b4 fe d8 f5 24 ad 56 dc 13 1e 75 81 68 ff 8a 41 50 66 d0 0a d5 02 12 4f 02 ef 52 72 da 01 64 d4 dc a3 c9 67 07 29 32 a0 8a 5c 7b 26 73 23 c5 0c 92 67 4c a7 1c 2a 42 fa ae a1 2e 65 59 91 18 2c 35 f3 28 e2 52 91 ce 24 7d 00 f8 16 79 c2 13 5c b5 c1 3c 13 8b 9c a0 1c 8a fa ad e6 0c e7 c9 1e 38 73 44 b8 78 bd 69 04 4a 1e 09 36 c3 04 8f bb 18 de 92 47 e6 55 e0 e8 9e 20 67 d1 bc 80 45 36 b9 55 87 da 8b 38 cb 39 3c d2 b8 1c 3a a2 72 38 ca 51 19 d0 bc 9f 18 d7 c5 8f 97 38 44 e9 bf af 6f 24 2a 2e d7 1c 47 f8 d8 6d 62 53 d1 83 15 c5 11 ae 1f 33 0a dd 4b f5 3f 58 4c c6 1e 28 c8 cf ac c1 cf 16 84 c2 a8 53 93 60 40 4d 68 38 e9 2f f0 c7 e3 6c Data Ascii: m3yI`3{f-4<$VuhAPfORrdg)2\{&s#gLB.eY,5(R$}y\<8sDxiJ6GU gE6U89<:r8Q8Do$*.GmbS3K?XL(S`@Mh8/l
2024-09-19 11:52:23 UTC	16384	IN	Data Raw: a5 ec 74 ac 3a 9d a2 d3 74 ad b2 d8 8d e1 0a f5 cb 1a c3 00 d7 c0 ab b8 33 a0 4e 0e 64 0f dd 8c 6e 02 35 c1 29 cd ee a0 c7 56 07 0b fd 34 95 d7 7e 7f b2 9f 19 cb 5f cb ae 8a f7 da de 32 c0 d7 5a 4c 12 e4 6f 79 59 a9 d9 74 b1 d9 13 1a 77 1c e8 3c 7d 05 cb 06 39 b5 5e c7 a3 a9 ee 60 c5 e8 b7 37 57 25 28 59 0f 2c 28 dc cc e7 60 62 29 86 04 93 9a 9a b1 fc b2 60 45 3b 64 f7 02 84 ec 76 c5 0f 41 81 88 91 8a ae f8 71 9f fd df 3f f3 f5 19 fd ff 13 61 a0 69 83 80 18 e2 7b 33 d4 ff 77 b0 fa 4d 61 b2 c2 2d b2 76 73 72 98 1f 10 8c 8d 32 b0 96 5c 47 15 72 3c ff b7 e0 a2 7c f5 99 97 34 08 c7 91 4e 60 7d 18 30 bf 1c 5b 26 4f 09 71 6e 60 b8 0e db 5e 2d b4 e5 d8 00 b4 57 de 2e 7f 94 a0 4a 2b 04 01 af 15 40 94 f0 38 7e f8 ba b6 26 b4 87 80 69 6a a1 f2 c0 63 d5 58 c8 d1 57 Data Ascii: t:t3Ndn5)V4~_2ZLoyYtw<}9^`7W%(Y,(`b)`E;dvAq?ai{3wMa-vsr2\Gr<\|4N`}0[&Oqn`^-W.J+@8~&ijcXW
2024-09-19 11:52:23 UTC	14681	IN	Data Raw: 78 13 e1 92 e2 3d a5 30 e5 4a 6f d9 98 ae bd 35 67 bd 60 dd 06 3a 84 7b ae b3 37 2d ae 3f e6 a1 60 bd 9e c5 83 9b 08 6a d4 b5 a9 88 eb 48 5f 0c c6 31 ad f8 86 14 0f 50 e1 4a 82 59 08 ae 46 9d 7d f1 7c 38 14 59 74 87 dc 44 8f 94 2e 1f 38 11 40 56 f0 1d 36 8a 74 83 99 af 1b b7 44 e0 c5 39 15 fc 4e 26 7f 3c 9d e0 ba d9 40 31 c7 b7 de 38 1b 83 f9 fd 2c bd 89 12 39 32 f9 22 4e d0 db ef 93 4d b8 55 99 11 74 a9 76 dc 7b 21 6a ca 21 17 13 5e 35 fa 84 58 4f 7c e0 dc a0 d0 9c ee 20 a5 dc 22 9b 46 34 d7 ce 00 bc 57 1a 3e 9b b2 d9 6b 4f cb 10 96 9c ed 67 0f 1b 5f 09 95 dc 20 70 18 85 b7 0e 3c b3 c2 b7 88 7f 0a c4 ec 5e 78 1f f1 f7 f0 f2 96 70 ae 4f c0 4b 3e 00 53 fb 88 83 75 8e a7 cf 82 e7 f7 0e 65 de e0 cf fb 1f e1 e0 88 dd 4d fb cf d4 d3 aa b8 41 93 e1 43 e8 46 53 Data Ascii: x=0Jo5g`:{7-?`jH_1PJYF}\|8YtD.8@V6tD9N&<@18,92"NMUtv{!j!^5XO\| "F4W>kOg_ p<^xpOK>SueMACFS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49743	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:19 UTC	543	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_NXCGegEOpKB5nrI5GnSS3g2.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:25 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:24 GMT Content-Type: application/x-javascript Content-Length: 122186 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 1702823 cache-control: public, max-age=31536000 etag: 0x8DCC771092FD3BD last-modified: Wed, 28 Aug 2024 14:52:27 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 12101f20-701e-0004-500d-fb0c60000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:25 UTC	13688	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 77 e3 38 8e 38 fa ff fd 14 8e 66 6e da ee 28 2e cb 6f 2b ad ce 3a 4e 52 95 e9 24 ce c4 a9 ea 9e 4d 65 72 64 89 76 d4 91 25 af 24 e7 31 8e f7 b3 ff 00 90 94 28 5b 4e 55 cd ee b9 f7 dc 73 e7 51 b1 48 f0 05 82 20 00 82 e0 87 9f 77 fe af d2 cf a5 fd ef ff 4f 69 74 d3 bf be 29 0d 4f 4b 37 9f ce ae 8f 4b 57 f0 f5 8f d2 e5 f0 e6 6c 70 f2 fd f5 60 a3 f8 ff 9b 07 2f 2e 4d 3c 9f 95 e0 ef d8 8e 99 5b 0a 83 52 18 95 bc c0 09 a3 79 18 d9 09 8b 4b 33 f8 37 f2 6c bf 34 89 c2 59 29 79 60 a5 79 14 fe c9 9c 24 2e f9 5e 9c 40 a1 31 f3 c3 e7 52 19 aa 8b dc d2 95 1d 25 af a5 b3 ab 4a 15 ea 67 50 9b 37 f5 02 28 ed 84 f3 57 f8 fd 90 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 11 b8 2c 2a 3d 3f 78 ce 43 e9 c2 73 a2 30 0e 27 49 29 62 0e Data Ascii: {w88fn(.o+:NR$Merdv%$1([NUsQH wOit)OK7KWlp`/.M<[RyK37l4Y)y`y$.^@1R%JgP7(W0Vj#Yi,*=?xCs0'I)b
2024-09-19 11:52:25 UTC	16384	IN	Data Raw: 96 bb e7 73 16 48 25 4f aa d4 13 b4 93 d2 0d 4b 5b ed ce 21 cd c3 15 5f 9f d8 f9 32 3f 86 d5 17 a2 93 62 1c f9 d2 eb a3 92 63 f2 c9 82 c9 79 6b e5 44 28 34 00 13 8a c7 db b3 d7 e9 2c 0f d8 17 c9 ce 42 6e cc 08 59 8c 42 9f 5b 36 10 8d c4 38 10 1f e2 68 82 e8 92 73 a3 ed 85 98 36 b5 22 4e 8e 33 2b c9 91 d9 c1 c2 8a 77 77 f9 73 0b 20 ab c7 6b a7 e1 da 81 24 3c a8 29 36 df a7 c8 84 77 6b 9c a7 13 41 19 c6 0a 88 83 d3 04 74 51 9f ea 73 7d 06 34 80 c2 06 a0 44 9a 87 9e ac 26 6b ec 8f e5 7c b1 ec b5 f8 07 8b 26 d4 61 9e 5f 96 72 c9 87 a7 8a 7e bf c6 49 f4 81 55 3b 18 fc f2 70 30 90 a6 a5 91 55 43 d7 97 43 4d 33 07 e9 23 84 00 f8 82 87 60 a9 1a 31 f8 f9 49 2f 0f 40 97 f8 19 2a 7d ce 0f 01 3a 6f f1 de 23 2d 8f f4 17 7d bc b9 f8 9e c9 c6 75 90 b5 fb 6a b1 3d b5 41 Data Ascii: sH%OK[!_2?bcykD(4,BnYB[68hs6"N3+wws k$<)6wkAtQs}4D&k\|&a_r~IU;p0UCCM3#`1I/@*}:o#-}uj=A
2024-09-19 11:52:25 UTC	16384	IN	Data Raw: d9 b8 f5 84 6b c5 b6 72 f2 ca fe cc 91 cc 94 ce 3b 80 8a f2 ad 77 6f ce 84 3b f0 be 70 84 0d a5 ce 93 4c 91 07 cb 2d 17 3e f1 c6 35 dd 7d f4 8f bd a6 9c 59 af 9b ce c9 85 af 6c 2b fc 2d 7c c8 a4 37 9b 63 e1 04 9b 52 89 a2 c6 34 d9 02 a5 0a bf 72 e8 ad 53 f8 d7 08 9e 6a fd 58 d6 84 c1 2a fc 7c 91 d6 be 32 66 d3 4f 08 79 6c a2 48 6a 70 d4 49 b5 30 d1 65 65 c9 52 60 2d 02 e8 83 bf d1 92 15 58 4b 84 78 bb c9 8c c6 c3 8e 2e eb 70 45 72 ed c4 8e 58 2f d0 4d 2c ed ec 28 90 58 53 0b b1 a2 a6 7b c7 09 5d 4c b8 07 34 09 6f 42 92 0b 37 2a 80 c7 60 0a c7 ec 41 77 1f c5 d7 a7 70 38 89 c8 97 51 5f 3a 61 46 17 46 ca 5b 28 a5 a0 fb 22 cd 2f 28 a5 7d 29 fc 31 d1 65 25 df 45 ca e1 6e d3 bd 2d 7b 89 3e 41 e7 4a 4a 23 18 12 ce 02 63 90 90 16 8e 46 43 a1 0d f8 ea 61 f9 cb 97 Data Ascii: kr;wo;pL->5}Yl+-\|7cR4rSjX\|2fOylHjpI0eeR`-XKx.pErX/M,(XS{]L4oB7`Awp8Q_:aFF[("/(})1e%En-{>AJJ#cFCa
2024-09-19 11:52:25 UTC	16384	IN	Data Raw: f4 8d 2a 8c bc e3 6a e3 82 6d ce 35 00 fb 2e 6c 41 34 61 52 ac 75 e9 16 e3 40 76 2f f3 4a ae 49 73 ba ac 42 8c cf 2c e1 98 d6 d5 d5 6d 7a 75 65 2d d5 b9 e8 77 43 cd 6e 08 1b fb dc b1 a3 a0 0a e4 51 44 11 93 64 6d 21 05 c2 1b 71 1c 72 8b 0c e8 4c 88 88 16 21 37 8a b7 39 6e 73 f9 c0 ba 4d ad 25 c0 6b 5d 2c 04 3d 29 09 06 7c ce 00 b1 ae 6e 8f 26 e4 5c 58 40 2a b4 1f 61 64 00 a8 91 5c 92 20 89 f5 6b d0 52 d9 f1 6b 87 9a 1b 6d e4 e4 70 c9 e6 44 b2 ce cf cb 1d 2b 36 2a 94 28 3a 24 a1 15 75 e3 3e 19 41 48 34 b6 5d 84 9c 86 62 67 e3 c5 c5 18 10 77 e2 35 56 90 1b 34 c8 41 96 12 d2 96 c4 aa 21 3b 24 e4 30 9d 77 2b 85 a5 b6 17 f7 d0 74 1c 28 8b 31 16 64 15 52 b3 f2 13 f7 5f 35 6e ae 61 b9 97 62 0c 19 a3 5d b2 7e 7a 47 5a de 7c 5e 9c 9a 2c 8f 9a 14 05 f8 43 70 e2 ca Data Ascii: jm5.lA4aRu@v/JIsB,mzue-wCnQDdm!qrL!79nsM%k],=)\|n&\X@ad\ kRkmpD+6*(:$u>AH4]bgw5V4A!;$0w+t(1dR_5nab]~zGZ\|^,Cp
2024-09-19 11:52:25 UTC	2696	IN	Data Raw: 3f 30 3e 5b 6b 10 d1 dc 6b 1b 41 47 2c 7a da 8f f6 38 9b e7 51 6c bf 50 13 57 0f 48 b2 c9 93 71 bc d2 f5 16 c3 86 d4 2b 97 53 ee a7 f0 26 3c e6 48 d2 1d ac 01 88 56 af a6 59 74 f5 f5 cf 3c fe 7e c7 07 af c3 ab 78 59 5f 34 23 d1 3a 8c 62 03 e4 cc 71 0f 91 db 0c 11 93 b8 8e d5 72 79 ca 0d 13 e0 55 45 8a 35 d1 98 b6 fa af 11 7b 29 c1 19 b1 85 08 52 cb 38 e2 36 de 49 42 46 78 ec f2 1a 37 df d4 81 67 71 7b 3c ea f3 d4 01 51 65 32 7f b2 4c d6 1e 3e 46 70 55 b9 e9 3b e6 dc 54 d4 fa 72 52 e8 92 92 e5 a5 a4 5d d6 a5 b9 11 ef 26 16 08 41 e0 ea 2f 49 ee dc a5 2d 4b 5d 36 02 23 3d b2 f9 48 c7 a2 c8 25 a7 ce 92 51 40 ba b6 14 49 87 97 7f a7 74 25 0d 89 c3 3a 46 61 d6 f0 ab fd 71 81 e7 96 84 a2 35 87 1f f6 33 60 9b f8 55 0d 90 a9 e9 0c 80 39 01 9b 8f ec 3d 98 f9 2a a5 Data Ascii: ?0>[kkAG,z8QlPWHq+S&<HVYt<~xY_4#:bqryUE5{)R86IBFx7gq{<Qe2L>FpU;TrR]&A/I-K]6#=H%Q@It%:Faq53`U9=*
2024-09-19 11:52:25 UTC	16384	IN	Data Raw: a5 0b 25 6e a5 61 9f 97 c9 b4 60 74 26 3a 99 19 c6 85 55 5f 58 e7 5f 41 8d ae 8e 26 76 87 ea e2 ec f2 00 ac 75 a8 b5 1b 19 68 2f f3 78 eb 2f ad d8 21 25 5c c3 98 e1 99 b0 39 85 f1 72 5a d2 36 0a 71 32 65 95 96 07 2f ec 8f f8 05 3b 50 d4 eb 14 5c 50 f8 8a 0e 24 e6 9a d5 61 fc ab 9f 79 4f 7c 9d fe 08 20 7a 0d 15 b3 57 d6 18 33 48 16 d5 ae 17 92 a5 e4 4c 5b 96 a0 ab e0 7e 33 a4 96 cc 46 74 c4 94 a1 f3 85 f6 dd c2 3b 97 05 47 eb 84 4e c2 13 7d 51 cb 6e 8a 57 6f 00 a6 fb 05 31 3f fd d9 08 ec e7 d3 a7 87 e6 4d dc e3 ea f4 60 4e fa bf c2 3c 7d de ae 6e 66 cc fd b1 ab 6d a8 65 c0 8c 83 36 9d 96 2f 93 41 49 95 89 b3 54 7a 5a 9e 51 6d b5 24 49 31 bb 91 f1 93 4d b1 04 75 f0 e5 48 47 6e af 4a 56 d2 81 30 7b b6 d6 89 1d 6f bd 91 ca 3e a6 f9 bd 94 46 23 58 bd f1 ce b1 Data Ascii: %na`t&:U_X_A&vuh/x/!%\9rZ6q2e/;P\P$ayO\| zW3HL[~3Ft;GN}QnWo1?M`N<}nfme6/AITzZQm$I1MuHGnJV0{o>F#X
2024-09-19 11:52:25 UTC	12576	IN	Data Raw: 2c 42 87 d9 71 ec 8b 84 fb d0 cf 25 38 9f e0 59 c6 60 0f 30 9f 8b bb ed 9d ae 76 63 34 23 2e 03 99 d9 0c 8a 11 63 91 ef 01 07 b9 ed 26 50 25 22 37 13 71 b2 17 cd c8 8d 52 3f 84 61 11 b2 3c 11 31 90 5c 0a e1 c4 b0 99 c2 0c 13 c9 83 2c de cf 98 8c 66 24 c2 c0 8d 58 16 07 6e 1e ba 31 e3 10 19 8e 27 c1 c4 b3 dc 95 a1 b3 17 13 c0 8d d3 10 dc c7 0f a4 13 e6 19 83 70 cf 61 63 a8 1d 5c 06 3d c9 8e 83 fd 88 0c a3 19 25 9e 4d ca 7f 00 2d 56 86 30 3a c1 23 68 7b 1d 0c 29 74 6c b1 27 26 9b a4 36 54 70 91 39 42 72 d8 d3 41 90 67 44 44 89 e7 48 d8 51 5e b2 9f a9 33 ac 3c 70 93 d8 83 10 b4 21 8d c2 2c c9 42 0f b8 97 7b 5e 1c 46 89 f0 d9 5e 86 e4 41 d7 0b 32 b0 bd d0 91 40 3c f4 14 09 30 59 28 7f d0 6a 81 8a fb e1 e4 66 37 2e 4d 1c 99 31 16 42 72 84 21 90 23 b1 23 f0 d5 Data Ascii: ,Bq%8Y`0vc4#.c&P%"7qR?a<1\,f$Xn1'pac\=%M-V0:#h{)tl'&6Tp9BrAgDDHQ^3<p!,B{^F^A2@<0Y(jf7.M1Br!##
2024-09-19 11:52:25 UTC	16384	IN	Data Raw: d6 0a 92 52 37 ca 09 79 b4 91 fa d6 fc eb eb 1b 1c 2a e3 d4 27 20 a0 b7 ab 9d 57 ba 73 54 df da fd da 96 86 76 8a f4 26 31 2b 8e 6f 00 08 38 71 ff 44 6c 87 63 f4 b0 d0 d9 12 a1 b8 c1 9e 51 db b4 8a ad 43 91 1f 1d 15 b4 39 55 68 2f c3 0c 7d f6 0f f6 53 43 2d 7a 87 da 3e e5 d1 83 14 2b 4c cb 98 ae 3f d0 a6 7b c1 55 78 dc 50 d6 d4 8e 71 d6 ef 75 8e 32 39 1a d5 f1 ba 83 d9 15 9d 05 69 19 6c 0f e5 11 df 70 d8 84 62 44 35 d9 2a 00 87 83 d6 b7 6a 60 7d 38 79 72 54 58 3a 78 a9 b8 90 47 4d df 8f af a0 14 ce ea 2c 40 96 02 e1 68 b6 0c 32 7a a2 62 18 ef e2 3e 6f 56 77 65 da b7 b1 15 7d 80 6d b8 20 42 2e 2a 02 e0 e5 9c 41 45 a1 8f 14 c6 36 b2 56 31 af 67 ab 68 7d fe 67 93 19 98 c6 26 6e b0 aa 82 76 03 14 5b 8e fa 1e 0c 31 2e fb e3 e1 82 9c 0c 10 75 8b 3f 6f e6 e2 17 Data Ascii: R7y' WsTv&1+o8qDlcQC9Uh/}SC-z>+L?{UxPqu29ilpbD5j`}8yrTX:xGM,@h2zb>oVwe}m B.*AE6V1gh}g&nv[1.u?o
2024-09-19 11:52:25 UTC	11306	IN	Data Raw: 18 fd 67 3b 51 7f fe 94 b7 49 ff e8 ed 9c 92 44 91 f5 46 89 1e f0 d3 49 6e 0e 2f 63 74 95 c7 3d 79 c5 76 dc 26 1a 6c 18 ab e0 3e 41 0d b7 15 b2 60 8b a2 04 1d d6 56 c4 09 fc 6c 18 d0 70 db b1 0f d6 0c 64 f8 40 e2 45 a5 e9 07 08 60 f8 a7 13 33 7e 97 41 dd 21 1c de a6 e2 46 6d e9 1e 22 60 e1 9f 20 58 e1 1f 1f a8 f0 ae 82 e0 3a e5 ff d4 91 43 aa b7 13 29 00 69 94 fd 84 a0 c5 ea a9 e3 b7 f8 74 94 a6 a1 f6 c5 90 64 97 8d c4 93 16 07 80 a2 c7 eb 65 b1 5d 5e c3 86 e7 ef 2d c3 4a b2 16 c5 4d 0f 1e 17 cc 73 a2 39 df 3e e4 c9 ce c5 f9 35 1d c5 f5 f2 c1 55 88 fb c0 5c 1d f7 e5 8e 20 7f 88 a0 28 8d f8 85 16 4b 24 d2 2d 84 82 a1 6d 62 54 b0 33 ba ad df 37 ca 4b e3 20 1e 48 64 be 3b 98 ee 22 2f d2 e8 69 42 4e bc 97 d4 b8 8e 78 56 37 b2 df 5b 76 5c bb c9 0d a5 be 3f c4 Data Ascii: g;QIDFIn/ct=yv&l>A`Vlpd@E`3~A!Fm"` X:C)itde]^-JMs9>5U\ (K$-mbT37K Hd;"/iBNxV7[v\?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49744	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:19 UTC	708	OUT	GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1 Host: adobe-esign.carner.com.co Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://adobe-esign.carner.com.co Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1 Sec-WebSocket-Key: QrDGCXFU1G8Z/jng4nv/MA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-19 11:52:23 UTC	738	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 19 Sep 2024 11:52:23 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: aeeffb98-2a3f-4592-ba77-f8d6b7ec1200 x-ms-ests-server: 2.1.18947.4 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:52:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49745	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:24 UTC	525	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:29 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:29 GMT Content-Type: application/x-javascript Content-Length: 61137 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15412797 cache-control: public, max-age=31536000 etag: 0x8DB5D44A2CEB430 last-modified: Thu, 25 May 2023 17:22:37 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2230c8de-b01e-0020-515c-7ecb15000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:29 UTC	13688	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c 60 9a 94 97 38 a4 11 5e 59 a2 6d 26 da a2 25 4e 46 d6 e8 40 60 4b 82 4d 02 0c 00 4a d6 48 fc ef 4f 55 f5 8e 85 92 92 dc f7 be 27 b1 08 34 aa f7 ea ea ea ea 5a dc 9b 38 19 a7 37 ed 82 4d d8 94 15 d9 ed d9 0d 3b 9f 85 d1 d7 9f f2 34 99 05 4b bf de df 9f 9c 7a ed d9 3c bf 72 4f 4e d6 4f fd 13 df f7 2f e6 49 54 c4 69 e2 32 bf f0 13 ef ce 99 e7 ac 95 17 59 1c 15 4e 3f 69 67 6e e1 f9 49 7b ec 16 be f3 6b 38 99 b3 9f a1 02 c7 77 55 36 ef 2e 63 c5 3c 4b 5a 59 9b 2d 3c 05 3b bc 66 49 b1 1d 16 2c 89 6e 1b c0 c3 32 f8 3e cb f2 38 c7 2c ac 21 cb b9 91 e5 28 0b 23 b6 cd ae d9 a4 01 78 6c 00 6f cc 66 a3 24 8f 2f af 8a 7c 33 cd ea 8b 8f ad 16 bd 0b 73 d6 08 6a 16 7d 36 fc 06 4d 1e b3 f1 28 Data Ascii: iwF0'W`8^Ym&%NF@`KMJHOU'4Z87M;4Kz<rONO/ITi2YN?ignI{k8wU6.c<KZY-<;fI,n2>8,!(#xlof$/\|3sj}6M(
2024-09-19 11:52:29 UTC	16384	IN	Data Raw: c1 07 b6 8c 89 f8 6d a9 de c4 c3 d4 8f 33 8a 19 bb 8e d3 79 ce 49 60 1e 17 a5 33 ad 14 7b c5 66 ba 2d a9 e2 ce 34 2a 3c 9f fa 06 b4 fe d8 f5 24 ad 56 dc 13 1e 75 81 68 ff 8a 41 50 66 d0 0a d5 02 12 4f 02 ef 52 72 da 01 64 d4 dc a3 c9 67 07 29 32 a0 8a 5c 7b 26 73 23 c5 0c 92 67 4c a7 1c 2a 42 fa ae a1 2e 65 59 91 18 2c 35 f3 28 e2 52 91 ce 24 7d 00 f8 16 79 c2 13 5c b5 c1 3c 13 8b 9c a0 1c 8a fa ad e6 0c e7 c9 1e 38 73 44 b8 78 bd 69 04 4a 1e 09 36 c3 04 8f bb 18 de 92 47 e6 55 e0 e8 9e 20 67 d1 bc 80 45 36 b9 55 87 da 8b 38 cb 39 3c d2 b8 1c 3a a2 72 38 ca 51 19 d0 bc 9f 18 d7 c5 8f 97 38 44 e9 bf af 6f 24 2a 2e d7 1c 47 f8 d8 6d 62 53 d1 83 15 c5 11 ae 1f 33 0a dd 4b f5 3f 58 4c c6 1e 28 c8 cf ac c1 cf 16 84 c2 a8 53 93 60 40 4d 68 38 e9 2f f0 c7 e3 6c Data Ascii: m3yI`3{f-4<$VuhAPfORrdg)2\{&s#gLB.eY,5(R$}y\<8sDxiJ6GU gE6U89<:r8Q8Do$*.GmbS3K?XL(S`@Mh8/l
2024-09-19 11:52:29 UTC	16384	IN	Data Raw: a5 ec 74 ac 3a 9d a2 d3 74 ad b2 d8 8d e1 0a f5 cb 1a c3 00 d7 c0 ab b8 33 a0 4e 0e 64 0f dd 8c 6e 02 35 c1 29 cd ee a0 c7 56 07 0b fd 34 95 d7 7e 7f b2 9f 19 cb 5f cb ae 8a f7 da de 32 c0 d7 5a 4c 12 e4 6f 79 59 a9 d9 74 b1 d9 13 1a 77 1c e8 3c 7d 05 cb 06 39 b5 5e c7 a3 a9 ee 60 c5 e8 b7 37 57 25 28 59 0f 2c 28 dc cc e7 60 62 29 86 04 93 9a 9a b1 fc b2 60 45 3b 64 f7 02 84 ec 76 c5 0f 41 81 88 91 8a ae f8 71 9f fd df 3f f3 f5 19 fd ff 13 61 a0 69 83 80 18 e2 7b 33 d4 ff 77 b0 fa 4d 61 b2 c2 2d b2 76 73 72 98 1f 10 8c 8d 32 b0 96 5c 47 15 72 3c ff b7 e0 a2 7c f5 99 97 34 08 c7 91 4e 60 7d 18 30 bf 1c 5b 26 4f 09 71 6e 60 b8 0e db 5e 2d b4 e5 d8 00 b4 57 de 2e 7f 94 a0 4a 2b 04 01 af 15 40 94 f0 38 7e f8 ba b6 26 b4 87 80 69 6a a1 f2 c0 63 d5 58 c8 d1 57 Data Ascii: t:t3Ndn5)V4~_2ZLoyYtw<}9^`7W%(Y,(`b)`E;dvAq?ai{3wMa-vsr2\Gr<\|4N`}0[&Oqn`^-W.J+@8~&ijcXW
2024-09-19 11:52:29 UTC	14681	IN	Data Raw: 78 13 e1 92 e2 3d a5 30 e5 4a 6f d9 98 ae bd 35 67 bd 60 dd 06 3a 84 7b ae b3 37 2d ae 3f e6 a1 60 bd 9e c5 83 9b 08 6a d4 b5 a9 88 eb 48 5f 0c c6 31 ad f8 86 14 0f 50 e1 4a 82 59 08 ae 46 9d 7d f1 7c 38 14 59 74 87 dc 44 8f 94 2e 1f 38 11 40 56 f0 1d 36 8a 74 83 99 af 1b b7 44 e0 c5 39 15 fc 4e 26 7f 3c 9d e0 ba d9 40 31 c7 b7 de 38 1b 83 f9 fd 2c bd 89 12 39 32 f9 22 4e d0 db ef 93 4d b8 55 99 11 74 a9 76 dc 7b 21 6a ca 21 17 13 5e 35 fa 84 58 4f 7c e0 dc a0 d0 9c ee 20 a5 dc 22 9b 46 34 d7 ce 00 bc 57 1a 3e 9b b2 d9 6b 4f cb 10 96 9c ed 67 0f 1b 5f 09 95 dc 20 70 18 85 b7 0e 3c b3 c2 b7 88 7f 0a c4 ec 5e 78 1f f1 f7 f0 f2 96 70 ae 4f c0 4b 3e 00 53 fb 88 83 75 8e a7 cf 82 e7 f7 0e 65 de e0 cf fb 1f e1 e0 88 dd 4d fb cf d4 d3 aa b8 41 93 e1 43 e8 46 53 Data Ascii: x=0Jo5g`:{7-?`jH_1PJYF}\|8YtD.8@V6tD9N&<@18,92"NMUtv{!j!^5XO\| "F4W>kOg_ p<^xpOK>SueMACFS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49746	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:24 UTC	750	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:30 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:29 GMT Content-Type: application/x-javascript Content-Length: 116416 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2937654 cache-control: public, max-age=31536000 etag: 0x8DCBD52F37806EC last-modified: Thu, 15 Aug 2024 17:51:54 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: dc60e1c5-f01e-002e-04d2-ef983b000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:30 UTC	15633	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-09-19 11:52:30 UTC	16384	IN	Data Raw: a2 97 cd 29 29 03 ea 05 4e c3 14 87 cf 25 9f 06 89 62 83 d2 69 40 0d 94 38 97 2e b9 5d 64 07 33 bf dd c8 ee 45 4a 52 d5 f8 7e 07 89 5c 75 9d ef 94 d8 ed b0 74 13 fe 78 f8 27 82 3f 25 f6 32 93 2c d8 e4 b1 28 a2 61 b7 30 1d dd a7 e3 20 b1 bb af 8f 4c fe 53 6c 2d 68 a7 d2 b8 c7 ee 86 f0 3e f2 dd a8 e7 ef a7 14 1f 9d 32 10 24 cc b7 a0 16 34 c0 de c0 ea c6 70 1c fc 8d b1 e8 a9 78 02 13 31 76 7d 8b c1 e3 a6 ad d9 49 d7 c6 3f c5 b4 e5 37 d0 42 11 8b f9 1b 2e 7e cb b0 b9 dc 00 3a 6a 7a 07 a9 f0 88 dc f0 48 58 d2 f3 d1 f3 c9 df d8 c8 35 bb 53 d4 c7 4e e0 e9 64 df eb 4d b4 de 35 91 e4 a6 fe 4d a0 53 53 44 3f 22 e5 2d 5a b0 e5 49 47 d5 ec e5 53 75 95 33 b9 91 2b 94 94 70 e6 d1 c0 5a 28 7c b2 73 0b 74 1c 82 16 59 04 16 e9 20 a4 40 70 21 f2 92 a1 88 bf 5c d8 26 fe 9f Data Ascii: ))N%bi@8.]d3EJR~\utx'?%2,(a0 LSl-h>2$4px1v}I?7B.~:jzHX5SNdM5MSSD?"-ZIGSu3+pZ(\|stY @p!\&
2024-09-19 11:52:30 UTC	10631	IN	Data Raw: 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 0f f9 77 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 af be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 e3 c7 01 cc 63 fd e7 fc 63 3e 06 6a 35 fc f8 11 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c b8 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 5e a0 b7 4f f0 f1 eb 15 f7 97 49 1a 67 29 5a 32 4a cf 61 c8 54 80 4c ea 3b e3 a2 98 e6 fe c6 c6 65 5c 8c cb 0b Data Ascii: B\|B4PTmZTowOq3t0!}]GBMOADfv&(t;bTeI0s8s8fnEZ-=cc>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9^OIg)Z2JaTL;e\
2024-09-19 11:52:30 UTC	16384	IN	Data Raw: f3 4c f9 94 64 f3 a3 40 e7 bb 79 30 ce cd 05 80 30 9b 53 05 38 df 36 8a c6 b7 ca 47 0d d9 5e 14 e2 61 24 df 56 e6 10 16 d5 e1 17 c4 d8 16 07 f3 ab 65 7f 9b 9e f4 8a 7e 67 8e 34 bc 49 57 a2 49 84 5e 95 2b 04 22 20 45 17 77 48 1a 2a df 16 e7 df 22 8f 12 f1 6d 1e a9 45 34 5f 2a f8 83 bc 5a 7a 50 26 cc c2 ed 24 2d 1b f7 33 bd 9f 63 57 da 12 8d 71 02 3c de c5 57 51 5a 16 98 4a 82 20 45 b9 24 54 c6 ba 59 85 1e 54 de 1f 4c a2 30 5b b6 07 59 d5 1d 7d e3 f4 87 55 f8 9b ba 03 f3 69 71 31 08 5b c6 0f 0f ab e8 35 35 ff 46 66 f4 c2 aa af 1b a6 d6 8c ee 18 16 55 e3 11 47 2f f2 0f b7 1b d9 0d 84 df 29 34 98 cd 56 8d c5 a2 ae ea 5c 10 f5 70 ba fa a7 1f 1b 89 6c 82 78 46 c9 f8 eb de 36 c1 da 35 2f fc 5c f7 90 00 0e cc 84 89 36 84 63 11 cb 5c a1 bf d9 24 58 6f eb 65 1f a3 Data Ascii: Ld@y00S86G^a$Ve~g4IWI^+" EwH"mE4_ZzP&$-3cWq<WQZJ E$TYTL0[Y}Uiq1[55FfUG/)4V\plxF65/\6c\$Xoe
2024-09-19 11:52:30 UTC	16384	IN	Data Raw: d3 c3 43 b5 22 16 32 45 9a 49 16 76 1f fb 4d 80 5c d5 6d 06 8f 55 1b 22 62 f7 51 d9 f4 06 0e e7 44 5a 0c 78 2f 96 1a 8c aa 25 1c 18 1b 00 cb 1d f1 47 89 5c a6 04 cb 4b 63 b9 07 0f 5b 97 bb af d7 bb ff d8 8f e4 93 7a c5 55 23 2e 1f d4 56 7c 40 2b de 33 57 bc 4f d9 d4 96 e3 65 e5 45 49 94 78 eb 3e f4 fc a9 ec c4 e0 a1 fa 62 7f 60 7d f1 91 2e df b7 ca 1f 07 ca e1 ae 3a 68 bb 8a f3 6c 6e c7 3c ac 9f ca aa b2 2f b3 39 e8 f9 e7 6d c7 f0 da 3a 86 9b ce 5c 5a 3f 73 29 f7 9c da 67 0e 01 0b 53 7d 8a 25 72 9f e2 8d 8f f7 27 18 7c 04 c3 86 ce 9a 77 30 50 5f d2 57 df b7 88 77 31 9c be 49 e5 cc d8 7b 8c 56 d1 cc 07 ad 21 15 b7 50 9a 3b 53 14 2a 71 43 d2 d3 23 5f 11 64 64 44 23 fb f4 28 90 d7 bd 9e b9 1d 8f 55 60 72 fd d6 cf e1 ce a8 3a d6 27 56 55 38 b4 0e db 40 e0 4a Data Ascii: C"2EIvM\mU"bQDZx/%G\Kc[zU#.V\|@+3WOeEIx>b`}.:hln</9m:\Z?s)gS}%r'\|w0P_Ww1I{V!P;S*qC#_ddD#(U`r:'VU8@J
2024-09-19 11:52:30 UTC	16384	IN	Data Raw: 2f 9d e0 4b e7 4b ff ce 15 7c df b6 7e 9d 5e b5 82 62 71 fb 4b 16 b0 31 f1 67 e1 1b 95 1d 88 52 88 ba af c3 67 95 2f d2 93 fd 91 fb 32 fc 6b e7 b5 ff 16 00 fb d9 f8 f5 44 61 82 00 cb a1 f4 5b cf a7 c3 c0 43 6a df 92 97 b0 42 6f 27 80 c9 de 02 22 7b 89 2b 65 2e d4 a7 e0 a4 4a 65 8a 13 f5 4f 78 13 be f7 60 ad 10 b5 1a ef 47 df eb c1 99 cd ba 7d 1a 85 52 02 df 05 19 e6 e7 93 00 57 11 56 d8 ff 19 65 49 36 8e e8 a8 a5 24 14 02 15 7e a6 08 3a 61 a3 96 ff f3 ce 4e ce 61 93 72 3e 44 39 1f a2 9c 0f 11 fe 59 f0 1f 38 4b 2e 75 f7 5c a6 a9 02 15 02 46 12 79 ef b0 f1 0a 01 82 47 d1 3a c2 48 fa f4 56 b8 0c 9f b3 06 4a f3 8d 30 5a b4 a0 5e 28 3e 1d 91 30 d9 3e e5 0f f6 f0 28 f5 3d a8 02 df 46 30 1d 7d d0 97 56 00 40 aa b8 09 af e5 b4 fd 46 40 a7 3e a1 8f 62 13 d0 a0 c9 Data Ascii: /KK\|~^bqK1gRg/2kDa[CjBo'"{+e.JeOx`G}RWVeI6$~:aNar>D9Y8K.u\FyG:HVJ0Z^(>0>(=F0}V@F@>b
2024-09-19 11:52:30 UTC	16384	IN	Data Raw: 17 c7 08 d5 f1 7d 37 7e 3f 79 d1 15 fa 55 9f f5 f8 db 28 bd 24 07 62 79 0f 7d a1 88 4b 32 8f a0 de 87 8e 40 a3 46 46 a4 0a 68 d0 03 5a 68 86 ea 3c 51 b2 1b da 16 48 a1 51 91 ae 1e 8d 23 a3 15 a4 2c 78 33 b6 6c b0 0e 19 22 a6 f2 e2 b0 da 0a 6d 11 d0 b3 ef b7 2d 64 6e d7 a3 da 92 45 1a f4 4e 74 b8 f9 84 fc 29 60 e5 92 28 60 c9 50 5e 8e 3a b8 6a 2d 1b 7f 52 ba c5 50 34 40 ee f2 27 dd 62 30 b5 61 4f 72 31 24 94 e2 21 ff f8 5e 2c f3 bd 58 ab 1f 0a 03 33 b4 ee 22 03 b3 43 11 2a b0 56 3f e2 06 66 8d 6a 59 18 98 a1 e8 62 22 77 f9 1d bd 25 0c cc d0 5c ac 64 bb b4 73 c9 c8 8c ec d4 6e a8 4a 8d db 98 d5 b1 43 dc c6 ac 81 36 66 37 ba 36 21 5d 02 da 99 e1 c4 0c 2f 1e a7 ec d6 54 ed bf ce e1 c1 cd cc 0d ad 47 6e f9 f5 01 88 ae 5b 91 6f e3 1a ae 95 fc 1c 9f f9 ad 6f 4f Data Ascii: }7~?yU($by}K2@FFhZh<QHQ#,x3l"m-dnENt)`(`P^:j-RP4@'b0aOr1$!^,X3"C*V?fjYb"w%\dsnJC6f76!]/TGn[ooO
2024-09-19 11:52:30 UTC	8232	IN	Data Raw: 61 85 6f 9d 67 ca d1 a2 2d dc e2 23 79 bb ec 9b 42 e6 0b 8f 59 0d ef 4e 87 38 24 80 89 c8 67 e3 7b 80 3f b8 8e 16 f4 0b a3 23 8a a5 b4 d0 1f 0f d1 72 ec a8 11 b3 f1 ca 72 46 b5 b8 fa b3 5c 61 95 e1 8d 4a b0 0c 02 46 17 90 eb ae 0a bc 57 09 96 41 93 18 2d 88 f5 d7 2d a8 04 cb c0 fe ba 00 31 61 32 f3 8f f4 62 09 84 55 cc 54 e8 c6 8f 2a c1 32 b0 9b d1 0d 8a c0 26 bb 40 2f 96 c0 44 66 5f 79 3f 19 7d 95 09 96 01 e7 75 01 de 5c 2a fb 91 78 b5 14 2c 2e 67 e5 5d 57 2a 20 12 f5 e0 60 17 ea 81 d1 8b 25 a0 9b c5 3e fb 30 57 9e fc ed e8 f5 ab ca f8 52 62 5f 99 87 7c e1 b8 37 25 07 4b aa 9e 3b 22 7f 3d b0 26 e1 1d f5 49 ee 3f 6d 0d d3 10 80 22 db 06 a2 ae fa 2b 4c 4c c3 8b e4 93 4e ec 3d 41 8f 55 f6 0b b4 ab 2b 66 47 bf a1 4f 72 a8 d0 81 82 32 4f a9 34 e6 79 45 79 16 Data Ascii: aog-#yBYN8$g{?#rrF\aJFWA--1a2bUT2&@/Df_y?}u\x,.g]W* `%>0WRb_\|7%K;"=&I?m"+LLN=AU+fGOr2O4yEy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49747	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:24 UTC	843	OUT	GET /Prefetch/Prefetch.aspx HTTP/1.1 Host: 3008d61a-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:28 UTC	487	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 19 Sep 2024 11:52:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache x-ms-correlation-id: 9631c8a4-002e-4b47-90f1-af3cccb54d1d x-ua-compatible: IE=Edge x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 29BE412393BE446BB955B74C3B55BE5C Ref B: TYO01EDGE3917 Ref C: 2024-09-19T11:52:27Z access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:52:28 UTC	1252	IN	Data Raw: 34 64 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 Data Ascii: 4dd<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404
2024-09-19 11:52:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49748	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:26 UTC	794	OUT	GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1 Host: adobe-esign.carner.com.co Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://adobe-esign.carner.com.co Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0 Sec-WebSocket-Key: 6fhOxwY6XKyk7mE5U25Exg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-19 11:52:30 UTC	741	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 19 Sep 2024 11:52:30 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 97e41d41-c574-454d-8b9d-6d51cc852500 x-ms-ests-server: 2.1.18947.4 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:52:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49750	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:31 UTC	752	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:35 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:35 GMT Content-Type: application/x-javascript Content-Length: 5537 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2614932 cache-control: public, max-age=31536000 etag: 0x8DCBD52F3A242D0 last-modified: Thu, 15 Aug 2024 17:51:55 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 76fa0529-701e-0004-5dc2-f20c60000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:35 UTC	5537	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 5b 7d 77 da 46 d6 ff 7f 3f 85 d0 ee 21 d2 66 2c db 4d db b4 72 55 1f 87 97 84 d6 8e 5d 83 db cd 26 39 1c 81 06 50 2c 24 55 23 6c 53 c3 77 7f 7e 77 46 42 02 04 76 fa 6c 4e 6c d0 cc 9d 3b 77 ee dc f7 2b 1f fe bb f6 0f ed df da c1 f3 ff 69 dd de d9 75 4f bb 6c 6b bd 77 9d eb a6 76 85 a7 0f da fb cb 5e a7 d1 7a 3e 1e da 94 7e 7a 13 5f 68 23 3f e0 1a 3e 07 ae e0 9e 16 85 5a 94 68 7e 38 8c 92 38 4a dc 94 0b 6d 8a df 89 ef 06 da 28 89 a6 5a 3a e1 5a 9c 44 5f f8 30 15 5a e0 8b 14 8b 06 3c 88 ee 35 03 e8 12 4f bb 72 93 74 ae 75 ae 4c 0b f8 39 b0 f9 63 3f c4 ea 61 14 cf f1 7d 92 6a 61 94 fa 43 ae b9 a1 27 b1 05 78 08 05 d7 66 a1 c7 13 ed 7e e2 0f 27 da 85 3f 4c 22 11 8d 52 2d e1 43 ee df 61 13 31 c3 f8 fa 16 4c 73 13 ae 09 9e 6a a3 Data Ascii: [}wF?!f,MrU]&9P,$U#lSw~wFBvlNl;w+iuOlkwv^z>~z_h#?>Zh~88Jm(Z:ZD_0Z<5OrtuL9c?a}jaC'xf~'?L"R-Ca1Lsj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49751	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:31 UTC	800	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:35 UTC	672	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:35 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15412844 cache-control: public, max-age=31536000 etag: 0x8DB5C3F4982FD30 last-modified: Wed, 24 May 2023 10:11:48 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9cb53085-801e-0017-755c-7e3b0a000000 x-ms-version: 2009-09-19
2024-09-19 11:52:35 UTC	2679	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2024-09-19 11:52:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49749	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:31 UTC	794	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:35 UTC	672	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:35 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15412813 cache-control: public, max-age=31536000 etag: 0x8DB5C3F492F3EE5 last-modified: Wed, 24 May 2023 10:11:48 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8e462356-901e-0066-715c-7ee208000000 x-ms-version: 2009-09-19
2024-09-19 11:52:35 UTC	3627	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2024-09-19 11:52:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49752	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:31 UTC	566	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:36 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:36 GMT Content-Type: application/x-javascript Content-Length: 116416 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2937660 cache-control: public, max-age=31536000 etag: 0x8DCBD52F37806EC last-modified: Thu, 15 Aug 2024 17:51:54 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: dc60e1c5-f01e-002e-04d2-ef983b000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:36 UTC	13688	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-09-19 11:52:37 UTC	16384	IN	Data Raw: f1 cb d1 df 8f 3e 5e 38 b7 ec fc d3 eb 37 ef 0f cf cf 8f 3f fe ec 3c bc 24 10 5f 29 d1 ac 8a ee ba db 25 e5 ab 50 63 3c 93 d3 2d 17 22 03 0f 74 1d 67 12 e4 62 f4 5b 83 5e a2 dc 26 95 e0 50 3c 40 7d 21 a6 7d 4d 50 1a 17 a0 71 f6 da 88 25 cf e4 b3 57 08 01 8c 59 99 84 32 c1 a0 a0 71 59 84 ff 4a 93 66 2c f2 1d 33 b6 55 56 57 a3 45 09 9d bd 2e 05 05 7c 3e 45 8e 62 0e 51 09 8d fb 09 e5 9d ca a8 1c 09 d0 44 8b 2d 23 fd fd 87 a8 2a 44 a9 2f e5 4e 13 ab 43 82 61 0d e5 60 54 44 fa b4 10 45 4f 94 fd 6f 6c 4b 46 0c aa a1 7c 3e 20 9e 36 41 15 5a 2d e2 43 0e 47 27 32 9e 5d 80 4c ce f3 ff 97 b0 71 ff d7 02 c5 14 77 88 2e a7 5c e1 4e 96 47 99 f8 de d0 20 df 11 14 84 fa 52 11 17 a4 32 92 1d 15 fe fd 11 42 8a 23 5d fc 27 a0 ce 1f 1c 50 07 f5 59 40 8e 78 7f 54 40 9d 74 65 Data Ascii: >^87?<$_)%Pc<-"tgb[^&P<@}!}MPq%WY2qYJf,3UVWE.\|>EbQD-#*D/NCa`TDEOolKF\|> 6AZ-CG'2]Lqw.\NG R2B#]'PY@xT@te
2024-09-19 11:52:37 UTC	16384	IN	Data Raw: 21 d6 55 2b 8c dd 61 58 a2 a0 98 c3 8f c7 00 a2 b1 60 bd 6d c3 85 f1 30 39 03 2e 39 87 8b 8e cc 32 c1 92 d3 39 b6 8d 45 23 4a af 0a 87 1c e0 c0 b6 77 49 49 41 cf a2 2e 9c 4c 3e b2 72 58 bb 38 46 3e 94 18 bb 88 ae f0 20 50 be 85 04 e7 5c c3 d9 00 67 f4 f0 c0 bf f4 f0 d0 e2 e5 18 da 5c 2b 82 1e 7f 09 1e c1 f8 23 6b b4 4d b0 93 d6 4a a8 1f 9d 0b a4 4a 4e 78 e1 68 c0 9b 25 86 ec 18 7c d9 06 6f ce 16 45 ea 47 07 2d 2b 5d 58 23 22 65 94 f1 26 16 c3 50 3a f0 cc dd 6f 6d 7e 36 0b fb d2 ec 67 10 bb 40 0d 5b 58 1d 0d 16 51 5c ec 99 6a d4 f8 89 6a d4 bc 76 bf cd eb 17 51 e7 c1 2b 4f 25 e6 fd 8c 67 e6 89 51 d2 ca 51 93 c0 2d 8d b9 cc 03 98 4b 6e 3d 26 c1 ad c2 de e6 5f c6 ad ff 4b ad 18 f3 a6 b3 3f a4 21 e3 5f 0a e3 10 60 82 8e 61 00 e2 5f 05 b6 ca d1 7d 4e cb 9f 8a Data Ascii: !U+aX`m09.929E#JwIIA.L>rX8F> P\g\+#kMJJNxh%\|oEG-+]X#"e&P:om~6g@[XQ\jjvQ+O%gQQ-Kn=&_K?!_`a_}N
2024-09-19 11:52:37 UTC	16384	IN	Data Raw: fd 91 e5 c1 2f 65 84 ad 7d 69 80 14 7c ed 1e 9e 87 25 ad cc 2e 3f 3c f7 a5 4a 7e 7f 4b 54 c5 dd c3 3d 33 09 50 29 85 fa 18 90 94 87 c7 13 38 e9 81 10 27 4d 63 b4 70 9c 26 cd 17 61 11 fe 18 47 37 70 a4 26 4d 05 3c 38 50 d5 19 70 1d 8c 0d 98 5d 06 53 e3 ea 0a e0 71 2d d0 80 5d 00 c7 75 cd 9c 2c ca e3 5f 50 37 21 61 ca 6e f8 83 ab f0 f6 f9 1c c0 81 43 49 dd 4b 74 98 7e 95 14 30 ee 73 ba cc c5 a5 b1 88 2e 1c 22 03 d4 a7 d5 29 60 19 66 88 2c 10 56 91 25 b5 a4 3e 9e 14 30 85 d5 0b 38 82 2e 84 df 64 69 af e1 d0 5e c3 38 47 7d 3e 96 6c 18 f2 78 89 11 79 1b 60 51 f1 fb 22 0b 93 1c 1a f9 bd a2 8f 49 05 d1 63 17 63 b3 1e 1e ae cd c2 9f 68 00 3f a4 27 ab fc 51 12 90 06 9a c5 46 5a c1 4b 0c 5c 5d 05 ae f2 a6 7b 6f 81 c6 47 35 e4 cc 28 58 9a 10 11 1a bb 31 bb d4 94 e9 Data Ascii: /e}i\|%.?<J~KT=3P)8'Mcp&aG7p&M<8Pp]Sq-]u,_P7!anCIKt~0s.")`f,V%>08.di^8G}>lxy`Q"Icch?'QFZK\]{oG5(X1
2024-09-19 11:52:37 UTC	2696	IN	Data Raw: 4d 15 d4 b9 3e f1 68 8f 62 0e 8b f8 b3 27 ab d4 66 5d 68 53 ff 15 81 b5 5d 55 20 09 80 79 f9 2c b5 dd 7d 4d 8f 16 5b 1c 43 bd 59 a4 3f 55 ab 65 a8 2a 63 bd 30 ff 76 f2 ea 7b 43 81 82 b1 7a 36 9d 36 c5 de 9b c7 6e 8e 61 c8 cb 00 4e 9d f9 45 89 67 13 c6 c2 1d d8 01 ea d5 4e 22 4a c0 85 4c db 22 62 10 c3 52 66 5b 58 b9 ed cb f8 c9 dc fc 64 65 57 a6 03 f9 1b 37 ab 05 0b e6 25 50 87 cc 6a b5 8c 32 a1 d0 6a c5 c3 8a 6a 76 b3 70 e6 12 e0 65 ea fe d1 b3 cc 38 c6 bf f2 8d 94 bb 7d 93 07 d4 f6 36 e5 d4 11 ec 8b 8e 0b 82 70 11 e2 2a d3 f9 4a 44 b9 41 2c 6f df 98 6e d3 d8 61 f3 fb 2a fe 81 4a 73 6b 72 56 c0 4f 15 54 e6 17 bf 05 67 75 ed 5f 9b b6 d7 d7 f7 66 b4 1a 8c 15 43 db cd ca e8 dc c4 17 e9 b8 c4 a8 31 f8 87 b8 85 16 e1 73 23 e6 0d fa 1e d8 bf 10 c5 ac ee 9f 8a Data Ascii: M>hb'f]hS]U y,}M[CY?Uec0v{Cz66naNEgN"JL"bRf[XdeW7%Pj2jjvpe8}6pJDA,ona*JskrVOTgu_fC1s#
2024-09-19 11:52:37 UTC	16384	IN	Data Raw: 01 04 9b c4 56 14 35 a6 f9 51 54 32 a9 6e 01 32 54 87 8d a1 db 03 56 d1 99 29 01 20 7d 04 15 45 a2 99 50 ba 6e 32 c0 42 63 33 cf 32 01 c8 64 43 f8 30 08 d6 c1 1f a3 c2 08 f3 03 3f 49 a7 49 44 0a 6a 06 bc 4e d1 01 ce 5c 2d f8 c8 01 26 d6 0b cc 38 27 c9 c8 d9 7b e0 34 ab e1 3d ee 05 8a 9e 83 7e cb 5d be 49 8c 6e 09 23 d0 ef a0 6e cb 29 cc 08 06 78 55 bf f0 c0 58 b7 74 32 ca 83 a2 03 8c 41 a7 d6 79 6e 77 de 18 1a dc 20 5e 50 54 3a 31 83 d1 48 fd 6c d8 a2 7e 66 3a 3b 45 cc 95 85 55 f8 e6 e1 7f 67 c3 0c c1 12 59 3b 82 90 d8 eb a4 95 2e 4c d9 0f b3 56 b6 02 c4 74 0d 8f d3 6d e1 71 1a ac 01 f0 38 bb 4d 1e c7 89 eb 65 c0 e3 3c af 95 ad e1 21 98 7f a0 f4 4e 21 ea a9 34 fc 4b 00 5d 24 91 9a f5 93 ba ef 2c 45 c5 45 5c 77 7b 9b 90 c2 1b ef 7f d2 28 5a d8 ca 7b 12 1e Data Ascii: V5QT2n2TV) }EPn2Bc32dC0?IIDjN\-&8'{4=~]In#n)xUXt2Aynw ^PT:1Hl~f:;EUgY;.LVtmq8Me<!N!4K]$,EE\w{(Z{
2024-09-19 11:52:37 UTC	12576	IN	Data Raw: fd 4c 63 a5 3c 92 7f c6 60 af b1 61 65 c4 74 bf 15 f2 fa b3 b1 59 23 25 13 a5 43 cc 47 f1 50 60 e3 56 ed 54 58 b5 bb c1 34 08 5b 99 c8 48 ec 66 22 d9 8e 6e f0 f1 d3 4d 86 f5 b2 c0 4d 32 08 8c c0 39 ca 35 d2 47 54 65 97 01 4a 4b be 04 5d c7 42 df e3 ca 92 d0 97 8e f4 94 d0 97 44 bc 69 a1 6f 83 02 82 8e 74 8d 8c 75 34 14 fc 8e 55 5b d9 07 7e 12 b0 a1 f9 ce 0a 47 70 c6 3d 6e 02 46 7d 98 22 6a 70 c9 1c 59 28 ac d8 18 7a d1 13 b8 a2 0f 5c cf 08 8d 8f 80 62 62 7d 34 3b 8a f4 b4 61 6c bf 69 c3 03 6e a3 37 c2 99 f5 cd 51 da 1c d7 01 12 9c ca 4d f3 61 3e f7 74 3f 6d 8e 1b d0 63 69 8e eb 9b 7e 67 c6 cd 71 7d c5 32 8c 89 b7 7d 33 65 2f 16 ab ad 46 6c c2 ee 38 e6 a2 9c 67 7a aa 62 fb a1 e9 1b fa 50 bf 2b 4e 90 83 a3 04 30 93 93 bb d6 a4 50 60 63 40 6e 13 94 e6 8e 50 Data Ascii: Lc<`aetY#%CGP`VTX4[Hf"nMM295GTeJK]BDiotu4U[~Gp=nF}"jpY(z\bb}4;alin7QMa>t?mci~gq}2}3e/Fl8gzbP+N0P`c@nP
2024-09-19 11:52:37 UTC	16384	IN	Data Raw: 27 7d 2e b2 84 17 3a 61 57 e7 21 de d8 32 62 75 a5 dc 90 79 84 f9 68 74 18 03 c2 e3 ea 7a 1e a2 21 b6 24 8c 83 6f e4 dc 12 57 6b 24 b6 d3 f4 0e a7 b8 dd 12 50 4f b8 ad 31 81 9a 15 84 97 b8 55 60 85 25 14 0c e0 dc e9 60 02 07 c0 23 5c 9e ab 0f 4c de 82 d1 e2 1d 9b 21 c6 27 1b ea 69 a7 df 35 67 5c 21 38 c3 a5 57 9a 44 d1 53 a4 96 a0 83 2d 9c 63 85 42 9c 72 05 de 02 14 0f 5f 69 4e 17 dd c5 f6 d2 c3 d8 a0 2c 3e 70 eb 47 22 b0 70 ed a0 91 0a fa 26 c0 61 20 c1 61 2c 41 66 24 41 66 2a 75 1e 64 c4 82 66 2d 33 29 62 7e 90 20 b3 ce 88 a5 26 a2 24 a1 e5 d1 a3 04 ab 1b 01 56 64 bc 42 e1 90 ae e4 d1 7e 61 de 09 50 43 b5 21 da af 9c 51 fc a2 5b f8 55 02 1c 09 bd 05 df cb 7b 92 d4 d4 30 8a d2 8a cc fb 43 a2 80 91 96 2d b1 e9 8a 30 6d 91 1f 44 db 96 5c ee 33 1c ec 69 23 Data Ascii: '}.:aW!2buyhtz!$oWk$PO1U`%`#\L!'i5g\!8WDS-cBr_iN,>pG"p&a a,Af$Af*udf-3)b~ &$VdB~aPC!Q[U{0C-0mD\3i#
2024-09-19 11:52:37 UTC	5536	IN	Data Raw: 1d 95 70 88 7d 4b fc 7c 01 83 87 9a ae 6f 44 17 eb 01 70 f3 3c a2 81 25 54 aa 8e 29 64 af f1 8e 21 09 b9 af 99 43 21 3f a5 a6 b1 ac 0c 2d 57 84 8c 36 51 ee 6f e7 8b 05 ad 03 46 2a e1 df c2 25 ba 14 e8 2a 1f 47 b6 36 7d cc f3 f0 7c 96 e3 ad c9 28 54 ce c6 6a 71 12 37 69 2d d0 41 bf 8c 7e d0 fa 18 1f c2 a6 49 f1 ba 05 f2 9f c2 17 91 c5 a5 02 01 ee 14 e1 b1 2d ab 9d 03 3c ad 4d 82 8b b0 16 d4 96 96 db 76 6a e7 80 8c 92 11 ca 4a 6d 63 4b 46 a5 10 a0 4b 61 79 a4 51 5f 8d c9 29 e1 12 51 50 75 cb 02 26 b9 23 84 af d9 5d d4 82 96 0e 6b 5e 4b 07 3e 7e 5a 3a 58 14 6f bc 90 c2 2e b9 5d 72 ad 89 05 6e 6f c9 49 26 3e f6 f9 a4 20 e5 86 8a 49 d6 81 04 59 22 e3 fa 2f 76 df 7b 1f dd 1e 3a 71 0e 4f bb b7 9d ed db 8d ae 03 8f c2 c9 b6 c3 35 7c bd de ca 61 09 60 e7 f5 79 6c Data Ascii: p}K\|oDp<%T)d!C!?-W6QoF%G6}\|(Tjq7i-A~I-<MvjJmcKFKayQ_)QPu&#]k^K>~Z:Xo.]rnoI&> IY"/v{:qO5\|a`yl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49754	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:35 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=k6+3cwBOZAzDOc9&MD=zU4UUtaO HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-19 11:52:36 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: bf0cbc7c-3241-4ef8-b853-6f1b1e00bacc MS-RequestId: 1d3f4737-b8b5-45cd-aa63-783be954e6ae MS-CV: sLAOMwuelEuBuZNJ.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 19 Sep 2024 11:52:36 GMT Connection: close Content-Length: 30005
2024-09-19 11:52:36 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-09-19 11:52:36 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49753	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:36 UTC	794	OUT	GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1 Host: adobe-esign.carner.com.co Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://adobe-esign.carner.com.co Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0 Sec-WebSocket-Key: hPZAxsZCnq1T0L/0aKmV1Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-19 11:52:40 UTC	738	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 19 Sep 2024 11:52:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 01b8881e-a123-4ce2-91bf-475c139a1400 x-ms-ests-server: 2.1.18947.4 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:52:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49756	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:36 UTC	794	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:40 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:40 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15493175 cache-control: public, max-age=31536000 etag: 0x8DB5C3F466DE917 last-modified: Wed, 24 May 2023 10:11:43 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 48c56a73-401e-000b-1ca1-7d7f31000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:40 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-09-19 11:52:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49755	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:36 UTC	795	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:40 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:40 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15412785 cache-control: public, max-age=31536000 etag: 0x8DB5C3F495F4B8C last-modified: Wed, 24 May 2023 10:11:48 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ca32ae3a-001e-00e3-065c-7e3257000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:40 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-09-19 11:52:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49757	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:36 UTC	781	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:41 UTC	675	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:41 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15412837 cache-control: public, max-age=31536000 etag: 0x8D8731240E548EB last-modified: Sun, 18 Oct 2020 03:02:30 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 48453b9f-a01e-00e9-275c-7e3c42000000 x-ms-version: 2009-09-19
2024-09-19 11:52:41 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-09-19 11:52:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49760	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:36 UTC	556	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:41 UTC	672	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:41 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15412849 cache-control: public, max-age=31536000 etag: 0x8DB5C3F4982FD30 last-modified: Wed, 24 May 2023 10:11:48 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9cb53085-801e-0017-755c-7e3b0a000000 x-ms-version: 2009-09-19
2024-09-19 11:52:41 UTC	2679	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2024-09-19 11:52:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49759	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:36 UTC	550	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:41 UTC	672	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:40 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15412818 cache-control: public, max-age=31536000 etag: 0x8DB5C3F492F3EE5 last-modified: Wed, 24 May 2023 10:11:48 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 8e462356-901e-0066-715c-7ee208000000 x-ms-version: 2009-09-19
2024-09-19 11:52:41 UTC	3627	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2024-09-19 11:52:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49758	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:36 UTC	568	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:41 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:41 GMT Content-Type: application/x-javascript Content-Length: 5537 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2614937 cache-control: public, max-age=31536000 etag: 0x8DCBD52F3A242D0 last-modified: Thu, 15 Aug 2024 17:51:55 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 76fa0529-701e-0004-5dc2-f20c60000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:41 UTC	5537	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 5b 7d 77 da 46 d6 ff 7f 3f 85 d0 ee 21 d2 66 2c db 4d db b4 72 55 1f 87 97 84 d6 8e 5d 83 db cd 26 39 1c 81 06 50 2c 24 55 23 6c 53 c3 77 7f 7e 77 46 42 02 04 76 fa 6c 4e 6c d0 cc 9d 3b 77 ee dc f7 2b 1f fe bb f6 0f ed df da c1 f3 ff 69 dd de d9 75 4f bb 6c 6b bd 77 9d eb a6 76 85 a7 0f da fb cb 5e a7 d1 7a 3e 1e da 94 7e 7a 13 5f 68 23 3f e0 1a 3e 07 ae e0 9e 16 85 5a 94 68 7e 38 8c 92 38 4a dc 94 0b 6d 8a df 89 ef 06 da 28 89 a6 5a 3a e1 5a 9c 44 5f f8 30 15 5a e0 8b 14 8b 06 3c 88 ee 35 03 e8 12 4f bb 72 93 74 ae 75 ae 4c 0b f8 39 b0 f9 63 3f c4 ea 61 14 cf f1 7d 92 6a 61 94 fa 43 ae b9 a1 27 b1 05 78 08 05 d7 66 a1 c7 13 ed 7e e2 0f 27 da 85 3f 4c 22 11 8d 52 2d e1 43 ee df 61 13 31 c3 f8 fa 16 4c 73 13 ae 09 9e 6a a3 Data Ascii: [}wF?!f,MrU]&9P,$U#lSw~wFBvlNl;w+iuOlkwv^z>~z_h#?>Zh~88Jm(Z:ZD_0Z<5OrtuL9c?a}jaC'xf~'?L"R-Ca1Lsj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49761	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:36 UTC	819	OUT	GET /intersnack.fr/winauth/ssoprobe?client-request-id=69f7109e-440f-44a1-8d54-6a6d8f785924&_=1726746754609 HTTP/1.1 Host: 778ac986-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49762	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:39 UTC	1410	OUT	POST /common/instrumentation/dssostatus HTTP/1.1 Host: adobe-esign.carner.com.co Connection: keep-alive Content-Length: 67 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" hpgrequestid: cb8c8b69-2e16-4cc2-9ae1-35fa68c81500 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 69f7109e-440f-44a1-8d54-6a6d8f785924 canary: PAQABDgEAAAApTwJmzXqdR4BN2miheQMYKRVSXl5aDO0mUXCYrMDsgPBX_ayB0nQBzCy2PUrNZpWhQpjw0hsQmZa0d6jqgiA1pRVXgHjpLxYImiDX8-9FmQjdliv-ioJZgwVRKEiXZlalLRabkdAIXhhlFQF1CN-S2md1fXdvl8yQ6Rjdps6JaWbGw50XlZesdh_p3ysPVsTjwZeG0ans9N1c03aqT5LoO2cW9S4hkwCeW6p-7GEA0CAA Content-type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json hpgact: 2101 sec-ch-ua-platform: "Windows" Origin: https://adobe-esign.carner.com.co Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://adobe-esign.carner.com.co/?organisation=intersnack.fr&dse=bWtsaW5nbGVyQGludGVyc25hY2suZnI=&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0
2024-09-19 11:52:39 UTC	67	OUT	Data Raw: 7b 22 72 65 73 75 6c 74 43 6f 64 65 22 3a 32 2c 22 73 73 6f 44 65 6c 61 79 22 3a 30 2c 22 6c 6f 67 22 3a 22 50 72 6f 62 65 20 69 6d 61 67 65 20 65 72 72 6f 72 20 65 76 65 6e 74 20 66 69 72 65 64 22 7d Data Ascii: {"resultCode":2,"ssoDelay":0,"log":"Probe image error event fired"}
2024-09-19 11:52:43 UTC	915	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:42 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache access-control-allow-origin: https://778ac986-d43c7a7f.carner.com.co/ access-control-allow-credentials: true access-control-allow-methods: POST, OPTIONS p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" client-request-id: 69f7109e-440f-44a1-8d54-6a6d8f785924 x-ms-request-id: 01b8881e-a123-4ce2-91bf-475cb59a1400 x-ms-ests-server: 2.1.18947.4 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin
2024-09-19 11:52:43 UTC	272	IN	Data Raw: 31 30 39 0d 0a 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 50 41 51 41 42 44 67 45 41 41 41 41 70 54 77 4a 6d 7a 58 71 64 52 34 42 4e 32 6d 69 68 65 51 4d 59 47 53 55 56 46 59 63 78 35 39 72 31 78 6b 72 4a 39 56 79 73 6b 4d 30 39 4a 41 63 59 56 79 44 2d 4c 74 54 43 66 4d 65 4f 4f 39 73 4e 57 7a 74 5f 5a 5f 36 65 31 61 54 6e 55 58 58 51 56 39 79 2d 76 6e 5f 56 4b 4d 56 30 76 67 5f 6b 57 64 6a 61 59 63 65 38 4e 64 55 6e 53 6a 75 4b 36 4c 65 70 48 54 6c 4d 54 41 33 37 51 59 4a 67 30 7a 35 63 4d 54 4d 4c 38 56 39 6e 4f 6c 63 41 6a 34 53 66 48 7a 37 6b 4c 63 5a 76 64 61 6e 67 6f 5a 39 4c 73 6f 58 4e 73 34 2d 33 74 78 43 6d 50 7a 37 5f 46 76 38 5a 73 6a 65 7a 74 75 4b 46 50 41 54 66 2d 6f 75 2d 48 70 50 37 74 56 33 67 4d 32 64 78 66 47 48 63 49 4e 45 4a 59 44 79 Data Ascii: 109{"apiCanary":"PAQABDgEAAAApTwJmzXqdR4BN2miheQMYGSUVFYcx59r1xkrJ9VyskM09JAcYVyD-LtTCfMeOO9sNWzt_Z_6e1aTnUXXQV9y-vn_VKMV0vg_kWdjaYce8NdUnSjuK6LepHTlMTA37QYJg0z5cMTML8V9nOlcAj4SfHz7kLcZvdangoZ9LsoXNs4-3txCmPz7_Fv8ZsjeztuKFPATf-ou-HpP7tV3gM2dxfGHcINEJYDy
2024-09-19 11:52:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49763	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:39 UTC	748	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:43 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:43 GMT Content-Type: application/x-javascript Content-Length: 2425 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2610338 cache-control: public, max-age=31536000 etag: 0x8DCBD52F3CBE31D last-modified: Thu, 15 Aug 2024 17:51:55 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cc7ef165-e01e-00d3-0dcc-f288fc000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:43 UTC	2425	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 58 6d 73 e2 38 12 fe 3e bf 42 b0 55 89 bd 63 0c e4 3d 64 3c 53 59 92 ec 64 6f 26 c9 01 b3 5b 57 93 29 4a c8 02 6b b0 25 97 24 43 b8 24 ff fd 5a 7e 01 0c e4 65 e6 be dc 1e 55 89 6d b9 d5 dd ea 7e 9e 56 cb f5 5f 2b 6f d0 af a8 f6 fa 1f ea f6 4e 3b 3d 74 7d 81 7a 1f 2f 3b 67 e8 06 9e fe 85 ae ae 7b 97 ed f3 d7 eb 31 46 cd 5f 2f 60 0a 0d 59 48 11 5c 07 58 51 1f 09 8e 84 44 8c 13 21 63 21 b1 a6 0a 45 f0 5f 32 1c a2 a1 14 11 d2 01 45 b1 14 df 29 d1 0a 85 4c 69 98 34 a0 a1 98 22 0b d4 49 1f dd 60 a9 67 e8 f2 c6 76 41 3f 05 6d 6c c4 38 cc 26 22 9e c1 7d a0 11 17 9a 11 8a 30 f7 53 6d 21 3c 70 45 51 c2 7d 2a d1 34 60 24 40 9f 19 91 42 89 a1 46 92 12 ca 26 60 44 25 30 5e 36 e1 20 2c 29 52 54 a3 a1 90 3a c8 fc 70 51 d7 48 e6 5a 55 6a Data Ascii: Xms8>BUc=d<SYdo&[W)Jk%$C$Z~eUm~V_+oN;=t}z/;g{1F_/`YH\XQD!c!E_2E)Li4"I`gvA?ml8&"}0Sm!<pEQ}*4`$@BF&`D%0^6 ,)RT:pQHZUj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49764	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:41 UTC	690	OUT	OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 43936c8e-d43c7a7f.carner.com.co Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time Origin: https://adobe-esign.carner.com.co User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-19 11:52:45 UTC	625	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, 3600 access-control-allow-credentials: true access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody access-control-max-age: 3600 access-control-allow-origin: https://adobe-esign.carner.com.co
2024-09-19 11:52:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49766	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:41 UTC	550	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:46 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:45 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15493180 cache-control: public, max-age=31536000 etag: 0x8DB5C3F466DE917 last-modified: Wed, 24 May 2023 10:11:43 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 48c56a73-401e-000b-1ca1-7d7f31000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:46 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-09-19 11:52:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49765	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:41 UTC	551	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:45 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:45 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15412790 cache-control: public, max-age=31536000 etag: 0x8DB5C3F495F4B8C last-modified: Wed, 24 May 2023 10:11:48 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ca32ae3a-001e-00e3-065c-7e3257000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:45 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-09-19 11:52:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49767	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:42 UTC	537	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:47 UTC	675	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:46 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15412843 cache-control: public, max-age=31536000 etag: 0x8D8731240E548EB last-modified: Sun, 18 Oct 2020 03:02:30 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 48453b9f-a01e-00e9-275c-7e3c42000000 x-ms-version: 2009-09-19
2024-09-19 11:52:47 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-09-19 11:52:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49769	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:44 UTC	564	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pidpdisambiguation_8e15caf4c90cec4857ee.js HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:48 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:48 GMT Content-Type: application/x-javascript Content-Length: 2425 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 2610343 cache-control: public, max-age=31536000 etag: 0x8DCBD52F3CBE31D last-modified: Thu, 15 Aug 2024 17:51:55 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cc7ef165-e01e-00d3-0dcc-f288fc000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:48 UTC	2425	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 58 6d 73 e2 38 12 fe 3e bf 42 b0 55 89 bd 63 0c e4 3d 64 3c 53 59 92 ec 64 6f 26 c9 01 b3 5b 57 93 29 4a c8 02 6b b0 25 97 24 43 b8 24 ff fd 5a 7e 01 0c e4 65 e6 be dc 1e 55 89 6d b9 d5 dd ea 7e 9e 56 cb f5 5f 2b 6f d0 af a8 f6 fa 1f ea f6 4e 3b 3d 74 7d 81 7a 1f 2f 3b 67 e8 06 9e fe 85 ae ae 7b 97 ed f3 d7 eb 31 46 cd 5f 2f 60 0a 0d 59 48 11 5c 07 58 51 1f 09 8e 84 44 8c 13 21 63 21 b1 a6 0a 45 f0 5f 32 1c a2 a1 14 11 d2 01 45 b1 14 df 29 d1 0a 85 4c 69 98 34 a0 a1 98 22 0b d4 49 1f dd 60 a9 67 e8 f2 c6 76 41 3f 05 6d 6c c4 38 cc 26 22 9e c1 7d a0 11 17 9a 11 8a 30 f7 53 6d 21 3c 70 45 51 c2 7d 2a d1 34 60 24 40 9f 19 91 42 89 a1 46 92 12 ca 26 60 44 25 30 5e 36 e1 20 2c 29 52 54 a3 a1 90 3a c8 fc 70 51 d7 48 e6 5a 55 6a Data Ascii: Xms8>BUc=d<SYdo&[W)Jk%$C$Z~eUm~V_+oN;=t}z/;g{1F_/`YH\XQD!c!E_2E)Li4"I`gvA?ml8&"}0Sm!<pEQ}*4`$@BF&`D%0^6 ,)RT:pQHZUj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49770	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:44 UTC	692	OUT	GET /common/instrumentation/dssostatus HTTP/1.1 Host: adobe-esign.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0; ai_session=GcKLOHD5gWddsSjrPiLtB3\|1726746756985\|1726746756985
2024-09-19 11:52:48 UTC	858	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:48 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache access-control-allow-origin: https://778ac986-d43c7a7f.carner.com.co/ access-control-allow-credentials: true access-control-allow-methods: POST, OPTIONS p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: a7e6c016-2487-44ae-8454-2a87dd3b1500 x-ms-ests-server: 2.1.18947.4 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin
2024-09-19 11:52:48 UTC	170	IN	Data Raw: 61 34 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 62 65 64 35 34 38 66 37 2d 64 61 38 34 2d 34 36 63 66 2d 38 38 61 37 2d 65 66 38 36 38 30 30 33 36 65 30 61 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 30 39 2d 31 39 20 31 31 3a 35 32 3a 34 37 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d 0d 0a Data Ascii: a4{"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"bed548f7-da84-46cf-88a7-ef8680036e0a","timestamp":"2024-09-19 11:52:47Z","message":"AADSTS900561"}}
2024-09-19 11:52:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49772	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:44 UTC	799	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:48 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:48 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 12465018 cache-control: public, max-age=31536000 etag: 0x8DB5C3F4A04A56D last-modified: Wed, 24 May 2023 10:11:49 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 29e3acd8-501e-0096-022c-99475d000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:48 UTC	635	IN	Data Raw: 32 37 34 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 Data Ascii: 274mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q
2024-09-19 11:52:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49771	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:44 UTC	799	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:49 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:48 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15412825 cache-control: public, max-age=31536000 etag: 0x8DB5C3F4A4E2B5D last-modified: Wed, 24 May 2023 10:11:50 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5c8a6c6d-701e-0084-4f5c-7ea17b000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:49 UTC	260	IN	Data Raw: 66 65 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b Data Ascii: femPn DxY0\{ 7yF!TYYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{fTV-#mfV2<~l%4IeTL69vWv3vO}{
2024-09-19 11:52:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49773	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:47 UTC	1081	OUT	POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 43936c8e-d43c7a7f.carner.com.co Connection: keep-alive Content-Length: 1712 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" upload-time: 1726746759158 sec-ch-ua-mobile: ?0 client-version: 1DS-Web-JS-3.2.6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 time-delta-to-apply-millis: use-collector-delta content-type: application/x-json-stream cache-control: no-cache, no-store apikey: b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951 Client-Id: NO_AUTH sec-ch-ua-platform: "Windows" Accept: / Origin: https://adobe-esign.carner.com.co Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:47 UTC	1712	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 39 2d 31 39 54 31 31 3a 35 32 3a 33 36 2e 39 38 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 62 30 63 32 35 32 38 30 38 65 36 31 34 65 39 34 39 30 38 36 65 30 31 39 61 65 31 63 62 33 30 30 22 2c 22 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 76 65 72 22 3a 22 32 2e 31 2e 31 38 39 34 37 2e 34 22 2c 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 73 65 73 49 64 22 3a 22 47 63 4b 4c 4f 48 44 35 67 57 64 64 73 53 6a 72 50 69 4c 74 42 33 22 Data Ascii: {"name":"IDUX_ESTSClientTelemetryEvent_WebWatson","time":"2024-09-19T11:52:36.981Z","ver":"4.0","iKey":"o:b0c252808e614e949086e019ae1cb300","ext":{"app":{"ver":"2.1.18947.4","name":"IDUX_ESTSClientTelemetryEvent_WebWatson","sesId":"GcKLOHD5gWddsSjrPiLtB3"
2024-09-19 11:52:51 UTC	872	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:51 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" time-delta-millis: 11307 access-control-allow-headers: P3P,Set-Cookie,time-delta-millis access-control-allow-methods: POST access-control-allow-credentials: true access-control-allow-origin: https://adobe-esign.carner.com.co access-control-expose-headers: time-delta-millis set-cookie: MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; Domain=carner.com.co; expires=Fri, 07 Jun 2080 23:45:41 GMT; Path=/; Secure set-cookie: MS0=0e4bb2725e4c4a089346a6e6d71a623a; Domain=carner.com.co; expires=Fri, 09 Jun 2079 00:15:41 GMT; Path=/; Secure
2024-09-19 11:52:51 UTC	159	IN	Data Raw: 39 39 0d 0a 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 66 64 38 31 65 32 66 39 37 37 34 34 34 61 32 35 39 65 38 64 35 66 63 66 36 66 31 33 61 64 39 61 26 48 41 53 48 3d 66 64 38 31 26 4c 56 3d 32 30 32 34 30 39 26 56 3d 34 26 4c 55 3d 31 37 32 36 37 34 36 37 37 30 34 36 35 22 2c 22 6d 63 31 22 3a 22 66 64 38 31 65 32 66 39 37 37 34 34 34 61 32 35 39 65 38 64 35 66 63 66 36 66 31 33 61 64 39 61 22 7d 7d 0d 0a Data Ascii: 99{"acc":1,"webResult":{"msfpc":"GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465","mc1":"fd81e2f977444a259e8d5fcf6f13ad9a"}}
2024-09-19 11:52:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49774	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:48 UTC	857	OUT	GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1 Host: adobe-esign.carner.com.co Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://adobe-esign.carner.com.co Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0; ai_session=GcKLOHD5gWddsSjrPiLtB3\|1726746756985\|1726746756985 Sec-WebSocket-Key: pJ8CgqF7DTMpjHwQpU9TFw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-19 11:52:52 UTC	741	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 19 Sep 2024 11:52:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 7b213d71-c314-4f80-880d-6e7a68eb0f00 x-ms-ests-server: 2.1.18947.4 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:52:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49776	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:50 UTC	555	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:54 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:54 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 12465024 cache-control: public, max-age=31536000 etag: 0x8DB5C3F4A04A56D last-modified: Wed, 24 May 2023 10:11:49 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 29e3acd8-501e-0096-022c-99475d000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:54 UTC	635	IN	Data Raw: 32 37 34 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 6d 94 4d 6f db 30 0c 86 ff 8a e1 5d 25 46 d4 97 a5 36 09 90 9d 72 58 af 3b f4 e6 26 69 1d c0 5d 8b 26 48 5a 0c fd ef 23 25 ba cb d6 42 f1 e3 98 34 c5 57 24 93 f9 e1 f4 d0 bc 3e 8e bf 0e 8b 76 38 1e 9f af 66 b3 f3 f9 0c 67 07 4f 2f 0f 33 6b 8c 99 d1 1b 6d 73 de 6f 8f c3 a2 f5 a9 6d 86 dd fe 61 38 d6 ef a7 fd ee fc fd e9 75 d1 9a c6 34 3e d1 a7 5d ce b7 bb fb c3 72 7e 38 be 8d bb 25 f4 bf ef f7 e3 78 f5 6d 17 79 5d bf c3 9d 18 bc e1 75 fd 3e 9f d5 37 e7 b3 1a b7 d9 bf 6c c6 5d b3 19 fb 03 69 ea db 66 43 db 5b 4f f7 b7 7a 7f 29 b7 d9 72 fe dc 1f 87 e9 bd bb b6 d9 2e da 1b 67 21 28 f4 2b 04 9f ad aa 34 b4 50 39 af 30 40 f8 e9 12 84 e2 f6 aa 52 dc 1c e8 cd a0 b1 fb c2 8b 5e 71 dc 49 5b f7 95 37 94 a4 83 87 d4 b9 51 Data Ascii: 274mMo0]%F6rX;&i]&HZ#%B4W$>v8fgO/3kmsoma8u4>]r~8%xmy]u>7l]ifC[Oz)r.g!(+4P90@R^qI[7Q
2024-09-19 11:52:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49777	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:50 UTC	555	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: 62d417d4-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="
2024-09-19 11:52:54 UTC	740	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:52:54 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 15412831 cache-control: public, max-age=31536000 etag: 0x8DB5C3F4A4E2B5D last-modified: Wed, 24 May 2023 10:11:50 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5c8a6c6d-701e-0084-4f5c-7ea17b000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-09-19 11:52:54 UTC	260	IN	Data Raw: 66 65 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 6d 50 cb 6e c3 20 10 fc 15 44 af 78 59 30 06 5c d9 96 d2 7b 7f 20 37 cb a1 06 c9 79 c8 46 21 fd fb 9a 90 f6 54 0d 9a 59 98 59 ad 96 6e bb cf e4 71 5e 2e 5b 4f 7d 8c b7 77 ce 53 4a 90 6a b8 ae 33 97 88 c8 f7 04 25 29 9c a2 ef a9 b2 94 78 17 66 1f 4b 7d 0f 2e 7d 5c 1f 3d 45 82 44 d9 fd d0 a1 8b 21 2e 6e 18 b7 cd c5 ad e3 e5 d6 4d 61 9d 16 47 a6 3d 2b 15 25 d3 77 d1 b5 c8 57 58 96 9e be 39 9d 41 f9 d0 dd c6 e8 c9 a9 a7 9f a2 06 a5 58 ad bd 80 56 8e 16 b4 62 4f 42 26 32 0c 48 cb b0 98 02 a1 31 35 7b 09 66 54 1a 1a dd 56 2d 18 23 98 01 6d 0b e5 66 ac 0c b4 56 32 3c fc d3 c7 7e c7 1e cf 0a 6c 25 34 d4 f2 d0 80 d1 ec 49 65 b8 54 4c 36 39 96 df f4 8b b1 98 16 76 57 b4 fb b0 e3 df 76 0a 33 f2 76 f9 4f 87 1f 7d d7 81 14 7b Data Ascii: femPn DxY0\{ 7yF!TYYnq^.[O}wSJj3%)xfK}.}\=ED!.nMaG=+%wWX9AXVbOB&2H15{fTV-#mfV2<~l%4IeTL69vWv3vO}{
2024-09-19 11:52:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49778	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:52 UTC	668	OUT	GET /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 43936c8e-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a
2024-09-19 11:52:56 UTC	267	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Thu, 19 Sep 2024 11:52:56 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close allow: OPTIONS,POST access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:52:56 UTC	78	IN	Data Raw: 34 38 0d 0a 7b 22 4d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 68 74 74 70 20 6d 65 74 68 6f 64 20 27 47 45 54 27 2e 22 7d 0d 0a Data Ascii: 48{"Message":"The requested resource does not support http method 'GET'."}
2024-09-19 11:52:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49781	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:57 UTC	1281	OUT	POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.6&apikey=b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951&upload-time=1726746774616&ext.intweb.msfpc=GUID%3Dfd81e2f977444a259e8d5fcf6f13ad9a%26HASH%3Dfd81%26LV%3D202409%26V%3D4%26LU%3D1726746770465&time-delta-to-apply-millis=11307&w=0&NoResponseBody=true HTTP/1.1 Host: 43936c8e-d43c7a7f.carner.com.co Connection: keep-alive Content-Length: 952 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://adobe-esign.carner.com.co Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://adobe-esign.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a
2024-09-19 11:52:57 UTC	952	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 39 2d 31 39 54 31 31 3a 35 32 3a 35 34 2e 36 31 33 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 62 30 63 32 35 32 38 30 38 65 36 31 34 65 39 34 39 30 38 36 65 30 31 39 61 65 31 63 62 33 30 30 22 2c 22 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 76 65 72 22 3a 22 32 2e 31 2e 31 38 39 34 37 2e 34 22 2c 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 73 65 73 49 64 22 3a 22 47 63 4b 4c 4f 48 44 35 67 57 64 64 73 53 6a 72 50 69 4c 74 42 33 22 Data Ascii: {"name":"IDUX_ESTSClientTelemetryEvent_WebWatson","time":"2024-09-19T11:52:54.613Z","ver":"4.0","iKey":"o:b0c252808e614e949086e019ae1cb300","ext":{"app":{"ver":"2.1.18947.4","name":"IDUX_ESTSClientTelemetryEvent_WebWatson","sesId":"GcKLOHD5gWddsSjrPiLtB3"
2024-09-19 11:53:01 UTC	402	IN	HTTP/1.1 204 No Content Server: nginx Date: Thu, 19 Sep 2024 11:53:01 GMT Content-Type: text/html; charset=utf-8 Connection: close time-delta-millis: 5900 access-control-allow-headers: time-delta-millis access-control-allow-methods: POST access-control-allow-credentials: true access-control-allow-origin: https://adobe-esign.carner.com.co access-control-expose-headers: time-delta-millis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49779	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:52:57 UTC	920	OUT	GET /fwlink/p/?LinkID=733247 HTTP/1.1 Host: 985d1866-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a
2024-09-19 11:53:00 UTC	505	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 19 Sep 2024 11:53:00 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://cab8c6cd-d43c7a7f.carner.com.co/account-billing/761a662d-8032-88f4-03f3-c9ba8ba0e00b request-context: appId=cid-v1:26ef1154-5995-4d24-ad78-ef0b04f11587 x-response-cache-status: True cache-control: max-age=0, no-cache, no-store pragma: no-cache access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49784	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:02 UTC	1067	OUT	GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1 Host: adobe-esign.carner.com.co Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://adobe-esign.carner.com.co Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0; ai_session=GcKLOHD5gWddsSjrPiLtB3\|1726746756985\|1726746756985; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; MSFPC=GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465 Sec-WebSocket-Key: LJJh6/PD0XyhZp6mkVFdKw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-19 11:53:06 UTC	741	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 19 Sep 2024 11:53:06 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: c136a56b-c6e3-4b56-8a9c-befd5ce40f00 x-ms-ests-server: 2.1.18947.4 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49783	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:02 UTC	949	OUT	GET /account-billing/761a662d-8032-88f4-03f3-c9ba8ba0e00b HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a
2024-09-19 11:53:06 UTC	787	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 19 Sep 2024 11:53:06 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: /en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b request-context: appId= x-correlationid: 0HN6ME4ARL38R:00000023 x-operationid: fd5f25a5efeb080fd75e39ce2ea76516 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: max-age=0, no-cache, no-store pragma: no-cache access-control-allow-origin: * access-control-allow-headers: * set-cookie: EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; expires=Fri, 07 Jun 2080 23:46:12 GMT; Path=/; Secure
2024-09-19 11:53:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49780	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:06 UTC	920	OUT	GET /fwlink/p/?LinkID=733247 HTTP/1.1 Host: 985d1866-d43c7a7f.carner.com.co Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a
2024-09-19 11:53:10 UTC	505	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 19 Sep 2024 11:53:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://cab8c6cd-d43c7a7f.carner.com.co/account-billing/761a662d-8032-88f4-03f3-c9ba8ba0e00b request-context: appId=cid-v1:26ef1154-5995-4d24-ad78-ef0b04f11587 x-response-cache-status: True cache-control: max-age=0, no-cache, no-store pragma: no-cache access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49785	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:11 UTC	1031	OUT	GET /account-billing/761a662d-8032-88f4-03f3-c9ba8ba0e00b HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048
2024-09-19 11:53:15 UTC	787	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 19 Sep 2024 11:53:15 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: /en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b request-context: appId= x-correlationid: 0HN6MBH8UD9JO:00000035 x-operationid: 98b1cbc7f918daaef8830bdde3be63cd accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: max-age=0, no-cache, no-store pragma: no-cache access-control-allow-origin: * access-control-allow-headers: * set-cookie: EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; expires=Fri, 07 Jun 2080 23:46:30 GMT; Path=/; Secure
2024-09-19 11:53:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49787	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:16 UTC	1105	OUT	GET /en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048
2024-09-19 11:53:22 UTC	1224	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:22 GMT Content-Type: text/html; charset=utf-8 Content-Length: 30423 Connection: close request-context: appId= x-correlationid: 0HN6ME4ARL38R:0000004C x-operationid: 910a1ee26157602d3d0e30f3396b77ba accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version vary: Accept-Encoding cache-control: max-age=0, no-cache, no-store pragma: no-cache content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: * set-cookie: EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; expires=Fri, 07 Jun 2080 23:46:43 GMT; Path=/; Secure set-cookie: ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="; Domain=carner.com.co; expires=Fri, 09 Jun 2079 01:46:43 GMT; Path=/; Secure
2024-09-19 11:53:22 UTC	15155	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 79 73 dc 38 92 38 fa b7 37 62 be 03 b7 36 7a ba 27 7e 86 c5 fb 70 db ee d0 69 6b c6 d7 58 72 7b 7a 5e bc 70 80 24 a8 a2 c5 2a d6 90 2c c9 f2 6e 7f 97 fd 2c fb c9 5e 26 00 b2 78 16 ab 74 59 bd ef d7 3b 2b 17 49 20 91 17 12 99 89 eb 4f ff f6 ec df 0f de ed 9f fe f6 fe 50 99 16 b3 e4 c5 9f fe ed 19 fe ab 24 74 7e f6 7c c2 e6 e4 e3 c9 44 09 e3 ec f9 24 29 b2 09 ff cc 68 08 ff 3e 7a 36 63 05 55 82 29 cd 72 56 3c 9f 2c 8b 88 b8 13 65 67 f5 69 4e 67 ec f9 e4 22 66 97 8b 34 2b 26 4a 90 ce 0b 36 87 a2 97 71 58 4c 9f 87 ec 22 0e 18 e1 0f 8f 95 78 1e 17 31 4d 48 1e d0 84 3d d7 9e a8 25 a8 22 2e 12 f6 62 7f 0a f8 30 a5 98 32 85 cd 68 9c 28 34 0c 33 96 e7 4a 9a 29 8b 69 3a 67 ca 7c 39 f3 59 a6 44 f0 e2 2a 5d 66 ca 9b 38 c8 d2 3c 8d Data Ascii: ys887b6z'~pikXr{z^p$,n,^&xtY;+I OP$t~\|D$)h>z6cU)rV<,egiNg"f4+&J6qXL"x1MH=%".b02h(43J)i:g\|9YD]f8<
2024-09-19 11:53:22 UTC	15268	IN	Data Raw: fc 22 2e b0 58 07 b3 9d 4d 47 c4 5a 56 a6 32 a1 5d f9 ae 00 b7 46 ae 7e 16 34 e8 d7 7b e9 d7 d7 d3 ef c7 64 56 a4 23 99 9e 38 c7 23 d1 42 9e f0 e2 bf 36 f5 03 38 e5 3c a7 26 e4 bd 80 f1 a1 9c 69 9d bc 10 34 34 92 57 db 02 ac c4 d6 b8 45 51 be 55 e4 9d 8a 42 3b cb a2 2f 5a ac de aa fd 0d ee ae ac 8a d6 ae f9 9c 35 fa 86 18 6c b7 ef 82 82 64 7e e0 f1 c6 8e 58 fd ba 48 91 3e dd b8 6d ec c1 3d 2a 2a 47 70 71 87 ec d0 e5 9b a0 56 e1 2a 81 d8 a3 69 fc 15 38 ed 8d 16 17 29 f8 72 dc ab 08 59 44 c1 91 28 69 46 cb b6 3a eb ad 40 6c be e4 49 d2 e9 15 82 0c 25 5f a1 38 6a ee d7 1a fc 76 9f 79 b1 c1 9d d8 83 ac 57 a2 26 b5 f3 94 54 ee d2 10 1f 7b 38 d4 62 d0 f5 18 b9 4d 77 ab 5f 64 8a 74 c8 eb b7 65 3f 2c a8 1f 83 b5 f8 fa 7c 42 b4 c9 8b b7 a9 22 69 aa 2e 7b dd fc 1a Data Ascii: ".XMGZV2]F~4{dV#8#B68<&i44WEQUB;/Z5ld~XH>m=*GpqVi8)rYD(iF:@lI%_8jvyW&T{8bMw_dte?,\|B"i.{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49788	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:18 UTC	1048	OUT	GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1 Host: adobe-esign.carner.com.co Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://adobe-esign.carner.com.co Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0; ai_session=GcKLOHD5gWddsSjrPiLtB3\|1726746756985\|1726746756985; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; MSFPC=GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465 Sec-WebSocket-Key: V5vHqcFmM9MXT/nffgRJOg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-19 11:53:22 UTC	741	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 19 Sep 2024 11:53:22 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 2fb8f1b1-b8f3-4ff8-828c-203a8bf01300 x-ms-ests-server: 2.1.18947.4 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49789	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:23 UTC	1542	OUT	GET /css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYo HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:27 UTC	610	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:27 GMT Content-Type: text/css Content-Length: 327 Connection: close accept-ranges: bytes etag: "1db05798ea635fd" last-modified: Fri, 13 Sep 2024 01:09:18 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6MA84HPUOK:00000002 x-operationid: e10876861cd9b97335da68afa6316585 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=519 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:27 UTC	327	IN	Data Raw: 1b fc 06 00 64 6b ae 94 dd a9 3a 60 54 64 8b 29 66 81 fe 79 f0 26 80 4c ad 47 05 96 3d 90 ac bf 77 00 d3 f3 2c 4f 20 c1 08 1e 67 db 12 a2 1e 4d dd 3e c3 0e 6f d6 be 91 b0 3a 06 7c 18 c2 ef 75 8e 66 f8 3d 71 1e 90 70 20 af 33 d9 70 8c 9c a9 67 7b 97 fa 48 7f fa e2 6d eb ec f6 1f 0d 5b ad a9 56 e1 04 79 e8 63 69 fc 65 e5 9a 55 58 d2 90 70 a8 db ac f9 09 da d4 c1 2a 2e c0 67 cd 80 63 d4 44 df 80 36 8d 4f 1e c7 9d 32 89 b9 a2 be 29 39 37 45 83 d4 6e 4e f9 9f e1 a6 5b 96 a4 a6 81 b4 ed 82 1f e5 04 b3 24 35 8d 22 49 38 04 65 d9 fa 00 9a 05 79 04 19 78 18 f8 c1 fa da b3 f5 50 cc 27 12 85 01 63 63 cc ab 6e 47 0c 31 b7 81 76 65 48 1a 0e 43 57 88 e6 2f 40 8f 60 ea b9 3b 1f 32 ca 27 02 83 b2 1e e2 ed ab cc 0f 10 48 36 0a 64 91 05 f5 5f 3a 74 b1 36 f2 40 c2 97 14 85 Data Ascii: dk:`Td)fy&LG=w,O gM>o:\|uf=qp 3pg{Hm[VycieUXp*.gcD6O2)97EnN[$5"I8eyxP'ccnG1veHCW/@`;2'H6d_:t6@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49790	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:23 UTC	1539	OUT	GET /css/glyphs/glyphs.css?v=N9jMfMIoO_s7OATN0j5LYqmO9MCqHDjfpaUV2RuaEy8 HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:27 UTC	612	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:27 GMT Content-Type: text/css Content-Length: 2624 Connection: close accept-ranges: bytes etag: "1db0570c8265a32" last-modified: Fri, 13 Sep 2024 00:06:29 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6JH16DCPC0:00000002 x-operationid: 715aed52ad79f0dce151a6b29eb7fe19 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=2968 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:27 UTC	2624	IN	Data Raw: 1b b1 2a 00 e4 5e 5d 7e 55 9b f7 fb 03 a4 ea ae e3 b1 34 b6 95 95 35 3a 69 bc f0 01 20 80 b6 97 93 0d f0 06 b8 ec 62 ff df 69 9f 80 ad 99 05 e9 6e f7 6c 69 74 e1 12 68 8f b5 fd 6d f7 96 d6 52 ba c7 57 c9 d1 ff 4a 79 b2 88 7f 94 ae 61 fe a9 4a 37 4c a9 38 90 0c ca e1 9d a1 00 cc 63 63 a8 b4 e7 5f 50 11 59 f6 6b d2 df 55 1e 9f bf ae 04 99 d7 42 9d a2 e1 2b 7f 7d e6 ef a9 b5 e4 78 e4 fb 7f 7e 78 e4 27 41 c6 7f 02 7a 9c e7 86 c6 8f 17 48 2b fe 3a 71 14 f7 e3 fb 09 d2 ef 7e cb d6 3f 59 df 7e b2 85 8d 66 e8 d7 03 f0 a8 95 c1 4f 5e ab 61 50 51 fc 5a 69 ff ce 84 88 63 65 a2 8f c1 b0 02 ad c0 a3 fc e4 b5 84 2e bf 46 be 8e fb cd 91 83 86 17 a0 f1 da eb 3e b5 7f 40 f0 0d 19 76 a4 d7 7c 33 8e fc 43 cc 57 82 55 15 47 18 31 6e d5 99 8f de 7c 73 c8 bc 91 37 df 7c 93 f6 Data Ascii: *^]~U45:i binlithmRWJyaJ7L8cc_PYkUB+}x~x'AzH+:q~?Y~fO^aPQZice.F>@v\|3CWUG1n\|s7\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49791	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:23 UTC	1537	OUT	GET /css/Article/css.css?v=Z6ZkkY_X8iTM42LbcHhEDNaT4e9rMO_zPAbxEsFxAvo HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:27 UTC	612	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:27 GMT Content-Type: text/css Content-Length: 6176 Connection: close accept-ranges: bytes etag: "1db05798cdc0a66" last-modified: Fri, 13 Sep 2024 01:09:15 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6MA844NPGR:00000012 x-operationid: 33a440f350331c93d8b10528058b0495 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=2543 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:27 UTC	6176	IN	Data Raw: 1b e5 65 51 54 b3 7e 48 44 35 a9 07 40 23 65 e1 fc fd 11 32 cc fd a7 ab 3e a3 54 d5 bd f7 20 d5 01 08 1a 76 6d 4f ff 6b be 8f 6b c6 e7 78 ea 97 80 07 a8 46 48 aa 83 6e fd 4f b1 91 cb 99 1d 44 77 6c 07 d9 19 66 bb ff fb 73 fd ff d7 2f eb 78 da 34 4c 80 30 a0 b7 ed 50 2c 1d 07 47 7d 35 c6 08 68 24 1c c0 be ce ff bf 56 9f 3e 04 0a 95 8a 5f 24 15 12 7e 85 ba f0 44 f7 af 5a 9c 59 9c 59 a6 f9 9b f0 85 57 b5 af 60 fe 69 58 98 e9 fe b3 1f a9 7b 81 5d 80 c8 c5 e8 25 b2 02 58 26 ec 23 5c a2 24 f9 6b bc db 4b 14 10 9f b8 ae ec 67 63 98 75 ff 93 44 83 0a 88 03 d8 ee 6e f0 ed bf ff ff bd a3 10 48 d1 a1 db 5f b5 e1 25 e0 f2 ce b6 b3 3f af 34 69 fa f7 3d 89 3c b0 c2 fb fb 0c 2f 01 cf 6a 9a 8f 3c e0 0f ed 65 88 0d 92 7d 54 17 f8 7c 8b 90 a2 f4 20 1f 9d 96 3d cc 56 0f e0 Data Ascii: eQT~HD5@#e2>T vmOkkxFHnODwlfs/x4L0P,G}5h$V>_$~DZYYW`iX{]%X&#\$kKgcuDnH_%?4i=</j<e}T\| =V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49792	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:23 UTC	1541	OUT	GET /css/Article/article.css?v=joejkGC7jmgVPaXv6QYy20tWjgmkhh7L7Q1GHYOzoYs HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:28 UTC	613	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:28 GMT Content-Type: text/css Content-Length: 16567 Connection: close accept-ranges: bytes etag: "1db05798ea7b5a8" last-modified: Fri, 13 Sep 2024 01:09:18 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6MA84HQ1OE:00000002 x-operationid: 69500823d68f921c7e884565f5ed0cd3 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=2206 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:28 UTC	15771	IN	Data Raw: 5b bb 86 c1 88 e4 ac d6 03 a0 11 3a 7c ce fb cf 4c fd 3a 5d 51 72 a9 2a fa 21 18 ac 24 45 4d 52 ed 2d df 9a b1 1d 27 d6 df 3b fd 0b 04 1e 25 7c 83 04 1a 04 2d 3a 2c cd 76 9b d3 dc e6 b4 6c b7 5e 6e 73 5b 8f b7 9e ff 7f ef ab 1f 9f 5e e0 c0 81 1f f0 c4 d2 7b 9e de d0 b0 01 78 97 03 24 3d 01 37 50 64 50 7f 75 40 6c fd d2 76 3b e7 dd 77 cb 8b f4 64 c7 45 4a 71 89 97 63 a7 59 76 f2 3b 4a 32 bd c2 46 70 2b 85 e0 27 87 c8 fe 28 1f cd d0 01 68 d6 10 3a 14 cd d8 10 d5 fa 73 db 0e 42 8c 63 e8 1b 35 7d 0c d3 da 7b df d6 28 22 22 20 90 6c 7b 0c b4 6c 7e ac 6b 77 a2 b8 01 11 15 4d 7f a1 fe ff bf fe ef 90 3a f7 93 b1 f1 6d 4c ee 33 ca 87 31 dc f8 0e ce 7b 73 ab 7a 63 fb fd 83 da c3 76 6d cb 2f c6 94 7c 3f df 25 fa af 5f b5 1a 93 df 38 68 53 4d 4e 64 f6 f9 c9 24 7f 8f Data Ascii: [:\|L:]Qr*!$EMR-';%\|-:,vl^ns[^{x$=7PdPu@lv;wdEJqcYv;J2Fp+'(h:sBc5}{("" l{l~kwM:mL31{szcvm/\|?%_8hSMNd$
2024-09-19 11:53:28 UTC	796	IN	Data Raw: d9 b0 49 f6 98 80 ef 01 91 65 86 ce 9a 75 b3 6e d6 48 3e 41 2f 5e 87 12 b2 5c 59 3f 7f a2 eb 20 a2 b5 a8 7e b9 fd 98 90 ed 5b db db 94 68 b3 5b 38 1d b9 99 01 fc ce 9d 8b 9c 18 b4 f6 50 b4 11 27 ba 34 aa 21 93 07 ab cb 8c 79 59 b7 c1 b2 44 4f 41 41 35 5e 52 50 6b 5e 9b b1 8e 65 37 8c c0 5f f9 54 fa 69 cc e6 9c 40 5f 21 b4 86 a1 65 1f 12 01 83 56 c8 d2 1a d0 3b 7c 96 18 62 5e 9a 4a 52 4b 49 8c 2c e4 26 e6 75 81 9a 58 d2 96 7d 7c 1c 9f a1 9a 2d 9f ad 98 ad f8 38 39 03 db b1 5c ac 55 24 09 e2 3a 8d 9f 5e d8 72 15 0c 49 39 3e 5e 03 a8 69 8d a1 17 cb 3d 8c 23 1c 3c 77 d7 41 9c c9 f2 fa 66 2a e9 f8 04 7b c8 f2 d0 05 be 0b a8 d6 dc 6f 38 e5 55 eb a3 86 ba 77 60 a8 d1 98 2c 2e 88 83 3b 6a cf 0f 72 b0 97 c7 83 3e 40 07 35 32 2a 3e dd f3 10 4a e1 b0 8f 8f b7 d9 38 Data Ascii: IeunH>A/^\Y? ~[h[8P'4!yYDOAA5^RPk^e7_Ti@_!eV;\|b^JRKI,&uX}\|-89\U$:^rI9>^i=#<wAf{o8Uw`,.;jr>@52>J8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49794	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:23 UTC	1546	OUT	GET /css/SearchBox/search-box.css?v=bybwzGBajHicVXspVs540UfV0swW0vCbOmBjBryj9N4 HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:28 UTC	611	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:27 GMT Content-Type: text/css Content-Length: 670 Connection: close accept-ranges: bytes etag: "1db0579222b3cb6" last-modified: Fri, 13 Sep 2024 01:06:16 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6M8U3D45HK:00000002 x-operationid: c3347dd4910cf7362cb60224702a984a accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=2115 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:28 UTC	670	IN	Data Raw: 1b b5 08 00 e4 da 4f fb af 5f 86 dc dd 6b e2 60 d2 f1 95 de 36 b2 28 63 59 07 d6 a4 9f 2d 97 42 68 75 ad 29 50 e0 4a 6b b3 43 2b ae 75 d5 1c 28 e2 09 0a 09 0e 89 12 c8 2e 24 ca bf 7d 15 71 bb a3 9e 5a c0 fb a1 a6 99 e0 66 1e d2 4e d4 1b 9e 52 68 8f 3f 0f c0 09 06 0b 15 3f 9a d1 e7 0b c2 eb 89 7a d1 f5 03 1f 7f 3f dd 6b 32 ad 2f f5 7f c7 24 cd 96 8b 59 c0 36 07 70 4c 7e c2 92 50 7c 79 21 93 e6 12 f1 0d d7 32 91 5b f7 2f 62 49 a8 06 ff 2f 25 db 8d 64 22 9f 63 b3 41 f6 05 88 b7 38 a0 4c e4 c3 87 0f 9a be 02 f1 09 ba 28 13 f9 69 ae ab e5 07 c1 43 e3 6a f4 4d 1f 89 fe 80 26 0b d8 e6 79 fd ee 51 0d 3a 36 59 9a 8d 67 a7 28 01 b7 3c 5f 20 09 74 8d 26 d5 c7 9d 10 91 1a 6f c5 08 26 30 81 c9 39 b2 54 00 eb 87 68 ae ee d0 9a 76 2a fa 83 ef 4a b3 f9 89 d6 b4 cb 69 e0 Data Ascii: O_k`6(cY-Bhu)PJkC+u(.$}qZfNRh??z?k2/$Y6pL~P\|y!2[/bI/%d"cA8L(iCjM&yQ:6Yg(<_ t&o&09Thv*Ji

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49793	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:23 UTC	1555	OUT	GET /css/sitewide/articleCss-overwrite.css?v=D0lQRoIlvFHSQBRTb-gAQ5KkFe8B8NuSoliBjnT5xZ4 HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:27 UTC	611	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:27 GMT Content-Type: text/css Content-Length: 622 Connection: close accept-ranges: bytes etag: "1db057a6539dc9e" last-modified: Fri, 13 Sep 2024 01:15:18 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6MCR02I8DF:00000003 x-operationid: 544446a3ba321da881a8cc871a925642 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=1593 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:27 UTC	622	IN	Data Raw: 1b 9d 0b 00 e4 5a d3 5e 5f ae 24 5d 67 4d 3a 5e e9 af 5e 51 d6 84 b1 c0 e0 a6 32 0e 9c 13 6c 66 17 f9 a6 f6 2e 1a d0 ad 69 eb 57 70 86 46 b5 fd c6 c9 89 54 28 7f a8 b3 b3 6b 5f c4 80 98 cf 95 6a e9 97 73 95 e7 68 bd b9 c4 5d dd 62 f4 89 49 86 6b 78 b8 08 b4 ea 03 98 75 a5 91 70 8a 80 56 62 5d 90 50 05 5a 03 0a 92 0c d7 9e e7 e6 4e 1b ef a9 30 36 45 00 50 fb 7a 70 2e 2c 07 25 46 38 0d 67 2d e0 8d b7 c0 54 7e 24 0a 89 72 b8 c7 0e cf e2 12 6d 89 92 17 34 f7 a6 3b af 52 53 4b d9 62 96 fc 09 39 96 03 d9 7b 74 9c af 30 e0 e4 e6 cc 87 f9 ee 2e f4 6e 86 5f 0f 21 1d 8e 23 6d 38 84 19 26 c4 21 74 ec 41 3c 53 05 0a eb cd ac 90 0a 0b 6a 92 66 d3 d3 6b ba 0c 80 35 0c 6a 5d b6 17 4d a3 69 34 65 43 01 8e a4 45 00 50 6b 85 cb 1f b0 ec e3 d0 fd a5 59 af 64 28 4a f4 f4 82 Data Ascii: Z^_$]gM:^^Q2lf.iWpFT(k_jsh]bIkxupVb]PZN06EPzp.,%F8g-T~$rm4;RSKb9{t0.n_!#m8&!tA<Sjfk5j]Mi4eCEPkYd(J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49796	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:24 UTC	1459	OUT	GET /onerfstatics/marketingsites-neu-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/1b-9d8ed9/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/43-5a5ab8/ca-ae3ce4?ver=2.0&_cf=02242021_3231 HTTP/1.1 Host: wwwms.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cab8c6cd-d43c7a7f.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:28 UTC	1032	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:28 GMT Content-Type: text/css; charset=utf-8 Content-Length: 22760 Connection: close last-modified: Tue, 21 May 2024 12:23:01 GMT x-activity-id: 7107cf15-ef45-484d-a411-ccc82bfdbac9 x-appversion: 1.0.8902.7328 x-az: {did:92e7dc58ca2143cfb2c818b047cc5cd1, rid: OneDeployContainer, sn: marketingsites-prod-odwestcentralus, dt: 2018-05-03T20:14:23.4188992Z, bt: 2024-05-16T12:04:16.0000000Z} ms-operation-id: fe63eaa770263341bb90be30aea3c8bd p3p: CP="CAO CONi OTR OUR DEM ONL" x-s1: 2024-05-21T12:23:01 x-s2: 2024-05-21T12:23:01 timing-allow-origin: * access-control-allow-origin: * access-control-allow-methods: HEAD,GET,POST,PATCH,PUT,OPTIONS x-azure-ref: 20240521T151015Z-164d49668c6z6cvxu53z87x6gs00000004mg00000000v3mp accept-ranges: bytes ak-forward-host: cache-control: public, max-age=21083377 vary: Accept-Encoding tls_version: tls1.3 ms-cv: CASMicrosoftCV463b5ff0.0 ms-cv-esi: CASMicrosoftCV463b5ff0.0 x-rtag: RT content-encoding: gzip
2024-09-19 11:53:28 UTC	13428	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed bd 6b 8f 24 c9 91 18 f8 fd 7e 45 a8 06 03 76 b1 2b aa 23 9f 95 55 89 e9 23 45 8a da 01 48 49 10 b9 a0 00 62 96 88 8c 8c ac 8c e9 c8 8c 54 46 64 55 d7 a4 fa 70 27 ad 9e 27 e9 6e ef 89 03 86 c3 dd 21 f7 6e b5 4b 2e a4 15 a5 d3 e3 ee f4 8f 76 fe 82 fc 15 11 fe 30 7f 45 44 35 b9 38 b1 d0 c3 aa 4c 37 73 73 73 77 33 73 73 73 b3 6f 24 db f8 58 a6 55 70 f1 db 3f f8 4e b8 b8 58 fe 57 af be fe 97 82 e0 ef 04 df 2a 0e 4f c7 ec 7e 5b 05 e3 68 74 13 7c 2f 4b 8e 45 59 6c 2a f4 c5 f1 50 1c e3 2a 2b f6 a8 d9 0f b6 59 19 e0 cf 1f e3 63 1a a0 df 57 71 99 ae 03 f4 5d 71 0c b2 7d c2 1a a7 65 b0 43 ff 3d 66 71 1e 6c 8e c5 2e a8 b6 69 b0 c9 72 f4 79 9e 95 15 82 58 a5 79 f1 18 bc 48 8a 3c 4f 93 2a 7b 48 f3 a7 ab e0 02 a1 3f ae 83 bf 11 1f ab 27 Data Ascii: k$~Ev+#U#EHIbTFdUp''n!nK.v0ED58L7sssw3ssso$XUp?NXWO~[ht\|/KEYlP+YcWq]q}eC=fql.iryXyH<O{H?'
2024-09-19 11:53:29 UTC	9332	IN	Data Raw: e3 3a ad 53 02 ed 7f 2a 94 c6 fa 9d 40 3e 00 44 82 4e 8e d9 3a 16 17 ad c1 3a 76 b8 4a 6b df f6 79 c3 e3 5b 35 16 68 d4 dc 89 5e f0 d2 b5 0e 02 74 33 ce ea e9 e6 57 72 2d fe c5 ab a3 b1 9b 02 33 61 ac 09 a7 02 85 c4 02 10 dd 10 06 38 f0 d7 e9 80 66 c2 4e 2f 90 5b 6d c5 5f d1 48 8f a1 c4 64 56 0b 48 66 1a a0 c5 b7 97 ac 3e dd ac d1 34 fc c0 f0 7d d2 a5 33 aa 56 65 08 5a a1 9d e8 a5 70 85 d4 4e b5 f6 05 02 d4 27 fc ca 54 d7 58 7d 6d 0a c6 4c 08 b2 53 1f 55 23 34 bb 6b 79 48 ee c2 68 1a 30 c1 77 b2 e4 df 9f f3 49 d4 e4 48 06 d8 8c a6 b1 b1 24 d1 1c 4f 01 95 c1 ed ab a5 b2 6a 06 55 a7 88 42 e7 b4 a5 fc 19 49 87 db 7c b8 2b c9 07 7c c3 3a 4f 25 e9 87 9c 50 1e b1 bb df a8 ea b8 25 8d fe ff 84 ce 04 58 1b 9f 76 7b 64 97 61 5a 1f 23 b9 b4 ad d5 ce 15 ec 10 ab c4 Data Ascii: :S*@>DN::vJky[5h^t3Wr-3a8fN/[m_HdVHf>4}3VeZpN'TX}mLSU#4kyHh0wIH$OjUBI\|+\|:O%P%Xv{daZ#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49805	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:28 UTC	1559	OUT	GET /css/MeControlCallout/teaching-callout.css?v=690pjf05o15fVEafEpUwgaF8vqVfOkp5wP1Jl9gE99U HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:32 UTC	611	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:32 GMT Content-Type: text/css Content-Length: 1041 Connection: close accept-ranges: bytes etag: "1db057acf526f09" last-modified: Fri, 13 Sep 2024 01:18:16 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6ME4ASK5H0:00000002 x-operationid: dd785e7ce9bb15837b7057cd4d65fbd6 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=628 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:32 UTC	1041	IN	Data Raw: 1b 08 13 00 e4 77 3f ab af 5f e2 55 b3 ea 22 ca e8 e1 95 de 50 9f 4a 16 81 94 51 76 8c 3f 7f bf 17 6c 53 8d a4 28 a3 73 ce 5d b7 6d cf 16 49 79 73 15 a9 49 d1 38 d0 89 27 65 f2 08 fe d7 8f 53 33 a6 c5 d7 00 c3 b2 64 7b 98 6b 63 b2 c9 dc c5 23 2e a5 3e fa f7 da e8 05 ec 56 c8 fa 38 30 c7 18 e3 c6 6b c3 4a 6a 97 72 45 71 30 a1 f9 5f e9 16 23 cb 4a b2 49 30 c6 cd 58 13 0c c3 d0 6c 45 5b 97 cd 02 ea 5f 40 87 d4 89 93 50 23 fb 57 f3 4b 49 5b 1d f6 89 5e 1b ca 3a 6e c1 3f b0 56 af 93 e6 37 d5 cf 6b a5 ee 2e 5e ac dc c2 cc 84 05 32 6a 61 de dc 61 9b 19 46 59 61 61 1e 2e 95 b1 bd 03 f4 86 a5 65 64 b3 28 5a 32 81 50 13 7c 56 58 c2 f9 4b 09 0c 0d 03 d3 a8 71 0b f6 ed f5 12 fd 1e f2 1b ba 49 18 3c 23 39 35 a6 5a 6f 15 2a 15 9d 56 1b e7 e6 44 8f 61 41 db 20 ec fc e6 Data Ascii: w?_U"PJQv?lS(s]mIysI8'eS3d{kc#.>V80kJjrEq0_#JI0XlE[_@P#WKI[^:n?V7k.^2jaaFYaa.ed(Z2P\|VXKqI<#95Zo*VDaA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49806	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:28 UTC	1542	OUT	GET /css/Article/left-nav.css?v=P4vuAkZCGQgjSSlYzU6z5FtdGykZHjeUthqLptyBPAk HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:32 UTC	612	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:32 GMT Content-Type: text/css Content-Length: 1257 Connection: close accept-ranges: bytes etag: "1db057a64a154b4" last-modified: Fri, 13 Sep 2024 01:15:17 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6MCQVVBV2R:00000003 x-operationid: 1cc5bd5cc320ee31991979dab2254976 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=3401 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:32 UTC	1257	IN	Data Raw: 1b 33 14 00 e4 d4 59 55 ad c5 87 04 68 4c 3c f0 87 9c 0c 0c bb d6 1a db 0a ec fa 0e d1 55 df 94 b1 ec fe af c6 7e 1f 3a 91 14 08 99 44 2d 7b 7b 07 9e d4 93 49 b2 dd 3d c1 dc 9b 45 1a a1 41 c9 9a 48 0c f1 b7 f6 be 2d 71 ba 47 d0 87 74 42 6f 6f f0 ff e7 df ad 9f e4 a7 41 d8 2b d6 cb 2f 24 75 b3 79 8c a3 7f ca f7 37 7a 2f f6 a8 13 73 4a 92 4b 12 89 a3 6f 73 a0 2f 35 39 8f f4 69 5a 60 f5 05 d4 4d a7 5c 38 cd 8a bc c8 8b bc 09 8c b1 3b a5 15 ae b3 9b 79 c5 6e d2 cb 60 5a 51 02 0d fb 08 03 ef ae 55 da 9f 67 b5 87 0b f3 22 ed 32 6b a7 88 15 56 58 4d 7a bd 1b d6 8b 5e a2 5b 08 8f ab fc a1 27 ba 13 12 df 0a 3c 2c 92 f6 6e ff d1 5b 52 3b bc 39 7b af 15 4b 92 9a 14 2f 6b f4 5b a1 18 92 26 40 8a 96 a3 99 09 0c c4 3a d5 69 d9 43 58 30 11 d9 60 b8 14 b6 64 60 c2 da fb Data Ascii: 3YUhL<U~:D-{{I=EAH-qGtBooA+/$uy7z/sJKos/59iZ`M\8;yn`ZQUg"2kVXMz^['<,n[R;9{K/k[&@:iCX0`d`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49807	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:28 UTC	1553	OUT	GET /css/Article/multimedia-left-nav.css?v=T9eShvohNWNoeaREOFqDtfJEADMJbYbmEACZdn17tME HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:32 UTC	611	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:32 GMT Content-Type: text/css Content-Length: 1906 Connection: close accept-ranges: bytes etag: "1db05798ea60318" last-modified: Fri, 13 Sep 2024 01:09:18 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6MA84HPUOK:00000003 x-operationid: 3c73775bc52e0f661ce3457d109a1a28 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=550 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:32 UTC	1906	IN	Data Raw: 1b 17 30 00 e4 4f d5 d7 69 c5 f1 db 4e 23 18 80 fd 83 ee 5d df 29 1d 04 1f 25 9c 40 00 57 28 51 1f 47 a7 2d 73 2e 6b 86 bd 8e 5b 72 ef de da f3 48 94 c4 d8 52 95 bb 22 cc a4 d0 bb 6a c5 dd e1 b8 c9 64 26 3f bb 3f 7b 5d d1 5a 7d be 0a 85 f1 cb 79 4a 75 3a 1f c5 c3 e1 40 38 e4 2e 47 ab 9b 45 71 ec ea 5f f3 ff 3f ff dd 85 49 7d 3d 48 77 c3 05 f5 2d 3a f3 b3 7d b1 79 f3 a6 60 90 fc 39 8c e1 25 3f c4 43 3d 35 db 42 9f db ed 09 ef 06 58 c1 18 18 25 74 ce c4 65 76 c1 c8 0a 35 fe fa 3c 14 87 fc f8 06 f0 1e 4f 84 d1 18 7f cb b6 c6 5f 9a 56 1e d7 ef 6e 1c f1 11 fa bd 0c f8 bc 06 bf 49 a3 71 13 f3 82 2b f8 e2 43 4c 3f ea f0 64 2e ff 9b e2 ef 12 cc 9d b7 02 c5 72 69 46 f2 dd bc e3 82 14 0a 7c 14 20 47 09 1b 8c 0e 78 8f 02 cf 65 c9 06 b6 06 d0 bb 27 49 fa eb eb a0 cf Data Ascii: 0OiN#])%@W(QG-s.k[rHR"jd&??{]Z}yJu:@8.GEq_?I}=Hw-:}y`9%?C=5BX%tev5<O_VnIq+CL?d.riF\| Gxe'I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49808	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:33 UTC	1349	OUT	GET /cms/api/am/imageFileData/RE1Mu3b?ver=5c31 HTTP/1.1 Host: 7085cdbe-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cab8c6cd-d43c7a7f.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:37 UTC	505	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:37 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close access-control-allow-origin: * last-modified: Wed, 11 Sep 2024 16:14:49 GMT x-datacenter: eastus x-activityid: 35c8cc41-a188-4e76-9936-61fee7f3ef6f timing-allow-origin: * x-resizerversion: 1.0 content-location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE1Mu3b?ver=5c31 x-source-length: 4054 cache-control: public, max-age=145387
2024-09-19 11:53:37 UTC	4061	IN	Data Raw: 66 64 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d8 00 00 00 2e 08 06 00 00 00 4a eb d7 e9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 32 20 37 39 2e 31 35 39 32 38 34 2c 20 32 30 31 36 2f 30 34 2f 31 39 2d 31 33 3a 31 33 Data Ascii: fd6PNGIHDR.JtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13
2024-09-19 11:53:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49809	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:33 UTC	1579	OUT	GET /lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0 HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Origin: https://cab8c6cd-d43c7a7f.carner.com.co sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:38 UTC	625	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:38 GMT Content-Type: application/javascript Content-Length: 31966 Connection: close accept-ranges: bytes etag: "1db0579f8271c04" last-modified: Fri, 13 Sep 2024 01:12:15 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6MBH8UD90T:00000004 x-operationid: 4adf64a32d73d1d9743c6ec0ad4d81c2 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=46 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:38 UTC	13835	IN	Data Raw: 5b 83 5d c1 8c 64 a5 b6 87 80 66 e0 b8 1e eb bc ff f7 7d d5 fe ff ef cf 97 88 c9 a0 d8 e6 16 45 39 6d ef 19 ca bb 5c a9 e3 b4 99 c9 ab 91 db a6 03 31 59 b0 b8 29 a1 a1 00 15 04 65 b9 02 c7 ff 7f d3 ec df 9c c3 f9 72 3e 53 2a 45 4a 02 0e bf b1 91 8c cb 94 c4 fb 9c 7b 83 5b 55 08 aa 00 04 05 a0 03 98 0e d0 26 40 9b c0 9e 7b 0b cd 57 55 e8 f9 02 d0 fd df 02 bb f9 9f d0 4d 7e ad 26 39 eb 2d 34 38 4b ea 21 27 12 9a cd b5 44 ce c8 d0 7c e7 23 85 0a 12 9a a7 b5 e6 99 80 f2 26 0a 26 d4 63 a8 d4 fd b8 b5 1a 35 88 88 4c d3 65 43 b4 2c c9 d7 b2 5e 5b ea 88 32 c0 e5 fc 31 b4 af fb bb fd 4a 9b c4 18 63 45 84 07 ce fa 63 ec fb ff bf f7 7d 3f 7b cc ac cc 4c 11 58 c0 9c ff 14 8b ab 6c f6 e7 2f 23 87 a7 d9 e9 79 f1 5d b1 9c a5 99 da c2 ec df eb 19 3e 92 7c b5 ad 77 f7 ad Data Ascii: []df}E9m\1Y)er>S*EJ{[U&@{WUM~&9-48K!'D\|#&&c5LeC,^[21JcEc}?{LXl/#y]>\|w
2024-09-19 11:53:38 UTC	16384	IN	Data Raw: 47 2f 92 9a 29 6c 97 ce 79 c0 4c 30 a3 29 e4 8d e2 a1 f7 db af 02 f0 f6 2b 69 04 00 a8 32 ea da 8c b2 ce 43 a2 59 e6 17 b1 bc d6 77 3e a8 2d 95 c5 41 ab 42 95 5e 6f 8d 3e 0e db 36 d9 38 d2 eb ad 94 b6 4b a4 f8 76 c3 de 3f b6 43 bf 1f 28 41 a5 de e1 de b6 1c ee 11 61 c2 e8 77 bb 7e fc 1b 2a 1e fc 47 29 72 2d 02 ba 30 ec fd a3 92 65 5d 2a f6 b6 e5 d7 4e ca da 37 77 8a ea f5 1d d5 c5 ea 10 fd 53 98 46 96 4d 5b c6 8e f1 c8 66 e2 15 18 92 49 f0 48 30 33 7f 42 cb b4 50 18 72 7d b9 68 61 71 cf b4 f8 fc 2c 7d f6 97 e9 d9 cf d2 66 a1 ea ea 4f 73 32 89 b7 07 03 7e 09 ad 5e d8 d5 96 e9 ce 69 21 d5 6b d7 5f 05 b3 b3 b3 e4 30 a3 f8 23 b9 eb 53 5d 34 fa 3c 29 f1 b9 2d 34 01 9e 36 44 f1 38 27 0a c0 ce 44 32 90 9f 60 54 47 bd 4a 0a c8 66 9e ee 11 05 e0 d6 52 d0 42 c7 80 Data Ascii: G/)lyL0)+i2CYw>-AB^o>68Kv?C(Aaw~G)r-0e]N7wSFM[fIH03BPr}haq,}fOs2~^i!k_0#S]4<)-46D8'D2`TGJfRB
2024-09-19 11:53:38 UTC	1747	IN	Data Raw: af 89 e8 d7 68 ca 4d 11 90 a9 1b f6 4d 8b 0e 27 8d 53 f1 04 fe bd fb d7 ba a9 94 50 3a 5b 88 14 66 4b eb 70 7a aa 2b fd 07 a6 56 2a 90 fa ab 3b 3c 8f 2b 1f cc c0 02 60 2d 3b 7d 17 91 05 70 77 25 75 76 af 06 50 45 ba 03 f4 94 39 29 75 83 ca d2 3b 6b 22 0e 85 5a 9b 8c 7c 91 d5 cb 06 9a 4a 59 3a 2b e7 8d 23 fa bb ab dc 6f 5c 92 72 ad bc 4a 84 ac f2 ad ef a3 96 4c 43 40 ff c3 cc bd 18 8b 3a ab 5a 67 64 53 fb b1 ce 21 55 44 28 e6 5b 33 f7 d2 7c 59 05 3a 45 ef cc 07 06 70 7d 79 a1 c4 01 c0 cd ab ac 22 20 ed 57 45 bd ba 00 2d 79 02 89 0f ef d7 f7 02 b0 8c 3f 45 24 e5 88 c4 41 65 1a 9a 12 fd 85 78 cb 4c 4b 71 1a 36 81 46 e8 2c 3f 89 21 1a ab 2c 9e a4 42 bd 56 e2 a6 b5 a7 1f d4 c2 a5 55 2b 84 0d 34 f0 50 74 5d 80 8a 61 42 1d c9 75 61 45 ca 37 b4 00 db 07 b1 51 9f Data Ascii: hMM'SP:[fKpz+V*;<+`-;}pw%uvPE9)u;k"Z\|JY:+#o\rJLC@:ZgdS!UD([3\|Y:Ep}y" WE-y?E$AexLKq6F,?!,BVU+4Pt]aBuaE7Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49810	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:34 UTC	1493	OUT	GET /css/fonts/support-icons/mdl2/latest_v4_70.woff2 HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Origin: https://cab8c6cd-d43c7a7f.carner.com.co sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cab8c6cd-d43c7a7f.carner.com.co/css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYo Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:38 UTC	575	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:38 GMT Content-Type: font/woff2 Transfer-Encoding: chunked Connection: close accept-ranges: bytes etag: "1db05713703bd40" last-modified: Fri, 13 Sep 2024 00:09:35 GMT request-context: appId= x-correlationid: 0HN6JH2Q9Q78D:00000003 x-operationid: 4af1cbf574236735ab409216e86b0da3 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=2938 access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:39 UTC	14482	IN	Data Raw: 33 38 38 61 0d 0a 77 4f 46 32 00 01 00 00 00 00 74 c0 00 0f 00 00 00 00 f1 58 00 00 74 62 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 16 8b 60 00 8d 36 08 2a 09 82 59 11 0c 0a 83 9d 20 82 dd 12 01 36 02 24 03 87 2c 0b 84 20 00 04 20 05 97 73 07 20 0c 81 53 1b 22 ce 87 82 60 8c 03 00 40 ff 1e 22 8a fa f0 88 e4 a4 d5 03 f0 ff ff 21 21 dc 54 35 e0 0f 3f fd f2 db 1f 7f fd f3 9f ff fd 23 74 f8 9c 37 04 20 d7 ee 8d 20 7e 22 3f 41 1f f4 41 e3 d4 dc 34 d4 96 2f c4 e9 bf 7d 03 27 e8 44 f9 38 92 45 92 d6 13 17 d9 ac dc 9b 43 0b c9 9b 9b f2 1b ed 54 e1 f9 6f ed f5 be cf 14 d8 c0 6c 08 55 4a 2a 00 b0 53 42 d8 82 af b0 55 d3 b2 44 36 aa c7 57 95 0f 75 56 ce 6a 2c 1c cb 90 09 2b 8b 3e 22 4e f8 1e 08 7d d8 26 45 f3 c0 50 7e d1 06 8a ea Data Ascii: 388awOF2tXtb``6Y 6$, s S"`@"!!T5?#t7 ~"?AA4/}'D8ECTolUJSBUD6WuVj,+>"N}&EP~
2024-09-19 11:53:39 UTC	15422	IN	Data Raw: 33 63 33 36 0d 0a 37 c8 40 43 6e 0d ad 13 f7 f3 07 60 e2 7e 6b 83 1b 88 29 a0 3f 0a 58 86 b4 48 e7 11 04 14 52 24 e0 af 18 9f 5d 90 28 cd 0d a3 dd b9 33 9e ee 1f b2 5e 11 a0 09 50 6c 08 f1 4f 1f bf 73 27 3b 34 4f 96 a8 65 f3 11 d2 ed 03 7f d9 b5 6b d6 2b d7 ae c9 fc 03 5e bd d1 7d b7 4d 57 d4 7f b5 36 57 2e 9a 32 5f 9b ba fc 81 82 4a 1a ca b6 26 6e d9 92 68 cd ce 4e b4 6e d9 62 4d cc 4e dc 1e f4 13 99 a1 2a 35 d6 d6 96 14 a5 c7 af c4 34 d8 ca f8 f4 a2 92 da 5a 63 a9 2a 83 dc 18 b4 3d f1 f0 b8 8a d0 04 1e a9 17 46 f1 8a 8b 85 7a cd c0 d6 f3 f2 df 56 cf 43 06 07 98 bf ff c9 62 76 6e 04 ac 57 88 b8 75 37 c9 6a 76 a4 d8 05 94 db 4f aa 84 06 c4 51 d7 1c dc db 7c 5a 97 e7 c7 8f db 16 d6 12 b8 63 7c 90 e8 08 de 59 43 38 ef 4a 49 71 de 45 d4 04 ef 8c 75 fa 9b df Data Ascii: 3c367@Cn`~k)?XHR$](3^PlOs';4Oek+^}MW6W.2_J&nhNnbMN54Zc=FzVCbvnWu7jvOQ\|Zc\|YC8JIqEu
2024-09-19 11:53:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49811	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:34 UTC	1495	OUT	GET /css/fonts/support-icons/fluent/latest_v1_95.woff2 HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" Origin: https://cab8c6cd-d43c7a7f.carner.com.co sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cab8c6cd-d43c7a7f.carner.com.co/css/fonts/site-fonts.css?v=4M_1wOASateOs9zdphCtIqMvtKo366Gf6pkOjDqzkYo Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:38 UTC	575	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:38 GMT Content-Type: font/woff2 Transfer-Encoding: chunked Connection: close accept-ranges: bytes etag: "1db057acf52f38c" last-modified: Fri, 13 Sep 2024 01:18:16 GMT request-context: appId= x-correlationid: 0HN6ME4ASK6R6:00000002 x-operationid: 14daabab4e3c7e292ede9295d2b4be52 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=1350 access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:39 UTC	7242	IN	Data Raw: 31 63 34 32 0d 0a 77 4f 46 32 00 01 00 00 00 00 8f 8c 00 0b 00 00 00 01 4d 08 00 00 8f 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 00 8e 62 11 0c 0a 84 ee 18 84 95 57 01 36 02 24 03 84 3c 0b 84 34 00 04 20 05 90 58 07 20 5b d2 1d 51 44 60 e3 00 00 50 d9 3c 44 54 d5 7e 58 11 c9 49 ab 07 e0 ff 22 21 f3 82 d5 1f bf fe fc f3 df 5f 04 c6 4d 7c ac f3 7c 5b 15 27 ed 09 d0 8f 46 52 e9 99 45 48 3f 62 ce fe 11 d6 02 e2 80 30 bb 0c 0a 4a b0 a4 de fd d6 6b c9 fc bf 4b fd ff bd 07 0c 5b 9a 19 c3 80 31 69 72 9c 78 a0 49 29 5c 48 db db 14 30 ed 11 38 71 d2 d8 1c c0 c6 20 69 df fb 9e f4 75 d7 92 7e 07 ec 31 05 0c 03 46 18 b0 43 64 12 14 1e 14 de e3 bf f3 f9 70 78 7e 9b 3d 25 8c a2 44 f9 48 08 8a d8 08 d8 28 1f da 40 41 c1 c0 88 9c f6 Data Ascii: 1c42wOF2M<`bW6$<4 X [QD`P<DT~XI"!_M\|\|['FREH?b0JkK[1irxI)\H08q iu~1FCdpx~=%DH(@A
2024-09-19 11:53:39 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a e4 f1 ee 86 d7 a7 6e 6c 6c a4 80 38 16 8f bb de 3c 43 86 81 65 fd f3 81 dc 4c 9b 32 e4 6a 6e 8d 8c 10 2a a7 6a f3 e7 dd f1 ae 85 e4 80 ec 0f d2 fd bd 6f 0f f4 c5 e7 08 55 6c e4 e9 4b 5f ae 2b 64 9e 21 f9 09 8b 9d 3e 95 7e 4a 28 ae 08 3e 2b 09 b2 3b 28 e7 16 1f 79 fb c2 9c 6c 75 3b 22 82 90 10 64 46 ad 4c 13 6b 7c e3 98 04 96 ee 1a 86 71 d7 d3 13 e8 d4 1d ed b6 58 55 50 2c 5c ff 00 c9 89 f3 e6 14 85 a3 f0 2f d8 bd 16 23 00 f0 f6 77 5e 81 ed 4c ce 40 69 3c b1 8c e4 f7 da 30 20 79 1b 28 80 36 4c 42 2c 47 21 44 3d 3d 50 8a 42 02 b0 0e 6b 91 29 f1 ea 90 59 da 26 8a 95 4d 60 11 37 90 9d 0a 06 05 45 70 29 27 c3 53 1f 59 40 34 85 43 10 f0 9e 95 0a 5c 5a 0d ae 7c ce 94 d0 8f 45 be 2a 54 70 db 06 3a e5 62 20 4f 6e bc b2 7a 3c 49 5c 0b ac 19 7e 0a Data Ascii: 3ffanll8<CeL2jnjoUlK_+d!>~J(>+;(ylu;"dFLk\|qXUP,\/#w^L@i<0 y(6LB,G!D==PBk)Y&M`7Ep)'SY@4C\Z\|ETp:b Onz<I\~
2024-09-19 11:53:39 UTC	13146	IN	Data Raw: 0d 0a 33 33 35 30 0d 0a 99 6a f6 42 59 73 6e e1 39 cb 7d 23 fb f1 54 96 10 05 b3 a8 78 bb fb fb 2c e3 0b 73 9b 65 0b d9 ea cc dd 91 aa b0 4d 9b 66 e2 c3 1b ea bc 38 35 2a ed 70 79 92 64 59 4d cd 32 49 52 f9 e1 b4 a8 d4 cd d4 cb 97 cf a9 d4 6a 80 36 d5 64 51 e5 d4 34 66 21 33 0d 65 91 9a d4 02 3b 73 58 9a 39 ed da 2b a0 05 0d b3 0e 65 e9 65 35 2a c5 d4 3d a5 51 79 1e 1b 6e 42 2c 3e 9f cf e7 26 8a b1 eb 02 4c 2b 34 5a 26 55 4e dd 71 43 06 f3 6b 8d 33 4e 46 6f 36 d3 0b bd 16 7e 43 6f 7f ad 0c 6a 31 e4 f9 86 f7 da dc e7 db db ec 94 35 f7 76 f9 ab 24 02 ad 9b ff 75 7f ad 9b 44 18 a0 5a 53 f7 53 ea af 2d 2b 3f 68 73 f5 ef e6 97 85 ce 16 6d 1d 5e 38 99 7d 5a 50 5a 72 46 b0 33 67 64 61 d1 96 d0 59 53 69 6a c0 06 7d 7f 53 cd 48 c2 46 9f 94 94 8d 3e 23 09 4d 35 fa Data Ascii: 3350jBYsn9}#Tx,seMf85pydYM2IRj6dQ4f!3e;sX9+ee5=QynB,>&L+4Z&UNqCk3NFo6~Coj15v$uDZSS-+?hsm^8}ZPZrF3gdaYSij}SHF>#M5
2024-09-19 11:53:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49812	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:34 UTC	1548	OUT	GET /lib/oneds/dist/ms.analytics-web-4.0.2.min.js?v=O7wAAOKAVN2-OLLnoh3KjWb9pW6khEi85GWLxrUYqXA HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:39 UTC	626	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:39 GMT Content-Type: application/javascript Content-Length: 58732 Connection: close accept-ranges: bytes etag: "1db05798ea47ad9" last-modified: Fri, 13 Sep 2024 01:09:18 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6MA84HQ1M7:00000005 x-operationid: ad2021170c0e134f47cb3fdd55699bc0 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=161 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:39 UTC	13834	IN	Data Raw: 5b 5e 4a 32 0a 49 7b f3 0f 1d 00 11 c5 7d f8 3a a2 27 ad 16 0f 80 3a 52 17 fe fc f9 f7 d7 81 83 eb 1f a6 65 3b ae e7 fb f2 7d f5 ff ff ff 7f ff 7c 89 b8 39 98 e8 a9 36 43 d9 49 46 42 b9 87 ca f1 2b 4e fc 8a 9f 49 30 b9 5c 30 d9 94 10 53 80 02 82 b2 1d 91 f7 f2 7d b5 fe ff ef cf 97 84 3b 87 03 1c 75 60 ca af c9 50 ee d1 fa 95 44 89 2d 7b 2c 3b c9 0c cd e3 82 88 26 85 98 02 18 10 a4 ed 88 dc bf 7e cd fe bf 7e 27 a7 52 14 9d f4 10 c1 65 12 7c a7 ac 16 5a ed 09 db 40 e3 12 65 52 44 3b 86 59 80 87 48 e6 66 f1 bf b7 d2 3e 7d 80 e4 68 d9 77 c3 e6 d2 b3 5a d2 de a6 66 2c c5 18 ee b9 ef 3d e3 e5 62 bc ac 82 91 59 80 91 59 80 91 05 c0 c8 2c c0 a8 02 f8 32 ab f8 27 b3 c0 fe 51 55 68 29 0a 20 a5 28 80 3d 0a 80 d4 52 40 77 28 40 f6 d7 9a 05 d0 28 b0 db 00 9b 5a d8 f3 Data Ascii: [^J2I{}:':Re;}\|96CIFB+NI0\0S};u`PD-{,;&~~'Re\|Z@eRD;YHf>}hwZf,=bYY,2'QUh) (=R@w(@(Z
2024-09-19 11:53:39 UTC	16384	IN	Data Raw: 6a 22 0a bc a3 82 82 0c ab 95 62 74 bf 52 82 a9 3a 1c b0 2b c6 7d 80 c3 fc 8c b5 83 30 d7 ae 7a ee 82 4d 58 20 ee fb 56 dc 32 77 46 c1 98 c4 74 24 c6 3c 56 8c ca 13 cd 7e e6 82 c4 d8 1d 83 fd 74 71 06 1c c6 6e c1 6f 63 88 a5 4f d7 3e 61 a7 94 3e 5d eb c6 17 7d ff 13 5f bd 93 a8 52 37 e3 c3 69 0e f0 d5 93 03 8c 64 58 dd 00 a7 f4 fe 84 7d 99 2f 6c 59 6a e5 fc 5b 85 78 7c 88 88 a8 f0 3c 6d 22 92 28 54 69 e4 5e d3 e4 c9 04 00 ba 74 e6 33 a4 6d 64 e3 f8 b8 a3 a6 1b 0b c0 4b 4f 09 fb 63 67 29 6d 8c 9c 99 a1 67 f9 31 bc 6e 96 92 83 28 8b fd eb 78 ab e2 78 fb a9 a7 5b 79 cb 92 c2 14 66 36 48 0e 56 ab c3 28 45 0c 4b 83 ce d5 b9 f2 fa 56 71 2c 51 86 4d a4 24 11 aa 3b a5 a7 7b d8 01 a6 15 ab 5b 75 87 62 c0 c8 b6 c5 ee da 81 b3 95 36 aa b7 9f 9e f7 7b c3 fa 5c 3d 6c Data Ascii: j"btR:+}0zMX V2wFt$<V~tqnocO>a>]}_R7idX}/lYj[x\|<m"(Ti^t3mdKOcg)mg1n(xx[yf6HV(EKVq,QM$;{[ub6{\=l
2024-09-19 11:53:39 UTC	16384	IN	Data Raw: 5b 8d c9 13 f0 55 86 ef 8a ef 86 5b 36 29 4b 5b 87 69 fe 38 8c c9 e3 f1 1d 05 85 52 cb df 06 bc 71 5a 83 87 f2 1b 1c 46 0b cc d4 96 5f 1a 35 47 3d 6c 96 8c 53 ec f0 f0 aa 31 22 62 af 75 1d a1 0a c9 ad 7e 1c fb d2 e1 3a 9f f0 bb 01 ed 52 59 1d 4b 6a 68 45 26 33 3e f2 7d 96 0d a8 3b 99 fc a3 9c 0d 0b 09 7f af 8b 9e 33 82 7d 28 f7 76 c9 04 07 8f bb cb ad 8f 10 6a 1a ff be 2d 06 e0 ac 16 9a 13 49 63 03 2f 7f e3 d7 dc 65 d0 47 9f 72 ee 96 34 c2 29 6d 90 27 13 84 88 18 3b 2b 27 67 6d 36 b6 b3 58 c9 de 8f 75 f3 3c 99 a0 9e f2 3d 73 87 bf de 2b 77 38 64 6a 5b b8 6d 60 ed 5a b2 87 63 1a 1f f2 c5 d7 b6 b9 c3 5f b7 cf 1d 6a 3c 6b 47 fc b8 8b 55 b4 4b fb 97 2f 1e 7f e7 c9 04 fb e9 5d db dc 61 f7 db 2f 77 3c 88 bb 71 cb bd 41 87 46 eb 7a 28 4f 26 38 58 6a 37 c3 17 8e Data Ascii: [U[6)K[i8RqZF_5G=lS1"bu~:RYKjhE&3>};3}(vj-Ic/eGr4)m';+'gm6Xu<=s+w8dj[m`Zc_j<kGUK/]a/w<qAFz(O&8Xj7
2024-09-19 11:53:39 UTC	12130	IN	Data Raw: f9 47 75 84 7c b8 bb 42 bc ce fc 48 98 8a 6b 04 f5 82 30 ff c1 53 19 d2 b3 c3 f4 fb 5d 35 10 ab ce fe b3 06 2d ee 68 fc 7b 98 e4 fd ba 06 1c 74 94 08 92 63 0b 30 f6 3e 48 4e 21 d2 4d 27 fd 5c 66 03 d2 95 9c 94 cc cc b5 83 40 63 f8 31 6f 2e e2 4c 06 12 26 49 57 4d 34 a2 ef d9 6a 32 a3 14 b5 f5 d8 31 62 13 45 1b f0 a9 cd b9 7f e9 ff f7 c7 5c a4 91 3c cf 2e 65 d4 a5 af 73 30 40 2b 7a fd 1c ef ca f4 b7 32 e3 97 be 90 8c ee 37 d4 a4 1a fe de c0 53 e3 bd 9b e9 99 60 f4 22 52 b4 de 46 b5 e7 a6 3b da 8c da 97 38 cc 2f c1 b3 5d 0e 1b 1a bd f2 24 83 cd e8 ed df 1c 30 8d 56 e8 6f 45 8e ce 9d 6d 8c 26 3f 9a 03 bb 75 bf e7 de 35 cd 25 06 7e 1f 4d d4 f4 45 c9 c0 41 e0 eb f0 6e 18 50 fc c1 60 a0 c4 6f 49 0b 1e 57 25 b7 39 69 34 08 f8 55 d5 11 bd 22 29 b6 2b 34 73 fd 04 Data Ascii: Gu\|BHk0S]5-h{tc0>HN!M'\f@c1o.L&IWM4j21bE\<.es0@+z27S`"RF;8/]$0VoEm&?u5%~MEAnP`oIW%9i4U")+4s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49813	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:34 UTC	1529	OUT	GET /lib/uhf/dist/uhfbundle.js?v=of4Bk4iHW2lu2zc7UaUcCo47rVLNSJYX0ELAcivbHkg HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:39 UTC	625	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:39 GMT Content-Type: application/javascript Content-Length: 36109 Connection: close accept-ranges: bytes etag: "1db05713701d2d3" last-modified: Fri, 13 Sep 2024 00:09:35 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6JH2Q9QF4C:00000002 x-operationid: c11939a90853b6e373aed357a751a420 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=59 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:39 UTC	15754	IN	Data Raw: 5b a9 1b 42 15 e9 49 ab c5 03 a0 2a 30 76 37 c4 3a ae e7 fb de f7 d5 ea ff e7 e7 8b 44 cf 32 a8 a8 44 53 ce ab 43 ba ac eb 38 ce b4 b7 63 27 1b 3b dd b3 47 d1 cd 81 48 50 44 4c 01 1c a0 20 59 2b f2 ca 37 ad 2f e2 4c 72 66 f6 84 10 96 d2 96 50 d4 a7 a5 7b de c5 59 df cb cc 2a e3 89 36 5e 77 c3 68 34 60 34 84 d1 20 68 34 48 44 1c 08 32 33 ab 5e e3 89 06 a7 bb 01 72 81 26 38 1f 04 b9 ff 83 e4 0a 50 fc fd e4 ec 9c 04 c9 31 38 b3 6b 8c 3a 29 0c eb 7c 92 3b 27 b4 72 3c 7e 79 fc 67 69 4f 7b e7 9e e1 78 b7 0c 67 dd ab 42 03 84 88 75 6e 63 a4 38 67 1b 27 2a 2a c2 f9 19 36 44 cd ae 95 ff b6 d1 1a 18 e1 03 c5 7e 0c b5 7e 8f 46 13 a3 88 2c 81 de 99 0c fd d7 9f d9 36 63 3d 1b 63 d8 02 84 74 72 fa 18 ef e7 7f c9 4b 2b b3 fb 73 ae 76 6c a8 08 38 f2 2a 66 e7 9e ce 5e be Data Ascii: [BI0v7:D2DSC8c';GHPDL Y+7/LrfP{Y6^wh4`4 h4HD23^r&8P18k:)\|;'r<~ygiO{xgBunc8g'*6D~~F,6c=ctrK+svl8f^
2024-09-19 11:53:39 UTC	16384	IN	Data Raw: 5d 90 a6 f9 b3 9b 66 ab 53 27 8b 55 2a 27 ec d9 19 27 00 b0 70 da 4c 24 b1 2f 65 61 37 42 ae 55 9d 51 6c 10 ed da 38 1c a2 8f 81 58 1e ab 34 d9 98 ee 86 2a ca c0 25 40 2a cc d3 b9 b3 32 f9 8d 04 ad 19 98 d1 e5 7b 2d 65 a0 7a 23 d2 06 71 3e be 6d 45 b9 01 33 7d 9c a0 2f 1e 62 d8 36 a8 ad ce c2 44 95 99 9c 5f 45 29 c4 2c cc 86 e9 83 ec a6 7b d1 02 7e 0b 7e cf 6b 1b 6f 6d f8 64 60 b0 b4 65 ce c5 11 f4 44 b4 cf e6 28 bb c9 8b 48 67 5c 2b 9f 03 d2 d4 9d b6 d1 f4 42 22 52 23 bc 09 56 70 d8 bf 16 02 43 e2 3b 43 81 bf c8 62 d4 03 33 0a 0c e3 94 83 61 7a 07 96 ac 76 0a 0f 7b aa 5a 5c 2e 71 b8 1f 03 c1 ac bb ae 08 e7 8b ea 0c 95 70 f9 4e 37 ae c8 51 fd aa ba 66 82 6b 03 ba da 11 3a 80 3d 23 62 8d 72 3e 58 6d 76 09 2c 71 ea 83 9e d5 19 d2 10 22 60 78 3c 9e 8b 2b 00 Data Ascii: ]fS'U''pL$/ea7BUQl8X4%@*2{-ez#q>mE3}/b6D_E),{~~komd`eD(Hg\+B"R#VpC;Cb3azv{Z\.qpN7Qfk:=#br>Xmv,q"`x<+
2024-09-19 11:53:39 UTC	3971	IN	Data Raw: da 14 a6 e2 4f 8a 68 0c 45 43 82 0c 92 44 dc 79 69 cc c4 99 fa c9 c2 b3 98 34 ce c4 6c 11 69 a3 77 5b 25 99 09 f7 48 b1 91 01 6a 74 bd a7 69 c0 17 98 3b 19 4a e9 06 76 3d ea e9 82 12 15 da 02 05 f3 b8 52 a5 80 13 1b aa f4 40 3a a1 d0 f0 98 0c 9a c1 a1 f8 6f c2 e3 19 5e cb 42 cc d4 8b c1 2f e2 f1 15 df ec 7c 4d 89 25 78 55 79 88 1f d5 33 cc 3f bb 84 8a 87 7d e7 4f ce ef 02 6c d8 b9 d2 06 0e 69 b0 d9 2a 33 93 88 0b 14 41 e8 e6 82 bc 2e ae 42 13 1c 79 60 e1 43 1a c3 83 54 6b d3 5a d7 a2 b5 9b 27 85 4c c7 bd 86 8b cc f1 50 9b 6b ce 7a 8d 2c 7b 4e c7 ec c2 46 27 5f 4d 5b 0f 2d f9 18 d2 4f 61 5a 03 5a cb 1b c6 3b 50 1e 32 bc d9 ca 92 f2 2e 25 93 69 ad 0e f1 6f e8 25 03 2e ea a8 48 fe 24 b2 2b 5e 42 6c 01 c1 1b 10 55 96 00 ea 0b f1 d2 53 70 70 a4 9c a4 8f 6d ea Data Ascii: OhECDyi4liw[%Hjti;Jv=R@:o^B/\|M%xUy3?}Oli*3A.By`CTkZ'LPkz,{NF'_M[-OaZZ;P2.%io%.H$+^BlUSppm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49814	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:34 UTC	1526	OUT	GET /js/Support.Main.min.js?v=Ig9b0I5GejGhCpyhVI41gM7rYGTq_AR6z-NcJYm-xU8 HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:39 UTC	627	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:39 GMT Content-Type: application/javascript Content-Length: 20909 Connection: close accept-ranges: bytes etag: "1db057acf52a702" last-modified: Fri, 13 Sep 2024 01:18:16 GMT vary: Accept-Encoding request-context: appId= x-correlationid: 0HN6ME4ASK702:00000002 x-operationid: 4f54e21168542e869da8ed78be255623 accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version critical-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version cache-control: private, max-age=1422 content-encoding: br access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:39 UTC	15757	IN	Data Raw: 1b 0d db cc 48 d2 59 7b 00 34 03 c7 f5 58 e7 fd 53 be ab fe db cf 66 65 47 65 a9 ce 29 1d 84 64 fc 43 e2 e0 26 49 aa 92 6e 12 e8 04 fa 73 95 aa 9c 40 0a d9 91 c8 11 ee 50 c8 40 59 9a df 6e 37 cb ef 62 33 8b d5 bb 7f ef ab f6 3a 55 84 82 53 aa 36 38 77 b1 68 7f ae 1c 42 6c aa 73 ee bd c5 7d a1 78 0f 40 f1 00 b0 40 60 01 8a 2a 1e 08 14 60 38 f7 be 47 e9 21 e8 0f 18 76 0c 90 94 87 a4 7e a0 c2 9f 81 28 ee 9a da a5 23 20 b1 20 25 15 54 28 b8 8e b9 68 49 8a e3 d9 fc a5 bf eb 9c aa 54 54 3b ae 5c 94 6e ba d2 2a a3 55 f7 aa 63 c0 d4 48 da 75 15 71 55 f7 88 db 49 21 64 90 65 2f d8 18 9a 7b 19 e3 44 c4 13 b1 df d7 50 e9 f6 af d1 44 37 2a 22 02 49 ed f1 35 04 ee 04 78 d8 4b 37 f2 7c 58 4e 97 cb 74 d3 b0 27 45 66 fb 5f 65 8e 0d 4c 16 d3 39 66 3e 52 6f 3b eb 7c cb 6e Data Ascii: HY{4XSfeGe)dC&Ins@P@Yn7b3:US68whBls}x@@``8G!v~(# %T(hITT;\nUcHuqUI!de/{DPD7*"I5xK7\|XNt'Ef_eL9f>Ro;\|n
2024-09-19 11:53:39 UTC	5152	IN	Data Raw: 00 57 8d 58 d1 b5 ae ad 73 79 16 39 32 ac 24 bf c3 fa c3 a0 ae 61 fb 33 d3 13 82 f4 c0 95 7d 10 88 2d 36 6c c6 cc 88 fb f2 60 80 55 00 a4 af f6 41 e0 ce 77 37 58 20 78 cb 46 49 4c 5e 10 f8 dd c6 4c 4a 56 de 0f c3 a0 0e 62 9a 51 32 f9 12 6a a5 07 5f 67 11 c4 4a 91 48 45 ee b8 d1 10 ac d7 1b 89 04 0e a0 a6 ac 34 2a ad 7d d1 6a 2f 56 11 44 36 12 8c fa 5c ba 87 97 8d ad 44 88 48 76 18 4b 37 a5 d9 6e 2f e6 be 0d 5e 03 ca ea 3c 2e 34 92 b3 4e 20 40 04 4e 37 d0 79 52 e0 20 bb 65 37 8a 0f ca 39 eb 52 3f 0c b5 36 b2 69 de e5 fe a5 6d 10 a4 00 84 31 b8 2e 0a 36 8d 41 a0 b7 25 e9 d0 0f a5 d3 3a 2a 0a 51 18 d5 04 0b 2d 3a a3 e7 88 14 c2 b8 10 6a 2e 1c f0 a2 1e f8 91 ac 22 91 71 12 19 c7 79 13 23 3e f3 2d ad 9a d3 5f f4 27 e9 15 7c 92 5e 45 c6 be 02 86 06 33 17 b2 c8 Data Ascii: WXsy92$a3}-6l`UAw7X xFIL^LJVbQ2j_gJHE4}j/VD6\DHvK7n/^<.4N @N7yR e79R?6im1.6A%:Q-:j."qy#>-_'\|^E3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49815	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:34 UTC	1299	OUT	GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1 Host: baa50082-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cab8c6cd-d43c7a7f.carner.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:38 UTC	481	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:38 GMT Content-Type: application/javascript Content-Length: 10603 Connection: close vary: Accept-Encoding cache-control: public, no-transform, max-age=43200 access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS x-ua-compatible: IE=edge x-azure-ref: 20240919T115337Z-r1677749c867ls7tgctg1mugm4000000012000000001464w x-fd-int-roxy-purgeid: 38334287 x-cache: TCP_HIT content-encoding: br
2024-09-19 11:53:38 UTC	10603	IN	Data Raw: 1b 63 78 44 54 b3 7a 00 14 21 c3 dc 97 ef ab f5 ff 7f 7e be 28 ec 14 17 18 b5 61 ca 76 5e 50 70 75 15 db c9 38 13 3f e2 d7 3c 14 6d 0a 22 5b 12 62 b2 c1 00 4d d9 8a c4 ff df a6 bd fd 62 f5 ab 40 bb 55 cb 01 ae d2 14 29 da 7b df 7b c5 50 21 8d 54 8c a0 c0 73 22 08 48 d6 07 d3 7d 6f e4 f5 cc c8 fb 23 d9 1f c6 fe 24 79 03 b2 43 5a 6f c0 de 75 87 1f 2c 07 80 aa 74 39 bd b4 bb 01 86 a6 04 ae b9 69 d3 a5 ea a2 32 9c 6e e0 a5 92 b2 cf 6e 72 58 ff ef 9f e7 a2 28 41 8e 89 76 57 3a 2b f8 8e cb bb a9 bd ed d9 ef 77 fd 38 f6 7a ea 4b 3c 0d c4 31 d4 36 a2 b1 1c bf 11 fa 34 d0 d2 af ec 4e 6c 30 0a 23 46 85 3e 3a 39 3a 7a ab 4f 04 88 e6 89 85 11 48 07 0f 77 02 44 cb 24 8c 48 4d 79 18 a5 ff 5f 59 21 95 28 40 ac 96 2f c2 88 35 73 9b cc e1 e1 eb c5 51 f1 aa 2a 8e 0e aa 93 Data Ascii: cxDTz!~(av^Ppu8?<m"[bMb@U){{P!Ts"H}o#$yCZou,t9i2nnrX(AvW:+w8zK<164Nl0#F>:9:zOHwD$HMy_Y!(@/5sQ*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49816	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:36 UTC	1508	OUT	GET /d43c7a7fa2684abba15ce6c35d46a4c2/ HTTP/1.1 Host: adobe-esign.carner.com.co Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://adobe-esign.carner.com.co Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; AADSSO=NA\|NoExtension; MicrosoftApplicationsTelemetryDeviceId=064b9641-4872-4d12-b515-c8894349e9b3; brcap=0; ai_session=GcKLOHD5gWddsSjrPiLtB3\|1726746756985\|1726746756985; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; MSFPC=GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g==" Sec-WebSocket-Key: GOwBGSg/aWbpXfXZ4BZYlg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-09-19 11:53:40 UTC	738	IN	HTTP/1.1 404 Not Found Server: nginx Date: Thu, 19 Sep 2024 11:53:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: ad6b1e36-d227-4c7d-a404-988e11171500 x-ms-ests-server: 2.1.18947.4 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://bef1f851-d43c7a7f.carner.com.co/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-09-19 11:53:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49817	89.187.28.95	443	3032	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:38 UTC	1099	OUT	GET /cms/api/am/imageFileData/RE1Mu3b?ver=5c31 HTTP/1.1 Host: 7085cdbe-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="
2024-09-19 11:53:42 UTC	505	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 19 Sep 2024 11:53:42 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close access-control-allow-origin: * last-modified: Wed, 11 Sep 2024 16:14:49 GMT x-datacenter: eastus x-activityid: 35c8cc41-a188-4e76-9936-61fee7f3ef6f timing-allow-origin: * x-resizerversion: 1.0 content-location: https://image.prod.cms.rt.microsoft.com/cms/api/am/imageFileData/RE1Mu3b?ver=5c31 x-source-length: 4054 cache-control: public, max-age=145337
2024-09-19 11:53:42 UTC	4061	IN	Data Raw: 66 64 36 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d8 00 00 00 2e 08 06 00 00 00 4a eb d7 e9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 28 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 32 20 37 39 2e 31 35 39 32 38 34 2c 20 32 30 31 36 2f 30 34 2f 31 39 2d 31 33 3a 31 33 Data Ascii: fd6PNGIHDR.JtEXtSoftwareAdobe ImageReadyqe<(iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13
2024-09-19 11:53:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49818	89.187.28.95	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:39 UTC	1109	OUT	GET /meversion?partner=SMCConvergence&market=en-us&uhf=1 HTTP/1.1 Host: baa50082-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49820	89.187.28.95	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:39 UTC	1177	OUT	GET /lib/jquery/dist/jquery.min.js?v=9_aliU8dGd2tb6OSsuzixeV4y_faTqgFtohetphbbj0 HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49819	89.187.28.95	443

Timestamp	Bytes transferred	Direction	Data
2024-09-19 11:53:39 UTC	1536	OUT	GET /js/shimmerExperiment.Main.min.js?v=srYmQ6fE_kpOEpNK2BnwKTzAAYG3jYCRr__zYXzrlrE HTTP/1.1 Host: cab8c6cd-d43c7a7f.carner.com.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cab8c6cd-d43c7a7f.carner.com.co/en-us/account-billing/change-the-email-address-or-phone-number-for-your-microsoft-account-761a662d-8032-88f4-03f3-c9ba8ba0e00b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KY0pQ="ZDQzYzdhN2YtYTI2OC00YWJiLWExNWMtZTZjMzVkNDZhNGMyOjQyNDc2ZTQzLThjNDctNDJkMC1hNzgwLTcxMmY0NGQ3NWZhZg=="; MC1="GUID=fd81e2f977444a259e8d5fcf6f13ad9a&HASH=fd81&LV=202409&V=4&LU=1726746770465"; MS0=0e4bb2725e4c4a089346a6e6d71a623a; EXPID=15598a7a-14bd-49bf-982e-2a3b65bbe048; ak_bmsc="CCC3B45A1DAF65BC6FD48A1E42036514~000000000000000000000000000000~YAAQR/AQAu6IxcGRAQAAozEhChkdP0k+Jimy7veC6nhpxRxCWJq5Q/c/ZdyJ3TQbCbWVoCjqLlaSUSKJUvAl2442BNIQZmNXK01gAdbewjONdfbFUB4DnzPJWtlNnazKtZEsLJVhRDK8SimByKPqXXY3aPCHqm1H620mqpewCIJ87HmnkshnqjhcAGJmVVba2ZyzOlGzHtRHTOO+wUIuwzopHFLfRJxye+ZeHItCtB4I+PP4wWPmecgU5O+vmDEiFQNuAx+6Y6D/3rc/nv3qHunNw8lZ1blu7352SrNLps6TJWRxNHOnORlD992dLAYFxi7HVVanYlwnUdi3+xkBLMDjQrIyCDk/fBjbIR77P/kkRiQRjxUjrqs0z+5K4g=="

Target ID:	0
Start time:	07:51:37
Start date:	19/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	07:51:41
Start date:	19/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2008,i,9578029193489776218,941450397769680343,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	07:51:44
Start date:	19/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://prosayverso.com.ar/BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://prosayverso.com.ar/BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Windows Analysis Report
https://prosayverso.com.ar/BM2kli2PnglFe5rx0qi2PNk17Fe5RSNAs3RKdy9fr