Edit tour

Windows Analysis Report
https://control.screenbridge.es

Overview

General Information

Sample URL:	https://control.screenbridge.es
Analysis ID:	1598882
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4124 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1968,i,3974783304918481681,16614246427761811434,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://control.screenbridge.es" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveContent-Length: 60sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: application/jsonX-Anti-Forgery-Token: fONzzdMHPutgdvQJqkeaJiEfL4jxUrWuSM6lsyaEkYABAACAn87TS74tQg==sec-ch-ua-mobile: ?0X-Unauthorized-Status-Code: 403User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://control.screenbridge.esSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://control.screenbridge.es/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_55.2.dr, chromecache_65.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/HTML/Element
Source: chromecache_55.2.dr, chromecache_65.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/screenconnect/id423995707
Source: chromecache_55.2.dr, chromecache_65.2.dr	String found in binary or memory: https://stackoverflow.com/questions/60886186/intl-datetimeformat-shows-time-being-2459

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867

Source: classification engine

Classification label: clean0.win@16/30@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1968,i,3974783304918481681,16614246427761811434,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://control.screenbridge.es"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=1968,i,3974783304918481681,16614246427761811434,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://control.screenbridge.es	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://control.screenbridge.es/Images/ActionCenter.svg	0%	Avira URL Cloud	safe
https://control.screenbridge.es/Script.ashx?__Cache=64accfbc-f9cc-40d0-8505-1334579945f1	0%	Avira URL Cloud	safe
https://control.screenbridge.es/Services/PageService.ashx/GetLiveData	0%	Avira URL Cloud	safe
https://control.screenbridge.es/Images/Applications.svg	0%	Avira URL Cloud	safe
https://control.screenbridge.es/App_Themes/DarkTeal/Default.css?__Cache=5223953d-a3cf-490c-a63d-57edd0173ba6	0%	Avira URL Cloud	safe
https://control.screenbridge.es/Images/Extras.svg	0%	Avira URL Cloud	safe
https://control.screenbridge.es/App_Themes/DarkTeal/Default.css?r=Page.Background&__Cache=57459	0%	Avira URL Cloud	safe
https://control.screenbridge.es/Scripts/SC.main.ts?ScriptImportType=Classic&__Cache=032eafde-1178-487f-bebd-209f0896ce37	0%	Avira URL Cloud	safe
https://control.screenbridge.es/FavIcon.axd?__Cache=7437b908-efcc-4bb8-9ee3-9889a18f79e3	0%	Avira URL Cloud	safe
https://control.screenbridge.es/Images/ActivityIndicator.gif	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.google.com	142.250.184.228	true	false		high
control.screenbridge.es	66.225.254.206	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://control.screenbridge.es/Script.ashx?__Cache=64accfbc-f9cc-40d0-8505-1334579945f1	false	Avira URL Cloud: safe	unknown
https://control.screenbridge.es/	false		unknown
https://control.screenbridge.es/Scripts/SC.main.ts?ScriptImportType=Classic&__Cache=032eafde-1178-487f-bebd-209f0896ce37	false	Avira URL Cloud: safe	unknown
https://control.screenbridge.es/Services/PageService.ashx/GetLiveData	false	Avira URL Cloud: safe	unknown
https://control.screenbridge.es/Images/Extras.svg	false	Avira URL Cloud: safe	unknown
https://control.screenbridge.es/App_Themes/DarkTeal/Default.css?r=Page.Background&__Cache=57459	false	Avira URL Cloud: safe	unknown
https://control.screenbridge.es/Images/ActionCenter.svg	false	Avira URL Cloud: safe	unknown
https://control.screenbridge.es/App_Themes/DarkTeal/Default.css?__Cache=5223953d-a3cf-490c-a63d-57edd0173ba6	false	Avira URL Cloud: safe	unknown
https://control.screenbridge.es/Images/Applications.svg	false	Avira URL Cloud: safe	unknown
https://control.screenbridge.es/FavIcon.axd?__Cache=7437b908-efcc-4bb8-9ee3-9889a18f79e3	false	Avira URL Cloud: safe	unknown
https://control.screenbridge.es/Images/ActivityIndicator.gif	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developer.mozilla.org/en-US/docs/Web/HTML/Element	chromecache_55.2.dr, chromecache_65.2.dr	false		high
https://stackoverflow.com/questions/60886186/intl-datetimeformat-shows-time-being-2459	chromecache_55.2.dr, chromecache_65.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
66.225.254.206	control.screenbridge.es	United States	33633	USG-CORPORATIONUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1598882
Start date and time:	2025-01-24 21:06:00 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://control.screenbridge.es
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/30@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.185.142, 108.177.15.84, 142.250.184.206, 142.250.185.78, 142.250.184.234, 142.250.185.74, 142.250.185.234, 172.217.16.138, 216.58.206.74, 142.250.181.234, 142.250.186.42, 216.58.206.42, 142.250.185.106, 142.250.184.202, 142.250.185.202, 172.217.16.202, 172.217.23.106, 142.250.186.106, 172.217.18.10, 142.250.186.170, 2.22.50.136, 2.23.77.188, 216.58.212.174, 142.250.181.238, 172.217.18.14, 142.250.186.110, 142.250.186.67, 142.250.186.142, 184.28.90.27, 172.202.163.200, 13.107.246.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://control.screenbridge.es

Input	Output
URL: https://control.screenbridge.es Model: Joe Sandbox AI	```json{ "brand": "ScreenBridge", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 2, "spoofed": 1, "reasoning": "The URL 'https://control.screenbridge.es' does not appear to be a typosquatting attempt. The domain 'screenbridge.es' does not closely resemble any well-known brand or legitimate URL. There are no obvious character substitutions or visual similarities to a known brand. The use of the subdomain 'control' suggests a specific function or service related to 'screenbridge', which could be a legitimate business or service name. The '.es' domain extension indicates a Spanish domain, which does not inherently suggest typosquatting. Overall, the URL does not exhibit characteristics typical of a typosquatting attempt."}
URL: https://control.screenbridge.es
URL: https://screenbridge.es Model: Joe Sandbox AI	```json{ "brand": "ScreenBridge", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 2, "spoofed": 1, "reasoning": "The URL 'screenbridge.es' does not appear to be a typosquatting attempt. There are no obvious character substitutions or visual similarities to a well-known brand. The domain 'screenbridge' does not closely resemble any globally recognized brand name. The '.es' domain extension is the country code top-level domain (ccTLD) for Spain, which does not inherently suggest any deceptive intent. Without a known brand association, the likelihood of this being a typosquatting attempt is low. The URL could represent a legitimate business or service named 'ScreenBridge' operating in Spain."}
URL: https://screenbridge.es
URL: https://control.screenbridge.es/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate extension for a web application, with functionality related to configuration management and user authentication. While it includes some dynamic behavior, such as loading a CSS file and handling command events, the overall intent seems to be benign and focused on administrative functionality. The script does not exhibit any clear signs of malicious activity, such as data exfiltration or obfuscated code. Therefore, the risk score is assessed as low, with a score of 3." }
SC.extension.addInitializeProc('fa369545-ba27-4670-b053-a9f65f3269b0', function (extensionContext) { if (SC.context.pageType == 'AdministrationPage' && SC.context.isUserAuthenticated) SC.service.GetThemeInfo(function (themeInfo) { SC.util.includeStyleSheet(extensionContext.baseUrl + 'css/Style.css'); }); SC.event.addGlobalHandler(SC.event.ExecuteCommand, function (eventArgs) { switch (eventArgs.commandName) { case 'WebConfigSave': SC.dialog.showModalButtonDialog( 'Prompt', SC.res['AdvancedConfig.ApplyChanges'], 'OK', 'Default', function (container) { SC.ui.setContents(container, [ eventArgs.commandArgument === 'WebConfigRestore' ? $p(SC.res['AdvancedConfig.RestoreDefaults.WebConfigWarning']) : $p(SC.res['AdvancedConfig.RestartInstanceWarning']) ]); }, function () { var appSettings = JSON.parse(sessionStorage.getItem('WebConfigAppSettings')); var pageSettings = JSON.parse(JSON.stringify(appSettings.location)); delete appSettings.location; SC.service.WriteChangesToWebConfig(appSettings, pageSettings, function (result) { if (result === 'OK') { sessionStorage.removeItem('WebConfigAppSettings'); SC.dialog.showModalActivityAndReload('Save', true, window.location.href.split('#')[0]); } else { SC.dialog.showModalMessageBox(SC.res['AdvancedConfig.SaveError.Title'], SC.res['AdvancedConfig.SaveError.WebConfigDescription'] + ' ' + result); } }); } ); break; case 'AppConfigSave': SC.dialog.showModalButtonDialog( 'Prompt', SC.res['AdvancedConfig.ApplyChanges'], 'OK', 'Default', function (container) { SC.ui.setContents(container, [ eventArgs.commandArgument === 'AppConfigRestore' ? $p(SC.res['AdvancedConfig.RestoreDefaults.AppConfigWarning']) : $p(SC.res['AdvancedConfig.ReinstallWarning']) ]); }, function () { var applicationSettings = JSON.parse(sessionStorage.getItem('AppConfigAppSettings')); SC.service.WriteChangesToAppConfigNew(applicationSettings, AppConfigDefaults, function (result) { if (result === 'OK') { sessionStorage.removeItem('AppConfigAppSettings'); window.location.reload(); } else { SC.dialog.showModalMessageBox(SC.res['AdvancedConfig.SaveError.Title'], SC.res['AdvancedConfig.SaveError.AppConfigDescription'] + ' ' + result); } }); } ); break; } }); });
URL: https://control.screenbridge.es/... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet appears to be a part of a web application that handles session management and participant joining functionality. While it does not exhibit any high-risk indicators, such as dynamic code execution or data exfiltration, it does have some moderate-risk behaviors, including external data transmission and aggressive DOM manipulation. Additionally, the use of legacy APIs like `XDomainRequest` and the presence of multiple fallback domains contribute to the overall risk score. However, the script's intent seems to be legitimate, and the behaviors are consistent with typical session management and participant joining functionality. Therefore, the overall risk score is assessed as medium (4)." }
SC.event.addGlobalHandler(SC.event.ExecuteCommand, function (eventArgs) { var session = null; var hostAccessToken = null; switch (eventArgs.commandName) { case 'JoinBySessionID': session = window.getSessionInfo().Sessions.filter(function (s) { return s.SessionID == eventArgs.commandArgument; })[0]; break; case 'JoinByTag': var taggedSessionInfo = window.getTaggedSessionInfo(eventArgs.commandArgument); hostAccessToken = taggedSessionInfo.HostAccessToken; session = window.getSessionInfo().Sessions.filter(function (s) { return s.SessionID == taggedSessionInfo.SessionID \|\| (taggedSessionInfo.Code && s.Code.toLowerCase() == taggedSessionInfo.Code.toLowerCase()); })[0]; break; } // older IE only allows launching urls on actual clicks and this could be sent by a keystroke if (session && (SC.command.doesClickDispatch(eventArgs.commandElement) \|\| !SC.util.isCapable(SC.util.Caps.InternetExplorer, null, { major: 11 }))) { SC.launch.startJoinSession( { session: session, hostAccessToken: hostAccessToken, processType: hostAccessToken ? SC.types.ProcessType.Host : SC.types.ProcessType.Guest }, function (joinInfo, _, onSuccess, onFailure) { onSuccess( SC.util.getClientLaunchParameters( joinInfo.session.SessionID, joinInfo.session.SessionType, joinInfo.session.Name, joinInfo.fieldMap.participantName.value, null, joinInfo.hostAccessToken, joinInfo.processType ) ); } ); } }); SC.event.addGlobalHandler(SC.event.QueryJoinInfo, function (eventArgs) { if (eventArgs.session) { eventArgs.shouldShowPrompt = SC.util.getSessionTypeBooleanResource('JoinPanel.{0}PromptVisible', eventArgs.session.SessionType); eventArgs.promptText = SC.util.getSessionTypeResource('JoinPanel.{0}PromptMessage', eventArgs.session.SessionType); eventArgs.buttonText = SC.util.getSessionTypeResource('JoinPanel.{0}PromptButtonText', eventArgs.session.SessionType); eventArgs.fieldMap.participantName = { labelText: SC.util.getSessionTypeResource('JoinPanel.{0}ParticipantNameLabelText', eventArgs.session.SessionType), value: '', visible: SC.util.getSessionTypeBooleanResource('JoinPanel.{0}PromptParticipantNameVisible', eventArgs.session.SessionType), }; } }); SC.event.addGlobalHandler(SC.event.QueryParticipantJoinedCount, function (eventArgs) { var sessionInfo = window.getSessionInfo(); var session = sessionInfo.Sessions.find(function (s) { return s.SessionID === eventArgs.clientLaunchParameters.s; }); if (session !== undefined) eventArgs.participantJoinedCount = session.ActiveConnections.filter(function (ac) { if (eventArgs.clientLaunchParameters.n) return ac.ProcessType == SC.types.ProcessType.Host; return ac.ProcessType == SC.types.ProcessType.Guest && ac.ParticipantName == eventArgs.clientLaunchParameters.r; }).length; }); SC.event.addGlobalHandler(SC.event.QueryPanels, function (eventArgs) { switch (eventArgs.area) { case 'GuestActionPanel': eventArgs.panelDefinitions.push({ initProc: function (container) { SC.ui.setContents(container, $div({ className: 'Loading' })); }, isVisibleProc: function (pass, previousPassVisibleCount, sessionInfo) { return pass == 1 && sessionInfo == null; } }); eventArgs.panelDefinitions.push({ initProc: function (container) { SC.ui.setContents(container, [ $a({ _commandName: 'JoinByTag', _commandArgument: 'DefaultSession', className: 'GoLink Large', _attributeMap: { 'aria-label': SC.res['GuestActionPanel.ButtonDescription'] } }), $h2({ _htmlResource: 'GuestActionPanel.InvitationSession.Heading' }), $p({ _htmlResource: 'GuestActionPanel.InvitationSession.Message' }), ]); }, isVisibleProc: function (pass, previousPassVisibleCount, sessionInfo) { return pass == 3 && previ
URL: https://control.screenbridge.es/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate part of a web application, with no clear indicators of malicious behavior. It primarily handles the rendering and behavior of various UI elements and panels, such as the Action Center, Extras, and User Popout. The code does not contain any high-risk indicators like dynamic code execution, data exfiltration, or obfuscated code. While it uses some legacy APIs like `XDomainRequest`, these are not inherently malicious and are likely used for compatibility reasons. Overall, the script seems to be focused on providing a functional user interface and does not demonstrate any suspicious or harmful activities." }
SC.event.addGlobalHandler(SC.event.QueryCommandButtons, function (eventArgs) { switch (eventArgs.area) { case 'TrayIconPanel': eventArgs.buttonDefinitions.push( { commandName: 'ActionCenter', imageUrl: 'Images/ActionCenter.svg' }, { commandName: 'Extras', imageUrl: 'Images/Extras.svg' }, { commandName: 'Applications', imageUrl: 'Images/Applications.svg' } ); break; case 'ExtrasNavigationPopoutPanel': eventArgs.buttonDefinitions.push( { commandName: 'NavigateExtensionBrowser' } ); break; case 'ToolsPanel': eventArgs.buttonDefinitions.push( { commandName: 'Extras', imageUrl: 'Images/Extras.svg' }, { commandName: 'Login' } ); break; case 'UserPopoutPanel': eventArgs.buttonDefinitions.push( { commandName: 'NavigateControlPanel' }, { commandName: 'ChangePassword' }, { commandName: 'Logout' } ); break; case 'UserHelpPopoutPanel': if (SC.context.pageType !== 'GuestPage' && SC.context.pageType != 'LoginPage') { eventArgs.buttonDefinitions.push({ commandName: 'GiveFeedback' }); for (var i = 1; ; i++) { var resourceValue = SC.res['HelpPanel.Link' + i + '.Text']; if (resourceValue === undefined \|\| resourceValue === '') break; var url = SC.util.sanitizeUrl(SC.res['HelpPanel.Link' + i + '.Url']); eventArgs.buttonDefinitions.push({ commandName: 'NavigateHelpLink', commandArgument: url, text: resourceValue, title: url }); } } break; } }); SC.event.addGlobalHandler(SC.event.QueryCommandButtonState, function (eventArgs) { switch (eventArgs.commandName) { case 'User': case 'ActionCenter': eventArgs.isVisible = SC.context.isUserAuthenticated; break; case 'Login': eventArgs.isVisible = SC.context.pageType != 'SetupWizardPage' && !SC.context.isUserAuthenticated && !SC.util.isCapable(SC.util.Caps.InternetExplorer, null, { major: 12 }); // Login page doesn't support IE break; case 'NavigateControlPanel': eventArgs.isVisible = !!SC.context.controlPanelUrl; break; case 'ChangePassword': eventArgs.isVisible = SC.context.canChangePassword; break; case 'Extras': eventArgs.isVisible = SC.popout.computePopoutCommandsVisible(eventArgs, ['', 'Navigation']); break; case 'Applications': case 'Help': eventArgs.isVisible = SC.popout.computePopoutCommandsVisible(eventArgs); break; case 'NavigateExtensionBrowser': eventArgs.isVisible = SC.context.isUserAdministrator; break; } }); SC.event.addGlobalHandler(SC.event.ExecuteCommand, function (eventArgs) { switch (eventArgs.commandName) { case 'Extras': SC.popout.showPanelFromCommand(eventArgs, null, { subAreas: ['', 'Navigation'] }); break; case 'Applications': SC.popout.showPanelFromCommand(eventArgs); break; case 'ActionCenter': SC.popout.showPanelFromCommand(eventArgs, null, { buildProc: function (popoutPanel) { var actionCenterInfo = SC.livedata.getResponseInfo(SC.livedata.ActionCenterInfo); SC.ui.setContents(popoutPanel, $div({ className: 'ActionCenterPanel' }, [ $h2({ _textResource: 'ActionCenterPanel.Text' }), $ul({ className: 'List', _visible: SC.util.any(actionCenterInfo.ActionItems) }, (actionCenterInfo.ActionItems \|\| []) .map(function (it) { var parsedEventData = SC.util.parseEventData(it.Data); return $li({ _eventHandlerMap: { click: function() { window.location.href = SC.nav.getHostUrl({ sessionType: it.SessionType, sessionID: it.SessionID, tabName: SC.nav.getHostTabName(it.EventType), tabContext: it.EventID }); }, } }, [ $img({ src: 'Images/Notification' + SC.util.getEnumValueName(SC.types.SessionEventType, it.EventType) + '.svg' }),
URL: https://control.screenbridge.es/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Welcome to our online remote support and collaboration portal. The following options allow you to connect to a session.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "file hosting" }

URL: https://control.screenbridge.es/ Model: Joe Sandbox AI	{ "brands": [ "ScreenConnect" ] }
	{ "brands": [ "ScreenConnect" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	270794
Entropy (8bit):	4.831124935554849
Encrypted:	false
SSDEEP:	6144:RITRvTL92lQ+p/L7i++jri4iXiSKaA9Rb+SdFMKSF:GgpNK8
MD5:	91D9D6EDCEC4BD928299FB395FF2287F
SHA1:	C31DA954E8E52C0E4EEB9377FDD9D65B9CEF4B39
SHA-256:	A190ED347236402AB0B9D31C2FD6B703361E3CCE3D4FE86B48AC625D4F58FD7F
SHA-512:	4836608D86E658F406489CD95D78F4078F36C075C9989E30AC70DD9FC7D3C2FC688B380B103BBD55F2BAF83DD81BD8DDAF0BE50DDCD8E5789692250B617B1BDC
Malicious:	false
Reputation:	low
Preview:	(() => {. var __defProp = Object.defineProperty;. var __defProps = Object.defineProperties;. var __getOwnPropDescs = Object.getOwnPropertyDescriptors;. var __getOwnPropSymbols = Object.getOwnPropertySymbols;. var __hasOwnProp = Object.prototype.hasOwnProperty;. var __propIsEnum = Object.prototype.propertyIsEnumerable;. var __defNormalProp = (obj, key, value) => key in obj ? __defProp(obj, key, { enumerable: true, configurable: true, writable: true, value }) : obj[key] = value;. var __spreadValues = (a, b) => {. for (var prop in b \|\| (b = {})). if (__hasOwnProp.call(b, prop)). __defNormalProp(a, prop, b[prop]);. if (__getOwnPropSymbols). for (var prop of __getOwnPropSymbols(b)) {. if (__propIsEnum.call(b, prop)). __defNormalProp(a, prop, b[prop]);. }. return a;. };. var __spreadProps = (a, b) => __defProps(a, __getOwnPropDescs(b));. var __export = (target, all) => {. for (var name in all). __defProp(target, name, { get: a

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.20
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.20
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.20
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.20
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: control.screenbridge.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Script.ashx?__Cache=64accfbc-f9cc-40d0-8505-1334579945f1 HTTP/1.1Host: control.screenbridge.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://control.screenbridge.es/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /App_Themes/DarkTeal/Default.css?__Cache=5223953d-a3cf-490c-a63d-57edd0173ba6 HTTP/1.1Host: control.screenbridge.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://control.screenbridge.es/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Scripts/SC.main.ts?ScriptImportType=Classic&__Cache=032eafde-1178-487f-bebd-209f0896ce37 HTTP/1.1Host: control.screenbridge.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://control.screenbridge.es/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Script.ashx?__Cache=64accfbc-f9cc-40d0-8505-1334579945f1 HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Scripts/SC.main.ts?ScriptImportType=Classic&__Cache=032eafde-1178-487f-bebd-209f0896ce37 HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /App_Themes/DarkTeal/Default.css?r=Page.Background&__Cache=57459 HTTP/1.1Host: control.screenbridge.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://control.screenbridge.es/App_Themes/DarkTeal/Default.css?__Cache=5223953d-a3cf-490c-a63d-57edd0173ba6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/ActivityIndicator.gif HTTP/1.1Host: control.screenbridge.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://control.screenbridge.es/App_Themes/DarkTeal/Default.css?__Cache=5223953d-a3cf-490c-a63d-57edd0173ba6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/Extras.svg HTTP/1.1Host: control.screenbridge.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://control.screenbridge.es/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/ActionCenter.svg HTTP/1.1Host: control.screenbridge.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://control.screenbridge.es/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/Applications.svg HTTP/1.1Host: control.screenbridge.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://control.screenbridge.es/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/Extras.svg HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/ActionCenter.svg HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/Applications.svg HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Images/ActivityIndicator.gif HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /App_Themes/DarkTeal/Default.css?r=Page.Background&__Cache=57459 HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FavIcon.axd?__Cache=7437b908-efcc-4bb8-9ee3-9889a18f79e3 HTTP/1.1Host: control.screenbridge.esConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://control.screenbridge.es/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FavIcon.axd?__Cache=7437b908-efcc-4bb8-9ee3-9889a18f79e3 HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Services/PageService.ashx/GetLiveData HTTP/1.1Host: control.screenbridge.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: control.screenbridge.es

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 24, 2025 21:06:57.511435032 CET	53	62447	1.1.1.1	192.168.2.4
Jan 24, 2025 21:06:57.576719046 CET	53	49951	1.1.1.1	192.168.2.4
Jan 24, 2025 21:06:58.638219118 CET	53	49338	1.1.1.1	192.168.2.4
Jan 24, 2025 21:07:01.930916071 CET	59286	53	192.168.2.4	1.1.1.1
Jan 24, 2025 21:07:01.930917025 CET	51401	53	192.168.2.4	1.1.1.1
Jan 24, 2025 21:07:01.938093901 CET	53	51401	1.1.1.1	192.168.2.4
Jan 24, 2025 21:07:01.938353062 CET	53	59286	1.1.1.1	192.168.2.4
Jan 24, 2025 21:07:02.690170050 CET	58738	53	192.168.2.4	1.1.1.1
Jan 24, 2025 21:07:02.690170050 CET	58136	53	192.168.2.4	1.1.1.1
Jan 24, 2025 21:07:02.705241919 CET	53	58136	1.1.1.1	192.168.2.4
Jan 24, 2025 21:07:02.752990007 CET	53	58738	1.1.1.1	192.168.2.4
Jan 24, 2025 21:07:03.942733049 CET	58337	53	192.168.2.4	1.1.1.1
Jan 24, 2025 21:07:03.942893028 CET	58860	53	192.168.2.4	1.1.1.1
Jan 24, 2025 21:07:03.957773924 CET	53	58860	1.1.1.1	192.168.2.4
Jan 24, 2025 21:07:04.053792953 CET	53	58337	1.1.1.1	192.168.2.4
Jan 24, 2025 21:07:05.250072002 CET	53	50568	1.1.1.1	192.168.2.4
Jan 24, 2025 21:07:13.734771013 CET	138	138	192.168.2.4	192.168.2.255
Jan 24, 2025 21:07:15.734400034 CET	53	51706	1.1.1.1	192.168.2.4
Jan 24, 2025 21:07:34.935213089 CET	53	57033	1.1.1.1	192.168.2.4
Jan 24, 2025 21:07:57.440809965 CET	53	57656	1.1.1.1	192.168.2.4
Jan 24, 2025 21:07:57.923259020 CET	53	57516	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:03 UTC	666	OUT	GET / HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:03 UTC	284	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 32435 Content-Type: text/html; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff P3P: CP="NON CUR OUR STP STA PRE" Date: Fri, 24 Jan 2025 20:07:02 GMT Connection: close
2025-01-24 20:07:03 UTC	16100	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 0d 0a 09 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 09 09 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 61 67 67 65 64 53 65 73 73 69 6f 6e 49 6e 66 6f 28 74 61 67 2c 20 74 61 67 67 65 64 53 65 73 73 Data Ascii: <!DOCTYPE html><html><head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" /><script>function setTaggedSessionInfo(tag, taggedSess
2025-01-24 20:07:03 UTC	16335	IN	Data Raw: 67 65 73 2f 41 70 70 6c 69 63 61 74 69 6f 6e 73 2e 73 76 67 27 20 7d 0d 0a 09 09 09 09 09 29 3b 0d 0a 09 09 09 09 09 62 72 65 61 6b 3b 0d 0a 09 09 09 09 63 61 73 65 20 27 45 78 74 72 61 73 4e 61 76 69 67 61 74 69 6f 6e 50 6f 70 6f 75 74 50 61 6e 65 6c 27 3a 0d 0a 09 09 09 09 09 65 76 65 6e 74 41 72 67 73 2e 62 75 74 74 6f 6e 44 65 66 69 6e 69 74 69 6f 6e 73 2e 70 75 73 68 28 0d 0a 09 09 09 09 09 09 7b 20 63 6f 6d 6d 61 6e 64 4e 61 6d 65 3a 20 27 4e 61 76 69 67 61 74 65 45 78 74 65 6e 73 69 6f 6e 42 72 6f 77 73 65 72 27 20 7d 0d 0a 09 09 09 09 09 29 3b 0d 0a 09 09 09 09 09 62 72 65 61 6b 3b 0d 0a 09 09 09 09 63 61 73 65 20 27 54 6f 6f 6c 73 50 61 6e 65 6c 27 3a 0d 0a 09 09 09 09 09 65 76 65 6e 74 41 72 67 73 2e 62 75 74 74 6f 6e 44 65 66 69 6e 69 74 69 6f Data Ascii: ges/Applications.svg' });break;case 'ExtrasNavigationPopoutPanel':eventArgs.buttonDefinitions.push({ commandName: 'NavigateExtensionBrowser' });break;case 'ToolsPanel':eventArgs.buttonDefinitio

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:03 UTC	587	OUT	GET /Script.ashx?__Cache=64accfbc-f9cc-40d0-8505-1334579945f1 HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:03 UTC	410	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=3600 Content-Length: 300412 Content-Type: text/javascript; charset=utf-8 Expires: Fri, 24 Jan 2025 21:07:03 GMT Vary: Accept-Encoding, Accept-Language, Host, X-Forwarded-Host, X-Forwarded-Port, X-Forwarded-Proto Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Date: Fri, 24 Jan 2025 20:07:02 GMT Connection: close
2025-01-24 20:07:03 UTC	15974	IN	Data Raw: 53 43 20 3d 20 7b 22 73 65 72 76 69 63 65 22 3a 7b 22 47 65 74 52 65 73 6f 75 72 63 65 49 6e 66 6f 22 3a 66 75 6e 63 74 69 6f 6e 20 28 6f 6e 53 75 63 63 65 73 73 2c 20 6f 6e 46 61 69 6c 75 72 65 2c 20 75 73 65 72 43 6f 6e 74 65 78 74 2c 20 75 73 65 72 4e 61 6d 65 4f 76 65 72 72 69 64 65 2c 20 70 61 73 73 77 6f 72 64 4f 76 65 72 72 69 64 65 29 20 7b 0d 0a 72 65 74 75 72 6e 20 53 43 2e 68 74 74 70 2e 69 6e 76 6f 6b 65 53 65 72 76 69 63 65 28 27 53 65 72 76 69 63 65 73 2f 41 70 70 65 61 72 61 6e 63 65 53 65 72 76 69 63 65 2e 61 73 68 78 27 2c 20 27 47 65 74 52 65 73 6f 75 72 63 65 49 6e 66 6f 27 2c 20 5b 5d 2c 20 6f 6e 53 75 63 63 65 73 73 2c 20 6f 6e 46 61 69 6c 75 72 65 2c 20 75 73 65 72 43 6f 6e 74 65 78 74 2c 20 75 73 65 72 4e 61 6d 65 4f 76 65 72 72 69 Data Ascii: SC = {"service":{"GetResourceInfo":function (onSuccess, onFailure, userContext, userNameOverride, passwordOverride) {return SC.http.invokeService('Services/AppearanceService.ashx', 'GetResourceInfo', [], onSuccess, onFailure, userContext, userNameOverri
2025-01-24 20:07:03 UTC	16384	IN	Data Raw: 78 74 2c 20 75 73 65 72 4e 61 6d 65 4f 76 65 72 72 69 64 65 2c 20 70 61 73 73 77 6f 72 64 4f 76 65 72 72 69 64 65 29 20 7b 0d 0a 72 65 74 75 72 6e 20 53 43 2e 68 74 74 70 2e 69 6e 76 6f 6b 65 53 65 72 76 69 63 65 28 27 53 65 72 76 69 63 65 73 2f 50 61 67 65 53 65 72 76 69 63 65 2e 61 73 68 78 27 2c 20 27 47 65 74 45 6c 69 67 69 62 6c 65 48 6f 73 74 73 27 2c 20 5b 5d 2c 20 6f 6e 53 75 63 63 65 73 73 2c 20 6f 6e 46 61 69 6c 75 72 65 2c 20 75 73 65 72 43 6f 6e 74 65 78 74 2c 20 75 73 65 72 4e 61 6d 65 4f 76 65 72 72 69 64 65 2c 20 70 61 73 73 77 6f 72 64 4f 76 65 72 72 69 64 65 29 3b 0d 0a 7d 2c 22 4e 6f 74 69 66 79 41 63 74 69 76 69 74 79 22 3a 66 75 6e 63 74 69 6f 6e 20 28 6f 6e 53 75 63 63 65 73 73 2c 20 6f 6e 46 61 69 6c 75 72 65 2c 20 75 73 65 72 43 6f Data Ascii: xt, userNameOverride, passwordOverride) {return SC.http.invokeService('Services/PageService.ashx', 'GetEligibleHosts', [], onSuccess, onFailure, userContext, userNameOverride, passwordOverride);},"NotifyActivity":function (onSuccess, onFailure, userCo
2025-01-24 20:07:03 UTC	16384	IN	Data Raw: 65 64 67 65 64 45 76 65 6e 74 22 3a 33 2c 22 41 6e 6e 6f 74 61 74 65 64 45 76 65 6e 74 22 3a 34 2c 22 53 75 63 63 65 73 73 52 65 73 75 6c 74 22 3a 35 2c 22 46 61 69 6c 75 72 65 52 65 73 75 6c 74 22 3a 36 2c 22 43 6f 6e 6e 65 63 74 65 64 22 3a 31 30 2c 22 44 69 73 63 6f 6e 6e 65 63 74 65 64 22 3a 31 31 2c 22 43 72 65 61 74 65 64 53 65 73 73 69 6f 6e 22 3a 32 30 2c 22 44 65 6c 65 74 65 64 53 65 73 73 69 6f 6e 22 3a 32 31 2c 22 49 6e 69 74 69 61 74 65 64 4a 6f 69 6e 22 3a 33 30 2c 22 49 6e 76 69 74 65 64 47 75 65 73 74 22 3a 33 31 2c 22 41 64 64 65 64 4e 6f 74 65 22 3a 33 32 2c 22 51 75 65 75 65 64 52 65 69 6e 73 74 61 6c 6c 22 3a 34 30 2c 22 51 75 65 75 65 64 55 6e 69 6e 73 74 61 6c 6c 22 3a 34 31 2c 22 51 75 65 75 65 64 49 6e 76 61 6c 69 64 61 74 65 4c 69 Data Ascii: edgedEvent":3,"AnnotatedEvent":4,"SuccessResult":5,"FailureResult":6,"Connected":10,"Disconnected":11,"CreatedSession":20,"DeletedSession":21,"InitiatedJoin":30,"InvitedGuest":31,"AddedNote":32,"QueuedReinstall":40,"QueuedUninstall":41,"QueuedInvalidateLi
2025-01-24 20:07:03 UTC	16384	IN	Data Raw: 22 3a 22 47 75 65 73 74 22 2c 22 41 64 76 61 6e 63 65 64 43 6f 6e 66 69 67 2e 47 75 65 73 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 52 65 66 72 65 73 68 49 6e 74 65 72 76 61 6c 22 3a 22 47 75 65 73 74 20 49 6e 66 6f 72 6d 61 74 69 6f 6e 20 52 65 66 72 65 73 68 20 49 6e 74 65 72 76 61 6c 22 2c 22 41 64 76 61 6e 63 65 64 43 6f 6e 66 69 67 2e 47 75 65 73 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 52 65 66 72 65 73 68 49 6e 74 65 72 76 61 6c 2e 43 61 75 74 69 6f 6e 22 3a 22 43 61 75 74 69 6f 6e 3a 20 53 65 74 74 69 6e 67 20 74 68 69 73 20 76 61 6c 75 65 20 6c 6f 77 65 72 20 74 68 61 6e 20 33 30 30 20 73 65 63 6f 6e 64 73 20 6d 61 79 20 61 64 76 65 72 73 65 6c 79 20 61 66 66 65 63 74 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 22 2c 22 41 64 76 61 6e 63 65 64 43 6f 6e 66 69 67 Data Ascii: ":"Guest","AdvancedConfig.GuestInformationRefreshInterval":"Guest Information Refresh Interval","AdvancedConfig.GuestInformationRefreshInterval.Caution":"Caution: Setting this value lower than 300 seconds may adversely affect performance.","AdvancedConfig
2025-01-24 20:07:03 UTC	16384	IN	Data Raw: 6f 73 74 20 43 6f 6e 74 72 6f 6c 22 2c 22 41 64 76 61 6e 63 65 64 43 6f 6e 66 69 67 2e 53 75 73 70 65 6e 64 48 6f 73 74 43 6f 6e 74 72 6f 6c 2e 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 50 72 65 76 65 6e 74 20 74 68 65 20 68 6f 73 74 20 66 72 6f 6d 20 63 6f 6e 74 72 6f 6c 6c 69 6e 67 20 74 68 65 20 67 75 65 73 74 5c 75 30 30 32 37 73 20 6b 65 79 62 6f 61 72 64 20 61 6e 64 20 6d 6f 75 73 65 20 75 70 6f 6e 20 69 6e 69 74 69 61 6c 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 2c 22 41 64 76 61 6e 63 65 64 43 6f 6e 66 69 67 2e 53 75 73 70 65 6e 64 4d 79 49 6e 70 75 74 22 3a 22 53 75 73 70 65 6e 64 20 4d 79 20 49 6e 70 75 74 22 2c 22 41 64 76 61 6e 63 65 64 43 6f 6e 66 69 67 2e 53 75 73 70 65 6e 64 4d 79 49 6e 70 75 74 2e 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 50 Data Ascii: ost Control","AdvancedConfig.SuspendHostControl.Description":"Prevent the host from controlling the guest\u0027s keyboard and mouse upon initial connection.","AdvancedConfig.SuspendMyInput":"Suspend My Input","AdvancedConfig.SuspendMyInput.Description":"P
2025-01-24 20:07:03 UTC	16384	IN	Data Raw: 20 62 65 20 63 6f 6d 62 69 6e 65 64 20 74 6f 20 63 72 65 61 74 65 20 70 6f 77 65 72 66 75 6c 20 65 78 70 72 65 73 73 69 6f 6e 73 2e 20 54 68 65 20 73 61 6d 65 20 70 72 6f 70 65 72 74 69 65 73 20 63 61 6e 20 62 65 20 75 73 65 64 20 69 6e 73 69 64 65 20 79 6f 75 72 20 61 63 74 69 6f 6e 73 20 74 6f 20 64 69 73 70 6c 61 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 75 73 65 72 73 20 6f 72 20 70 72 6f 76 69 64 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 65 78 74 65 72 6e 61 6c 20 73 79 73 74 65 6d 73 2e 5c 75 30 30 33 63 2f 70 5c 75 30 30 33 65 5c 72 5c 6e 5c 72 5c 6e 5c 75 30 30 33 63 68 33 5c 75 30 30 33 65 41 76 61 69 6c 61 62 6c 65 20 6f 62 6a 65 63 74 73 2f 70 72 6f 70 65 72 74 69 65 73 5c 75 30 30 33 63 2f 68 33 5c 75 30 30 33 65 5c 72 5c 6e Data Ascii: be combined to create powerful expressions. The same properties can be used inside your actions to display information to users or provide information to external systems.\u003c/p\u003e\r\n\r\n\u003ch3\u003eAvailable objects/properties\u003c/h3\u003e\r\n
2025-01-24 20:07:03 UTC	16384	IN	Data Raw: 33 65 5c 72 5c 6e 5c 75 30 30 33 63 74 61 62 6c 65 20 63 6c 61 73 73 3d 5c 22 44 61 74 61 54 61 62 6c 65 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 74 62 6f 64 79 5c 75 30 30 33 65 5c 72 5c 6e 5c 74 5c 75 30 30 33 63 74 72 5c 75 30 30 33 65 5c 75 30 30 33 63 74 64 5c 75 30 30 33 65 53 74 72 69 6e 67 73 5c 75 30 30 33 63 2f 74 64 5c 75 30 30 33 65 5c 75 30 30 33 63 74 64 5c 75 30 30 33 65 51 75 6f 74 65 64 20 77 69 74 68 20 73 69 6e 67 6c 65 20 71 75 6f 74 65 20 63 68 61 72 61 63 74 65 72 20 28 5c 75 30 30 33 63 63 6f 64 65 5c 75 30 30 33 65 5c 75 30 30 32 37 5c 75 30 30 33 63 2f 63 6f 64 65 5c 75 30 30 33 65 29 3b 20 65 73 63 61 70 65 20 73 69 6e 67 6c 65 20 71 75 6f 74 65 73 20 69 6e 73 69 64 65 20 74 68 65 20 73 74 72 69 6e 67 20 77 69 74 68 20 74 77 6f Data Ascii: 3e\r\n\u003ctable class=\"DataTable\"\u003e\u003ctbody\u003e\r\n\t\u003ctr\u003e\u003ctd\u003eStrings\u003c/td\u003e\u003ctd\u003eQuoted with single quote character (\u003ccode\u003e\u0027\u003c/code\u003e); escape single quotes inside the string with two
2025-01-24 20:07:03 UTC	16384	IN	Data Raw: 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 70 20 73 74 79 6c 65 3d 5c 22 6d 61 72 67 69 6e 3a 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 73 74 79 6c 65 3d 5c 22 63 6f 6c 6f 72 3a 20 72 67 62 28 31 35 33 2c 20 31 35 33 2c 20 31 35 33 29 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 36 70 78 3b 5c 22 5c 75 30 30 33 65 4f 72 20 75 73 65 20 74 68 69 73 20 6c 69 6e 6b 3a 5c 75 30 30 33 63 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 Data Ascii: vetica, sans-serif;text-align:left;\"\u003e\u003cp style=\"margin: 0;font-size: 14px;line-height: 17px;text-align: center\"\u003e\u003cspan style=\"color: rgb(153, 153, 153); font-size: 14px; line-height: 16px;\"\u003eOr use this link:\u003c/span\u003e\u0
2025-01-24 20:07:03 UTC	16384	IN	Data Raw: 6e 64 2e 52 75 6e 54 6f 6f 6c 2e 4d 65 73 73 61 67 65 22 3a 22 52 75 6e 20 61 20 74 6f 6f 6c 20 6f 6e 20 74 68 65 20 72 65 6d 6f 74 65 20 73 79 73 74 65 6d 2e 20 54 68 65 20 74 6f 6f 6c 20 77 69 6c 6c 20 62 65 20 72 75 6e 20 77 68 65 6e 20 74 68 65 20 6d 61 63 68 69 6e 65 20 69 73 20 63 6f 6e 6e 65 63 74 65 64 2e 22 2c 22 43 6f 6d 6d 61 6e 64 2e 52 75 6e 54 6f 6f 6c 2e 54 65 78 74 22 3a 22 52 75 6e 20 54 6f 6f 6c 22 2c 22 43 6f 6d 6d 61 6e 64 2e 53 65 6c 65 63 74 41 63 63 65 73 73 4d 61 6e 61 67 65 6d 65 6e 74 2e 54 65 78 74 22 3a 22 41 63 63 65 73 73 20 4d 61 6e 61 67 65 6d 65 6e 74 22 2c 22 43 6f 6d 6d 61 6e 64 2e 53 65 6c 65 63 74 43 61 6c 65 6e 64 61 72 2e 54 65 78 74 22 3a 22 43 61 6c 65 6e 64 61 72 22 2c 22 43 6f 6d 6d 61 6e 64 2e 53 65 6c 65 63 74 Data Ascii: nd.RunTool.Message":"Run a tool on the remote system. The tool will be run when the machine is connected.","Command.RunTool.Text":"Run Tool","Command.SelectAccessManagement.Text":"Access Management","Command.SelectCalendar.Text":"Calendar","Command.Select
2025-01-24 20:07:03 UTC	16384	IN	Data Raw: 33 63 74 72 5c 75 30 30 33 65 5c 75 30 30 33 63 74 64 5c 75 30 30 33 65 52 75 6e 53 68 61 72 65 64 54 6f 6f 6c 41 73 53 79 73 74 65 6d 53 69 6c 65 6e 74 6c 79 5c 75 30 30 33 63 2f 74 64 5c 75 30 30 33 65 5c 75 30 30 33 63 74 64 5c 75 30 30 33 65 41 6c 6c 6f 77 73 20 61 20 68 6f 73 74 20 74 6f 20 72 75 6e 20 61 20 73 68 61 72 65 64 20 74 6f 6f 6c 20 61 73 20 73 79 73 74 65 6d 20 75 73 65 72 20 77 69 74 68 6f 75 74 20 65 6e 64 20 75 73 65 72 20 69 6e 74 65 72 61 63 74 69 6f 6e 2e 5c 75 30 30 33 63 2f 74 64 5c 75 30 30 33 65 5c 75 30 30 33 63 2f 74 72 5c 75 30 30 33 65 5c 72 5c 6e 5c 75 30 30 33 63 74 72 5c 75 30 30 33 65 5c 75 30 30 33 63 74 64 5c 75 30 30 33 65 52 75 6e 50 65 72 73 6f 6e 61 6c 54 6f 6f 6c 41 73 55 73 65 72 5c 75 30 30 33 63 2f 74 64 5c 75 Data Ascii: 3ctr\u003e\u003ctd\u003eRunSharedToolAsSystemSilently\u003c/td\u003e\u003ctd\u003eAllows a host to run a shared tool as system user without end user interaction.\u003c/td\u003e\u003c/tr\u003e\r\n\u003ctr\u003e\u003ctd\u003eRunPersonalToolAsUser\u003c/td\u

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:03 UTC	621	OUT	GET /App_Themes/DarkTeal/Default.css?__Cache=5223953d-a3cf-490c-a63d-57edd0173ba6 HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:04 UTC	325	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=3600 Content-Length: 481943 Content-Type: text/css; charset=utf-8 Expires: Fri, 24 Jan 2025 21:07:03 GMT Vary: Accept-Encoding Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Date: Fri, 24 Jan 2025 20:07:04 GMT Connection: close
2025-01-24 20:07:04 UTC	16059	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 0d 0a 7b 0d 0a 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 09 73 72 63 3a 20 6c 6f 63 61 6c 28 27 52 6f 62 6f 74 6f 27 29 2c 20 6c 6f 63 61 6c 28 27 52 6f 62 6f 74 6f 2d 52 65 67 75 6c 61 72 27 29 2c 20 75 72 6c 28 64 61 74 61 3a 3b 62 61 73 65 36 34 2c 64 30 39 47 52 67 41 42 41 41 41 41 41 45 38 73 41 42 49 41 41 41 41 41 6a 56 41 41 41 51 41 42 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 48 52 45 56 47 41 41 41 42 6c 41 41 41 41 45 63 41 41 41 42 6b 42 59 30 46 76 45 64 51 54 31 4d 41 41 41 48 63 41 41 41 46 30 41 41 41 44 4f Data Ascii: @font-face{font-family: 'Roboto';font-style: normal;font-weight: 400;src: local('Roboto'), local('Roboto-Regular'), url(data:;base64,d09GRgABAAAAAE8sABIAAAAAjVAAAQABAAAAAAAAAAAAAAAAAAAAAAAAAABHREVGAAABlAAAAEcAAABkBY0FvEdQT1MAAAHcAAAF0AAADO
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 39 43 4c 51 6f 77 6d 4b 34 39 2b 34 39 30 69 6b 74 64 55 39 68 73 74 79 51 30 34 77 33 4d 54 4e 2b 78 59 31 79 46 39 44 57 6b 45 39 61 77 6b 6e 76 6a 36 43 43 4f 65 2f 68 78 44 65 55 32 34 45 50 65 51 6f 69 41 45 2b 31 75 44 65 4e 34 49 30 44 6b 49 58 44 54 75 64 45 4c 58 6e 7a 31 6f 30 32 50 6c 61 47 52 63 32 67 50 34 74 55 37 61 78 77 74 74 6f 76 4f 6d 78 70 53 65 52 59 56 55 38 68 39 5a 57 55 73 55 4e 45 39 58 74 76 48 51 4a 63 57 47 47 4a 6a 63 43 30 7a 61 37 2b 6b 6c 66 6c 51 57 70 69 76 36 49 49 51 68 33 36 59 6d 2f 50 4a 69 61 33 35 2b 39 59 50 48 54 78 6b 77 6f 51 68 37 79 51 36 55 44 34 79 6f 6c 62 49 6b 4a 39 4c 66 74 32 65 54 78 37 6c 54 54 2b 47 75 71 43 46 71 50 4f 78 51 2b 54 77 6d 64 50 6b 38 42 48 63 64 2f 50 32 47 30 63 6d 57 57 39 38 73 Data Ascii: 9CLQowmK49+490iktdU9hstyQ04w3MTN+xY1yF9DWkE9awknvj6CCOe/hxDeU24EPeQoiAE+1uDeN4I0DkIXDTudELXnz1o02PlaGRc2gP4tU7axwttovOmxpSeRYVU8h9ZWUsUNE9XtvHQJcWGGJjcC0za7+klflQWpiv6IIQh36Ym/PJia35+9YPHTxkwoQh7yQ6UD4yolbIkJ9Lft2eTx7lTT+GuqCFqPOxQ+TwmdPk8BHcd/P2G0cmWW98s
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 76 52 4a 74 49 62 2f 61 7a 6b 58 79 2b 67 51 7a 45 74 56 42 74 51 4e 43 2f 70 4a 71 59 6f 46 6b 48 56 57 47 61 58 4c 6c 61 64 54 71 46 31 30 78 66 52 77 65 36 30 6f 47 56 44 71 79 6c 30 34 2b 68 67 78 67 32 2f 54 44 2f 47 44 62 39 4d 48 30 42 52 71 38 6d 4b 41 66 70 72 41 6f 31 46 35 67 38 72 69 5a 61 64 65 79 71 56 56 39 51 75 65 77 71 6e 57 68 79 51 6b 4a 69 51 6b 70 79 61 6c 71 4b 33 52 77 53 59 72 59 6d 4a 31 6a 6a 4e 4f 62 67 45 4c 45 43 70 6f 53 68 4e 56 74 54 45 68 4a 53 37 4d 45 68 39 71 52 55 77 54 36 73 75 50 46 76 6c 2f 64 75 32 6e 66 79 32 65 67 2b 76 59 63 4e 52 62 43 38 66 2b 71 31 49 78 73 76 33 43 69 63 4f 6e 62 4d 4f 44 54 70 33 5a 46 64 45 79 62 2f 74 65 31 6d 38 50 65 33 77 76 34 36 50 32 58 5a 34 44 36 64 68 2f 52 73 4f 32 68 4f 74 35 Data Ascii: vRJtIb/azkXy+gQzEtVBtQNC/pJqYoFkHVWGaXLladTqF10xfRwe60oGVDqyl04+hgxg2/TD/GDb9MH0BRq8mKAfprAo1F5g8riZadeyqVV9QuewqnWhyQkJiQkpyalqK3RwSYrYmJ1jjNObgELECpoShNVtTEhJS7MEh9qRUwT6suPFvl/du2nfy2eg+vYcNRbC8f+q1Ixsv3CicOnbMODTp3ZFdEyb/te1m8Pe3wv46P2XZ4D6dh/RsO2hOt5
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 4d 77 6f 75 6d 4c 53 70 42 45 64 46 66 78 75 33 5a 73 6d 67 61 41 4b 61 34 58 43 6c 32 64 6e 74 32 49 39 53 52 41 52 58 43 79 73 72 47 36 45 42 47 5a 6f 33 62 73 77 4d 64 34 6a 46 68 78 43 2b 49 54 74 6b 48 63 52 51 68 4a 6d 35 59 37 43 79 67 6c 4e 34 63 69 4f 64 37 41 33 69 2b 31 36 69 30 41 77 6e 4d 72 6a 43 5a 61 45 41 52 4d 5a 2f 50 53 69 50 32 39 79 66 56 6d 7a 52 79 2f 76 54 5a 73 30 63 53 77 34 4b 63 52 53 68 66 30 70 47 46 61 43 7a 4a 78 35 46 6b 4a 70 72 73 2b 68 57 64 49 49 33 51 73 56 36 41 6d 4b 51 52 6e 67 67 31 2f 2f 73 4f 63 73 49 54 46 67 48 48 77 38 2b 7a 6d 59 59 43 69 42 61 4e 47 53 77 51 41 54 6d 79 54 75 6c 7a 30 54 46 54 7a 34 4d 30 31 4e 58 39 6e 6a 75 58 76 6c 5a 39 63 72 75 66 44 55 53 32 7a 67 55 68 36 72 70 2f 53 68 64 42 35 65 Data Ascii: MwoumLSpBEdFfxu3ZsmgaAKa4XCl2dnt2I9SRARXCysrG6EBGZo3bswMd4jFhxC+ITtkHcRQhJm5Y7CyglN4ciOd7A3i+16i0AwnMrjCZaEARMZ/PSiP29yfVmzRy/vTZs0cSw4KcRShf0pGFaCzJx5FkJprs+hWdII3QsV6AmKQRngg1//sOcsITFgHHw8+zmYYCiBaNGSwQATmyTulz0TFTz4M01NX9njuXvlZ9crufDUS2zgUh6rp/ShdB5e
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 7a 6d 4a 51 45 56 4b 57 69 42 54 73 70 64 45 34 70 70 6d 59 79 78 6e 6b 52 45 2b 31 55 52 32 75 65 68 74 4e 61 38 38 61 39 2b 77 45 75 52 69 66 39 42 61 36 2f 6f 64 63 7a 54 79 2b 35 35 58 72 2f 30 44 62 4a 31 78 53 6a 47 69 67 4c 50 6c 56 59 2f 42 4c 7a 4d 66 39 6e 31 77 35 54 7a 72 77 35 50 6c 37 6d 79 75 6e 55 62 70 79 37 6c 78 4d 47 4b 73 59 46 4b 69 78 31 49 76 64 45 77 4a 66 55 33 6b 36 4b 52 52 76 66 45 78 70 58 67 4d 77 2b 4c 30 33 45 31 4c 49 63 59 4b 65 35 55 30 64 4e 2b 6b 70 39 72 58 65 6c 38 79 2f 58 31 6c 35 4c 73 56 36 77 45 74 77 47 54 74 34 36 48 67 45 71 42 58 31 65 72 5a 52 75 6b 65 69 49 62 4a 50 7a 58 66 65 58 4a 30 4b 70 49 4e 41 42 71 49 51 36 4d 59 6b 78 64 73 74 30 46 36 58 38 76 6e 66 5a 6a 6a 6c 55 50 34 73 4b 38 47 45 4b 79 74 Data Ascii: zmJQEVKWiBTspdE4ppmYyxnkRE+1UR2uehtNa88a9+wEuRif9Ba6/odczTy+55Xr/0DbJ1xSjGigLPlVY/BLzMf9n1w5Tzrw5Pl7myunUbpy7lxMGKsYFKix1IvdEwJfU3k6KRRvfExpXgMw+L03E1LIcYKe5U0dN+kp9rXel8y/X1l5LsV6wEtwGTt46HgEqBX1erZRukeiIbJPzXfeXJ0KpINABqIQ6MYkxdst0F6X8vnfZjjlUP4sK8GEKyt
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 76 5a 44 55 50 68 48 4a 46 2b 34 34 32 6b 4a 69 58 47 78 38 50 47 55 4f 41 66 70 55 74 6c 6d 7a 59 73 36 43 44 54 76 4e 44 72 70 4d 37 77 2b 66 44 6a 56 55 65 4e 70 6a 59 47 59 41 67 2f 39 5a 44 43 6b 4d 57 41 41 41 4b 68 38 42 30 51 42 34 32 6a 33 4e 67 51 62 43 51 42 7a 48 38 62 75 71 71 70 5a 61 6d 56 78 52 6d 78 4a 70 73 59 4a 68 4d 46 49 67 46 41 44 46 41 67 69 55 71 67 4b 70 4e 35 6a 65 6f 44 64 6f 44 76 59 55 36 56 46 36 67 4c 44 2b 50 78 4a 38 66 4f 2f 75 2f 33 64 42 33 67 79 59 79 53 52 58 59 69 59 4c 2b 61 43 6a 56 77 6f 73 59 34 61 78 6b 64 4d 7a 79 71 6a 34 2f 79 35 78 4f 79 32 63 46 69 70 35 58 45 37 73 4f 69 72 56 31 6b 56 4a 51 61 57 48 64 72 64 52 52 6d 55 63 71 79 6d 4b 71 4b 7a 64 2b 31 56 75 50 6e 47 36 56 5a 54 79 65 64 36 33 59 79 6f Data Ascii: vZDUPhHJF+442kJiXGx8PGUOAfpUtlmzYs6CDTvNDrpM7w+fDjVUeNpjYGYAg/9ZDCkMWAAAKh8B0QB42j3NgQbCQBzH8buqqpZamVxRmxJpsYJhMFIgFADFAgiUqgKpN5jeoDdoDvYU6VF6gLD+PxJ8fO/u/3dB3gyYySRXYiYL+aCjVwosY4axkdMzyqj4/y5xOy2cFip5XE7sOirV1kVJQaWHdrdRRmUcqymKqKzd+1VuPnG6VZTyed63Yyo
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 39 31 2c 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 20 37 30 25 29 3b 0d 0a 09 09 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 6f 70 61 63 69 74 79 3b 0d 0a 09 09 74 72 61 6e 73 69 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 30 2e 32 35 73 3b 0d 0a 09 09 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 30 2e 35 73 3b 0d 0a 09 0d 0a 7d 0d 0a 2e 43 6f 6c 6c 61 70 73 69 62 6c 65 50 61 6e 65 6c 0d 0a 7b 0d 0a 0d 0a 0d 0a 7d 0d 0a 2e 43 6f 6c 6c 61 70 73 69 62 6c 65 50 61 6e 65 6c 20 2e 48 65 61 64 65 72 0d 0a 7b 0d 0a 0d 0a 09 09 70 61 64 64 69 6e 67 3a 20 34 70 78 20 38 70 78 3b 0d 0a 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 Data Ascii: 91, rgba(0,0,0,0) 70%);transition-property: opacity;transition-delay: 0.25s;transition-duration: 0.5s;}.CollapsiblePanel{}.CollapsiblePanel .Header{padding: 4px 8px;width: 100%;display: -webkit-box;display:
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 43 30 78 4c 6a 59 77 4d 44 51 75 4d 44 41 35 4e 47 4d 74 4c 6a 51 33 4e 6a 51 75 4e 44 51 34 4e 69 30 75 4e 44 6b 30 4d 79 41 78 4c 6a 49 74 4c 6a 41 7a 4f 54 6b 67 4d 53 34 32 4e 7a 41 34 62 44 4d 75 4e 44 59 31 4e 43 41 7a 4c 6a 55 35 4d 44 68 6a 4c 6a 59 7a 4d 6a 55 75 4e 6a 55 31 4e 43 41 78 4c 6a 59 35 4f 44 55 75 4e 6a 41 77 4e 43 41 79 4c 6a 49 32 4d 44 49 74 4c 6a 45 78 4e 6a 68 4d 4d 54 6b 75 4d 44 49 31 4e 53 41 32 4c 6a 6b 35 4e 6c 6f 69 49 47 5a 70 62 47 77 39 49 69 4d 33 52 44 64 45 4e 30 51 69 4c 7a 34 38 4c 32 63 2b 50 47 52 6c 5a 6e 4d 2b 50 47 4e 73 61 58 42 51 59 58 52 6f 49 47 6c 6b 50 53 4a 68 49 6a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 5a 6d 5a 6d 49 69 42 6b 50 53 4a 4e 4d 43 41 77 61 44 49 30 64 6a 49 30 53 44 42 36 Data Ascii: C0xLjYwMDQuMDA5NGMtLjQ3NjQuNDQ4Ni0uNDk0MyAxLjItLjAzOTkgMS42NzA4bDMuNDY1NCAzLjU5MDhjLjYzMjUuNjU1NCAxLjY5ODUuNjAwNCAyLjI2MDItLjExNjhMMTkuMDI1NSA2Ljk5NloiIGZpbGw9IiM3RDdEN0QiLz48L2c+PGRlZnM+PGNsaXBQYXRoIGlkPSJhIj48cGF0aCBmaWxsPSIjZmZmIiBkPSJNMCAwaDI0djI0SDB6
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 72 79 49 74 65 6d 52 65 73 70 6f 6e 73 65 20 2e 52 65 73 70 6f 6e 64 54 6f 45 6c 65 76 61 74 69 6f 6e 52 65 71 75 65 73 74 2c 0d 0a 2e 48 69 73 74 6f 72 79 50 61 6e 65 6c 20 2e 52 65 71 75 65 73 74 65 64 41 64 6d 69 6e 69 73 74 72 61 74 69 76 65 4c 6f 67 6f 6e 20 2e 42 6f 64 79 20 2e 52 65 73 70 6f 6e 73 65 20 2e 45 76 65 6e 74 48 69 73 74 6f 72 79 49 74 65 6d 52 65 73 70 6f 6e 73 65 20 2e 52 65 73 70 6f 6e 64 54 6f 41 64 6d 69 6e 69 73 74 72 61 74 69 76 65 4c 6f 67 6f 6e 52 65 71 75 65 73 74 2c 0d 0a 2e 48 69 73 74 6f 72 79 50 61 6e 65 6c 20 2e 51 75 65 75 65 64 50 72 6f 63 65 65 64 45 6c 65 76 61 74 69 6f 6e 20 2e 42 6f 64 79 20 2e 52 65 73 70 6f 6e 73 65 20 2e 45 76 65 6e 74 48 69 73 74 6f 72 79 49 74 65 6d 52 65 73 70 6f 6e 73 65 20 2e 52 65 73 70 6f Data Ascii: ryItemResponse .RespondToElevationRequest,.HistoryPanel .RequestedAdministrativeLogon .Body .Response .EventHistoryItemResponse .RespondToAdministrativeLogonRequest,.HistoryPanel .QueuedProceedElevation .Body .Response .EventHistoryItemResponse .Respo
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 34 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 34 70 78 20 31 32 70 78 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 0d 0a 7d 0d 0a 2e 53 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 0d 0a 7b 0d 0a 0d 0a 09 09 63 6f 6c 6f 72 3a 20 23 37 44 37 44 37 44 3b 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 35 32 35 32 35 32 3b 0d 0a 09 09 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0d 0a 09 0d 0a 7d 0d 0a 2e 53 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 3a 68 6f 76 65 72 0d 0a 7b 0d 0a 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 38 33 38 33 38 3b 0d 0a 09 0d 0a 7d 0d 0a 2e 52 65 73 6f 75 72 63 65 50 61 6e 65 6c 20 2e 49 6d 61 67 65 52 65 73 6f 75 Data Ascii: 4px;padding: 4px 12px;text-decoration: none;}.SecondaryButton:disabled{color: #7D7D7D;background-color: #525252;cursor: default;}.SecondaryButton:hover{background-color: #383838;}.ResourcePanel .ImageResou

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:03 UTC	619	OUT	GET /Scripts/SC.main.ts?ScriptImportType=Classic&__Cache=032eafde-1178-487f-bebd-209f0896ce37 HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:04 UTC	317	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=3600 Content-Length: 270794 Content-Type: text/javascript Expires: Fri, 24 Jan 2025 21:07:03 GMT Vary: Accept-Encoding Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Date: Fri, 24 Jan 2025 20:07:04 GMT Connection: close
2025-01-24 20:07:04 UTC	16067	IN	Data Raw: 28 28 29 20 3d 3e 20 7b 0a 20 20 76 61 72 20 5f 5f 64 65 66 50 72 6f 70 20 3d 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 0a 20 20 76 61 72 20 5f 5f 64 65 66 50 72 6f 70 73 20 3d 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3b 0a 20 20 76 61 72 20 5f 5f 67 65 74 4f 77 6e 50 72 6f 70 44 65 73 63 73 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3b 0a 20 20 76 61 72 20 5f 5f 67 65 74 4f 77 6e 50 72 6f 70 53 79 6d 62 6f 6c 73 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3b 0a 20 20 76 61 72 20 5f 5f 68 61 73 4f 77 6e 50 72 6f 70 20 3d 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 Data Ascii: (() => { var __defProp = Object.defineProperty; var __defProps = Object.defineProperties; var __getOwnPropDescs = Object.getOwnPropertyDescriptors; var __getOwnPropSymbols = Object.getOwnPropertySymbols; var __hasOwnProp = Object.prototype.hasOw
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 47 65 74 55 6e 69 74 6c 65 73 73 56 61 6c 75 65 73 0a 20 20 7d 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 74 61 69 6e 73 43 6c 61 73 73 28 65 6c 65 6d 65 6e 74 2c 20 63 6c 61 73 73 4e 61 6d 65 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 21 53 43 2e 75 74 69 6c 2e 69 73 4e 75 6c 6c 4f 72 45 6d 70 74 79 28 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 29 20 26 26 20 28 22 20 22 20 2b 20 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 2b 20 22 20 22 29 2e 69 6e 64 65 78 4f 66 28 22 20 22 20 2b 20 63 6c 61 73 73 4e 61 6d 65 20 2b 20 22 20 22 29 20 21 3d 20 2d 31 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 43 6c 61 73 73 28 65 6c 65 6d 65 6e 74 2c 20 63 6c 61 73 73 4e 61 6d 65 29 20 7b 0a 20 20 20 20 69 66 20 28 63 Data Ascii: GetUnitlessValues }); function containsClass(element, className) { return !SC.util.isNullOrEmpty(element.className) && (" " + element.className + " ").indexOf(" " + className + " ") != -1; } function toggleClass(element, className) { if (c
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 64 54 69 74 6c 65 54 65 78 74 2c 0a 20 20 20 20 20 20 73 68 6f 75 6c 64 46 6f 63 75 73 4f 6e 42 75 74 74 6f 6e 3a 20 21 72 65 71 75 69 72 65 73 44 61 74 61 2c 0a 20 20 20 20 20 20 73 68 6f 75 6c 64 46 6f 63 75 73 4f 6e 46 69 72 73 74 49 6e 70 75 74 45 6c 65 6d 65 6e 74 3a 20 72 65 71 75 69 72 65 73 44 61 74 61 2c 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 5b 0a 20 20 20 20 20 20 20 20 24 64 69 76 28 7b 20 63 6c 61 73 73 4e 61 6d 65 3a 20 63 6f 6d 6d 61 6e 64 4e 61 6d 65 20 2b 20 22 49 6d 61 67 65 20 43 6f 6d 6d 61 6e 64 49 6d 61 67 65 22 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 24 70 28 7b 20 5f 69 6e 6e 65 72 48 54 4d 4c 54 6f 42 65 53 61 6e 69 74 69 7a 65 64 3a 20 53 43 2e 72 65 73 5b 22 43 6f 6d 6d 61 6e 64 2e 22 20 2b 20 63 6f 6d 6d 61 6e 64 4e 61 Data Ascii: dTitleText, shouldFocusOnButton: !requiresData, shouldFocusOnFirstInputElement: requiresData, content: [ $div({ className: commandName + "Image CommandImage" }), $p({ _innerHTMLToBeSanitized: SC.res["Command." + commandNa
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 20 65 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 76 65 6e 74 4e 61 6d 65 2c 20 66 75 6e 63 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 65 6c 65 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 20 2b 20 65 76 65 6e 74 4e 61 6d 65 2c 20 66 75 6e 63 29 3b 0a 20 20 20 20 65 6c 73 65 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 5b 22 6f 6e 22 20 2b 20 65 76 65 6e 74 4e 61 6d 65 5d 20 3d 20 66 75 6e 63 3b 0a 20 20 20 20 69 66 20 28 65 76 65 6e 74 4e 61 6d 65 20 21 3d 3d 20 22 64 61 74 61 61 76 61 69 6c 61 62 6c 65 22 20 26 26 20 53 43 2e 75 74 69 Data Ascii: element.addEventListener(eventName, func, false); else if (typeof element.attachEvent !== "undefined") element.attachEvent("on" + eventName, func); else element["on" + eventName] = func; if (eventName !== "dataavailable" && SC.uti
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 65 72 63 65 6e 74 61 67 65 29 2e 74 6f 46 69 78 65 64 28 32 29 20 2b 20 22 25 3b 22 2c 20 74 69 74 6c 65 3a 20 28 31 30 30 20 2d 20 70 65 72 63 65 6e 74 61 67 65 29 2e 74 6f 46 69 78 65 64 28 32 29 20 2b 20 22 25 22 20 7d 29 0a 20 20 20 20 5d 29 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 49 6e 66 6f 49 63 6f 6e 28 74 6f 6f 6c 74 69 70 54 65 78 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 74 6f 6f 6c 74 69 70 54 65 78 74 20 3f 20 24 73 70 61 6e 28 7b 0a 20 20 20 20 20 20 63 6c 61 73 73 4e 61 6d 65 3a 20 22 49 6e 66 6f 49 63 6f 6e 22 2c 0a 20 20 20 20 20 20 6f 6e 6d 6f 75 73 65 65 6e 74 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 53 43 2e 74 6f 6f 6c 74 69 70 2e 73 68 6f 77 50 61 6e 65 6c 28 74 68 Data Ascii: ercentage).toFixed(2) + "%;", title: (100 - percentage).toFixed(2) + "%" }) ]); } function createInfoIcon(tooltipText) { return tooltipText ? $span({ className: "InfoIcon", onmouseenter: function() { SC.tooltip.showPanel(th
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 67 73 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 20 20 20 20 20 20 20 20 65 76 65 6e 74 41 72 67 73 2e 64 61 74 61 54 72 61 6e 73 66 65 72 2e 64 72 6f 70 45 66 66 65 63 74 20 3d 20 22 63 6f 70 79 22 3b 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 69 6d 61 67 65 53 65 6c 65 63 74 6f 72 50 61 6e 65 6c 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 45 64 69 74 61 62 6c 65 49 6e 70 75 74 28 63 6f 6d 6d 61 6e 64 4e 61 6d 65 2c 20 70 72 6f 70 65 72 74 69 65 73 2c 20 63 61 6e 63 65 6c 42 6c 75 72 2c 20 6f 6e 46 6f 63 75 73 2c 20 73 68 6f 75 6c 64 44 69 73 70 61 74 63 68 43 6f 6d 6d 61 6e 64 4f 6e 4b 65 79 55 70 29 20 7b 0a 20 20 20 20 76 61 72 20 66 69 65 6c 64 20 3d 20 24 69 6e 70 75 74 Data Ascii: gs.preventDefault(); eventArgs.dataTransfer.dropEffect = "copy"; }); } return imageSelectorPanel; } function createEditableInput(commandName, properties, cancelBlur, onFocus, shouldDispatchCommandOnKeyUp) { var field = $input
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 4f 70 65 6e 45 6d 61 69 6c 22 3a 0a 20 20 20 20 20 20 20 20 20 20 65 6d 61 69 6c 42 6f 64 79 52 65 73 6f 75 72 63 65 49 6e 66 6f 20 3d 20 67 65 74 45 6d 61 69 6c 52 65 73 6f 75 72 63 65 49 6e 66 6f 46 75 6e 63 28 75 72 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 53 43 2e 75 74 69 6c 2e 6f 70 65 6e 43 6c 69 65 6e 74 45 6d 61 69 6c 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 53 43 2e 75 74 69 6c 2e 66 6f 72 6d 61 74 53 74 72 69 6e 67 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 43 2e 75 74 69 6c 2e 67 65 74 52 65 73 6f 75 72 63 65 57 69 74 68 46 61 6c 6c 62 61 63 6b 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: break; case "OpenEmail": emailBodyResourceInfo = getEmailResourceInfoFunc(url); SC.util.openClientEmail( null, SC.util.formatString( SC.util.getResourceWithFallback(
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 3a 20 22 22 29 20 2b 20 22 20 22 20 2b 20 53 43 2e 75 74 69 6c 2e 66 6f 72 6d 61 74 44 61 74 65 54 69 6d 65 28 6e 65 77 20 44 61 74 65 28 73 75 62 45 76 65 6e 74 2e 74 69 6d 65 29 2c 20 7b 20 69 6e 63 6c 75 64 65 46 75 6c 6c 44 61 74 65 3a 20 74 72 75 65 2c 20 69 6e 63 6c 75 64 65 52 65 6c 61 74 69 76 65 44 61 74 65 3a 20 74 72 75 65 2c 20 69 6e 63 6c 75 64 65 53 65 63 6f 6e 64 73 3a 20 74 72 75 65 20 7d 29 20 2b 20 28 73 75 62 45 76 65 6e 74 2e 64 61 74 61 20 3f 20 53 43 2e 75 74 69 6c 2e 66 6f 72 6d 61 74 53 74 72 69 6e 67 28 53 43 2e 72 65 73 5b 22 53 65 73 73 69 6f 6e 45 76 65 6e 74 53 75 62 45 76 65 6e 74 2e 44 61 74 61 46 6f 72 6d 61 74 22 5d 2c 20 73 75 62 45 76 65 6e 74 2e 64 61 74 61 29 20 3a 20 22 22 29 3b 0a 20 20 20 20 20 20 72 65 74 75 72 6e Data Ascii: : "") + " " + SC.util.formatDateTime(new Date(subEvent.time), { includeFullDate: true, includeRelativeDate: true, includeSeconds: true }) + (subEvent.data ? SC.util.formatString(SC.res["SessionEventSubEvent.DataFormat"], subEvent.data) : ""); return
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 74 3a 20 22 42 75 69 6c 64 49 6e 73 74 61 6c 6c 65 72 50 61 6e 65 6c 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 6f 75 72 63 65 4e 61 6d 65 46 6f 72 6d 61 74 41 72 67 73 3a 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 6f 75 72 63 65 46 6f 72 6d 61 74 41 72 67 73 3a 20 5b 53 43 2e 63 6f 6e 74 65 78 74 2e 75 73 65 72 44 69 73 70 6c 61 79 4e 61 6d 65 2c 20 75 72 6c 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 29 0a 20 20 20 20 20 20 5d 0a 20 20 20 20 29 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 49 6e 73 74 61 6c 6c 41 63 63 65 73 73 44 69 61 6c 6f 67 28 6f 6e 53 75 62 6d 69 74 29 20 7b 0a 20 20 20 20 73 68 6f 77 44 69 61 6c 6f 67 28 Data Ascii: t: "BuildInstallerPanel.", resourceNameFormatArgs: [], resourceFormatArgs: [SC.context.userDisplayName, url] }; } ) ] ); } function showInstallAccessDialog(onSubmit) { showDialog(
2025-01-24 20:07:04 UTC	16384	IN	Data Raw: 20 3f 20 53 43 2e 63 6f 6e 74 65 78 74 2e 69 6e 73 74 61 6e 63 65 55 72 6c 53 63 68 65 6d 65 20 3a 20 53 43 2e 75 74 69 6c 2e 69 73 43 61 70 61 62 6c 65 28 53 43 2e 75 74 69 6c 2e 43 61 70 73 2e 57 69 6e 64 6f 77 73 4d 6f 64 65 72 6e 29 20 3f 20 22 6d 73 2d 6c 6f 63 61 6c 2d 73 74 72 65 61 6d 22 20 3a 20 22 72 65 6c 61 79 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 72 6c 20 3d 20 67 65 74 53 63 68 65 6d 65 55 72 6c 46 75 6e 63 28 73 63 68 65 6d 65 2c 20 63 6c 70 2c 20 53 43 2e 75 74 69 6c 2e 69 73 43 61 70 61 62 6c 65 28 53 43 2e 75 74 69 6c 2e 43 61 70 73 2e 57 69 6e 64 6f 77 73 44 65 73 6b 74 6f 70 29 20 7c 7c 20 53 43 2e 75 74 69 6c 2e 69 73 43 61 70 61 62 6c 65 28 53 43 2e 75 74 69 6c 2e 43 61 70 73 2e 57 69 6e 64 6f 77 73 Data Ascii: ? SC.context.instanceUrlScheme : SC.util.isCapable(SC.util.Caps.WindowsModern) ? "ms-local-stream" : "relay"; var url = getSchemeUrlFunc(scheme, clp, SC.util.isCapable(SC.util.Caps.WindowsDesktop) \|\| SC.util.isCapable(SC.util.Caps.Windows

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:05 UTC	435	OUT	GET /Scripts/SC.main.ts?ScriptImportType=Classic&__Cache=032eafde-1178-487f-bebd-209f0896ce37 HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:05 UTC	317	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=3600 Content-Length: 270794 Content-Type: text/javascript Expires: Fri, 24 Jan 2025 21:07:05 GMT Vary: Accept-Encoding Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Date: Fri, 24 Jan 2025 20:07:05 GMT Connection: close
2025-01-24 20:07:05 UTC	16067	IN	Data Raw: 28 28 29 20 3d 3e 20 7b 0a 20 20 76 61 72 20 5f 5f 64 65 66 50 72 6f 70 20 3d 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 0a 20 20 76 61 72 20 5f 5f 64 65 66 50 72 6f 70 73 20 3d 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3b 0a 20 20 76 61 72 20 5f 5f 67 65 74 4f 77 6e 50 72 6f 70 44 65 73 63 73 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3b 0a 20 20 76 61 72 20 5f 5f 67 65 74 4f 77 6e 50 72 6f 70 53 79 6d 62 6f 6c 73 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3b 0a 20 20 76 61 72 20 5f 5f 68 61 73 4f 77 6e 50 72 6f 70 20 3d 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 Data Ascii: (() => { var __defProp = Object.defineProperty; var __defProps = Object.defineProperties; var __getOwnPropDescs = Object.getOwnPropertyDescriptors; var __getOwnPropSymbols = Object.getOwnPropertySymbols; var __hasOwnProp = Object.prototype.hasOw
2025-01-24 20:07:05 UTC	16384	IN	Data Raw: 47 65 74 55 6e 69 74 6c 65 73 73 56 61 6c 75 65 73 0a 20 20 7d 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 74 61 69 6e 73 43 6c 61 73 73 28 65 6c 65 6d 65 6e 74 2c 20 63 6c 61 73 73 4e 61 6d 65 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 21 53 43 2e 75 74 69 6c 2e 69 73 4e 75 6c 6c 4f 72 45 6d 70 74 79 28 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 29 20 26 26 20 28 22 20 22 20 2b 20 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 20 2b 20 22 20 22 29 2e 69 6e 64 65 78 4f 66 28 22 20 22 20 2b 20 63 6c 61 73 73 4e 61 6d 65 20 2b 20 22 20 22 29 20 21 3d 20 2d 31 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 43 6c 61 73 73 28 65 6c 65 6d 65 6e 74 2c 20 63 6c 61 73 73 4e 61 6d 65 29 20 7b 0a 20 20 20 20 69 66 20 28 63 Data Ascii: GetUnitlessValues }); function containsClass(element, className) { return !SC.util.isNullOrEmpty(element.className) && (" " + element.className + " ").indexOf(" " + className + " ") != -1; } function toggleClass(element, className) { if (c
2025-01-24 20:07:05 UTC	16384	IN	Data Raw: 64 54 69 74 6c 65 54 65 78 74 2c 0a 20 20 20 20 20 20 73 68 6f 75 6c 64 46 6f 63 75 73 4f 6e 42 75 74 74 6f 6e 3a 20 21 72 65 71 75 69 72 65 73 44 61 74 61 2c 0a 20 20 20 20 20 20 73 68 6f 75 6c 64 46 6f 63 75 73 4f 6e 46 69 72 73 74 49 6e 70 75 74 45 6c 65 6d 65 6e 74 3a 20 72 65 71 75 69 72 65 73 44 61 74 61 2c 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 5b 0a 20 20 20 20 20 20 20 20 24 64 69 76 28 7b 20 63 6c 61 73 73 4e 61 6d 65 3a 20 63 6f 6d 6d 61 6e 64 4e 61 6d 65 20 2b 20 22 49 6d 61 67 65 20 43 6f 6d 6d 61 6e 64 49 6d 61 67 65 22 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 24 70 28 7b 20 5f 69 6e 6e 65 72 48 54 4d 4c 54 6f 42 65 53 61 6e 69 74 69 7a 65 64 3a 20 53 43 2e 72 65 73 5b 22 43 6f 6d 6d 61 6e 64 2e 22 20 2b 20 63 6f 6d 6d 61 6e 64 4e 61 Data Ascii: dTitleText, shouldFocusOnButton: !requiresData, shouldFocusOnFirstInputElement: requiresData, content: [ $div({ className: commandName + "Image CommandImage" }), $p({ _innerHTMLToBeSanitized: SC.res["Command." + commandNa
2025-01-24 20:07:05 UTC	16384	IN	Data Raw: 20 65 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 76 65 6e 74 4e 61 6d 65 2c 20 66 75 6e 63 2c 20 66 61 6c 73 65 29 3b 0a 20 20 20 20 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 20 65 6c 65 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 20 2b 20 65 76 65 6e 74 4e 61 6d 65 2c 20 66 75 6e 63 29 3b 0a 20 20 20 20 65 6c 73 65 0a 20 20 20 20 20 20 65 6c 65 6d 65 6e 74 5b 22 6f 6e 22 20 2b 20 65 76 65 6e 74 4e 61 6d 65 5d 20 3d 20 66 75 6e 63 3b 0a 20 20 20 20 69 66 20 28 65 76 65 6e 74 4e 61 6d 65 20 21 3d 3d 20 22 64 61 74 61 61 76 61 69 6c 61 62 6c 65 22 20 26 26 20 53 43 2e 75 74 69 Data Ascii: element.addEventListener(eventName, func, false); else if (typeof element.attachEvent !== "undefined") element.attachEvent("on" + eventName, func); else element["on" + eventName] = func; if (eventName !== "dataavailable" && SC.uti
2025-01-24 20:07:05 UTC	16384	IN	Data Raw: 65 72 63 65 6e 74 61 67 65 29 2e 74 6f 46 69 78 65 64 28 32 29 20 2b 20 22 25 3b 22 2c 20 74 69 74 6c 65 3a 20 28 31 30 30 20 2d 20 70 65 72 63 65 6e 74 61 67 65 29 2e 74 6f 46 69 78 65 64 28 32 29 20 2b 20 22 25 22 20 7d 29 0a 20 20 20 20 5d 29 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 49 6e 66 6f 49 63 6f 6e 28 74 6f 6f 6c 74 69 70 54 65 78 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 74 6f 6f 6c 74 69 70 54 65 78 74 20 3f 20 24 73 70 61 6e 28 7b 0a 20 20 20 20 20 20 63 6c 61 73 73 4e 61 6d 65 3a 20 22 49 6e 66 6f 49 63 6f 6e 22 2c 0a 20 20 20 20 20 20 6f 6e 6d 6f 75 73 65 65 6e 74 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 53 43 2e 74 6f 6f 6c 74 69 70 2e 73 68 6f 77 50 61 6e 65 6c 28 74 68 Data Ascii: ercentage).toFixed(2) + "%;", title: (100 - percentage).toFixed(2) + "%" }) ]); } function createInfoIcon(tooltipText) { return tooltipText ? $span({ className: "InfoIcon", onmouseenter: function() { SC.tooltip.showPanel(th
2025-01-24 20:07:05 UTC	16384	IN	Data Raw: 67 73 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 20 20 20 20 20 20 20 20 65 76 65 6e 74 41 72 67 73 2e 64 61 74 61 54 72 61 6e 73 66 65 72 2e 64 72 6f 70 45 66 66 65 63 74 20 3d 20 22 63 6f 70 79 22 3b 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 69 6d 61 67 65 53 65 6c 65 63 74 6f 72 50 61 6e 65 6c 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 45 64 69 74 61 62 6c 65 49 6e 70 75 74 28 63 6f 6d 6d 61 6e 64 4e 61 6d 65 2c 20 70 72 6f 70 65 72 74 69 65 73 2c 20 63 61 6e 63 65 6c 42 6c 75 72 2c 20 6f 6e 46 6f 63 75 73 2c 20 73 68 6f 75 6c 64 44 69 73 70 61 74 63 68 43 6f 6d 6d 61 6e 64 4f 6e 4b 65 79 55 70 29 20 7b 0a 20 20 20 20 76 61 72 20 66 69 65 6c 64 20 3d 20 24 69 6e 70 75 74 Data Ascii: gs.preventDefault(); eventArgs.dataTransfer.dropEffect = "copy"; }); } return imageSelectorPanel; } function createEditableInput(commandName, properties, cancelBlur, onFocus, shouldDispatchCommandOnKeyUp) { var field = $input
2025-01-24 20:07:05 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 63 61 73 65 20 22 4f 70 65 6e 45 6d 61 69 6c 22 3a 0a 20 20 20 20 20 20 20 20 20 20 65 6d 61 69 6c 42 6f 64 79 52 65 73 6f 75 72 63 65 49 6e 66 6f 20 3d 20 67 65 74 45 6d 61 69 6c 52 65 73 6f 75 72 63 65 49 6e 66 6f 46 75 6e 63 28 75 72 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 53 43 2e 75 74 69 6c 2e 6f 70 65 6e 43 6c 69 65 6e 74 45 6d 61 69 6c 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 6e 75 6c 6c 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 53 43 2e 75 74 69 6c 2e 66 6f 72 6d 61 74 53 74 72 69 6e 67 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 43 2e 75 74 69 6c 2e 67 65 74 52 65 73 6f 75 72 63 65 57 69 74 68 46 61 6c 6c 62 61 63 6b 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: break; case "OpenEmail": emailBodyResourceInfo = getEmailResourceInfoFunc(url); SC.util.openClientEmail( null, SC.util.formatString( SC.util.getResourceWithFallback(
2025-01-24 20:07:05 UTC	16384	IN	Data Raw: 3a 20 22 22 29 20 2b 20 22 20 22 20 2b 20 53 43 2e 75 74 69 6c 2e 66 6f 72 6d 61 74 44 61 74 65 54 69 6d 65 28 6e 65 77 20 44 61 74 65 28 73 75 62 45 76 65 6e 74 2e 74 69 6d 65 29 2c 20 7b 20 69 6e 63 6c 75 64 65 46 75 6c 6c 44 61 74 65 3a 20 74 72 75 65 2c 20 69 6e 63 6c 75 64 65 52 65 6c 61 74 69 76 65 44 61 74 65 3a 20 74 72 75 65 2c 20 69 6e 63 6c 75 64 65 53 65 63 6f 6e 64 73 3a 20 74 72 75 65 20 7d 29 20 2b 20 28 73 75 62 45 76 65 6e 74 2e 64 61 74 61 20 3f 20 53 43 2e 75 74 69 6c 2e 66 6f 72 6d 61 74 53 74 72 69 6e 67 28 53 43 2e 72 65 73 5b 22 53 65 73 73 69 6f 6e 45 76 65 6e 74 53 75 62 45 76 65 6e 74 2e 44 61 74 61 46 6f 72 6d 61 74 22 5d 2c 20 73 75 62 45 76 65 6e 74 2e 64 61 74 61 29 20 3a 20 22 22 29 3b 0a 20 20 20 20 20 20 72 65 74 75 72 6e Data Ascii: : "") + " " + SC.util.formatDateTime(new Date(subEvent.time), { includeFullDate: true, includeRelativeDate: true, includeSeconds: true }) + (subEvent.data ? SC.util.formatString(SC.res["SessionEventSubEvent.DataFormat"], subEvent.data) : ""); return
2025-01-24 20:07:05 UTC	16384	IN	Data Raw: 74 3a 20 22 42 75 69 6c 64 49 6e 73 74 61 6c 6c 65 72 50 61 6e 65 6c 2e 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 6f 75 72 63 65 4e 61 6d 65 46 6f 72 6d 61 74 41 72 67 73 3a 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 6f 75 72 63 65 46 6f 72 6d 61 74 41 72 67 73 3a 20 5b 53 43 2e 63 6f 6e 74 65 78 74 2e 75 73 65 72 44 69 73 70 6c 61 79 4e 61 6d 65 2c 20 75 72 6c 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 29 0a 20 20 20 20 20 20 5d 0a 20 20 20 20 29 3b 0a 20 20 7d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 49 6e 73 74 61 6c 6c 41 63 63 65 73 73 44 69 61 6c 6f 67 28 6f 6e 53 75 62 6d 69 74 29 20 7b 0a 20 20 20 20 73 68 6f 77 44 69 61 6c 6f 67 28 Data Ascii: t: "BuildInstallerPanel.", resourceNameFormatArgs: [], resourceFormatArgs: [SC.context.userDisplayName, url] }; } ) ] ); } function showInstallAccessDialog(onSubmit) { showDialog(
2025-01-24 20:07:05 UTC	16384	IN	Data Raw: 20 3f 20 53 43 2e 63 6f 6e 74 65 78 74 2e 69 6e 73 74 61 6e 63 65 55 72 6c 53 63 68 65 6d 65 20 3a 20 53 43 2e 75 74 69 6c 2e 69 73 43 61 70 61 62 6c 65 28 53 43 2e 75 74 69 6c 2e 43 61 70 73 2e 57 69 6e 64 6f 77 73 4d 6f 64 65 72 6e 29 20 3f 20 22 6d 73 2d 6c 6f 63 61 6c 2d 73 74 72 65 61 6d 22 20 3a 20 22 72 65 6c 61 79 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 72 6c 20 3d 20 67 65 74 53 63 68 65 6d 65 55 72 6c 46 75 6e 63 28 73 63 68 65 6d 65 2c 20 63 6c 70 2c 20 53 43 2e 75 74 69 6c 2e 69 73 43 61 70 61 62 6c 65 28 53 43 2e 75 74 69 6c 2e 43 61 70 73 2e 57 69 6e 64 6f 77 73 44 65 73 6b 74 6f 70 29 20 7c 7c 20 53 43 2e 75 74 69 6c 2e 69 73 43 61 70 61 62 6c 65 28 53 43 2e 75 74 69 6c 2e 43 61 70 73 2e 57 69 6e 64 6f 77 73 Data Ascii: ? SC.context.instanceUrlScheme : SC.util.isCapable(SC.util.Caps.WindowsModern) ? "ms-local-stream" : "relay"; var url = getSchemeUrlFunc(scheme, clp, SC.util.isCapable(SC.util.Caps.WindowsDesktop) \|\| SC.util.isCapable(SC.util.Caps.Windows

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:05 UTC	775	OUT	POST /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive Content-Length: 60 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-Anti-Forgery-Token: fONzzdMHPutgdvQJqkeaJiEfL4jxUrWuSM6lsyaEkYABAACAn87TS74tQg== sec-ch-ua-mobile: ?0 X-Unauthorized-Status-Code: 403 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://control.screenbridge.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:05 UTC	60	OUT	Data Raw: 5b 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 73 65 73 73 69 6f 6e 43 6f 64 65 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 49 44 73 22 3a 5b 5d 7d 7d 2c 30 5d Data Ascii: [{"GuestSessionInfo":{"sessionCodes":[],"sessionIDs":[]}},0]
2025-01-24 20:07:05 UTC	398	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 144 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://control.screenbridge.es Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:05 GMT Connection: close
2025-01-24 20:07:05 UTC	144	IN	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 33 36 31 33 32 38 36 38 39 2c 22 50 72 6f 64 75 63 74 56 65 72 73 69 6f 6e 22 3a 22 32 34 2e 33 2e 37 2e 39 30 36 37 22 2c 22 52 65 73 70 6f 6e 73 65 49 6e 66 6f 4d 61 70 22 3a 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 44 6f 4e 6f 6e 50 75 62 6c 69 63 43 6f 64 65 53 65 73 73 69 6f 6e 73 45 78 69 73 74 22 3a 66 61 6c 73 65 2c 22 53 65 73 73 69 6f 6e 73 22 3a 5b 5d 7d 7d 7d Data Ascii: {"Version":361328689,"ProductVersion":"24.3.7.9067","ResponseInfoMap":{"GuestSessionInfo":{"DoNonPublicCodeSessionsExist":false,"Sessions":[]}}}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 4 bits/pixel, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 4 bits/pixel
Category:	downloaded
Size (bytes):	1538
Entropy (8bit):	7.676578793253051
Encrypted:	false
SSDEEP:	24:QxZAmHnjeSWMZrl/lmL//9U6SyYiwhhI2XeVtiV76pK0s4aVwdh2vJLUlX2NEWHb:QxZdj9AL//Miw/IiSK0s4awwJo47b
MD5:	D9C91E92AF6776E767700C6F0C258EC0
SHA1:	D083B5B8F069ABD44BA4C30D806220375CE3E7EE
SHA-256:	0B95167676069A859A7535CE88E2B9F82520485D0102400D6D3E38A21F7C1F72
SHA-512:	06DB40E54216DDC7F20DE265A4C1B4D6CD054E64E305AA9D1300B9024662DD43A0796715BB95B88680CD6D4B94041159680E8888BB356A007177959BB1B591F0
Malicious:	false
Reputation:	low
URL:	https://control.screenbridge.es/FavIcon.axd?__Cache=7437b908-efcc-4bb8-9ee3-9889a18f79e3
Preview:	..............B...&... ..........h....PNG........IHDR................a....pHYs...#...#.x.?v....IDATx.c`.\@.X.AA..A^..H.`b.f.i=m...jh1(..gP4....!.W.D..q.!.6@P..M..ARM...u.%.......,..{7..m=.G.L..4u....o..........7Q...rG.:".&.k....;>h.Z.. .~..P...#G...]..AT./.e.G.....}....}7%W.... .cG.......-.b..YJ.....G..p...A...l....,....@.X..vlk...Gb.FN..@o..U..F..;g.].$ .j......O.r2..LdP....'&{.@'..`.@^......%0..v..:..........;./../.....e...>.........{.~........Y(\.P#w.p..s...1..du...3...f..;K.^..i.6;.I........t..... ..b~....`....9...~Em......!&.'0....r.S......a!........3.44..W....}....L....IEND.B`..PNG........IHDR... ... .....szz.....pHYs...t...t..f.x...LIDATx...O.A..'.....*.n+.iw.... '.d.^..1h....x@N..7x..CA......D..7..cI.F..M.Z.....\|.tv..gf..f.)G9v.I.$..DR'@..$..SD.F..s. .......{yOS..g"..w...+.DV!I.{.....$.....pp9........NZ...;\(.u..V!p..-.d..\|$........b......ju....\|<..t=.!G.....cY...`..^~n.."....~...v3$..].w.%..?.u.....s....i.c.A.j..)..".Fqy9.T.J..O..J.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	346
Entropy (8bit):	5.163355813248498
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhyKd49fhWR6mqZlllZmSgT9j+VsVNkFuuHSjAcAA8:t4BdEK2zhllls4sVU3Q8b
MD5:	76FA773933E8313A93F5DEE59E919D83
SHA1:	DB438D4795023149A335DFE1C7DCFA1C5F09FEE6
SHA-256:	81FCE97D96268840367D7F9119333C8BFCCF3A633A68006A87240288A085B0B1
SHA-512:	797B037627C3F3EBEDCB4629FF8019B68D525C707FE969C9B8A7E2D816816009DD8CC470CE6447031F1B8835B05EBC30116A4F41E9C20B34E026E920A89428D7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none"><g stroke="#fff" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" clip-path="url(#a)"><path d="M18 8A6 6 0 1 0 6 8c0 7-3 9-3 9h18s-3-2-3-9ZM13.73 21a2 2 0 0 1-3.46 0"/></g><defs><clipPath id="a"><path fill="#fff" d="M0 0h24v24H0z"/></clipPath></defs></svg>

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (647), with CRLF line terminators
Category:	downloaded
Size (bytes):	32435
Entropy (8bit):	5.268686411496356
Encrypted:	false
SSDEEP:	768:jOvOwZW/e/1h/Q0/Qg/pkkk8LTqDY/MmAGgxVO/D:jEOPK19Q0QIpyfcMNVO/D
MD5:	86313140E5F1ADE951AC0C1E95518FC9
SHA1:	C39C4BA62C11001DCB330823C00C4CB6D1E2F23C
SHA-256:	276242E312512D66C903B2D5D41AC5DDF44901D058806D65E4A0FB9BDBC065B6
SHA-512:	77B79010DC650DA184B94FF4BBF8DB5AB148A1935C59241AF9103C2B7A4AB600348B36F8D6AF7E9AA66EA83056026CAFF2CF85906B1918FE1D08ADFDC26591CC
Malicious:	false
Reputation:	low
URL:	https://control.screenbridge.es/
Preview:	..<!DOCTYPE html>..<html>..<head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" />...<script>......function setTaggedSessionInfo(tag, taggedSessionInfo) {.....var oldTaggedSessionInfo = window._taggedSessionInfos[tag];.....window._taggedSessionInfos[tag] = taggedSessionInfo;.......if (!oldTaggedSessionInfo \|\| taggedSessionInfo.SessionID != oldTaggedSessionInfo.SessionID \|\| taggedSessionInfo.Code != oldTaggedSessionInfo.Code)......SC.livedata.notifyDirty();....}......// backwards compatibility with extensions....function setTaggedSessionID(tag, sessionID) {.....window.setTaggedSessionInfo(tag, { SessionID: sessionID });....}......function getTaggedSessionInfo(tag) {.....return window._taggedSessionInfos[tag];....}........function getSessionInfo() {.....var liveData = SC.livedata.get();.....return liveData && liveData.ResponseInfoMap && liveData.ResponseInfoMap['GuestSessionInfo

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	821
Entropy (8bit):	4.800266067300724
Encrypted:	false
SSDEEP:	12:tvG1m++rIvPzn7PzWPzMWxqznOWxqzjWxqzqznczRz2:tu1m+wePz7PzWPzAzmzzzqzczRz2
MD5:	2599340BF60EE89B13E6B91BEEFE1199
SHA1:	4E0BABCD7FDCABC1759ED0F130E06972340C5127
SHA-256:	5BF4F707F250958980D313203989F1FCA55B9446F34D667E7256F853D52E494D
SHA-512:	B22AB922530CBABC1C9A2800218F620060B1BE8B69EF67D47A8ABA5F3897B1E651D1CF8025E933CFA70CC26FA8E50F8AC0F4318E51D3F876F2CEF3F6B278AD19
Malicious:	false
Reputation:	low
URL:	https://control.screenbridge.es/Images/Applications.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48"><defs><style>.cls-1{fill:#fff;}</style></defs><title>WaffleIcon</title><rect class="cls-1" x="32.05" y="7" width="8.95" height="8.95" rx="2"/><rect class="cls-1" x="19.53" y="7" width="8.95" height="8.95" rx="2"/><rect class="cls-1" x="7" y="7" width="8.95" height="8.95" rx="2"/><rect class="cls-1" x="32.05" y="19.53" width="8.95" height="8.95" rx="2"/><rect class="cls-1" x="19.53" y="19.53" width="8.95" height="8.95" rx="2"/><rect class="cls-1" x="7" y="19.53" width="8.95" height="8.95" rx="2"/><rect class="cls-1" x="32.05" y="32.05" width="8.95" height="8.95" rx="2"/><rect class="cls-1" x="19.53" y="32.05" width="8.95" height="8.95" rx="2"/><rect class="cls-1" x="7" y="32.05" width="8.95" height="8.95" rx="2"/></svg>

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:05 UTC	730	OUT	GET /App_Themes/DarkTeal/Default.css?r=Page.Background&__Cache=57459 HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://control.screenbridge.es/App_Themes/DarkTeal/Default.css?__Cache=5223953d-a3cf-490c-a63d-57edd0173ba6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:05 UTC	314	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=3600 Content-Length: 57459 Content-Type: image/svg+xml Expires: Fri, 24 Jan 2025 21:07:05 GMT Vary: Accept-Encoding Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Date: Fri, 24 Jan 2025 20:07:05 GMT Connection: close
2025-01-24 20:07:05 UTC	16070	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 36 30 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 61 29 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 30 68 32 36 30 30 76 31 39 30 30 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 64 3d 22 4d 32 36 31 31 2d 32 33 48 2d 37 76 39 37 36 68 32 36 31 38 56 2d 32 33 5a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 64 3d 22 4d 2d 35 31 2e 33 20 31 37 36 33 48 32 36 36 39 56 39 35 38 48 2d 35 31 2e 33 76 38 30 35 5a 22 2f 3e 3c 70 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="2600" height="1900" fill="none"><g clip-path="url(#a)"><path fill="#fff" d="M0 0h2600v1900H0z"/><path fill="url(#b)" d="M2611-23H-7v976h2618V-23Z"/><path fill="url(#c)" d="M-51.3 1763H2669V958H-51.3v805Z"/><p
2025-01-24 20:07:06 UTC	16384	IN	Data Raw: 2e 37 20 32 2e 36 20 31 38 2e 34 20 32 2e 36 20 32 35 2e 35 20 37 2e 37 20 34 38 2e 34 20 33 34 2e 38 20 39 39 2e 33 20 35 30 2e 38 20 31 35 30 2e 32 20 37 34 2e 34 5a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 45 45 22 20 64 3d 22 4d 31 31 30 37 20 36 31 39 2e 33 61 39 38 20 39 38 20 30 20 30 20 30 2d 31 37 2e 32 2d 32 31 63 2d 33 2e 37 2d 33 2e 38 20 32 2e 35 2d 31 33 2e 37 20 30 2d 31 38 2e 37 2d 31 2e 33 2d 32 2e 35 2d 31 30 20 30 2d 31 33 2e 37 2d 35 20 31 2e 34 2d 2e 35 20 32 2e 38 2d 31 2e 31 20 34 2d 31 2e 38 2d 37 2e 33 20 32 2e 32 2d 37 2e 37 2d 32 2e 37 2d 37 2e 37 2d 32 2e 37 2d 31 35 2e 34 2d 31 36 2e 33 2d 32 39 2e 32 2d 32 30 2e 31 2d 34 30 2e 35 2d 31 38 2e 36 20 35 2e 32 20 35 2e 32 20 31 30 20 31 30 2e 36 20 37 20 31 34 2e 35 2d Data Ascii: .7 2.6 18.4 2.6 25.5 7.7 48.4 34.8 99.3 50.8 150.2 74.4Z"/><path fill="#EEE" d="M1107 619.3a98 98 0 0 0-17.2-21c-3.7-3.8 2.5-13.7 0-18.7-1.3-2.5-10 0-13.7-5 1.4-.5 2.8-1.1 4-1.8-7.3 2.2-7.7-2.7-7.7-2.7-15.4-16.3-29.2-20.1-40.5-18.6 5.2 5.2 10 10.6 7 14.5-
2025-01-24 20:07:06 UTC	16384	IN	Data Raw: 33 2e 32 20 33 2e 32 6c 2d 38 2e 33 20 39 2e 32 73 2d 31 2e 31 20 31 2e 39 2d 31 2e 31 20 32 2e 35 63 30 20 2e 37 2d 32 2e 32 20 34 2e 33 2d 32 2e 32 20 34 2e 33 73 2d 33 20 34 2e 34 2d 33 20 35 2e 33 63 2e 32 2e 39 2d 33 2e 36 20 32 2e 32 2d 35 2e 36 20 33 2d 32 20 31 2d 33 20 2e 37 2d 33 20 2e 37 6c 2d 2e 36 2d 33 20 32 2e 38 2d 2e 33 63 32 2e 38 2d 2e 33 2e 34 2d 31 2e 33 20 30 2d 31 2e 36 2d 2e 34 2d 2e 32 2d 31 2e 34 2d 31 2e 34 2d 32 2e 31 2d 32 2d 2e 37 2d 2e 34 2d 31 2d 2e 34 2d 33 2d 31 2d 32 2d 2e 34 2d 31 2e 35 2d 31 2e 38 2d 31 2e 35 2d 31 2e 38 73 2d 2e 32 2d 31 2e 38 2e 36 2d 32 2e 34 63 2e 38 2d 2e 36 20 30 20 30 20 2e 38 2d 2e 31 2e 38 2d 2e 32 20 32 2d 2e 32 20 33 2d 2e 32 20 31 2e 32 20 30 20 34 2e 35 2d 31 20 34 2e 35 2d 31 73 2d 32 2e Data Ascii: 3.2 3.2l-8.3 9.2s-1.1 1.9-1.1 2.5c0 .7-2.2 4.3-2.2 4.3s-3 4.4-3 5.3c.2.9-3.6 2.2-5.6 3-2 1-3 .7-3 .7l-.6-3 2.8-.3c2.8-.3.4-1.3 0-1.6-.4-.2-1.4-1.4-2.1-2-.7-.4-1-.4-3-1-2-.4-1.5-1.8-1.5-1.8s-.2-1.8.6-2.4c.8-.6 0 0 .8-.1.8-.2 2-.2 3-.2 1.2 0 4.5-1 4.5-1s-2.
2025-01-24 20:07:06 UTC	8621	IN	Data Raw: 36 20 33 36 20 30 20 30 20 31 2d 31 2e 37 20 32 2e 33 63 2d 2e 39 20 31 2d 32 2e 34 20 31 2e 39 2d 33 2e 31 20 31 2e 36 2d 2e 38 2d 2e 32 2d 31 2e 37 2d 31 2e 32 2d 32 2e 31 2d 32 2e 33 61 38 2e 36 20 38 2e 36 20 30 20 30 20 30 2d 31 2e 36 2d 33 2e 31 6c 2d 32 2d 31 63 2d 31 2d 2e 33 2d 32 2e 32 2d 31 2d 32 2e 38 2d 31 2e 34 2d 31 2e 32 2d 2e 38 2d 31 2e 33 2d 2e 39 2d 31 2e 36 2d 2e 36 5a 4d 31 39 37 31 2e 32 20 35 33 37 2e 36 63 2d 2e 34 2e 34 2d 33 20 2e 36 2d 35 2e 38 2e 35 2d 34 2e 33 20 30 2d 35 2e 37 2e 34 2d 39 2e 36 20 33 2e 34 2d 32 2e 35 20 32 2d 35 2e 32 20 33 2e 35 2d 36 20 33 2e 35 2d 2e 37 20 30 2d 31 2e 33 2e 35 2d 31 2e 33 20 31 20 30 20 31 2e 35 20 35 20 2e 32 20 38 2e 32 2d 32 2e 31 20 31 2e 37 2d 31 2e 32 20 34 2e 34 2d 31 2e 39 20 37 Data Ascii: 6 36 0 0 1-1.7 2.3c-.9 1-2.4 1.9-3.1 1.6-.8-.2-1.7-1.2-2.1-2.3a8.6 8.6 0 0 0-1.6-3.1l-2-1c-1-.3-2.2-1-2.8-1.4-1.2-.8-1.3-.9-1.6-.6ZM1971.2 537.6c-.4.4-3 .6-5.8.5-4.3 0-5.7.4-9.6 3.4-2.5 2-5.2 3.5-6 3.5-.7 0-1.3.5-1.3 1 0 1.5 5 .2 8.2-2.1 1.7-1.2 4.4-1.9 7

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:05 UTC	695	OUT	GET /Images/ActivityIndicator.gif HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://control.screenbridge.es/App_Themes/DarkTeal/Default.css?__Cache=5223953d-a3cf-490c-a63d-57edd0173ba6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:05 UTC	366	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 27503 Content-Type: image/gif Expires: Sat, 25 Jan 2025 20:00:46 GMT Last-Modified: Wed, 24 Jul 2024 03:11:42 GMT Accept-Ranges: bytes ETag: "1DADD7734F26B00" Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Date: Fri, 24 Jan 2025 20:07:05 GMT Connection: close
2025-01-24 20:07:05 UTC	16018	IN	Data Raw: 47 49 46 38 39 61 c8 00 c8 00 f3 0d 00 77 77 77 78 78 78 7e 7e 7e 82 82 82 86 86 86 88 88 88 8e 8e 8e 91 91 91 98 98 98 9c 9c 9c a1 a1 a1 94 94 94 a2 a2 a2 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 04 00 0d 00 2c 00 00 00 00 c8 00 c8 00 00 04 ff b0 c9 49 ab bd 38 eb cd bb ff 60 28 8e 64 69 9e 9a 92 20 87 51 10 c2 10 07 81 60 0f f8 40 14 c6 82 28 a8 a0 70 48 2c 66 14 ac c2 20 00 68 3a 9f d0 a8 93 59 1b f0 7e c6 ac 76 9b 4d 1c 60 4c a9 78 1c 0d 53 6b 85 45 82 cb 6e bb 2f 09 83 2c 4c ae db 69 63 01 c1 b0 7e fb ff 28 08 05 02 74 76 86 87 75 35 7c 80 8c 8d 1a 82 34 85 88 93 94 52 02 8b 8e 99 7f 0a 72 91 92 95 a0 a1 8a 7d 9a a5 46 0b 04 a1 aa ab 63 01 03 0b a6 b1 27 0a 07 02 ac b7 b8 53 00 97 40 b2 be 1d 0a Data Ascii: GIF89awwwxxx~~~!NETSCAPE2.0!,I8`(di Q`@(pH,f h:Y~vM`LxSkEn/,Lic~(tvu5\|4Rr}Fc'S@
2025-01-24 20:07:05 UTC	11485	IN	Data Raw: 39 3e ae 12 6a 97 01 79 ff 4d 62 7f 1b 37 0d 66 b2 83 37 4c 4e 48 0e c0 e8 34 74 0e 34 e5 26 b5 34 37 17 55 0c bd 33 c3 48 89 bb 33 d6 41 b8 2d 39 63 9f 2f 64 f8 40 9c 58 61 b6 8e 88 43 a4 80 ec b3 93 0d 84 e5 1c 2a 8f 8e d7 35 6f 8e 84 ea 18 4a 2f 8e d5 a6 c3 8e 86 de 40 33 56 3c 3a 0a 24 12 6b 6f 6a 70 ff 2d ea d0 1c 9d 3d dd 72 f4 1d 1c 01 bd 27 e3 de eb cd f0 a1 ad e4 02 a0 af cb 01 99 b7 11 fc 1c c7 5b 5f 14 08 f0 bd 5d 24 a0 64 02 94 51 fc be 10 c0 04 6e 63 81 9e 70 02 fd d6 06 41 30 b8 2f 38 93 13 c6 78 c6 c7 0e b6 3d 62 08 13 c4 83 f5 0a c1 bf 04 12 01 77 7d 78 45 08 f1 60 80 0a c6 c1 00 fd 53 c4 df e2 60 3b 13 6e a3 80 72 48 40 0d 4d 48 38 12 72 f0 5e f8 30 83 f3 ae b0 80 0b 9a 83 75 8e 40 40 0c 31 45 00 fd 29 01 01 05 b8 9f 09 f3 67 40 04 9a b0 Data Ascii: 9>jyMb7f7LNH4t4&47U3H3A-9c/d@XaC*5oJ/@3V<:$kojp-=r'[_]$dQncpA0/8x=bw}xE`S`;nrH@MH8r^0u@@1E)g@

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:05 UTC	608	OUT	GET /Images/Extras.svg HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:05 UTC	368	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 322 Content-Type: image/svg+xml Expires: Sat, 25 Jan 2025 20:00:46 GMT Last-Modified: Wed, 24 Jul 2024 03:11:42 GMT Accept-Ranges: bytes ETag: "1DADD7734F26B00" Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Date: Fri, 24 Jan 2025 20:07:05 GMT Connection: close
2025-01-24 20:07:05 UTC	322	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 32 36 20 38 76 31 32 61 32 20 32 20 30 20 30 30 32 20 32 68 31 32 61 32 20 32 20 30 20 30 30 32 2d 32 56 38 61 32 20 32 20 30 20 30 30 2d 32 2d 32 48 32 38 61 32 20 32 20 30 20 30 30 2d 32 20 32 7a 6d 31 32 20 31 30 68 2d 38 76 2d 38 68 38 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 32 32 20 32 36 56 31 36 61 32 20 32 20 30 20 30 30 2d 32 2d 32 48 38 61 32 20 32 20 30 20 30 30 2d 32 20 32 76 32 34 61 32 20 32 20 30 20 30 30 32 20 32 68 32 34 61 32 20 32 20 30 20 30 30 32 2d 32 56 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48"><path fill="#fff" d="M26 8v12a2 2 0 002 2h12a2 2 0 002-2V8a2 2 0 00-2-2H28a2 2 0 00-2 2zm12 10h-8v-8h8z"/><path fill="#fff" d="M22 26V16a2 2 0 00-2-2H8a2 2 0 00-2 2v24a2 2 0 002 2h24a2 2 0 002-2V

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:05 UTC	614	OUT	GET /Images/ActionCenter.svg HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:05 UTC	368	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 346 Content-Type: image/svg+xml Expires: Sat, 25 Jan 2025 20:00:46 GMT Last-Modified: Wed, 24 Jul 2024 03:11:42 GMT Accept-Ranges: bytes ETag: "1DADD7734F26B00" Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Date: Fri, 24 Jan 2025 20:07:05 GMT Connection: close
2025-01-24 20:07:05 UTC	346	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 73 74 72 6f 6b 65 3d 22 23 66 66 66 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 61 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 38 20 38 41 36 20 36 20 30 20 31 20 30 20 36 20 38 63 30 20 37 2d 33 20 39 2d 33 20 39 68 31 38 73 2d 33 2d 32 2d 33 2d 39 5a 4d 31 33 2e 37 33 20 32 31 61 32 20 32 20 30 20 30 20 31 2d 33 2e 34 36 20 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none"><g stroke="#fff" stroke-linecap="round" stroke-linejoin="round" stroke-width="2" clip-path="url(#a)"><path d="M18 8A6 6 0 1 0 6 8c0 7-3 9-3 9h18s-3-2-3-9ZM13.73 21a2 2 0 0 1-3.46 0

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:05 UTC	614	OUT	GET /Images/Applications.svg HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:05 UTC	368	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 821 Content-Type: image/svg+xml Expires: Sat, 25 Jan 2025 20:00:46 GMT Last-Modified: Wed, 24 Jul 2024 03:11:42 GMT Accept-Ranges: bytes ETag: "1DADD7734F26B00" Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Date: Fri, 24 Jan 2025 20:07:05 GMT Connection: close
2025-01-24 20:07:05 UTC	821	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 23 66 66 66 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 57 61 66 66 6c 65 49 63 6f 6e 3c 2f 74 69 74 6c 65 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 78 3d 22 33 32 2e 30 35 22 20 79 3d 22 37 22 20 77 69 64 74 68 3d 22 38 2e 39 35 22 20 68 65 69 67 68 74 3d 22 38 2e 39 35 22 20 72 78 3d 22 32 22 2f 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 63 6c 73 2d 31 22 20 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 48 48"><defs><style>.cls-1{fill:#fff;}</style></defs><title>WaffleIcon</title><rect class="cls-1" x="32.05" y="7" width="8.95" height="8.95" rx="2"/><rect class="cls-1"

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:06 UTC	384	OUT	GET /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:06 UTC	355	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 111 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:06 GMT Connection: close
2025-01-24 20:07:06 UTC	111	IN	Data Raw: 7b 22 65 72 72 6f 72 54 79 70 65 22 3a 22 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 45 78 63 65 70 74 69 6f 6e 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 56 61 6c 75 65 20 63 61 6e 6e 6f 74 20 62 65 20 6e 75 6c 6c 2e 5c 72 5c 6e 50 61 72 61 6d 65 74 65 72 20 6e 61 6d 65 3a 20 73 6f 75 72 63 65 22 2c 22 64 65 74 61 69 6c 22 3a 6e 75 6c 6c 7d Data Ascii: {"errorType":"ArgumentNullException","message":"Value cannot be null.\r\nParameter name: source","detail":null}

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:06 UTC	410	OUT	GET /App_Themes/DarkTeal/Default.css?r=Page.Background&__Cache=57459 HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:07 UTC	314	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=3600 Content-Length: 57459 Content-Type: image/svg+xml Expires: Fri, 24 Jan 2025 21:07:06 GMT Vary: Accept-Encoding Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Date: Fri, 24 Jan 2025 20:07:06 GMT Connection: close
2025-01-24 20:07:07 UTC	16070	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 36 30 30 22 20 68 65 69 67 68 74 3d 22 31 39 30 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 61 29 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 30 68 32 36 30 30 76 31 39 30 30 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 62 29 22 20 64 3d 22 4d 32 36 31 31 2d 32 33 48 2d 37 76 39 37 36 68 32 36 31 38 56 2d 32 33 5a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 64 3d 22 4d 2d 35 31 2e 33 20 31 37 36 33 48 32 36 36 39 56 39 35 38 48 2d 35 31 2e 33 76 38 30 35 5a 22 2f 3e 3c 70 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="2600" height="1900" fill="none"><g clip-path="url(#a)"><path fill="#fff" d="M0 0h2600v1900H0z"/><path fill="url(#b)" d="M2611-23H-7v976h2618V-23Z"/><path fill="url(#c)" d="M-51.3 1763H2669V958H-51.3v805Z"/><p
2025-01-24 20:07:07 UTC	16384	IN	Data Raw: 2e 37 20 32 2e 36 20 31 38 2e 34 20 32 2e 36 20 32 35 2e 35 20 37 2e 37 20 34 38 2e 34 20 33 34 2e 38 20 39 39 2e 33 20 35 30 2e 38 20 31 35 30 2e 32 20 37 34 2e 34 5a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 45 45 45 22 20 64 3d 22 4d 31 31 30 37 20 36 31 39 2e 33 61 39 38 20 39 38 20 30 20 30 20 30 2d 31 37 2e 32 2d 32 31 63 2d 33 2e 37 2d 33 2e 38 20 32 2e 35 2d 31 33 2e 37 20 30 2d 31 38 2e 37 2d 31 2e 33 2d 32 2e 35 2d 31 30 20 30 2d 31 33 2e 37 2d 35 20 31 2e 34 2d 2e 35 20 32 2e 38 2d 31 2e 31 20 34 2d 31 2e 38 2d 37 2e 33 20 32 2e 32 2d 37 2e 37 2d 32 2e 37 2d 37 2e 37 2d 32 2e 37 2d 31 35 2e 34 2d 31 36 2e 33 2d 32 39 2e 32 2d 32 30 2e 31 2d 34 30 2e 35 2d 31 38 2e 36 20 35 2e 32 20 35 2e 32 20 31 30 20 31 30 2e 36 20 37 20 31 34 2e 35 2d Data Ascii: .7 2.6 18.4 2.6 25.5 7.7 48.4 34.8 99.3 50.8 150.2 74.4Z"/><path fill="#EEE" d="M1107 619.3a98 98 0 0 0-17.2-21c-3.7-3.8 2.5-13.7 0-18.7-1.3-2.5-10 0-13.7-5 1.4-.5 2.8-1.1 4-1.8-7.3 2.2-7.7-2.7-7.7-2.7-15.4-16.3-29.2-20.1-40.5-18.6 5.2 5.2 10 10.6 7 14.5-
2025-01-24 20:07:07 UTC	16384	IN	Data Raw: 33 2e 32 20 33 2e 32 6c 2d 38 2e 33 20 39 2e 32 73 2d 31 2e 31 20 31 2e 39 2d 31 2e 31 20 32 2e 35 63 30 20 2e 37 2d 32 2e 32 20 34 2e 33 2d 32 2e 32 20 34 2e 33 73 2d 33 20 34 2e 34 2d 33 20 35 2e 33 63 2e 32 2e 39 2d 33 2e 36 20 32 2e 32 2d 35 2e 36 20 33 2d 32 20 31 2d 33 20 2e 37 2d 33 20 2e 37 6c 2d 2e 36 2d 33 20 32 2e 38 2d 2e 33 63 32 2e 38 2d 2e 33 2e 34 2d 31 2e 33 20 30 2d 31 2e 36 2d 2e 34 2d 2e 32 2d 31 2e 34 2d 31 2e 34 2d 32 2e 31 2d 32 2d 2e 37 2d 2e 34 2d 31 2d 2e 34 2d 33 2d 31 2d 32 2d 2e 34 2d 31 2e 35 2d 31 2e 38 2d 31 2e 35 2d 31 2e 38 73 2d 2e 32 2d 31 2e 38 2e 36 2d 32 2e 34 63 2e 38 2d 2e 36 20 30 20 30 20 2e 38 2d 2e 31 2e 38 2d 2e 32 20 32 2d 2e 32 20 33 2d 2e 32 20 31 2e 32 20 30 20 34 2e 35 2d 31 20 34 2e 35 2d 31 73 2d 32 2e Data Ascii: 3.2 3.2l-8.3 9.2s-1.1 1.9-1.1 2.5c0 .7-2.2 4.3-2.2 4.3s-3 4.4-3 5.3c.2.9-3.6 2.2-5.6 3-2 1-3 .7-3 .7l-.6-3 2.8-.3c2.8-.3.4-1.3 0-1.6-.4-.2-1.4-1.4-2.1-2-.7-.4-1-.4-3-1-2-.4-1.5-1.8-1.5-1.8s-.2-1.8.6-2.4c.8-.6 0 0 .8-.1.8-.2 2-.2 3-.2 1.2 0 4.5-1 4.5-1s-2.
2025-01-24 20:07:07 UTC	8621	IN	Data Raw: 36 20 33 36 20 30 20 30 20 31 2d 31 2e 37 20 32 2e 33 63 2d 2e 39 20 31 2d 32 2e 34 20 31 2e 39 2d 33 2e 31 20 31 2e 36 2d 2e 38 2d 2e 32 2d 31 2e 37 2d 31 2e 32 2d 32 2e 31 2d 32 2e 33 61 38 2e 36 20 38 2e 36 20 30 20 30 20 30 2d 31 2e 36 2d 33 2e 31 6c 2d 32 2d 31 63 2d 31 2d 2e 33 2d 32 2e 32 2d 31 2d 32 2e 38 2d 31 2e 34 2d 31 2e 32 2d 2e 38 2d 31 2e 33 2d 2e 39 2d 31 2e 36 2d 2e 36 5a 4d 31 39 37 31 2e 32 20 35 33 37 2e 36 63 2d 2e 34 2e 34 2d 33 20 2e 36 2d 35 2e 38 2e 35 2d 34 2e 33 20 30 2d 35 2e 37 2e 34 2d 39 2e 36 20 33 2e 34 2d 32 2e 35 20 32 2d 35 2e 32 20 33 2e 35 2d 36 20 33 2e 35 2d 2e 37 20 30 2d 31 2e 33 2e 35 2d 31 2e 33 20 31 20 30 20 31 2e 35 20 35 20 2e 32 20 38 2e 32 2d 32 2e 31 20 31 2e 37 2d 31 2e 32 20 34 2e 34 2d 31 2e 39 20 37 Data Ascii: 6 36 0 0 1-1.7 2.3c-.9 1-2.4 1.9-3.1 1.6-.8-.2-1.7-1.2-2.1-2.3a8.6 8.6 0 0 0-1.6-3.1l-2-1c-1-.3-2.2-1-2.8-1.4-1.2-.8-1.3-.9-1.6-.6ZM1971.2 537.6c-.4.4-3 .6-5.8.5-4.3 0-5.7.4-9.6 3.4-2.5 2-5.2 3.5-6 3.5-.7 0-1.3.5-1.3 1 0 1.5 5 .2 8.2-2.1 1.7-1.2 4.4-1.9 7

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:06 UTC	647	OUT	GET /FavIcon.axd?__Cache=7437b908-efcc-4bb8-9ee3-9889a18f79e3 HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:06 UTC	324	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=3600 Content-Length: 1538 Content-Type: image/vnd.microsoft.icon Expires: Fri, 24 Jan 2025 21:07:06 GMT Vary: Accept-Encoding Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Date: Fri, 24 Jan 2025 20:07:06 GMT Connection: close
2025-01-24 20:07:06 UTC	1538	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 00 00 04 00 42 02 00 00 26 00 00 00 20 20 00 00 00 00 04 00 9a 03 00 00 68 02 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 01 f4 49 44 41 54 78 da 63 60 18 5c 40 c2 58 98 41 41 af 86 41 5e bf 11 48 b7 60 62 83 66 06 69 3d 6d dc 06 c8 6a 68 31 28 1b fd 67 50 34 f8 0f d4 80 89 21 e2 57 19 44 94 94 71 19 21 0e 36 40 50 2e 15 4d 9c 8d 41 52 4d 08 8c 95 75 a4 25 16 2e ae 92 da b2 c5 01 2c a3 b0 7b 37 9f cc b6 6d 3d b2 47 8e 4c 12 99 34 75 19 83 94 c6 6f de 8c fc 9d 0a 17 ce f5 ca 1e d8 37 51 fe c4 89 89 72 47 8f 3a 22 9b 26 b3 6b d7 04 99 1d 3b 3e 68 ac 5a c5 ca 20 b9 7e bd 0c 50 c1 7f b9 23 47 fe 8b cf Data Ascii: B& hPNGIHDRapHYs.#.#x?vIDATxc`\@XAAA^H`bfi=mjh1(gP4!WDq!6@P.MARMu%.,{7m=GL4uo7QrG:"&k;>hZ ~P#G

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:08 UTC	384	OUT	GET /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:08 UTC	355	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 111 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:07 GMT Connection: close
2025-01-24 20:07:08 UTC	111	IN	Data Raw: 7b 22 65 72 72 6f 72 54 79 70 65 22 3a 22 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 45 78 63 65 70 74 69 6f 6e 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 56 61 6c 75 65 20 63 61 6e 6e 6f 74 20 62 65 20 6e 75 6c 6c 2e 5c 72 5c 6e 50 61 72 61 6d 65 74 65 72 20 6e 61 6d 65 3a 20 73 6f 75 72 63 65 22 2c 22 64 65 74 61 69 6c 22 3a 6e 75 6c 6c 7d Data Ascii: {"errorType":"ArgumentNullException","message":"Value cannot be null.\r\nParameter name: source","detail":null}

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:09 UTC	775	OUT	POST /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive Content-Length: 68 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-Anti-Forgery-Token: fONzzdMHPutgdvQJqkeaJiEfL4jxUrWuSM6lsyaEkYABAACAn87TS74tQg== sec-ch-ua-mobile: ?0 X-Unauthorized-Status-Code: 403 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://control.screenbridge.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:09 UTC	68	OUT	Data Raw: 5b 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 73 65 73 73 69 6f 6e 43 6f 64 65 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 49 44 73 22 3a 5b 5d 7d 7d 2c 33 36 31 33 32 38 36 39 30 5d Data Ascii: [{"GuestSessionInfo":{"sessionCodes":[],"sessionIDs":[]}},361328690]
2025-01-24 20:07:09 UTC	398	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 144 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://control.screenbridge.es Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:09 GMT Connection: close
2025-01-24 20:07:09 UTC	144	IN	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 33 36 31 33 32 38 36 39 31 2c 22 50 72 6f 64 75 63 74 56 65 72 73 69 6f 6e 22 3a 22 32 34 2e 33 2e 37 2e 39 30 36 37 22 2c 22 52 65 73 70 6f 6e 73 65 49 6e 66 6f 4d 61 70 22 3a 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 44 6f 4e 6f 6e 50 75 62 6c 69 63 43 6f 64 65 53 65 73 73 69 6f 6e 73 45 78 69 73 74 22 3a 66 61 6c 73 65 2c 22 53 65 73 73 69 6f 6e 73 22 3a 5b 5d 7d 7d 7d Data Ascii: {"Version":361328691,"ProductVersion":"24.3.7.9067","ResponseInfoMap":{"GuestSessionInfo":{"DoNonPublicCodeSessionsExist":false,"Sessions":[]}}}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://control.screenbridge.es

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Windows Analysis Report
https://control.screenbridge.es

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:09 UTC	384	OUT	GET /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:10 UTC	355	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 111 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:09 GMT Connection: close
2025-01-24 20:07:10 UTC	111	IN	Data Raw: 7b 22 65 72 72 6f 72 54 79 70 65 22 3a 22 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 45 78 63 65 70 74 69 6f 6e 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 56 61 6c 75 65 20 63 61 6e 6e 6f 74 20 62 65 20 6e 75 6c 6c 2e 5c 72 5c 6e 50 61 72 61 6d 65 74 65 72 20 6e 61 6d 65 3a 20 73 6f 75 72 63 65 22 2c 22 64 65 74 61 69 6c 22 3a 6e 75 6c 6c 7d Data Ascii: {"errorType":"ArgumentNullException","message":"Value cannot be null.\r\nParameter name: source","detail":null}

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:11 UTC	384	OUT	GET /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:11 UTC	355	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 111 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:11 GMT Connection: close
2025-01-24 20:07:11 UTC	111	IN	Data Raw: 7b 22 65 72 72 6f 72 54 79 70 65 22 3a 22 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 45 78 63 65 70 74 69 6f 6e 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 56 61 6c 75 65 20 63 61 6e 6e 6f 74 20 62 65 20 6e 75 6c 6c 2e 5c 72 5c 6e 50 61 72 61 6d 65 74 65 72 20 6e 61 6d 65 3a 20 73 6f 75 72 63 65 22 2c 22 64 65 74 61 69 6c 22 3a 6e 75 6c 6c 7d Data Ascii: {"errorType":"ArgumentNullException","message":"Value cannot be null.\r\nParameter name: source","detail":null}

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:12 UTC	775	OUT	POST /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive Content-Length: 68 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-Anti-Forgery-Token: fONzzdMHPutgdvQJqkeaJiEfL4jxUrWuSM6lsyaEkYABAACAn87TS74tQg== sec-ch-ua-mobile: ?0 X-Unauthorized-Status-Code: 403 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://control.screenbridge.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:12 UTC	68	OUT	Data Raw: 5b 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 73 65 73 73 69 6f 6e 43 6f 64 65 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 49 44 73 22 3a 5b 5d 7d 7d 2c 33 36 31 33 32 38 36 39 32 5d Data Ascii: [{"GuestSessionInfo":{"sessionCodes":[],"sessionIDs":[]}},361328692]
2025-01-24 20:07:15 UTC	398	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 144 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://control.screenbridge.es Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:15 GMT Connection: close
2025-01-24 20:07:15 UTC	144	IN	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 33 36 31 33 32 38 36 39 33 2c 22 50 72 6f 64 75 63 74 56 65 72 73 69 6f 6e 22 3a 22 32 34 2e 33 2e 37 2e 39 30 36 37 22 2c 22 52 65 73 70 6f 6e 73 65 49 6e 66 6f 4d 61 70 22 3a 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 44 6f 4e 6f 6e 50 75 62 6c 69 63 43 6f 64 65 53 65 73 73 69 6f 6e 73 45 78 69 73 74 22 3a 66 61 6c 73 65 2c 22 53 65 73 73 69 6f 6e 73 22 3a 5b 5d 7d 7d 7d Data Ascii: {"Version":361328693,"ProductVersion":"24.3.7.9067","ResponseInfoMap":{"GuestSessionInfo":{"DoNonPublicCodeSessionsExist":false,"Sessions":[]}}}

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:16 UTC	775	OUT	POST /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive Content-Length: 68 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-Anti-Forgery-Token: fONzzdMHPutgdvQJqkeaJiEfL4jxUrWuSM6lsyaEkYABAACAn87TS74tQg== sec-ch-ua-mobile: ?0 X-Unauthorized-Status-Code: 403 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://control.screenbridge.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:16 UTC	68	OUT	Data Raw: 5b 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 73 65 73 73 69 6f 6e 43 6f 64 65 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 49 44 73 22 3a 5b 5d 7d 7d 2c 33 36 31 33 32 38 36 39 33 5d Data Ascii: [{"GuestSessionInfo":{"sessionCodes":[],"sessionIDs":[]}},361328693]
2025-01-24 20:07:16 UTC	398	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 144 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://control.screenbridge.es Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:16 GMT Connection: close
2025-01-24 20:07:16 UTC	144	IN	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 33 36 31 33 32 38 36 39 34 2c 22 50 72 6f 64 75 63 74 56 65 72 73 69 6f 6e 22 3a 22 32 34 2e 33 2e 37 2e 39 30 36 37 22 2c 22 52 65 73 70 6f 6e 73 65 49 6e 66 6f 4d 61 70 22 3a 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 44 6f 4e 6f 6e 50 75 62 6c 69 63 43 6f 64 65 53 65 73 73 69 6f 6e 73 45 78 69 73 74 22 3a 66 61 6c 73 65 2c 22 53 65 73 73 69 6f 6e 73 22 3a 5b 5d 7d 7d 7d Data Ascii: {"Version":361328694,"ProductVersion":"24.3.7.9067","ResponseInfoMap":{"GuestSessionInfo":{"DoNonPublicCodeSessionsExist":false,"Sessions":[]}}}

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:18 UTC	775	OUT	POST /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive Content-Length: 68 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-Anti-Forgery-Token: fONzzdMHPutgdvQJqkeaJiEfL4jxUrWuSM6lsyaEkYABAACAn87TS74tQg== sec-ch-ua-mobile: ?0 X-Unauthorized-Status-Code: 403 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://control.screenbridge.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:18 UTC	68	OUT	Data Raw: 5b 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 73 65 73 73 69 6f 6e 43 6f 64 65 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 49 44 73 22 3a 5b 5d 7d 7d 2c 33 36 31 33 32 38 36 39 34 5d Data Ascii: [{"GuestSessionInfo":{"sessionCodes":[],"sessionIDs":[]}},361328694]
2025-01-24 20:07:18 UTC	398	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 144 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://control.screenbridge.es Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:18 GMT Connection: close
2025-01-24 20:07:18 UTC	144	IN	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 33 36 31 33 32 38 36 39 36 2c 22 50 72 6f 64 75 63 74 56 65 72 73 69 6f 6e 22 3a 22 32 34 2e 33 2e 37 2e 39 30 36 37 22 2c 22 52 65 73 70 6f 6e 73 65 49 6e 66 6f 4d 61 70 22 3a 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 44 6f 4e 6f 6e 50 75 62 6c 69 63 43 6f 64 65 53 65 73 73 69 6f 6e 73 45 78 69 73 74 22 3a 66 61 6c 73 65 2c 22 53 65 73 73 69 6f 6e 73 22 3a 5b 5d 7d 7d 7d Data Ascii: {"Version":361328696,"ProductVersion":"24.3.7.9067","ResponseInfoMap":{"GuestSessionInfo":{"DoNonPublicCodeSessionsExist":false,"Sessions":[]}}}

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:19 UTC	384	OUT	GET /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:19 UTC	355	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 111 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:18 GMT Connection: close
2025-01-24 20:07:19 UTC	111	IN	Data Raw: 7b 22 65 72 72 6f 72 54 79 70 65 22 3a 22 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 45 78 63 65 70 74 69 6f 6e 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 56 61 6c 75 65 20 63 61 6e 6e 6f 74 20 62 65 20 6e 75 6c 6c 2e 5c 72 5c 6e 50 61 72 61 6d 65 74 65 72 20 6e 61 6d 65 3a 20 73 6f 75 72 63 65 22 2c 22 64 65 74 61 69 6c 22 3a 6e 75 6c 6c 7d Data Ascii: {"errorType":"ArgumentNullException","message":"Value cannot be null.\r\nParameter name: source","detail":null}

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:20 UTC	775	OUT	POST /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive Content-Length: 68 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-Anti-Forgery-Token: fONzzdMHPutgdvQJqkeaJiEfL4jxUrWuSM6lsyaEkYABAACAn87TS74tQg== sec-ch-ua-mobile: ?0 X-Unauthorized-Status-Code: 403 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://control.screenbridge.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:20 UTC	68	OUT	Data Raw: 5b 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 73 65 73 73 69 6f 6e 43 6f 64 65 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 49 44 73 22 3a 5b 5d 7d 7d 2c 33 36 31 33 32 38 36 39 36 5d Data Ascii: [{"GuestSessionInfo":{"sessionCodes":[],"sessionIDs":[]}},361328696]
2025-01-24 20:07:20 UTC	398	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 144 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://control.screenbridge.es Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:20 GMT Connection: close
2025-01-24 20:07:20 UTC	144	IN	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 33 36 31 33 32 38 36 39 37 2c 22 50 72 6f 64 75 63 74 56 65 72 73 69 6f 6e 22 3a 22 32 34 2e 33 2e 37 2e 39 30 36 37 22 2c 22 52 65 73 70 6f 6e 73 65 49 6e 66 6f 4d 61 70 22 3a 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 44 6f 4e 6f 6e 50 75 62 6c 69 63 43 6f 64 65 53 65 73 73 69 6f 6e 73 45 78 69 73 74 22 3a 66 61 6c 73 65 2c 22 53 65 73 73 69 6f 6e 73 22 3a 5b 5d 7d 7d 7d Data Ascii: {"Version":361328697,"ProductVersion":"24.3.7.9067","ResponseInfoMap":{"GuestSessionInfo":{"DoNonPublicCodeSessionsExist":false,"Sessions":[]}}}

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:21 UTC	775	OUT	POST /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive Content-Length: 68 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-Anti-Forgery-Token: fONzzdMHPutgdvQJqkeaJiEfL4jxUrWuSM6lsyaEkYABAACAn87TS74tQg== sec-ch-ua-mobile: ?0 X-Unauthorized-Status-Code: 403 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://control.screenbridge.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:21 UTC	68	OUT	Data Raw: 5b 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 73 65 73 73 69 6f 6e 43 6f 64 65 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 49 44 73 22 3a 5b 5d 7d 7d 2c 33 36 31 33 32 38 36 39 37 5d Data Ascii: [{"GuestSessionInfo":{"sessionCodes":[],"sessionIDs":[]}},361328697]
2025-01-24 20:07:21 UTC	398	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 144 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://control.screenbridge.es Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:21 GMT Connection: close
2025-01-24 20:07:21 UTC	144	IN	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 33 36 31 33 32 38 37 30 30 2c 22 50 72 6f 64 75 63 74 56 65 72 73 69 6f 6e 22 3a 22 32 34 2e 33 2e 37 2e 39 30 36 37 22 2c 22 52 65 73 70 6f 6e 73 65 49 6e 66 6f 4d 61 70 22 3a 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 44 6f 4e 6f 6e 50 75 62 6c 69 63 43 6f 64 65 53 65 73 73 69 6f 6e 73 45 78 69 73 74 22 3a 66 61 6c 73 65 2c 22 53 65 73 73 69 6f 6e 73 22 3a 5b 5d 7d 7d 7d Data Ascii: {"Version":361328700,"ProductVersion":"24.3.7.9067","ResponseInfoMap":{"GuestSessionInfo":{"DoNonPublicCodeSessionsExist":false,"Sessions":[]}}}

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:22 UTC	384	OUT	GET /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:22 UTC	355	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 111 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:21 GMT Connection: close
2025-01-24 20:07:22 UTC	111	IN	Data Raw: 7b 22 65 72 72 6f 72 54 79 70 65 22 3a 22 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 45 78 63 65 70 74 69 6f 6e 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 56 61 6c 75 65 20 63 61 6e 6e 6f 74 20 62 65 20 6e 75 6c 6c 2e 5c 72 5c 6e 50 61 72 61 6d 65 74 65 72 20 6e 61 6d 65 3a 20 73 6f 75 72 63 65 22 2c 22 64 65 74 61 69 6c 22 3a 6e 75 6c 6c 7d Data Ascii: {"errorType":"ArgumentNullException","message":"Value cannot be null.\r\nParameter name: source","detail":null}

Timestamp	Bytes transferred	Direction	Data
2025-01-24 20:07:23 UTC	775	OUT	POST /Services/PageService.ashx/GetLiveData HTTP/1.1 Host: control.screenbridge.es Connection: keep-alive Content-Length: 68 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-Anti-Forgery-Token: fONzzdMHPutgdvQJqkeaJiEfL4jxUrWuSM6lsyaEkYABAACAn87TS74tQg== sec-ch-ua-mobile: ?0 X-Unauthorized-Status-Code: 403 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://control.screenbridge.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://control.screenbridge.es/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-24 20:07:23 UTC	68	OUT	Data Raw: 5b 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 73 65 73 73 69 6f 6e 43 6f 64 65 73 22 3a 5b 5d 2c 22 73 65 73 73 69 6f 6e 49 44 73 22 3a 5b 5d 7d 7d 2c 33 36 31 33 32 38 37 30 30 5d Data Ascii: [{"GuestSessionInfo":{"sessionCodes":[],"sessionIDs":[]}},361328700]
2025-01-24 20:07:29 UTC	398	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 144 Content-Type: application/json; charset=utf-8 Expires: -1 Server: Microsoft-HTTPAPI/2.0 X-Robots-Tag: noindex X-Content-Type-Options: nosniff Access-Control-Allow-Origin: https://control.screenbridge.es Access-Control-Allow-Credentials: true Date: Fri, 24 Jan 2025 20:07:29 GMT Connection: close
2025-01-24 20:07:29 UTC	144	IN	Data Raw: 7b 22 56 65 72 73 69 6f 6e 22 3a 33 36 31 33 32 38 37 30 31 2c 22 50 72 6f 64 75 63 74 56 65 72 73 69 6f 6e 22 3a 22 32 34 2e 33 2e 37 2e 39 30 36 37 22 2c 22 52 65 73 70 6f 6e 73 65 49 6e 66 6f 4d 61 70 22 3a 7b 22 47 75 65 73 74 53 65 73 73 69 6f 6e 49 6e 66 6f 22 3a 7b 22 44 6f 4e 6f 6e 50 75 62 6c 69 63 43 6f 64 65 53 65 73 73 69 6f 6e 73 45 78 69 73 74 22 3a 66 61 6c 73 65 2c 22 53 65 73 73 69 6f 6e 73 22 3a 5b 5d 7d 7d 7d Data Ascii: {"Version":361328701,"ProductVersion":"24.3.7.9067","ResponseInfoMap":{"GuestSessionInfo":{"DoNonPublicCodeSessionsExist":false,"Sessions":[]}}}