Edit tour

Windows Analysis Report
https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html

Overview

General Information

Sample URL:	https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html
Analysis ID:	1614667
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish54

AI detected landing page (webpage, office document or email)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5940 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1952,i,10973096534020589571,7293185933046244355,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.5.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.2.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

Source: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#r22921@ujmsyli.org

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known brand with a widely recognized domain 'microsoft.com'., The URL 'wd0c435.fletchlirne.com' does not match the legitimate domain associated with Microsoft., The domain 'fletchlirne.com' is not associated with Microsoft and appears unrelated., The presence of a subdomain 'wd0c435' and the unrelated main domain suggest potential phishing., The email input field 'r22921@ujmsyli.org' does not align with typical Microsoft email domains, adding to suspicion. DOM: 2.5.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 0.5.i.script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html

Joe Sandbox AI: Page contains button: 'Verify your email address' Source: '1.0.pages.csv'

Source: https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html	HTTP Parser: Number of links: 0
Source: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#r22921@ujmsyli.org	HTTP Parser: Number of links: 0

Source: https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html

HTTP Parser: Base64 decoded: https://wd0c435.fletchlirne.com/KkoueCDu?gq=d9zO00fAWeQSBX7zZlusjGgsmGaTPkCg-4ZHpHLuTyYGGFdu9BuIHPRnsMsYgzDHwQ/#

Source: https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html	HTTP Parser: Title: D0CUSIGN does not match URL
Source: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#r22921@ujmsyli.org	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html	HTTP Parser: Invalid link: Terms
Source: https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html	HTTP Parser: Invalid link: Privacy Policy

Source: https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html	HTTP Parser: Iframe src: https://i.pinimg.com/736x/d1/3e/64/d13e649549d58b162cf918118d9ed562.jpg
Source: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#r22921@ujmsyli.org	HTTP Parser: Iframe src: https://login.fletchlirne.com/Me.htm?v=3

HTTP Parser: <input type="password" .../> found

Source: https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html	HTTP Parser: No favicon
Source: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#r22921@ujmsyli.org	HTTP Parser: No favicon

Source: https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html	HTTP Parser: No <meta name="author".. found
Source: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#r22921@ujmsyli.org	HTTP Parser: No <meta name="author".. found
Source: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#r22921@ujmsyli.org	HTTP Parser: No <meta name="author".. found
Source: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#r22921@ujmsyli.org	HTTP Parser: No <meta name="author".. found

Source: https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html	HTTP Parser: No <meta name="copyright".. found
Source: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#r22921@ujmsyli.org	HTTP Parser: No <meta name="copyright".. found
Source: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#r22921@ujmsyli.org	HTTP Parser: No <meta name="copyright".. found
Source: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#r22921@ujmsyli.org	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: global traffic	TCP traffic: 192.168.2.4:52161 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:61915 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:56366 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /Kennyiryiio/COCOPOOOUT.html HTTP/1.1Host: infocorporacion.peConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /736x/d1/3e/64/d13e649549d58b162cf918118d9ed562.jpg HTTP/1.1Host: i.pinimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://infocorporacion.pe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://infocorporacion.pe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /512/847/847969.png HTTP/1.1Host: cdn-icons-png.flaticon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://infocorporacion.pe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5be974e/build/signer.css HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://infocorporacion.pe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /512/847/847969.png HTTP/1.1Host: cdn-icons-png.flaticon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5be974e/build/a6d09f4028ea300af1bd.ttf HTTP/1.1Host: cdn.hellosign.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://infocorporacion.pesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdn.hellosign.com/5be974e/build/signer.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f1718227932057x822365466237625200/DOCU-60cafc67.png HTTP/1.1Host: meta-q.cdn.bubble.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://infocorporacion.pe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f1718227932057x822365466237625200/DOCU-60cafc67.png HTTP/1.1Host: meta-q.cdn.bubble.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /KkoueCDu?gq=d9zO00fAWeQSBX7zZlusjGgsmGaTPkCg-4ZHpHLuTyYGGFdu9BuIHPRnsMsYgzDHwQ/ HTTP/1.1Host: wd0c435.fletchlirne.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://infocorporacion.pe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: wd0c435.fletchlirne.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://infocorporacion.pe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3
Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: react.fletchlirne.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://infocorporacion.pe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1Host: wd0c435.fletchlirne.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://infocorporacion.pe/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; fpc=AirhK3wJGsJOh_p3O0UOxKA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEXj6EputgMME8sHDKnDbCX0S8hSFO-HvdNndYAx-3N64PSylBQszw4O-eAC0Mf1i235O9jp76jlQw5dWoB1L0kY1YwrsQIdRY5owIRs0IdAd_fYGfMQhjPmyddjm_nfmHQTRb08zdJ48GdImCKS-Y5alFk_EI5MPAjj-hHWviobsgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
Source: global traffic	HTTP traffic detected: GET /s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3/7cb1ce4d92e54ca56c7f5c024353df39591346371c4796696d5f3914497ecfba.js HTTP/1.1Host: wd0c435.fletchlirne.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.ASkAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAApAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE9VNbLcpsQiT6HgocCo_t-OZRtA15SMjcCJL4_P4lzXFqkfoI_1V1PA_OANKqLvNF8cmtYFxGPow3dsoYdLj3Up1TQFCtVZNDlFfDxZ6GHKQgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEH9pxtuE0sw3ojWOwDKt8XzONFE-0VH1kQLVN7PJWUL_5SU2h95yXdlz87hW_6cfhB1Z2pNagZir8aQOnEi6IeB9eaZQ7w7jaxnXluLw4nwBVMr18EhQBNPHMRyA9xuzlrv0r0o7cEb1hMrN_toEsV6DHqEpfGyfxN1-nToZLLZcgAA; esctx-sLK5waf3VHI=AQABCQEAAABVrSpeuWamRam2jAF1XRQEzFwVbUgYUD6jq1LnI2jlrsIhsi2G4LLoI3Rd0jn4aDan5AunA3MmMLARp8FA-RxKqTLwK2AfsntVN0DJ1l_3Ds2GJKPzIEPs5m_VN8IYOR1reELwBC69K67vCC7__pw7oyDjqnC-fQ-WFUyyE5Nw6SAA; fpc=AirhK3wJGsJOh_p3O0UOxKC8Ae7AAQAAAPF7QN8OAAAA
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: login.fletchlirne.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://wd0c435.fletchlirne.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3
Source: global traffic	HTTP traffic detected: GET /s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3.js HTTP/1.1Host: wd0c435.fletchlirne.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.ASkAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAApAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE9VNbLcpsQiT6HgocCo_t-OZRtA15SMjcCJL4_P4lzXFqkfoI_1V1PA_OANKqLvNF8cmtYFxGPow3dsoYdLj3Up1TQFCtVZNDlFfDxZ6GHKQgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEH9pxtuE0sw3ojWOwDKt8XzONFE-0VH1kQLVN7PJWUL_5SU2h95yXdlz87hW_6cfhB1Z2pNagZir8aQOnEi6IeB9eaZQ7w7jaxnXluLw4nwBVMr18EhQBNPHMRyA9xuzlrv0r0o7cEb1hMrN_toEsV6DHqEpfGyfxN1-nToZLLZcgAA; esctx-sLK5waf3VHI=AQABCQEAAABVrSpeuWamRam2jAF1XRQEzFwVbUgYUD6jq1LnI2jlrsIhsi2G4LLoI3Rd0jn4aDan5AunA3MmMLARp8FA-RxKqTLwK2AfsntVN0DJ1l_3Ds2GJKPzIEPs5m_VN8IYOR1reELwBC69K67vCC7__pw7oyDjqnC-fQ-WFUyyE5Nw6SAA; fpc=AirhK3wJGsJOh_p3O0UOxKC8Ae7AAQAAAPF7QN8OAAAA
Source: global traffic	HTTP traffic detected: GET /s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3.js HTTP/1.1Host: wd0c435.fletchlirne.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.ASkAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAApAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE9VNbLcpsQiT6HgocCo_t-OZRtA15SMjcCJL4_P4lzXFqkfoI_1V1PA_OANKqLvNF8cmtYFxGPow3dsoYdLj3Up1TQFCtVZNDlFfDxZ6GHKQgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEH9pxtuE0sw3ojWOwDKt8XzONFE-0VH1kQLVN7PJWUL_5SU2h95yXdlz87hW_6cfhB1Z2pNagZir8aQOnEi6IeB9eaZQ7w7jaxnXluLw4nwBVMr18EhQBNPHMRyA9xuzlrv0r0o7cEb1hMrN_toEsV6DHqEpfGyfxN1-nToZLLZcgAA; esctx-sLK5waf3VHI=AQABCQEAAABVrSpeuWamRam2jAF1XRQEzFwVbUgYUD6jq1LnI2jlrsIhsi2G4LLoI3Rd0jn4aDan5AunA3MmMLARp8FA-RxKqTLwK2AfsntVN0DJ1l_3Ds2GJKPzIEPs5m_VN8IYOR1reELwBC69K67vCC7__pw7oyDjqnC-fQ-WFUyyE5Nw6SAA; fpc=AirhK3wJGsJOh_p3O0UOxKC8Ae7AAQAAAPF7QN8OAAAA
Source: global traffic	HTTP traffic detected: GET /s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3/7cb1ce4d92e54ca56c7f5c024353df39591346371c4796696d5f3914497ecfba.js HTTP/1.1Host: wd0c435.fletchlirne.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.ASkAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAApAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE9VNbLcpsQiT6HgocCo_t-OZRtA15SMjcCJL4_P4lzXFqkfoI_1V1PA_OANKqLvNF8cmtYFxGPow3dsoYdLj3Up1TQFCtVZNDlFfDxZ6GHKQgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEH9pxtuE0sw3ojWOwDKt8XzONFE-0VH1kQLVN7PJWUL_5SU2h95yXdlz87hW_6cfhB1Z2pNagZir8aQOnEi6IeB9eaZQ7w7jaxnXluLw4nwBVMr18EhQBNPHMRyA9xuzlrv0r0o7cEb1hMrN_toEsV6DHqEpfGyfxN1-nToZLLZcgAA; esctx-sLK5waf3VHI=AQABCQEAAABVrSpeuWamRam2jAF1XRQEzFwVbUgYUD6jq1LnI2jlrsIhsi2G4LLoI3Rd0jn4aDan5AunA3MmMLARp8FA-RxKqTLwK2AfsntVN0DJ1l_3Ds2GJKPzIEPs5m_VN8IYOR1reELwBC69K67vCC7__pw7oyDjqnC-fQ-WFUyyE5Nw6SAA; fpc=AirhK3wJGsJOh_p3O0UOxKC8Ae7AAQAAAPF7QN8OAAAA
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: login.fletchlirne.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://wd0c435.fletchlirne.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; JSESSIONID=38E9F1C04EBB4B559AD5F867B9A72646; DT=DI1G5KrV16iTcKLY7bGGQTx_w
Source: global traffic	HTTP traffic detected: GET /assets/css/sections/errors-v2.css HTTP/1.1Host: login.fletchlirne.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.fletchlirne.com/Me.htm?v=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; DT=DI1G5KrV16iTcKLY7bGGQTx_w; JSESSIONID=375B26DF7A1015D930C7176EE55FD31C
Source: global traffic	HTTP traffic detected: GET /s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3.js HTTP/1.1Host: login.fletchlirne.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.fletchlirne.com/Me.htm?v=3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; DT=DI1G5KrV16iTcKLY7bGGQTx_w; JSESSIONID=375B26DF7A1015D930C7176EE55FD31C
Source: global traffic	HTTP traffic detected: GET /fs/bco/1/fs0dbo9yt4sJMEgGU4x7 HTTP/1.1Host: ok11static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.fletchlirne.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3.js HTTP/1.1Host: login.fletchlirne.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; DT=DI1G5KrV16iTcKLY7bGGQTx_w; JSESSIONID=375B26DF7A1015D930C7176EE55FD31C
Source: global traffic	HTTP traffic detected: GET /fs/bco/1/fs0dbo9yt4sJMEgGU4x7 HTTP/1.1Host: ok11static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1Host: wd0c435.fletchlirne.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.ASkAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAApAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE9VNbLcpsQiT6HgocCo_t-OZRtA15SMjcCJL4_P4lzXFqkfoI_1V1PA_OANKqLvNF8cmtYFxGPow3dsoYdLj3Up1TQFCtVZNDlFfDxZ6GHKQgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEH9pxtuE0sw3ojWOwDKt8XzONFE-0VH1kQLVN7PJWUL_5SU2h95yXdlz87hW_6cfhB1Z2pNagZir8aQOnEi6IeB9eaZQ7w7jaxnXluLw4nwBVMr18EhQBNPHMRyA9xuzlrv0r0o7cEb1hMrN_toEsV6DHqEpfGyfxN1-nToZLLZcgAA; esctx-sLK5waf3VHI=AQABCQEAAABVrSpeuWamRam2jAF1XRQEzFwVbUgYUD6jq1LnI2jlrsIhsi2G4LLoI3Rd0jn4aDan5AunA3MmMLARp8FA-RxKqTLwK2AfsntVN0DJ1l_3Ds2GJKPzIEPs5m_VN8IYOR1reELwBC69K67vCC7__pw7oyDjqnC-fQ-WFUyyE5Nw6SAA; fpc=AirhK3wJGsJOh_p3O0UOxKC8Ae7AAQAAAPF7QN8OAAAA; MicrosoftApplicationsTelemetryDeviceId=98e00089-54ed-44df-97d7-51460e7cfa67; brcap=0; ai_session=guozYgQIFCmcWYpcTA20H8\|1739490559727\|1739490559727

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: infocorporacion.pe
Source: global traffic	DNS traffic detected: DNS query: cdn.hellosign.com
Source: global traffic	DNS traffic detected: DNS query: i.pinimg.com
Source: global traffic	DNS traffic detected: DNS query: images.ctfassets.net
Source: global traffic	DNS traffic detected: DNS query: cdn-icons-png.flaticon.com
Source: global traffic	DNS traffic detected: DNS query: meta-q.cdn.bubble.io
Source: global traffic	DNS traffic detected: DNS query: wd0c435.fletchlirne.com
Source: global traffic	DNS traffic detected: DNS query: react.fletchlirne.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: login.fletchlirne.com
Source: global traffic	DNS traffic detected: DNS query: ok11static.oktacdn.com

Source: unknown

HTTP traffic detected: POST /common/GetCredentialType?mkt=en-US HTTP/1.1Host: wd0c435.fletchlirne.comConnection: keep-aliveContent-Length: 1968sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"hpgrequestid: 1f9770c7-255e-46fa-8a7f-933f8c3b0100sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36client-request-id: de184ed2-d18f-41b3-a206-3f692b3fd7eacanary: PAQABDgEAAABVrSpeuWamRam2jAF1XRQEdvCH1PSkeBdpQOYx_hjgCPIZCP4N18COXJNlM9LikpAxaIfJk9ngxEgdw8D6iC4hrYXzerCYI_JK5HcTbtknyVcgqfd1DFaltL5rDdkGOMKaoxKKms8g2oZcs3oxQ_7RMGB50zcvpyPZDDiKWxvKxs0BfBAvY0WjhUBhirO3l0OH9S65PRh1eqEAtwq3uhFQ80z9MZWE2HUsdWvmr39uQiAAContent-type: application/json; charset=UTF-8hpgid: 1104Accept: application/jsonhpgact: 1800sec-ch-ua-platform: "Windows"Origin: https://wd0c435.fletchlirne.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.ASkAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAApAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE9VNbLcpsQiT6HgocCo_t-OZRtA15SMjcCJL4_P4lzXFqkfoI_1V1PA_OANKqLvNF8cmtYFxGPow3dsoYdLj3Up1TQFCtVZNDlFfDxZ6GHKQgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEH9pxtuE0sw3ojWOwDKt8XzONFE-0VH1kQLVN7PJWUL_5SU2h95yXdlz87hW_6cfhB1Z2pNagZir8aQOnEi6IeB9eaZQ7w7jaxnXluLw4nwBVMr18EhQBNPHMRyA9xuzlrv0r0o7cEb1hMrN_toEsV6DHqEpfGyfxN1-nToZLLZcgAA; esctx-sLK5waf3VHI=AQABCQEAAABVrSpeuWamRam2jAF1XRQEzFwVbUgYUD6jq1LnI2jlrsIhsi2G4LLoI3Rd0jn4aDan5AunA3MmMLARp8FA-RxKqTLwK2AfsntVN0DJ1l_3Ds2GJKPzIEPs5m_VN8IYOR1reELwBC69K67vCC7__pw7oyDjqnC-fQ-WFUyyE5Nw6SAA; fpc=AirhK3wJGsJOh_p3O0UOxKC8Ae7AAQAAAPF7QN8OAAAA; MicrosoftApplicationsTelemetryDeviceId=98e00089-54ed-44df-97d7-51460e7cfa67; brcap=0; ai_session=guozYgQIFCmcWYpcTA20H8|1739490559727|1739490559727

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Found

Source: chromecache_133.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: chromecache_133.2.dr	String found in binary or memory: http://ionicons.com/
Source: chromecache_161.2.dr	String found in binary or memory: http://www.ascendercorp.com/0
Source: chromecache_161.2.dr	String found in binary or memory: http://www.ascendercorp.com/eula10.html
Source: chromecache_161.2.dr	String found in binary or memory: http://www.ascendercorp.com/eula10.htmlNormaloby
Source: chromecache_161.2.dr	String found in binary or memory: http://www.ascendercorp.com/http://ascendercorp.com/eula10.htmlNormaaliNorm
Source: chromecache_161.2.dr	String found in binary or memory: http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlThis
Source: chromecache_146.2.dr	String found in binary or memory: https://cdn-icons-png.flaticon.com/512/847/847969.png
Source: chromecache_146.2.dr	String found in binary or memory: https://cdn.hellosign.com/5be974e/build/signer.css
Source: chromecache_133.2.dr	String found in binary or memory: https://github.com/driftyco/ionicons
Source: chromecache_133.2.dr	String found in binary or memory: https://github.com/google/material-design-icons
Source: chromecache_146.2.dr	String found in binary or memory: https://i.pinimg.com/736x/d1/3e/64/d13e649549d58b162cf918118d9ed562.jpg
Source: chromecache_146.2.dr	String found in binary or memory: https://images.ctfassets.net/3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc
Source: chromecache_146.2.dr	String found in binary or memory: https://meta-q.cdn.bubble.io/f1718227932057x822365466237625200/DOCU-60cafc67.png
Source: chromecache_133.2.dr	String found in binary or memory: https://twitter.com/benjsperry
Source: chromecache_133.2.dr	String found in binary or memory: https://twitter.com/ionicframework

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61949
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61946
Source: unknown	Network traffic detected: HTTP traffic on port 61946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 52169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61919
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52169
Source: unknown	Network traffic detected: HTTP traffic on port 61918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52173
Source: unknown	Network traffic detected: HTTP traffic on port 52168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61950
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61951
Source: unknown	Network traffic detected: HTTP traffic on port 52164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61928
Source: unknown	Network traffic detected: HTTP traffic on port 61950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61924
Source: unknown	Network traffic detected: HTTP traffic on port 52170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61969
Source: unknown	Network traffic detected: HTTP traffic on port 52167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62017
Source: unknown	Network traffic detected: HTTP traffic on port 61953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61930
Source: unknown	Network traffic detected: HTTP traffic on port 52173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61960 -> 443

Source: classification engine

Classification label: mal68.phis.win@24/65@36/16

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1952,i,10973096534020589571,7293185933046244355,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1952,i,10973096534020589571,7293185933046244355,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
http://www.ascendercorp.com/0	0%	Avira URL Cloud	safe
https://wd0c435.fletchlirne.com/common/GetCredentialType?mkt=en-US	0%	Avira URL Cloud	safe
https://react.fletchlirne.com/login	0%	Avira URL Cloud	safe
https://login.fletchlirne.com/s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3.js	0%	Avira URL Cloud	safe
https://wd0c435.fletchlirne.com/	0%	Avira URL Cloud	safe
http://www.ascendercorp.com/eula10.html	0%	Avira URL Cloud	safe
https://wd0c435.fletchlirne.com/s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3.js	0%	Avira URL Cloud	safe
https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	0%	Avira URL Cloud	safe
http://www.ascendercorp.com/http://ascendercorp.com/eula10.htmlNormaaliNorm	0%	Avira URL Cloud	safe
https://login.fletchlirne.com/assets/css/sections/errors-v2.css	0%	Avira URL Cloud	safe
http://www.ascendercorp.com/eula10.htmlNormaloby	0%	Avira URL Cloud	safe
http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlThis	0%	Avira URL Cloud	safe
https://wd0c435.fletchlirne.com/s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3/7cb1ce4d92e54ca56c7f5c024353df39591346371c4796696d5f3914497ecfba.js	0%	Avira URL Cloud	safe
https://login.fletchlirne.com/Me.htm?v=3	0%	Avira URL Cloud	safe
https://wd0c435.fletchlirne.com/KkoueCDu?gq=d9zO00fAWeQSBX7zZlusjGgsmGaTPkCg-4ZHpHLuTyYGGFdu9BuIHPRnsMsYgzDHwQ/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3orhvfyxudxxq.cloudfront.net	13.33.187.16	true	false	high
wd0c435.fletchlirne.com	164.92.93.159	true	true	unknown
e329293.dscd.akamaiedge.net	95.101.182.65	true	false	high
infocorporacion.pe	195.177.95.207	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
a1990.dscd.akamai.net	2.16.164.43	true	false	high
meta-q.cdn.bubble.io	104.17.124.183	true	false	high
dualstack.pinterest.map.fastly.net	151.101.64.84	true	false	high
d3d564pv0p4759.cloudfront.net	3.161.82.101	true	false	high
www.google.com	216.58.206.68	true	false	high
react.fletchlirne.com	164.92.93.159	true	false	unknown
login.fletchlirne.com	164.92.93.159	true	false	unknown
d21h89w209nr35.cloudfront.net	13.32.27.44	true	false	unknown
cdn-icons-png.flaticon.com	unknown	unknown	false	high
ok11static.oktacdn.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
images.ctfassets.net	unknown	unknown	false	high
cdn.hellosign.com	unknown	unknown	false	high
i.pinimg.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.hellosign.com/5be974e/build/a6d09f4028ea300af1bd.ttf	false		high
https://cdn-icons-png.flaticon.com/512/847/847969.png	false		high
https://images.ctfassets.net/3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png	false		high
https://cdn.hellosign.com/5be974e/build/signer.css	false		high
https://login.fletchlirne.com/assets/css/sections/errors-v2.css	false	Avira URL Cloud: safe	unknown
https://wd0c435.fletchlirne.com/common/GetCredentialType?mkt=en-US	false	Avira URL Cloud: safe	unknown
https://wd0c435.fletchlirne.com/	false	Avira URL Cloud: safe	unknown
https://i.pinimg.com/736x/d1/3e/64/d13e649549d58b162cf918118d9ed562.jpg	false		high
https://react.fletchlirne.com/login	false	Avira URL Cloud: safe	unknown
https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0	false	Avira URL Cloud: safe	unknown
https://login.fletchlirne.com/s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3.js	false	Avira URL Cloud: safe	unknown
https://wd0c435.fletchlirne.com/s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3.js	false	Avira URL Cloud: safe	unknown
https://ok11static.oktacdn.com/fs/bco/1/fs0dbo9yt4sJMEgGU4x7	false		high
https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html	true		unknown
https://wd0c435.fletchlirne.com/s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3/7cb1ce4d92e54ca56c7f5c024353df39591346371c4796696d5f3914497ecfba.js	false	Avira URL Cloud: safe	unknown
https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0#r22921@ujmsyli.org	true		unknown
https://wd0c435.fletchlirne.com/KkoueCDu?gq=d9zO00fAWeQSBX7zZlusjGgsmGaTPkCg-4ZHpHLuTyYGGFdu9BuIHPRnsMsYgzDHwQ/	false	Avira URL Cloud: safe	unknown
https://meta-q.cdn.bubble.io/f1718227932057x822365466237625200/DOCU-60cafc67.png	false		high
https://login.fletchlirne.com/Me.htm?v=3	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.ascendercorp.com/0	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://images.ctfassets.net/3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc	chromecache_146.2.dr	false		high
http://www.ascendercorp.com/eula10.html	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/google/material-design-icons	chromecache_133.2.dr	false		high
https://twitter.com/benjsperry	chromecache_133.2.dr	false		high
http://www.ascendercorp.com/http://ascendercorp.com/eula10.htmlNormaaliNorm	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
http://ionicons.com/	chromecache_133.2.dr	false		high
https://github.com/driftyco/ionicons	chromecache_133.2.dr	false		high
https://twitter.com/ionicframework	chromecache_133.2.dr	false		high
http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlThis	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
http://www.ascendercorp.com/eula10.htmlNormaloby	chromecache_161.2.dr	false	Avira URL Cloud: safe	unknown
http://creativecommons.org/licenses/by/4.0/	chromecache_133.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.124.183	meta-q.cdn.bubble.io	United States	13335	CLOUDFLARENETUS	false
164.92.93.159	wd0c435.fletchlirne.com	United States	46930	ASN-DPSDUS	true
2.16.164.43	a1990.dscd.akamai.net	European Union	20940	AKAMAI-ASN1EU	false
151.101.64.84	dualstack.pinterest.map.fastly.net	United States	54113	FASTLYUS	false
13.32.27.36	unknown	United States	7018	ATT-INTERNET4US	false
13.33.187.2	unknown	United States	16509	AMAZON-02US	false
3.161.82.101	d3d564pv0p4759.cloudfront.net	United States	16509	AMAZON-02US	false
13.33.187.16	d3orhvfyxudxxq.cloudfront.net	United States	16509	AMAZON-02US	false
195.177.95.207	infocorporacion.pe	Ukraine	12695	DINET-ASRU	false
13.32.27.44	d21h89w209nr35.cloudfront.net	United States	7018	ATT-INTERNET4US	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
2.19.11.102	unknown	European Union	719	ELISA-ASHelsinkiFinlandEU	false
104.17.123.183	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1614667
Start date and time:	2025-02-14 00:47:32 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@24/65@36/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 172.217.18.14, 173.194.76.84, 216.58.206.46, 142.250.184.238, 142.250.186.142, 142.250.176.206, 173.194.17.198, 172.217.18.106, 172.217.23.106, 142.250.185.74, 142.250.184.202, 142.250.186.170, 142.250.184.234, 216.58.212.138, 172.217.18.10, 142.250.185.234, 142.250.185.170, 142.250.185.106, 142.250.186.138, 142.250.186.74, 142.250.185.138, 142.250.186.106, 142.250.185.202, 199.232.214.172, 184.30.131.245, 142.250.185.78, 172.217.142.201, 216.58.206.74, 216.58.212.170, 216.58.206.42, 142.250.181.234, 172.217.16.202, 142.250.186.42, 20.42.73.28, 20.189.173.2, 216.58.206.35, 2.19.106.160, 20.12.23.50, 13.107.246.45
Excluded domains from analysis (whitelisted): r1.sn-hp57knd6.gvt1.com, slscr.update.microsoft.com, r4.sn-hp57ynss.gvt1.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, update.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, r1---sn-hp57knd6.gvt1.com, r4---sn-hp57ynss.gvt1.com, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, onedscolprdwus01.westus.cloudapp.azure.com, aadcdnoriginwus2.afd.azureedge.net, onedscolprdeus15.eastus.cloudapp.azure.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17531
Entropy (8bit):	7.8782997758684346
Encrypted:	false
SSDEEP:	384:KQhjZSW7lNcDQYxNTlJ6lS3y6dMNw1DDK9LbqpzS3lSx:7SW7ZYhJ6lSC6dMsDDdpzS34x
MD5:	5405D77C51FB46A0CBF26CB96FE4DA4D
SHA1:	32454DFA1AF07952738C877992EFF9D975C36B94
SHA-256:	A0F8CE7A5D5970E38741BAE9BAB7008CE3667987B8F0CF07A902DD9A25F9D0CB
SHA-512:	E1624D12C8C12B1F2A366FA0122C84043D01F3323F9769BAF3DD34A31D6A76BA0328D8F6D96E1EDD24A85E1AD9CE621A3707F250937FDE7EC98291141429DE23
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......sBIT....\|.d.....pHYs...F...F.hS .....tEXtSoftware.www.inkscape.org..<... .IDATx...w.dy]..w.....z.&.......!("\.%...k...I?....CP..%.@...J.`.z..E$..{..d........].}.OW....jvgf;VW.........Uof......B.VK...3.R..HJJH.w~..%."...y3..H...a..~.=.....`.cg..K:(.+~.......]+..`N.YIg.....JW........#..%.......H..Ig\S..n......J7.e.\|.......LK.E...o.t\.....%I?.tG...$.a..FS.>A..lQg....(...n...dVW4...w.8.....`....A.c$=V.%...5...K.[..$}Y.W.T...H.....Wp.LT...@.......=s...NC .T.n6...4..4......r......../EI......T:k6.`.....3+..%=E.OIz..;.?..%._%}F.7Yu. ....9vf..'.].$i.l"......\|.J...........y...j....tBR.h(xMK.w.n..U.W.?...../8vfB..$=U..$..M...J...OJ...J....l...<.3cj.._V{.?n6...*..Q.'.T:g8.....x.cg..~V...ICf.!..jO .GI.l....y.M....uN..i....ezp...O.....'"..h..J..zO..lI?'i.l"`K.>%..>..B....\.3.$....}...u.%._._[..E.a..h.`.cg"j..P........h.=_.>m....y.p4.0.3.....<I{....iF..$..J....`...@9v&&..%.H...l. k....{$}.J.k.. @h.0........~S.N.q.7...NI

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 14, 2025 00:48:25.683110952 CET	53	59762	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:25.683499098 CET	53	58484	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:26.689583063 CET	53	56731	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:29.408659935 CET	55111	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:29.408782959 CET	65229	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:29.417392969 CET	53	55111	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:29.418159962 CET	53	65229	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:31.353403091 CET	61797	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:31.355333090 CET	54045	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:31.377599001 CET	53	61797	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:31.567936897 CET	53	54045	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:31.744607925 CET	53	49304	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:32.493180037 CET	49944	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:32.493562937 CET	59063	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:32.513422966 CET	53	49944	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:32.521502972 CET	50166	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:32.521931887 CET	53112	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:32.522607088 CET	49266	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:32.523009062 CET	63250	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:32.523550987 CET	54545	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:32.523986101 CET	60577	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:32.538846016 CET	53	63250	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:32.538880110 CET	53	50166	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:32.538909912 CET	53	49266	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:32.538954020 CET	53	54545	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:32.538983107 CET	53	60577	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:32.539016008 CET	53	59063	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:32.539388895 CET	53	53112	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:33.466475010 CET	55081	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:33.466665983 CET	63553	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:33.473890066 CET	53	63553	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:33.474070072 CET	53	55081	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:33.552282095 CET	63799	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:33.552417040 CET	58047	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:33.559448004 CET	53	58047	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:33.560926914 CET	53	63799	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:34.523401022 CET	53	50916	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:36.257606983 CET	64474	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:36.258038044 CET	55952	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:36.265980005 CET	53	64474	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:36.266758919 CET	53	55952	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:37.010864973 CET	53594	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:37.010971069 CET	50590	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:48:37.021310091 CET	53	53594	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:37.022391081 CET	53	50590	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:41.946836948 CET	53	60491	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:45.054426908 CET	138	138	192.168.2.4	192.168.2.255
Feb 14, 2025 00:48:46.309068918 CET	53	56060	1.1.1.1	192.168.2.4
Feb 14, 2025 00:48:53.911557913 CET	53	52787	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:00.207525015 CET	65306	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:00.207674026 CET	62362	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:00.221856117 CET	53	62362	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:00.223472118 CET	53	65306	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:03.488503933 CET	51403	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:03.488826036 CET	56766	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:03.502315998 CET	53	51403	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:03.512332916 CET	53	56766	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:05.628797054 CET	61221	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:05.629082918 CET	51397	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:05.636635065 CET	53	61221	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:05.638052940 CET	53	51397	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:05.693316936 CET	51741	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:05.693316936 CET	52647	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:05.708112001 CET	53	52647	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:05.708122015 CET	53	51741	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:07.589174986 CET	49384	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:07.589689016 CET	58268	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:07.604085922 CET	53	49384	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:07.612179995 CET	53	58268	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:11.864520073 CET	58316	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:11.864754915 CET	63769	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:11.902244091 CET	53	63769	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:11.914104939 CET	53	58316	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:12.954633951 CET	58772	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:12.955343008 CET	61399	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:12.956376076 CET	57818	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:12.956376076 CET	61410	53	192.168.2.4	1.1.1.1
Feb 14, 2025 00:49:12.967652082 CET	53	58772	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:12.974644899 CET	53	61410	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:12.975470066 CET	53	61399	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:12.978043079 CET	53	57818	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:21.192969084 CET	53	64509	1.1.1.1	192.168.2.4
Feb 14, 2025 00:49:25.045952082 CET	53	57723	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Feb 14, 2025 00:48:31.568010092 CET	192.168.2.4	1.1.1.1	c22f	(Port unreachable)	Destination Unreachable
Feb 14, 2025 00:48:32.539235115 CET	192.168.2.4	1.1.1.1	c266	(Port unreachable)	Destination Unreachable
Feb 14, 2025 00:49:07.612231016 CET	192.168.2.4	1.1.1.1	c227	(Port unreachable)	Destination Unreachable
Feb 14, 2025 00:49:12.975555897 CET	192.168.2.4	1.1.1.1	c225	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:48:32 UTC	688	OUT	GET /Kennyiryiio/COCOPOOOUT.html HTTP/1.1 Host: infocorporacion.pe Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-13 23:48:32 UTC	206	IN	HTTP/1.1 200 OK Date: Thu, 13 Feb 2025 23:48:32 GMT Server: Apache Last-Modified: Mon, 10 Feb 2025 18:35:58 GMT Accept-Ranges: bytes Content-Length: 9036 Connection: close Content-Type: text/html
2025-02-13 23:48:32 UTC	7986	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 0d 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0d 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 68 65 69 67 68 74 3d 64 65 76 69 63 65 2d 68 65 69 67 68 74 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 0d 0a 20 20 20 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 30 43 55 53 49 47 4e 3c 2f 74 69 74 6c 65 3e 0d Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, height=device-height, initial-scale=1, maximum-scale=1, user-scalable=no" /> <title>D0CUSIGN</title>
2025-02-13 23:48:32 UTC	1050	IN	Data Raw: 20 74 68 65 20 69 6e 70 75 74 20 73 65 63 74 69 6f 6e 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 69 6e 70 75 74 53 65 63 74 69 6f 6e 22 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0d 0a 20 20 20 20 73 75 63 63 65 73 73 42 6f 78 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 62 6c 6f 63 6b 22 3b 0d 0a 0d 0a 20 20 20 20 2f 2f 20 53 69 6d 75 6c 61 74 65 20 61 20 64 65 6c 61 79 20 62 65 66 6f 72 65 20 72 65 64 69 72 65 63 74 69 6f 6e 0d 0a 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 28 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 52 65 64 69 72 65 63 74 20 74 6f 20 61 20 55 52 4c 20 77 69 74 68 20 74 68 65 20 65 6d 61 69 6c 20 61 70 70 65 6e 64 65 64 0d 0a 20 Data Ascii: the input section document.getElementById("inputSection").style.display = "none"; successBox.style.display = "block"; // Simulate a delay before redirection setTimeout(() => { // Redirect to a URL with the email appended

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:48:33 UTC	727	OUT	GET /736x/d1/3e/64/d13e649549d58b162cf918118d9ed562.jpg HTTP/1.1 Host: i.pinimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://infocorporacion.pe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-13 23:48:33 UTC	292	IN	HTTP/1.1 200 OK Connection: close Content-Length: 122606 ETag: "ef69419ac82f56c51b3b39522de73409" Content-Type: image/jpeg Cache-Control: max-age=31536000, immutable Accept-Ranges: bytes Vary: Origin X-CDN: fastly alt-svc: h3=":443";ma=604800 date: Thu, 13 Feb 2025 23:48:33 GMT
2025-02-13 23:48:33 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 03 b8 02 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 06 03 02 01 07 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 fd 50 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF,,C%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("P
2025-02-13 23:48:33 UTC	1378	IN	Data Raw: 00 00 1c b2 da e8 a6 52 4d bf 53 3d de e7 e1 06 3d d7 92 af 41 07 b9 97 9d 77 c0 b0 ce e8 63 95 55 d7 b2 4c 6d a6 83 d9 47 06 f2 71 87 99 a7 15 54 fa ce 45 5f 49 dd 4a 0f 37 fc 4c f5 c5 8f 33 8d 7e 83 81 45 de db e1 47 d2 eb c9 53 e6 e3 d9 c2 be f2 21 e3 3d b0 8c 52 de 71 b2 32 b5 9b 3f 25 5d 56 9b a9 9a a8 de 79 28 3c 68 ba 99 16 a7 89 49 07 6b c8 87 f2 de 31 2d e3 d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f2 7a 73 f4 7a 78 f0 76 79 f8 7b 78 1e dc fd 9f 5e 3c 9d 5e 7c 1d 5e 3e 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac b3 84 7e 71 fa 4d 0f 72 0c 3b 01 6b 94 bc f8 45 b8 ad fa 54 e8 6b fb 9f 69 6e 63 9a 0c ad af 02 3f 39 9e 4d 04 ea 7b 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: RMS==AwcULmGqTE_IJ7L3~EGS!=Rq2?%]Vy(<hIk1-zszxvy{x^<^\|^>~qMr;kETkinc?9M{
2025-02-13 23:48:33 UTC	1378	IN	Data Raw: 49 00 00 00 00 00 00 00 00 00 00 03 e5 45 96 54 bd eb 59 c4 b8 55 79 2d f9 52 48 2d fe d4 7a 2d a2 55 7a 34 9c 2b b8 96 9e aa 6b 4d 5f aa 4f 06 9f d4 39 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c fa 0f 9f 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 14 1e 2c ea 49 35 77 31 0b 68 9d fd 94 52 bd 75 20 46 b1 8a 7a f7 db a9 c2 0d c5 71 e6 ca 0c f2 65 7c ba f2 c7 d4 38 e4 f8 f1 be 96 1d ab bb 92 79 c6 8c 4e e9 53 e8 93 22 a6 41 63 1b 87 82 cf d5 5f 62 7c 3e 52 c8 56 35 bc cb 7e 7e ea 8b 0f b0 3e 97 3d 29 a5 1d 39 73 86 48 f7 57 28 b1 57 7b 2c 25 67 ae 0e 51 e1 f2 34 d0 fd 40 2c 79 41 f0 59 a8 ef 8b 10 00 00 00 00 00 00 00 00 00 23 7c a3 2f 54 9e 4b cf 79 6e Data Ascii: IETYUy-RH-z-Uz4+kM_O9\|@,I5w1hRu Fzqe\|8yNS"Ac_b\|>RV5~~>=)9sHW(W{,%gQ4@,yAY#\|/TKyn
2025-02-13 23:48:33 UTC	1378	IN	Data Raw: f2 e4 78 f9 79 f4 a7 e7 78 28 ec a5 0a 9f 37 02 86 7c f1 49 ea e4 41 ac d0 88 35 1a 51 47 0f 50 29 bc dd 8a bf 36 c2 bf 95 a8 a4 f9 78 2a e3 de 0c ff 00 2d 28 ac 8d 78 33 d6 53 c6 77 e6 8c 51 7a bb 00 00 00 00 00 00 00 00 00 00 01 97 91 a0 14 d1 f4 23 39 55 b8 14 13 2c c6 6e 36 b4 54 c1 d2 0a 1e 1a 51 9a b6 9e 31 93 f4 83 29 db 4a 28 97 a3 37 22 f0 67 78 ea 04 59 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 e6 9c ba 00 06 73 c1 a6 53 59 9d 94 de 8b 75 4f d2 d5 5b d0 9c aa 98 49 53 8b 85 2f 72 cd 49 e0 be 54 4d 25 23 41 2d d4 5d 0b 95 40 b7 47 80 5b a9 fe 17 28 70 0b b5 07 c3 40 a1 90 5b 28 3a 17 6c bc 92 fd 4d e8 b7 64 6e 0b 65 0f 52 e5 5d c8 b6 53 cd 25 b3 d3 8b 35 2c e2 63 37 3c b5 42 af 2f 55 1d 8b 16 76 49 72 a9 b6 00 00 00 00 Data Ascii: xyx(7\|IA5QGP)6x*-(x3SwQz#9U,n6TQ1)J(7"gxY@sSYuO[IS/rITM%#A-]@G[(p@[(:lMdneR]S%5,c7<B/UvIr
2025-02-13 23:48:33 UTC	1378	IN	Data Raw: 82 41 8e d7 7a f6 65 f8 ea 22 14 5d f4 5f 0c e7 1d 57 22 1d 7e 87 e1 8e b0 d0 7d 33 5c b5 7d 0c 65 86 8b c1 8e 91 a2 8c 57 59 4d ea 65 21 ec fe 15 95 ba 9e 65 0f 2d 37 23 1d 79 63 24 a9 a8 d7 f3 2b eb f4 9e 4c 9f 6b 89 c6 42 6e 8b e1 8f ef a7 f6 62 6c f4 51 8e 34 fa ce 26 66 1e c7 e9 59 77 cf a0 00 00 00 00 00 00 00 00 00 00 00 01 47 0e de 29 0a b6 fe 59 1e 9a f7 d9 98 d4 7a f6 50 2e 7a 11 e0 5f c5 33 76 d3 b9 95 be 2e bc 94 5a 0f 13 0c 5f 3d af 03 ce 73 49 e0 8f 06 e3 b1 98 93 a0 8e 53 f0 d1 c5 3a 67 b5 1c ca 8e 37 3e 8a 2b 19 1d 4a de d3 24 99 a9 96 5d 4c dc db 5f 25 4e 8e 0f 43 33 d2 e3 c9 5f da c6 31 5d 77 5d 30 55 68 39 90 ab 74 55 e5 5c b9 9d 8e 55 d7 9c ce 54 da 6a b2 0c a9 32 ca 58 f7 fc 8f b5 3a 28 a7 cb 0e 7d 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Aze"]_W"~}3\}eWYMe!e-7#yc$+LkBnblQ4&fYwG)YzP.z_3v.Z_=sIS:g7>+J$]L_%NC3_1]w]0Uh9tU\UTj2X:(}
2025-02-13 23:48:33 UTC	1378	IN	Data Raw: 7b 3a b6 b4 ee ea 4d ce ae 16 95 8a ea 9e be 49 19 ab b1 18 0b 7a f0 43 7d 8e 97 37 21 fc 6b 04 ea 89 cc df 49 ba 3b 03 fe 93 2f 41 5e 85 65 87 25 24 f1 8d fe 55 48 d0 68 c2 cf 13 92 e6 75 59 2b 72 9a 7f a7 70 be b2 91 2c ea df ea a7 ae 68 5a 8e bd b9 d6 c0 06 b8 ff 00 8f f3 9c f9 ce 55 6e 4f c4 d5 8d 67 33 73 79 f3 9f 34 56 08 7b eb 04 d3 f3 9c f9 cf 8f 9c e4 f4 63 8d b6 02 f7 e7 3e 38 c2 fa 87 3e 78 9a d6 fe 7c fe 9f 39 c6 d3 82 ff 00 9f d3 e7 3e 26 7e 3f 01 80 61 cf 9c f8 22 c0 15 d2 0c a3 e7 fa d5 4e 4f c5 d3 87 59 54 0b af 2d fb 2b 2c d3 d5 d8 b2 af dd ce 6d a3 f0 cb c1 60 9b 05 8d 5d a2 63 f3 f3 9f 3f d0 8b ea 29 a0 19 20 52 25 4f 2a a7 c0 cd b7 45 f4 d0 13 8e d9 80 73 f6 00 dd 67 64 20 b1 a8 7c fb 4a f2 cf ec 0f cf 94 4d 03 44 1b 35 5b 1b e6 a0 f6 Data Ascii: {:MIzC}7!kI;/A^e%$UHhuY+rp,hZUnOg3sy4V{c>8>x\|9>&~?a"NOYT-+,m`]c?) R%O*Esgd \|JMD5[
2025-02-13 23:48:33 UTC	1378	IN	Data Raw: 3d cf 6a af b2 f7 49 62 bd 2e cb ad 01 0e c3 37 37 3b 25 e0 38 e5 0f 76 84 10 56 d0 73 5b 2b be b6 5b 30 51 c7 d4 25 d8 89 30 60 93 fc 84 e2 f2 55 3d cc 96 46 d3 5a 89 74 d0 6c 45 4d f9 2e c9 be 9d 9a 78 df 61 fa e8 1c e7 e7 bc fc da 8a 83 e2 28 6e 8a eb ad 99 ef bb c4 8f b6 f6 cf b1 a8 7a 1c 7e e6 da df 62 0a 76 80 d3 73 5c ab 9e d0 20 f6 65 aa 75 85 fd 8e 78 f8 09 f8 e7 52 83 d5 29 e4 1d 8d 7f 19 47 77 3a f2 3e ce 5c 0e 31 83 65 f0 a7 e4 5a 25 35 55 25 1b d0 6c 08 31 2d f0 5f fd 8c 27 50 37 3a f9 70 4e 34 1f 06 29 c4 b6 19 b7 83 22 47 85 1c e4 b3 86 73 15 a0 16 e5 a1 6b 6e c4 8d 21 1c 01 c4 2f 19 90 cd 8e 54 eb 56 02 40 01 6b 15 03 61 99 cd 25 89 10 ce a1 62 e7 52 c9 88 13 67 a7 3f 06 19 c4 76 54 6d 03 1a 07 77 af 97 47 d5 4f 3d 29 fc 89 50 24 76 44 6a Data Ascii: =jIb.77;%8vVs[+[0Q%0`U=FZtlEM.xa(nz~bvs\ euxR)Gw:>\1eZ%5U%l1-_'P7:pN4)"Gskn!/TV@ka%bRg?vTmwGO=)P$vDj
2025-02-13 23:48:33 UTC	1378	IN	Data Raw: 50 ce 5c fc 7c bc 28 d0 5c 18 d0 2d 4c 68 49 b2 34 33 99 1a 31 db 0c fa 92 8e 72 d5 24 17 fc 82 df 81 de cb e0 02 ef b3 3a e2 33 eb 62 b9 b9 34 b4 e5 38 57 e8 95 55 38 b1 35 7c 6a bb 12 62 db d9 90 67 b5 bb b2 d7 af 3a 7b 0d 49 e5 85 f3 b7 fb 13 22 ed f5 de dd 57 3d cc de b7 2f 2f bf e4 74 b6 07 9b d7 0d c4 b5 9f 65 a2 bd b8 f3 46 fc dc eb cd cc ca 9f a8 c6 76 9f 50 b2 92 3f ef ed 0c 6a bf 18 bf ae c0 bd 64 f3 8a 12 33 64 cb 85 1e 05 14 2a 20 d8 84 b0 23 10 6f e3 d7 8a 6f 5e b6 70 22 00 74 92 0c d8 e8 16 dd 64 0b 36 0f 58 a1 e0 75 eb 59 51 38 b8 db 2f 8f a9 c8 05 8a 5c 0b 5b 67 40 a3 83 d7 ab 33 f1 c1 e0 38 c4 a8 08 94 1c 19 3c 6b a6 51 79 fe 31 5e 22 eb d7 a5 ff 00 3e 76 3a 33 5b d6 6e b4 7e e7 9d 4e 8f fd 52 cf 85 39 9f 7f c3 a3 ea 9d eb 68 2f 6e 6f 94 Data Ascii: P\\|(\-LhI431r$:3b48WU85\|jbg:{I"W=//teFvP?jd3d* #oo^p"td6XuYQ8/\[g@38<kQy1^">v:3[n~NR9h/no
2025-02-13 23:48:33 UTC	1378	IN	Data Raw: 56 76 9a d0 c7 b6 7a 24 ec 9c c0 17 e8 71 ef 5a 33 f2 13 7d 7d b4 fd 97 7c cc dd be 7c e6 76 29 e1 d0 b0 e3 5a 0a c2 be 6c 1b ee c4 c7 fd ba 85 63 91 f8 86 6a 81 05 9d 6e 75 0c 1c 67 50 d3 54 e9 d5 ce be 9d fa 4e 82 97 75 aa 84 bd b2 ea d9 f8 c7 f5 8e 31 0e b4 c6 d5 40 52 f2 64 1e f4 ac eb da 4b b1 06 e4 14 2d de 43 23 27 db a4 7d 06 50 37 52 e9 1e c0 64 84 ce ba a8 58 f1 bd 05 4c 6c 89 c7 c9 64 62 5a f4 37 6e 64 f4 35 d3 4c e9 33 d7 76 5c a4 37 ef 34 6c 91 79 d6 7f 94 e7 63 a8 9b ad 64 eb ba 52 a7 9d bf ce 08 c4 cc a8 61 21 08 64 db 3a ed 89 e7 33 43 10 f9 54 e9 fa ea d6 d6 62 7a e7 2c 7f 1a fc 9f 3f f1 ff 00 35 d2 e6 2a f8 2a 6d 53 fe 40 c7 af 3a 58 37 be b3 59 b2 ca 33 ae 95 bf 63 82 a3 73 a2 a9 8d a3 7f ae 75 0e 65 1d 70 5c fe 57 ec a1 11 38 9d c5 5a Data Ascii: Vvz$qZ3}}\|\|v)ZlcjnugPTNu1@RdK-C#'}P7RdXLldbZ7nd5L3v\74lycdRa!d:3CTbz,?5**mS@:X7Y3csuep\W8Z
2025-02-13 23:48:33 UTC	1378	IN	Data Raw: 46 dd e8 eb 91 cf d2 95 db a1 1b 70 27 1f 5f ae 42 36 89 a9 91 d4 35 92 bf de 81 4c 52 0e 2a 98 87 4a fd ab af 53 17 c0 91 8b d2 8e 92 55 12 bc a8 d9 2a 66 d1 0b 5a 9c 99 9e d5 4b 76 54 d8 9b f5 38 dd e4 64 6f f1 36 5a 75 6a 99 a2 f1 92 81 8d 72 51 89 c8 5f e0 38 dd e4 b5 24 c7 e4 4d de 1a 29 6c 9e b1 fd fd 03 fa 6c cf 20 81 6c 5e ae 43 11 ea 95 81 8d 99 9b 63 23 a9 da e5 3e 84 c2 a3 51 42 83 7c 5b 1d 24 06 ac 1a 23 f2 a2 1b 96 6c d0 89 df 5e b5 06 bf e3 fc f2 87 e2 78 16 6b 0b 8b 3d 20 e7 cf eb 94 e1 53 c6 50 21 47 db 7c b4 50 29 fd 7e 79 43 f1 1b f3 9f 1c a1 e2 81 f9 fd 4e 81 0a 3e 7f 40 05 af 87 40 85 3f 3c 45 02 d2 f9 e5 74 0c c9 e4 94 e5 3c db d6 27 ed 17 26 b7 d8 52 6e 07 73 de cd e6 d6 3e 43 ec 56 2a 45 22 d6 fe 9e 71 f6 ce bf ad 65 d9 2f 01 f6 f8 Data Ascii: Fp'_B65LRJSUfZKvT8do6ZujrQ_8$M)ll l^Cc#>QB\|[$#l^xk= SP!G\|P)~yCN>@@?<Et<'&Rns>CV*E"qe/

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:48:33 UTC	688	OUT	GET /3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://infocorporacion.pe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-13 23:48:33 UTC	515	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11460 Connection: close Date: Thu, 13 Feb 2025 08:07:06 GMT Last-Modified: Mon, 10 Jun 2024 21:10:48 GMT ETag: "a74f925f8c71704166ffa3433e9b96d5" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 6641a812839e5267ee0880e96b41efc4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: ZfP1JYSZAbhrZFk-Ud9yezdMpLgVZCapN0E_MKPhz6gGjAI5hX2ATw== Age: 56488
2025-02-13 23:48:33 UTC	11460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 53 00 00 01 87 08 06 00 00 00 7c b3 1d 0f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 2c 59 49 44 41 54 78 01 ed dd 3f ac 5d c7 7d 27 f0 51 60 17 2b 03 6b aa b0 5a 92 59 60 1b 05 10 d5 38 5b 85 62 17 20 09 48 35 76 49 31 75 00 8a 4d 02 6c 61 92 ee 12 04 20 09 18 70 b1 08 28 36 09 e2 86 e4 22 ed 82 62 1a 23 49 41 09 1b 63 bb 50 5a 6c b1 31 10 50 2a ac 2d 52 78 f9 bd ca 38 4f f4 e3 e3 9b 7b e6 fc 7d 9f 0f f0 fc 28 99 7a f7 be 39 73 ce 3d f3 3d bf 99 79 ed 97 cf 15 00 00 00 00 8e e5 37 0a 00 00 00 00 c7 26 4c 01 00 00 00 68 20 4c 01 00 00 00 68 20 4c 01 00 00 00 68 20 4c 01 00 00 00 68 20 4c Data Ascii: PNGIHDRS\|pHYssRGBgAMAa,YIDATx?]}'Q`+kZY`8[b H5vI1uMla p(6"b#IAcPZl1P*-Rx8O{}(z9s==y7&Lh Lh Lh Lh L

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:48:33 UTC	606	OUT	GET /512/847/847969.png HTTP/1.1 Host: cdn-icons-png.flaticon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://infocorporacion.pe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-13 23:48:33 UTC	694	IN	HTTP/1.1 200 OK Last-Modified: Thu, 14 Oct 2021 22:11:26 GMT ETag: "5405d77c51fb46a0cbf26cb96fe4da4d" x-goog-generation: 1634249486697380 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 17531 x-amz-meta-goog-reserved-file-mtime: 1525850581 x-amz-meta-x-goog-reserved-source-generation: 1627252422068116 Content-Type: image/png x-amz-checksum-crc32c: B8eOgw== Accept-Ranges: bytes Content-Length: 17531 Expires: Thu, 13 Feb 2025 23:48:33 GMT Date: Thu, 13 Feb 2025 23:48:33 GMT Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: * Pragma: public Cache-Control: public, max-age=31536000 X-default-rule: YES
2025-02-13 23:48:33 UTC	15690	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0f 46 00 00 0f 46 01 68 53 20 82 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 77 77 77 2e 69 6e 6b 73 63 61 70 65 2e 6f 72 67 9b ee 3c 1a 00 00 20 00 49 44 41 54 78 9c ed dd 77 9c 64 79 5d ff fb 77 e5 ee ae 0e a7 bb 7a a6 26 b3 b3 bb b3 93 d8 dd 21 28 22 5c 05 25 88 01 81 6b 84 9f 04 49 3f 14 af 8b f2 43 50 bc e0 25 fc 40 91 a0 02 4a 90 60 b8 7a e5 12 45 24 88 f8 7b 90 05 64 17 d8 dd d9 d9 d9 c9 dd 5d dd 7d ba 4f 57 ce f5 fb a3 6a 76 67 66 3b 56 57 d5 f7 84 d7 f3 f1 98 c7 cc b0 d3 55 6f 66 fa 9c cf a7 be e7 1b 42 ad 56 4b 00 dc cd b1 33 c3 92 52 1b fc 48 4a 4a 48 8a 77 7e de Data Ascii: PNGIHDRxsBIT\|dpHYsFFhS tEXtSoftwarewww.inkscape.org< IDATxwdy]wz&!("\%kI?CP%@J`zE${d]}OWjvgf;VWUofBVK3RHJJHw~
2025-02-13 23:48:33 UTC	1841	IN	Data Raw: 81 a0 89 46 a3 cd d1 d1 b1 bf 8e 46 a3 2f 3e 74 e4 e6 a6 e9 3c 18 3c 1a 80 80 3b 75 f7 f7 d2 95 4a e5 e3 f9 7c ee 47 f8 5e 00 fc 2f 14 0a 69 74 74 f4 eb f1 78 e2 e9 37 1d bd 65 ce 74 1e 98 43 03 00 49 d2 c9 3b 6f 7f 7c a9 54 fa fb 52 a9 b8 cb 74 16 00 fd 31 3c 3c 32 37 34 34 f4 ac 23 c7 4f 7c d1 74 16 98 47 03 80 ab dc fd 83 ff 7a 79 a1 50 78 5d b5 5a 1d 32 9d 05 40 6f c4 e3 f1 72 32 99 fc c3 23 c7 1f f6 16 d3 59 e0 1e 34 00 78 90 f3 67 4e 45 8a c5 c2 9f 15 0a f9 17 56 ab d5 98 e9 3c 00 ba 13 8f c7 6b c9 e4 e8 7b 47 46 92 ff d7 81 83 87 1a a6 f3 c0 5d 68 00 b0 a6 fb 4e dd 99 a8 54 2a ef 2a 14 f2 cf ae d5 6a 1c 32 04 78 44 2c 16 ab 27 93 a3 1f 4e 24 12 bf 71 fd a1 63 15 d3 79 e0 4e 34 00 d8 d0 99 7b ef 1e 29 97 4b ef cd e7 f3 bf 5c af d7 22 a6 f3 00 58 5d Data Ascii: FF/>t<<;uJ\|G^/ittx7etCI;o\|TRt1<<2744#O\|tGzyPx]Z2@or2#Y4xgNEV<k{GF]hNT**j2xD,'N$qcyN4{)K\"X]

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:48:33 UTC	557	OUT	GET /5be974e/build/signer.css HTTP/1.1 Host: cdn.hellosign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://infocorporacion.pe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-13 23:48:33 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1008617 Connection: close Last-Modified: Wed, 08 Jan 2025 07:36:16 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: xPy3iaIzfH7jJUNjG6bxxeSHjjBHkell Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 13 Feb 2025 15:08:19 GMT ETag: "b8843b5201e924093de6adbc9030bead" X-Cache: Hit from cloudfront Via: 1.1 38dab0d877593711162f7409f4fc8fca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: rCeyxhZHONkIiPkRtOwzvo2oQgjGcHb8VhZNv_Mf7Q3lpzQdibTSnw== Age: 31215 Vary: Origin
2025-02-13 23:48:33 UTC	16384	IN	Data Raw: 2f 2a 21 20 43 6f 6d 6d 69 74 20 48 61 73 68 3a 20 35 62 65 39 37 34 65 39 62 35 20 2a 2f 2e 72 6f 77 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 37 31 2e 32 35 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 3b 2a 7a 6f 6f 6d 3a 31 7d 2e 72 6f 77 3a 61 66 74 65 72 2c 2e 72 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 72 6f 77 2e 63 6f 6c 6c 61 70 73 65 3e 2e 63 6f 6c 75 6d 6e 2c 2e 72 6f 77 2e 63 6f 6c 6c 61 70 73 65 3e 2e 63 6f 6c 75 6d 6e 73 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 72 6f 77 2e 63 6f 6c 6c 61 70 73 65 20 2e 72 6f 77 7b 6d 61 Data Ascii: /! Commit Hash: 5be974e9b5 /.row{margin:0 auto;max-width:71.25rem;width:100%;*zoom:1}.row:after,.row:before{content:" ";display:table}.row:after{clear:both}.row.collapse>.column,.row.collapse>.columns{padding-left:0;padding-right:0}.row.collapse .row{ma
2025-02-13 23:48:33 UTC	16384	IN	Data Raw: 64 69 75 6d 2c 2e 68 69 64 65 2d 66 6f 72 2d 6d 65 64 69 75 6d 2d 64 6f 77 6e 2c 2e 68 69 64 65 2d 66 6f 72 2d 6d 65 64 69 75 6d 2d 6f 6e 6c 79 2c 2e 68 69 64 65 2d 66 6f 72 2d 6d 65 64 69 75 6d 2d 75 70 2c 2e 68 69 64 65 2d 66 6f 72 2d 73 6d 61 6c 6c 2d 75 70 2c 2e 68 69 64 65 2d 66 6f 72 2d 78 6c 61 72 67 65 2d 64 6f 77 6e 2c 2e 68 69 64 65 2d 66 6f 72 2d 78 78 6c 61 72 67 65 2d 64 6f 77 6e 2c 2e 73 68 6f 77 2d 66 6f 72 2d 6c 61 72 67 65 2c 2e 73 68 6f 77 2d 66 6f 72 2d 6c 61 72 67 65 2d 6f 6e 6c 79 2c 2e 73 68 6f 77 2d 66 6f 72 2d 6c 61 72 67 65 2d 75 70 2c 2e 73 68 6f 77 2d 66 6f 72 2d 73 6d 61 6c 6c 2c 2e 73 68 6f 77 2d 66 6f 72 2d 73 6d 61 6c 6c 2d 64 6f 77 6e 2c 2e 73 68 6f 77 2d 66 6f 72 2d 73 6d 61 6c 6c 2d 6f 6e 6c 79 2c 2e 73 68 6f 77 2d 66 6f Data Ascii: dium,.hide-for-medium-down,.hide-for-medium-only,.hide-for-medium-up,.hide-for-small-up,.hide-for-xlarge-down,.hide-for-xxlarge-down,.show-for-large,.show-for-large-only,.show-for-large-up,.show-for-small,.show-for-small-down,.show-for-small-only,.show-fo
2025-02-13 23:48:33 UTC	16384	IN	Data Raw: 74 61 62 6c 65 2d 68 65 61 64 65 72 2d 67 72 6f 75 70 21 69 6d 70 6f 72 74 61 6e 74 7d 74 62 6f 64 79 2e 68 69 64 65 2d 66 6f 72 2d 6c 61 6e 64 73 63 61 70 65 2c 74 62 6f 64 79 2e 73 68 6f 77 2d 66 6f 72 2d 70 6f 72 74 72 61 69 74 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 72 6f 77 2d 67 72 6f 75 70 21 69 6d 70 6f 72 74 61 6e 74 7d 74 72 2e 68 69 64 65 2d 66 6f 72 2d 6c 61 6e 64 73 63 61 70 65 2c 74 72 2e 73 68 6f 77 2d 66 6f 72 2d 70 6f 72 74 72 61 69 74 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 72 6f 77 21 69 6d 70 6f 72 74 61 6e 74 7d 74 64 2e 68 69 64 65 2d 66 6f 72 2d 6c 61 6e 64 73 63 61 70 65 2c 74 64 2e 73 68 6f 77 2d 66 6f 72 2d 70 6f 72 74 72 61 69 74 2c 74 68 2e 68 69 64 65 2d 66 6f 72 2d 6c 61 6e 64 73 63 61 70 65 2c 74 68 2e 73 68 6f 77 Data Ascii: table-header-group!important}tbody.hide-for-landscape,tbody.show-for-portrait{display:table-row-group!important}tr.hide-for-landscape,tr.show-for-portrait{display:table-row!important}td.hide-for-landscape,td.show-for-portrait,th.hide-for-landscape,th.show
2025-02-13 23:48:33 UTC	16384	IN	Data Raw: 62 75 74 74 6f 6e 2e 6c 61 72 67 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 3a 31 2e 31 32 35 72 65 6d 20 32 2e 32 35 72 65 6d 20 31 2e 31 38 37 35 72 65 6d 7d 2e 62 75 74 74 6f 6e 2e 73 6d 61 6c 6c 2c 62 75 74 74 6f 6e 2e 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 3a 2e 38 37 35 72 65 6d 20 31 2e 37 35 72 65 6d 20 2e 39 33 37 35 72 65 6d 7d 2e 62 75 74 74 6f 6e 2e 74 69 6e 79 2c 62 75 74 74 6f 6e 2e 74 69 6e 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 38 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 3a 2e 36 32 35 72 65 6d 20 31 2e 32 35 72 65 6d 20 2e 36 38 37 35 72 65 6d 7d 2e 62 75 74 74 6f 6e 2e 65 78 70 61 6e 64 2c 62 75 74 74 6f 6e 2e 65 78 70 61 6e 64 7b 70 61 64 64 Data Ascii: button.large{font-size:1.25rem;padding:1.125rem 2.25rem 1.1875rem}.button.small,button.small{font-size:.8125rem;padding:.875rem 1.75rem .9375rem}.button.tiny,button.tiny{font-size:.6875rem;padding:.625rem 1.25rem .6875rem}.button.expand,button.expand{padd
2025-02-13 23:48:33 UTC	16384	IN	Data Raw: 6c 2d 70 61 64 64 69 6e 67 2d 76 2d 2d 32 35 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2d 32 35 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2d 32 35 70 78 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 76 2d 2d 32 35 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 32 35 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 70 78 7d 2e 6c 2d 70 61 64 64 69 6e 67 2d 62 2d 2d 32 35 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2d 32 35 70 78 7d 2e 6c 2d 70 61 64 64 69 6e 67 2d 74 2d 2d 32 35 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2d 32 35 70 78 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 74 2d 2d 32 35 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 70 78 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 62 2d 2d 32 35 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 32 35 70 78 7d 2e 6c 2d 70 61 Data Ascii: l-padding-v--25{padding-bottom:-25px;padding-top:-25px}.l-margin-v--25{margin-bottom:-25px;margin-top:-25px}.l-padding-b--25{padding-bottom:-25px}.l-padding-t--25{padding-top:-25px}.l-margin-t--25{margin-top:-25px}.l-margin-b--25{margin-bottom:-25px}.l-pa
2025-02-13 23:48:33 UTC	16384	IN	Data Raw: 20 70 2e 6c 2d 70 61 64 64 69 6e 67 2d 74 2d 30 2c 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 68 35 2e 6c 2d 70 61 64 64 69 6e 67 2d 74 2d 30 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 68 65 61 64 65 72 2c 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 68 35 2e 6c 2d 70 61 64 64 69 6e 67 2d 74 2d 30 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 73 75 62 2d 68 65 61 64 65 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 7d 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 2e 66 6c 65 78 2d 76 69 64 65 6f 2e 6c 2d 70 61 64 64 69 6e 67 2d 62 2d 30 2c 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 68 35 2e 6c 2d 70 61 64 64 69 6e 67 2d 62 2d 30 2e 6d 2d 66 65 Data Ascii: p.l-padding-t-0,.m-sign-mobile .l-api-docs h5.l-padding-t-0.m-feature-grid--header,.m-sign-mobile .l-api-docs h5.l-padding-t-0.m-feature-grid--sub-header{padding-top:0}.l-api-docs .flex-video.l-padding-b-0,.l-api-docs .m-sign-mobile h5.l-padding-b-0.m-fe
2025-02-13 23:48:33 UTC	16384	IN	Data Raw: 20 2e 66 6c 65 78 2d 76 69 64 65 6f 2e 6c 2d 6d 61 72 67 69 6e 2d 74 2d 37 30 2c 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 68 35 2e 6c 2d 6d 61 72 67 69 6e 2d 74 2d 37 30 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 68 65 61 64 65 72 2c 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 68 35 2e 6c 2d 6d 61 72 67 69 6e 2d 74 2d 37 30 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 73 75 62 2d 68 65 61 64 65 72 2c 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 70 2e 6c 2d 6d 61 72 67 69 6e 2d 74 2d 37 30 2c 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 68 35 2e 6c 2d 6d 61 72 67 69 6e 2d 74 2d 37 30 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 68 65 Data Ascii: .flex-video.l-margin-t-70,.l-api-docs .m-sign-mobile h5.l-margin-t-70.m-feature-grid--header,.l-api-docs .m-sign-mobile h5.l-margin-t-70.m-feature-grid--sub-header,.l-api-docs p.l-margin-t-70,.m-sign-mobile .l-api-docs h5.l-margin-t-70.m-feature-grid--he
2025-02-13 23:48:33 UTC	13695	IN	Data Raw: 74 75 72 65 2d 67 72 69 64 2d 2d 73 75 62 2d 68 65 61 64 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 34 30 70 78 7d 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 2e 66 6c 65 78 2d 76 69 64 65 6f 2e 6c 2d 70 61 64 64 69 6e 67 2d 76 2d 31 35 30 2c 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 68 35 2e 6c 2d 70 61 64 64 69 6e 67 2d 76 2d 31 35 30 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 68 65 61 64 65 72 2c 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 68 35 2e 6c 2d 70 61 64 64 69 6e 67 2d 76 2d 31 35 30 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 73 75 62 2d 68 65 61 64 65 72 2c 2e 6c 2d 61 70 69 2d 64 6f 63 73 20 70 2e 6c 2d 70 61 64 64 69 6e 67 2d 76 2d 31 35 30 2c 2e Data Ascii: ture-grid--sub-header{margin-bottom:140px}.l-api-docs .flex-video.l-padding-v-150,.l-api-docs .m-sign-mobile h5.l-padding-v-150.m-feature-grid--header,.l-api-docs .m-sign-mobile h5.l-padding-v-150.m-feature-grid--sub-header,.l-api-docs p.l-padding-v-150,.
2025-02-13 23:48:33 UTC	1576	IN	Data Raw: 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 35 65 6d 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 35 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 30 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 30 7d 2e 6d 2d 62 75 74 74 6f 6e 2e 6d 2d 62 75 74 74 6f 6e 2d 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e Data Ascii: etter-spacing:.05em;letter-spacing:0;margin:5px;min-height:32px;outline:none;padding:0 12px;text-align:center;text-transform:none!important;-webkit-transition:0;-o-transition:0;transition:0}.m-button.m-button--hidden{display:none}.m-button:hover{backgroun
2025-02-13 23:48:33 UTC	12792	IN	Data Raw: 6d 2d 67 72 69 64 2d 66 61 64 65 2d 69 6e 20 2e 67 72 69 64 2d 69 6d 61 67 65 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 39 30 70 78 7d 2e 6d 2d 67 72 69 64 2d 66 61 64 65 2d 69 6e 2e 77 68 69 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 2e 6d 2d 67 72 69 64 2d 66 61 64 65 2d 69 6e 20 6c 69 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 37 30 70 78 7d 2e 6d 2d 67 72 69 64 2d 66 61 64 65 2d 69 6e 20 6c 69 20 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 68 35 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 68 65 61 64 65 72 2c 2e 6d 2d 67 72 69 64 2d 66 61 64 65 2d 69 6e 20 6c 69 20 2e 6d 2d 73 69 67 6e 2d 6d 6f 62 69 6c 65 20 68 35 2e 6d 2d 66 65 61 74 75 72 65 2d 67 72 69 64 2d 2d 73 75 62 2d 68 65 61 64 65 72 2c 2e 6d 2d 67 72 69 64 2d 66 61 64 Data Ascii: m-grid-fade-in .grid-image{min-height:90px}.m-grid-fade-in.white{background:#fff}.m-grid-fade-in li{padding-bottom:70px}.m-grid-fade-in li .m-sign-mobile h5.m-feature-grid--header,.m-grid-fade-in li .m-sign-mobile h5.m-feature-grid--sub-header,.m-grid-fad

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:48:34 UTC	450	OUT	GET /3fcisxc3a6xz/docusign_logo_black_text_on_white_0.png/90872cd475f92acafc7c490c93976e40/ds-logo-on-white.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-13 23:48:34 UTC	515	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11460 Connection: close Date: Thu, 13 Feb 2025 08:07:06 GMT Last-Modified: Mon, 10 Jun 2024 21:10:48 GMT ETag: "a74f925f8c71704166ffa3433e9b96d5" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 32c1b1f3aed1f2411468b70713ad6556.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: EaRj6dgkUYEOwpL0aav8vXHRkRTOtPMAMz5meyTdr5ZeSl55w0QB_w== Age: 56489
2025-02-13 23:48:34 UTC	11460	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 53 00 00 01 87 08 06 00 00 00 7c b3 1d 0f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 2c 59 49 44 41 54 78 01 ed dd 3f ac 5d c7 7d 27 f0 51 60 17 2b 03 6b aa b0 5a 92 59 60 1b 05 10 d5 38 5b 85 62 17 20 09 48 35 76 49 31 75 00 8a 4d 02 6c 61 92 ee 12 04 20 09 18 70 b1 08 28 36 09 e2 86 e4 22 ed 82 62 1a 23 49 41 09 1b 63 bb 50 5a 6c b1 31 10 50 2a ac 2d 52 78 f9 bd ca 38 4f f4 e3 e3 9b 7b e6 fc 7d 9f 0f f0 fc 28 99 7a f7 be 39 73 ce 3d f3 3d bf 99 79 ed 97 cf 15 00 00 00 00 8e e5 37 0a 00 00 00 00 c7 26 4c 01 00 00 00 68 20 4c 01 00 00 00 68 20 4c 01 00 00 00 68 20 4c 01 00 00 00 68 20 4c Data Ascii: PNGIHDRS\|pHYssRGBgAMAa,YIDATx?]}'Q`+kZY`8[b H5vI1uMla p(6"b#IAcPZl1P*-Rx8O{}(z9s==y7&Lh Lh Lh Lh L

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:48:35 UTC	611	OUT	GET /5be974e/build/a6d09f4028ea300af1bd.ttf HTTP/1.1 Host: cdn.hellosign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://infocorporacion.pe sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.hellosign.com/5be974e/build/signer.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-13 23:48:35 UTC	616	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 767752 Connection: close Date: Thu, 13 Feb 2025 15:08:21 GMT Last-Modified: Wed, 08 Jan 2025 07:36:13 GMT ETag: "a6895faa7a3a5985877a1e4900faadf2" x-amz-server-side-encryption: AES256 x-amz-version-id: bvdFDnYtiGfhcdkaD0Lfgn7ys7VgCUwP Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 93e77bd122e2a2b3ec02228d81a35184.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P10 X-Amz-Cf-Id: x7IZ-vbpfd6hId4O_9dOQfrbdyBrRZKw2--8WF075f2Itbo63s19nA== Age: 31215 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
2025-02-13 23:48:35 UTC	16384	IN	Data Raw: 00 01 00 00 00 18 01 00 00 04 00 80 44 53 49 47 ac 59 19 4f 00 0a e3 48 00 00 15 70 47 44 45 46 89 d5 8d 49 00 0a f8 b8 00 00 02 c2 47 50 4f 53 8f e0 1e fb 00 0a fb 7c 00 00 9f f2 47 53 55 42 a1 ee fb a2 00 0b 9b 70 00 00 1b 76 4a 53 54 46 6d 2a 69 06 00 0b b6 e8 00 00 00 1e 4c 54 53 48 e4 93 6b 53 00 00 37 3c 00 00 0d 39 4f 53 2f 32 20 55 3a 67 00 00 02 08 00 00 00 60 50 43 4c 54 fd 7b 3e 43 00 0a e3 10 00 00 00 36 56 44 4d 58 50 92 6a f5 00 00 44 78 00 00 11 94 63 6d 61 70 82 e3 ce 2f 00 01 93 54 00 00 21 9e 63 76 74 20 a1 1c d7 eb 00 01 c7 24 00 00 06 54 66 70 67 6d cc 79 59 9a 00 01 b4 f4 00 00 06 6e 67 61 73 70 00 18 00 09 00 0a e3 00 00 00 00 10 67 6c 79 66 07 02 2d ca 00 02 02 50 00 08 22 cc 68 64 6d 78 11 10 25 d5 00 00 56 0c 00 01 3d 48 68 65 61 Data Ascii: DSIGYOHpGDEFIGPOS\|GSUBpvJSTFm*iLTSHkS7<9OS/2 U:g`PCLT{>C6VDMXPjDxcmap/T!cvt $TfpgmyYngaspglyf-P"hdmx%V=Hhea
2025-02-13 23:48:35 UTC	1514	IN	Data Raw: 01 31 0b df 01 01 01 0c 0c 27 37 01 05 01 01 0b 01 01 01 01 01 01 1c 01 32 19 01 01 01 01 01 01 2b 01 2b 01 13 16 29 01 01 01 01 05 2e 01 01 01 01 01 01 01 01 01 12 01 01 01 01 2d 01 19 01 07 01 01 2b 01 1c 01 1c 01 01 2e 01 1c 0d 01 01 01 01 01 01 01 01 3e 18 28 01 01 01 01 2e 14 2e 14 01 01 16 01 01 25 26 25 26 01 01 0c 27 01 01 18 28 19 0b 19 01 0c 37 0c 37 12 24 01 01 01 31 31 c4 31 c4 31 c4 1c 01 31 01 01 23 11 01 01 14 01 01 12 01 01 01 01 12 03 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 25 26 01 35 01 35 01 35 2e 0b 2e 23 2e 23 2e 23 2e 23 2e 23 0c 27 0c 27 0c 27 0c 27 01 01 1c 65 12 53 2e 37 2e 37 2e 37 2e 37 2e 37 3e 39 3e ff 01 5d 01 5d 01 5d 01 39 01 39 01 39 01 39 75 b2 Data Ascii: 1'72++).-+.>(..%&%&'(77$11111#%&555..#.#.#.#.#''''eS.7.7.7.7.7>9>]]]9999u
2025-02-13 23:48:35 UTC	16384	IN	Data Raw: 00 41 00 3b ff f2 00 42 00 3c ff f2 00 43 00 3c ff f1 00 44 00 3d ff f1 00 45 00 3e ff f1 00 46 00 3f ff f0 00 47 00 40 ff f0 00 48 00 41 ff f0 00 49 00 42 ff f0 00 4a 00 42 ff f0 00 4b 00 43 ff f0 00 4c 00 44 ff f0 00 4d 00 46 ff ef 00 4e 00 46 ff ef 00 4f 00 47 ff ef 00 50 00 48 ff ef 00 51 00 49 ff ee 00 52 00 49 ff ee 00 53 00 4a ff ee 00 54 00 4b ff ed 00 55 00 4d ff ed 00 56 00 4d ff ed 00 57 00 4e ff ed 00 58 00 4f ff ec 00 59 00 50 ff ec 00 5a 00 50 ff ed 00 5b 00 51 ff ec 00 5c 00 53 ff ec 00 5d 00 54 ff ec 00 5e 00 54 ff ec 00 5f 00 55 ff eb 00 60 00 56 ff eb 00 61 00 57 ff eb 00 62 00 57 ff ea 00 63 00 59 ff ea 00 64 00 5a ff ea 00 65 00 5b ff ea 00 66 00 5c ff e9 00 67 00 5c ff e9 00 68 00 5d ff e9 00 69 00 5e ff e8 00 6a 00 60 ff e9 00 6b 00 Data Ascii: A;B<C<D=E>F?G@HAIBJBKCLDMFNFOGPHQIRISJTKUMVMWNXOYPZP[Q\S]T^T_U`VaWbWcYdZe[f\g\h]i^j`k
2025-02-13 23:48:35 UTC	16384	IN	Data Raw: 08 08 08 08 08 06 08 08 08 08 08 06 08 08 08 08 08 06 08 08 08 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 05 05 09 08 0c 0e 0c 08 0c 09 0c 08 0b 08 09 06 09 08 0b 09 0d 0d 0a 08 0a 08 0a 0a 09 09 0b 08 07 06 09 09 08 03 0c 07 07 0a 0b 08 08 14 09 0c 09 0e 0b 0a 08 0d 0a 0c 0a 10 0d 09 07 0c 0a 0c 08 0c 09 0c 09 15 11 0d 09 12 0d 00 14 09 0b 08 08 00 00 00 00 00 00 0b 08 0a 08 0a 08 0a 08 09 07 09 07 0b 08 0d 0a 11 0d 0b 08 0b 08 09 07 0e 0a 0a 08 0d 0a 0d 0a 03 0e 09 0a 08 0a 09 0b 08 0b 08 0a 08 0d 0a 05 09 08 09 08 0f 0d Data Ascii:
2025-02-13 23:48:35 UTC	12398	IN	Data Raw: 0d 06 06 0d 0d 0e 0d 0d 0d 07 09 09 09 09 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0f 0e 0f 0e 06 06 0a 0a 0f 0e 06 06 0f 0e 13 13 13 13 05 00 00 00 00 00 00 00 1b 1a 00 00 00 00 00 00 05 09 00 00 0e 00 00 00 14 14 0d 0d 1a 1a 14 14 0d 0b 0d 09 0a 08 07 06 08 06 06 06 06 06 13 16 06 00 08 0c 0d 0e 0d 0e 0d 0e 0d 0e 0d 0e 0d 0e 0d 0e 0d 0d 0d 0e 0d 12 10 0d 10 0d 11 11 0c 11 13 10 0d 0d 10 0f 0f 13 0f 15 05 07 10 0c 05 0c 15 11 0d 13 15 10 12 0d 10 10 0c 0f 09 07 0f 07 0f 12 11 13 0c 0f 0c 0f 0f 0d 0d 0d 0d 0b 0c 0d 06 0a 0e 08 20 1d 19 19 14 0b 1d 17 13 0d 0f 0d 00 0f 0d 18 15 13 0d 13 0e 10 0c 13 0d 13 0d 0f 0d 05 20 1d 19 13 0e 19 0f 11 0e 0f 0d 0f 0d 10 0d 10 0d 06 06 06 06 13 0d 13 0d 11 08 11 08 11 0e 11 0e 10 0c 0e 07 0d 0a 11 0e 11 0f 0e 0f Data Ascii:
2025-02-13 23:48:35 UTC	1561	IN	Data Raw: 1a 12 1a 12 1a 12 18 12 18 12 09 09 09 09 09 09 09 07 11 07 16 10 11 12 07 18 12 18 12 1a 11 1a 11 18 0b 16 11 14 09 18 12 18 12 18 12 18 12 22 17 15 0f 07 16 11 21 1d 1a 14 09 22 17 22 17 22 17 15 0f 07 0b 12 14 1c 1c 1c 1c 0b 0b 0b 0b 16 1a 1c 0d 1a 1b 19 07 16 16 16 16 14 18 09 16 16 1b 18 15 1a 18 16 14 15 15 15 1b 19 09 15 13 0e 12 07 12 13 11 0f 12 11 07 11 11 13 0f 0f 11 12 0f 12 11 17 19 07 12 11 12 19 16 1d 12 18 16 09 09 11 23 21 1c 13 15 18 16 15 16 12 16 16 1e 14 18 18 13 16 1b 18 1a 18 16 18 15 15 19 15 18 16 1e 1f 1a 1d 16 18 21 18 11 12 11 0c 13 11 15 0f 12 12 0e 13 17 12 11 12 12 11 0f 0f 1a 0f 13 11 1a 1b 14 18 12 11 19 12 11 12 0c 11 11 07 09 07 1d 1a 12 0e 0f 12 10 0e 21 23 17 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 00 07 00 00 09 13 Data Ascii: "!"""#!!!#
2025-02-13 23:48:35 UTC	16384	IN	Data Raw: 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 12 0d 12 12 12 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 0b 0b 13 12 19 20 19 12 1a 14 1a 12 18 11 14 0d 15 11 19 13 1d 1b 16 12 16 11 16 16 Data Ascii:
2025-02-13 23:48:35 UTC	10463	IN	Data Raw: 1d 2c 2c 1d 1d 2c 2c 1d 1d 3b 3b 2e 2e 3b 3b 2e 2e 1f 1f 1d 18 1c 15 2b 2b 2b 0e 0e 2b 2b 0e 0e 2b 2b 0e 0e 2b 2b 0e 0e 2b 2b 0e 0e 1f 1f 1f 1f 3e 3e 31 31 2c 32 15 1c 20 20 15 15 20 20 15 15 20 20 15 15 2c 32 15 1c 2c 32 15 1c 2c 32 15 1c 2c 32 15 1c 2c 32 15 1c 1b 1b 0b 0b 1b 1b 0b 0b 1b 1b 0b 0b 1b 1b 0b 0b 1c 1c 0d 0d 1c 1c 1c 1c 1c 1c 0d 0d 1c 1c 1e 1c 1d 1d 0f 14 15 15 15 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 17 22 20 22 20 0d 0d 17 17 22 20 0d 0d 22 20 2c 2c 2c 2c 0b 00 00 00 00 00 00 00 3d 3b 00 00 00 00 00 00 0a 14 00 00 20 00 00 00 2c 2c 1d 1d 3b 3b 2e 2e 1d 18 1c 15 16 12 0f 0d 11 0d 0d 0d 0d 0d 2c 32 0d 00 12 1a 1d 20 1d 20 1d 20 1d 20 1d 20 1d 20 1d 20 1c 1c 1d 20 1e 29 23 1e 23 1e 27 27 1b 27 2c 23 1e 1e 24 21 21 2a 22 30 0c 0f 24 1b Data Ascii: ,,,,;;..;;..+++++++++++>>11,2 ,2,2,2,2,2" " " " ,,,,=; ,,;;..,2 )##''',#$!!*"0$
2025-02-13 23:48:35 UTC	16384	IN	Data Raw: 2a 3a 2a 32 26 3a 2a 3a 2a 2e 29 11 64 5c 4f 3a 2a 4e 2e 36 2a 32 2a 32 2a 32 2a 32 2a 15 15 15 15 3a 2a 3a 2a 36 19 36 19 36 2a 36 2a 32 26 2d 15 29 21 36 2a 35 2d 2a 2e 26 32 2a 32 2a 3a 2a 00 3a 2a 3a 2a 3a 2a 31 25 2a 2a 2a 2a 26 26 2a 2a 2a 37 22 22 2f 26 15 2a 2a 2a 26 2e 2a 2a 2a 11 11 11 19 17 11 2b 3e 3e 3e 2a 2a 29 2a 3b 3b 29 19 19 19 19 19 19 19 29 29 26 11 13 11 1a 15 15 2a 2b 29 26 36 26 27 26 29 29 29 26 26 26 26 3a 28 26 2a 29 1e 26 1e 2a 26 26 48 44 4b 35 20 36 39 32 2f 24 28 1d 1d 0c 12 12 12 1b 24 18 0e 1b 11 11 11 19 19 1a 1a 2c 2c 2c 2c 19 19 19 19 19 19 19 15 15 19 19 19 19 19 19 19 19 18 0c 19 19 1a 1d 1d 1d 1d 1d 19 19 19 19 19 29 29 29 29 29 29 29 29 29 1d 29 29 29 29 29 1d 29 29 29 29 29 1d 29 29 29 29 29 1d 29 29 29 29 29 1d 29 Data Ascii: :2&::.)d\O:N.62222::66662&-)!65-.&22::::1%**&&7""/&&.+>>>);;)))&+)&6&'&)))&&&&:(&)&*&&HDK5 692/$($,,,,))))))))))))))))))))))))))))))
2025-02-13 23:48:35 UTC	16384	IN	Data Raw: 21 13 21 17 21 22 21 26 21 2e 21 4e 21 54 21 5e 21 84 21 95 21 a8 22 02 22 06 22 0f 22 12 22 15 22 1a 22 1f 22 29 22 2b 22 48 22 61 22 65 23 02 23 10 23 21 25 00 25 02 25 0c 25 10 25 14 25 18 25 1c 25 24 25 2c 25 34 25 3c 25 6c 25 80 25 84 25 88 25 8c 25 93 25 a1 25 ac 25 b2 25 ba 25 bc 25 c4 25 cc 25 cf 25 d9 25 e6 26 3c 26 40 26 42 26 60 26 63 26 66 26 6b 26 6f 2c 6c 2c 77 2e 17 a7 1a a7 21 fb 02 fb 36 fb 3c fb 3e fb 41 fb 44 fb b1 fb e9 fb ff fc 62 fd 3f fd f2 fd fc fe 23 fe fc ff fc ff ff 00 00 00 20 00 a0 02 00 02 21 02 5a 02 ae 03 24 03 50 03 74 03 7a 03 84 03 8c 03 8e 03 a3 03 d0 03 f7 04 0e 04 50 04 88 05 91 05 d0 05 f0 06 00 06 0b 06 1b 06 1e 06 21 06 40 06 60 07 50 1d 00 1d 6b 1d 6c 1d c4 1d fe 1e 00 1e 80 1e a0 1e f2 1f 00 1f 18 1f 20 1f 48 1f Data Ascii: !!!"!&!.!N!T!^!!!"""""""")"+"H"a"e###!%%%%%%%%$%,%4%<%l%%%%%%%%%%%%%%%&<&@&B&`&c&f&k&o,l,w.!6<>ADb?# !Z$PtzP!@`Pkl H

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:48:36 UTC	633	OUT	GET /f1718227932057x822365466237625200/DOCU-60cafc67.png HTTP/1.1 Host: meta-q.cdn.bubble.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://infocorporacion.pe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-13 23:48:36 UTC	709	IN	HTTP/1.1 200 OK Date: Thu, 13 Feb 2025 23:48:36 GMT Content-Type: image/png Content-Length: 22658 Connection: close Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=33006 Last-Modified: Wed, 12 Jun 2024 21:32:13 GMT cache-control: public,max-age=86400 etag: "282ba85a1c65bfadc21a004e2a4a9ad5" x-amz-id-2: ceXUydcp6EAs/OZblvKkETJpNdWi0JeGYg9lQidHUJLcNiC1OGrUQzjPkrOaNNvxFsuqsOXZTSU= x-amz-meta-app-version: live x-amz-meta-appname: meta x-amz-request-id: PYXAYR22FQQDKA78 x-amz-server-side-encryption: AES256 x-amz-version-id: VJwr9ehspq7Y4Hruul9084tFCPC0kb1W CF-Cache-Status: HIT Age: 79110 Accept-Ranges: bytes Server: cloudflare CF-RAY: 9118b5d21bdd430f-EWR alt-svc: h3=":443"; ma=86400
2025-02-13 23:48:36 UTC	660	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 0b 00 00 06 0d 08 06 00 00 00 f4 90 6b 42 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 58 3c 49 44 41 54 78 da ec dd df eb dd 05 1d c7 f1 e7 5a f8 63 9b a5 a3 81 a2 e2 5a 33 d0 0a ac 06 82 20 b1 81 50 14 44 6a 11 68 45 66 84 17 d6 55 84 83 ac 2e bc 89 2e 2c 2a a2 1f 42 3f c0 8b 46 20 c6 c4 95 2b 67 5b d2 dc 82 72 df fc b1 2d 37 6d e4 36 99 b5 59 a3 82 ba 39 f0 85 f6 fd ea be ba ef f6 3d 9f f3 78 c0 8b cf 39 e7 2f 38 9c 27 6f ce a2 ff 5e 7f 7d 00 c0 6b b2 a2 ba a0 3a bf 5a 12 00 00 b3 f9 4f f5 ef 9a de f4 67 27 ec a5 00 80 d3 e6 f5 01 00 27 eb ea 6a 5d 75 45 b5 6a b4 8b 02 00 60 3e 1d af fe 31 cb fe 39 c3 67 c7 aa bf 57 7f 9b 65 07 03 00 4e b0 c8 65 01 00 cc ea 9c ea c6 ea 83 d5 75 d5 1b 03 00 60 08 Data Ascii: PNGIHDRkBsRGB,X<IDATxZcZ3 PDjhEfU..,*B?F +g[r-7m6Y9=x9/8'o^}k:ZOg''j]uEj`>19gWeNeu`
2025-02-13 23:48:36 UTC	1369	IN	Data Raw: 7b 00 00 c0 42 f0 4c f5 40 f5 50 b5 a9 3a 1a 00 0b d2 eb 02 80 61 f9 76 00 00 c0 42 b1 b2 ba ad da 50 1d a9 b6 56 77 56 57 fb 5d 0a 60 4e 5c 16 00 c0 1c 7c bc fa 61 00 00 c0 38 38 52 fd b2 da 54 6d ac 0e 04 c0 cc c4 02 00 38 69 e7 56 7b aa 8b 02 00 00 c6 d1 ae ea be 6a 63 b5 35 00 a6 89 05 00 70 d2 3e 57 dd 1d 00 00 30 04 87 aa 8d d5 fd d5 83 d5 b1 00 f0 9f 05 00 f0 0a ce aa be 10 00 00 30 14 2b aa 4f 54 1b aa 17 aa 4d d5 ed d5 a5 01 e0 b2 00 00 66 f1 e9 ea bb 01 00 00 93 60 aa ba af da 50 ed 0c 00 97 05 00 30 f2 99 00 00 80 49 71 65 75 47 b5 a3 9a aa be 58 ad 0e 00 97 05 00 4c b4 37 57 7b 03 00 00 26 dd 8e ea de d1 0e 04 80 cb 02 00 26 ca ad 01 00 00 d4 bb ab af 55 cf 55 5b aa db aa e5 01 e0 b2 00 80 89 f0 64 f5 d6 00 00 00 66 f6 8b a6 2f 0e 8e 07 80 cb Data Ascii: {BL@P:avBPVwVW]`N\\|a88RTm8iV{jc5p>W00+OTMf`P0IqeuGXL7W{&&UU[df/
2025-02-13 23:48:36 UTC	1369	IN	Data Raw: 00 00 60 ea b6 55 4b d5 a1 6a 5d c0 df 88 05 00 00 00 00 c0 08 d6 57 87 ab c5 6a 73 c0 9f 88 05 00 00 00 00 c0 48 76 54 cb d5 e3 01 7f 10 0b 00 00 00 00 80 d1 6c ac de ab de af ae 09 48 2c 00 00 00 00 00 46 f5 58 f5 63 b5 3b 40 2c 00 00 00 00 00 86 75 63 75 b2 7a c5 e3 c7 20 16 00 00 00 00 00 e3 ba a2 7a b1 5a ac 16 02 c4 02 00 00 00 00 60 58 3b aa b3 d5 93 01 62 01 00 00 00 00 30 ac 0d d5 3b d5 87 d5 d5 01 62 01 00 00 00 00 30 ac 47 aa a5 ea d6 00 b1 00 00 00 00 00 18 d6 96 ea bb ea e9 00 b1 00 00 00 00 00 18 d6 7c f5 56 75 cc 6f 89 40 2c 00 00 00 00 00 c6 b6 bf 5a aa 6e 09 10 0b 00 00 00 00 80 61 6d a9 ce 54 4f 05 88 05 00 00 00 00 c0 b0 e6 ab b7 ab 63 d5 7c 80 58 00 c0 e4 ad 04 00 00 00 ff 6c 7f f5 7d b5 10 f0 3b 7b f7 ce 1a 66 1d 05 60 fc c9 45 6b 4a Data Ascii: `UKj]WjsHvTlH,FXc;@,ucuz zZ`X;b0;b0G\|Vuo@,ZnamTOc\|Xl};{f`EkJ
2025-02-13 23:48:36 UTC	1369	IN	Data Raw: 00 00 00 00 80 d1 2e 54 5f 07 62 01 00 0b b2 1f 00 00 00 b0 8a 03 d5 ed ea e3 40 2c 00 60 21 36 02 00 00 00 56 75 b4 ba 55 6d 05 62 01 00 00 00 00 c0 58 c7 aa dd 6a 33 10 0b 00 00 00 00 00 c6 da a9 ce 05 62 01 00 00 00 00 c0 68 67 aa 1f 02 b1 00 00 00 00 00 60 b4 7f ab 9d 18 4f 2c 00 00 00 00 00 98 6b b3 da ad 3e 88 d1 c4 02 00 00 00 00 80 d9 b6 aa bb d5 56 8c 25 16 00 00 00 00 00 70 ac da f5 33 9e cb e1 01 00 00 00 00 a8 da a9 ce c5 48 62 01 00 00 00 00 00 0f fd 54 9d 8e 71 c4 02 00 00 00 00 00 ea 91 ff aa af 62 14 b1 00 00 00 00 00 80 7a e4 40 75 ad 7a 27 c6 10 0b 00 00 00 00 00 78 dc 76 75 a3 3a 18 23 88 05 00 00 00 00 00 3c c9 e7 d5 f9 18 41 2c 00 00 00 00 00 e0 69 4e 55 bf c6 e2 89 05 00 00 00 00 00 3c cb d9 ea db 58 34 b1 00 00 00 00 00 80 e7 fd 91 Data Ascii: .T_b@,`!6VuUmbXj3bhg`O,k>V%p3HbTqbz@uz'xvu:#<A,iNU<X4
2025-02-13 23:48:36 UTC	1369	IN	Data Raw: da 87 ea 74 88 05 00 2c 94 cd 00 00 00 00 fe de a9 ea 63 88 05 00 2c 14 37 0c 00 00 00 d8 ab 67 d5 d9 30 b4 00 00 00 00 00 30 d6 89 ea 53 88 05 00 00 00 00 00 8c b6 5a 9d 0f b1 00 00 00 00 00 80 b1 8e 55 6b 21 16 00 00 00 00 00 30 da d3 ea 62 88 05 00 00 00 00 00 8c 75 a4 5a 0f b1 00 00 00 00 00 80 d1 1e f9 5d 20 16 00 00 00 00 00 30 db a1 ea 6b 88 05 00 00 00 00 00 8c 76 bf ba 1c 62 01 00 00 00 00 00 63 2d 55 df 42 2c 00 e0 c0 da 0c 00 00 00 e0 df dd ab ae 37 9c 58 00 c0 41 e5 86 01 00 00 00 ff cb 7a c3 19 5a 00 00 00 00 00 98 ee 6e 75 a5 c1 c4 02 00 00 00 00 00 a6 5b aa 3e 35 98 58 00 00 00 00 00 00 f5 a0 ba d4 50 62 01 00 00 00 00 00 d4 a1 ea 5d 43 89 05 00 00 00 00 00 50 55 8f ab 73 0d 24 16 00 00 00 00 00 40 55 1d a9 3e 36 90 58 00 00 00 00 00 00 6d Data Ascii: t,c,7g00SZUk!0buZ] 0kvbc-UB,7XAzZnu[>5XPb]CPUs$@U>6Xm
2025-02-13 23:48:36 UTC	1369	IN	Data Raw: 02 00 00 00 58 96 df 5d 47 2c 00 80 b5 56 01 00 00 00 2c cb 5e b5 d5 55 62 01 00 00 00 00 00 8c b1 59 7d e9 0a b1 00 00 00 00 00 00 66 39 ea 0a b1 00 00 00 00 00 00 66 39 ec 0a b1 00 00 00 00 00 00 66 79 5a bd ea 12 b1 00 00 00 00 00 00 e6 f9 d9 25 62 01 00 00 00 00 00 cc 73 d4 25 62 01 00 00 00 00 00 cc f3 a1 da ae aa 12 0b 00 00 00 00 00 60 9e 55 f5 ab aa 12 0b 00 00 00 00 00 60 a8 a3 aa 2a b1 00 00 00 00 00 00 66 fa 51 3d a8 12 0b 00 00 00 00 00 60 a6 ed 6a b7 4a 2c 00 80 f5 ce 03 00 00 00 58 b6 c3 aa c4 02 00 b0 61 00 00 00 c0 58 df aa 1c 2d 00 00 00 00 00 30 d7 eb ea 91 58 00 00 00 00 00 00 b3 7d 17 0b 00 00 00 00 00 60 b6 7d b1 00 00 00 00 00 00 66 3b 10 0b 00 00 00 00 00 60 b6 e7 d5 0b b1 00 00 00 00 00 00 66 3b 10 0b 00 00 00 00 00 60 b6 7d b1 00 Data Ascii: X]G,V,^UbY}f9f9fyZ%bs%b`U`*fQ=`jJ,XaX-0X}`}f;`f;`}
2025-02-13 23:48:36 UTC	1369	IN	Data Raw: 05 00 0e b0 9f 5b 5b 2d 57 c7 c7 5b 2e 8d 8e 7e f9 a5 65 00 00 c0 ff eb da ed b0 e0 66 92 4f 49 ce 06 00 f2 37 cd 02 00 28 87 57 2b 2b ed c7 47 46 be 7e 5b 5b 5b 0f 00 00 ec b1 66 c1 9d 24 43 01 80 ea a9 4b 62 cc 12 80 9a b0 b2 b1 d1 d6 51 2c ae 17 97 97 ad 25 02 00 e0 5f 75 ee 56 58 f0 28 c9 93 00 40 95 39 70 0c 40 2d d9 dc d9 39 72 79 6c ac f0 6c 7e fe 73 00 00 a0 74 6d 49 0e 97 fb a3 65 30 c9 fd 00 00 00 50 0d 0d b7 26 27 4f 3e 9c 9d 9d 0a 00 00 94 ae bb 9c 61 c1 75 87 8c 01 d8 4b ac 21 02 a0 46 d5 0d cc cc 9c bb 31 31 f1 26 00 00 bf d9 bb 9b 16 1f f7 38 8e e3 9f ab dc 74 9c 85 53 ce c9 21 33 64 30 c4 82 14 45 94 94 9b 28 3b 2b ca c2 b3 b0 f2 2c 2c ec d8 d8 8a 22 45 63 6e 64 a1 2c 94 94 95 0d 63 78 0c 7f 4d d9 08 ff b9 ae f9 8f e9 ba ae df eb f5 34 de Data Ascii: [[-W[.~efOI7(W++GF~[[[f$CKbQ,%_uVX(@9p@-9ryll~stmIe0P&'O>auK!F11&8tS!3d0E(;+,,"Ecnd,cxM4
2025-02-13 23:48:36 UTC	1369	IN	Data Raw: a6 c4 02 00 00 00 2a 4f 30 00 00 b0 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 80 76 30 d8 2b 8a 1b c1 00 00 40 2c 00 00 00 20 b0 a3 56 6b 4d 30 00 00 e8 69 4a 2c 00 00 00 a0 d6 04 03 00 00 cb 02 00 00 00 68 07 83 97 f7 f7 0c 00 00 b1 00 00 00 80 a0 52 30 d8 29 8a 3b c1 00 00 40 2c 00 00 00 20 b0 93 a7 a7 15 c1 00 00 40 2c 00 00 00 20 38 c1 00 00 40 2c 00 00 00 80 2c 05 83 ed 3c bf 15 0c 00 00 b2 64 56 2c 00 00 00 20 a4 d3 b2 5c b5 30 00 00 f8 22 16 00 00 00 10 96 4b 22 00 80 b6 71 b1 00 00 00 80 b0 04 03 00 00 b1 00 00 00 00 04 03 00 00 b1 00 00 00 00 04 03 00 20 bc 31 b1 00 00 00 00 04 03 00 20 36 cb 02 00 00 00 e8 0c 06 cf 82 01 00 10 8b 65 01 00 00 00 74 06 83 ad 3c bf 17 0c Data Ascii: *O0,@,@,@,@,v0+@, VkM0iJ,hR0);@, @, 8@,,<dV, \0"K"q 1 6et<
2025-02-13 23:48:36 UTC	1369	IN	Data Raw: 9e 4c 76 04 03 00 68 bc a1 58 00 00 00 00 08 06 00 90 9b 58 00 00 00 00 08 06 00 90 dc bd 58 00 00 00 00 c4 a6 82 c1 91 60 00 00 2b 73 b3 00 00 00 00 e8 94 2b c1 00 00 9a 68 20 16 00 00 00 00 9f 04 03 00 48 c9 b2 00 00 00 00 f8 4a 30 00 80 74 c4 02 00 00 00 e0 27 c1 00 00 52 f1 0d 11 00 00 00 f0 3b c1 00 00 d2 b0 2c 00 00 00 00 16 d8 50 30 38 2d 8a 00 00 be 13 0b 00 00 00 80 24 3e 82 c1 71 bf 3f 15 0c 00 e0 5f 5c 8a 05 00 00 00 40 23 0c ca 72 5b 30 00 80 8d 1b 45 c4 4c 2c 00 00 00 00 96 22 18 00 40 27 dd 46 45 2c 00 00 00 00 96 26 18 00 40 e7 0c c4 02 00 00 00 60 55 82 01 00 74 8b 65 01 00 00 00 d0 5c 82 01 00 88 05 00 00 00 00 82 01 00 f8 86 08 00 00 00 40 30 00 80 9a 5d 8b 05 00 00 00 40 2b 08 06 00 50 9b 4b b1 00 00 00 00 68 0d c1 00 00 6a 71 21 16 00 Data Ascii: LvhXXX`+s+h HJ0t'R;,P08-$>q?_\@#r[0EL,"@'FE,&@`Ute\@0]@+PKhjq!
2025-02-13 23:48:36 UTC	1369	IN	Data Raw: ef a0 05 00 00 00 00 00 9a 6d 53 2c 00 00 00 00 00 80 66 6b 89 05 00 00 00 00 00 d0 6c 5e 16 00 00 00 00 00 40 c3 89 05 00 00 00 00 00 d0 60 9d 88 38 15 0b 00 00 00 00 00 a0 b9 36 63 41 2c 00 00 00 00 00 80 e6 6a 89 05 00 00 00 00 00 d0 6c 62 01 00 00 00 00 00 34 dc 3d b1 00 00 00 00 00 00 9a eb 30 22 9e 8b 05 00 00 00 00 00 d0 5c 6b b1 20 16 00 00 00 f0 96 7d 3b 48 6d 2a 80 02 28 7a bb ff 25 25 86 26 68 d3 d6 a0 e0 44 67 22 8e 04 75 20 2d 38 68 9b fe 4d 34 7c 78 e7 6c e3 72 01 00 98 eb a3 58 00 00 00 00 00 00 b3 9d c4 02 00 00 00 00 00 98 ed 5e 2c 00 00 00 00 00 80 b9 7e 56 bf c5 02 00 00 00 00 00 98 eb 54 25 16 00 00 00 00 00 c0 5c 62 01 00 00 00 00 00 0c 27 16 00 00 00 00 00 c0 70 b7 62 01 00 00 00 00 00 cc f5 bd fa 27 16 00 00 00 00 00 c0 5c a7 2a b1 Data Ascii: mS,fkl^@`86cA,jlb4=0"\k };Hm(z%%&hDg"u -8hM4\|xlrX^,~VT%\b'pb'\

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:48:37 UTC	395	OUT	GET /f1718227932057x822365466237625200/DOCU-60cafc67.png HTTP/1.1 Host: meta-q.cdn.bubble.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-13 23:48:37 UTC	709	IN	HTTP/1.1 200 OK Date: Thu, 13 Feb 2025 23:48:37 GMT Content-Type: image/png Content-Length: 22658 Connection: close Cf-Bgj: imgq:100,h2pri Cf-Polished: origSize=33006 Last-Modified: Wed, 12 Jun 2024 21:32:13 GMT cache-control: public,max-age=86400 etag: "282ba85a1c65bfadc21a004e2a4a9ad5" x-amz-id-2: ceXUydcp6EAs/OZblvKkETJpNdWi0JeGYg9lQidHUJLcNiC1OGrUQzjPkrOaNNvxFsuqsOXZTSU= x-amz-meta-app-version: live x-amz-meta-appname: meta x-amz-request-id: PYXAYR22FQQDKA78 x-amz-server-side-encryption: AES256 x-amz-version-id: VJwr9ehspq7Y4Hruul9084tFCPC0kb1W CF-Cache-Status: HIT Age: 79111 Accept-Ranges: bytes Server: cloudflare CF-RAY: 9118b5d6cb3a8cb3-EWR alt-svc: h3=":443"; ma=86400
2025-02-13 23:48:37 UTC	660	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 0b 00 00 06 0d 08 06 00 00 00 f4 90 6b 42 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 58 3c 49 44 41 54 78 da ec dd df eb dd 05 1d c7 f1 e7 5a f8 63 9b a5 a3 81 a2 e2 5a 33 d0 0a ac 06 82 20 b1 81 50 14 44 6a 11 68 45 66 84 17 d6 55 84 83 ac 2e bc 89 2e 2c 2a a2 1f 42 3f c0 8b 46 20 c6 c4 95 2b 67 5b d2 dc 82 72 df fc b1 2d 37 6d e4 36 99 b5 59 a3 82 ba 39 f0 85 f6 fd ea be ba ef f6 3d 9f f3 78 c0 8b cf 39 e7 2f 38 9c 27 6f ce a2 ff 5e 7f 7d 00 c0 6b b2 a2 ba a0 3a bf 5a 12 00 00 b3 f9 4f f5 ef 9a de f4 67 27 ec a5 00 80 d3 e6 f5 01 00 27 eb ea 6a 5d 75 45 b5 6a b4 8b 02 00 60 3e 1d af fe 31 cb fe 39 c3 67 c7 aa bf 57 7f 9b 65 07 03 00 4e b0 c8 65 01 00 cc ea 9c ea c6 ea 83 d5 75 d5 1b 03 00 60 08 Data Ascii: PNGIHDRkBsRGB,X<IDATxZcZ3 PDjhEfU..,*B?F +g[r-7m6Y9=x9/8'o^}k:ZOg''j]uEj`>19gWeNeu`
2025-02-13 23:48:37 UTC	1369	IN	Data Raw: 7b 00 00 c0 42 f0 4c f5 40 f5 50 b5 a9 3a 1a 00 0b d2 eb 02 80 61 f9 76 00 00 c0 42 b1 b2 ba ad da 50 1d a9 b6 56 77 56 57 fb 5d 0a 60 4e 5c 16 00 c0 1c 7c bc fa 61 00 00 c0 38 38 52 fd b2 da 54 6d ac 0e 04 c0 cc c4 02 00 38 69 e7 56 7b aa 8b 02 00 00 c6 d1 ae ea be 6a 63 b5 35 00 a6 89 05 00 70 d2 3e 57 dd 1d 00 00 30 04 87 aa 8d d5 fd d5 83 d5 b1 00 f0 9f 05 00 f0 0a ce aa be 10 00 00 30 14 2b aa 4f 54 1b aa 17 aa 4d d5 ed d5 a5 01 e0 b2 00 00 66 f1 e9 ea bb 01 00 00 93 60 aa ba af da 50 ed 0c 00 97 05 00 30 f2 99 00 00 80 49 71 65 75 47 b5 a3 9a aa be 58 ad 0e 00 97 05 00 4c b4 37 57 7b 03 00 00 26 dd 8e ea de d1 0e 04 80 cb 02 00 26 ca ad 01 00 00 d4 bb ab af 55 cf 55 5b aa db aa e5 01 e0 b2 00 80 89 f0 64 f5 d6 00 00 00 66 f6 8b a6 2f 0e 8e 07 80 cb Data Ascii: {BL@P:avBPVwVW]`N\\|a88RTm8iV{jc5p>W00+OTMf`P0IqeuGXL7W{&&UU[df/
2025-02-13 23:48:37 UTC	1369	IN	Data Raw: 00 00 60 ea b6 55 4b d5 a1 6a 5d c0 df 88 05 00 00 00 00 c0 08 d6 57 87 ab c5 6a 73 c0 9f 88 05 00 00 00 00 c0 48 76 54 cb d5 e3 01 7f 10 0b 00 00 00 00 80 d1 6c ac de ab de af ae 09 48 2c 00 00 00 00 00 46 f5 58 f5 63 b5 3b 40 2c 00 00 00 00 00 86 75 63 75 b2 7a c5 e3 c7 20 16 00 00 00 00 00 e3 ba a2 7a b1 5a ac 16 02 c4 02 00 00 00 00 60 58 3b aa b3 d5 93 01 62 01 00 00 00 00 30 ac 0d d5 3b d5 87 d5 d5 01 62 01 00 00 00 00 30 ac 47 aa a5 ea d6 00 b1 00 00 00 00 00 18 d6 96 ea bb ea e9 00 b1 00 00 00 00 00 18 d6 7c f5 56 75 cc 6f 89 40 2c 00 00 00 00 00 c6 b6 bf 5a aa 6e 09 10 0b 00 00 00 00 80 61 6d a9 ce 54 4f 05 88 05 00 00 00 00 c0 b0 e6 ab b7 ab 63 d5 7c 80 58 00 c0 e4 ad 04 00 00 00 ff 6c 7f f5 7d b5 10 f0 3b 7b f7 ce 1a 66 1d 05 60 fc c9 45 6b 4a Data Ascii: `UKj]WjsHvTlH,FXc;@,ucuz zZ`X;b0;b0G\|Vuo@,ZnamTOc\|Xl};{f`EkJ
2025-02-13 23:48:37 UTC	1369	IN	Data Raw: 00 00 00 00 80 d1 2e 54 5f 07 62 01 00 0b b2 1f 00 00 00 b0 8a 03 d5 ed ea e3 40 2c 00 60 21 36 02 00 00 00 56 75 b4 ba 55 6d 05 62 01 00 00 00 00 c0 58 c7 aa dd 6a 33 10 0b 00 00 00 00 00 c6 da a9 ce 05 62 01 00 00 00 00 c0 68 67 aa 1f 02 b1 00 00 00 00 00 60 b4 7f ab 9d 18 4f 2c 00 00 00 00 00 98 6b b3 da ad 3e 88 d1 c4 02 00 00 00 00 80 d9 b6 aa bb d5 56 8c 25 16 00 00 00 00 00 70 ac da f5 33 9e cb e1 01 00 00 00 00 a8 da a9 ce c5 48 62 01 00 00 00 00 00 0f fd 54 9d 8e 71 c4 02 00 00 00 00 00 ea 91 ff aa af 62 14 b1 00 00 00 00 00 80 7a e4 40 75 ad 7a 27 c6 10 0b 00 00 00 00 00 78 dc 76 75 a3 3a 18 23 88 05 00 00 00 00 00 3c c9 e7 d5 f9 18 41 2c 00 00 00 00 00 e0 69 4e 55 bf c6 e2 89 05 00 00 00 00 00 3c cb d9 ea db 58 34 b1 00 00 00 00 00 80 e7 fd 91 Data Ascii: .T_b@,`!6VuUmbXj3bhg`O,k>V%p3HbTqbz@uz'xvu:#<A,iNU<X4
2025-02-13 23:48:37 UTC	1369	IN	Data Raw: da 87 ea 74 88 05 00 2c 94 cd 00 00 00 00 fe de a9 ea 63 88 05 00 2c 14 37 0c 00 00 00 d8 ab 67 d5 d9 30 b4 00 00 00 00 00 30 d6 89 ea 53 88 05 00 00 00 00 00 8c b6 5a 9d 0f b1 00 00 00 00 00 80 b1 8e 55 6b 21 16 00 00 00 00 00 30 da d3 ea 62 88 05 00 00 00 00 00 8c 75 a4 5a 0f b1 00 00 00 00 00 80 d1 1e f9 5d 20 16 00 00 00 00 00 30 db a1 ea 6b 88 05 00 00 00 00 00 8c 76 bf ba 1c 62 01 00 00 00 00 00 63 2d 55 df 42 2c 00 e0 c0 da 0c 00 00 00 e0 df dd ab ae 37 9c 58 00 c0 41 e5 86 01 00 00 00 ff cb 7a c3 19 5a 00 00 00 00 00 98 ee 6e 75 a5 c1 c4 02 00 00 00 00 00 a6 5b aa 3e 35 98 58 00 00 00 00 00 00 f5 a0 ba d4 50 62 01 00 00 00 00 00 d4 a1 ea 5d 43 89 05 00 00 00 00 00 50 55 8f ab 73 0d 24 16 00 00 00 00 00 40 55 1d a9 3e 36 90 58 00 00 00 00 00 00 6d Data Ascii: t,c,7g00SZUk!0buZ] 0kvbc-UB,7XAzZnu[>5XPb]CPUs$@U>6Xm
2025-02-13 23:48:37 UTC	1369	IN	Data Raw: 02 00 00 00 58 96 df 5d 47 2c 00 80 b5 56 01 00 00 00 2c cb 5e b5 d5 55 62 01 00 00 00 00 00 8c b1 59 7d e9 0a b1 00 00 00 00 00 00 66 39 ea 0a b1 00 00 00 00 00 00 66 39 ec 0a b1 00 00 00 00 00 00 66 79 5a bd ea 12 b1 00 00 00 00 00 00 e6 f9 d9 25 62 01 00 00 00 00 00 cc 73 d4 25 62 01 00 00 00 00 00 cc f3 a1 da ae aa 12 0b 00 00 00 00 00 60 9e 55 f5 ab aa 12 0b 00 00 00 00 00 60 a8 a3 aa 2a b1 00 00 00 00 00 00 66 fa 51 3d a8 12 0b 00 00 00 00 00 60 a6 ed 6a b7 4a 2c 00 80 f5 ce 03 00 00 00 58 b6 c3 aa c4 02 00 b0 61 00 00 00 c0 58 df aa 1c 2d 00 00 00 00 00 30 d7 eb ea 91 58 00 00 00 00 00 00 b3 7d 17 0b 00 00 00 00 00 60 b6 7d b1 00 00 00 00 00 00 66 3b 10 0b 00 00 00 00 00 60 b6 e7 d5 0b b1 00 00 00 00 00 00 66 3b 10 0b 00 00 00 00 00 60 b6 7d b1 00 Data Ascii: X]G,V,^UbY}f9f9fyZ%bs%b`U`*fQ=`jJ,XaX-0X}`}f;`f;`}
2025-02-13 23:48:37 UTC	1369	IN	Data Raw: 05 00 0e b0 9f 5b 5b 2d 57 c7 c7 5b 2e 8d 8e 7e f9 a5 65 00 00 c0 ff eb da ed b0 e0 66 92 4f 49 ce 06 00 f2 37 cd 02 00 28 87 57 2b 2b ed c7 47 46 be 7e 5b 5b 5b 0f 00 00 ec b1 66 c1 9d 24 43 01 80 ea a9 4b 62 cc 12 80 9a b0 b2 b1 d1 d6 51 2c ae 17 97 97 ad 25 02 00 e0 5f 75 ee 56 58 f0 28 c9 93 00 40 95 39 70 0c 40 2d d9 dc d9 39 72 79 6c ac f0 6c 7e fe 73 00 00 a0 74 6d 49 0e 97 fb a3 65 30 c9 fd 00 00 00 50 0d 0d b7 26 27 4f 3e 9c 9d 9d 0a 00 00 94 ae bb 9c 61 c1 75 87 8c 01 d8 4b ac 21 02 a0 46 d5 0d cc cc 9c bb 31 31 f1 26 00 00 bf d9 bb 9b 16 1f f7 38 8e e3 9f ab dc 74 9c 85 53 ce c9 21 33 64 30 c4 82 14 45 94 94 9b 28 3b 2b ca c2 b3 b0 f2 2c 2c ec d8 d8 8a 22 45 63 6e 64 a1 2c 94 94 95 0d 63 78 0c 7f 4d d9 08 ff b9 ae f9 8f e9 ba ae df eb f5 34 de Data Ascii: [[-W[.~efOI7(W++GF~[[[f$CKbQ,%_uVX(@9p@-9ryll~stmIe0P&'O>auK!F11&8tS!3d0E(;+,,"Ecnd,cxM4
2025-02-13 23:48:37 UTC	1369	IN	Data Raw: a6 c4 02 00 00 00 2a 4f 30 00 00 b0 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 00 c1 00 00 40 2c 00 00 00 80 76 30 d8 2b 8a 1b c1 00 00 40 2c 00 00 00 20 b0 a3 56 6b 4d 30 00 00 e8 69 4a 2c 00 00 00 a0 d6 04 03 00 00 cb 02 00 00 00 68 07 83 97 f7 f7 0c 00 00 b1 00 00 00 80 a0 52 30 d8 29 8a 3b c1 00 00 40 2c 00 00 00 20 b0 93 a7 a7 15 c1 00 00 40 2c 00 00 00 20 38 c1 00 00 40 2c 00 00 00 80 2c 05 83 ed 3c bf 15 0c 00 00 b2 64 56 2c 00 00 00 20 a4 d3 b2 5c b5 30 00 00 f8 22 16 00 00 00 10 96 4b 22 00 80 b6 71 b1 00 00 00 80 b0 04 03 00 00 b1 00 00 00 00 04 03 00 00 b1 00 00 00 00 04 03 00 20 bc 31 b1 00 00 00 00 04 03 00 20 36 cb 02 00 00 00 e8 0c 06 cf 82 01 00 10 8b 65 01 00 00 00 74 06 83 ad 3c bf 17 0c Data Ascii: *O0,@,@,@,@,v0+@, VkM0iJ,hR0);@, @, 8@,,<dV, \0"K"q 1 6et<
2025-02-13 23:48:37 UTC	1369	IN	Data Raw: 9e 4c 76 04 03 00 68 bc a1 58 00 00 00 00 08 06 00 90 9b 58 00 00 00 00 08 06 00 90 dc bd 58 00 00 00 00 c4 a6 82 c1 91 60 00 00 2b 73 b3 00 00 00 00 e8 94 2b c1 00 00 9a 68 20 16 00 00 00 00 9f 04 03 00 48 c9 b2 00 00 00 00 f8 4a 30 00 80 74 c4 02 00 00 00 e0 27 c1 00 00 52 f1 0d 11 00 00 00 f0 3b c1 00 00 d2 b0 2c 00 00 00 00 16 d8 50 30 38 2d 8a 00 00 be 13 0b 00 00 00 80 24 3e 82 c1 71 bf 3f 15 0c 00 e0 5f 5c 8a 05 00 00 00 40 23 0c ca 72 5b 30 00 80 8d 1b 45 c4 4c 2c 00 00 00 00 96 22 18 00 40 27 dd 46 45 2c 00 00 00 00 96 26 18 00 40 e7 0c c4 02 00 00 00 60 55 82 01 00 74 8b 65 01 00 00 00 d0 5c 82 01 00 88 05 00 00 00 00 82 01 00 f8 86 08 00 00 00 40 30 00 80 9a 5d 8b 05 00 00 00 40 2b 08 06 00 50 9b 4b b1 00 00 00 00 68 0d c1 00 00 6a 71 21 16 00 Data Ascii: LvhXXX`+s+h HJ0t'R;,P08-$>q?_\@#r[0EL,"@'FE,&@`Ute\@0]@+PKhjq!
2025-02-13 23:48:37 UTC	1369	IN	Data Raw: ef a0 05 00 00 00 00 00 9a 6d 53 2c 00 00 00 00 00 80 66 6b 89 05 00 00 00 00 00 d0 6c 5e 16 00 00 00 00 00 40 c3 89 05 00 00 00 00 00 d0 60 9d 88 38 15 0b 00 00 00 00 00 a0 b9 36 63 41 2c 00 00 00 00 00 80 e6 6a 89 05 00 00 00 00 00 d0 6c 62 01 00 00 00 00 00 34 dc 3d b1 00 00 00 00 00 00 9a eb 30 22 9e 8b 05 00 00 00 00 00 d0 5c 6b b1 20 16 00 00 00 f0 96 7d 3b 48 6d 2a 80 02 28 7a bb ff 25 25 86 26 68 d3 d6 a0 e0 44 67 22 8e 04 75 20 2d 38 68 9b fe 4d 34 7c 78 e7 6c e3 72 01 00 98 eb a3 58 00 00 00 00 00 00 b3 9d c4 02 00 00 00 00 00 98 ed 5e 2c 00 00 00 00 00 80 b9 7e 56 bf c5 02 00 00 00 00 00 98 eb 54 25 16 00 00 00 00 00 c0 5c 62 01 00 00 00 00 00 0c 27 16 00 00 00 00 00 c0 70 b7 62 01 00 00 00 00 00 cc f5 bd fa 27 16 00 00 00 00 00 c0 5c a7 2a b1 Data Ascii: mS,fkl^@`86cA,jlb4=0"\k };Hm(z%%&hDg"u -8hM4\|xlrX^,~VT%\b'pb'\

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:00 UTC	769	OUT	GET /KkoueCDu?gq=d9zO00fAWeQSBX7zZlusjGgsmGaTPkCg-4ZHpHLuTyYGGFdu9BuIHPRnsMsYgzDHwQ/ HTTP/1.1 Host: wd0c435.fletchlirne.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://infocorporacion.pe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-13 23:49:02 UTC	20	IN	HTTP/1.1 302 Found
2025-02-13 23:49:02 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:02 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:02 UTC	25	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 0d 0a Data Ascii: Content-Type: text/html
2025-02-13 23:49:02 UTC	44	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 64 30 63 34 33 35 2e 66 6c 65 74 63 68 6c 69 72 6e 65 2e 63 6f 6d 2f 0d 0a Data Ascii: Location: https://wd0c435.fletchlirne.com/
2025-02-13 23:49:02 UTC	159	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 31 62 39 32 2d 65 33 62 61 3d 34 33 62 63 35 63 37 32 61 30 32 33 33 33 63 30 35 66 61 34 32 36 65 34 35 64 39 37 65 31 38 66 61 34 61 62 66 33 31 30 63 33 39 37 39 30 31 32 33 30 63 65 32 30 36 39 64 31 30 33 35 33 63 33 3b 20 50 61 74 68 3d 2f 3b 20 44 6f 6d 61 69 6e 3d 66 6c 65 74 63 68 6c 69 72 6e 65 2e 63 6f 6d 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 31 34 20 46 65 62 20 32 30 32 35 20 30 30 3a 34 39 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; Path=/; Domain=fletchlirne.com; Expires=Fri, 14 Feb 2025 00:49:02 GMT
2025-02-13 23:49:02 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-02-13 23:49:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-02-13 23:49:02 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-02-13 23:49:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:03 UTC	774	OUT	GET / HTTP/1.1 Host: wd0c435.fletchlirne.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://infocorporacion.pe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3
2025-02-13 23:49:03 UTC	20	IN	HTTP/1.1 302 Found
2025-02-13 23:49:03 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:03 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:03 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-02-13 23:49:03 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 31 33 20 46 65 62 20 32 30 32 35 20 32 33 3a 34 39 3a 30 32 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 13 Feb 2025 23:49:02 GMT
2025-02-13 23:49:03 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-02-13 23:49:03 UTC	47	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 72 65 61 63 74 2e 66 6c 65 74 63 68 6c 69 72 6e 65 2e 63 6f 6d 2f 6c 6f 67 69 6e 0d 0a Data Ascii: Location: https://react.fletchlirne.com/login
2025-02-13 23:49:03 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-02-13 23:49:03 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-02-13 23:49:03 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-02-13 23:49:03 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:04 UTC	777	OUT	GET /login HTTP/1.1 Host: react.fletchlirne.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://infocorporacion.pe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3
2025-02-13 23:49:04 UTC	20	IN	HTTP/1.1 302 Found
2025-02-13 23:49:04 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:04 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:04 UTC	24	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 3a 20 67 7a 69 70 0d 0a Data Ascii: Content-Encoding: gzip
2025-02-13 23:49:04 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-02-13 23:49:04 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 31 33 20 46 65 62 20 32 30 32 35 20 32 33 3a 34 39 3a 30 33 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 13 Feb 2025 23:49:03 GMT
2025-02-13 23:49:04 UTC	836	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 64 30 63 34 33 35 2e 66 6c 65 74 63 68 6c 69 72 6e 65 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 76 32 2e 30 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 34 37 36 35 34 34 35 62 2d 33 32 63 36 2d 34 39 62 30 2d 38 33 65 36 2d 31 64 39 33 37 36 35 32 37 36 63 61 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d 25 32 46 6c 61 6e 64 69 6e 67 76 32 26 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 63 6f 64 65 25 32 30 69 64 5f 74 6f 6b 65 6e 26 73 63 6f 70 65 3d 6f 70 65 6e 69 64 25 32 30 70 72 6f 66 69 6c 65 25 32 30 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 6f 66 66 69 63 65 2e 63 6f 6d Data Ascii: Location: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com
2025-02-13 23:49:04 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-02-13 23:49:04 UTC	25	IN	Data Raw: 52 65 71 75 65 73 74 2d 43 6f 6e 74 65 78 74 3a 20 61 70 70 49 64 3d 0d 0a Data Ascii: Request-Context: appId=
2025-02-13 23:49:04 UTC	138	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 46 4c 49 44 3d 33 31 33 34 62 39 39 39 2d 36 31 63 31 2d 34 38 64 30 2d 61 66 32 65 2d 34 61 34 64 39 37 34 37 36 32 36 32 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 46 72 69 2c 20 31 33 20 46 65 62 20 32 30 32 36 20 32 33 3a 34 39 3a 30 34 20 47 4d 54 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a Data Ascii: Set-Cookie: OH.FLID=3134b999-61c1-48d0-af2e-4a4d97476262; Path=/; Expires=Fri, 13 Feb 2026 23:49:04 GMT; HttpOnly; Secure; SameSite=None
2025-02-13 23:49:04 UTC	68	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 48 2e 53 49 44 3d 3b 20 50 61 74 68 3d 2f 3b 20 45 78 70 69 72 65 73 3d 54 68 75 2c 20 30 31 20 4a 61 6e 20 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a Data Ascii: Set-Cookie: OH.SID=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:05 UTC	1862	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 HTTP/1.1 Host: wd0c435.fletchlirne.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://infocorporacion.pe/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; fpc=AirhK3wJGsJOh_p3O0UOxKA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEXj6EputgMME8sHDKnDbCX0S8hSFO-HvdNndYAx-3N64PSylBQszw4O-eAC0Mf1i235O9jp76jlQw5dWoB1L0kY1YwrsQIdRY5owIRs0IdAd_fYGfMQhjPmyddjm_nfmHQTRb08zdJ48GdImCKS-Y5alFk_EI5MPAjj-hHWviobsgAA; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd
2025-02-13 23:49:05 UTC	17	IN	HTTP/1.1 200 OK
2025-02-13 23:49:05 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:05 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:05 UTC	40	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html; charset=utf-8
2025-02-13 23:49:05 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 31 33 20 46 65 62 20 32 30 32 35 20 32 33 3a 34 39 3a 30 34 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 13 Feb 2025 23:49:04 GMT
2025-02-13 23:49:05 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-02-13 23:49:05 UTC	158	IN	Data Raw: 4c 69 6e 6b 3a 20 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 70 72 65 63 6f 6e 6e 65 63 74 3b 20 63 72 6f 73 73 6f 72 69 67 69 6e 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 2c 3c 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 3e 3b 20 72 65 6c 3d 64 6e 73 2d 70 72 65 66 65 74 63 68 0d 0a Data Ascii: Link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch
2025-02-13 23:49:05 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-02-13 23:49:05 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-02-13 23:49:05 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-02-13 23:49:05 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:07 UTC	2268	OUT	GET /s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3/7cb1ce4d92e54ca56c7f5c024353df39591346371c4796696d5f3914497ecfba.js HTTP/1.1 Host: wd0c435.fletchlirne.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.ASkAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAApAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE9VNbLcpsQiT6HgocCo_t-OZRtA15SMjcCJL4_P4lzXFqkfoI_1V1PA_OANKqLvNF8cmtYFxGPow3dsoYdLj3Up1TQFCtVZNDlFfDxZ6GHKQgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEH9pxtuE0sw3ojWOwDKt8XzONFE-0VH1kQLVN7PJWUL_5SU2h95yXdlz87hW_6cfhB1Z2pNagZir8aQOnEi6IeB9eaZQ7w7jaxnXluLw4nwBVMr18EhQBNPHMRyA9xuzlrv0r0o7cEb1hMrN_toEsV6DHqEpfGyfxN1-nToZLLZcgAA; esctx-sLK5waf3VHI=AQABCQEAAABVrSpeuWamRam2jAF1XRQEzFwVbUgYUD6jq1LnI2jlrsIhsi2G4LLoI3Rd0jn4aDan5AunA3MmMLARp8FA-RxKqTLwK2AfsntVN0DJ1l_3Ds2GJKPzIEPs5m_VN8IYOR1reELwBC69K67vCC7__pw7oyDjqnC-fQ-WFUyyE5Nw6SAA; fpc=AirhK3wJGsJOh_p3O0UOxKC8Ae7AAQAAAPF7QN8OAAAA
2025-02-13 23:49:07 UTC	17	IN	HTTP/1.1 200 OK
2025-02-13 23:49:07 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:07 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:07 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-02-13 23:49:07 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-02-13 23:49:07 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-02-13 23:49:07 UTC	5	IN	Data Raw: 33 32 37 0d 0a Data Ascii: 327
2025-02-13 23:49:07 UTC	807	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 7b 0a 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b 0a 20 20 76 61 Data Ascii: function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(window.location.href)){ var res = query.split("#"); var data1 = res[0]; va
2025-02-13 23:49:07 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-02-13 23:49:07 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-02-13 23:49:07 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:07 UTC	771	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: login.fletchlirne.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://wd0c435.fletchlirne.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3
2025-02-13 23:49:07 UTC	24	IN	HTTP/1.1 404 Not Found
2025-02-13 23:49:07 UTC	39	IN	Data Raw: 41 63 63 65 70 74 2d 43 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 0d 0a Data Ascii: Accept-Ch: Sec-CH-UA-Platform-Version
2025-02-13 23:49:07 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:07 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:07 UTC	22	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a Data Ascii: Content-Language: en
2025-02-13 23:49:07 UTC	39	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html;charset=utf-8
2025-02-13 23:49:07 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 31 33 20 46 65 62 20 32 30 32 35 20 32 33 3a 34 39 3a 30 37 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 13 Feb 2025 23:49:07 GMT
2025-02-13 23:49:07 UTC	12	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 30 0d 0a Data Ascii: Expires: 0
2025-02-13 23:49:07 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-02-13 23:49:07 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-02-13 23:49:07 UTC	15	IN	Data Raw: 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a Data Ascii: Server: nginx

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:07 UTC	2203	OUT	GET /s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3.js HTTP/1.1 Host: wd0c435.fletchlirne.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.ASkAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAApAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE9VNbLcpsQiT6HgocCo_t-OZRtA15SMjcCJL4_P4lzXFqkfoI_1V1PA_OANKqLvNF8cmtYFxGPow3dsoYdLj3Up1TQFCtVZNDlFfDxZ6GHKQgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEH9pxtuE0sw3ojWOwDKt8XzONFE-0VH1kQLVN7PJWUL_5SU2h95yXdlz87hW_6cfhB1Z2pNagZir8aQOnEi6IeB9eaZQ7w7jaxnXluLw4nwBVMr18EhQBNPHMRyA9xuzlrv0r0o7cEb1hMrN_toEsV6DHqEpfGyfxN1-nToZLLZcgAA; esctx-sLK5waf3VHI=AQABCQEAAABVrSpeuWamRam2jAF1XRQEzFwVbUgYUD6jq1LnI2jlrsIhsi2G4LLoI3Rd0jn4aDan5AunA3MmMLARp8FA-RxKqTLwK2AfsntVN0DJ1l_3Ds2GJKPzIEPs5m_VN8IYOR1reELwBC69K67vCC7__pw7oyDjqnC-fQ-WFUyyE5Nw6SAA; fpc=AirhK3wJGsJOh_p3O0UOxKC8Ae7AAQAAAPF7QN8OAAAA
2025-02-13 23:49:07 UTC	17	IN	HTTP/1.1 200 OK
2025-02-13 23:49:07 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:07 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:07 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-02-13 23:49:07 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-02-13 23:49:07 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-02-13 23:49:07 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-02-13 23:49:07 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:08 UTC	1227	OUT	GET /s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3.js HTTP/1.1 Host: wd0c435.fletchlirne.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.ASkAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAApAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE9VNbLcpsQiT6HgocCo_t-OZRtA15SMjcCJL4_P4lzXFqkfoI_1V1PA_OANKqLvNF8cmtYFxGPow3dsoYdLj3Up1TQFCtVZNDlFfDxZ6GHKQgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEH9pxtuE0sw3ojWOwDKt8XzONFE-0VH1kQLVN7PJWUL_5SU2h95yXdlz87hW_6cfhB1Z2pNagZir8aQOnEi6IeB9eaZQ7w7jaxnXluLw4nwBVMr18EhQBNPHMRyA9xuzlrv0r0o7cEb1hMrN_toEsV6DHqEpfGyfxN1-nToZLLZcgAA; esctx-sLK5waf3VHI=AQABCQEAAABVrSpeuWamRam2jAF1XRQEzFwVbUgYUD6jq1LnI2jlrsIhsi2G4LLoI3Rd0jn4aDan5AunA3MmMLARp8FA-RxKqTLwK2AfsntVN0DJ1l_3Ds2GJKPzIEPs5m_VN8IYOR1reELwBC69K67vCC7__pw7oyDjqnC-fQ-WFUyyE5Nw6SAA; fpc=AirhK3wJGsJOh_p3O0UOxKC8Ae7AAQAAAPF7QN8OAAAA
2025-02-13 23:49:08 UTC	17	IN	HTTP/1.1 200 OK
2025-02-13 23:49:08 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:08 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:08 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-02-13 23:49:08 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-02-13 23:49:08 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-02-13 23:49:08 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-02-13 23:49:08 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:08 UTC	1292	OUT	GET /s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3/7cb1ce4d92e54ca56c7f5c024353df39591346371c4796696d5f3914497ecfba.js HTTP/1.1 Host: wd0c435.fletchlirne.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.ASkAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAApAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE9VNbLcpsQiT6HgocCo_t-OZRtA15SMjcCJL4_P4lzXFqkfoI_1V1PA_OANKqLvNF8cmtYFxGPow3dsoYdLj3Up1TQFCtVZNDlFfDxZ6GHKQgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEH9pxtuE0sw3ojWOwDKt8XzONFE-0VH1kQLVN7PJWUL_5SU2h95yXdlz87hW_6cfhB1Z2pNagZir8aQOnEi6IeB9eaZQ7w7jaxnXluLw4nwBVMr18EhQBNPHMRyA9xuzlrv0r0o7cEb1hMrN_toEsV6DHqEpfGyfxN1-nToZLLZcgAA; esctx-sLK5waf3VHI=AQABCQEAAABVrSpeuWamRam2jAF1XRQEzFwVbUgYUD6jq1LnI2jlrsIhsi2G4LLoI3Rd0jn4aDan5AunA3MmMLARp8FA-RxKqTLwK2AfsntVN0DJ1l_3Ds2GJKPzIEPs5m_VN8IYOR1reELwBC69K67vCC7__pw7oyDjqnC-fQ-WFUyyE5Nw6SAA; fpc=AirhK3wJGsJOh_p3O0UOxKC8Ae7AAQAAAPF7QN8OAAAA
2025-02-13 23:49:08 UTC	17	IN	HTTP/1.1 200 OK
2025-02-13 23:49:08 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:08 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:08 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-02-13 23:49:08 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-02-13 23:49:08 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-02-13 23:49:08 UTC	5	IN	Data Raw: 33 32 37 0d 0a Data Ascii: 327
2025-02-13 23:49:08 UTC	807	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 6c 70 28 29 7b 0a 20 20 76 61 72 20 65 6d 61 69 6c 49 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 30 31 31 36 22 29 3b 0a 20 20 76 61 72 20 6e 65 78 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 69 64 53 49 42 75 74 74 6f 6e 39 22 29 3b 0a 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 0a 20 20 69 66 20 28 2f 23 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 29 7b 0a 20 20 76 61 72 20 72 65 73 20 3d 20 71 75 65 72 79 2e 73 70 6c 69 74 28 22 23 22 29 3b 0a 20 20 76 61 72 20 64 61 74 61 31 20 3d 20 72 65 73 5b 30 5d 3b 0a 20 20 76 61 Data Ascii: function lp(){ var emailId = document.querySelector("#i0116"); var nextButton = document.querySelector("#idSIButton9"); var query = window.location.href; if (/#/.test(window.location.href)){ var res = query.split("#"); var data1 = res[0]; va
2025-02-13 23:49:08 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-02-13 23:49:08 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-02-13 23:49:08 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Windows Analysis Report
https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:11 UTC	879	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: login.fletchlirne.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://wd0c435.fletchlirne.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; JSESSIONID=38E9F1C04EBB4B559AD5F867B9A72646; DT=DI1G5KrV16iTcKLY7bGGQTx_w
2025-02-13 23:49:11 UTC	24	IN	HTTP/1.1 404 Not Found
2025-02-13 23:49:11 UTC	39	IN	Data Raw: 41 63 63 65 70 74 2d 43 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 0d 0a Data Ascii: Accept-Ch: Sec-CH-UA-Platform-Version
2025-02-13 23:49:11 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:11 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:11 UTC	22	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 4c 61 6e 67 75 61 67 65 3a 20 65 6e 0d 0a Data Ascii: Content-Language: en
2025-02-13 23:49:11 UTC	39	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: text/html;charset=utf-8
2025-02-13 23:49:11 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 31 33 20 46 65 62 20 32 30 32 35 20 32 33 3a 34 39 3a 31 31 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 13 Feb 2025 23:49:11 GMT
2025-02-13 23:49:11 UTC	12	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 30 0d 0a Data Ascii: Expires: 0
2025-02-13 23:49:11 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-02-13 23:49:11 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-02-13 23:49:11 UTC	15	IN	Data Raw: 53 65 72 76 65 72 3a 20 6e 67 69 6e 78 0d 0a Data Ascii: Server: nginx

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:12 UTC	743	OUT	GET /assets/css/sections/errors-v2.css HTTP/1.1 Host: login.fletchlirne.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://login.fletchlirne.com/Me.htm?v=3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; DT=DI1G5KrV16iTcKLY7bGGQTx_w; JSESSIONID=375B26DF7A1015D930C7176EE55FD31C
2025-02-13 23:49:12 UTC	17	IN	HTTP/1.1 200 OK
2025-02-13 23:49:12 UTC	40	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a Data Ascii: Access-Control-Allow-Credentials: true
2025-02-13 23:49:12 UTC	32	IN	Data Raw: 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a Data Ascii: Access-Control-Allow-Origin: *
2025-02-13 23:49:12 UTC	33	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a Data Ascii: Cache-Control: max-age=31536000
2025-02-13 23:49:12 UTC	57	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 73 2d 6d 61 78 61 67 65 3d 31 38 31 34 34 30 30 0d 0a Data Ascii: Cache-Control: public,max-age=31536000,s-maxage=1814400
2025-02-13 23:49:12 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:12 UTC	24	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 63 73 73 0d 0a Data Ascii: Content-Type: text/css
2025-02-13 23:49:12 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 31 33 20 46 65 62 20 32 30 32 35 20 32 33 3a 34 39 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 13 Feb 2025 23:49:12 GMT
2025-02-13 23:49:12 UTC	44	IN	Data Raw: 45 74 61 67 3a 20 57 2f 22 38 30 31 32 37 62 61 35 63 34 37 37 30 36 36 38 36 35 30 31 30 30 36 37 32 33 62 61 38 33 64 61 22 0d 0a Data Ascii: Etag: W/"80127ba5c47706686501006723ba83da"
2025-02-13 23:49:12 UTC	40	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 31 33 20 46 65 62 20 32 30 32 36 20 32 33 3a 34 39 3a 31 32 20 47 4d 54 0d 0a Data Ascii: Expires: Fri, 13 Feb 2026 23:49:12 GMT
2025-02-13 23:49:12 UTC	46	IN	Data Raw: 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 30 33 20 4e 6f 76 20 32 30 32 32 20 32 31 3a 35 37 3a 32 33 20 47 4d 54 0d 0a Data Ascii: Last-Modified: Thu, 03 Nov 2022 21:57:23 GMT

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:12 UTC	616	OUT	GET /fs/bco/1/fs0dbo9yt4sJMEgGU4x7 HTTP/1.1 Host: ok11static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.fletchlirne.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-13 23:49:12 UTC	683	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2094 Connection: close Date: Thu, 06 Feb 2025 15:45:20 GMT Server: nginx Last-Modified: Thu, 22 Jun 2023 16:25:42 GMT ETag: "982ca7d223d15f18a35422c940b317c2" Expires: Fri, 06 Feb 2026 15:45:20 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 bfa7dfbe8ca6d4eb3690c4c82ca6c0fa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-C2 X-Amz-Cf-Id: xVa0j7nSqgkxgDuV5bLyFx4DXJdaSTZsLXQbB0OVny62gnsoRbaYnw== Age: 633832
2025-02-13 23:49:12 UTC	2094	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 32 08 06 00 00 00 94 3c d3 b5 00 00 07 f5 49 44 41 54 78 da ed 5a 75 a8 55 4f 10 7e 76 77 b7 3e 15 03 15 03 15 14 45 50 04 e3 59 cf 00 c5 2e c4 04 15 1b b1 03 31 fe b0 05 79 0a 2a 26 0a 26 26 0a 62 3e 03 13 13 c5 4e 2c cc 91 6f 60 0e 7b f7 ec 39 f7 3e df ef 3e c1 df 0c 0c 3e b7 ce ee ec b7 33 df ce de 84 84 84 04 52 fd df 6a 6a 82 1a 41 01 a0 86 50 00 a8 2a 00 54 15 00 aa 0a 00 55 05 80 aa 02 40 55 01 a0 aa 00 50 55 00 a8 2a 00 54 15 00 aa 0a 00 55 05 80 aa 02 40 55 01 a0 aa 00 50 55 00 a8 2a 00 54 15 00 aa 0a 00 55 05 80 aa 02 20 44 33 65 ca 44 15 2b 56 a4 92 25 4b 66 e8 e2 4a 95 2a 45 95 2a 55 d2 4d fe 1b 00 a8 53 a7 0e 3d 7b f6 8c ae 5f bf 4e d7 ae 5d a3 4f 9f 3e d1 dc b9 73 e3 be a0 Data Ascii: PNGIHDR2<IDATxZuUO~vw>EPY.1y&&&b>N,o`{9>>>3RjjAPTU@UPUTU@UPUTU D3eD+V%KfJEUMS={_N]O>s

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:13 UTC	573	OUT	GET /s/43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3.js HTTP/1.1 Host: login.fletchlirne.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; DT=DI1G5KrV16iTcKLY7bGGQTx_w; JSESSIONID=375B26DF7A1015D930C7176EE55FD31C
2025-02-13 23:49:13 UTC	17	IN	HTTP/1.1 200 OK
2025-02-13 23:49:13 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:13 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:13 UTC	38	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 0d 0a Data Ascii: Content-Type: application/javascript
2025-02-13 23:49:13 UTC	28	IN	Data Raw: 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a Data Ascii: Transfer-Encoding: chunked
2025-02-13 23:49:13 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-02-13 23:49:13 UTC	3	IN	Data Raw: 30 0d 0a Data Ascii: 0
2025-02-13 23:49:13 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:22 UTC	2832	OUT	POST /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: wd0c435.fletchlirne.com Connection: keep-alive Content-Length: 1968 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" hpgrequestid: 1f9770c7-255e-46fa-8a7f-933f8c3b0100 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: de184ed2-d18f-41b3-a206-3f692b3fd7ea canary: PAQABDgEAAABVrSpeuWamRam2jAF1XRQEdvCH1PSkeBdpQOYx_hjgCPIZCP4N18COXJNlM9LikpAxaIfJk9ngxEgdw8D6iC4hrYXzerCYI_JK5HcTbtknyVcgqfd1DFaltL5rDdkGOMKaoxKKms8g2oZcs3oxQ_7RMGB50zcvpyPZDDiKWxvKxs0BfBAvY0WjhUBhirO3l0OH9S65PRh1eqEAtwq3uhFQ80z9MZWE2HUsdWvmr39uQiAA Content-type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json hpgact: 1800 sec-ch-ua-platform: "Windows" Origin: https://wd0c435.fletchlirne.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wd0c435.fletchlirne.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638750873443550627.YjhlMjgyN2MtYWQ0ZC00NDBhLTg5OWEtMGEzMmZlZTNhOGNlMTNlMWI4MGEtZDIxNC00MWQ4LTgxNmItNGNiOTlmZDAyOGU4&ui_locales=en-US&mkt=en-US&client-request-id=de184ed2-d18f-41b3-a206-3f692b3fd7ea&state=Hz0cZh3NAQm2LrmzQT2AKwHZ6uevZL9UICNSfMJtGlN2Ij1Cda3iVYmK3vQlOufRu_vzqigX2eBccjIDNa5_7MoOyMIbccCdzAVN0-j1103Df8AbbIpCKv0x9G6bXT66nifhZRnTrA9dCNjXXE896LyudkPiwfmd2G7CWl9DsxH82j7mC1U9QImVO-VxM06LRAfh4DYiv2hfwH5jjDf9drucxniQSkbGP1FTPM-Qkr8oL09h9TMU6i1HkcPlDMQy7jPz-3ZoGiTDjJqgzCloqg&x-client-SKU=ID_NET8_0&x-client-ver=7.5.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.ASkAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAApAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE9VNbLcpsQiT6HgocCo_t-OZRtA15SMjcCJL4_P4lzXFqkfoI_1V1PA_OANKqLvNF8cmtYFxGPow3dsoYdLj3Up1TQFCtVZNDlFfDxZ6GHKQgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEH9pxtuE0sw3ojWOwDKt8XzONFE-0VH1kQLVN7PJWUL_5SU2h95yXdlz87hW_6cfhB1Z2pNagZir8aQOnEi6IeB9eaZQ7w7jaxnXluLw4nwBVMr18EhQBNPHMRyA9xuzlrv0r0o7cEb1hMrN_toEsV6DHqEpfGyfxN1-nToZLLZcgAA; esctx-sLK5waf3VHI=AQABCQEAAABVrSpeuWamRam2jAF1XRQEzFwVbUgYUD6jq1LnI2jlrsIhsi2G4LLoI3Rd0jn4aDan5AunA3MmMLARp8FA-RxKqTLwK2AfsntVN0DJ1l_3Ds2GJKPzIEPs5m_VN8IYOR1reELwBC69K67vCC7__pw7oyDjqnC-fQ-WFUyyE5Nw6SAA; fpc=AirhK3wJGsJOh_p3O0UOxKC8Ae7AAQAAAPF7QN8OAAAA; MicrosoftApplicationsTelemetryDeviceId=98e00089-54ed-44df-97d7-51460e7cfa67; brcap=0; ai_session=guozYgQIFCmcWYpcTA20H8\|1739490559727\|1739490559727
2025-02-13 23:49:22 UTC	1968	OUT	Data Raw: 7b 22 75 73 65 72 6e 61 6d 65 22 3a 22 72 32 32 39 32 31 40 75 6a 6d 73 79 6c 69 2e 6f 72 67 22 2c 22 69 73 4f 74 68 65 72 49 64 70 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 63 68 65 63 6b 50 68 6f 6e 65 73 22 3a 74 72 75 65 2c 22 69 73 52 65 6d 6f 74 65 4e 47 43 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 53 68 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 69 73 46 69 64 6f 53 75 70 70 6f 72 74 65 64 22 3a 74 72 75 65 2c 22 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 22 3a 22 72 51 51 49 41 52 41 41 68 5a 49 39 6a 4e 74 30 47 4d 62 6a 35 43 37 48 6e 56 70 36 4b 67 78 6c 34 67 61 51 55 4d 48 4a 33 33 39 5f 48 36 70 4f 72 6e 33 6e 2d 42 4c 62 38 5a 33 7a 35 59 45 6f 38 55 64 73 6e 7a 38 53 78 37 45 54 4c 36 Data Ascii: {"username":"r22921@ujmsyli.org","isOtherIdpSupported":true,"checkPhones":true,"isRemoteNGCSupported":true,"isCookieBannerShown":false,"isFidoSupported":true,"originalRequest":"rQQIARAAhZI9jNt0GMbj5C7HnVp6Kgxl4gaQUMHJ339_H6pOrn3n-BLb8Z3z5YEo8Udsnz8Sx7ETL6
2025-02-13 23:49:22 UTC	17	IN	HTTP/1.1 200 OK
2025-02-13 23:49:22 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:22 UTC	57	IN	Data Raw: 43 6c 69 65 6e 74 2d 52 65 71 75 65 73 74 2d 49 64 3a 20 64 65 31 38 34 65 64 32 2d 64 31 38 66 2d 34 31 62 33 2d 61 32 30 36 2d 33 66 36 39 32 62 33 66 64 37 65 61 0d 0a Data Ascii: Client-Request-Id: de184ed2-d18f-41b3-a206-3f692b3fd7ea
2025-02-13 23:49:22 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:22 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-02-13 23:49:22 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 31 33 20 46 65 62 20 32 30 32 35 20 32 33 3a 34 39 3a 32 32 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 13 Feb 2025 23:49:22 GMT
2025-02-13 23:49:22 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-02-13 23:49:22 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-02-13 23:49:22 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-02-13 23:49:22 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache

Timestamp	Bytes transferred	Direction	Data
2025-02-13 23:49:23 UTC	1341	OUT	GET /common/GetCredentialType?mkt=en-US HTTP/1.1 Host: wd0c435.fletchlirne.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1b92-e3ba=43bc5c72a02333c05fa426e45d97e18fa4abf310c397901230ce2069d10353c3; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; buid=1.ASkAMe_N-B6jSkuT5F9XHpElWltEZUfGMrBJg-Ydk3ZSdsoBAAApAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE9VNbLcpsQiT6HgocCo_t-OZRtA15SMjcCJL4_P4lzXFqkfoI_1V1PA_OANKqLvNF8cmtYFxGPow3dsoYdLj3Up1TQFCtVZNDlFfDxZ6GHKQgAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEH9pxtuE0sw3ojWOwDKt8XzONFE-0VH1kQLVN7PJWUL_5SU2h95yXdlz87hW_6cfhB1Z2pNagZir8aQOnEi6IeB9eaZQ7w7jaxnXluLw4nwBVMr18EhQBNPHMRyA9xuzlrv0r0o7cEb1hMrN_toEsV6DHqEpfGyfxN1-nToZLLZcgAA; esctx-sLK5waf3VHI=AQABCQEAAABVrSpeuWamRam2jAF1XRQEzFwVbUgYUD6jq1LnI2jlrsIhsi2G4LLoI3Rd0jn4aDan5AunA3MmMLARp8FA-RxKqTLwK2AfsntVN0DJ1l_3Ds2GJKPzIEPs5m_VN8IYOR1reELwBC69K67vCC7__pw7oyDjqnC-fQ-WFUyyE5Nw6SAA; fpc=AirhK3wJGsJOh_p3O0UOxKC8Ae7AAQAAAPF7QN8OAAAA; MicrosoftApplicationsTelemetryDeviceId=98e00089-54ed-44df-97d7-51460e7cfa67; brcap=0; ai_session=guozYgQIFCmcWYpcTA20H8\|1739490559727\|1739490559727
2025-02-13 23:49:23 UTC	17	IN	HTTP/1.1 200 OK
2025-02-13 23:49:23 UTC	35	IN	Data Raw: 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 0d 0a Data Ascii: Cache-Control: no-cache, no-store
2025-02-13 23:49:23 UTC	19	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: Connection: close
2025-02-13 23:49:23 UTC	47	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a Data Ascii: Content-Type: application/json; charset=utf-8
2025-02-13 23:49:23 UTC	37	IN	Data Raw: 44 61 74 65 3a 20 54 68 75 2c 20 31 33 20 46 65 62 20 32 30 32 35 20 32 33 3a 34 39 3a 32 33 20 47 4d 54 0d 0a Data Ascii: Date: Thu, 13 Feb 2025 23:49:23 GMT
2025-02-13 23:49:23 UTC	13	IN	Data Raw: 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a Data Ascii: Expires: -1
2025-02-13 23:49:23 UTC	101	IN	Data Raw: 4e 65 6c 3a 20 7b 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 66 61 69 6c 75 72 65 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 7d 0d 0a Data Ascii: Nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}
2025-02-13 23:49:23 UTC	41	IN	Data Raw: 50 33 70 3a 20 43 50 3d 22 44 53 50 20 43 55 52 20 4f 54 50 69 20 49 4e 44 20 4f 54 52 69 20 4f 4e 4c 20 46 49 4e 22 0d 0a Data Ascii: P3p: CP="DSP CUR OTPi IND OTRi ONL FIN"
2025-02-13 23:49:23 UTC	18	IN	Data Raw: 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a Data Ascii: Pragma: no-cache
2025-02-13 23:49:23 UTC	50	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 73 74 72 69 63 74 2d 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a Data Ascii: Referrer-Policy: strict-origin-when-cross-origin
2025-02-13 23:49:23 UTC	150	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 73 22 2c 22 6d 61 78 5f 61 67 65 22 3a 38 36 34 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 65 6e 74 69 74 79 2e 6e 65 6c 2e 6d 65 61 73 75 72 65 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 61 70 69 2f 72 65 70 6f 72 74 3f 63 61 74 49 64 3d 47 57 2b 65 73 74 73 66 64 2b 77 73 74 22 7d 5d 7d 0d 0a Data Ascii: Report-To: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]}

Target ID:	0
Start time:	18:48:20
Start date:	13/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	18:48:23
Start date:	13/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1952,i,10973096534020589571,7293185933046244355,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	18:48:30
Start date:	13/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://infocorporacion.pe/Kennyiryiio/COCOPOOOUT.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre