Windows Analysis Report
https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT

Overview

General Information

Sample URL:	https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT
Analysis ID:	1544954
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Stores files to the Windows start menu directory

Classification

Signatures

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: chromecache_608.1.dr

Binary or memory string: const PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----

memstr_072cecc0-0

Source: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/	HTTP Parser: No favicon
Source: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49752 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/securedocument_bio-aquatic_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%2FKravis%20Center%20for%20the%20Performing%20Arts&ga=1 HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzk4MDUzMjk1N2IzY2RhOWY5Zjk2ZDJlNzEzNmRmZjliODZmNDJkOGMxNWE4MWQ0N2IyMGI2ZGY2MmNlZjk4ZTYsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jOTgwNTMyOTU3YjNjZGE5ZjlmOTZkMmU3MTM2ZGZmOWI4NmY0MmQ4YzE1YTgxZDQ3YjIwYjZkZjYyY2VmOThlNiwxMzM3NDcxMDQwMzAwMDAwMDAsMCwxMzM3NDc5NjUwMzkwOTkxMDEsMC4wLjAuMCwyNTgsNjQ5OWU2MGYtYzU1MC00NzY1LWE0OGYtZWE2MmZlNzNiNjc3LCwsZWFjNDVlYTEtYTBlOS02MDAwLWNhMzAtZTdlNWMyNWFjYjZlLGVhYzQ1ZWExLWEwZTktNjAwMC1jYTMwLWU3ZTVjMjVhY2I2ZSx3UjUzVzFlZ2FVdWNhV3FPeHUzeTZ3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTM0OTcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLEZyMnBFRUxtcWxMWHVKNm9RYmZZWFZRYXlXaHFPQ2xQY2VKdXBOUnVkK1c3ZlUvN1IyYW9vY2UyOGZjcXo5MG9XREZUU3pvckxtU0FHNFdsZ0trWEZrMzRrVksxcWFnWU53Y0ExRGNpU0dBZk4zVUc5U2JuU0Z2N3VsSWoyYmlNbVpkTGErTm1tMkZlZ2ZiQTYvenV1cEpIeWhRWHNUaWdkMTZBY2dRNDBJdmsxS3ZRTW0vRy82cThXSXAxcmVLZXZ4SmgzcENSdTlCeFoxUm1yUmlBSzlXZENQSGprSGtVTDUzaExPcGh0Y2p4Y3ZNQnBsNUF0NythK2JXZXRaN0hWcnV2Zm1mZ0tFcmdrSnBPakd2T3dmWm9EOEF1ZDgwcEZtVUJSMVFJTStvQm5rMVVHOTc5Yi9IdHgzVHR5aEZJOEhuWHh5dmpUU3psSVFIUHJnZTR3dz09PC9TUD4=
Source: global traffic	HTTP traffic detected: GET /files/odsp-web-prod_2024-10-11.005/odblightspeedwebpack/plt.listviewdataprefetch.js HTTP/1.1Host: res-2.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bioaquatictesting-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bioaquatictesting-my.sharepoint.com/personal/securedocument_bio-aquatic_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%2FKravis%20Center%20for%20the%20Performing%20Arts&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=KbLBZaSFx4GZ5RC&MD=zaWpSOkc HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /personal/securedocument_bio-aquatic_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%2FKravis%20Center%20for%20the%20Performing%20Arts&ga=1 HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=KbLBZaSFx4GZ5RC&MD=zaWpSOkc HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /personal/securedocument_bio-aquatic_com/_api/v2.1/graphql HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzk4MDUzMjk1N2IzY2RhOWY5Zjk2ZDJlNzEzNmRmZjliODZmNDJkOGMxNWE4MWQ0N2IyMGI2ZGY2MmNlZjk4ZTYsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jOTgwNTMyOTU3YjNjZGE5ZjlmOTZkMmU3MTM2ZGZmOWI4NmY0MmQ4YzE1YTgxZDQ3YjIwYjZkZjYyY2VmOThlNiwxMzM3NDcxMDQwMzAwMDAwMDAsMCwxMzM3NDc5NjUwMzkwOTkxMDEsMC4wLjAuMCwyNTgsNjQ5OWU2MGYtYzU1MC00NzY1LWE0OGYtZWE2MmZlNzNiNjc3LCwsZWFjNDVlYTEtYTBlOS02MDAwLWNhMzAtZTdlNWMyNWFjYjZlLGVhYzQ1ZWExLWEwZTktNjAwMC1jYTMwLWU3ZTVjMjVhY2I2ZSx3UjUzVzFlZ2FVdWNhV3FPeHUzeTZ3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTM0OTcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLEZyMnBFRUxtcWxMWHVKNm9RYmZZWFZRYXlXaHFPQ2xQY2VKdXBOUnVkK1c3ZlUvN1IyYW9vY2UyOGZjcXo5MG9XREZUU3pvckxtU0FHNFdsZ0trWEZrMzRrVksxcWFnWU53Y0ExRGNpU0dBZk4zVUc5U2JuU0Z2N3VsSWoyYmlNbVpkTGErTm1tMkZlZ2ZiQTYvenV1cEpIeWhRWHNUaWdkMTZBY2dRNDBJdmsxS3ZRTW0vRy82cThXSXAxcmVLZXZ4SmgzcENSdTlCeFoxUm1yUmlBSzlXZENQSGprSGtVTDUzaExPcGh0Y2p4Y3ZNQnBsNUF0NythK2JXZXRaN0hWcnV2Zm1mZ0tFcmdrSnBPakd2T3dmWm9EOEF1ZDgwcEZtVUJSMVFJTStvQm5rMVVHOTc5Yi9IdHgzVHR5aEZJOEhuWHh5dmpUU3psSVFIUHJnZTR3dz09PC9TUD4=; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /personal/securedocument_bio-aquatic_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%27&TryNewExperienceSingle=TRUE HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /personal/securedocument_bio-aquatic_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%27&RootFolder=%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%2FKravis%20Center%20for%20the%20Performing%20Arts&TryNewExperienceSingle=TRUE HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /personal/securedocument_bio-aquatic_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%27&TryNewExperienceSingle=TRUE HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=true&siteConfigRace=true HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://bioaquatictesting-my.sharepoint.com/personal/securedocument_bio-aquatic_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%2FKravis%20Center%20for%20the%20Performing%20Arts&ga=1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /_vti_bin/afdcache.ashx/_userprofile/userphoto.jpg?_oat_=1730271948_ef6d5f77f53ee0995ffb822849d4e41231eb693fcd5bcd06f8a01faee3198610&P1=1730239537&P2=-149452251&P3=1&P4=s5Rua3zKoQMriF9ENufenKumHtecir2zTpedCPgvmWPk30BGUoP0SJxk0WSaJE0GbfsC90vc72K8T%2BDYSMDv7uyoKxYz4XhUcovwPMNY6BkZZu4A6kywgdA57b0l7igEozqfXilLNA%2F%2B6vwa5vxHZr9TEjoe%2BUlnhoSogvZMROmrvrnYqAmTK06alGZbV5TL4lG38j01mg21Hc18RaOqe%2BaR8LW5rURe8iau9EMm27t0gV2UHl2ph%2B3TUSRwu4oIFATq0ewr6Cj2Gg9WpNGEkZQbedOaAYGuV%2Fp0uRZ4Dybrv%2BuazooVGFx9NHUDklx81uLimKm6V5BL3F4ikOlDYw%3D%3D&size=M&accountname=securedocument%40bio-aquatic.com HTTP/1.1Host: bioaquatictesting.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ecf9f5d4.5488c3d0d3cad43764af2694.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_vti_bin/afdcache.ashx/_userprofile/userphoto.jpg?_oat_=1730271948_ef6d5f77f53ee0995ffb822849d4e41231eb693fcd5bcd06f8a01faee3198610&P1=1730239537&P2=-149452251&P3=1&P4=s5Rua3zKoQMriF9ENufenKumHtecir2zTpedCPgvmWPk30BGUoP0SJxk0WSaJE0GbfsC90vc72K8T%2BDYSMDv7uyoKxYz4XhUcovwPMNY6BkZZu4A6kywgdA57b0l7igEozqfXilLNA%2F%2B6vwa5vxHZr9TEjoe%2BUlnhoSogvZMROmrvrnYqAmTK06alGZbV5TL4lG38j01mg21Hc18RaOqe%2BaR8LW5rURe8iau9EMm27t0gV2UHl2ph%2B3TUSRwu4oIFATq0ewr6Cj2Gg9WpNGEkZQbedOaAYGuV%2Fp0uRZ4Dybrv%2BuazooVGFx9NHUDklx81uLimKm6V5BL3F4ikOlDYw%3D%3D&size=M&accountname=securedocument%40bio-aquatic.com HTTP/1.1Host: bioaquatictesting.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=true&siteConfigRace=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22spfx%22]&languages=%5B%5D HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=true&siteConfigRace=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/avtok/0x4AAAAAAAyqhdsS748m01Iy/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8da62f46ce314696&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/avtok/0x4AAAAAAAyqhdsS748m01Iy/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/avtok/0x4AAAAAAAyqhdsS748m01Iy/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ecf9f5d4.5488c3d0d3cad43764af2694.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8da62f46ce314696&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ecf9f5d4.5488c3d0d3cad43764af2694.workers.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1998701899:1730234443:Lwng_uon9EBlqVf_OwLTCeaoBddYvZZMnG7SnJ47QYs/8da62f46ce314696/EO0cJRx97HDDZuUel89VEbDMwCOeAGslO55MJMWuQrA-1730236565-1.1.1.1-tRUrelRR2SbLwLh6vk60CiYzh9YugjlJrNK38KKD5xtqpaUyHbsojPyB1iL63eLU HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8da62f46ce314696/1730236567653/AQ_jg06ejatCKms HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/avtok/0x4AAAAAAAyqhdsS748m01Iy/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8da62f46ce314696/1730236567653/8ecd4f25404bcf125d69fcf8a87fc286caf76e5a5dab48c4b3939caab3d2b433/oWTYv0K7VjGtnqP HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/avtok/0x4AAAAAAAyqhdsS748m01Iy/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8da62f46ce314696/1730236567653/AQ_jg06ejatCKms HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1998701899:1730234443:Lwng_uon9EBlqVf_OwLTCeaoBddYvZZMnG7SnJ47QYs/8da62f46ce314696/EO0cJRx97HDDZuUel89VEbDMwCOeAGslO55MJMWuQrA-1730236565-1.1.1.1-tRUrelRR2SbLwLh6vk60CiYzh9YugjlJrNK38KKD5xtqpaUyHbsojPyB1iL63eLU HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1998701899:1730234443:Lwng_uon9EBlqVf_OwLTCeaoBddYvZZMnG7SnJ47QYs/8da62f46ce314696/EO0cJRx97HDDZuUel89VEbDMwCOeAGslO55MJMWuQrA-1730236565-1.1.1.1-tRUrelRR2SbLwLh6vk60CiYzh9YugjlJrNK38KKD5xtqpaUyHbsojPyB1iL63eLU HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?udjgtgaa HTTP/1.1Host: mercyassurance.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonqrc-auth: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3Byb2ZpbGVmb3Jkb2Nkb2Muc2l0ZS8iLCJkb21haW4iOiJwcm9maWxlZm9yZG9jZG9jLnNpdGUiLCJrZXkiOiJBYU9ETkRCVEFkNlUiLCJxcmMiOm51bGwsImlhdCI6MTczMDIzNjU3NywiZXhwIjoxNzMwMjM2Njk3fQ.vLn_DbjbAUhewfzbA__di56NFn2NPKqdCTyfc9zFG-8 HTTP/1.1Host: profilefordocdoc.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?udjgtgaa HTTP/1.1Host: mercyassurance.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: profilefordocdoc.siteConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=AaODNDBTAd6U; qPdM.sig=IiJPDADbxZ7oBnXlcEbI6rO1GD8
Source: global traffic	HTTP traffic detected: GET /?udjgtgaa=9a39987b0b60fec5006df30a8df8a3c8aa154aaca41dbce7edab646c5141f50fab7c3c72e42c2dc3994509c6bb7161d84e8ed17dca7526c9bfd6cd2b5d243e03 HTTP/1.1Host: mercyassurance.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=o2hsc65PtjlV; qPdM.sig=e2dgsoICds21wEzeCb9lf2j5W08
Source: global traffic	HTTP traffic detected: GET /mail/ HTTP/1.1Host: profilefordocdoc.siteConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=AaODNDBTAd6U; qPdM.sig=IiJPDADbxZ7oBnXlcEbI6rO1GD8
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?becfa8bc415428344db40631b306b365 HTTP/1.1Host: outlook.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bioaquatictesting-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?b78390c9e3d8e295b99594d42d0e8b5c HTTP/1.1Host: outlook.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bioaquatictesting-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?becfa8bc415428344db40631b306b365 HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?b78390c9e3d8e295b99594d42d0e8b5c HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?a0612edc05412c5bcc3585a5aa793a37 HTTP/1.1Host: tr-ooc-acdc.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bioaquatictesting-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?669b15a5e7af14e37d390cbe13e8e087 HTTP/1.1Host: tr-ooc-acdc.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bioaquatictesting-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?a0612edc05412c5bcc3585a5aa793a37 HTTP/1.1Host: tr-ooc-acdc.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?669b15a5e7af14e37d390cbe13e8e087 HTTP/1.1Host: tr-ooc-acdc.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: bioaquatictesting-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: bioaquatictesting.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: spo.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com
Source: global traffic	DNS traffic detected: DNS query: config.fp.measure.office.com
Source: global traffic	DNS traffic detected: DNS query: mercyassurance.site
Source: global traffic	DNS traffic detected: DNS query: profilefordocdoc.site
Source: global traffic	DNS traffic detected: DNS query: c0149d99fde159617d8e36f080b49aff.fp.measure.office.com
Source: global traffic	DNS traffic detected: DNS query: outlook.office.com
Source: global traffic	DNS traffic detected: DNS query: tr-ooc-acdc.office.com
Source: global traffic	DNS traffic detected: DNS query: upload.fp.measure.office.com

Source: unknown

HTTP traffic detected: POST /personal/securedocument_bio-aquatic_com/_api/v2.1/graphql HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveContent-Length: 507sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/json;odata=verboseContent-Type: application/json;odata=verboseX-ServiceWorker-Strategy: CacheFirstsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://bioaquatictesting-my.sharepoint.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/personal/securedocument_bio-aquatic_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%2FKravis%20Center%20for%20the%20Performing%20Arts&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzk4MDUzMjk1N2IzY2RhOWY5Zjk2ZDJlNzEzNmRmZjliODZmNDJkOGMxNWE4MWQ0N2IyMGI2ZGY2MmNlZjk4ZTYsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jOTgwNTMyOTU3YjNjZGE5ZjlmOTZkMmU3MTM2ZGZmOWI4NmY0MmQ4YzE1YTgxZDQ3YjIwYjZkZjYyY2VmOThlNiwxMzM3NDcxMDQwMzAwMDAwMDAsMCwxMzM3NDc5NjUwMzkwOTkxMDEsMC4wLjAuMCwyNTgsNjQ5OWU2MGYtYzU1MC00NzY1LWE0OGYtZWE2MmZlNzNiNjc3LCwsZWFjNDVlYTEtYTBlOS02MDAwLWNhMzAtZTdlNWMyNWFjYjZlLGVhYzQ1ZWExLWEwZTktNjAwMC1jYTMwLWU3ZTVjMjVhY2I2ZSx3UjUzVzFlZ2FVdWNhV3FPeHUzeTZ3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTM0OTcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLEZyMnBFRUxtcWxMWHVKNm9RYmZZWFZRYXlXaHFPQ2xQY2VKdXBOUnVkK1c3ZlUvN1IyYW9vY2UyOGZjcXo5MG9XREZUU3pvckxtU0FHNFdsZ0trWEZrMzRrVksxcWFnWU53Y0ExRGNpU0dBZk4zVUc5U2JuU0Z2N3VsSWoyYmlNbVpkTGErTm1tMkZlZ2ZiQTYvenV1cEpIeWhRWHNUaWdkMTZBY2dRNDBJdmsxS3ZRTW0vRy82cThXSXAxcmVLZXZ4SmgzcENSdTlCeFoxUm1yUmlBSzlXZENQSGprSGtVTDUzaExPcGh0Y2p4Y3ZNQnBsNUF0NythK2JXZXRaN0hWcnV2Zm1mZ0tFcmdrSnBPakd2T3dmWm9EOEF1ZDgwcEZtVUJSMVFJTStvQm5rMVVHOTc5Yi9IdHgzVHR5aEZJOEhuWHh5dmpUU3psSVFIUHJnZTR3dz09PC9TUD4=; FeatureOverrides_experiments=[]

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 21:16:08 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: rthVfB02fpQZMKQIovQhSmu06EXyzviNfXU=$InfcJVuQinjidj7yServer: cloudflareCF-RAY: 8da62f5b3a462857-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 21:16:12 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: 6std16WfmnB3BKu6x5T7OMjF1UZ8zZUGhTg=$wu1qZpVc1/yrPdvKcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8da62f728de46c68-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 21:16:16 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: UPAGa/wn7F3xYtQPa+BsLlq4+uNqcMj/O2g=$pqGx2JSeMKgbAkpLServer: cloudflareCF-RAY: 8da62f8ae81eeb16-DFWalt-svc: h3=":443"; ma=86400

Source: chromecache_745.1.dr, chromecache_617.1.dr, chromecache_513.1.dr, chromecache_509.1.dr, chromecache_755.1.dr, chromecache_709.1.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_712.1.dr, chromecache_685.1.dr, chromecache_475.1.dr	String found in binary or memory: http://www.contoso.com
Source: chromecache_525.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_516.1.dr, chromecache_716.1.dr, chromecache_541.1.dr	String found in binary or memory: https://1drv.com/
Source: chromecache_516.1.dr, chromecache_716.1.dr, chromecache_541.1.dr	String found in binary or memory: https://centralus1-mediad.svc.ms
Source: chromecache_578.1.dr, chromecache_608.1.dr, chromecache_737.1.dr, chromecache_736.1.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_516.1.dr, chromecache_541.1.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/web/policies
Source: chromecache_516.1.dr, chromecache_716.1.dr, chromecache_541.1.dr	String found in binary or memory: https://livefilestore.com/
Source: chromecache_532.1.dr, chromecache_640.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_516.1.dr, chromecache_515.1.dr, chromecache_716.1.dr, chromecache_541.1.dr, chromecache_544.1.dr	String found in binary or memory: https://media.cloudapp.net
Source: chromecache_608.1.dr, chromecache_737.1.dr, chromecache_736.1.dr	String found in binary or memory: https://mercyassurance.site/?udjgtgaa
Source: chromecache_532.1.dr, chromecache_640.1.dr	String found in binary or memory: https://microsoft.spfx3rdparty.com
Source: chromecache_516.1.dr, chromecache_515.1.dr, chromecache_716.1.dr, chromecache_541.1.dr, chromecache_544.1.dr	String found in binary or memory: https://northcentralus1-medias.svc.ms
Source: chromecache_668.1.dr, chromecache_746.1.dr, chromecache_716.1.dr, chromecache_673.1.dr	String found in binary or memory: https://onedrive.cloud.microsoft
Source: chromecache_668.1.dr, chromecache_746.1.dr, chromecache_716.1.dr, chromecache_673.1.dr	String found in binary or memory: https://onedrive.dev.cloud.microsoft
Source: chromecache_583.1.dr, chromecache_529.1.dr	String found in binary or memory: https://onedrive.live.com/?gologin=1
Source: chromecache_532.1.dr, chromecache_640.1.dr	String found in binary or memory: https://onedrive.live.com/sa
Source: chromecache_516.1.dr, chromecache_716.1.dr, chromecache_541.1.dr	String found in binary or memory: https://portal.office.com/
Source: chromecache_602.1.dr	String found in binary or memory: https://profilefordocdoc.site/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3By
Source: chromecache_708.1.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_516.1.dr, chromecache_541.1.dr	String found in binary or memory: https://res-1-sdf.cdn.office.net
Source: chromecache_583.1.dr, chromecache_516.1.dr, chromecache_541.1.dr	String found in binary or memory: https://res-1.cdn.office.net
Source: chromecache_652.1.dr, chromecache_717.1.dr, chromecache_507.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets
Source: chromecache_583.1.dr, chromecache_661.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.005/
Source: chromecache_661.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.005/stsserviceworkerprefetch/stsservicew
Source: chromecache_598.1.dr, chromecache_484.1.dr, chromecache_661.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-18.010/
Source: chromecache_661.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-18.010/spserviceworker.js
Source: chromecache_598.1.dr, chromecache_484.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-18.010/spwebworker.js
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp-media-3b870ca1
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.1ds/odsp.1ds.lib-b7da68fc
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.aria/odsp.aria.lib-ab227069
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.fluentui.core/fui.core-97518b2a
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.fluentui.utilities/fui.util-93de749b
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.knockout/odsp.knockout.lib-447adea9
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.react/odsp.react.lib-9ea4d016
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.tslib/tslib-6a7224b3
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.utilities/odsp.util-644642c2
Source: chromecache_583.1.dr	String found in binary or memory: https://res-2.cdn.office.net/files/odsp-web-prod_2024-10-11.005/
Source: chromecache_583.1.dr	String found in binary or memory: https://shell.cdn.office.net
Source: chromecache_583.1.dr, chromecache_661.1.dr	String found in binary or memory: https://shell.cdn.office.net/api/ShellBootstrapper/business/OneShell
Source: chromecache_516.1.dr, chromecache_541.1.dr	String found in binary or memory: https://shellppe.msocdn.com
Source: chromecache_516.1.dr, chromecache_541.1.dr	String found in binary or memory: https://shellprod.msocdn.com
Source: chromecache_583.1.dr	String found in binary or memory: https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/leelawadeeui-thai/leelawadeeui-bold.w
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/leelawadeeui-thai/leelawadeeui-regula
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/leelawadeeui-thai/leelawadeeui-semili
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-bold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-bold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-light.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-light.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-regular.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-regular.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-semibold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-semibold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-semilight.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-bold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-bold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-light.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-light.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-regular.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-semibold.wof
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-semilight.wo
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-bold.wof
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-light.wo
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-regular.
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-semibold
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-semiligh
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-bold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-bold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-light.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-light.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-regular.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-regular.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-semibold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-semibold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-semilight.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-semilight.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-bold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-bold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-light.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-light.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-regular.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-regular.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-semibold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-semibold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-semilight.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-bold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-bold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-light.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-regular.wo
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-semibold.w
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-semilight.
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-bold.wof
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.wo
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semiligh
Source: chromecache_516.1.dr, chromecache_668.1.dr, chromecache_716.1.dr, chromecache_541.1.dr	String found in binary or memory: https://substrate.office.com
Source: chromecache_721.1.dr, chromecache_740.1.dr	String found in binary or memory: https://support.office.com/en-us/article/Manage-lists-and-libraries-with-many-items-b8588dae-9387-48
Source: chromecache_529.1.dr	String found in binary or memory: https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2F$
Source: chromecache_583.1.dr	String found in binary or memory: https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2Fonedrive
Source: chromecache_529.1.dr	String found in binary or memory: https://www.office.com/login?ru=%2Flaunch%2F$
Source: chromecache_583.1.dr	String found in binary or memory: https://www.office.com/login?ru=%2Flaunch%2Fonedrive

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49752 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@22/484@60/14

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1720,i,11745549811523308955,2484393396440175979,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1720,i,11745549811523308955,2484393396440175979,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_582.1.dr, chromecache_481.1.dr, chromecache_574.1.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_582.1.dr, chromecache_481.1.dr, chromecache_574.1.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
52.98.171.242	HHN-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.98.252.66	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.98.179.130	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
52.98.178.210	FRA-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
45.146.234.135	mercyassurance.site	Slovenia	207746	PROTEUS-ASSI	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev	European Union	13335	CLOUDFLARENETUS	false
152.199.21.175	sni1gl.wpc.sigmacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.16

Contacted Domains

Name	IP	Active
mercyassurance.site	45.146.234.135	true
dual-spo-0005.spo-msedge.net	13.107.136.10	true
challenges.cloudflare.com	104.18.95.41	true
ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev	188.114.96.3	true
www.google.com	216.58.206.36	true
HHN-efz.ms-acdc.office.com	52.98.171.242	true
profilefordocdoc.site	45.146.234.135	true
FRA-efz.ms-acdc.office.com	52.98.178.210	true
sni1gl.wpc.sigmacdn.net	152.199.21.175	true
bioaquatictesting-my.sharepoint.com	unknown	unknown
bioaquatictesting.sharepoint.com	unknown	unknown
r4.res.office365.com	unknown	unknown
outlook.office.com	unknown	unknown
m365cdn.nel.measure.office.net	unknown	unknown
spo.nel.measure.office.net	unknown	unknown
upload.fp.measure.office.com	unknown	unknown
config.fp.measure.office.com	unknown	unknown
tr-ooc-acdc.office.com	unknown	unknown
c0149d99fde159617d8e36f080b49aff.fp.measure.office.com	unknown	unknown

Contacted URLs

Name	Malicious	Reputation
https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/favicon.ico	false	unknown
https://bioaquatictesting-my.sharepoint.com/_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D	false	unknown
https://mercyassurance.site/?udjgtgaa	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8da62f46ce314696/1730236567653/8ecd4f25404bcf125d69fcf8a87fc286caf76e5a5dab48c4b3939caab3d2b433/oWTYv0K7VjGtnqP	false	unknown
about:blank	false	unknown
https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/	false	unknown
https://bioaquatictesting-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=true&siteConfigRace=true	false	unknown
https://challenges.cloudflare.com/turnstile/v0/g/f2bbd6738e15/api.js	false	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false	unknown
https://bioaquatictesting.sharepoint.com/_vti_bin/afdcache.ashx/_userprofile/userphoto.jpg?_oat_=1730271948_ef6d5f77f53ee0995ffb822849d4e41231eb693fcd5bcd06f8a01faee3198610&P1=1730239537&P2=-149452251&P3=1&P4=s5Rua3zKoQMriF9ENufenKumHtecir2zTpedCPgvmWPk30BGUoP0SJxk0WSaJE0GbfsC90vc72K8T%2BDYSMDv7uyoKxYz4XhUcovwPMNY6BkZZu4A6kywgdA57b0l7igEozqfXilLNA%2F%2B6vwa5vxHZr9TEjoe%2BUlnhoSogvZMROmrvrnYqAmTK06alGZbV5TL4lG38j01mg21Hc18RaOqe%2BaR8LW5rURe8iau9EMm27t0gV2UHl2ph%2B3TUSRwu4oIFATq0ewr6Cj2Gg9WpNGEkZQbedOaAYGuV%2Fp0uRZ4Dybrv%2BuazooVGFx9NHUDklx81uLimKm6V5BL3F4ikOlDYw%3D%3D&size=M&accountname=securedocument%40bio-aquatic.com	false	unknown
https://bioaquatictesting-my.sharepoint.com/_layouts/15/spwebworkerproxy.ashx	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false	unknown
https://bioaquatictesting-my.sharepoint.com/personal/securedocument_bio-aquatic_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%2FKravis%20Center%20for%20the%20Performing%20Arts&ga=1	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8da62f46ce314696&lang=auto	false	unknown
https://tr-ooc-acdc.office.com/apc/trans.gif?669b15a5e7af14e37d390cbe13e8e087	false	unknown
https://bioaquatictesting-my.sharepoint.com/_layouts/15/SPComponentRegistry.ashx?projects=[%22spfx%22]&languages=%5B%5D	false	unknown
https://bioaquatictesting-my.sharepoint.com/personal/securedocument_bio-aquatic_com/_layouts/15/CSPReporting.aspx	false	unknown
https://outlook.office.com/apc/trans.gif?b78390c9e3d8e295b99594d42d0e8b5c	false	unknown
https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT	true	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/avtok/0x4AAAAAAAyqhdsS748m01Iy/auto/fbE/normal/auto/	false	unknown
https://bioaquatictesting-my.sharepoint.com/personal/securedocument_bio-aquatic_com/_api/v2.1/graphql	false	unknown
https://outlook.office.com/apc/trans.gif?becfa8bc415428344db40631b306b365	false	unknown
https://profilefordocdoc.site/mail/	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1998701899:1730234443:Lwng_uon9EBlqVf_OwLTCeaoBddYvZZMnG7SnJ47QYs/8da62f46ce314696/EO0cJRx97HDDZuUel89VEbDMwCOeAGslO55MJMWuQrA-1730236565-1.1.1.1-tRUrelRR2SbLwLh6vk60CiYzh9YugjlJrNK38KKD5xtqpaUyHbsojPyB1iL63eLU	false	unknown
https://mercyassurance.site/?udjgtgaa=9a39987b0b60fec5006df30a8df8a3c8aa154aaca41dbce7edab646c5141f50fab7c3c72e42c2dc3994509c6bb7161d84e8ed17dca7526c9bfd6cd2b5d243e03	false	unknown
https://bioaquatictesting-my.sharepoint.com/_layouts/15/images/odbfavicon.ico?rev=47	false	unknown
https://profilefordocdoc.site/	false	unknown
https://tr-ooc-acdc.office.com/apc/trans.gif?a0612edc05412c5bcc3585a5aa793a37	false	unknown

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 29 20:15:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	8CF9DF33E0054CD9C17D5F87246AB1EA	3B0677BFE6F5ADE2F4388ACFCAE27D114AAF2AD0	D1F692A01EB460CBDE8B891E176D58EC1DB36AD8DE8DCA5F4F19FCDBC610BE98
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 29 20:15:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	123188044774F92E2433CA38E4DC78EF	97E105274C230105B91BD107116E1A51B6E1F091	71E02C9E8826229DF7912CABA80B82192252402F1EA46284BF416DF11C9FD1A5
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	EAE1CA5A2FF8497BAE66D697CD25F072	2C6C824B7F443F367A57FD44CD03BE5492D9B583	C836120CC69799DEFF9D521A7F02875A429ACA3C5EA40965365CF8F9393AFA88
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 29 20:15:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	219ACFF52EB3BCC39ECE7D815EB90EE0	B3080CE396E46E965E31E4FB507F14211EBBD358	A5B40357AF3EE865E7A450C3BD44F9159D2EC2261436D9B4FD1FBD84372594A6
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 29 20:15:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	69F7FEBADB56B54E43A021D1B82B74F3	6B386B7E8AD2DAD10A5FBBF66A29CF0F5090B52A	96CBAB0BCAF616F38CB9A45063DD21E40325DF012CBCA7F50B6A1FA4B763737B
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 29 20:15:03 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide	FB8B576D071861B8BD95F022C3968556	E5B54AEDF3A1E5B3B9446CB6BE872BBB56707BCD	D482EDDDEE052D54B8D6BB74845406797A1596E62A970FE7E7C8258AB25B3DF2
Chrome Cache Entry: 474	ASCII text, with very long lines (3214)	98B4FFB64FEEA5CFE9B7457F4A49954D	8FAD22640D39FBBE4A317313464C80349F02B623	DA57C25FFF63F62AD76E2EAEA986006D512605B959A00708365D9BB95D0A8C31
Chrome Cache Entry: 475	Unicode text, UTF-8 text, with very long lines (10524)	F21EAE25606F5262BCA5BC33BC8C6590	11600F0FB7508A31B016669353340615935C8119	EBC8A6058E52ADC1483C8800BCAE500CFC8A22362B998DF9D7BC73ED2430AC2E
Chrome Cache Entry: 476	SVG Scalable Vector Graphics image	CD458D593C42684E66D7C5E4F4EC0312	605E3855F2885272B45E61A5005190F5E79152AE	89AB0C7E984E074398B01ECC380631A5E60EF14E133221779745F11F4EEFE321
Chrome Cache Entry: 477	RIFF (little-endian) data, Web/P image	E243D03BB4BDFB80FC2B9C40863299C5	7ABEBA96529B293239DA5536D4260EFA1E797AD9	A8283E1B2CABD16BE04A6CB0A292E532D5B74520123E09C2CD9DEB9ECCF2D1EB
Chrome Cache Entry: 478	SVG Scalable Vector Graphics image	1E633D46AC979AB4316B5427BD328527	0391F135924813ECAD623F5543E5E71E4FC23851	F7E06F07ACC7A46215319570019C1483170B8FE36A58D35D2A9A92F382DF679F
Chrome Cache Entry: 479	ASCII text, with very long lines (7031)	DEF99FC6CF6FD2DFA5E7304AC3D24232	6921B557CB0234508E118290BBE755E6590DCFBB	EC41CA613316BCB22704C6F7B3BBF3E53665EE3B9B29822F721E4B9CF935BB30
Chrome Cache Entry: 480	ASCII text, with very long lines (4078)	94778FCA478DA3DEA68E0FF58625209A	903FCB01B8930208293E5182629EC7A6777A4879	B33121E0EC9C950BB021F1526A56943C1327AAA2255FF6700FDC17D13B2A5A2D
Chrome Cache Entry: 481	ASCII text, with very long lines (64938)	E226DD351F141D31502D2A5204D341E5	933DAD1FBB9DAB7F5E5F469B954C14B267BFCC7B	6D6AE119F0D4C8CF72A97CE44E0C0805BD1705626902D69AC8713582C72BAE10
Chrome Cache Entry: 482	ASCII text, with very long lines (34942)	3647E774BF9ECEC43A0DBE1B3359711E	EE43E9C35FC291C2D53260D2C02B4C895E02A217	72DA3F04C782E8D1715DB80410A2858A0956BC7C232E754724E6B1C4951A7BAD
Chrome Cache Entry: 483	ASCII text, with very long lines (12337)	C79D14C9D3B05F7BFC6C3077C484A748	F58F62401EB364B01FFF42F943BBA4A04707FF0A	F2579BB72200291BD98964FB3E920D8D55C82822F0A5874196D848E801C7A870
Chrome Cache Entry: 484	Java source, ASCII text	FCE4B3F64D248748A7CB0DDA238DD3AB	30377F816FE08D259EBF48CE78F2B87110B6B4FA	C781DD492E22E6BB7BAF8BCE97A0432F30B47DEB113F741043F6F95515A81580
Chrome Cache Entry: 485	ASCII text, with very long lines (6639)	F3F9A57B0F84DB7CA68158F1587CB095	5191607D60D30B87398A9CE03BD802D2BAE374E7	F1CF34E692E19FEDEF17EC6CE58194989A7F30E26B2A22BFD5707C1E4787B77D
Chrome Cache Entry: 486	ASCII text, with very long lines (8693)	1C87C515AEA0893E89CD740014A24A83	1D383AC1C5EB97CE0D8959D78759B42D525EAC21	B84658DD9DCE6A32210FE7984537FBDFBC1D7BAB0339C67FF8270DBFE13C4F1F
Chrome Cache Entry: 487	ASCII text, with very long lines (7236)	19EA48B97943CA6EC9A809BF56C52A85	FF8B027AD7BB2B0C1D79DE20FA83BF08851B66BE	A4570A3393508E86E924B76742746A681299E8F7A1FF618513C785A846AF8906
Chrome Cache Entry: 488	Web Open Font Format, TrueType, length 27376, version 1.3277	5BF1A501ADFAA0CF7F2D438D74265457	5F9B1F32D67239653D4A5BCD9A6511B06BE511EF	DFDCF6ABDA03D842FC0CAFC09FCFAA801B4F437D5E6EC5294EB64D8E80788990
Chrome Cache Entry: 489	ASCII text, with very long lines (17807)	875BE154C0721444D648390DFDAD8288	588B53B826E3D7D38EAECDCAE9BA01405C60AD98	B4E77AF713B94C3808B8521A31CE3C6AEF0BED32B1F41BABDA761A991397A7B9
Chrome Cache Entry: 490	ASCII text, with very long lines (22018)	32ED62C7FA24964D498B33164811B99B	D433EB7949E20E1E9B4D5EC42B26D0A591C4A32A	7D582F64E20CEE5D94D3595ADEEEA12D0DDFDCAFEDD006E07ACF18DEFCFD22D5
Chrome Cache Entry: 491	ASCII text, with very long lines (65461)	1D055BAD6BD43C4A16A9C8F0E915151B	1C001A60AEC8716450E46C06C3901EFF661692D3	97511A85F0A4FF73F1D013A6CB4840042FE46614902B6197E311AFC6EB7703C7
Chrome Cache Entry: 492	ASCII text, with very long lines (65536), with no line terminators	9213165DE2B499BE2ABB375B419EE3E4	198625C11E6F50747E3FA27E1E006C951F0E8741	99DE0F39B94D7BD3A9D138DE8827ABB177905644FBB2D57A1B4E7B5FD56369F1
Chrome Cache Entry: 493	ASCII text, with very long lines (56956)	48D2B624A4FB806FC8C5C880383B2448	D3BC05D39F05FA449A75473A8ED7E2D015C531BB	5DC836D93428A835CA2B6F6D5C04CA44BC5AEF36A59CD142EAC8714AACA06281
Chrome Cache Entry: 494	PNG image data, 90 x 89, 8-bit/color RGB, non-interlaced	1B68CCBCEBE3077C890C8ED4E5DD2801	235F32CDCB308DB7F0B85730F5F3FC7188416FAC	905D8B6A8DE4D909F75707A0967388CCAD682EDFB7410CA90D6052239F4C1AA2
Chrome Cache Entry: 495	Web Open Font Format, TrueType, length 15152, version 1.3277	71C6CE41CD1A7B9DEFAA9D9D739BE12E	ED30186F02C259A162F962D7861861C41EE25817	B862306928A5699966E7579C3AF5A857D4C2B634F764D45DEA2F6360DFCD5888
Chrome Cache Entry: 496	RIFF (little-endian) data, Web/P image	A729D45A65E2B9849159E08EF6FD5F12	75A14F3E8AC5D4ECA6ADE8771C84F4F5328301D6	11980ECD03E02439A6300EEFF5DBF9A48BD52EEBF14BBCC246752B0CE5BAF223
Chrome Cache Entry: 497	ASCII text, with very long lines (59323)	215C13C3C327F124B654D85D282A4C7D	70044C4B8EA922ECAA21FFB6CC75FE041A2EF8C4	71DB37C918C50E87068613A6679B945AD83A3027614441FD1420151A34FC7A4E
Chrome Cache Entry: 498	Web Open Font Format, TrueType, length 15908, version 1.3277	2838E6EAA5CC9BC94D3327E2720D2496	734C1F1975B0CCB39F477C2632697BC705626664	AB1D3AA0425DAAC126739A9566B0435EF577F88F777315EB1E9CEE14FE7DB810
Chrome Cache Entry: 499	Unicode text, UTF-8 text, with very long lines (32702)	BA11AE6E9F6188C54D991F5F293A4448	315DD2B6DB3DCD661E2F7B8F90287F3AEC3A8D56	4FC47EEED12BA1EC9120F241A83FE377751B757A6B59E719F14E3EF0FAD6D790
Chrome Cache Entry: 500	Web Open Font Format, TrueType, length 15620, version 1.3277	13CAD08522692478254587EB15D731AB	3853A2216149DF4585C6A7D85FAF0E41E3EFCF7E	4E22396EA0929D74DB59A60485B657DE91A28501068BCF6FB0D63D73FA40C826
Chrome Cache Entry: 501	ASCII text, with very long lines (2511)	5FE71C03FEB3CC11D5D26064B461BDD1	820466CE8403D67C20BF2CD3F5EF01F7E6D61FD6	4A4412903FD9ADAED2C5BF618F4AD584AF4A3B665D2B333816EA1A1BE87596B7
Chrome Cache Entry: 502	ASCII text, with very long lines (45506)	BC512A357F61AF262D53F5156E3D141C	1DCB28E3F469109C4D7BACF454BB6DCE3D8F51B7	ECAF4B7E1E2D97E4E9D9D17BEB388C5E9302B0D65E1888C2520C698E817B25DE
Chrome Cache Entry: 503	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel	604ADFB53677B5CA4F910FFB131B3E7C	5F1A0FB4E4AD3707E591CE16352158263488ED70	24638331466A52BB66F912090E7A9CC9E3DF2236E39C187C9409104526B472B0
Chrome Cache Entry: 504	ASCII text, with very long lines (9848)	4FDC887F52D3C71ADB36F3BDDC5BAE76	5A2182031F9660E7522A7E4A414CD5FE5AA8D839	C56F62A999206F69B200F65C784FBC69381386776C01BC0960EA55E26111EBF8
Chrome Cache Entry: 505	ASCII text, with very long lines (2626)	AF0D66ABCCC0655461D8E63E8B279DEC	BB078C9BD504A9062A57102AE667999337494E83	64EEE421A6466CA88F684880656A31864DF352ADC9976889A2A31D0FE873DA34
Chrome Cache Entry: 506	ASCII text, with very long lines (4185)	3F70BB991B7E735603516E8BDD13FB15	319958EC30FE20D73B40C10B3E009C4980A9A8F7	492B1467CE78A05CD00DAA1AB24357354D746F589D94F6663729FC425B529E18
Chrome Cache Entry: 507	ASCII text, with very long lines (17088)	10D8CD97B251F449F075606CE20DA80B	B6E3119477069CF7C87F2200ACF85E34A1789EA5	66BF49C2668946FFD72E1C207EABE2CD654382473597266AFDEE54E3E8DD3AC7
Chrome Cache Entry: 509	ASCII text, with very long lines (63604)	ACDFECB80B06F30C59B48F9B2140E6F5	C46873F855BDABF9943DA278813B53B4DD6FB6D6	CA46523D06A57712685B5C6B01430B530FE76F8FD5803179FCAA3466770E93A0
Chrome Cache Entry: 510	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced	AD63250D417C50DDFFE294AF75057337	76863EE93960479C7519ACAE5FEC7E5799396E5B	36B658E80D8825F6B43FF8F67EF5FEC88412CA10F9D2663453AD6FF0984B9D7B
Chrome Cache Entry: 511	ASCII text, with very long lines (6070)	33439D05B61F08A4F567F3D1959DA1F8	526BAC7B91741EB99288B78FCF6319D13E53F943	14FEFFEE97FEF9B247C129D2A45747F2ACBA9B3D287AE541212598C05EEBAE42
Chrome Cache Entry: 512	ASCII text, with very long lines (10654)	8B3CD5D57E813BE80DC298603AE42173	F440CC446C39F127ACBB78820AC8B5A48767419A	038BBBFD63C97D39EBD8D9074276F5C1721094F2FB469FCFDD19E8CEB2F8F5A1
Chrome Cache Entry: 513	Unicode text, UTF-8 text, with very long lines (65308), with no line terminators	FAAA4AF7EFE91DBD6B72A2719B90D6F0	2B5C56BD507073A86FB880EB63BF236FD792589E	F5F7970F5FBEC3B802E19A202673A7F1D1A249FF22558D31A1FF7B6E6B7DE770
Chrome Cache Entry: 514	ASCII text, with very long lines (65461)	1D055BAD6BD43C4A16A9C8F0E915151B	1C001A60AEC8716450E46C06C3901EFF661692D3	97511A85F0A4FF73F1D013A6CB4840042FE46614902B6197E311AFC6EB7703C7
Chrome Cache Entry: 515	ASCII text, with very long lines (4715)	397BB8EF4B7EC16F0549D653D962EC0E	C2D90344F8DDF2A089861C91D1D36CB620F0E786	B9A787C04358EE6A0E95B35425E2071D2BA6F386C53750A2E57829A275D5E422
Chrome Cache Entry: 516	ASCII text, with very long lines (12946)	D352226C1C999EA73558B39DEC6087DB	FA88390D73FA161AD9320BE44E2A2C7938B650EE	D42482A403B286E602AF4B5BBA5B297AB83DF31F16AACFEA587195A8F0A6864D
Chrome Cache Entry: 518	ASCII text, with very long lines (688)	F39419C9217DF82439EE0FD0940E9FB6	F68E3D02B9CB39A963DCD5AC5E9FEA7D9DC1B993	D55D1006C39B66720E34B375CB8A735681AD3930CE4AB393583EA795220CD9FA
Chrome Cache Entry: 519	ASCII text, with very long lines (20802)	D494EBE730C6EA43E1D847CF504F8437	E48A9B4F920A1880BAEB1C5B5B73ABA197B7EFE6	01A308DABEE06B7630A6EEEA02619E23E48021DA8A46DE1C5174CF12D101B0D9
Chrome Cache Entry: 520	Unicode text, UTF-8 text, with very long lines (34121)	4F5E1A4129D977B4D734EE54E9BDA019	F5D0BCE77B87C41F09E2BE18851B78ABABF57284	FCFC509D446E2952FF4F4A7408517421A3405CC4282CD01431275BBC6D991548
Chrome Cache Entry: 521	ASCII text, with very long lines (59425)	5238C6C5C1CBD7F3EB1095E46AD72D30	DAD44C1B0E5F936A92771EFD231A20D0D9C79D41	73AF98C00BFBC6937101E8E207DCDD7F7564FAB05F844FBE31011C9913B17284
Chrome Cache Entry: 522	ASCII text, with very long lines (12116)	6043EF38E4658586FA07319307F3D09B	A7132829F60DED0D63A446B579BF7ACD94BBDFA5	DC25B75187537B84ECADED08C63BEEA4DD43D862B6BBD50C204ED74AC3F86FFA
Chrome Cache Entry: 523	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 72x72, components 3	7CA45AC469A9E9A14FB7D1F97E24BB7B	D42EDCB2961FC86FE2E966813D789B8AB6D19074	1EB145EB2F7B19F9DA08D04C0AC27F9AEB98FE2842C0260C5019AAD767368C68
Chrome Cache Entry: 524	ASCII text, with very long lines (911)	6F8A19F12B184E68932EEB65945DD446	55B1BFB93561A9BDEBA1C3E6CF628D3C93671A04	CD1A37D3F25CA9932005F2E0CC5558036137E68F99E73004EF64F265868F8B4E
Chrome Cache Entry: 525	Unicode text, UTF-8 text, with very long lines (41526)	67D7D9AF3E4F49485A06A4D476B243F0	CB8FEF6212ECBDD6D9354617CFC6508DF604F9F9	EEC790B3A16BB27AA0A9593C2CAB42D4FCC96C2267FB169967BD0A045F5AF124
Chrome Cache Entry: 526	SVG Scalable Vector Graphics image	75B8157A5F177E510FF6576EBD12D5AF	5B510F99DC9737E06EF3634EDABC83CC74AD1BC2	D0688F2F7BD9653049F9AAA77A5E143E3A75C3A9E09134F6A134DA2FAC9A77CE
Chrome Cache Entry: 527	SVG Scalable Vector Graphics image	89112ABE1A5423807D457AFE3038D701	D24193119F11CDAD350C499CC7C5E0E0085BC23D	506EB320DF82306C54128A553C8D36A98F36A0CD9B94E5A0796FBAE8BA27A97F
Chrome Cache Entry: 528	ASCII text, with very long lines (14734)	0692A30B5D9418A97C5F47FBA4D09C44	B9231E583E494CAD6C9E75E3EFA64C1E5677AA6A	5EE9BE2651B87099B0ED5C2B4EF30B1E38D471C6ECEF7DCF0006DB811C6840E8
Chrome Cache Entry: 529	Unicode text, UTF-8 text, with very long lines (12982)	A02CF43C02E9CCCD846BEEA738EED23E	1564410FE8EA502B3CAF700A22A83119B426212B	18B9452C2E0F901A4453C783ACB7226AFCA8730D7CF36E7838EFABF598473689
Chrome Cache Entry: 530	SVG Scalable Vector Graphics image	36059870822158B1864FC56571002368	BD5C99E386CCCCEAC51AFC613205C24854F013DC	BF648FE992EF479730107B0E7AC3BD09DA6FAD43E4266A1B58F5967F15C0E3A6
Chrome Cache Entry: 531	ASCII text, with very long lines (2283)	89F5737334B5231EF9897FC6D3A9AD5F	5E4E3E2E61A722DC30580C3124620A4B4BA44D50	805207857725D5F2B7F3B2B8A2257F71E1FBB67C05F006C8D878C79CF9B82E7B
Chrome Cache Entry: 532	ASCII text, with very long lines (13143)	37E097D815F94CCFF29341B48886E26D	4D6BF32AEC8E5D752AEB372AF1DAC4B1C8A6CA2B	87E9AD9F11A531E50F48D4C5CC8A84BFB5721BF91A47BB1E240F85E488C99381
Chrome Cache Entry: 533	ASCII text	1011972C6F0A4FDF5F76DBCC5C2AC906	7D917CE0BB99E087B7BCFA28B91913D7E3973074	76D04153D39A9E5887F9A2AE8FF242C839A5184452D4DC0B34ADD21C174DB7C0
Chrome Cache Entry: 534	ASCII text, with very long lines (2202)	316F7C790878F706F0E22AE8179641A7	D3C3FFA932931A14E119623DF9D5F26140C4F433	DFEA6F1FBBAC55A2F85458D9501A8D0425D27FAE8AD0D9F7E28E5BD7F11BBD42
Chrome Cache Entry: 535	JSON data	AAE2A0D336D9A6909D204D012ACCD0D8	D3BB3644CE1E83B63674B425BB2706810281CFE0	2DF8B74CE80DFB516619471651CD4B77C48958B8E483080FD1A10EB77C906385
Chrome Cache Entry: 536	ASCII text, with very long lines (59425)	5238C6C5C1CBD7F3EB1095E46AD72D30	DAD44C1B0E5F936A92771EFD231A20D0D9C79D41	73AF98C00BFBC6937101E8E207DCDD7F7564FAB05F844FBE31011C9913B17284
Chrome Cache Entry: 537	Web Open Font Format, TrueType, length 17724, version 1.3277	1CBD0775F4DC387F389A6EE4A3257463	14C989A6C053FBC7797264C671FE6DB2020EF913	B1AAA4BA52ADC597DBB8D73FA4CCFCA99CC45134B0D1E49DF3712CF675E7189A
Chrome Cache Entry: 538	SVG Scalable Vector Graphics image	48D80779B127989CCFC24C653ECD992A	5947B7FB6DDFE3CF63CF8BB05083E1DA605C302C	FA1A12DF1ACB58EE03C25D6A2F0145A48EE8F83AEBEB7D606402B6B68FE29E36
Chrome Cache Entry: 539	ASCII text, with very long lines (5380)	485681BD1030DB6EFDDB8CD02F401162	0C94D1757BE426BAE8C6BE26AED0D27902BFE30E	C6F8C9E69F66003D80001449115DE7C59F82F0366A4BD2D970AA80154F500431
Chrome Cache Entry: 540	Web Open Font Format, TrueType, length 17436, version 1.3277	1483728740CB3D9E9869528DAE5DCE1A	610B0012C154856DD1B6B2B7946FA7F20257C51A	9557526EF142FD9772F887D466FE0C80DF4B0463A9ADA4BD99CF14C9CC4F62DA
Chrome Cache Entry: 541	ASCII text, with very long lines (12946)	D352226C1C999EA73558B39DEC6087DB	FA88390D73FA161AD9320BE44E2A2C7938B650EE	D42482A403B286E602AF4B5BBA5B297AB83DF31F16AACFEA587195A8F0A6864D
Chrome Cache Entry: 542	ASCII text, with very long lines (44683)	9EB9A86461A0EB4599C73BF1C694D80A	87C9D2D7758F5B39AEBB65A1A9E381734BBDC480	38861B42BD3787A86CCAE7278CF6D81976FF824B00B58C070A4AC686AE4AB868
Chrome Cache Entry: 543	SVG Scalable Vector Graphics image	021D61C493594A54C6A58EDD74E1ABC9	D2DE94E17938C7385CB0B805BDFA9D8323DF108C	32B83506D44DDBA561881EE60761371C65CDA8B1AC51244B98E18A698F2F6E9F
Chrome Cache Entry: 544	ASCII text, with very long lines (4715)	397BB8EF4B7EC16F0549D653D962EC0E	C2D90344F8DDF2A089861C91D1D36CB620F0E786	B9A787C04358EE6A0E95B35425E2071D2BA6F386C53750A2E57829A275D5E422
Chrome Cache Entry: 545	ASCII text, with very long lines (59227)	E3FED42877C430D4D2E205AB7A14C2F5	C8A517CE089C8C2335DF5CA4907FD853149350D9	87034B8FE839BB59F69FF93B528EE864ECB44814BF4D8CF499F348B087E12325
Chrome Cache Entry: 546	RIFF (little-endian) data, Web/P image	60AF105AB6B630452B06D6DDA4B0BE74	920F5FC2CA2058928738C1695504B23704C794A9	3FC627E56349201333E6C39A44036B5CF09AD9378E46782098505EDB037BA104
Chrome Cache Entry: 547	Web Open Font Format, TrueType, length 15812, version 1.3277	E4D0BA1A29BE083A0739C928036F49B2	46AC8AAAB71AE649A2F7672A6BF3A2331A9EB5BC	2ED1A2974B878ACF7B2327BB61D47DDCF3819C2C05CB6C4C73F6680752996FD3
Chrome Cache Entry: 548	ASCII text, with very long lines (7236)	19EA48B97943CA6EC9A809BF56C52A85	FF8B027AD7BB2B0C1D79DE20FA83BF08851B66BE	A4570A3393508E86E924B76742746A681299E8F7A1FF618513C785A846AF8906
Chrome Cache Entry: 549	ASCII text, with very long lines (45506)	BC512A357F61AF262D53F5156E3D141C	1DCB28E3F469109C4D7BACF454BB6DCE3D8F51B7	ECAF4B7E1E2D97E4E9D9D17BEB388C5E9302B0D65E1888C2520C698E817B25DE
Chrome Cache Entry: 550	Web Open Font Format, TrueType, length 14892, version 1.3277	F1FAC5A482C90973AFF67CE299DF492D	D73B4DAF2D687EEB31829C637461D4B34810BFED	E185DAE5382FA62FC872E77E270A22A97FE65F93FF511A8281860EEE574395EC
Chrome Cache Entry: 551	ASCII text, with very long lines (3857)	8AAC8E7A4E9D1113949D3AA2D56A4581	0D3088CFC068933CF30E4E530B227B2A8C6B6720	409A5DD097F997250E0447B14459A5F7CA66EC8FC8FC0C634047D55C3ED67D07
Chrome Cache Entry: 552	RIFF (little-endian) data, Web/P image	3121EB7B90AAFBD79004290988D25744	5584F1BEB7B9E8CA11833035C9962B3DDD54F904	6DBE807B8DA91D549A49BEEC3330D795601EC0F272EA232E91121F3ED703DFE4
Chrome Cache Entry: 553	JSON data	9E576E34B18E986347909C29AE6A82C6	532C767978DC2B55854B3CA2D2DF5B4DB221C934	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
Chrome Cache Entry: 554	XML 1.0 document, ASCII text, with very long lines (443), with no line terminators	E0A40795A3DCFC0FF6E3060AE42B4139	103AA9D566CE73524F15E89C792BFE2E59EB6512	84DFB688C8655E3A75E462F66F5A316E29F5DE5AE8D785822F8E4F9BFB6B79F5
Chrome Cache Entry: 555	Unicode text, UTF-8 text, with very long lines (32702)	BA11AE6E9F6188C54D991F5F293A4448	315DD2B6DB3DCD661E2F7B8F90287F3AEC3A8D56	4FC47EEED12BA1EC9120F241A83FE377751B757A6B59E719F14E3EF0FAD6D790
Chrome Cache Entry: 556	JSON data	8D75B8E85D749610931E168F2EFCF555	11410945A27700DBE941C030189C637792AAC2CE	485A60AD5AF1CEFF60C50A9BFB08A03F0C42B984034A2255820356938B82B2A0
Chrome Cache Entry: 558	SVG Scalable Vector Graphics image	5EEE17FAACA889C47687AD39E4585273	AE89E10486B8EC2CA38BE29ACBCF90117E0747AD	E12F4F21EDA26E30E5C4C9A92FA179B7CD16A2C2A68F2FAD64A686A64740FDD8
Chrome Cache Entry: 559	ASCII text, with very long lines (7247)	475648160D30510E4BFA80B7C7C00FE1	B2E0B2891C5ED7796A57251B54D5C22D2CC90217	D07E9951E586BF5D1A9C911888696156672D49FA0632A887B32E80E3A03D814F
Chrome Cache Entry: 561	Unicode text, UTF-8 text, with very long lines (65471)	DBAA186DD7CEEF02E661294EB83CC5D3	613C3D21AA4319801BFCD32B89E4CD41DFB0FDD6	7769068BD94E9DEDA229C1A3A2A91DDA05FBF39411D77119987246B833DD5106
Chrome Cache Entry: 562	ASCII text, with very long lines (12167)	2B937206E5B382D169CEFBABBB471097	33BDADDC6815504CA9C3AB9295C782A4DD59FBAA	1E49AC89AAC36D1580C0633B8B188D4DB4AC042D7BE7E52A9D8EAD559824C126
Chrome Cache Entry: 563	RIFF (little-endian) data, Web/P image	6B8A7E8B419C5A36FB12A98266D0849D	7CDA6611D700E1FFE0764C81B79225C1FD4C61A4	E91FEE23BCFAE78B7296D495ABF0358581632B33658231546C952A78547C3C08
Chrome Cache Entry: 564	SVG Scalable Vector Graphics image	D41EE9813A334F89E963EF8CCAE66B86	0BA2BAE19C3175B48095EB6CB9B703C095999FD9	D6ECB157B246102B938294E2C71CDBDF854A433BCD2CDF590AEBDB39F0BCAE1A
Chrome Cache Entry: 565	JSON data	1629709B420FE5981924392917611397	9925539FA01891AF3845AD86A3B0CA311A19AE4D	63386A3F971A5A0189426BC682D9954C68BEBAEA78124543541F81F70A05BDDC
Chrome Cache Entry: 566	ASCII text, with very long lines (7031)	DEF99FC6CF6FD2DFA5E7304AC3D24232	6921B557CB0234508E118290BBE755E6590DCFBB	EC41CA613316BCB22704C6F7B3BBF3E53665EE3B9B29822F721E4B9CF935BB30
Chrome Cache Entry: 567	Web Open Font Format, TrueType, length 15504, version 1.3277	9CA7D978289807BAED4A0E2D5DFE9E52	68531E057084AEE10B375AC09A591CFBB006AF1F	DFCF7EC4962268B8D3F26C1A2A32536200D6E8D477DBAAC57C20B6F5D15406C8
Chrome Cache Entry: 568	ASCII text, with very long lines (5176)	97CA45CB298EFDD69C0B46F9E97448C8	DD6FD5B5307E1C122FBD6B664B193F363369863F	889F88D1D16C85A3BB755B59207197F6F92EEECEC5D4C5ABD60E756014BCC53E
Chrome Cache Entry: 569	ASCII text, with very long lines (911)	6F8A19F12B184E68932EEB65945DD446	55B1BFB93561A9BDEBA1C3E6CF628D3C93671A04	CD1A37D3F25CA9932005F2E0CC5558036137E68F99E73004EF64F265868F8B4E
Chrome Cache Entry: 570	ASCII text, with very long lines (35244)	8F3269D897AE533C006F3E8004300B82	99618797306D9344508AC0986FE34F8887993BFE	34507F68A325B0A3F22ABE6DB32494E5954A306157926E248A43CA299B871B7F
Chrome Cache Entry: 571	ASCII text, with very long lines (17029)	D65F3CC47A4C162A3CB153E5A2245FC9	732292EE0C388629E4E1B7C7422CE31B44A72505	E4A523CD291044FB15D301D7866E401C47E59173364573E84149F5112022973C
Chrome Cache Entry: 572	ASCII text, with very long lines (4142)	BC450203C75B77B29AF20A351E5B6724	9BAC401012B8AF13FCA1DE4B9D8F3B79A6E42F11	9FDEDC2058B296158E4D21B01F241E90E0FC4B40EDCC4EE9261B21338320C1BF
Chrome Cache Entry: 573	Web Open Font Format, TrueType, length 16776, version 1.3277	C67215019B9FD89B9E29A16916BE5264	D4448C620FFA5574ED0FCCBDB1AD2BEE466F136D	1F7216458568F394C796E011CB5DA2285C6D9C919E3D7C224CFD09DF6197AC50
Chrome Cache Entry: 574	Unicode text, UTF-8 text, with very long lines (45476)	2E49F6F65128C12D6265FBFC160203AD	B89B128C4AF81483FEC1495BF9BD8C6DCF54FA5F	2F0235EA69581F3E5AC5129FF44709DBF2D5FD97F5289023CB2DFE3789882009
Chrome Cache Entry: 575	ASCII text, with very long lines (20802)	D494EBE730C6EA43E1D847CF504F8437	E48A9B4F920A1880BAEB1C5B5B73ABA197B7EFE6	01A308DABEE06B7630A6EEEA02619E23E48021DA8A46DE1C5174CF12D101B0D9
Chrome Cache Entry: 576	Web Open Font Format, TrueType, length 12324, version 1.3277	F92064E04A39C85DBEFE721D2B1B6D7F	8ED71489F914761CE0659FF5648408F08FCC5ABC	92BBDD250F80B5FAC0A9252EC3A8BCE0C6E317036AAA0C62A6C09278EDECBE42
Chrome Cache Entry: 577	ASCII text, with very long lines (43609)	1F6F5F0F94FB125D184FA9AB0C35DCE2	C8289678B46747FD1EC450DEF46D377E84D12A6A	A830D15D672281A29A9A8A81E0F0022D7C1FEE4890F29E48ADF302A652B3327A
Chrome Cache Entry: 578	HTML document, ASCII text, with very long lines (1928)	C19052DC59DD83404A322302B0369AAF	783CEEEF4ABB3A0D8D7458448566263853024643	0C5B33FC7A2EE25FF0B163F82977C27457B162127997C3C1A2D1F26AC16A807B
Chrome Cache Entry: 579	ASCII text, with very long lines (4551), with no line terminators	D845C7CFDF504D17DD1A01BC3F58D0E9	4BF62628612111A63DED2B04639BCF918D0C4EB9	8FFBAC41E6195332D893B04AA93F305DDA63CC5317EE6D89E4D177CCCDE72240
Chrome Cache Entry: 580	ASCII text, with very long lines (14090)	BAB08F0F304A99D3E26168A98907AD3E	450C3BBE9A4BEA64311F27D11ABAE58B0D197014	9E4A4530E8484155D0F46F19C6FBD81293B21C8F41F53568E288F08ED36FB34A
Chrome Cache Entry: 581	ASCII text, with very long lines (62740)	8E9D7726E945ABAD2686D1C93DE398C7	AD7247F3455F71C1D008004E6FAFBB63CC33CB9F	DA19E82758FD91A029D13BEE6FFFD19E36ACDD4809B5E9B9E5F7F2195C66FC9B
Chrome Cache Entry: 582	Unicode text, UTF-8 text, with very long lines (45476)	2E49F6F65128C12D6265FBFC160203AD	B89B128C4AF81483FEC1495BF9BD8C6DCF54FA5F	2F0235EA69581F3E5AC5129FF44709DBF2D5FD97F5289023CB2DFE3789882009
Chrome Cache Entry: 583	HTML document, ASCII text, with very long lines (56751), with CRLF line terminators	AC56113331F7A81A2F3004CA567AF9A8	7DC48FF0568A14FDD76DAB6D26A4AB1C3752EE41	C5EC4FB30528EB8D68010564803E639F8F0792EC55D8CD85D4104E594CCB004D
Chrome Cache Entry: 584	SVG Scalable Vector Graphics image	1E425F59C3D91508C63BDE68694BA116	3542AE870A3C65D2D467D48EE2E24C463A01C7BA	2B486C70ADF73B332FE2A363941E24AEE1BEFA7DED7E9D3110D24E8B9B971C98
Chrome Cache Entry: 585	Unicode text, UTF-8 text, with very long lines (22120)	98C0A14B8A96A95D6729444B81888E07	7DC1E77502B7D2A90BE99F85DEDEFCCD7A263D83	C295F620BDE9A4E22DE73838727813AE846AABFA3CDEB76FAAC5CE74C0ECB597
Chrome Cache Entry: 586	Web Open Font Format, TrueType, length 15684, version 1.3277	24C258ECCFD20FD3555F8453E85186F5	4E75C8645A27E405B1AB24D792338E8C5E7F275D	BB7D87F5E6D6CDC14E181C73155A749185331D912290A284C7A3369BBD587670
Chrome Cache Entry: 587	ASCII text, with very long lines (42915)	3BA09200B2D42B9883747DAD10422C04	FAB92CC11773EECF37F12DC57A70538D815D37ED	3A9B248DC5D73FCF935FBD31A94A19F588F2C73833A483B344C3602188711B9E
Chrome Cache Entry: 588	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 72x72, components 3	7CA45AC469A9E9A14FB7D1F97E24BB7B	D42EDCB2961FC86FE2E966813D789B8AB6D19074	1EB145EB2F7B19F9DA08D04C0AC27F9AEB98FE2842C0260C5019AAD767368C68
Chrome Cache Entry: 590	ASCII text, with very long lines (4670)	C921A2FD836D7E934DCCA337A24D32E7	2727F120A69023EA2F47AF0145218D92C3E194D9	09F1EC2B55AF8D30E98D270979811BB187990DBBC609D4D2550066F92B6E8963
Chrome Cache Entry: 591	ASCII text, with very long lines (30298)	7723C8304AD0D5045FB07AEA9982CB0F	1A2239D36DA1E17FE90EF88B98F36A4197C5CD04	893FAABDC0135A020D0D1C8EABA914BAED862AA87E14E4A19F0153F8331EADEF
Chrome Cache Entry: 593	ASCII text, with very long lines (6088)	03FCB7092AE92C973CFEB626D5CD2F81	518798C7524A6FDF293364615841DB9846E615D9	0A107B98B165BFCB200E2FF26F615A511277CCD8B731D5B9A2769B6089CCF9F5
Chrome Cache Entry: 594	SVG Scalable Vector Graphics image	FA6BCF5DA7977186676237FB70F6615A	C3EA465F66923CAA73D2EE5D1A95EDCC0DEE6E03	8E0FA951A53605C52EF89E2CA9EC78D35961BA50B68DD9EEFE6E28026F8D24F0
Chrome Cache Entry: 595	ASCII text, with very long lines (40143)	E8B8AFE0AC23BD929BC4B1204822F5FB	A5E0CFAD05B1BAD397F6B13F6DFC24C4D29922FB	5D045B8F4504EDF110C7F4B9388BD140D54FDF9C82857B0C8C1BF7B316988A81
Chrome Cache Entry: 596	ASCII text, with very long lines (1231)	4CF37FA555ED5C652A9D3414AC8DA57C	B483EFE2D2EED30C67D723BB59ABE5EBC52B5C48	B48BAE41C7EEB6D2246BEBFAACADC9BF3ACCD392E996989F260814FC471C593E
Chrome Cache Entry: 597	Web Open Font Format, TrueType, length 4420, version 1.3277	AA6E587223473C58C0D7C2FE8DC43833	91585EAFF9D10CD1ABE7B047C4E0B25B4D864C11	9825A2E4961A8CC3035E697B8339FC34879FA028F4EF7F2209E5970EDF63AC0F
Chrome Cache Entry: 598	Java source, ASCII text	FCE4B3F64D248748A7CB0DDA238DD3AB	30377F816FE08D259EBF48CE78F2B87110B6B4FA	C781DD492E22E6BB7BAF8BCE97A0432F30B47DEB113F741043F6F95515A81580
Chrome Cache Entry: 599	ASCII text, with very long lines (14734)	0692A30B5D9418A97C5F47FBA4D09C44	B9231E583E494CAD6C9E75E3EFA64C1E5677AA6A	5EE9BE2651B87099B0ED5C2B4EF30B1E38D471C6ECEF7DCF0006DB811C6840E8
Chrome Cache Entry: 600	Web Open Font Format, TrueType, length 17344, version 1.3277	FCE8442EF250EB3F61CAB5822C02C9CF	BF5C297C1E0A8A05DAEDE1039833519B8F930F93	FF7BC10AC17B93C189E93CFB6A63DA9868850FDCB0A8CE39B3348E68B21C765D
Chrome Cache Entry: 601	ASCII text, with very long lines (14090)	BAB08F0F304A99D3E26168A98907AD3E	450C3BBE9A4BEA64311F27D11ABAE58B0D197014	9E4A4530E8484155D0F46F19C6FBD81293B21C8F41F53568E288F08ED36FB34A
Chrome Cache Entry: 602	JSON data	9AB69069B702E3B876F7B0502AB1F850	0CD0DBF294E025DF4F34106847190A7A28554CBE	CD5FAA80D86BDE0E1A483F44000D493F935C60ECB680E6B258BEA04405B68E07
Chrome Cache Entry: 603	ASCII text, with very long lines (4715)	A1ED3EED1403492F72C347773A5FEA69	2AD1979322F4C2E8A9435EC77BE70B5B25B25D17	6D580BC3A7F48A94FFB8900B1B859179A69B32D221945F3905A4375CA2E54F1E
Chrome Cache Entry: 604	ASCII text, with very long lines (7708)	ED3458955FC85BC84F5DDA0321696B92	8354757D1E1A5D0D58970B29C96ACEB21E148ADC	66226AAF038200F9175D9578E4EBE817E44F2C1A111AE01EB6155AD02BCC5E75
Chrome Cache Entry: 605	JSON data	A65AE170D0ACBFC417E1A3DAD6259E90	83C8C41B589E9866A45E9D463288BB30D268CA75	76A7D32EEAF41ACEC1EDCDAB7176C7C07C7DFF563C4BB15D48788ECC2E849AC8
Chrome Cache Entry: 606	ASCII text, with very long lines (22038)	EFF69A721F56B9BE0798FD94B1D933CF	FCEFB57A2504179322617C9E52AD6A261976BDF4	57D23D55A8825CD66F6D0DEFB3327E032775DBD5BC53E62F01C5C07CC5717888
Chrome Cache Entry: 607	ASCII text, with very long lines (4142)	BC450203C75B77B29AF20A351E5B6724	9BAC401012B8AF13FCA1DE4B9D8F3B79A6E42F11	9FDEDC2058B296158E4D21B01F241E90E0FC4B40EDCC4EE9261B21338320C1BF
Chrome Cache Entry: 608	HTML document, ASCII text, with very long lines (1899)	8EC3E85FE2F0AB3FB4E4311B333B0C6D	4416B8C7C10FF5AF8F5203FCC79296D642DB49A4	B6BA71E8B59FE94F948EE16BDAD66DB15A4D866AE75341734ABB35825BA93299
Chrome Cache Entry: 609	ASCII text, with very long lines (6813)	9005644BA4A17A2543216BCFD02F8F2A	38C8EBA293CFA22B7D5A4CDACA442A003BABBFCD	A761481D78615B8DA4D3AEC3E5881807A5DA8E5E0FE73EFB5AD3483B9C508947
Chrome Cache Entry: 610	ASCII text, with very long lines (4599)	4A473BE1957A546EA1E5C71EACA44D75	4804AD8F820B417D1DCACDBBEC1E490306C7B8E6	FC309E8E0FFA1A7C3BD7DD4D2D4CE85A2A2A27D3C08489BB0FCAEA5175B97902
Chrome Cache Entry: 611	SVG Scalable Vector Graphics image	28271601DFEC8047BB170A479B0EF249	0D0090CF895002EB0FA5F48B1252F31105C0D363	6FB35BAC67A53E799212124F8364C90F751316040A2C44EDBEA7D52B9F057DE4
Chrome Cache Entry: 612	ASCII text, with very long lines (6279)	DCCD2666CBA40CF6A671987A95D0DA8F	A0418ABB627424EFAF8A12418B87F71D45286B76	2FA2A307D87684DD6D95228E78EA4C0D8CC2BD7CFAF04FAB403FB5C9A953F355
Chrome Cache Entry: 613	ASCII text, with very long lines (47531)	808A57CAE0B6FEE71F46EFDDED44B348	DD570A24C8BDA1B391AA1DDEA6004125818E579A	5B75AC6F98994352699841DFFA6E562725EBBD0005C539946AD3625EC550EB0F
Chrome Cache Entry: 614	Unicode text, UTF-8 text, with very long lines (10100)	0178C8CCF2A4FC07651FC45FBCB2D72A	65C19239264A2DB1921BD9C17A9C5963F04E8060	E45912A240DB44C0BEADFB6879CAFD1C22512F6A8A466ADDF7D971D16D9831E0
Chrome Cache Entry: 615	ASCII text, with very long lines (7026)	CAF4F696099A5D50D1F26E8FDE23C49D	C9DE27A5D60508588852AD60B607046E4FF81786	F6F09F3A821784EFD25B8090967028743C3FEF0082CF19CE53C9CA2EFF6D1831
Chrome Cache Entry: 616	ASCII text, with very long lines (4483)	EB023D7F64EC0DCC9C35CB4236C85944	CCE0C9E352EFA9407777DB8664F0C54AF8121414	42FF593ED2AF87C6111295EF3F161179F8877D523DE386009ADA401DCCF76796
Chrome Cache Entry: 617	Unicode text, UTF-8 text, with very long lines (65308), with no line terminators	FAAA4AF7EFE91DBD6B72A2719B90D6F0	2B5C56BD507073A86FB880EB63BF236FD792589E	F5F7970F5FBEC3B802E19A202673A7F1D1A249FF22558D31A1FF7B6E6B7DE770
Chrome Cache Entry: 618	SVG Scalable Vector Graphics image	21FE59ABBEF7846A168756F70F86D474	234300619EF6F45C283519D1CECAEF35D993D22A	24CA84EA30978DF792133B8DC40B5D0E0D0DFFB307236BA082AF1A8F2151C3AB
Chrome Cache Entry: 619	RIFF (little-endian) data, Web/P image	B2B60F1C7184B15EBD6CB2A213C323C5	8FED557FF6E49376F3A4BC56F95A548D6075955D	DBA7C93D3CF4806133D8FE211DCE32AA12041FB82ACC4591F464052714878FB8
Chrome Cache Entry: 620	ASCII text, with very long lines (3095)	CB24F20754D6A9503DAB15E45C2B9DF9	07B0C135650A59E95988A2285F85710770BEA6A2	554C87A795F29E80C2379342AEFF5A615017A7C4809DB9B069D3DE86CD4933DA
Chrome Cache Entry: 621	ASCII text, with very long lines (36586)	A4ADFB63C68D145DC569CE553306B0C3	00D298C93D889FA3DCFED06BB3B15F974706C285	632102A0ACFA27BB5F35146EF6BE716BEA275FC9AC972C9E3D35990D75C1B635
Chrome Cache Entry: 622	ASCII text, with very long lines (13510)	6881D12331F120CB9BA7E5B3D095B5EF	2492C89279CA118810AD403E353D6D37BF368A8A	5ECC00A9E19C0FA9B61BF7357EC034C3C88BFEAB6C8887339F242817D8E47453
Chrome Cache Entry: 623	RIFF (little-endian) data, Web/P image	1666AAC9E890DBFA52233EE9DBAC7016	8CBF47E86BCF022D8675A0346EB429F12D9C8285	BFE9F48B1C1C0A4D93329F3399F4DE41AE5CA780CE4E5FCA7BE168CAFEE394E1
Chrome Cache Entry: 624	ASCII text, with very long lines (65536), with no line terminators	9BE340B8C4BEE01F846517BBEB9E8323	98406C92939C5A3ABE34E5B89E8928EC26BFB5BB	223343CAF2BA3367B63537C4D163A02039B2CC5B92F516DFF9216051500BB3B1
Chrome Cache Entry: 625	ASCII text, with very long lines (65536), with no line terminators	E7C7419A8F0B832A7AC808A77ACF58A1	CCAAF6C03B3EE91FAD73CAF9A63CF1C1D85CE6CD	C8E778E3D524B1CCA5845BAFDFDE693567DC7C1AFC54718F0DAFAE852333117D
Chrome Cache Entry: 626	ASCII text, with very long lines (52343)	6789520F0E2B1BA1420CD273A9358B06	A923D0C4761B9C6161EE613C525EE7E02A4CBE42	116B222BEA45267E72DA59C6F03370EDC9FE638420705969C225066F93AE3F08
Chrome Cache Entry: 627	SVG Scalable Vector Graphics image	0116273C0A1FA15304056423B6FB0144	DD57DF9094FCC4004C836E350B846115539DAE23	AC368FA5C1F135A0ED5F7DD60968127B0DAB9A083E4F3B2FAB3295AB713ADD9F
Chrome Cache Entry: 628	ASCII text	FE46325BF6167047462E10177C5D208F	B54445BCCC3F97503835D374A8BEEDE48759723D	E46A8F98BDF831BBDCA0057CD9F046E6454C85478BDE2202A8FAEE6BDBF7B683
Chrome Cache Entry: 629	ASCII text, with very long lines (65301)	464361CF8035B4C6390719B21022E44C	FB71EEFCC910B854A3A08DB135DAAF6B63D9D480	F6EF7FAC742AFF09773A8E848520489DC88A369DF0B14740BC9B4A0CC2CEB1F3
Chrome Cache Entry: 630	Web Open Font Format, TrueType, length 13772, version 1.3277	5E7EB0632035D003E826BE068CA7E82E	DF32D69FFD8A93423964939C44A3EE8D970E4A11	EE8AFE4B05DC9C705E66C2191DE4931E55622FD728A99BC9FEF6B00E5772D006
Chrome Cache Entry: 631	Unicode text, UTF-8 text, with very long lines (41526)	67D7D9AF3E4F49485A06A4D476B243F0	CB8FEF6212ECBDD6D9354617CFC6508DF604F9F9	EEC790B3A16BB27AA0A9593C2CAB42D4FCC96C2267FB169967BD0A045F5AF124
Chrome Cache Entry: 632	ASCII text, with very long lines (36586)	A4ADFB63C68D145DC569CE553306B0C3	00D298C93D889FA3DCFED06BB3B15F974706C285	632102A0ACFA27BB5F35146EF6BE716BEA275FC9AC972C9E3D35990D75C1B635
Chrome Cache Entry: 633	JSON data	9E576E34B18E986347909C29AE6A82C6	532C767978DC2B55854B3CA2D2DF5B4DB221C934	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
Chrome Cache Entry: 634	Unicode text, UTF-8 text, with very long lines (7518)	9DE801C80DF0D133ABA3833E036E1EF3	EED9E2B29F7734E95EDD891F9FD25DCDCCF14033	37770E3E0BE6311E271DCD9A4E197D1726140776C91A525EA05DF185BC1B7B02
Chrome Cache Entry: 635	ASCII text, with very long lines (65457)	122C9E4338794A3EE4A5E74D9777BC0F	98EF50E42CE81E5A7DB198EB3370252DE9A8BEBC	3BDAE7D8720DA0DCD5883C72A02762CF728F2392BAD92716FCEE190CA5AF2C53
Chrome Cache Entry: 636	ASCII text, with very long lines (30298)	4EDE79987F52C99D7B570FE77436747E	B9C4251C30ADBAE5F6BD532F37109E82DA414E7C	715D8C6EC761B3051A58AC9EE1AB704F7C3587F31159C289372A30AE5103F2F2
Chrome Cache Entry: 637	Unicode text, UTF-8 text, with very long lines (36614)	F6D0FFC8AEA11264ECA06FA1ECE50E00	FFDE9A1749BCF0F690BEBEAA46217CF5623E45F4	79DEAC1DA4F0284F47531AF8AD9A2164FA9113FD9EACF3FC8C794E802845A029
Chrome Cache Entry: 638	Web Open Font Format, TrueType, length 2524, version 4.-22282	E584E160AA097D164ABF9AE6D7DFD291	72389F2E647146C37219E9E08508EDFFF48DD99F	BA4E0CBDDF9AE44844DB7FE4263E61E3E155F7C8A809FB25D7336755C436786E
Chrome Cache Entry: 639	ASCII text, with very long lines (6243)	53D9C7A4165D13E923109318A7CF0976	14A644DA09A75F57628A8FB0DE9680887198CA30	671A7F6AFC6FEBE610D66D0A4B2CB7D2B3A590477C4FD0D8D28686484F0A25FE
Chrome Cache Entry: 640	ASCII text, with very long lines (13143)	37E097D815F94CCFF29341B48886E26D	4D6BF32AEC8E5D752AEB372AF1DAC4B1C8A6CA2B	87E9AD9F11A531E50F48D4C5CC8A84BFB5721BF91A47BB1E240F85E488C99381
Chrome Cache Entry: 641	SVG Scalable Vector Graphics image	EB9B9836D41E761A94DE4C9A48780F28	275F09F5F87854676CDDEF033D99B5B0371FB51D	3D2C1F9C959C97C75F339FF4C109D08B943B1197CC7F4B0F7CC587BFAE2FA603
Chrome Cache Entry: 642	Unicode text, UTF-8 text, with very long lines (18772)	2CB2A054688AE784802B9B3675F2E5E3	29B349FABE19D8D95D6DAFEE7D705630CE26E0F4	8E179D57CD56DD52ACF6398664A44188006DE5CCD70751776938C0EA47E11C11
Chrome Cache Entry: 643	ASCII text, with very long lines (12116)	6043EF38E4658586FA07319307F3D09B	A7132829F60DED0D63A446B579BF7ACD94BBDFA5	DC25B75187537B84ECADED08C63BEEA4DD43D862B6BBD50C204ED74AC3F86FFA
Chrome Cache Entry: 644	RIFF (little-endian) data, Web/P image	385C4E9577E00FE34C8D8C331130238B	A54CE0445EA951461110446992048884EF96C069	F1841FF185A4F43BF0184C828DA1647C0DDFBEBB6BB763CD10789F9EB6A4A306
Chrome Cache Entry: 645	ASCII text, with very long lines (35244)	8F3269D897AE533C006F3E8004300B82	99618797306D9344508AC0986FE34F8887993BFE	34507F68A325B0A3F22ABE6DB32494E5954A306157926E248A43CA299B871B7F
Chrome Cache Entry: 646	Web Open Font Format, TrueType, length 17844, version 1.3277	30062C841E349D94FA6488120D38961C	15BC10A89CCAE5A2801DB026F0F2C440FC945938	AF091CE21910C117EF71BABA6B6046D7B056B3A03D7FA5346008948F7B607EE9
Chrome Cache Entry: 647	Unicode text, UTF-8 text, with very long lines (5314)	2751E22DB2760F2323CD929DEEDE3AE9	AF18045A7757DD172559B47E0F15FF4159AC15B4	C163D29807D90EB470B9E9EA32E530310A86DEEDB6031E2886B22BC2782197B1
Chrome Cache Entry: 648	ASCII text, with very long lines (2511)	5FE71C03FEB3CC11D5D26064B461BDD1	820466CE8403D67C20BF2CD3F5EF01F7E6D61FD6	4A4412903FD9ADAED2C5BF618F4AD584AF4A3B665D2B333816EA1A1BE87596B7
Chrome Cache Entry: 649	ASCII text, with very long lines (12337)	C79D14C9D3B05F7BFC6C3077C484A748	F58F62401EB364B01FFF42F943BBA4A04707FF0A	F2579BB72200291BD98964FB3E920D8D55C82822F0A5874196D848E801C7A870
Chrome Cache Entry: 650	ASCII text, with very long lines (16803)	04FC043D01629993958A2E8882CBAFE4	E48A64F05DE2D9A7A6EA1B15E4175179E47BDEA7	12597972EBF76D8129FCACD76B84D5DBB064C1B29C4FD99BCAA78286091FA5DF
Chrome Cache Entry: 651	SVG Scalable Vector Graphics image	5EEE17FAACA889C47687AD39E4585273	AE89E10486B8EC2CA38BE29ACBCF90117E0747AD	E12F4F21EDA26E30E5C4C9A92FA179B7CD16A2C2A68F2FAD64A686A64740FDD8
Chrome Cache Entry: 652	ASCII text, with very long lines (11010)	265AAE980A20DF2015B5E495363FE910	D4FF536C055E7F0B62212100F1E934C963C36F66	07F128DB654415D2FBFE46BC9FC5164D88EABC6B1C0D15A0DB3448EB4C2F3EA0
Chrome Cache Entry: 653	ASCII text, with very long lines (65536), with no line terminators	C977C330B6598E4D397F8DCE10C963E2	A8801B30C1E71E311ECDEA6D01509C4EA570ECE1	74DE98FAD4DA917E06CEFCDFC79135E1B512CB4283D56AF30492D1EBFE0EE3FE
Chrome Cache Entry: 654	ASCII text, with very long lines (40143)	E8B8AFE0AC23BD929BC4B1204822F5FB	A5E0CFAD05B1BAD397F6B13F6DFC24C4D29922FB	5D045B8F4504EDF110C7F4B9388BD140D54FDF9C82857B0C8C1BF7B316988A81
Chrome Cache Entry: 655	SVG Scalable Vector Graphics image	C27EA21903DAC818E1C698443B027657	38FC86DF752451F779A2431DA02ED038512BA454	77878A80C7001B06827DB1AC232D9E64C6D3436BEED9161BE124672F3401ED5C
Chrome Cache Entry: 656	ASCII text, with very long lines (5436)	02F723F21C0C890F2ECDACC4A042F93D	28CFBA9D50E6298D4A1422AD9C95CF6C508043EB	DD0337699E284E18C9D5B41E3EA42DAC8CA111CA2D42D2EFDE9A19BB6560BD09
Chrome Cache Entry: 657	SVG Scalable Vector Graphics image	6A61C2718DC082768015315F0F51B46B	6F1BE2CC3B9C4DE7DD2DE760CAD2ADFC3F7BE190	EF8855E942EF9D05B325A5EA78E03BA193E524BA6DF38893C41FC0315AF215D2
Chrome Cache Entry: 658	JSON data	A65AE170D0ACBFC417E1A3DAD6259E90	83C8C41B589E9866A45E9D463288BB30D268CA75	76A7D32EEAF41ACEC1EDCDAB7176C7C07C7DFF563C4BB15D48788ECC2E849AC8
Chrome Cache Entry: 659	ASCII text, with very long lines (30298)	4EDE79987F52C99D7B570FE77436747E	B9C4251C30ADBAE5F6BD532F37109E82DA414E7C	715D8C6EC761B3051A58AC9EE1AB704F7C3587F31159C289372A30AE5103F2F2
Chrome Cache Entry: 660	Web Open Font Format, TrueType, length 15284, version 1.3277	4F8DB599726C67A1F2148A89CCEF0E4E	6F8768D2D509951274C67E80306445457F5943E2	A9663A3528ACB5A6463AAE06515A87F48EAB595ECD4CAFEBD582EEDBFC28F525
Chrome Cache Entry: 661	Java source, ASCII text, with CRLF, LF line terminators	7EAFD043E9D473E525E249FB80FBFFE0	D9A8E38A6134AB0FA4A9CDFA19480036FC727C97	D4D52E8E018416A25ADA2D9A150E83771C442BC7980DD065077EFC7930175B8E
Chrome Cache Entry: 662	ASCII text, with very long lines (10852)	C5FB4D3A2410F7872FBF77F8FEFBF9AB	2C8D03CA651381220DA825F30DE03C3CF32EB6E8	439CB62F2D9A0F6067C0A4FDAF408DC6388830B9B459CE970AD1ED94E009F0E2
Chrome Cache Entry: 663	Web Open Font Format, TrueType, length 13164, version 1.3277	882E5D4CC9F7106331B0DC45753D36C1	0605E0D0CECA0F29A2D032185F74BF07E5C55252	0611DC6778BFBD8D581CF1031D2888D822AB0F513C91EEBEC0801072D311A97B
Chrome Cache Entry: 664	ASCII text, with very long lines (34942)	3647E774BF9ECEC43A0DBE1B3359711E	EE43E9C35FC291C2D53260D2C02B4C895E02A217	72DA3F04C782E8D1715DB80410A2858A0956BC7C232E754724E6B1C4951A7BAD
Chrome Cache Entry: 665	ASCII text, with very long lines (65536), with no line terminators	F95CC627FD0658416CAF381888FBB9DF	3D473567D6AA568F255F02FE0A4F057F15BB76AF	170F5C86713C838B59CE43F0D5A3D7D882314328FB1AF4F97DFFF4DEF99596A2
Chrome Cache Entry: 666	JSON data	9E576E34B18E986347909C29AE6A82C6	532C767978DC2B55854B3CA2D2DF5B4DB221C934	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
Chrome Cache Entry: 667	ASCII text, with very long lines (44921)	D105E17886B7BE9732942796ABEA5573	4540D83A42B1776978355E6E3DC1CBDBF2C23C04	F60ADE9ACEDA6B13C580E84CB4C60A33E9A387F46DCDDA2F2AFE8FBDDC4F0445
Chrome Cache Entry: 668	C source, ASCII text, with very long lines (11725)	48D4C2683BF2F66136D29AFD00F1AB14	1D222EE5CF2ACE62B27B1CF6226A3123F5352011	075733EFFA3AED28BA5F328611306D72DC5D7BED3B94C4B9C32D85D7DA1ACD99
Chrome Cache Entry: 669	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced	803CEB01F01E471C5923A098DF0CEC38	6949B85FCB35FE372AE548D452222F3741EE30A3	F64DDBB70F682E3D5CFF038F60645C65A5F12FC6540C5847E8820874BDD5DC2A
Chrome Cache Entry: 670	Web Open Font Format, TrueType, length 11912, version 1.3277	94446D146BDE9A53EEEE642FEB9827EF	7C4A74A01891152B56F5B52EE6774E42147A1CAD	3E5970851F7278B6A66DCC9359001A0C722BBEAFB7B4262A908612BF367DA2CB
Chrome Cache Entry: 671	ASCII text, with very long lines (43609)	1F6F5F0F94FB125D184FA9AB0C35DCE2	C8289678B46747FD1EC450DEF46D377E84D12A6A	A830D15D672281A29A9A8A81E0F0022D7C1FEE4890F29E48ADF302A652B3327A
Chrome Cache Entry: 672	ASCII text, with very long lines (4825)	9DCB0F6AADE2AF1158AB817677EFF62D	84F649C8D55A52DB4F404C382F329C2D087F4294	F7AEC9CFE52B8AB3C0AE7BD72D2FA67D9613384D08E3B44BF27CF8C964AE98A1
Chrome Cache Entry: 673	C source, ASCII text, with very long lines (11725)	33EC36BEC613FBE21B59CDEA512D1541	8309F856B1CFC712F0D3D08CAF24F8C5F61D8A26	15D4ED4D18F14AA9016B7CCC90724E7A4E81381E25CFB6B17AB4DAE03E1B944F
Chrome Cache Entry: 674	ASCII text, with very long lines (44921)	D105E17886B7BE9732942796ABEA5573	4540D83A42B1776978355E6E3DC1CBDBF2C23C04	F60ADE9ACEDA6B13C580E84CB4C60A33E9A387F46DCDDA2F2AFE8FBDDC4F0445
Chrome Cache Entry: 675	ASCII text, with very long lines (16126)	4F20C63B3E8B815138C0B2D3CB0D46CA	91871AE7E144C2FB7032015F1FCA8EB4CBF7DFF9	818C1DBDB58781FF2C267D64F30B8422C02C4EB55232DF344064508D413103E8
Chrome Cache Entry: 676	ASCII text, with very long lines (6755)	0C1972760A645C3D36EAB97C41DC1EDB	C1442FD3E5378975D0963F8E4C7D215DCF4F83B8	8A6A4BBDCBFD554A8BD5A59AD9E52A0C182C7279B2CA87B725C32E2968334F53
Chrome Cache Entry: 677	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel	604ADFB53677B5CA4F910FFB131B3E7C	5F1A0FB4E4AD3707E591CE16352158263488ED70	24638331466A52BB66F912090E7A9CC9E3DF2236E39C187C9409104526B472B0
Chrome Cache Entry: 678	ASCII text, with very long lines (4670)	C921A2FD836D7E934DCCA337A24D32E7	2727F120A69023EA2F47AF0145218D92C3E194D9	09F1EC2B55AF8D30E98D270979811BB187990DBBC609D4D2550066F92B6E8963
Chrome Cache Entry: 679	ASCII text, with very long lines (16803)	04FC043D01629993958A2E8882CBAFE4	E48A64F05DE2D9A7A6EA1B15E4175179E47BDEA7	12597972EBF76D8129FCACD76B84D5DBB064C1B29C4FD99BCAA78286091FA5DF
Chrome Cache Entry: 680	ASCII text, with very long lines (17029)	D65F3CC47A4C162A3CB153E5A2245FC9	732292EE0C388629E4E1B7C7422CE31B44A72505	E4A523CD291044FB15D301D7866E401C47E59173364573E84149F5112022973C
Chrome Cache Entry: 681	Unicode text, UTF-8 text, with very long lines (23194)	C7A6C52E321B867D073841C206BE4106	3F948955DE6D54C07FD2080A40E3C04F84641324	5D951F83ED165C92C1A79FE2AB2ECCACA81E59FC095540A512D76197176BB721
Chrome Cache Entry: 682	ASCII text, with very long lines (7026)	CAF4F696099A5D50D1F26E8FDE23C49D	C9DE27A5D60508588852AD60B607046E4FF81786	F6F09F3A821784EFD25B8090967028743C3FEF0082CF19CE53C9CA2EFF6D1831
Chrome Cache Entry: 683	ASCII text, with very long lines (10778)	DC0C64BF22D2196A45A953D7D8BAE831	7C09636342276C74EA9EAFC28DFFBC7CBBD92F68	B474A3D26CCEF1FF91DDDE04C00F6FEBC72DAF88F7C7420F32E2C799C2F859D5
Chrome Cache Entry: 684	RIFF (little-endian) data, Web/P image	DA7EF08CA0DC4552CE4498AFBCCD473A	C22C096A78818689272E8D4D0D94A31BBB1AF5DF	C958FEC1BEB0AD85C367CC63C7BAA2138789061A7FECF4AF0902BB8DD7C51701
Chrome Cache Entry: 685	Unicode text, UTF-8 text, with very long lines (10524)	F21EAE25606F5262BCA5BC33BC8C6590	11600F0FB7508A31B016669353340615935C8119	EBC8A6058E52ADC1483C8800BCAE500CFC8A22362B998DF9D7BC73ED2430AC2E
Chrome Cache Entry: 686	ASCII text, with very long lines (9455)	4F2AB7700DECA6C0C2021CEE6E6C87F2	C65F01F8428744E5C097335E0725C84390C71733	D50A1ED5B2527EC4C574881EF0C2AF80C557BC49C0656B76B92D312F4E333D15
Chrome Cache Entry: 687	ASCII text, with very long lines (19649)	B1B3A894BF261BF4553AE5387786E640	110B6D518EDAA6A9AFE7CBBB5C3AD80A243C73D6	163764BB5E1940FD8BCA2932253C6C9EB1732247BA7A8EA5EB5AA56863D95542
Chrome Cache Entry: 688	ASCII text, with very long lines (65536), with no line terminators	F3C25D53E20D28B42AD4D9559A5F0A1C	CA69B44C6C4D1AC2E909F1D4DF1BB82EDBF54424	806BECA8DCA10596C0E3B51EDEC6873E65703187D4C60A1177ABCF504C3DD5D3
Chrome Cache Entry: 689	ASCII text, with very long lines (4621)	35392FC5581660FDF9191A2503FF3959	7CFBFAB30B4298FED0DE1C842A6078C6AB3D2C41	627AF83F2174D218E7472312E15E7A02DD8EDDB6E88C8A88994081FF1CEBC4E3
Chrome Cache Entry: 690	SVG Scalable Vector Graphics image	199626DC652C1654974D523091BDC7A4	4F4724C50A31E020C935B09D0D00B33CAF7524D4	E477A44C29C0BE30EA8E5E8EDF66C9B50355EB05E3AC240767CD1209B3CC18C9
Chrome Cache Entry: 691	ASCII text, with very long lines (4621)	35392FC5581660FDF9191A2503FF3959	7CFBFAB30B4298FED0DE1C842A6078C6AB3D2C41	627AF83F2174D218E7472312E15E7A02DD8EDDB6E88C8A88994081FF1CEBC4E3
Chrome Cache Entry: 692	ASCII text, with very long lines (42509)	9996B95F5051B327AF768FCD1C4F0CCA	B6E6289A20C832001F1D0065158295C46FA4A1EF	8C12CB29EE4FDE2ED2F4DCF9BF4279AEA32E93E792DD3BFE7AAE9F6AD96D7AAD
Chrome Cache Entry: 693	ASCII text, with very long lines (5159)	5095F660CA3AF8738717536F99F98499	BCE5579A9EB4FF9D655FBF1DC9C0C8732B66E888	184670842A6DA4A9A0023391B99FDEBCBF502E42316EC3B57CA664E32E1EEA0D
Chrome Cache Entry: 694	SVG Scalable Vector Graphics image	C711D55F5C2D3A41FD6A449CF44F5CED	4FAFFF42F90AC7D2A4CCD99865CC8C188D6A9B09	EB50CA4BF56D418B745AD1C77A8B54B2138FB87A0A219E464EAE8CED4C949C87
Chrome Cache Entry: 695	Web Open Font Format, TrueType, length 16704, version 1.3277	5DB40868ABE1278EDFBE02461D4F3547	ED9229E0C8F49E1CC8134E4E6D3822A4BB6A5DE9	98ACEAC979E7943CA3CD352501C73A7BA297D4DB87D7392E2945DB3CE29B33FE
Chrome Cache Entry: 696	ASCII text, with very long lines (9848)	4FDC887F52D3C71ADB36F3BDDC5BAE76	5A2182031F9660E7522A7E4A414CD5FE5AA8D839	C56F62A999206F69B200F65C784FBC69381386776C01BC0960EA55E26111EBF8
Chrome Cache Entry: 697	ASCII text, with very long lines (42915)	3BA09200B2D42B9883747DAD10422C04	FAB92CC11773EECF37F12DC57A70538D815D37ED	3A9B248DC5D73FCF935FBD31A94A19F588F2C73833A483B344C3602188711B9E
Chrome Cache Entry: 698	SVG Scalable Vector Graphics image	D3E99DC5C534B41FAC830E37F9C7CF79	3361024E24A7A289D7456C752A815204B5089086	DD83F95D0017AACB701E9681ED4528E949419F34B6E85B7A7A44D861500DCDD0
Chrome Cache Entry: 699	Unicode text, UTF-8 text, with very long lines (18764)	D30C36741B28DA0C3ACB59D50922854F	2DE8CF88DDF976B1F725F9B6C7B97A96C9404D84	AB50A1CEE3719793D0BDEA665303BC4F3637C9F82EB2F6560FAC586B570FF27C
Chrome Cache Entry: 700	Unicode text, UTF-8 text, with very long lines (18772)	2CB2A054688AE784802B9B3675F2E5E3	29B349FABE19D8D95D6DAFEE7D705630CE26E0F4	8E179D57CD56DD52ACF6398664A44188006DE5CCD70751776938C0EA47E11C11
Chrome Cache Entry: 701	SVG Scalable Vector Graphics image	2438CDD6F5BB7731069306C5AC6B00BF	5C70B99ABCAE66BBA4A451CC73B707C4AA049331	FE549E1311EE1ABC130CD94FB27FDC7BF29134160E8B103C75A741A352C6EC55
Chrome Cache Entry: 702	Java source, ASCII text, with very long lines (23457)	8E516F060EF565C2501A94CB7C53690D	0D0C4A39862F754A504B9A1A2636913916ECD2E4	3F21499DE349899C8F3F280CE317254C3A7B9E9806B8EC10EC55B916EF9DD305
Chrome Cache Entry: 703	ASCII text, with very long lines (42509)	9996B95F5051B327AF768FCD1C4F0CCA	B6E6289A20C832001F1D0065158295C46FA4A1EF	8C12CB29EE4FDE2ED2F4DCF9BF4279AEA32E93E792DD3BFE7AAE9F6AD96D7AAD
Chrome Cache Entry: 704	RIFF (little-endian) data, Web/P image	E7D3A17DA96B7F43961EEC4ABCED97B4	0AF0C5A2A390B75A0F81E75D1DC67D14C675348F	49549A16F46767FA5C801DE6E26A1C45112B83653F048BC9A78BA7210F8A14A8
Chrome Cache Entry: 705	SVG Scalable Vector Graphics image	39A94ED0951601969B638ED1CC945A1D	AA8EA3137FB98F0390B598E68F1DE78E191552EC	6B1B621F82EC75D0DB1538C7725B67D303C8670084E1ABB01D84C7A4CFF3CAC3
Chrome Cache Entry: 706	Unicode text, UTF-8 text, with very long lines (7518)	9DE801C80DF0D133ABA3833E036E1EF3	EED9E2B29F7734E95EDD891F9FD25DCDCCF14033	37770E3E0BE6311E271DCD9A4E197D1726140776C91A525EA05DF185BC1B7B02
Chrome Cache Entry: 707	SVG Scalable Vector Graphics image	9C34CE39920CF75726CFED143D8E696B	099B407B55A8F6BFC11E38F7D5A2F4DA1413D130	C610B70742B166344A21EB968DC620BE9AE6C76F3D09AB97F1678090E6DDDFA2
Chrome Cache Entry: 708	ASCII text, with very long lines (57564)	BC4FF0521652336F519AD52E5BFDEE41	417A53AAB4341C078AA8ECD4B22D5B64DDA23F9A	C5EEE4A233F260D74D4F4B6958B9CE63A82CE5EA0FA34F643C93F76089DF8167
Chrome Cache Entry: 709	ASCII text, with very long lines (48338)	E6BB56338DC9753D86B53D8C4E355864	F970724388CDA390266D2A01C9CC33B490F40302	AD75E0FBEF0E5BD093BC95641AA3CB09E06CEFA1109C6154745ADC8DED132929
Chrome Cache Entry: 710	ASCII text, with very long lines (27907)	82EBD6097764F97F33C2A32352DE096F	7D85C281733F091E61BBFEF979920E4FAB7FD53C	C4B08291B74EAE04A1DF59D52B6CB22314415DA9E8137BF9F3485C16D07A2799
Chrome Cache Entry: 711	ASCII text, with very long lines (5436)	02F723F21C0C890F2ECDACC4A042F93D	28CFBA9D50E6298D4A1422AD9C95CF6C508043EB	DD0337699E284E18C9D5B41E3EA42DAC8CA111CA2D42D2EFDE9A19BB6560BD09
Chrome Cache Entry: 712	Unicode text, UTF-8 text, with very long lines (10515)	372F232E3B24D2F3BCF81CE081C5E2E7	47FA91F2A9AF0DFBC2D386C8BD5FE540F023E45F	B411EC7F8B3B4E01B2A115E5CAABF437102CACDD78D1DC1848BA94E603D71D6A
Chrome Cache Entry: 713	JSON data	AAE2A0D336D9A6909D204D012ACCD0D8	D3BB3644CE1E83B63674B425BB2706810281CFE0	2DF8B74CE80DFB516619471651CD4B77C48958B8E483080FD1A10EB77C906385
Chrome Cache Entry: 714	Unicode text, UTF-8 text, with very long lines (5314)	2751E22DB2760F2323CD929DEEDE3AE9	AF18045A7757DD172559B47E0F15FF4159AC15B4	C163D29807D90EB470B9E9EA32E530310A86DEEDB6031E2886B22BC2782197B1
Chrome Cache Entry: 715	ASCII text, with very long lines (59001)	82DAD32BEB10CD5D3D75C076A0828F16	788AA833CC79ADFB6BBC5ED9C7523B9F5DC21BF2	CEB5AD10234FBADD46DEC20045141AF4C59EB55C58C03C6E2DF199590C560727
Chrome Cache Entry: 716	ASCII text, with very long lines (9791)	69BD5E3E4704E5ED29AC0D8EDC5E9D98	A138204B1311AD662BF1FD0BE642886BB0781664	545ADC36D49C680EA2A306609E1EE7A548014DEF7C6D28588E75F7707DB4A0E7
Chrome Cache Entry: 717	ASCII text, with very long lines (11546)	6B553DAA98EB94D0A0FE2A45AE657451	77CB4CCD00A75590965657BD4E98C3643D0DDA03	DA3A84DFE34B4E4A6A2BA7BB14031076963A8A8928F923DFCBDA0806B555899A
Chrome Cache Entry: 718	ASCII text, with very long lines (4979)	719D6B3373858CE2F6D550FB7494BDF2	4159AC2ACC76A3B96455B15DEF7BF6083ED961FC	88D3C80A3867A560EEF443209EC1F34AEA8A084084BD4026F4AF4D2BAD586442
Chrome Cache Entry: 719	Unicode text, UTF-8 text, with very long lines (22120)	98C0A14B8A96A95D6729444B81888E07	7DC1E77502B7D2A90BE99F85DEDEFCCD7A263D83	C295F620BDE9A4E22DE73838727813AE846AABFA3CDEB76FAAC5CE74C0ECB597
Chrome Cache Entry: 720	ASCII text, with very long lines (11744)	CD27D902D78F30537532B8C49CF8B141	B3D1E081C2889FFB662A7A23F524142ADDA5D962	421195DEB9C3506B77669045A5EB92F116C9FA507351FA19634E72083C4E75D5
Chrome Cache Entry: 721	ASCII text, with very long lines (24799)	0F50337CD3A40E6C3C486617EC3174A2	A20C04BEDD330C7D39384FE32403AAC8CDAF00AC	DAAE3A13D2C7A6481D6BDB42018E15E1D5604E8109A126C774DC6B843AE8C696
Chrome Cache Entry: 722	ASCII text, with very long lines (7716)	8D70D5FEFF8B755E400874E9D868D06E	B7C09AA33442AC18B357FE580CB34A09EE3AC5D6	1D6CFD48A1997E9CE202B4C87C995FE3150C0754B774FD9F8D8C098E1AEFC76A
Chrome Cache Entry: 723	ASCII text, with very long lines (10778)	DC0C64BF22D2196A45A953D7D8BAE831	7C09636342276C74EA9EAFC28DFFBC7CBBD92F68	B474A3D26CCEF1FF91DDDE04C00F6FEBC72DAF88F7C7420F32E2C799C2F859D5
Chrome Cache Entry: 724	Web Open Font Format, TrueType, length 12708, version 1.3277	A23BDCE9D5468C27947C894C200E0226	DE83485DF3C1AA465B814D526B016E2950C7DE83	9492BE8780DB85BC0FC24A9BABD69DB8F6DFA8A4ED62A7FFEC76CBF40F29AA8B
Chrome Cache Entry: 725	XML 1.0 document, ASCII text, with very long lines (443), with no line terminators	E0A40795A3DCFC0FF6E3060AE42B4139	103AA9D566CE73524F15E89C792BFE2E59EB6512	84DFB688C8655E3A75E462F66F5A316E29F5DE5AE8D785822F8E4F9BFB6B79F5
Chrome Cache Entry: 726	ASCII text, with very long lines (3841)	E69E422AAA4ACC9800FB7DCBE5C4A5ED	AB4353AB6727B3E1180A8A81F116303B575BCFF2	87866501FE6F806E141CCF1D15243CD7DAB77449B72006CDA33249ECCAA2CDDC
Chrome Cache Entry: 727	SVG Scalable Vector Graphics image	199626DC652C1654974D523091BDC7A4	4F4724C50A31E020C935B09D0D00B33CAF7524D4	E477A44C29C0BE30EA8E5E8EDF66C9B50355EB05E3AC240767CD1209B3CC18C9
Chrome Cache Entry: 728	ASCII text, with very long lines (59323)	215C13C3C327F124B654D85D282A4C7D	70044C4B8EA922ECAA21FFB6CC75FE041A2EF8C4	71DB37C918C50E87068613A6679B945AD83A3027614441FD1420151A34FC7A4E
Chrome Cache Entry: 729	SVG Scalable Vector Graphics image	6FD78F766CB66EED9146BA0D2B56F23E	91EE2D3A76688E4435DD7583FFB4473635E07E9C	CEBEF91A6A00F1AF25211B2B84309272EBD0D55D28523EC58D8FEF8B64CE65FA
Chrome Cache Entry: 730	Unicode text, UTF-8 text, with very long lines (45741)	A72399F37B0A7AD283E6F1007B9BAD22	42A1682E05E32EB25E5CF0A3D7BBBBD86344B657	055E1B505F4B664DC199F4B20022177B19A401F3E08700E195607B4792B636FC
Chrome Cache Entry: 731	Web Open Font Format, TrueType, length 16456, version 1.3277	FCC42193BA796ECDD5E6B78C9DDE06DF	DC1175C6D15F6A437E9E1B9F4F41F48A22578F39	6B7F6E73F7A7F4D2C63311CF52B579FE053E5DE9782063DD91F3E409A9236086
Chrome Cache Entry: 732	Web Open Font Format, TrueType, length 14648, version 1.3277	A51C6902C29A33977D436D63C099BF53	9B682DA18D85EDB44A5859684A31FCA302FB8C49	3E86A5B77AB4E1E7153FECD2B9FB7345BDFCF8CC5CAB4D74311ED9D9AE28C0C3
Chrome Cache Entry: 733	ASCII text, with very long lines (62513)	FC17146358B4AA72CAA75B5C329A0E8A	3978C04BFF06FAE093ED90A444DA65AC542BA7DF	968696D3703A5278F74BA9C2C3F167EACE54E6EF69B2C0BDF33A419C86B4E2B2
Chrome Cache Entry: 734	HTML document, ASCII text, with very long lines (65536), with no line terminators	AE875AD810F6EF692A4122D95F9574F4	3FD48DE4F9ED1E7A47033A2B96ED8A3811006484	F15332D58B196E165A369B1670E66524D30DBE55636AD08213C1C52E32A13BE0
Chrome Cache Entry: 735	ASCII text, with very long lines (3095)	CB24F20754D6A9503DAB15E45C2B9DF9	07B0C135650A59E95988A2285F85710770BEA6A2	554C87A795F29E80C2379342AEFF5A615017A7C4809DB9B069D3DE86CD4933DA
Chrome Cache Entry: 736	HTML document, ASCII text, with very long lines (1899)	8EC3E85FE2F0AB3FB4E4311B333B0C6D	4416B8C7C10FF5AF8F5203FCC79296D642DB49A4	B6BA71E8B59FE94F948EE16BDAD66DB15A4D866AE75341734ABB35825BA93299
Chrome Cache Entry: 737	HTML document, ASCII text, with very long lines (1899)	8EC3E85FE2F0AB3FB4E4311B333B0C6D	4416B8C7C10FF5AF8F5203FCC79296D642DB49A4	B6BA71E8B59FE94F948EE16BDAD66DB15A4D866AE75341734ABB35825BA93299
Chrome Cache Entry: 738	ASCII text, with very long lines (7069)	A33D6362201EB03B6CE4E66979C1D8B8	9BDDFD5992DFB984AEF10C7DDAFB3FD3029C371D	F1AB5D6C5B57FF96EEF1AA7846AB920DF5D18396197B33A60D86706AD2309E1E
Chrome Cache Entry: 739	SVG Scalable Vector Graphics image	C27EA21903DAC818E1C698443B027657	38FC86DF752451F779A2431DA02ED038512BA454	77878A80C7001B06827DB1AC232D9E64C6D3436BEED9161BE124672F3401ED5C
Chrome Cache Entry: 740	ASCII text, with very long lines (24799)	0F50337CD3A40E6C3C486617EC3174A2	A20C04BEDD330C7D39384FE32403AAC8CDAF00AC	DAAE3A13D2C7A6481D6BDB42018E15E1D5604E8109A126C774DC6B843AE8C696
Chrome Cache Entry: 741	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced	9246CCA8FC3C00F50035F28E9F6B7F7D	3AA538440F70873B574F40CD793060F53EC17A5D	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
Chrome Cache Entry: 742	ASCII text, with very long lines (6813)	9005644BA4A17A2543216BCFD02F8F2A	38C8EBA293CFA22B7D5A4CDACA442A003BABBFCD	A761481D78615B8DA4D3AEC3E5881807A5DA8E5E0FE73EFB5AD3483B9C508947
Chrome Cache Entry: 743	ASCII text, with very long lines (30298)	7723C8304AD0D5045FB07AEA9982CB0F	1A2239D36DA1E17FE90EF88B98F36A4197C5CD04	893FAABDC0135A020D0D1C8EABA914BAED862AA87E14E4A19F0153F8331EADEF
Chrome Cache Entry: 745	ASCII text, with very long lines (48338)	E6BB56338DC9753D86B53D8C4E355864	F970724388CDA390266D2A01C9CC33B490F40302	AD75E0FBEF0E5BD093BC95641AA3CB09E06CEFA1109C6154745ADC8DED132929
Chrome Cache Entry: 746	C source, ASCII text, with very long lines (11725)	33EC36BEC613FBE21B59CDEA512D1541	8309F856B1CFC712F0D3D08CAF24F8C5F61D8A26	15D4ED4D18F14AA9016B7CCC90724E7A4E81381E25CFB6B17AB4DAE03E1B944F
Chrome Cache Entry: 748	PNG image data, 90 x 89, 8-bit/color RGB, non-interlaced	1B68CCBCEBE3077C890C8ED4E5DD2801	235F32CDCB308DB7F0B85730F5F3FC7188416FAC	905D8B6A8DE4D909F75707A0967388CCAD682EDFB7410CA90D6052239F4C1AA2
Chrome Cache Entry: 749	ASCII text, with very long lines (4551), with no line terminators	D845C7CFDF504D17DD1A01BC3F58D0E9	4BF62628612111A63DED2B04639BCF918D0C4EB9	8FFBAC41E6195332D893B04AA93F305DDA63CC5317EE6D89E4D177CCCDE72240
Chrome Cache Entry: 750	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced	9246CCA8FC3C00F50035F28E9F6B7F7D	3AA538440F70873B574F40CD793060F53EC17A5D	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
Chrome Cache Entry: 751	JSON data	8D75B8E85D749610931E168F2EFCF555	11410945A27700DBE941C030189C637792AAC2CE	485A60AD5AF1CEFF60C50A9BFB08A03F0C42B984034A2255820356938B82B2A0
Chrome Cache Entry: 752	ASCII text, with very long lines (62513)	FC17146358B4AA72CAA75B5C329A0E8A	3978C04BFF06FAE093ED90A444DA65AC542BA7DF	968696D3703A5278F74BA9C2C3F167EACE54E6EF69B2C0BDF33A419C86B4E2B2
Chrome Cache Entry: 754	ASCII text, with very long lines (7247)	475648160D30510E4BFA80B7C7C00FE1	B2E0B2891C5ED7796A57251B54D5C22D2CC90217	D07E9951E586BF5D1A9C911888696156672D49FA0632A887B32E80E3A03D814F
Chrome Cache Entry: 755	ASCII text, with very long lines (63604)	ACDFECB80B06F30C59B48F9B2140E6F5	C46873F855BDABF9943DA278813B53B4DD6FB6D6	CA46523D06A57712685B5C6B01430B530FE76F8FD5803179FCAA3466770E93A0
Chrome Cache Entry: 756	ASCII text, with very long lines (25927)	64175E967183A021579C915B27D4D2C9	6AA7F26CCF7BBFDE0C5E43631FE96ADA10DC1746	9EDF7146890AB9BB003396AE88276DAE98379667164D606FF609D0908C946871
Chrome Cache Entry: 757	ASCII text, with very long lines (47531)	808A57CAE0B6FEE71F46EFDDED44B348	DD570A24C8BDA1B391AA1DDEA6004125818E579A	5B75AC6F98994352699841DFFA6E562725EBBD0005C539946AD3625EC550EB0F
Chrome Cache Entry: 758	Unicode text, UTF-8 text, with very long lines (36614)	F6D0FFC8AEA11264ECA06FA1ECE50E00	FFDE9A1749BCF0F690BEBEAA46217CF5623E45F4	79DEAC1DA4F0284F47531AF8AD9A2164FA9113FD9EACF3FC8C794E802845A029

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: chromecache_608.1.dr

Binary or memory string: const PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----

memstr_072cecc0-0

Source: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/	HTTP Parser: No favicon
Source: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49752 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/securedocument_bio-aquatic_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%2FKravis%20Center%20for%20the%20Performing%20Arts&ga=1 HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzk4MDUzMjk1N2IzY2RhOWY5Zjk2ZDJlNzEzNmRmZjliODZmNDJkOGMxNWE4MWQ0N2IyMGI2ZGY2MmNlZjk4ZTYsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jOTgwNTMyOTU3YjNjZGE5ZjlmOTZkMmU3MTM2ZGZmOWI4NmY0MmQ4YzE1YTgxZDQ3YjIwYjZkZjYyY2VmOThlNiwxMzM3NDcxMDQwMzAwMDAwMDAsMCwxMzM3NDc5NjUwMzkwOTkxMDEsMC4wLjAuMCwyNTgsNjQ5OWU2MGYtYzU1MC00NzY1LWE0OGYtZWE2MmZlNzNiNjc3LCwsZWFjNDVlYTEtYTBlOS02MDAwLWNhMzAtZTdlNWMyNWFjYjZlLGVhYzQ1ZWExLWEwZTktNjAwMC1jYTMwLWU3ZTVjMjVhY2I2ZSx3UjUzVzFlZ2FVdWNhV3FPeHUzeTZ3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTM0OTcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLEZyMnBFRUxtcWxMWHVKNm9RYmZZWFZRYXlXaHFPQ2xQY2VKdXBOUnVkK1c3ZlUvN1IyYW9vY2UyOGZjcXo5MG9XREZUU3pvckxtU0FHNFdsZ0trWEZrMzRrVksxcWFnWU53Y0ExRGNpU0dBZk4zVUc5U2JuU0Z2N3VsSWoyYmlNbVpkTGErTm1tMkZlZ2ZiQTYvenV1cEpIeWhRWHNUaWdkMTZBY2dRNDBJdmsxS3ZRTW0vRy82cThXSXAxcmVLZXZ4SmgzcENSdTlCeFoxUm1yUmlBSzlXZENQSGprSGtVTDUzaExPcGh0Y2p4Y3ZNQnBsNUF0NythK2JXZXRaN0hWcnV2Zm1mZ0tFcmdrSnBPakd2T3dmWm9EOEF1ZDgwcEZtVUJSMVFJTStvQm5rMVVHOTc5Yi9IdHgzVHR5aEZJOEhuWHh5dmpUU3psSVFIUHJnZTR3dz09PC9TUD4=
Source: global traffic	HTTP traffic detected: GET /_layouts/15/spwebworkerproxy.ashx HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /files/odsp-web-prod_2024-10-11.005/odblightspeedwebpack/plt.listviewdataprefetch.js HTTP/1.1Host: res-2.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bioaquatictesting-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bioaquatictesting-my.sharepoint.com/personal/securedocument_bio-aquatic_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%2FKravis%20Center%20for%20the%20Performing%20Arts&ga=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/odbfavicon.ico?rev=47 HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzk4MDUzMjk1N2IzY2RhOWY5Zjk2ZDJlNzEzNmRmZjliODZmNDJkOGMxNWE4MWQ0N2IyMGI2ZGY2MmNlZjk4ZTYsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jOTgwNTMyOTU3YjNjZGE5ZjlmOTZkMmU3MTM2ZGZmOWI4NmY0MmQ4YzE1YTgxZDQ3YjIwYjZkZjYyY2VmOThlNiwxMzM3NDcxMDQwMzAwMDAwMDAsMCwxMzM3NDc5NjUwMzkwOTkxMDEsMC4wLjAuMCwyNTgsNjQ5OWU2MGYtYzU1MC00NzY1LWE0OGYtZWE2MmZlNzNiNjc3LCwsZWFjNDVlYTEtYTBlOS02MDAwLWNhMzAtZTdlNWMyNWFjYjZlLGVhYzQ1ZWExLWEwZTktNjAwMC1jYTMwLWU3ZTVjMjVhY2I2ZSx3UjUzVzFlZ2FVdWNhV3FPeHUzeTZ3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTM0OTcsdVhlaFFKUGxlVmpOQ2Jha1VoR0Q2SXlGUVFrLEZyMnBFRUxtcWxMWHVKNm9RYmZZWFZRYXlXaHFPQ2xQY2VKdXBOUnVkK1c3ZlUvN1IyYW9vY2UyOGZjcXo5MG9XREZUU3pvckxtU0FHNFdsZ0trWEZrMzRrVksxcWFnWU53Y0ExRGNpU0dBZk4zVUc5U2JuU0Z2N3VsSWoyYmlNbVpkTGErTm1tMkZlZ2ZiQTYvenV1cEpIeWhRWHNUaWdkMTZBY2dRNDBJdmsxS3ZRTW0vRy82cThXSXAxcmVLZXZ4SmgzcENSdTlCeFoxUm1yUmlBSzlXZENQSGprSGtVTDUzaExPcGh0Y2p4Y3ZNQnBsNUF0NythK2JXZXRaN0hWcnV2Zm1mZ0tFcmdrSnBPakd2T3dmWm9EOEF1ZDgwcEZtVUJSMVFJTStvQm5rMVVHOTc5Yi9IdHgzVHR5aEZJOEhuWHh5dmpUU3psSVFIUHJnZTR3dz09PC9TUD4=
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=KbLBZaSFx4GZ5RC&MD=zaWpSOkc HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /personal/securedocument_bio-aquatic_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%2FKravis%20Center%20for%20the%20Performing%20Arts&ga=1 HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=KbLBZaSFx4GZ5RC&MD=zaWpSOkc HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /personal/securedocument_bio-aquatic_com/_api/v2.1/graphql HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /personal/securedocument_bio-aquatic_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%27&TryNewExperienceSingle=TRUE HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /personal/securedocument_bio-aquatic_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%27&RootFolder=%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%2FKravis%20Center%20for%20the%20Performing%20Arts&TryNewExperienceSingle=TRUE HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /personal/securedocument_bio-aquatic_com/_api/web/GetListUsingPath(DecodedUrl=@a1)/RenderListDataAsStream?@a1=%27%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%27&TryNewExperienceSingle=TRUE HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=true&siteConfigRace=true HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://bioaquatictesting-my.sharepoint.com/personal/securedocument_bio-aquatic_com/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Fsecuredocument%5Fbio%2Daquatic%5Fcom%2FDocuments%2FKravis%20Center%20for%20the%20Performing%20Arts&ga=1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /_vti_bin/afdcache.ashx/_userprofile/userphoto.jpg?_oat_=1730271948_ef6d5f77f53ee0995ffb822849d4e41231eb693fcd5bcd06f8a01faee3198610&P1=1730239537&P2=-149452251&P3=1&P4=s5Rua3zKoQMriF9ENufenKumHtecir2zTpedCPgvmWPk30BGUoP0SJxk0WSaJE0GbfsC90vc72K8T%2BDYSMDv7uyoKxYz4XhUcovwPMNY6BkZZu4A6kywgdA57b0l7igEozqfXilLNA%2F%2B6vwa5vxHZr9TEjoe%2BUlnhoSogvZMROmrvrnYqAmTK06alGZbV5TL4lG38j01mg21Hc18RaOqe%2BaR8LW5rURe8iau9EMm27t0gV2UHl2ph%2B3TUSRwu4oIFATq0ewr6Cj2Gg9WpNGEkZQbedOaAYGuV%2Fp0uRZ4Dybrv%2BuazooVGFx9NHUDklx81uLimKm6V5BL3F4ikOlDYw%3D%3D&size=M&accountname=securedocument%40bio-aquatic.com HTTP/1.1Host: bioaquatictesting.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ecf9f5d4.5488c3d0d3cad43764af2694.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_vti_bin/afdcache.ashx/_userprofile/userphoto.jpg?_oat_=1730271948_ef6d5f77f53ee0995ffb822849d4e41231eb693fcd5bcd06f8a01faee3198610&P1=1730239537&P2=-149452251&P3=1&P4=s5Rua3zKoQMriF9ENufenKumHtecir2zTpedCPgvmWPk30BGUoP0SJxk0WSaJE0GbfsC90vc72K8T%2BDYSMDv7uyoKxYz4XhUcovwPMNY6BkZZu4A6kywgdA57b0l7igEozqfXilLNA%2F%2B6vwa5vxHZr9TEjoe%2BUlnhoSogvZMROmrvrnYqAmTK06alGZbV5TL4lG38j01mg21Hc18RaOqe%2BaR8LW5rURe8iau9EMm27t0gV2UHl2ph%2B3TUSRwu4oIFATq0ewr6Cj2Gg9WpNGEkZQbedOaAYGuV%2Fp0uRZ4Dybrv%2BuazooVGFx9NHUDklx81uLimKm6V5BL3F4ikOlDYw%3D%3D&size=M&accountname=securedocument%40bio-aquatic.com HTTP/1.1Host: bioaquatictesting.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22STS%22]&languages=%5B%5D HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=true&siteConfigRace=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /_layouts/15/SPComponentRegistry.ashx?projects=[%22spfx%22]&languages=%5B%5D HTTP/1.1Host: bioaquatictesting-my.sharepoint.comConnection: keep-aliveAccept: application/jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/_layouts/15/odspserviceworkerproxy.aspx?swManifestName=spserviceworker&debug=false&bypass=false&navigationPreloadHeaderValue=%7B%22supportsFeatures%22%3A%5B1855%2C61313%5D%7D&dataHost=Nucleus&applications=%5B%7B%22id%22%3A%22STS%22%2C%22swPrefetchManifestName%22%3A%22stsserviceworkerprefetch%22%7D%2C%7B%22id%22%3A%22SPHome%22%7D%2C%7B%22id%22%3A%22SitePages%22%7D%2C%7B%22id%22%3A%22Embed%22%7D%2C%7B%22id%22%3A%22CreateGroup%22%7D%2C%7B%22id%22%3A%22SingleWebPart%22%7D%2C%7B%22id%22%3A%22VivaHome%22%7D%2C%7B%22id%22%3A%22BrokerLogon%22%7D%2C%7B%22id%22%3A%22Clipchamp%22%7D%2C%7B%22id%22%3A%22MeeBridge%22%7D%2C%7B%22id%22%3A%22SPStart%22%7D%2C%7B%22id%22%3A%22Agreements%22%7D%5D&list=v2&prefetchListData=true&defaultBrotli=true&authenticateFast=true&inlineAuth=v2&wwData=true&enableTheming=true&prefetchFilebrowserPageInTeams=true&FUIV9Flights=[-83099905,3]&spStartApplicationWebBundle=true&enableIntegrities=true&streamViewServerLoad=true&streamInlineScript=true&siteConfigRace=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; FeatureOverrides_experiments=[]
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/avtok/0x4AAAAAAAyqhdsS748m01Iy/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f2bbd6738e15/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8da62f46ce314696&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/avtok/0x4AAAAAAAyqhdsS748m01Iy/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/avtok/0x4AAAAAAAyqhdsS748m01Iy/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ecf9f5d4.5488c3d0d3cad43764af2694.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8da62f46ce314696&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ecf9f5d4.5488c3d0d3cad43764af2694.workers.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1998701899:1730234443:Lwng_uon9EBlqVf_OwLTCeaoBddYvZZMnG7SnJ47QYs/8da62f46ce314696/EO0cJRx97HDDZuUel89VEbDMwCOeAGslO55MJMWuQrA-1730236565-1.1.1.1-tRUrelRR2SbLwLh6vk60CiYzh9YugjlJrNK38KKD5xtqpaUyHbsojPyB1iL63eLU HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8da62f46ce314696/1730236567653/AQ_jg06ejatCKms HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/avtok/0x4AAAAAAAyqhdsS748m01Iy/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8da62f46ce314696/1730236567653/8ecd4f25404bcf125d69fcf8a87fc286caf76e5a5dab48c4b3939caab3d2b433/oWTYv0K7VjGtnqP HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/avtok/0x4AAAAAAAyqhdsS748m01Iy/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8da62f46ce314696/1730236567653/AQ_jg06ejatCKms HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1998701899:1730234443:Lwng_uon9EBlqVf_OwLTCeaoBddYvZZMnG7SnJ47QYs/8da62f46ce314696/EO0cJRx97HDDZuUel89VEbDMwCOeAGslO55MJMWuQrA-1730236565-1.1.1.1-tRUrelRR2SbLwLh6vk60CiYzh9YugjlJrNK38KKD5xtqpaUyHbsojPyB1iL63eLU HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1998701899:1730234443:Lwng_uon9EBlqVf_OwLTCeaoBddYvZZMnG7SnJ47QYs/8da62f46ce314696/EO0cJRx97HDDZuUel89VEbDMwCOeAGslO55MJMWuQrA-1730236565-1.1.1.1-tRUrelRR2SbLwLh6vk60CiYzh9YugjlJrNK38KKD5xtqpaUyHbsojPyB1iL63eLU HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?udjgtgaa HTTP/1.1Host: mercyassurance.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonqrc-auth: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3Byb2ZpbGVmb3Jkb2Nkb2Muc2l0ZS8iLCJkb21haW4iOiJwcm9maWxlZm9yZG9jZG9jLnNpdGUiLCJrZXkiOiJBYU9ETkRCVEFkNlUiLCJxcmMiOm51bGwsImlhdCI6MTczMDIzNjU3NywiZXhwIjoxNzMwMjM2Njk3fQ.vLn_DbjbAUhewfzbA__di56NFn2NPKqdCTyfc9zFG-8 HTTP/1.1Host: profilefordocdoc.siteConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?udjgtgaa HTTP/1.1Host: mercyassurance.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: profilefordocdoc.siteConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=AaODNDBTAd6U; qPdM.sig=IiJPDADbxZ7oBnXlcEbI6rO1GD8
Source: global traffic	HTTP traffic detected: GET /?udjgtgaa=9a39987b0b60fec5006df30a8df8a3c8aa154aaca41dbce7edab646c5141f50fab7c3c72e42c2dc3994509c6bb7161d84e8ed17dca7526c9bfd6cd2b5d243e03 HTTP/1.1Host: mercyassurance.siteConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=o2hsc65PtjlV; qPdM.sig=e2dgsoICds21wEzeCb9lf2j5W08
Source: global traffic	HTTP traffic detected: GET /mail/ HTTP/1.1Host: profilefordocdoc.siteConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=AaODNDBTAd6U; qPdM.sig=IiJPDADbxZ7oBnXlcEbI6rO1GD8
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?becfa8bc415428344db40631b306b365 HTTP/1.1Host: outlook.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bioaquatictesting-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?b78390c9e3d8e295b99594d42d0e8b5c HTTP/1.1Host: outlook.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bioaquatictesting-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?becfa8bc415428344db40631b306b365 HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?b78390c9e3d8e295b99594d42d0e8b5c HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?a0612edc05412c5bcc3585a5aa793a37 HTTP/1.1Host: tr-ooc-acdc.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bioaquatictesting-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?669b15a5e7af14e37d390cbe13e8e087 HTTP/1.1Host: tr-ooc-acdc.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://bioaquatictesting-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bioaquatictesting-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?a0612edc05412c5bcc3585a5aa793a37 HTTP/1.1Host: tr-ooc-acdc.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?669b15a5e7af14e37d390cbe13e8e087 HTTP/1.1Host: tr-ooc-acdc.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: bioaquatictesting-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: bioaquatictesting.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: ecf9f5d4.5488c3d0d3cad43764af2694.workers.dev
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: spo.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: r4.res.office365.com
Source: global traffic	DNS traffic detected: DNS query: config.fp.measure.office.com
Source: global traffic	DNS traffic detected: DNS query: mercyassurance.site
Source: global traffic	DNS traffic detected: DNS query: profilefordocdoc.site
Source: global traffic	DNS traffic detected: DNS query: c0149d99fde159617d8e36f080b49aff.fp.measure.office.com
Source: global traffic	DNS traffic detected: DNS query: outlook.office.com
Source: global traffic	DNS traffic detected: DNS query: tr-ooc-acdc.office.com
Source: global traffic	DNS traffic detected: DNS query: upload.fp.measure.office.com

Source: unknown

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 21:16:08 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: rthVfB02fpQZMKQIovQhSmu06EXyzviNfXU=$InfcJVuQinjidj7yServer: cloudflareCF-RAY: 8da62f5b3a462857-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 21:16:12 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: 6std16WfmnB3BKu6x5T7OMjF1UZ8zZUGhTg=$wu1qZpVc1/yrPdvKcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8da62f728de46c68-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 29 Oct 2024 21:16:16 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: UPAGa/wn7F3xYtQPa+BsLlq4+uNqcMj/O2g=$pqGx2JSeMKgbAkpLServer: cloudflareCF-RAY: 8da62f8ae81eeb16-DFWalt-svc: h3=":443"; ma=86400

Source: chromecache_745.1.dr, chromecache_617.1.dr, chromecache_513.1.dr, chromecache_509.1.dr, chromecache_755.1.dr, chromecache_709.1.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_712.1.dr, chromecache_685.1.dr, chromecache_475.1.dr	String found in binary or memory: http://www.contoso.com
Source: chromecache_525.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_516.1.dr, chromecache_716.1.dr, chromecache_541.1.dr	String found in binary or memory: https://1drv.com/
Source: chromecache_516.1.dr, chromecache_716.1.dr, chromecache_541.1.dr	String found in binary or memory: https://centralus1-mediad.svc.ms
Source: chromecache_578.1.dr, chromecache_608.1.dr, chromecache_737.1.dr, chromecache_736.1.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_516.1.dr, chromecache_541.1.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/web/policies
Source: chromecache_516.1.dr, chromecache_716.1.dr, chromecache_541.1.dr	String found in binary or memory: https://livefilestore.com/
Source: chromecache_532.1.dr, chromecache_640.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_516.1.dr, chromecache_515.1.dr, chromecache_716.1.dr, chromecache_541.1.dr, chromecache_544.1.dr	String found in binary or memory: https://media.cloudapp.net
Source: chromecache_608.1.dr, chromecache_737.1.dr, chromecache_736.1.dr	String found in binary or memory: https://mercyassurance.site/?udjgtgaa
Source: chromecache_532.1.dr, chromecache_640.1.dr	String found in binary or memory: https://microsoft.spfx3rdparty.com
Source: chromecache_516.1.dr, chromecache_515.1.dr, chromecache_716.1.dr, chromecache_541.1.dr, chromecache_544.1.dr	String found in binary or memory: https://northcentralus1-medias.svc.ms
Source: chromecache_668.1.dr, chromecache_746.1.dr, chromecache_716.1.dr, chromecache_673.1.dr	String found in binary or memory: https://onedrive.cloud.microsoft
Source: chromecache_668.1.dr, chromecache_746.1.dr, chromecache_716.1.dr, chromecache_673.1.dr	String found in binary or memory: https://onedrive.dev.cloud.microsoft
Source: chromecache_583.1.dr, chromecache_529.1.dr	String found in binary or memory: https://onedrive.live.com/?gologin=1
Source: chromecache_532.1.dr, chromecache_640.1.dr	String found in binary or memory: https://onedrive.live.com/sa
Source: chromecache_516.1.dr, chromecache_716.1.dr, chromecache_541.1.dr	String found in binary or memory: https://portal.office.com/
Source: chromecache_602.1.dr	String found in binary or memory: https://profilefordocdoc.site/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3By
Source: chromecache_708.1.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_516.1.dr, chromecache_541.1.dr	String found in binary or memory: https://res-1-sdf.cdn.office.net
Source: chromecache_583.1.dr, chromecache_516.1.dr, chromecache_541.1.dr	String found in binary or memory: https://res-1.cdn.office.net
Source: chromecache_652.1.dr, chromecache_717.1.dr, chromecache_507.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/fabric-cdn-prod_20230815.002/assets
Source: chromecache_583.1.dr, chromecache_661.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.005/
Source: chromecache_661.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.005/stsserviceworkerprefetch/stsservicew
Source: chromecache_598.1.dr, chromecache_484.1.dr, chromecache_661.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-18.010/
Source: chromecache_661.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-18.010/spserviceworker.js
Source: chromecache_598.1.dr, chromecache_484.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-18.010/spwebworker.js
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp-media-3b870ca1
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.1ds/odsp.1ds.lib-b7da68fc
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.aria/odsp.aria.lib-ab227069
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.fluentui.core/fui.core-97518b2a
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.fluentui.utilities/fui.util-93de749b
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.knockout/odsp.knockout.lib-447adea9
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.react/odsp.react.lib-9ea4d016
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.tslib/tslib-6a7224b3
Source: chromecache_583.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/sp-client/odsp.utilities/odsp.util-644642c2
Source: chromecache_583.1.dr	String found in binary or memory: https://res-2.cdn.office.net/files/odsp-web-prod_2024-10-11.005/
Source: chromecache_583.1.dr	String found in binary or memory: https://shell.cdn.office.net
Source: chromecache_583.1.dr, chromecache_661.1.dr	String found in binary or memory: https://shell.cdn.office.net/api/ShellBootstrapper/business/OneShell
Source: chromecache_516.1.dr, chromecache_541.1.dr	String found in binary or memory: https://shellppe.msocdn.com
Source: chromecache_516.1.dr, chromecache_541.1.dr	String found in binary or memory: https://shellprod.msocdn.com
Source: chromecache_583.1.dr	String found in binary or memory: https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/leelawadeeui-thai/leelawadeeui-bold.w
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/leelawadeeui-thai/leelawadeeui-regula
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/leelawadeeui-thai/leelawadeeui-semili
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-bold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-bold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-light.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-light.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-regular.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-regular.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-semibold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-semibold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-arabic/segoeui-semilight.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-bold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-bold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-light.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-light.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-regular.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-semibold.wof
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-cyrillic/segoeui-semilight.wo
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-bold.wof
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-light.wo
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-regular.
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-semibold
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-easteuropean/segoeui-semiligh
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-bold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-bold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-light.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-light.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-regular.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-regular.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-semibold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-semibold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-semilight.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-greek/segoeui-semilight.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-bold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-bold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-light.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-light.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-regular.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-regular.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-semibold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-semibold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-hebrew/segoeui-semilight.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-bold.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-bold.woff2
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-light.woff
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-regular.wo
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-semibold.w
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-vietnamese/segoeui-semilight.
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-bold.wof
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-light.wo
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-regular.
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semibold
Source: chromecache_628.1.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/assets/fonts/segoeui-westeuropean/segoeui-semiligh
Source: chromecache_516.1.dr, chromecache_668.1.dr, chromecache_716.1.dr, chromecache_541.1.dr	String found in binary or memory: https://substrate.office.com
Source: chromecache_721.1.dr, chromecache_740.1.dr	String found in binary or memory: https://support.office.com/en-us/article/Manage-lists-and-libraries-with-many-items-b8588dae-9387-48
Source: chromecache_529.1.dr	String found in binary or memory: https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2F$
Source: chromecache_583.1.dr	String found in binary or memory: https://www.office.com/login?prompt=select_account&ru=%2Flaunch%2Fonedrive
Source: chromecache_529.1.dr	String found in binary or memory: https://www.office.com/login?ru=%2Flaunch%2F$
Source: chromecache_583.1.dr	String found in binary or memory: https://www.office.com/login?ru=%2Flaunch%2Fonedrive

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49752 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@22/484@60/14

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1720,i,11745549811523308955,2484393396440175979,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 --field-trial-handle=1720,i,11745549811523308955,2484393396440175979,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_582.1.dr, chromecache_481.1.dr, chromecache_574.1.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_582.1.dr, chromecache_481.1.dr, chromecache_574.1.dr	Binary or memory string: ",DisconnectVirtualMachine:"

ID:	1544954
Product:	CloudBasic
Start time:	22:14:32
Start date:	29.10.2024
Cookbook:	defaultwindowsinteractivecookbook.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Windows Analysis Report
https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Cryptography

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT

Overview

General Information

Detection

Signatures

Classification

Signatures

AV Detection

Cryptography

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs

Windows Analysis Report
https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT