Edit tour

Windows Analysis Report
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D

Overview

General Information

Sample URL:	https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D
Analysis ID:	1672152
Infos:

Detection

Score:	1
Range:	0 - 100
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2268,i,5811215626882022661,4807552495771223217,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2316 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D

HTTP Parser: Number of links: 0

Source: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D

HTTP Parser: Base64 decoded: {"client_ocid":"ocid1.domainapp.oc29.me-abudhabi-2.amaaaaaaaqtp5baay6tnxht2p55veetfxesuyahm3ceb2ktqbap6sjmgi7va","sub":"uiResetPassword","sidle":480,"user.tenant.name":"idcs-cad16e76a1e046538e0af80180f37b4a","iss":"https://identity.oraclecloud.com/","doma...

Source: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D	HTTP Parser: No <meta name="author".. found
Source: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D	HTTP Parser: No <meta name="author".. found

Source: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D	HTTP Parser: No <meta name="copyright".. found
Source: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.4:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 84.8.183.71:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 84.8.183.71:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 131.253.33.254:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 84.8.183.71:443 -> 192.168.2.4:49746 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 5MB later: 49MB

Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 84.201.221.41
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/dashboardModule/style/ojuxIconFont.css HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/lib/@oracle/oraclejet/dist/css/alta/oj-alta-min.css HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/style/helper.css HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/signinModule/style/signin.css HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/style/font-icon.css HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/signinModule/signin.js HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/legacyModule/scripts/resetpwd.js HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/signinModule/signin-main.js HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/legacyModule/css/images/favicon.ico HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/translations/resources/nls/idaas-translations.js HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/lib/@oracle/oraclejet/dist/js/libs/oj/resources/nls/en-US/localeElements.js HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/lib/@oracle/oraclejet/dist/js/libs/oj/resources/nls/en-US/timezoneData.js HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/legacyModule/css/images/favicon.ico HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/v1/FeatureInfos?count=48&startIndex=1&filter=state%20eq%20%22enabled%22&attributes=name HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"Authorization: Bearer eyJ4NXQjUzI1NiI6ImdmZW5IdXhfN0N6SmlKNHc0SnFsSTBLTF90QXdwa2plMFJ3bUh6Rl9jMmMiLCJ4NXQiOiJIM1VKSDBsanFRRHZCU1FDQmJzSnFySWNQNU0iLCJraWQiOiJTSUdOSU5HX0tFWSIsImFsZyI6IlJTMjU2In0.eyJjbGllbnRfb2NpZCI6Im9jaWQxLmRvbWFpbmFwcC5vYzI5Lm1lLWFidWRoYWJpLTIuYW1hYWFhYWFhcXRwNWJhYXk2dG54aHQycDU1dmVldGZ4ZXN1eWFobTNjZWIya3RxYmFwNnNqbWdpN3ZhIiwic3ViIjoidWlSZXNldFBhc3N3b3JkIiwic2lkbGUiOjQ4MCwidXNlci50ZW5hbnQubmFtZSI6ImlkY3MtY2FkMTZlNzZhMWUwNDY1MzhlMGFmODAxODBmMzdiNGEiLCJpc3MiOiJodHRwczovL2lkZW50aXR5Lm9yYWNsZWNsb3VkLmNvbS8iLCJkb21haW5faG9tZSI6Im1lLWFidWRoYWJpLTIiLCJjYV9vY2lkIjoib2NpZDEudGVuYW5jeS5vYzI5Li5hYWFhYWFhYW53dTdsdGRjY294d21jY3g2YTZoNHN5Y3V0a29xeGlqeTZxeG1meTdodHRpcnpyeTJndHEiLCJjbGllbnRfaWQiOiJ1aVJlc2V0UGFzc3dvcmQiLCJkb21haW5faWQiOiJvY2lkMS5kb21haW4ub2MyOS4uYWFhYWFhYWFrcWRmaTV1djVvd3MzanN5cXVtemd3bHoyYWRieTZ4bWs3ZHNkazc0aWZjbm9tejZ4ZjRxIiwic3ViX3R5cGUiOiJjbGllbnQiLCJzY29wZSI6InVybjpvcGM6aWRtOnQuc2VjdXJpdHkuY2xpZW50IHVybjpvcGM6aWRtOnQuYXBwc2VydmljZXMgdXJuOm9wYzppZG06dC51c2VyLnJlc2V0cGFzc3dvcmQgdXJuOm9wYzppZG06dC5uYW1lZGFwcGFkbWluIHVybjpvcGM6aWRtOnQudXNlci5tZS5wYXNzd29yZHZhbGlkYXRvciIsImNsaWVudF90ZW5hbnRuYW1lIjoiaWRjcy1vcmFjbGUiLCJyZWdpb25fbmFtZSI6Im1lLWFidWRoYWJpLWlkY3MtMiIsImV4cCI6MTc0NTQyMTczOCwiaWF0IjoxNzQ1NDE4MTM4LCJjbGllbnRfZ3VpZCI6IjNhYWIxODRkMzdmYjQ1NWViYTMxZmE1ZWNkNjBhYjhmIiwiY2xpZW50X25hbWUiOiJ1aVJlc2V0UGFzc3dvcmQiLCJ0ZW5hbnQiOiJpZGNzLWNhZDE2ZTc2YTFlMDQ2NTM4ZTBhZjgwMTgwZjM3YjRhIiwianRpIjoiODJiNTZiNTMyMDlhNGFhMmJiNzQ2OWRiMTE2Yjk5YzUiLCJndHAiOiJjYyIsIm9wYyI6ZmFsc2UsInN1Yl9tYXBwaW5nYXR0ciI6InVzZXJOYW1lIiwicHJpbVRlbmFudCI6ZmFsc2UsInRva190eXBlIjoiQVQiLCJhdWQiOlsiaHR0cHM6Ly9pZGNzLWNhZDE2ZTc2YTFlMDQ2NTM4ZTBhZjgwMTgwZjM3YjRhLm1lLWFidWRoYWJpLWlkY3MtMi5pZGVudGl0eS5vY2kub3JhY2xlY2xvdWQyOS5jb20iLCJodHRwczovL2lkY3MtY2FkMTZlNzZhMWUwNDY1MzhlMGFmODAxODBmMzdiNGEubWUtYWJ1ZGhhYmktaWRjcy0yLnNlY3VyZS5pZGVudGl0eS5vY2kub3JhY2xlY2xvdWQyOS5jb20iLCJ1cm46b3BjOmxiYWFzOmxvZ2ljYWxndWlkPWlkY3MtY2FkMTZlNzZhMWUwNDY1MzhlMGFmODAxODBmMzdiNGEiXSwiY2FfbmFtZSI6ImRnZWRyY2MiLCJkb21haW4iOiJER0UtUFJPRC1ET01BSU4iLCJjbGllbnRBcHBSb2xlcyI6WyJSZXNldCBQYXNzd29yZCIsIk1lIFBhc3N3b3JkIFZhbGlkYXRvciIsIkF1dGhlbnRpY2F0ZWQgQ2xpZW50IiwiQ3Jvc3MgVGVuYW50Il0sInRlbmFudF9pc3MiOiJodHRwczovL2lkY3MtY2FkMTZlNzZhMWUwNDY1MzhlMGFmODAxODBmMzdiNGEubWUtYWJ1ZGhhYmktaWRjcy0yLmlkZW50aXR5Lm9jaS5vcmFjbGVjbG91ZDI5LmNvbTo0NDMifQ.SbLErC0HjVAb8Z0ziTMjKbkxAL1_q5hgtOr5IhFw-Sip8crt-WMzGey2nKid0dkcbHQvJiL5ioHkKtcJrOIrUoC1yM_Yfo0zInlr5xX7LCDkIcx6ZG64k14KAhWUCzN-yK_mdXHNRcwmbY8ERMOWN_g8GVN_UHdZbbSoR_kfHlb6xija9LeY-773yJdm6qNqfHJOkqLtWPQ7_FtFJ4TAHDzgDQfg-10GRIX1mDCSo51H_YSKtzS0JnlZPUE-_thrQo3OzE2RtgvBQpRHxAjR4CzuiSjUFMvcLhUhMydjT_IF6ft0BsJhNaisWqUhHu0Dz3x5JUYy8QWURLhVrHM-mACache-Control: no-cacheAccept-Language: en-USPragma: no-cachesec-ch-ua: "Chromium";v="
Source: global traffic	HTTP traffic detected: GET /admin/v1/FeatureInfos?count=48&startIndex=1&filter=state%20eq%20%22enabled%22&attributes=name HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /.well-known/idcs-configuration HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"Cache-Control: no-cachePragma: no-cachesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/signinModule/style/redwood/signin.css HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/asset/oracle-favicon.ico HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/v1/BrandingSettings/BrandingSettings HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"Authorization: Bearer eyJ4NXQjUzI1NiI6ImdmZW5IdXhfN0N6SmlKNHc0SnFsSTBLTF90QXdwa2plMFJ3bUh6Rl9jMmMiLCJ4NXQiOiJIM1VKSDBsanFRRHZCU1FDQmJzSnFySWNQNU0iLCJraWQiOiJTSUdOSU5HX0tFWSIsImFsZyI6IlJTMjU2In0.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.SbLErC0HjVAb8Z0ziTMjKbkxAL1_q5hgtOr5IhFw-Sip8crt-WMzGey2nKid0dkcbHQvJiL5ioHkKtcJrOIrUoC1yM_Yfo0zInlr5xX7LCDkIcx6ZG64k14KAhWUCzN-yK_mdXHNRcwmbY8ERMOWN_g8GVN_UHdZbbSoR_kfHlb6xija9LeY-773yJdm6qNqfHJOkqLtWPQ7_FtFJ4TAHDzgDQfg-10GRIX1mDCSo51H_YSKtzS0JnlZPUE-_thrQo3OzE2RtgvBQpRHxAjR4CzuiSjUFMvcLhUhMydjT_IF6ft0BsJhNaisWqUhHu0Dz3x5JUYy8QWURLhVrHM-mACache-Control: no-cacheAccept-Language: en-USPragma: no-cachesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"
Source: global traffic	HTTP traffic detected: GET /.well-known/idcs-configuration HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/asset/oracle-favicon.ico HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /admin/v1/BrandingSettings/BrandingSettings HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/asset/oracle-red.svg HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/asset/OracleSansVF.woff2 HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-aliveOrigin: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/component/layout/ojIdaasSigninAppShell/asset/mfa-policy-update.png HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/component/layout/redwood/ojIdaasSigninSection/asset/info.svg HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /storage/v1/public/images/202412191208/1734609828000/Govt_of_AD.png HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/component/layout/redwood/ojIdaasSigninSection/asset/info.svg HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/asset/oracle-red.svg HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/unauthenticatedModule/unauthenticatedModule.min.js HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /storage/v1/public/images/202412191208/1734609828000/Govt_of_AD.png HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/unauthenticatedModule/view/resetPassword/viewModel/reset-password.view-model.js HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3DAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/component/layout/ojIdaasSigninAppShell/asset/mfa-policy-update.png HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/style/fonts/IDCS.ttf?mltxzn HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-aliveOrigin: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/style/font-icon.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com

Source: unknown

HTTP traffic detected: POST /admin/v1/UserTokenValidator HTTP/1.1Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.comConnection: keep-aliveContent-Length: 130sec-ch-ua-platform: "Windows"Authorization: Bearer eyJ4NXQjUzI1NiI6ImdmZW5IdXhfN0N6SmlKNHc0SnFsSTBLTF90QXdwa2plMFJ3bUh6Rl9jMmMiLCJ4NXQiOiJIM1VKSDBsanFRRHZCU1FDQmJzSnFySWNQNU0iLCJraWQiOiJTSUdOSU5HX0tFWSIsImFsZyI6IlJTMjU2In0.eyJjbGllbnRfb2NpZCI6Im9jaWQxLmRvbWFpbmFwcC5vYzI5Lm1lLWFidWRoYWJpLTIuYW1hYWFhYWFhcXRwNWJhYXk2dG54aHQycDU1dmVldGZ4ZXN1eWFobTNjZWIya3RxYmFwNnNqbWdpN3ZhIiwic3ViIjoidWlSZXNldFBhc3N3b3JkIiwic2lkbGUiOjQ4MCwidXNlci50ZW5hbnQubmFtZSI6ImlkY3MtY2FkMTZlNzZhMWUwNDY1MzhlMGFmODAxODBmMzdiNGEiLCJpc3MiOiJodHRwczovL2lkZW50aXR5Lm9yYWNsZWNsb3VkLmNvbS8iLCJkb21haW5faG9tZSI6Im1lLWFidWRoYWJpLTIiLCJjYV9vY2lkIjoib2NpZDEudGVuYW5jeS5vYzI5Li5hYWFhYWFhYW53dTdsdGRjY294d21jY3g2YTZoNHN5Y3V0a29xeGlqeTZxeG1meTdodHRpcnpyeTJndHEiLCJjbGllbnRfaWQiOiJ1aVJlc2V0UGFzc3dvcmQiLCJkb21haW5faWQiOiJvY2lkMS5kb21haW4ub2MyOS4uYWFhYWFhYWFrcWRmaTV1djVvd3MzanN5cXVtemd3bHoyYWRieTZ4bWs3ZHNkazc0aWZjbm9tejZ4ZjRxIiwic3ViX3R5cGUiOiJjbGllbnQiLCJzY29wZSI6InVybjpvcGM6aWRtOnQuc2VjdXJpdHkuY2xpZW50IHVybjpvcGM6aWRtOnQuYXBwc2VydmljZXMgdXJuOm9wYzppZG06dC51c2VyLnJlc2V0cGFzc3dvcmQgdXJuOm9wYzppZG06dC5uYW1lZGFwcGFkbWluIHVybjpvcGM6aWRtOnQudXNlci5tZS5wYXNzd29yZHZhbGlkYXRvciIsImNsaWVudF90ZW5hbnRuYW1lIjoiaWRjcy1vcmFjbGUiLCJyZWdpb25fbmFtZSI6Im1lLWFidWRoYWJpLWlkY3MtMiIsImV4cCI6MTc0NTQyMTczOCwiaWF0IjoxNzQ1NDE4MTM4LCJjbGllbnRfZ3VpZCI6IjNhYWIxODRkMzdmYjQ1NWViYTMxZmE1ZWNkNjBhYjhmIiwiY2xpZW50X25hbWUiOiJ1aVJlc2V0UGFzc3dvcmQiLCJ0ZW5hbnQiOiJpZGNzLWNhZDE2ZTc2YTFlMDQ2NTM4ZTBhZjgwMTgwZjM3YjRhIiwianRpIjoiODJiNTZiNTMyMDlhNGFhMmJiNzQ2OWRiMTE2Yjk5YzUiLCJndHAiOiJjYyIsIm9wYyI6ZmFsc2UsInN1Yl9tYXBwaW5nYXR0ciI6InVzZXJOYW1lIiwicHJpbVRlbmFudCI6ZmFsc2UsInRva190eXBlIjoiQVQiLCJhdWQiOlsiaHR0cHM6Ly9pZGNzLWNhZDE2ZTc2YTFlMDQ2NTM4ZTBhZjgwMTgwZjM3YjRhLm1lLWFidWRoYWJpLWlkY3MtMi5pZGVudGl0eS5vY2kub3JhY2xlY2xvdWQyOS5jb20iLCJodHRwczovL2lkY3MtY2FkMTZlNzZhMWUwNDY1MzhlMGFmODAxODBmMzdiNGEubWUtYWJ1ZGhhYmktaWRjcy0yLnNlY3VyZS5pZGVudGl0eS5vY2kub3JhY2xlY2xvdWQyOS5jb20iLCJ1cm46b3BjOmxiYWFzOmxvZ2ljYWxndWlkPWlkY3MtY2FkMTZlNzZhMWUwNDY1MzhlMGFmODAxODBmMzdiNGEiXSwiY2FfbmFtZSI6ImRnZWRyY2MiLCJkb21haW4iOiJER0UtUFJPRC1ET01BSU4iLCJjbGllbnRBcHBSb2xlcyI6WyJSZXNldCBQYXNzd29yZCIsIk1lIFBhc3N3b3JkIFZhbGlkYXRvciIsIkF1dGhlbnRpY2F0ZWQgQ2xpZW50IiwiQ3Jvc3MgVGVuYW50Il0sInRlbmFudF9pc3MiOiJodHRwczovL2lkY3MtY2FkMTZlNzZhMWUwNDY1MzhlMGFmODAxODBmMzdiNGEubWUtYWJ1ZGhhYmktaWRjcy0yLmlkZW50aXR5Lm9jaS5vcmFjbGVjbG91ZDI5LmNvbTo0NDMifQ.SbLErC0HjVAb8Z0ziTMjKbkxAL1_q5hgtOr5IhFw-Sip8crt-WMzGey2nKid0dkcbHQvJiL5ioHkKtcJrOIrUoC1yM_Yfo0zInlr5xX7LCDkIcx6ZG64k14KAhWUCzN-yK_mdXHNRcwmbY8ERMOWN_g8GVN_UHdZbbSoR_kfHlb6xija9LeY-773yJdm6qNqfHJOkqLtWPQ7_FtFJ4TAHDzgDQfg-10GRIX1mDCSo51H_YSKtzS0JnlZPUE-_thrQo3OzE2RtgvBQpRHxAjR4CzuiSjUFMvcLhUhMydjT_IF6ft0BsJhNaisWqUhHu0Dz3x5JUYy8QWURLhVrHM-mACache-Control: no-cacheAccept-Language: en-USPragma: no-cachesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";

Source: chromecache_89.3.dr	String found in binary or memory: http://dev.jquery.com/ticket/2709
Source: chromecache_89.3.dr	String found in binary or memory: https://github.com/requirejs/requirejs/blob/master/LICENSE
Source: chromecache_89.3.dr	String found in binary or memory: https://github.com/requirejs/requirejs/issues/187
Source: chromecache_89.3.dr	String found in binary or memory: https://github.com/requirejs/requirejs/issues/273
Source: chromecache_89.3.dr	String found in binary or memory: https://requirejs.org/docs/errors.html#
Source: chromecache_89.3.dr	String found in binary or memory: https://webkit.org/b/153317

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.4:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 84.8.183.71:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 84.8.183.71:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 131.253.33.254:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 84.8.183.71:443 -> 192.168.2.4:49746 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@21/50@8/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2268,i,5811215626882022661,4807552495771223217,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2316 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2268,i,5811215626882022661,4807552495771223217,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2316 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/lib/@oracle/oraclejet/dist/js/libs/oj/resources/nls/en-US/localeElements.js	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/signinModule/style/signin.css	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/.well-known/idcs-configuration	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/translations/resources/nls/idaas-translations.js	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/admin/v1/UserTokenValidator	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/storage/v1/public/images/202412191208/1734609828000/Govt_of_AD.png	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/admin/v1/FeatureInfos?count=48&startIndex=1&filter=state%20eq%20%22enabled%22&attributes=name	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/component/layout/redwood/ojIdaasSigninSection/asset/info.svg	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/dashboardModule/style/ojuxIconFont.css	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/admin/v1/BrandingSettings/BrandingSettings	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/legacyModule/scripts/resetpwd.js	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/asset/oracle-favicon.ico	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/style/font-icon.css	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/lib/@oracle/oraclejet/dist/js/libs/oj/resources/nls/en-US/timezoneData.js	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/asset/OracleSansVF.woff2	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/signinModule/signin-main.js	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/signinModule/signin.js	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/unauthenticatedModule/view/resetPassword/viewModel/reset-password.view-model.js	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/style/fonts/IDCS.ttf?mltxzn	0%	Avira URL Cloud	safe
http://dev.jquery.com/ticket/2709	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/asset/oracle-red.svg	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/unauthenticatedModule/unauthenticatedModule.min.js	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/style/helper.css	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/component/layout/ojIdaasSigninAppShell/asset/mfa-policy-update.png	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/signinModule/style/redwood/signin.css	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/legacyModule/css/images/favicon.ico	0%	Avira URL Cloud	safe
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/lib/@oracle/oraclejet/dist/css/alta/oj-alta-min.css	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
dp.aaaaaaaag32b6nk5qwmehtaaz45vfzpp5vhu66vzp4ia65hvwj6q3vtmknaa.idcsprod.me-abudhabi-2.idcs.prod.identity.oci.oraclecloud29.com	84.8.183.71	true	false	unknown
www.google.com	142.250.69.4	true	false	high
idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/.well-known/idcs-configuration	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/storage/v1/public/images/202412191208/1734609828000/Govt_of_AD.png	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/admin/v1/BrandingSettings/BrandingSettings	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/lib/@oracle/oraclejet/dist/js/libs/oj/resources/nls/en-US/localeElements.js	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/admin/v1/UserTokenValidator	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/admin/v1/FeatureInfos?count=48&startIndex=1&filter=state%20eq%20%22enabled%22&attributes=name	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/dashboardModule/style/ojuxIconFont.css	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/translations/resources/nls/idaas-translations.js	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/component/layout/redwood/ojIdaasSigninSection/asset/info.svg	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/signinModule/style/signin.css	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/lib/@oracle/oraclejet/dist/js/libs/oj/resources/nls/en-US/timezoneData.js	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/legacyModule/scripts/resetpwd.js	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/style/font-icon.css	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/signinModule/signin.js	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/asset/oracle-favicon.ico	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/asset/OracleSansVF.woff2	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/signinModule/signin-main.js	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/unauthenticatedModule/view/resetPassword/viewModel/reset-password.view-model.js	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/style/fonts/IDCS.ttf?mltxzn	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/style/helper.css	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/asset/oracle-red.svg	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D	false		unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/signinModule/style/redwood/signin.css	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/component/layout/ojIdaasSigninAppShell/asset/mfa-policy-update.png	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/unauthenticatedModule/unauthenticatedModule.min.js	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/lib/@oracle/oraclejet/dist/css/alta/oj-alta-min.css	false	Avira URL Cloud: safe	unknown
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/legacyModule/css/images/favicon.ico	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/requirejs/requirejs/issues/273	chromecache_89.3.dr	false		high
https://webkit.org/b/153317	chromecache_89.3.dr	false		high
https://github.com/requirejs/requirejs/blob/master/LICENSE	chromecache_89.3.dr	false		high
https://github.com/requirejs/requirejs/issues/187	chromecache_89.3.dr	false		high
http://dev.jquery.com/ticket/2709	chromecache_89.3.dr	false	Avira URL Cloud: safe	unknown
https://requirejs.org/docs/errors.html#	chromecache_89.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
142.250.69.4	www.google.com	United States		15169	GOOGLEUS	false
84.8.183.71	dp.aaaaaaaag32b6nk5qwmehtaaz45vfzpp5vhu66vzp4ia65hvwj6q3vtmknaa.idcsprod.me-abudhabi-2.idcs.prod.identity.oci.oraclecloud29.com	United Kingdom		43383	CLOUD_DIRECTGB	false

Private

IP
192.168.2.23
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1672152
Start date and time:	2025-04-23 16:21:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@21/50@8/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.69.3, 142.250.68.238, 192.178.49.174, 74.125.137.84, 142.250.69.14, 72.247.234.254, 199.232.210.172, 192.178.49.195, 184.29.183.29, 4.175.87.197
Excluded domains from analysis (whitelisted): a-ring-fallback.msedge.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, ocsp.digicert.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32014)
Category:	downloaded
Size (bytes):	32129
Entropy (8bit):	5.2163893777277455
Encrypted:	false
SSDEEP:	384:W5WQjskXaqubtCJtD7a7kBPI6aXe36kkgKkzDRSCPu2zN21+2YW2xR1vnJlz0kKD:W5WCzHawBPI6aXeKkyiDhtD7pQ2i7
MD5:	1BAFE9DDE1AB38BDAEA226990AAE2DFB
SHA1:	2F35E9F99985F94F23C87886332041DDFD440100
SHA-256:	51869B0EDA48E6981D35DB843EF1DC1AE7A15351B93885A95F2C3BE3D3549B96
SHA-512:	A0B131840DBF0897993205A1923022D9B22BB03287193566E9304E4E1CAE4DAFA3880298343937E1D5835891CCB67DAF00DBD9CCB8FF8D2210D35CA130F6D4D3
Malicious:	false
Reputation:	low
URL:	https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/legacyModule/scripts/resetpwd.js
Preview:	function getFingerprint(e){var o={currentTime:(new Date).toString(),screenWidth:screen.width,screenHeight:screen.height,screenColorDepth:screen.colorDepth,screenPixelDepth:screen.pixelDepth,windowPixelRatio:window.devicePixelRatio,language:navigator.language,userAgent:navigator.userAgent,cookieEnabled:navigator.cookieEnabled,mimeTypes:navigator.mimeTypes?navigator.mimeTypes.length:0,plugins:navigator.plugins?navigator.plugins.length:0,timeZone:(new Date).getTimezoneOffset()},n=JSON.stringify(o);return null!==e&&null!==document.getElementById(e)&&(document.getElementById(e).value=n),n}require(["signinModule/signin-main"],function(){}),define("legacyModule/scripts/resetpwd",function(){}),define("text!legacyModule/scripts/templates/login/change-pwd.tmpl.html",[],function(){return'<div class="oj-form oj-md-labels-inline oj-padding-lg-top" id="contentarea">\n <div data-bind="css: {\'idcs-hide\': !showExpError()}" class="oj-row" id="chpassword-error-div">\n <div style="padding-left: 120p

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2025 16:22:10.269022942 CEST	53	58128	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:10.286701918 CEST	53	56613	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:11.122627020 CEST	53	49563	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:11.379388094 CEST	53	54924	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:14.189996958 CEST	50503	53	192.168.2.4	1.1.1.1
Apr 23, 2025 16:22:14.190184116 CEST	55729	53	192.168.2.4	1.1.1.1
Apr 23, 2025 16:22:14.330221891 CEST	53	55729	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:14.330347061 CEST	53	50503	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:16.072458982 CEST	61354	53	192.168.2.4	1.1.1.1
Apr 23, 2025 16:22:16.072957039 CEST	54049	53	192.168.2.4	1.1.1.1
Apr 23, 2025 16:22:17.097963095 CEST	53047	53	192.168.2.4	1.1.1.1
Apr 23, 2025 16:22:17.098125935 CEST	63344	53	192.168.2.4	1.1.1.1
Apr 23, 2025 16:22:17.546813011 CEST	53	61354	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:17.546832085 CEST	53	63344	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:17.546845913 CEST	53	53047	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:17.548824072 CEST	53	54049	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:28.299993992 CEST	53	51583	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:28.689174891 CEST	52992	53	192.168.2.4	1.1.1.1
Apr 23, 2025 16:22:28.689332962 CEST	61639	53	192.168.2.4	1.1.1.1
Apr 23, 2025 16:22:29.356969118 CEST	53	52992	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:29.379045010 CEST	53	61639	1.1.1.1	192.168.2.4
Apr 23, 2025 16:22:47.254884958 CEST	53	54070	1.1.1.1	192.168.2.4
Apr 23, 2025 16:23:09.757376909 CEST	53	52581	1.1.1.1	192.168.2.4
Apr 23, 2025 16:23:10.065843105 CEST	53	64860	1.1.1.1	192.168.2.4
Apr 23, 2025 16:23:12.831348896 CEST	53	59462	1.1.1.1	192.168.2.4
Apr 23, 2025 16:23:16.070852041 CEST	138	138	192.168.2.4	192.168.2.255

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:18 UTC	804	OUT	GET /ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:19 UTC	717	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 7654 Connection: close x-frame-options: DENY x-download-options: noopen cache-control: no-store, no-cache, must-revalidate, proxy-revalidate pragma: no-cache expires: Sat, 01 Jan 2000 00:00:00 GMT x-oracle-dms-ecid: B81473290B3C74E8F869CA9B218CE904/dZzrn0VW720000000 x-oracle-dms-rid: 0:1 x-envoy-upstream-service-time: 22 via: 1.1 net-idcs-config x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: Accept-Encoding,origin x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:19 UTC	3379	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 75 69 2f 76 31 2f 70 75 62 6c 69 63 2f 32 35 2e 33 2e 31 39 35 2d 32 35 30 33 32 36 31 36 35 36 31 33 2f 64 69 73 74 2f 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 Data Ascii: <!DOCTYPE html><html lang="en-us"> <head> <base href="/ui/v1/public/25.3.195-250326165613/dist/"> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-sc
2025-04-23 14:22:19 UTC	4096	IN	Data Raw: 4a 53 5a 58 4e 6c 64 43 42 51 59 58 4e 7a 64 32 39 79 5a 43 49 73 49 6b 31 6c 49 46 42 68 63 33 4e 33 62 33 4a 6b 49 46 5a 68 62 47 6c 6b 59 58 52 76 63 69 49 73 49 6b 46 31 64 47 68 6c 62 6e 52 70 59 32 46 30 5a 57 51 67 51 32 78 70 5a 57 35 30 49 69 77 69 51 33 4a 76 63 33 4d 67 56 47 56 75 59 57 35 30 49 6c 30 73 49 6e 52 6c 62 6d 46 75 64 46 39 70 63 33 4d 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 6c 6b 59 33 4d 74 59 32 46 6b 4d 54 5a 6c 4e 7a 5a 68 4d 57 55 77 4e 44 59 31 4d 7a 68 6c 4d 47 46 6d 4f 44 41 78 4f 44 42 6d 4d 7a 64 69 4e 47 45 75 62 57 55 74 59 57 4a 31 5a 47 68 68 59 6d 6b 74 61 57 52 6a 63 79 30 79 4c 6d 6c 6b 5a 57 35 30 61 58 52 35 4c 6d 39 6a 61 53 35 76 63 6d 46 6a 62 47 56 6a 62 47 39 31 5a 44 49 35 4c 6d 4e 76 62 54 6f 30 4e Data Ascii: JSZXNldCBQYXNzd29yZCIsIk1lIFBhc3N3b3JkIFZhbGlkYXRvciIsIkF1dGhlbnRpY2F0ZWQgQ2xpZW50IiwiQ3Jvc3MgVGVuYW50Il0sInRlbmFudF9pc3MiOiJodHRwczovL2lkY3MtY2FkMTZlNzZhMWUwNDY1MzhlMGFmODAxODBmMzdiNGEubWUtYWJ1ZGhhYmktaWRjcy0yLmlkZW50aXR5Lm9jaS5vcmFjbGVjbG91ZDI5LmNvbTo0N
2025-04-23 14:22:19 UTC	179	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 6f 6a 2d 62 69 6e 64 2d 74 65 78 74 20 76 61 6c 75 65 3d 22 5b 5b 62 75 6e 64 6c 65 28 27 73 69 67 6e 69 6e 2e 67 6f 76 2e 62 61 6e 6e 65 72 27 29 5d 5d 22 3e 3c 2f 6f 6a 2d 62 69 6e 64 2d 74 65 78 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 6f 6a 2d 62 69 6e 64 2d 69 66 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <oj-bind-text value="[[bundle('signin.gov.banner')]]"></oj-bind-text> <span> </div> </div> </oj-bind-if> </div> </body></html>

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:19 UTC	825	OUT	GET /ui/v1/public/25.3.195-250326165613/dist/dashboardModule/style/ojuxIconFont.css HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:19 UTC	694	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:19 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-xss-protection: 1; mode=block x-frame-options: DENY x-download-options: noopen accept-ranges: bytes x-content-type-options: nosniff vary: Accept-Encoding,origin x-envoy-upstream-service-time: 5 x-frame-options: DENY x-download-options: noopen cache-control: public, max-age=31536000 etag: W/"146-195d36c0678" last-modified: Wed, 26 Mar 2025 17:07:07 GMT via: 1.1 net-idcs-config age: 0 x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:19 UTC	333	IN	Data Raw: 31 34 36 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6f 6a 75 78 49 63 6f 6e 46 6f 6e 74 3b 73 72 63 3a 75 72 6c 28 6f 6a 75 78 49 63 6f 6e 46 6f 6e 74 5f 52 67 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 2e 6f 6a 75 78 2d 69 63 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6f 6a 75 78 49 63 6f 6e 46 6f 6e 74 7d 2e 6f 6a 75 78 2d 69 63 6f 6e 2d 31 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 2e 6f 6a 75 78 2d 69 63 6f 6e 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 34 65 22 7d 2e 6f 6a 75 78 2d 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 31 22 7d 2e 6f 6a 75 78 2d 69 63 6f 6e 2d Data Ascii: 146@font-face{font-family:ojuxIconFont;src:url(ojuxIconFont_Rg.woff) format("woff")}.ojux-icon{font-family:ojuxIconFont}.ojux-icon-18{font-size:18px}.ojux-icon-external-link:before{content:"\f24e"}.ojux-icon-chevron-up:before{content:"\f1d1"}.ojux-icon-
2025-04-23 14:22:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:19 UTC	833	OUT	GET /ui/v1/public/25.3.195-250326165613/lib/@oracle/oraclejet/dist/css/alta/oj-alta-min.css HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:20 UTC	696	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:20 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-xss-protection: 1; mode=block x-frame-options: DENY x-download-options: noopen accept-ranges: bytes x-content-type-options: nosniff vary: Accept-Encoding,origin x-envoy-upstream-service-time: 5 x-frame-options: DENY x-download-options: noopen cache-control: public, max-age=31536000 etag: W/"86cab-195d36bf6d8" last-modified: Wed, 26 Mar 2025 17:07:03 GMT via: 1.1 net-idcs-config age: 0 x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:20 UTC	3400	IN	Data Raw: 32 30 34 39 0d 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 30 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 68 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 70 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 Data Ascii: 2049/! normalize.css v8.0.0 \| MIT License \| github.com/necolas/normalize.css /html{-webkit-text-size-adjust:100%}body{margin:0}h1{font-size:2em;margin:.67em 0}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font
2025-04-23 14:22:20 UTC	4096	IN	Data Raw: 7d 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 2e 6f 6a 2d 68 65 6c 70 65 72 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 72 69 67 68 74 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 21 69 6d 70 6f 72 74 61 6e 74 7d 68 74 6d 6c 3a 6e 6f 74 28 5b 64 69 72 3d 72 74 6c 5d 29 20 2e 6f 6a 2d 68 65 6c 70 65 72 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6c 65 66 74 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 21 69 6d 70 6f 72 74 61 6e 74 7d 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 2e 6f 6a 2d 68 65 6c 70 65 72 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 6c 65 66 74 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d Data Ascii: }html[dir=rtl] .oj-helper-justify-content-right{justify-content:flex-start!important}html:not([dir=rtl]) .oj-helper-justify-content-left{justify-content:flex-start!important}html[dir=rtl] .oj-helper-justify-content-left{justify-content:flex-end!important}
2025-04-23 14:22:20 UTC	777	IN	Data Raw: 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 73 61 6e 73 2d 73 65 72 69 66 2d 6c 69 67 68 74 22 29 2c 6c 6f 63 61 6c 28 22 41 72 69 61 6c 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 73 61 6e 73 2d 73 65 72 69 66 2d 72 65 67 75 6c 61 72 22 29 2c 6c 6f 63 61 6c 28 22 41 72 69 61 6c 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 73 61 6e 73 2d 73 65 72 69 66 2d 6d 65 64 69 75 6d 22 29 2c 6c 6f 63 61 6c 28 22 41 72 69 61 6c 22 29 7d 40 66 6f 6e 74 2d 66 61 63 Data Ascii: l;font-weight:300;src:local("sans-serif-light"),local("Arial")}@font-face{font-family:Arial;font-weight:400;src:local("sans-serif-regular"),local("Arial")}@font-face{font-family:Arial;font-weight:500;src:local("sans-serif-medium"),local("Arial")}@font-fac
2025-04-23 14:22:21 UTC	4096	IN	Data Raw: 31 35 66 62 37 0d 0a 63 61 6c 28 22 48 65 6c 76 65 74 69 63 61 4e 65 75 65 2d 54 68 69 6e 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 48 65 6c 76 65 74 69 63 61 4e 65 75 65 2d 4c 69 67 68 74 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 6c 6f 63 61 6c 28 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 3b 66 6f 6e 74 2d 77 65 69 67 Data Ascii: 15fb7cal("HelveticaNeue-Thin")}@font-face{font-family:"Helvetica Neue";font-weight:300;src:local("HelveticaNeue-Light")}@font-face{font-family:"Helvetica Neue";font-weight:400;src:local("Helvetica Neue")}@font-face{font-family:"Helvetica Neue";font-weig
2025-04-23 14:22:21 UTC	4096	IN	Data Raw: 6e 74 65 6e 74 3e 2e 6f 6a 2d 74 72 65 65 76 69 65 77 2d 69 74 65 6d 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 75 72 6c 28 2e 2e 2f 63 6f 6d 6d 6f 6e 2f 69 6d 61 67 65 73 2f 64 6f 63 75 6d 65 6e 74 2e 73 76 67 29 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 7d 2e 6f 6a 2d 63 6f 6c 6c 61 70 73 65 64 3a 6e 6f 74 28 2e 6f 6a 2d 74 72 65 65 2d 74 79 70 65 29 3e 61 20 2e 6f 6a 2d 74 72 65 65 2d 6e 6f 64 65 2d 69 63 6f 6e 2c 2e 6f 6a 2d 63 6f 6c 6c 61 70 73 65 64 3e 2e 6f 6a 2d 74 72 65 65 76 69 65 77 2d 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 3e 2e 6f 6a 2d 74 72 65 65 76 69 65 77 2d 69 74 65 6d 2d 69 63 6f 6e 2c 2e 6f 6a 2d 66 77 6b 2d 69 63 6f 6e 2d 66 6f 6c 64 65 72 2d 63 6f 6c 6c 61 70 73 65 64 7b 62 61 63 6b 67 Data Ascii: ntent>.oj-treeview-item-icon:before{content:url(../common/images/document.svg);width:100%;height:100%}}.oj-collapsed:not(.oj-tree-type)>a .oj-tree-node-icon,.oj-collapsed>.oj-treeview-item-content>.oj-treeview-item-icon,.oj-fwk-icon-folder-collapsed{backg
2025-04-23 14:22:21 UTC	4096	IN	Data Raw: 73 6f 6c 75 74 69 6f 6e 3a 30 2e 39 39 64 70 70 78 29 7b 2e 6f 6a 2d 66 77 6b 2d 69 63 6f 6e 2d 6e 6f 6e 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 6f 6a 2d 66 77 6b 2d 69 63 6f 6e 2d 6e 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 75 72 6c 28 2e 2e 2f 63 6f 6d 6d 6f 6e 2f 69 6d 61 67 65 73 2f 6e 6f 6e 65 2e 73 76 67 29 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 7d 2e 6f 6a 2d 61 76 61 74 61 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 2e 6f 6a 2d 66 77 6b 2d 69 63 6f 6e 2d 70 65 72 73 6f 6e 2d 61 76 61 74 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 63 6f 6d 6d 6f 6e 2f 69 6d 61 67 65 73 2f 73 70 72 69 74 65 73 2f 73 70 72 69 74 65 2e 73 76 67 29 3b Data Ascii: solution:0.99dppx){.oj-fwk-icon-none{background-image:none}.oj-fwk-icon-none:before{content:url(../common/images/none.svg);width:100%;height:100%}}.oj-avatar-placeholder,.oj-fwk-icon-person-avatar{background-image:url(../common/images/sprites/sprite.svg);
2025-04-23 14:22:21 UTC	4096	IN	Data Raw: 2d 69 6e 66 6f 2c 2e 6f 6a 2d 6d 65 73 73 61 67 65 2d 73 74 61 74 75 73 2d 69 63 6f 6e 2e 6f 6a 2d 6d 65 73 73 61 67 65 2d 69 6e 66 6f 2d 69 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 63 6f 6d 6d 6f 6e 2f 69 6d 61 67 65 73 2f 73 70 72 69 74 65 73 2f 73 70 72 69 74 65 2e 73 76 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 33 33 32 70 78 20 35 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 36 30 70 78 20 2d 32 70 78 3b 77 69 64 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 6f 6a 2d 68 69 63 6f 6e 74 72 61 73 74 20 2e 6f 6a 2d 66 77 6b 2d 69 63 6f 6e 2d 73 74 61 74 75 73 2d 69 6e 66 6f 2c 2e 6f 6a 2d 68 69 63 6f 6e 74 72 61 73 74 20 2e 6f 6a 2d 6d 65 73 73 61 Data Ascii: -info,.oj-message-status-icon.oj-message-info-icon{background-image:url(../common/images/sprites/sprite.svg);background-size:332px 52px;background-position:-260px -2px;width:20px;height:20px}.oj-hicontrast .oj-fwk-icon-status-info,.oj-hicontrast .oj-messa
2025-04-23 14:22:21 UTC	4096	IN	Data Raw: 65 2d 69 63 6f 6e 2c 61 2e 6f 6a 2d 63 6c 69 63 6b 61 62 6c 65 2d 69 63 6f 6e 2d 6e 6f 63 6f 6e 74 65 78 74 2c 61 3a 76 69 73 69 74 65 64 20 2e 6f 6a 2d 63 6c 69 63 6b 61 62 6c 65 2d 69 63 6f 6e 2c 61 3a 76 69 73 69 74 65 64 2e 6f 6a 2d 63 6c 69 63 6b 61 62 6c 65 2d 69 63 6f 6e 2c 61 3a 76 69 73 69 74 65 64 2e 6f 6a 2d 63 6c 69 63 6b 61 62 6c 65 2d 69 63 6f 6e 2d 6e 6f 63 6f 6e 74 65 78 74 7b 63 6f 6c 6f 72 3a 23 38 61 38 64 38 66 7d 2e 6f 6a 2d 68 6f 76 65 72 20 2e 6f 6a 2d 63 6c 69 63 6b 61 62 6c 65 2d 69 63 6f 6e 2c 2e 6f 6a 2d 68 6f 76 65 72 2e 6f 6a 2d 63 6c 69 63 6b 61 62 6c 65 2d 69 63 6f 6e 2c 2e 6f 6a 2d 68 6f 76 65 72 2e 6f 6a 2d 63 6c 69 63 6b 61 62 6c 65 2d 69 63 6f 6e 2d 6e 6f 63 6f 6e 74 65 78 74 2c 61 3a 68 6f 76 65 72 20 2e 6f 6a 2d 63 6c Data Ascii: e-icon,a.oj-clickable-icon-nocontext,a:visited .oj-clickable-icon,a:visited.oj-clickable-icon,a:visited.oj-clickable-icon-nocontext{color:#8a8d8f}.oj-hover .oj-clickable-icon,.oj-hover.oj-clickable-icon,.oj-hover.oj-clickable-icon-nocontext,a:hover .oj-cl
2025-04-23 14:22:21 UTC	4096	IN	Data Raw: 61 74 65 28 2d 39 30 64 65 67 29 7d 2e 6f 6a 2d 66 77 6b 2d 69 63 6f 6e 2d 6d 69 6e 69 6d 69 7a 65 3a 62 65 66 6f 72 65 2c 2e 6f 6a 2d 70 61 6e 65 6c 2d 63 6f 6c 6c 61 70 73 65 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 33 22 7d 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 2e 6f 6a 2d 66 77 6b 2d 69 63 6f 6e 2d 6d 69 6e 69 6d 69 7a 65 3a 62 65 66 6f 72 65 2c 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 2e 6f 6a 2d 70 61 6e 65 6c 2d 63 6f 6c 6c 61 70 73 65 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 31 29 7d 2e 6f 6a 2d 66 77 6b 2d 69 63 6f 6e 2d 6d 61 78 69 6d 69 7a 65 3a 62 65 66 6f 72 65 2c 2e 6f 6a 2d 70 61 6e 65 6c 2d 65 78 70 61 6e 64 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 Data Ascii: ate(-90deg)}.oj-fwk-icon-minimize:before,.oj-panel-collapse-icon:before{content:"\e613"}html[dir=rtl] .oj-fwk-icon-minimize:before,html[dir=rtl] .oj-panel-collapse-icon:before{transform:scale(-1,1)}.oj-fwk-icon-maximize:before,.oj-panel-expand-icon:before
2025-04-23 14:22:21 UTC	4096	IN	Data Raw: 31 29 7d 2e 6f 6a 2d 66 77 6b 2d 69 63 6f 6e 2d 61 72 72 6f 77 30 32 2d 65 3a 62 65 66 6f 72 65 2c 2e 6f 6a 2d 6e 61 76 69 67 61 74 69 6f 6e 6c 69 73 74 2d 63 6f 6c 6c 61 70 73 69 62 6c 65 20 68 74 6d 6c 3a 6e 6f 74 28 5b 64 69 72 3d 72 74 6c 5d 29 20 2e 6f 6a 2d 6e 61 76 69 67 61 74 69 6f 6e 6c 69 73 74 2d 63 6f 6c 6c 61 70 73 65 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 68 74 6d 6c 3a 6e 6f 74 28 5b 64 69 72 3d 72 74 6c 5d 29 20 2e 6f 6a 2d 66 77 6b 2d 69 63 6f 6e 2d 61 72 72 6f 77 30 32 2d 65 6e 64 3a 62 65 66 6f 72 65 2c 68 74 6d 6c 3a 6e 6f 74 28 5b 64 69 72 3d 72 74 6c 5d 29 20 2e 6f 6a 2d 6e 61 76 69 67 61 74 69 6f 6e 6c 69 73 74 2d 63 6f 6c 6c 61 70 73 69 62 6c 65 20 2e 6f 6a 2d 6e 61 76 69 67 61 74 69 6f 6e 6c 69 73 74 2d 63 6f 6c 6c 61 70 73 65 2d Data Ascii: 1)}.oj-fwk-icon-arrow02-e:before,.oj-navigationlist-collapsible html:not([dir=rtl]) .oj-navigationlist-collapse-icon:before,html:not([dir=rtl]) .oj-fwk-icon-arrow02-end:before,html:not([dir=rtl]) .oj-navigationlist-collapsible .oj-navigationlist-collapse-

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:25 UTC	800	OUT	GET /ui/v1/public/25.3.195-250326165613/dist/signinModule/signin-main.js HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:26 UTC	709	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:26 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-xss-protection: 1; mode=block x-frame-options: DENY x-download-options: noopen accept-ranges: bytes x-content-type-options: nosniff vary: Accept-Encoding,origin x-envoy-upstream-service-time: 5 x-frame-options: DENY x-download-options: noopen cache-control: public, max-age=31536000 etag: W/"202c-195d36c3170" last-modified: Wed, 26 Mar 2025 17:07:18 GMT via: 1.1 net-idcs-config age: 0 x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:26 UTC	3387	IN	Data Raw: 32 30 32 63 0d 0a 64 65 66 69 6e 65 28 5b 22 6f 6a 73 2f 6f 6a 63 6f 72 65 22 2c 22 6b 6e 6f 63 6b 6f 75 74 22 2c 22 6a 71 75 65 72 79 22 2c 22 73 69 67 6e 69 6e 4d 6f 64 75 6c 65 2f 75 74 69 6c 2f 75 74 69 6c 73 22 2c 22 63 6f 6d 6d 6f 6e 4d 6f 64 75 6c 65 2f 75 74 69 6c 2f 6d 61 69 6e 2e 75 74 69 6c 22 2c 22 63 6f 6d 6d 6f 6e 4d 6f 64 75 6c 65 2f 75 74 69 6c 2f 63 6f 6d 6d 6f 6e 2e 75 74 69 6c 22 2c 22 63 6f 6d 6d 6f 6e 4d 6f 64 75 6c 65 2f 70 6c 61 74 66 6f 72 6d 2f 6c 6f 67 67 65 72 22 2c 22 63 6f 6d 6d 6f 6e 4d 6f 64 75 6c 65 2f 70 6c 61 74 66 6f 72 6d 2f 69 64 61 61 73 63 6f 72 65 22 2c 22 63 6f 6d 6d 6f 6e 4d 6f 64 75 6c 65 2f 75 74 69 6c 2f 66 65 61 74 75 72 65 2e 75 74 69 6c 22 2c 22 63 6f 6d 6d 6f 6e 4d 6f 64 75 6c 65 2f 75 74 69 6c 2f 74 68 65 Data Ascii: 202cdefine(["ojs/ojcore","knockout","jquery","signinModule/util/utils","commonModule/util/main.util","commonModule/util/common.util","commonModule/platform/logger","commonModule/platform/idaascore","commonModule/util/feature.util","commonModule/util/the
2025-04-23 14:22:26 UTC	4096	IN	Data Raw: 74 6f 72 3a 56 2c 70 72 65 66 65 72 72 65 64 4c 61 6e 67 75 61 67 65 3a 45 2c 6c 61 6e 67 75 61 67 65 4c 69 73 74 3a 71 2c 66 61 50 6f 64 42 61 73 65 55 72 6c 3a 58 7d 2c 6e 2e 70 6f 73 69 74 69 6f 6e 3d 7b 6d 79 3a 7b 76 65 72 74 69 63 61 6c 3a 22 74 6f 70 22 2c 68 6f 72 69 7a 6f 6e 74 61 6c 3a 22 63 65 6e 74 65 72 22 7d 2c 61 74 3a 7b 76 65 72 74 69 63 61 6c 3a 22 74 6f 70 22 2c 68 6f 72 69 7a 6f 6e 74 61 6c 3a 22 63 65 6e 74 65 72 22 7d 2c 6f 66 3a 22 77 69 6e 64 6f 77 22 7d 2c 6e 2e 6d 65 73 73 61 67 65 73 44 61 74 61 50 72 6f 76 69 64 65 72 3d 63 28 29 2c 6e 2e 62 75 6e 64 6c 65 3d 77 2c 6e 2e 62 72 61 6e 64 69 6e 67 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3d 22 22 2c 6e 2e 63 75 73 74 6f 6d 42 72 61 6e 64 69 6e 67 26 26 49 5b 22 73 69 67 6e 2d Data Ascii: tor:V,preferredLanguage:E,languageList:q,faPodBaseUrl:X},n.position={my:{vertical:"top",horizontal:"center"},at:{vertical:"top",horizontal:"center"},of:"window"},n.messagesDataProvider=c(),n.bundle=w,n.brandingBackgroundImage="",n.customBranding&&I["sign-
2025-04-23 14:22:26 UTC	761	IN	Data Raw: 4e 41 4c 29 2c 42 3d 73 2e 69 73 46 65 61 74 75 72 65 45 6e 61 62 6c 65 64 28 6c 2e 63 6f 6e 73 74 2e 46 65 61 74 75 72 65 2e 55 49 5f 42 41 4e 4e 45 52 5f 41 4e 4e 4f 55 4e 43 45 5f 4d 49 47 52 41 54 49 4f 4e 5f 53 49 47 4e 49 4e 2c 65 29 2c 56 3d 73 2e 69 73 46 65 61 74 75 72 65 45 6e 61 62 6c 65 64 28 6c 2e 63 6f 6e 73 74 2e 46 65 61 74 75 72 65 2e 55 49 5f 4c 4f 47 49 4e 5f 4c 4f 43 41 4c 45 5f 53 45 4c 45 43 54 4f 52 29 3b 76 61 72 20 6f 3d 56 26 26 22 73 69 67 6e 69 6e 22 3d 3d 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 66 28 29 29 5b 30 5d 3b 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 61 2e 67 65 74 53 75 70 70 6f 72 74 65 64 4c 61 6e 67 75 61 67 65 73 28 6f 2c 73 2e 69 73 46 65 61 74 75 72 65 45 6e 61 62 6c 65 64 28 6c 2e 63 6f 6e 73 74 2e 46 65 61 74 75 Data Ascii: NAL),B=s.isFeatureEnabled(l.const.Feature.UI_BANNER_ANNOUNCE_MIGRATION_SIGNIN,e),V=s.isFeatureEnabled(l.const.Feature.UI_LOGIN_LOCALE_SELECTOR);var o=V&&"signin"===Object.keys(f())[0];Promise.all([a.getSupportedLanguages(o,s.isFeatureEnabled(l.const.Featu
2025-04-23 14:22:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:27 UTC	868	OUT	GET /ui/v1/public/25.3.195-250326165613/dist/legacyModule/css/images/favicon.ico HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:27 UTC	684	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:27 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close x-xss-protection: 1; mode=block x-frame-options: DENY x-download-options: noopen accept-ranges: bytes x-content-type-options: nosniff vary: Accept-Encoding,origin x-envoy-upstream-service-time: 4 x-frame-options: DENY x-download-options: noopen cache-control: public, max-age=31536000 etag: W/"e639-195d36c0290" last-modified: Wed, 26 Mar 2025 17:07:06 GMT via: 1.1 net-idcs-config age: 0 x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:27 UTC	3412	IN	Data Raw: 38 30 30 30 0d 0a 00 00 01 00 04 00 00 00 00 00 01 00 20 00 fb a9 00 00 46 00 00 00 30 30 00 00 01 00 20 00 68 26 00 00 41 aa 00 00 20 20 00 00 01 00 20 00 28 11 00 00 a9 d0 00 00 10 10 00 00 01 00 20 00 68 04 00 00 d1 e1 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 04 24 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 38 11 85 55 df 6f db 54 14 3e 89 6f 52 a4 16 3f 20 58 47 87 8a c5 af 55 53 5b b9 1b 1a ad c6 06 49 93 a5 ed 4a 16 a5 e9 d8 2a 24 e4 3a 37 89 a9 1b 07 db e9 b6 aa 4f 7b 81 37 06 fc 01 40 d9 03 0f 48 3c 21 0d 06 62 7b d9 f6 c0 b4 49 53 87 2a aa 49 48 7b e8 c4 0f 21 26 ed 05 55 e1 bb 76 62 27 53 c4 5c f5 fa cb 39 df 39 e7 3b e7 5e db 44 3d 5f 69 b5 9a 19 55 88 96 ab ae 9d cf Data Ascii: 8000 F00 h&A ( hPNGIHDR\rf$iCCPICC Profile8UoT>oR? XGUS[IJ$:7O{7@H<!b{ISIH{!&Uvb'S\99;^D=_iU
2025-04-23 14:22:27 UTC	4096	IN	Data Raw: 99 2b ce 3c f3 0c 77 f6 d9 2f c4 e5 9a c6 94 e0 db f0 3e 16 7c 92 32 e1 19 ed d6 ae ab 92 30 58 9c d8 56 dc a4 d0 c6 b4 23 c1 95 5e bd 52 af 4f 5c 0a a3 8e 12 26 4b af 9f 3c 5f 10 2a 1e 96 53 77 12 b8 8d 58 57 97 97 4b 4f 9c 22 d8 96 23 d7 09 7e f5 ab 5f 43 11 6c ff 1f 20 2f ff e6 37 af bb 8f 6d 74 a8 9b 9a 02 08 38 c0 cf f1 af c4 29 bd ab 5f f0 c2 33 dd 9f fd d9 d9 b8 41 57 9f 10 fc 91 11 0a 56 3c cc b7 e8 26 6c 69 bf 09 2b e1 26 fc d6 db 0a cc 0b a9 c5 37 fc ca c2 ef 87 eb 81 60 1b 8d 74 7c fa 93 34 26 4f af 6f 65 b5 b2 d3 a6 b1 ba e3 54 80 eb 05 54 00 39 dc 76 e4 7a 81 9e 42 74 38 7a bc d9 fd fa d7 bf 71 ad db 77 7c 1f 0a 05 8a e0 df fe 5d 63 1f 9a bf 35 05 e0 db fd ea ab 3f 7b 39 98 e4 4b 67 9c f1 7c f7 d2 97 be 58 ae cf 92 d1 b8 f7 cc 15 7c 5d d5 1f Data Ascii: +<w/>\|20XV#^RO\&K<_*SwXWKO"#~_Cl /7mt8)_3AWV<&li+&7`t\|4&OoeTT9vzBt8zqw\|]c5?{9Kg\|X\|]
2025-04-23 14:22:27 UTC	4096	IN	Data Raw: 34 35 6f a9 b2 04 69 b0 3c 81 8e 48 d0 96 72 27 70 93 74 34 3c e6 87 4a f8 21 8c f3 7c ce f7 ad 5c cc bb e5 df dc ea d7 3c d1 cd f6 b2 30 c9 2b 94 96 fa 93 bd be e1 d0 56 3c d5 6e 54 02 fc e7 59 16 53 02 83 83 03 5f ba ef be bb 0f ca 61 a1 71 31 05 28 8d 64 97 9c 71 d6 69 d8 ea 5b 80 cb 14 6b dc ba 75 eb a1 19 7b f1 79 ae a9 6e 2e 16 01 67 ce 9a 05 77 33 8e 5b e6 d9 7e 91 89 1a ae 02 33 6a c5 c7 0c 62 b8 a1 d0 92 50 8c a7 8c 43 7f 65 9c dd e9 f5 55 a0 62 da 64 1a 4f df f2 1a 1c a1 35 bc 30 3f ea 36 66 66 7c 42 68 94 19 e9 8a 95 47 5c 0e c1 88 91 a3 74 25 5e 05 1a d5 7b ee 30 cd d4 e8 c1 b2 15 94 21 49 3f 9d 1f 8b 20 b9 4b 96 25 ca 13 e2 58 dd 10 0d 26 2c df ce e8 7b ec 80 ae 42 c2 7a 25 24 f4 6f db b6 03 02 a8 37 77 0d 4e db fe 0d 9f 79 d2 f0 78 24 67 38 Data Ascii: 45oi<Hr'pt4<J!\|\<0+V<nTYS_aq1(dqi[ku{yn.gw3[~3jbPCeUbdO50?6ff\|BhG\t%^{0!I? K%X&,{Bz%$o7wNyx$g8
2025-04-23 14:22:28 UTC	4096	IN	Data Raw: fd 5b a7 2f 3e da 3d b1 6e 83 db 82 db 59 18 15 5f d2 56 2a 7c e3 9a d7 bd 6e dc 7c 02 f9 40 55 66 3a 9d 4b 2f fd d0 4b 70 93 80 af 1c 5f c0 33 05 bc 91 48 61 e7 f4 60 ee 5c 8e 0a e6 c1 5e 20 8a 61 da 34 2a 02 bd 91 c8 9d c4 b8 13 07 c3 55 e9 99 43 61 0c dd e3 65 ae af c2 a0 b5 12 7e 66 db f2 6a 42 46 0c 73 9b a2 a3 3f ec f5 63 c1 d2 11 4d 84 5f 41 50 2d 2c 8e 63 42 3b 76 7b 74 dc 38 8f 71 98 c2 42 7f 25 37 7b 7d de ec e3 83 9f 95 16 fa b0 d2 ff 8d ba ba f2 72 ec ed ff 2e cd 43 fb db bf 57 0a 60 d9 c3 3f 78 f8 95 cf 3f f5 b5 47 cd 9e e5 fa 8b 65 d7 8a c5 8c e7 36 6e 76 9b b1 a0 81 aa 5e 0a 46 fc da d2 d7 be b6 7d 7f 17 62 bc d3 bf f4 d2 4b e7 95 cb d9 bf 07 af 7e 86 07 3b f8 60 09 2f 78 f0 11 53 5e 4f 8e a6 07 87 cf 75 d3 a6 4f 93 e9 41 1e af 1c 87 e6 40 Data Ascii: [/>=nY_V\|n\|@Uf:K/Kp_3Ha`\^ a4UCae~fjBFs?cM_AP-,cB;v{t8qB%7{}r.CW`?x?Ge6nv^F}bK~;`/xS^OuOA@
2025-04-23 14:22:28 UTC	4096	IN	Data Raw: 20 cc 4b 30 1c 3e 9b a3 02 ee 83 f3 59 73 8e 02 38 1a a0 32 e0 b6 22 95 03 bf 86 c4 e9 01 74 ad 18 13 ba 3d b5 43 21 4e 2b 94 4a 61 31 8c c9 c7 4a 45 7c be 87 d0 bc 80 77 79 79 0d ab fc 9c ee 70 a1 8f 6f f2 f3 38 75 0e d7 ab 8f 3f fe 04 9e a0 9c 10 0b 7d 1c f2 17 eb cb 2b b2 83 c3 af c9 b7 6d 73 e5 d5 ab 5c f1 e9 67 5d eb ca b5 ee 3f 06 86 dc 9a e1 91 a5 5f ec e9 f9 94 34 48 95 9f 9d 2a 80 a5 df 7f f4 92 45 f3 8f b8 e6 a4 96 63 5c 1f 04 bf 03 7b ff fd b0 29 7c 22 80 a8 68 15 44 54 39 05 90 70 56 3f dd 70 84 eb 04 89 79 bd c7 49 c0 3c 4d 83 09 5d c2 40 47 e8 92 a6 c7 d1 45 28 f8 2d 2d 6f c3 d2 b4 e9 60 3c 58 3c 54 54 8f 35 81 46 8e 0a 44 19 40 11 c0 cd dd 83 a1 c1 6e d7 21 0b 86 9b 51 8e d2 55 8d fd c5 6b ae b9 e4 1d dd 8c 5e 33 71 0d 5c 78 e1 df bd 10 15 Data Ascii: K0>Ys82"t=C!N+Ja1JE\|wyypo8u?}+ms\g]?_4H*Ec\{)\|"hDT9pV?pyI<M]@GE(--o`<X<TT5FD@n!QUk^3q\x
2025-04-23 14:22:28 UTC	4096	IN	Data Raw: 23 bf 0e 50 c7 11 40 c2 24 14 40 a6 94 39 26 9b 6f 10 05 c0 8b 3f 5c 94 94 61 3d ba 3c 53 58 91 9f 3d 61 ad d7 47 25 68 7d 9a 32 70 1c 01 e4 a7 60 1d b0 01 0b 81 18 e6 95 8a 2d 89 1a af 79 26 6f 0d dc 70 43 be b3 39 ff 85 6c b1 f8 8f f9 ce 36 ac f2 63 91 6f 25 e6 fb 9b 30 e4 c7 47 56 0f c4 90 3f 5d b9 3c 3c dd 88 ff 06 8c 00 30 86 3d 2a 1d 9e 50 00 c5 4c 69 51 1e f3 d7 22 04 9b bd 3f a7 28 b2 03 80 58 64 f0 6a c2 4f 21 a0 1c c8 50 d8 bb 79 56 38 82 59 18 53 37 dc 20 9c e0 08 ce 70 46 24 28 c0 31 5a 02 37 1a de 4e a7 15 d2 32 7c b3 85 0e e8 26 fc 04 c2 44 e9 32 61 fa 43 58 90 17 09 f3 71 cc 2d 5e fe 70 2b 10 8f 60 38 8c a4 86 86 70 1e c0 65 46 0d bb 18 a7 66 26 57 0d 74 dc 7e c3 a2 ba 29 f9 7b 72 03 fd 7f 2a ab fc ab 71 b0 67 25 14 c0 76 9c 6d 3a 80 43 fe Data Ascii: #P@$@9&o?\a=<SX=aG%h}2p`-y&opC9l6co%0GV?]<<0=PLiQ"?(XdjO!PyV8YS7 pF$(1Z7N2\|&D2aCXq-^p+`8peFf&Wt~){rqg%vm:C
2025-04-23 14:22:28 UTC	4096	IN	Data Raw: dd fc 11 98 78 e0 0e 6c 81 4b 6e 14 5e 19 4f 11 12 61 00 25 fc f4 78 13 0a 6f 02 87 e1 41 5a f4 8e 0a 07 20 22 65 6e b3 89 6f f1 19 99 26 0c 83 7b b7 e6 fa 51 64 4f 54 e8 81 08 0d 1e 64 e7 a7 c2 1d af 05 0f 8d b8 91 e6 62 0b a0 3f 67 50 cd ec 59 0d ac bd e5 96 c6 59 b9 d2 57 73 23 85 8b b2 6d b8 bb bf 76 b5 2b af 5a 85 e7 b9 f1 11 ce 5e f6 fa 64 2a 5f ff 7b 96 c4 c1 89 15 b0 8f 65 40 4e f5 a5 8b 02 7f 84 4a c1 a7 f1 00 11 fc c8 8f 45 3f e0 b2 f7 1f 84 02 28 97 33 eb 05 37 f8 89 d6 00 08 03 de 16 37 32 74 5a 29 3b c5 65 48 49 22 69 5d 32 0f 51 9d c2 13 fa c5 cd 3a 17 22 71 98 f9 95 f6 24 d8 d7 67 41 22 61 f7 ee c8 b2 26 41 a9 a5 e0 3e 80 27 01 b1 0b c0 c5 c0 61 7e 27 ce 35 2e 66 48 cd ec 59 0d f0 22 cf ac 5c dd e4 ba c8 c3 aa 30 f6 f1 d5 a2 3d 78 c4 48 71 Data Ascii: xlKn^Oa%xoAZ "eno&{QdOTdb?gPYYWs#mv+Z^d*_{e@NJE?(3772tZ);eHI"i]2Q:"q$gA"a&A>'a~'5.fHY"\0=xHq
2025-04-23 14:22:28 UTC	4096	IN	Data Raw: 02 bc 09 72 8a bb 94 6b 9f 2e 14 7e ab a1 3b ff dd e9 14 80 51 73 c5 e1 87 1a 33 5b 6e 2c e5 4e 47 25 f1 8d 7b 64 04 5f 19 d4 0c 02 41 72 e5 33 18 b8 d3 82 4f 5a 12 8c 1f da 93 79 ae ef 6b c3 17 d8 73 16 2b 0c 0b 80 7c 14 c4 e1 6b 41 58 34 63 1d b6 b0 5e 26 82 91 53 7d f9 d2 ed b9 c1 e1 37 d6 cb 17 78 83 b7 fa 7a 71 b2 71 52 0d f9 d1 22 95 14 19 9a 50 5a 33 31 c4 47 33 27 fc e4 6e 35 91 8c 04 80 28 d4 3b d2 82 4f 54 8d e7 11 60 45 71 02 e1 8f 14 16 02 49 83 87 7f 36 21 e2 36 b6 83 73 77 43 79 45 d1 08 a8 66 76 39 02 b8 e3 63 4b 3a 32 a5 c2 77 eb 47 70 7b 0b c4 33 50 02 91 f1 99 63 52 96 5c ad d7 67 bd fb 8a 11 2d e8 2b 87 87 29 68 b8 10 28 c7 81 31 05 c8 94 5a 04 36 ce 7f 70 b0 e7 2c 9c ea fb 6d ae b7 f7 8d b9 8d 6b 9c fb 3d b7 f8 fe 80 2f f0 f2 c3 1c 93 Data Ascii: rk.~;Qs3[n,NG%{d_Ar3OZyks+\|kAX4c^&S}7xzqqR"PZ31G3'n5(;OT`EqI6!6swCyEfv9cK:2wGp{3PcR\g-+)h(1Z6p,mk=/
2025-04-23 14:22:28 UTC	692	IN	Data Raw: ab bf 16 8c 11 00 a7 4d c8 e5 10 a5 d1 6d 53 54 d0 00 b0 71 66 85 0d 3f dd 4e f2 f8 e8 5b 71 a7 91 3a 0e f9 81 10 95 8c 79 49 14 50 0a 14 fd 90 b7 99 a0 c4 4d 8f ea 51 0c 0c 0e 26 1f ea a9 05 78 d5 54 dd 0c 61 91 a2 2b 3f 01 8a 18 c2 0d 1c 60 f0 44 e5 77 92 8e 4b 74 b8 d5 50 79 af 4f be 41 8f df f9 e3 65 9f 3b d0 71 3c 85 ab f8 b8 ef 8f 9d 9b 2f ad 9d 98 58 65 64 66 c4 9a 91 06 80 9c 94 cf 1a fd c4 d9 8b f6 66 bd f9 01 34 02 78 af 85 53 01 dc 1b 20 29 48 91 29 25 93 94 94 da fc b1 54 e0 97 3b 85 9b a4 12 f8 bc ee f5 5b e4 00 d1 db cd 40 1c 01 20 ef 43 10 50 d7 4d fd 48 7d 1b 5e 42 a2 90 31 fd 60 6d 9b 43 26 51 0c e7 6a 46 8e f4 7a d5 8a 44 93 5e 9f 30 49 23 e8 ab bb 05 66 3c 01 e4 50 6c a1 aa e5 09 91 62 f5 35 3a 31 0b 72 58 3a 01 35 50 72 04 f6 8f ee 6e Data Ascii: MmSTqf?N[q:yIPMQ&xTa+?`DwKtPyOAe;q</Xedff4xS )H)%T;[@ CPMH}^B1`mC&QjFzD^0I#f<Plb5:1rX:5Prn
2025-04-23 14:22:28 UTC	4096	IN	Data Raw: 36 36 33 39 0d 0a f0 9f ba 19 4e bf 16 18 0d 3f 0d 77 1a 84 45 38 9c da 84 29 03 82 1a dc a8 0f 2e 7d fd 3b 56 10 da 6d 03 2e b0 13 80 5f 6e 05 72 24 72 b2 0c 45 ca 27 31 1d e7 fb 60 95 8a 21 54 2a 3e 8d c5 0b 3d a9 fb 81 04 c3 5f 15 89 7c c1 a3 ba 14 fd c1 21 12 21 4a 00 c0 1d 3a 1b 3a 18 2f 58 4a cb 95 9f 70 e7 19 6e 77 06 07 55 df 23 19 49 47 a0 e2 c3 2d 7e bd d7 67 5e 48 2f fc c4 3c 1e 44 3d 5a 8b 95 ff 9f 61 df 1f 0b 7f 10 49 f1 ce 13 b9 ed 27 70 f0 e2 bf 33 5e fa ff 70 eb 07 ef eb 2d 57 af 5b b1 68 77 56 8c a3 11 e0 7a 00 5a b1 30 15 b0 cc ba c2 48 58 89 44 13 78 28 08 36 f4 f3 70 85 9f f9 f0 bc 1c e3 66 8d b0 3c 71 f8 ad bd 78 2c a1 62 1a 50 aa e5 43 94 50 b7 0d 64 3a cc 4b 25 b4 0b c0 03 41 27 c3 b8 62 58 da 54 0c 95 79 1b 9c 55 24 82 9c 55 03 74 Data Ascii: 6639N?wE8).};Vm._nr$rE'1`!T*>=_\|!!J::/XJpnwU#IG-~g^H/<D=ZaI'p3^p-W[hwVzZ0HXDx(6pf<qx,bPCPd:K%A'bXTyU$Ut

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:30 UTC	526	OUT	GET /ui/v1/public/25.3.195-250326165613/dist/legacyModule/css/images/favicon.ico HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:30 UTC	684	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:30 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close x-xss-protection: 1; mode=block x-frame-options: DENY x-download-options: noopen accept-ranges: bytes x-content-type-options: nosniff vary: Accept-Encoding,origin x-envoy-upstream-service-time: 5 x-frame-options: DENY x-download-options: noopen cache-control: public, max-age=31536000 etag: W/"e639-195d36c0290" last-modified: Wed, 26 Mar 2025 17:07:06 GMT via: 1.1 net-idcs-config age: 0 x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:30 UTC	3412	IN	Data Raw: 38 30 30 30 0d 0a 00 00 01 00 04 00 00 00 00 00 01 00 20 00 fb a9 00 00 46 00 00 00 30 30 00 00 01 00 20 00 68 26 00 00 41 aa 00 00 20 20 00 00 01 00 20 00 28 11 00 00 a9 d0 00 00 10 10 00 00 01 00 20 00 68 04 00 00 d1 e1 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 04 24 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 38 11 85 55 df 6f db 54 14 3e 89 6f 52 a4 16 3f 20 58 47 87 8a c5 af 55 53 5b b9 1b 1a ad c6 06 49 93 a5 ed 4a 16 a5 e9 d8 2a 24 e4 3a 37 89 a9 1b 07 db e9 b6 aa 4f 7b 81 37 06 fc 01 40 d9 03 0f 48 3c 21 0d 06 62 7b d9 f6 c0 b4 49 53 87 2a aa 49 48 7b e8 c4 0f 21 26 ed 05 55 e1 bb 76 62 27 53 c4 5c f5 fa cb 39 df 39 e7 3b e7 5e db 44 3d 5f 69 b5 9a 19 55 88 96 ab ae 9d cf Data Ascii: 8000 F00 h&A ( hPNGIHDR\rf$iCCPICC Profile8UoT>oR? XGUS[IJ$:7O{7@H<!b{ISIH{!&Uvb'S\99;^D=_iU
2025-04-23 14:22:30 UTC	4096	IN	Data Raw: 99 2b ce 3c f3 0c 77 f6 d9 2f c4 e5 9a c6 94 e0 db f0 3e 16 7c 92 32 e1 19 ed d6 ae ab 92 30 58 9c d8 56 dc a4 d0 c6 b4 23 c1 95 5e bd 52 af 4f 5c 0a a3 8e 12 26 4b af 9f 3c 5f 10 2a 1e 96 53 77 12 b8 8d 58 57 97 97 4b 4f 9c 22 d8 96 23 d7 09 7e f5 ab 5f 43 11 6c ff 1f 20 2f ff e6 37 af bb 8f 6d 74 a8 9b 9a 02 08 38 c0 cf f1 af c4 29 bd ab 5f f0 c2 33 dd 9f fd d9 d9 b8 41 57 9f 10 fc 91 11 0a 56 3c cc b7 e8 26 6c 69 bf 09 2b e1 26 fc d6 db 0a cc 0b a9 c5 37 fc ca c2 ef 87 eb 81 60 1b 8d 74 7c fa 93 34 26 4f af 6f 65 b5 b2 d3 a6 b1 ba e3 54 80 eb 05 54 00 39 dc 76 e4 7a 81 9e 42 74 38 7a bc d9 fd fa d7 bf 71 ad db 77 7c 1f 0a 05 8a e0 df fe 5d 63 1f 9a bf 35 05 e0 db fd ea ab 3f 7b 39 98 e4 4b 67 9c f1 7c f7 d2 97 be 58 ae cf 92 d1 b8 f7 cc 15 7c 5d d5 1f Data Ascii: +<w/>\|20XV#^RO\&K<_*SwXWKO"#~_Cl /7mt8)_3AWV<&li+&7`t\|4&OoeTT9vzBt8zqw\|]c5?{9Kg\|X\|]
2025-04-23 14:22:31 UTC	4096	IN	Data Raw: 34 35 6f a9 b2 04 69 b0 3c 81 8e 48 d0 96 72 27 70 93 74 34 3c e6 87 4a f8 21 8c f3 7c ce f7 ad 5c cc bb e5 df dc ea d7 3c d1 cd f6 b2 30 c9 2b 94 96 fa 93 bd be e1 d0 56 3c d5 6e 54 02 fc e7 59 16 53 02 83 83 03 5f ba ef be bb 0f ca 61 a1 71 31 05 28 8d 64 97 9c 71 d6 69 d8 ea 5b 80 cb 14 6b dc ba 75 eb a1 19 7b f1 79 ae a9 6e 2e 16 01 67 ce 9a 05 77 33 8e 5b e6 d9 7e 91 89 1a ae 02 33 6a c5 c7 0c 62 b8 a1 d0 92 50 8c a7 8c 43 7f 65 9c dd e9 f5 55 a0 62 da 64 1a 4f df f2 1a 1c a1 35 bc 30 3f ea 36 66 66 7c 42 68 94 19 e9 8a 95 47 5c 0e c1 88 91 a3 74 25 5e 05 1a d5 7b ee 30 cd d4 e8 c1 b2 15 94 21 49 3f 9d 1f 8b 20 b9 4b 96 25 ca 13 e2 58 dd 10 0d 26 2c df ce e8 7b ec 80 ae 42 c2 7a 25 24 f4 6f db b6 03 02 a8 37 77 0d 4e db fe 0d 9f 79 d2 f0 78 24 67 38 Data Ascii: 45oi<Hr'pt4<J!\|\<0+V<nTYS_aq1(dqi[ku{yn.gw3[~3jbPCeUbdO50?6ff\|BhG\t%^{0!I? K%X&,{Bz%$o7wNyx$g8
2025-04-23 14:22:31 UTC	4096	IN	Data Raw: fd 5b a7 2f 3e da 3d b1 6e 83 db 82 db 59 18 15 5f d2 56 2a 7c e3 9a d7 bd 6e dc 7c 02 f9 40 55 66 3a 9d 4b 2f fd d0 4b 70 93 80 af 1c 5f c0 33 05 bc 91 48 61 e7 f4 60 ee 5c 8e 0a e6 c1 5e 20 8a 61 da 34 2a 02 bd 91 c8 9d c4 b8 13 07 c3 55 e9 99 43 61 0c dd e3 65 ae af c2 a0 b5 12 7e 66 db f2 6a 42 46 0c 73 9b a2 a3 3f ec f5 63 c1 d2 11 4d 84 5f 41 50 2d 2c 8e 63 42 3b 76 7b 74 dc 38 8f 71 98 c2 42 7f 25 37 7b 7d de ec e3 83 9f 95 16 fa b0 d2 ff 8d ba ba f2 72 ec ed ff 2e cd 43 fb db bf 57 0a 60 d9 c3 3f 78 f8 95 cf 3f f5 b5 47 cd 9e e5 fa 8b 65 d7 8a c5 8c e7 36 6e 76 9b b1 a0 81 aa 5e 0a 46 fc da d2 d7 be b6 7d 7f 17 62 bc d3 bf f4 d2 4b e7 95 cb d9 bf 07 af 7e 86 07 3b f8 60 09 2f 78 f0 11 53 5e 4f 8e a6 07 87 cf 75 d3 a6 4f 93 e9 41 1e af 1c 87 e6 40 Data Ascii: [/>=nY_V\|n\|@Uf:K/Kp_3Ha`\^ a4UCae~fjBFs?cM_AP-,cB;v{t8qB%7{}r.CW`?x?Ge6nv^F}bK~;`/xS^OuOA@
2025-04-23 14:22:31 UTC	4096	IN	Data Raw: 20 cc 4b 30 1c 3e 9b a3 02 ee 83 f3 59 73 8e 02 38 1a a0 32 e0 b6 22 95 03 bf 86 c4 e9 01 74 ad 18 13 ba 3d b5 43 21 4e 2b 94 4a 61 31 8c c9 c7 4a 45 7c be 87 d0 bc 80 77 79 79 0d ab fc 9c ee 70 a1 8f 6f f2 f3 38 75 0e d7 ab 8f 3f fe 04 9e a0 9c 10 0b 7d 1c f2 17 eb cb 2b b2 83 c3 af c9 b7 6d 73 e5 d5 ab 5c f1 e9 67 5d eb ca b5 ee 3f 06 86 dc 9a e1 91 a5 5f ec e9 f9 94 34 48 95 9f 9d 2a 80 a5 df 7f f4 92 45 f3 8f b8 e6 a4 96 63 5c 1f 04 bf 03 7b ff fd b0 29 7c 22 80 a8 68 15 44 54 39 05 90 70 56 3f dd 70 84 eb 04 89 79 bd c7 49 c0 3c 4d 83 09 5d c2 40 47 e8 92 a6 c7 d1 45 28 f8 2d 2d 6f c3 d2 b4 e9 60 3c 58 3c 54 54 8f 35 81 46 8e 0a 44 19 40 11 c0 cd dd 83 a1 c1 6e d7 21 0b 86 9b 51 8e d2 55 8d fd c5 6b ae b9 e4 1d dd 8c 5e 33 71 0d 5c 78 e1 df bd 10 15 Data Ascii: K0>Ys82"t=C!N+Ja1JE\|wyypo8u?}+ms\g]?_4H*Ec\{)\|"hDT9pV?pyI<M]@GE(--o`<X<TT5FD@n!QUk^3q\x
2025-04-23 14:22:31 UTC	4096	IN	Data Raw: 23 bf 0e 50 c7 11 40 c2 24 14 40 a6 94 39 26 9b 6f 10 05 c0 8b 3f 5c 94 94 61 3d ba 3c 53 58 91 9f 3d 61 ad d7 47 25 68 7d 9a 32 70 1c 01 e4 a7 60 1d b0 01 0b 81 18 e6 95 8a 2d 89 1a af 79 26 6f 0d dc 70 43 be b3 39 ff 85 6c b1 f8 8f f9 ce 36 ac f2 63 91 6f 25 e6 fb 9b 30 e4 c7 47 56 0f c4 90 3f 5d b9 3c 3c dd 88 ff 06 8c 00 30 86 3d 2a 1d 9e 50 00 c5 4c 69 51 1e f3 d7 22 04 9b bd 3f a7 28 b2 03 80 58 64 f0 6a c2 4f 21 a0 1c c8 50 d8 bb 79 56 38 82 59 18 53 37 dc 20 9c e0 08 ce 70 46 24 28 c0 31 5a 02 37 1a de 4e a7 15 d2 32 7c b3 85 0e e8 26 fc 04 c2 44 e9 32 61 fa 43 58 90 17 09 f3 71 cc 2d 5e fe 70 2b 10 8f 60 38 8c a4 86 86 70 1e c0 65 46 0d bb 18 a7 66 26 57 0d 74 dc 7e c3 a2 ba 29 f9 7b 72 03 fd 7f 2a ab fc ab 71 b0 67 25 14 c0 76 9c 6d 3a 80 43 fe Data Ascii: #P@$@9&o?\a=<SX=aG%h}2p`-y&opC9l6co%0GV?]<<0=PLiQ"?(XdjO!PyV8YS7 pF$(1Z7N2\|&D2aCXq-^p+`8peFf&Wt~){rqg%vm:C
2025-04-23 14:22:31 UTC	4096	IN	Data Raw: dd fc 11 98 78 e0 0e 6c 81 4b 6e 14 5e 19 4f 11 12 61 00 25 fc f4 78 13 0a 6f 02 87 e1 41 5a f4 8e 0a 07 20 22 65 6e b3 89 6f f1 19 99 26 0c 83 7b b7 e6 fa 51 64 4f 54 e8 81 08 0d 1e 64 e7 a7 c2 1d af 05 0f 8d b8 91 e6 62 0b a0 3f 67 50 cd ec 59 0d ac bd e5 96 c6 59 b9 d2 57 73 23 85 8b b2 6d b8 bb bf 76 b5 2b af 5a 85 e7 b9 f1 11 ce 5e f6 fa 64 2a 5f ff 7b 96 c4 c1 89 15 b0 8f 65 40 4e f5 a5 8b 02 7f 84 4a c1 a7 f1 00 11 fc c8 8f 45 3f e0 b2 f7 1f 84 02 28 97 33 eb 05 37 f8 89 d6 00 08 03 de 16 37 32 74 5a 29 3b c5 65 48 49 22 69 5d 32 0f 51 9d c2 13 fa c5 cd 3a 17 22 71 98 f9 95 f6 24 d8 d7 67 41 22 61 f7 ee c8 b2 26 41 a9 a5 e0 3e 80 27 01 b1 0b c0 c5 c0 61 7e 27 ce 35 2e 66 48 cd ec 59 0d f0 22 cf ac 5c dd e4 ba c8 c3 aa 30 f6 f1 d5 a2 3d 78 c4 48 71 Data Ascii: xlKn^Oa%xoAZ "eno&{QdOTdb?gPYYWs#mv+Z^d*_{e@NJE?(3772tZ);eHI"i]2Q:"q$gA"a&A>'a~'5.fHY"\0=xHq
2025-04-23 14:22:31 UTC	4096	IN	Data Raw: 02 bc 09 72 8a bb 94 6b 9f 2e 14 7e ab a1 3b ff dd e9 14 80 51 73 c5 e1 87 1a 33 5b 6e 2c e5 4e 47 25 f1 8d 7b 64 04 5f 19 d4 0c 02 41 72 e5 33 18 b8 d3 82 4f 5a 12 8c 1f da 93 79 ae ef 6b c3 17 d8 73 16 2b 0c 0b 80 7c 14 c4 e1 6b 41 58 34 63 1d b6 b0 5e 26 82 91 53 7d f9 d2 ed b9 c1 e1 37 d6 cb 17 78 83 b7 fa 7a 71 b2 71 52 0d f9 d1 22 95 14 19 9a 50 5a 33 31 c4 47 33 27 fc e4 6e 35 91 8c 04 80 28 d4 3b d2 82 4f 54 8d e7 11 60 45 71 02 e1 8f 14 16 02 49 83 87 7f 36 21 e2 36 b6 83 73 77 43 79 45 d1 08 a8 66 76 39 02 b8 e3 63 4b 3a 32 a5 c2 77 eb 47 70 7b 0b c4 33 50 02 91 f1 99 63 52 96 5c ad d7 67 bd fb 8a 11 2d e8 2b 87 87 29 68 b8 10 28 c7 81 31 05 c8 94 5a 04 36 ce 7f 70 b0 e7 2c 9c ea fb 6d ae b7 f7 8d b9 8d 6b 9c fb 3d b7 f8 fe 80 2f f0 f2 c3 1c 93 Data Ascii: rk.~;Qs3[n,NG%{d_Ar3OZyks+\|kAX4c^&S}7xzqqR"PZ31G3'n5(;OT`EqI6!6swCyEfv9cK:2wGp{3PcR\g-+)h(1Z6p,mk=/
2025-04-23 14:22:31 UTC	692	IN	Data Raw: ab bf 16 8c 11 00 a7 4d c8 e5 10 a5 d1 6d 53 54 d0 00 b0 71 66 85 0d 3f dd 4e f2 f8 e8 5b 71 a7 91 3a 0e f9 81 10 95 8c 79 49 14 50 0a 14 fd 90 b7 99 a0 c4 4d 8f ea 51 0c 0c 0e 26 1f ea a9 05 78 d5 54 dd 0c 61 91 a2 2b 3f 01 8a 18 c2 0d 1c 60 f0 44 e5 77 92 8e 4b 74 b8 d5 50 79 af 4f be 41 8f df f9 e3 65 9f 3b d0 71 3c 85 ab f8 b8 ef 8f 9d 9b 2f ad 9d 98 58 65 64 66 c4 9a 91 06 80 9c 94 cf 1a fd c4 d9 8b f6 66 bd f9 01 34 02 78 af 85 53 01 dc 1b 20 29 48 91 29 25 93 94 94 da fc b1 54 e0 97 3b 85 9b a4 12 f8 bc ee f5 5b e4 00 d1 db cd 40 1c 01 20 ef 43 10 50 d7 4d fd 48 7d 1b 5e 42 a2 90 31 fd 60 6d 9b 43 26 51 0c e7 6a 46 8e f4 7a d5 8a 44 93 5e 9f 30 49 23 e8 ab bb 05 66 3c 01 e4 50 6c a1 aa e5 09 91 62 f5 35 3a 31 0b 72 58 3a 01 35 50 72 04 f6 8f ee 6e Data Ascii: MmSTqf?N[q:yIPMQ&xTa+?`DwKtPyOAe;q</Xedff4xS )H)%T;[@ CPMH}^B1`mC&QjFzD^0I#f<Plb5:1rX:5Prn
2025-04-23 14:22:31 UTC	4096	IN	Data Raw: 36 36 33 39 0d 0a f0 9f ba 19 4e bf 16 18 0d 3f 0d 77 1a 84 45 38 9c da 84 29 03 82 1a dc a8 0f 2e 7d fd 3b 56 10 da 6d 03 2e b0 13 80 5f 6e 05 72 24 72 b2 0c 45 ca 27 31 1d e7 fb 60 95 8a 21 54 2a 3e 8d c5 0b 3d a9 fb 81 04 c3 5f 15 89 7c c1 a3 ba 14 fd c1 21 12 21 4a 00 c0 1d 3a 1b 3a 18 2f 58 4a cb 95 9f 70 e7 19 6e 77 06 07 55 df 23 19 49 47 a0 e2 c3 2d 7e bd d7 67 5e 48 2f fc c4 3c 1e 44 3d 5a 8b 95 ff 9f 61 df 1f 0b 7f 10 49 f1 ce 13 b9 ed 27 70 f0 e2 bf 33 5e fa ff 70 eb 07 ef eb 2d 57 af 5b b1 68 77 56 8c a3 11 e0 7a 00 5a b1 30 15 b0 cc ba c2 48 58 89 44 13 78 28 08 36 f4 f3 70 85 9f f9 f0 bc 1c e3 66 8d b0 3c 71 f8 ad bd 78 2c a1 62 1a 50 aa e5 43 94 50 b7 0d 64 3a cc 4b 25 b4 0b c0 03 41 27 c3 b8 62 58 da 54 0c 95 79 1b 9c 55 24 82 9c 55 03 74 Data Ascii: 6639N?wE8).};Vm._nr$rE'1`!T*>=_\|!!J::/XJpnwU#IG-~g^H/<D=ZaI'p3^p-W[hwVzZ0HXDx(6pf<qx,bPCPd:K%A'bXTyU$Ut

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:30 UTC	3548	OUT	GET /admin/v1/FeatureInfos?count=48&startIndex=1&filter=state%20eq%20%22enabled%22&attributes=name HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive sec-ch-ua-platform: "Windows" Authorization: Bearer eyJ4NXQjUzI1NiI6ImdmZW5IdXhfN0N6SmlKNHc0SnFsSTBLTF90QXdwa2plMFJ3bUh6Rl9jMmMiLCJ4NXQiOiJIM1VKSDBsanFRRHZCU1FDQmJzSnFySWNQNU0iLCJraWQiOiJTSUdOSU5HX0tFWSIsImFsZyI6IlJTMjU2In0.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 [TRUNCATED] Cache-Control: no-cache Accept-Language: en-US Pragma: no-cache sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D Accept-Encoding: gzip, deflate, br, zstd
2025-04-23 14:22:31 UTC	778	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:31 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close x-oracle-dms-rid: 0:1 x-oracle-dms-ecid: 20116259F59E8DFEC3C8051F9FDB6986/L^OHq1Sk_10000000 opc-request-id: 20116259F59E8DFEC3C8051F9FDB6986/L^OHq1Sk_10000000 opc-total-items: 154 opc-next-page: NDk= x-envoy-upstream-service-time: 12 via: 1.1 net-idcs-config pragma: no-cache cache-control: no-cache, no-store, must-revalidate expires: Sat, 01 Jan 2000 00:00:00 GMT x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny vary: origin x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:31 UTC	3318	IN	Data Raw: 33 61 34 62 0d 0a 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 75 72 6e 3a 69 65 74 66 3a 70 61 72 61 6d 73 3a 73 63 69 6d 3a 61 70 69 3a 6d 65 73 73 61 67 65 73 3a 32 2e 30 3a 4c 69 73 74 52 65 73 70 6f 6e 73 65 22 5d 2c 22 74 6f 74 61 6c 52 65 73 75 6c 74 73 22 3a 31 35 34 2c 22 52 65 73 6f 75 72 63 65 73 22 3a 5b 7b 22 69 64 22 3a 22 6f 61 75 74 68 32 2e 73 75 63 63 65 73 73 2e 6d 65 74 65 72 22 2c 22 6e 61 6d 65 22 3a 22 6f 61 75 74 68 32 2e 73 75 63 63 65 73 73 2e 6d 65 74 65 72 22 2c 22 73 74 61 74 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 7b 22 69 64 22 3a 22 6f 61 75 74 68 32 2e 66 61 69 6c 75 72 65 2e 6d 65 74 65 72 22 2c 22 6e 61 6d 65 22 3a 22 6f 61 75 74 68 32 2e 66 61 69 6c 75 72 65 2e 6d 65 74 65 72 22 2c 22 73 74 61 74 65 22 3a 22 65 6e 61 62 6c Data Ascii: 3a4b{"schemas":["urn:ietf:params:scim:api:messages:2.0:ListResponse"],"totalResults":154,"Resources":[{"id":"oauth2.success.meter","name":"oauth2.success.meter","state":"enabled"},{"id":"oauth2.failure.meter","name":"oauth2.failure.meter","state":"enabl
2025-04-23 14:22:31 UTC	4096	IN	Data Raw: 6f 72 73 22 2c 22 73 74 61 74 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 7b 22 69 64 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2e 67 72 61 6e 74 73 2e 65 76 61 6c 22 2c 22 6e 61 6d 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2e 67 72 61 6e 74 73 2e 65 76 61 6c 22 2c 22 73 74 61 74 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 7b 22 69 64 22 3a 22 61 63 63 65 73 73 2e 61 64 61 70 74 69 76 65 2e 73 65 63 75 72 69 74 79 22 2c 22 6e 61 6d 65 22 3a 22 61 63 63 65 73 73 2e 61 64 61 70 74 69 76 65 2e 73 65 63 75 72 69 74 79 22 2c 22 73 74 61 74 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 7b 22 69 64 22 3a 22 69 64 63 73 2e 72 65 70 6c 69 63 61 74 69 6f 6e 2e 73 6e 61 70 73 68 6f 74 22 2c 22 6e 61 6d 65 22 3a 22 69 64 63 73 2e 72 65 70 6c 69 63 61 74 69 6f 6e 2e 73 6e Data Ascii: ors","state":"enabled"},{"id":"application.grants.eval","name":"application.grants.eval","state":"enabled"},{"id":"access.adaptive.security","name":"access.adaptive.security","state":"enabled"},{"id":"idcs.replication.snapshot","name":"idcs.replication.sn
2025-04-23 14:22:31 UTC	4096	IN	Data Raw: 70 65 64 61 63 74 69 6f 6e 2e 72 65 6d 6f 76 61 6c 22 2c 22 6e 61 6d 65 22 3a 22 61 70 70 6d 67 6d 74 2e 64 65 66 61 75 6c 74 2e 6d 61 70 70 65 64 61 63 74 69 6f 6e 2e 72 65 6d 6f 76 61 6c 22 2c 22 73 74 61 74 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 7b 22 69 64 22 3a 22 6f 61 75 74 68 32 2e 61 70 70 73 2e 69 70 63 68 65 63 6b 69 6e 67 22 2c 22 6e 61 6d 65 22 3a 22 6f 61 75 74 68 32 2e 61 70 70 73 2e 69 70 63 68 65 63 6b 69 6e 67 22 2c 22 73 74 61 74 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 7b 22 69 64 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2e 6d 61 6e 61 67 65 64 2e 61 63 63 6f 75 6e 74 2e 6f 77 6e 65 72 2e 6c 69 6e 6b 22 2c 22 6e 61 6d 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2e 6d 61 6e 61 67 65 64 2e 61 63 63 6f 75 6e 74 2e 6f 77 6e 65 72 2e Data Ascii: pedaction.removal","name":"appmgmt.default.mappedaction.removal","state":"enabled"},{"id":"oauth2.apps.ipchecking","name":"oauth2.apps.ipchecking","state":"enabled"},{"id":"application.managed.account.owner.link","name":"application.managed.account.owner.
2025-04-23 14:22:31 UTC	3421	IN	Data Raw: 69 74 79 2e 70 61 73 73 77 6f 72 64 2e 72 65 73 65 74 2e 72 65 74 75 72 6e 2e 6f 74 70 22 2c 22 6e 61 6d 65 22 3a 22 69 64 65 6e 74 69 74 79 2e 70 61 73 73 77 6f 72 64 2e 72 65 73 65 74 2e 72 65 74 75 72 6e 2e 6f 74 70 22 2c 22 73 74 61 74 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 7b 22 69 64 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2e 67 72 61 6e 74 2e 65 76 61 6c 75 61 74 69 6f 6e 2e 6a 6f 62 22 2c 22 6e 61 6d 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2e 67 72 61 6e 74 2e 65 76 61 6c 75 61 74 69 6f 6e 2e 6a 6f 62 22 2c 22 73 74 61 74 65 22 3a 22 65 6e 61 62 6c 65 64 22 7d 2c 7b 22 69 64 22 3a 22 61 63 63 65 73 73 2e 72 61 64 69 75 73 2e 70 72 6f 78 79 22 2c 22 6e 61 6d 65 22 3a 22 61 63 63 65 73 73 2e 72 61 64 69 75 73 2e 70 72 6f 78 79 22 2c 22 73 Data Ascii: ity.password.reset.return.otp","name":"identity.password.reset.return.otp","state":"enabled"},{"id":"application.grant.evaluation.job","name":"application.grant.evaluation.job","state":"enabled"},{"id":"access.radius.proxy","name":"access.radius.proxy","s
2025-04-23 14:22:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:32 UTC	544	OUT	GET /admin/v1/FeatureInfos?count=48&startIndex=1&filter=state%20eq%20%22enabled%22&attributes=name HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:33 UTC	614	IN	HTTP/1.1 401 Unauthorized Date: Wed, 23 Apr 2025 14:22:33 GMT Content-Type: text/html Content-Length: 289 Connection: close www-authenticate: Bearer error="invalid_session", error_description="Header Invalid" pragma: no-cache cache-control: no-cache, no-store, must-revalidate expires: Sat, 01 Jan 2000 00:00:00 GMT x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny vary: origin x-envoy-upstream-service-time: 2 x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:33 UTC	289	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 4f 4e 54 45 4e 54 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 54 49 54 4c 45 3e 55 6e 61 75 74 68 6f 72 69 7a 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 3e 3c 48 31 3e 55 6e 61 75 74 68 6f 72 69 7a 65 64 3c 2f 48 31 3e 0a 50 72 6f 70 65 72 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 74 68 69 73 20 61 72 65 61 2e 20 45 69 74 68 65 72 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 64 6f 65 73 20 6e 6f 74 20 70 65 72 66 6f 72 6d 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2c 20 6f 72 20 79 6f 75 72 20 61 75 74 68 6f 72 Data Ascii: <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html;charset=UTF-8"><TITLE>Unauthorized</TITLE></HEAD><BODY><H1>Unauthorized</H1>Proper authorization is required for this area. Either your browser does not perform authorization, or your author

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:32 UTC	836	OUT	GET /.well-known/idcs-configuration HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive sec-ch-ua-platform: "Windows" Cache-Control: no-cache Pragma: no-cache sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:33 UTC	687	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:33 GMT Content-Type: application/json;charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: no-store pragma: no-cache x-oracle-dms-rid: 0:1 x-oracle-dms-ecid: 693A7FCFEE5BA99569AB2B0B3D7A7247/dZzrn0pW720000000 opc-request-id: 693A7FCFEE5BA99569AB2B0B3D7A7247/dZzrn0pW720000000 opc-total-items: 1 x-envoy-upstream-service-time: 7 via: 1.1 net-idcs-config x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny vary: origin x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:33 UTC	3409	IN	Data Raw: 32 38 35 64 0d 0a 7b 0a 20 20 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 20 3a 20 7b 0a 20 20 20 20 22 76 65 72 73 69 6f 6e 22 20 3a 20 22 31 22 2c 0a 20 20 20 20 22 73 65 72 76 69 63 65 5f 72 65 6c 65 61 73 65 5f 76 65 72 73 69 6f 6e 22 20 3a 20 22 30 2e 31 2e 30 2d 64 65 76 2d 32 34 2e 34 2e 32 30 32 2d 32 34 31 31 31 39 32 32 35 35 2e 31 33 22 2c 0a 20 20 20 20 22 49 44 43 53 5f 4d 41 53 54 45 52 5f 52 45 47 49 4f 4e 22 20 3a 20 22 6d 65 2d 61 62 75 64 68 61 62 69 2d 69 64 63 73 2d 32 22 2c 0a 20 20 20 20 22 49 44 43 53 5f 43 52 45 41 54 45 44 5f 49 4e 5f 52 45 47 49 4f 4e 22 20 3a 20 22 6d 65 2d 61 62 75 64 68 61 62 69 2d 69 64 63 73 2d 32 22 2c 0a 20 20 20 20 22 49 44 43 53 5f 43 55 52 52 45 4e 54 5f 52 45 47 49 4f 4e 22 20 3a 20 22 6d 65 2d 61 62 Data Ascii: 285d{ "configuration" : { "version" : "1", "service_release_version" : "0.1.0-dev-24.4.202-2411192255.13", "IDCS_MASTER_REGION" : "me-abudhabi-idcs-2", "IDCS_CREATED_IN_REGION" : "me-abudhabi-idcs-2", "IDCS_CURRENT_REGION" : "me-ab
2025-04-23 14:22:33 UTC	4096	IN	Data Raw: 61 62 69 2d 69 64 63 73 2d 32 2e 69 64 65 6e 74 69 74 79 2e 6f 63 69 2e 6f 72 61 63 6c 65 63 6c 6f 75 64 32 39 2e 63 6f 6d 2f 6f 61 75 74 68 32 2f 76 31 2f 69 6e 74 72 6f 73 70 65 63 74 22 2c 0a 20 20 20 20 22 65 6e 64 5f 73 65 73 73 69 6f 6e 5f 65 6e 64 70 6f 69 6e 74 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 69 64 63 73 2d 63 61 64 31 36 65 37 36 61 31 65 30 34 36 35 33 38 65 30 61 66 38 30 31 38 30 66 33 37 62 34 61 2e 6d 65 2d 61 62 75 64 68 61 62 69 2d 69 64 63 73 2d 32 2e 69 64 65 6e 74 69 74 79 2e 6f 63 69 2e 6f 72 61 63 6c 65 63 6c 6f 75 64 32 39 2e 63 6f 6d 2f 6f 61 75 74 68 32 2f 76 31 2f 75 73 65 72 6c 6f 67 6f 75 74 22 2c 0a 20 20 20 20 22 73 65 63 75 72 65 5f 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 5f 65 6e 64 70 6f 69 6e 74 22 20 3a 20 22 68 74 Data Ascii: abi-idcs-2.identity.oci.oraclecloud29.com/oauth2/v1/introspect", "end_session_endpoint" : "https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/oauth2/v1/userlogout", "secure_authorization_endpoint" : "ht
2025-04-23 14:22:33 UTC	2836	IN	Data Raw: 69 6e 69 74 69 61 74 65 73 73 6f 22 2c 0a 20 20 20 20 22 73 65 63 75 72 65 5f 6d 65 74 61 64 61 74 61 5f 65 6e 64 70 6f 69 6e 74 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 69 64 63 73 2d 63 61 64 31 36 65 37 36 61 31 65 30 34 36 35 33 38 65 30 61 66 38 30 31 38 30 66 33 37 62 34 61 2e 6d 65 2d 61 62 75 64 68 61 62 69 2d 69 64 63 73 2d 32 2e 73 65 63 75 72 65 2e 69 64 65 6e 74 69 74 79 2e 6f 63 69 2e 6f 72 61 63 6c 65 63 6c 6f 75 64 32 39 2e 63 6f 6d 2f 66 65 64 2f 76 31 2f 6d 65 74 61 64 61 74 61 22 2c 0a 20 20 20 20 22 73 65 63 75 72 65 5f 73 61 6d 6c 5f 69 64 70 5f 73 73 6f 5f 65 6e 64 70 6f 69 6e 74 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 69 64 63 73 2d 63 61 64 31 36 65 37 36 61 31 65 30 34 36 35 33 38 65 30 61 66 38 30 31 38 30 66 33 37 62 34 61 2e 6d 65 Data Ascii: initiatesso", "secure_metadata_endpoint" : "https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.secure.identity.oci.oraclecloud29.com/fed/v1/metadata", "secure_saml_idp_sso_endpoint" : "https://idcs-cad16e76a1e046538e0af80180f37b4a.me
2025-04-23 14:22:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32041)
Category:	downloaded
Size (bytes):	456997
Entropy (8bit):	4.845385982000958
Encrypted:	false
SSDEEP:	6144:xkqCnb8/lKUrHrfpmiTWIHOVuZoh2V9MdFKZpnmRLjPZQX:qqO8wGrfQCw2XMdQZ9X
MD5:	72EFF00D84D11DCF07B8D3F4C3BBBC91
SHA1:	F61D49B8586A728792188D59AC616C59F632FC2B
SHA-256:	456B5E7E0C3CD5C59EB15DDFEAB94AA1E00FECD3B63738F63658B51B0E6449B9
SHA-512:	FEF9EAE361AF777B5E0F9C36E1E0FE94566B66750EF0A208DF2AC46E2E549EB1C425641885E9B54295F7902BE488DC0AB2AFF911ADD411F76D81B164FF82E2B0
Malicious:	false
Reputation:	low
URL:	https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/translations/resources/nls/idaas-translations.js
Preview:	define({root:{accessRequest:{myRequests:{pageTitle:"My Requests",noRequestsAltText:"There are no requests in the system.",noRequestsMessage:"You have no requests to display.",groupRequest:'Membership to the "{0}" group.',applicationRequest:'Access to the "{0}" application.',justification:"Justification: {0}",submittedOn:"Submitted: {0}",status:{COMPLETE:"Completed",CREATED:"Created"}},myAccess:{gotoCatalogLabel:"Add",gotoCatalogTooltip:"Click to request group or application access.",gotoGroupsCatalogTooltip:"Request group membership.",gotoAppsCatalogTooltip:"Request application access.",groupsSearchTooltip:"Enter a string that begins with the group name.",requestAccessMessage:"To request access, click Add to go to the Catalog",noAppsAssigned:"You do not have access to any applications.",appsTabTooltip:"Click to view the applications to which you have access.",groupsTabTooltip:"Click to view the groups to which you have access.",requestAppsTabTooltip:"Click to view the applications whic

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 48x48, 32 bits/pixel
Category:	downloaded
Size (bytes):	58937
Entropy (8bit):	7.562946646846093
Encrypted:	false
SSDEEP:	1536:dIopqbxWf2jM6y1ZFt5PvuuHJ84hQWrL5N:SopqEE0ZFLPGuHJRrrLj
MD5:	2A3D21E82E287EB55A18A608EE159343
SHA1:	9C491669D7AA0C847C89C6A62B5318E91A49F17B
SHA-256:	51EF958A567B93A3A758EA4AFAC84004FB79B847074566CE3C86884BB3DD2E1D
SHA-512:	82A062FCB9EACBC31804FCB66FEA18B031A5D13FC7759C2D8F184861A7104EAAAD763671B3060115516B698507E28AC804ACC44E408C89345CABEA229BDCB928
Malicious:	false
Reputation:	low
URL:	https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/legacyModule/css/images/favicon.ico
Preview:	............ .....F...00.... .h&..A... .... .(............. .h........PNG........IHDR.............\r.f...$iCCPICC Profile..8..U.o.T.>.oR..? XG...US[......I...J....$.:7......O{.7...@...H<!..b{....IS..IH{...!&..U.vb'S.\...9.9.;.^.D=_i...U......$......M...K...N-..................N.#.z..."O.n..}...Q..k.K.....i.......6.....}..x..'=N!?.........<..f/.a_....Un.."f....ar../.q.1....u..].X....c....+.T..?....K._..Ia......\|.x.Q...}t..G__......{.p..M.ju1{.....%..#8.ug......V...c..Si.a..J}.._.qV...Z...#.d......?.......:73...KWkn..A..YQ..2.;^..)m.......v....J...&..fzg............t..y.?.:/....].Rb...G.DD#N.-b.J;.P.2..F6<%2....a1"O..l.y9.......-.Q.;.p..X?S....b..0.g...7...K.:....rm:..}(..OuT.:NP..@}(.Q..........K+.#O.14[.. ..hu7.>.kk?..<......kkt.q..m.6.n.....-.mR.;`z.....v..x#.=\..%..o.Y..R.......#&.?.>........n._....;j..;.$}*}+.(}'}/.L.tY.".$].....9..%.{._a..]h.k.5'SN.{.......<...._..............t..jM.{-...4.%.....T..t.Y...R6....#.v\..x:..'H..O...3...

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:34 UTC	824	OUT	GET /ui/v1/public/25.3.195-250326165613/dist/signinModule/style/redwood/signin.css HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:35 UTC	695	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:35 GMT Content-Type: text/css; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-xss-protection: 1; mode=block x-frame-options: DENY x-download-options: noopen accept-ranges: bytes x-content-type-options: nosniff vary: Accept-Encoding,origin x-envoy-upstream-service-time: 5 x-frame-options: DENY x-download-options: noopen cache-control: public, max-age=31536000 etag: W/"3a29-195d36c0678" last-modified: Wed, 26 Mar 2025 17:07:07 GMT via: 1.1 net-idcs-config age: 0 x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:35 UTC	3401	IN	Data Raw: 33 61 32 39 0d 0a 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 66 34 66 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 61 6c 6c 6f 79 2d 62 67 42 61 73 65 2c 23 66 35 66 34 66 32 29 7d 61 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6f 6a 2d 62 75 74 74 6f 6e 2d 6a 71 75 69 2e 6f 6a 2d 64 65 66 61 75 6c 74 2e 6f 6a 2d 62 75 74 74 6f 6e 2d 66 75 6c 6c 2d 63 68 72 6f 6d 65 2c 2e 6f 6a 2d 62 75 74 74 6f 6e 2d 6a 71 75 69 2e 6f 6a 2d 66 6f 63 75 73 2d 6f 6e 6c 79 2e 6f Data Ascii: 3a29html{box-sizing:border-box;font-size:1em}*,:after,:before{box-sizing:inherit}body{background-color:#f5f4f2;background-color:var(--alloy-bgBase,#f5f4f2)}a{cursor:pointer}.oj-button-jqui.oj-default.oj-button-full-chrome,.oj-button-jqui.oj-focus-only.o
2025-04-23 14:22:35 UTC	4096	IN	Data Raw: 6f 6a 2d 62 75 74 74 6f 6e 2d 6a 71 75 69 2e 6f 6a 2d 66 6f 63 75 73 2d 6f 6e 6c 79 2e 6f 6a 2d 62 75 74 74 6f 6e 2d 66 75 6c 6c 2d 63 68 72 6f 6d 65 2c 2e 6f 6a 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 6f 6a 2d 62 75 74 74 6f 6e 2e 6f 6a 2d 64 65 66 61 75 6c 74 2e 6f 6a 2d 62 75 74 74 6f 6e 2d 66 75 6c 6c 2d 63 68 72 6f 6d 65 20 2e 6f 6a 2d 62 75 74 74 6f 6e 2d 62 75 74 74 6f 6e 2c 2e 6f 6a 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 6f 6a 2d 62 75 74 74 6f 6e 2e 6f 6a 2d 66 6f 63 75 73 2d 6f 6e 6c 79 2e 6f 6a 2d 62 75 74 74 6f 6e 2d 66 75 6c 6c 2d 63 68 72 6f 6d 65 20 2e 6f 6a 2d 62 75 74 74 6f 6e 2d 62 75 74 74 6f 6e 2c 2e 6f 6a 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2e 6f 6a 2d 62 75 74 74 6f 6e 73 65 74 20 2e 6f 6a 2d 62 75 74 74 6f Data Ascii: oj-button-jqui.oj-focus-only.oj-button-full-chrome,.oj-button-primary.oj-button.oj-default.oj-button-full-chrome .oj-button-button,.oj-button-primary.oj-button.oj-focus-only.oj-button-full-chrome .oj-button-button,.oj-button-primary.oj-buttonset .oj-butto
2025-04-23 14:22:35 UTC	4096	IN	Data Raw: 38 70 78 7d 2e 69 64 63 73 2d 73 69 67 6e 69 6e 2d 63 6f 6d 6d 6f 6e 2d 73 69 67 6e 69 6e 2d 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 6f 64 64 29 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 70 78 7d 2e 69 64 63 73 2d 73 69 67 6e 69 6e 2d 63 6f 6d 6d 6f 6e 2d 73 69 67 6e 69 6e 2d 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 65 76 65 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 7d 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 35 30 70 78 29 7b 2e 69 64 63 73 2d 73 69 67 6e 69 6e 2d 63 6f 6d 6d 6f 6e 2d 73 69 67 6e 69 6e 2d 62 75 74 74 6f 6e 2d 77 72 61 70 70 65 72 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 6f 64 64 29 7b 70 61 64 Data Ascii: 8px}.idcs-signin-common-signin-button-wrapper:nth-of-type(odd){padding-right:10px}.idcs-signin-common-signin-button-wrapper:nth-of-type(even){padding-left:10px}@media all and (max-width:650px){.idcs-signin-common-signin-button-wrapper:nth-of-type(odd){pad
2025-04-23 14:22:35 UTC	3304	IN	Data Raw: 6f 72 3a 23 66 63 66 62 66 61 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 6d 61 72 67 69 6e 3a 31 2e 35 72 65 6d 20 33 72 65 6d 7d 2e 6f 72 61 63 6c 65 2d 72 77 2d 6c 6f 67 6f 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4f 72 61 63 6c 65 53 61 6e 73 56 46 2c 4f 72 61 63 6c 65 53 61 6e 73 56 46 43 79 47 72 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a Data Ascii: or:#fcfbfa;font-weight:400;white-space:nowrap;font-size:18px;line-height:30px;margin:1.5rem 3rem}.oracle-rw-logo{font-weight:400;font-family:OracleSansVF,OracleSansVFCyGr,-apple-system,BlinkMacSystemFont,"Segoe UI","Helvetica Neue",sans-serif;line-height:
2025-04-23 14:22:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:34 UTC	3497	OUT	GET /admin/v1/BrandingSettings/BrandingSettings HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive sec-ch-ua-platform: "Windows" Authorization: Bearer eyJ4NXQjUzI1NiI6ImdmZW5IdXhfN0N6SmlKNHc0SnFsSTBLTF90QXdwa2plMFJ3bUh6Rl9jMmMiLCJ4NXQiOiJIM1VKSDBsanFRRHZCU1FDQmJzSnFySWNQNU0iLCJraWQiOiJTSUdOSU5HX0tFWSIsImFsZyI6IlJTMjU2In0.eyJjbGllbnRfb2NpZCI6Im9jaWQxLmRvbWFpbmFwcC5vYzI5Lm1lLWFidWRoYWJpLTIuYW1hYWFhYWFhcXRwNWJhYXk2dG54aHQycDU1dmVldGZ4ZXN1eWFobTNjZWIya3RxYmFwNnNqbWdpN3ZhIiwic3ViIjoidWlSZXNldFBhc3N3b3JkIiwic2lkbGUiOjQ4MCwidXNlci50ZW5hbnQubmFtZSI6ImlkY3MtY2FkMTZlNzZhMWUwNDY1MzhlMGFmODAxODBmMzdiNGEiLCJpc3MiOiJodHRwczovL2lkZW50aXR5Lm9yYWNsZWNsb3VkLmNvbS8iLCJkb21haW5faG9tZSI6Im1lLWFidWRoYWJpLTIiLCJjYV9vY2lkIjoib2NpZDEudGVuYW5jeS5vYzI5Li5hYWFhYWFhYW53dTdsdGRjY294d21jY3g2YTZoNHN5Y3V0a29xeGlqeTZxeG1meTdodHRpcnpyeTJndHEiLCJjbGllbnRfaWQiOiJ1aVJlc2V0UGFzc3dvcmQiLCJkb21haW5faWQiOiJvY2lkMS5kb21haW4ub2MyOS4uYWFhYWFhYWFrcWRmaTV1djVvd3MzanN5cXVtemd3bHoyYWRieTZ4bWs3ZHNkazc0aWZjbm9tejZ4ZjRxIiwic3ViX3R5cGUiOiJjbGllbnQiLCJzY29wZSI6InVybjpvcGM6aWRtOnQuc2VjdXJpdHkuY2xpZW50IHVybjpvcGM6aWRtOnQuYXBwc2VydmljZXMgdXJuOm9wYzppZG06dC51c2VyLnJlc2V0cGFzc3dvcmQgdXJuOm9wYz [TRUNCATED] Cache-Control: no-cache Accept-Language: en-US Pragma: no-cache sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D Accept-Encoding: gzip, deflate, br, zstd
2025-04-23 14:22:35 UTC	755	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:35 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close via: 1.1 net-idcs-config x-oracle-dms-rid: 0:1 x-oracle-dms-ecid: 2EBBD8E05439FA7EFED51C8DE007CB85/WLtyW0yq220000000 opc-request-id: 2EBBD8E05439FA7EFED51C8DE007CB85/WLtyW0yq220000000 opc-total-items: 1 x-envoy-upstream-service-time: 10 pragma: no-cache cache-control: no-cache, no-store, must-revalidate expires: Sat, 01 Jan 2000 00:00:00 GMT x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny vary: origin x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:35 UTC	3341	IN	Data Raw: 32 37 31 36 0d 0a 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 75 72 6e 3a 69 65 74 66 3a 70 61 72 61 6d 73 3a 73 63 69 6d 3a 73 63 68 65 6d 61 73 3a 6f 72 61 63 6c 65 3a 69 64 63 73 3a 42 72 61 6e 64 69 6e 67 53 65 74 74 69 6e 67 73 22 5d 2c 22 69 64 22 3a 22 42 72 61 6e 64 69 6e 67 53 65 74 74 69 6e 67 73 22 2c 22 63 75 73 74 6f 6d 42 72 61 6e 64 69 6e 67 22 3a 74 72 75 65 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 41 73 69 61 2f 44 75 62 61 69 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 2c 22 70 72 65 66 65 72 72 65 64 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 22 2c 22 6f 63 69 64 22 3a 22 6f 63 69 64 31 2e 64 6f 6d 61 69 6e 73 65 74 74 69 6e 67 73 2e 6f 63 32 39 2e 6d 65 2d 61 62 75 64 68 61 62 69 2d 32 2e 61 6d 61 61 61 61 61 61 61 79 6f 33 6b 34 61 61 64 62 6e Data Ascii: 2716{"schemas":["urn:ietf:params:scim:schemas:oracle:idcs:BrandingSettings"],"id":"BrandingSettings","customBranding":true,"timezone":"Asia/Dubai","locale":"en","preferredLanguage":"en","ocid":"ocid1.domainsettings.oc29.me-abudhabi-2.amaaaaaaayo3k4aadbn
2025-04-23 14:22:35 UTC	4096	IN	Data Raw: 69 64 65 6e 74 69 74 79 2e 6f 63 69 2e 6f 72 61 63 6c 65 63 6c 6f 75 64 32 39 2e 63 6f 6d 3a 34 34 33 2f 75 69 2f 76 31 2f 70 75 62 6c 69 63 2f 63 6f 6d 6d 6f 6e 2f 61 73 73 65 74 2f 64 65 66 61 75 6c 74 42 72 61 6e 64 69 6e 67 2f 6f 72 61 63 6c 65 2d 73 65 6c 66 2d 72 65 67 69 73 74 72 61 74 69 6f 6e 2d 70 72 6f 66 69 6c 65 2d 66 6f 6f 74 65 72 2d 6c 6f 67 6f 2e 70 6e 67 22 2c 22 74 79 70 65 22 3a 22 73 65 6c 66 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 70 72 6f 66 69 6c 65 20 66 6f 6f 74 65 72 20 6c 6f 67 6f 22 7d 2c 7b 22 76 61 6c 75 65 22 3a 22 68 74 74 70 73 3a 2f 2f 69 64 63 73 2d 63 61 64 31 36 65 37 36 61 31 65 30 34 36 35 33 38 65 30 61 66 38 30 31 38 30 66 33 37 62 34 61 2e 6d 65 2d 61 62 75 64 68 61 62 69 2d 69 64 63 73 2d 32 2e 69 64 65 6e 74 Data Ascii: identity.oci.oraclecloud29.com:443/ui/v1/public/common/asset/defaultBranding/oracle-self-registration-profile-footer-logo.png","type":"self registration profile footer logo"},{"value":"https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.ident
2025-04-23 14:22:35 UTC	2577	IN	Data Raw: 20 d0 b7 d0 b0 d0 bf d0 b8 d1 81 d1 8c 20 4f 72 61 63 6c 65 20 43 6c 6f 75 64 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 72 75 22 7d 2c 7b 22 76 61 6c 75 65 22 3a 22 50 72 69 68 6c c3 a1 73 65 6e 69 65 20 64 6f 20 6b 6f 6e 74 61 20 73 6c 75 c5 be 62 79 20 4f 72 61 63 6c 65 20 43 6c 6f 75 64 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 73 6b 22 7d 2c 7b 22 76 61 6c 75 65 22 3a 22 49 6e 6c 6f 67 67 6e 69 6e 67 20 70 c3 a5 20 4f 72 61 63 6c 65 20 43 6c 6f 75 64 2d 6b 6f 6e 74 6f 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 73 76 22 7d 2c 7b 22 76 61 6c 75 65 22 3a 22 e0 b8 81 e0 b8 b2 e0 b8 a3 e0 b9 80 e0 b8 82 e0 b9 89 e0 b8 b2 e0 b8 aa e0 b8 b9 e0 b9 88 e0 b8 a3 e0 b8 b0 e0 b8 9a e0 b8 9a e0 b9 81 e0 b8 ad e0 b8 84 e0 b9 80 e0 b8 84 e0 b8 b2 e0 b8 97 e0 b9 8c e0 b8 82 e0 b8 ad e0 Data Ascii: Oracle Cloud","locale":"ru"},{"value":"Prihlsenie do konta sluby Oracle Cloud","locale":"sk"},{"value":"Inloggning p Oracle Cloud-konto","locale":"sv"},{"value":"
2025-04-23 14:22:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:36 UTC	528	OUT	GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/asset/oracle-favicon.ico HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:36 UTC	684	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:36 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close x-xss-protection: 1; mode=block x-frame-options: DENY x-download-options: noopen accept-ranges: bytes x-content-type-options: nosniff vary: Accept-Encoding,origin x-envoy-upstream-service-time: 5 x-frame-options: DENY x-download-options: noopen cache-control: public, max-age=31536000 etag: W/"10be-195d36bfea8" last-modified: Wed, 26 Mar 2025 17:07:05 GMT via: 1.1 net-idcs-config age: 0 x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:36 UTC	3412	IN	Data Raw: 31 30 62 65 0d 0a 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 10be ( @
2025-04-23 14:22:36 UTC	882	IN	Data Raw: 00 00 00 00 43 47 91 00 5d 39 2e 00 3f 54 c9 0b 46 5a d2 22 55 64 d9 33 58 67 dd 37 57 66 dc 37 57 66 dc 37 57 66 dc 37 57 66 dc 37 57 66 dc 37 57 66 dc 37 57 66 dc 37 57 66 dc 37 57 66 dc 37 57 66 dc 37 57 66 dc 37 55 64 d9 34 47 59 d5 23 3d 52 ce 0c 49 3b 58 00 3e 45 97 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: CG]9.?TFZ"Ud3Xg7Wf7Wf7Wf7Wf7Wf7Wf7Wf7Wf7Wf7Wf7Wf7Ud4GY#=RI;X>E
2025-04-23 14:22:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:36 UTC	859	OUT	GET /storage/v1/public/images/202412191208/1734609828000/Govt_of_AD.png HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:36 UTC	963	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:36 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close opc-request-id: 3A21C8C9E2C9A7339EEA9CB979437421/WLtyW0Fr220000000 cache-control: no-transform, max-age=1 last-modified: Wed, 23 Apr 2025 14:22:36 GMT access-control-expose-headers: access-control-allow-credentials, access-control-allow-methods, access-control-allow-origin, content-type access-control-allow-credentials: true access-control-allow-methods: GET,OPTIONS access-control-allow-origin: * x-oracle-dms-rid: 0:1 x-oracle-dms-ecid: 3A21C8C9E2C9A7339EEA9CB979437421/WLtyW0Fr220000000 opc-total-items: 1 x-envoy-upstream-service-time: 25 via: 1.1 net-idcs-config x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny vary: origin x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:36 UTC	3133	IN	Data Raw: 32 34 62 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7f 00 00 00 83 08 03 00 00 00 52 bd eb 83 00 00 01 7d 50 4c 54 45 ff ff ff 00 00 00 ee 34 3f fc fc fc 49 49 49 d0 d0 d0 f6 f6 f6 f9 f9 f9 f1 f1 f1 5e 5e 5e c1 c1 c1 d6 d6 d6 e6 e6 e6 e9 e9 e9 57 57 57 da da da 9a 9a 9a ca ca ca af af af 3e 3e 3e e0 e0 e0 aa aa aa 8c 8c 8c e7 e7 e7 2e 2e 2e 7d 7d 7d 66 66 66 6f 6f 6f c4 c4 c4 a0 a0 a0 b3 b3 b3 d9 d9 d9 12 12 12 89 89 89 76 76 76 29 29 29 36 36 36 9c 9b 9b 50 50 50 82 82 82 f4 32 3e 20 20 20 42 42 42 2b 2b 2b 18 18 18 ba ba ba 96 52 55 63 62 62 00 0c 0a 32 00 00 eb d4 d5 0b 00 00 ba 31 39 17 00 00 df 32 3c c3 28 31 00 15 14 21 00 00 9b 22 29 d2 31 3a 97 28 2e 82 19 1f 77 3a 3d f1 3a 45 48 00 00 29 00 00 8f 64 66 40 49 48 f1 45 4f 9e Data Ascii: 24b0PNGIHDRR}PLTE4?III^^^WWW>>>...}}}fffooovvv)))666PPP2> BBB+++RUcbb2192<(1!")1:(.w:=:EH)df@IHEO
2025-04-23 14:22:36 UTC	4096	IN	Data Raw: b3 e1 f7 d8 4c c0 0e 74 c8 65 f0 6f 85 d0 9b cf 27 86 bf 5d 86 7d 4f 81 bf 0b d4 79 ad 89 bf 58 59 6c 86 7f 08 2c a1 b5 3e fe 74 c2 2c 2f 15 f6 57 77 dd aa e3 7f e7 d3 d7 15 22 ee e8 9e 13 27 a4 31 99 44 e8 f1 ab 51 33 11 81 82 e9 a3 90 82 16 0a e0 c3 c0 9a 20 1d b3 bd 8e 65 bb 74 20 1f d6 12 79 52 cb 9b df 80 59 fe 52 99 d7 c7 1f 47 7e 71 28 c3 df 2a 9d c0 53 e0 1f 96 88 ac 87 bf 06 25 e9 a6 f8 cb 69 79 cf 4b e0 6f ec 9e 21 6a fd d5 65 39 fe a8 c6 4c e1 e1 ab 2e 11 2c 62 05 8e cc c8 0a 4f 13 3c ec a7 08 09 a4 4c 91 14 88 69 1a 03 01 5a d4 fa 1b b4 0e 31 0c 64 4b 93 04 78 bd ee e2 f9 59 00 d6 2c 93 50 18 50 90 cb e0 0f f5 08 8e e1 ef 97 26 ed 29 f0 37 4b 65 5a 0f 7f a1 3a 8a e2 af f7 ca 05 8d 4b e0 cf 26 40 7d 1b ba 05 2b 8a 7a 10 97 f6 c2 2d c8 f0 70 4f Data Ascii: Lteo']}OyXYl,>t,/Ww"'1DQ3 et yRYRG~q(*S%iyKo!je9L.,bO<LiZ1dKxY,PP&)7KeZ:K&@}+z-pO
2025-04-23 14:22:36 UTC	2171	IN	Data Raw: 3e 6d d5 19 fc e7 69 0c 98 34 16 f8 1b 2d da 98 64 16 4b 9d c7 df a7 ae 76 19 7f 03 ea de 60 86 3f de 40 b9 08 7f 64 5d 4b 04 68 cf 27 8a 36 66 f8 e7 37 7e 89 d3 43 40 ae 42 b3 a2 a6 39 b1 4b 85 c0 59 d5 01 41 be 5f 66 1c 5e 8b 8a be 2d c0 8d ba f9 ff e3 1d 5a ab 0b bb 55 cb 29 fe cd 72 f3 27 35 3c 8c e5 35 c1 6f 94 5d 5b 81 bf 4e 0f aa f0 47 a6 53 a4 73 fc 0d 1a 66 45 17 e3 af 01 5f ac c2 5f 6e 55 99 2b 9e de f4 0c fe 2d 08 2c 0f c5 62 a8 cd f0 d7 99 45 b7 aa 2a 52 61 f1 56 c5 0a 7f bc a4 77 16 7f 24 3e e5 95 32 40 06 38 c3 9f 53 e8 45 56 e3 8f 66 fa c3 3a fe 0f 4c 92 68 59 a9 ff d8 a5 8e c2 a9 00 aa de b6 f1 06 ad 88 f4 87 db 74 53 2a 67 aa d8 ea 83 12 ff 8e 8f e3 51 f7 e2 f7 3e 18 96 48 6f 2f f0 d7 ab 2c 83 cb 2c 23 05 72 9c 94 bb c1 96 f3 0f 0c 7f b1 Data Ascii: >mi4-dKv`?@d]Kh'6f7~C@B9KYA_f^-ZU)r'5<5o][NGSsfE__nU+-,bERaVw$>2@8SEVf:LhYtSgQ>Ho/,,#r
2025-04-23 14:22:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:37 UTC	564	OUT	GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/component/layout/redwood/ojIdaasSigninSection/asset/info.svg HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:38 UTC	618	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:38 GMT Content-Type: image/svg+xml Content-Length: 555 Connection: close x-frame-options: DENY x-download-options: noopen accept-ranges: bytes cache-control: public, max-age=31536000 last-modified: Wed, 26 Mar 2025 17:07:06 GMT etag: W/"22b-195d36c0290" x-envoy-upstream-service-time: 6 via: 1.1 net-idcs-config x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: Accept-Encoding,origin x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:38 UTC	555	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 30 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 30 20 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 31 33 2c 31 31 2e 35 39 20 43 31 31 2e 39 37 2c 31 32 2e 38 34 20 31 30 2e 33 35 2c 31 34 2e 31 32 20 39 2e 31 2c 31 34 2e 31 36 20 43 36 2e 31 37 2c 31 34 2e 32 20 39 2e 38 39 2c 39 2e 34 36 20 38 2e 37 34 2c 38 2e 33 37 20 43 39 2e 33 2c 38 2e 31 36 20 31 30 2e 36 32 2c 37 2e 38 33 20 31 30 2e 36 32 2c 38 2e 38 31 20 43 31 30 2e 36 32 2c 39 2e 36 33 20 31 30 2e 31 32 2c 31 30 2e 35 35 20 39 2e 38 38 2c 31 31 2e 33 32 20 43 38 2e 36 36 2c 31 35 2e 31 36 20 31 32 2e Data Ascii: <svg width="20" height="20" viewBox="0 0 20 20" xmlns="http://www.w3.org/2000/svg"> <path d="M12.13,11.59 C11.97,12.84 10.35,14.12 9.1,14.16 C6.17,14.2 9.89,9.46 8.74,8.37 C9.3,8.16 10.62,7.83 10.62,8.81 C10.62,9.63 10.12,10.55 9.88,11.32 C8.66,15.16 12.

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:38 UTC	570	OUT	GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/component/layout/ojIdaasSigninAppShell/asset/mfa-policy-update.png HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:39 UTC	612	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:39 GMT Content-Type: image/png Content-Length: 45775 Connection: close x-envoy-upstream-service-time: 2 x-frame-options: DENY x-download-options: noopen accept-ranges: bytes cache-control: public, max-age=31536000 last-modified: Wed, 26 Mar 2025 17:07:06 GMT etag: W/"b2cf-195d36c0290" via: 1.1 net-idcs-config age: 3339 x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: origin x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:39 UTC	3484	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 0c 41 69 43 43 50 49 43 43 20 50 72 6f 66 69 6c 65 00 00 48 89 95 57 07 58 53 c9 16 9e 5b 92 90 40 68 01 04 a4 84 de 04 91 1a 40 4a 08 2d 80 f4 22 88 4a 48 02 84 12 63 20 a8 d8 91 45 05 d7 82 8a 08 d8 d0 55 11 c5 0e 88 05 45 ec 2c 8a bd 2f 16 54 94 75 b1 60 57 de a4 80 ae fb ca f7 e6 fb e6 ce 7f ff 39 f3 9f 33 67 e6 96 01 40 ed 38 47 24 ca 41 d5 01 c8 15 e6 8b 63 82 fd e9 e3 93 92 e9 a4 a7 00 07 3a 80 06 48 00 e1 70 f3 44 cc a8 a8 70 00 cb 50 fb f7 f2 ee 3a 40 a4 ed 15 7b a9 d6 3f fb ff 6b d1 e0 f1 f3 b8 00 20 51 10 a7 f1 f2 b8 b9 10 1f 00 00 af e1 8a c4 f9 00 10 a5 bc d9 b4 7c 91 14 c3 0a b4 c4 30 40 88 17 49 71 86 1c d7 48 71 9a 1c ef 91 d9 c4 c5 b0 Data Ascii: PNGIHDRXAiCCPICC ProfileHWXS[@h@J-"JHc EUE,/Tu`W93g@8G$Ac:HpDpP:@{?k Q\|0@IqHq
2025-04-23 14:22:39 UTC	4096	IN	Data Raw: 9f 78 e8 45 8f 9e 9c ea bd f1 e2 b1 8d 2f bf 76 67 ef 4a 33 ea fd bd 5d f1 c8 f1 89 b9 dd eb 06 17 1f 3f 33 73 ea e2 8d 23 4f 4c cc 2f 7f f8 d1 63 53 7f 35 32 d7 71 f7 cb 22 16 6a b7 dc d2 fc a2 95 ac 26 7c cd 14 58 55 90 af 99 84 5f 3e 80 5b 6e b9 a5 fe 7f 5d 39 f2 82 83 67 67 5f 3c 36 3a fc c2 56 ad be 77 62 7a a6 7f f3 48 6f 4c cd 2f 05 4a 10 1f 78 e0 89 98 5a 58 8e e7 5e ba 29 ae dd be 36 e6 97 1a b1 71 a4 3f ea 70 ea c8 f8 6c f4 75 75 c4 cc c2 ca ca 48 7f cf fe 35 03 dd 8f 45 3d fe 70 6a ae fe ae 67 ff e0 4f 4c 7d f9 98 ac e6 fc 72 29 b0 aa 20 5f 2e a5 be 86 7c f7 bd e3 96 ee 56 7d f4 55 f5 7a e7 0f 37 1b 8d 6b 9a b5 fa 50 67 57 77 ad d5 d0 72 6a 45 34 57 62 a5 c9 b5 d5 ca eb fb 3e fb 78 7c ec e1 63 b1 7b c3 70 bc e2 e9 bb 63 cb 48 5f d6 3e 89 12 f5 Data Ascii: xE/vgJ3]?3s#OL/cS52q"j&\|XU_>[n]9gg_<6:VwbzHoL/JxZX^)6q?pluuH5E=pjgOL}r) _.\|V}Uz7kPgWwrjE4Wb>x\|c{pcH_>
2025-04-23 14:22:39 UTC	4096	IN	Data Raw: 1c 65 58 08 67 f1 ee ee db 3f 19 d7 bf e0 c6 38 fa d8 a1 38 f8 d0 7e 14 8c cc 08 44 91 0c 61 f3 08 6c 71 75 db 7a 99 a3 50 98 2c f6 ba 66 9d 5b 60 85 9b 11 60 a6 39 19 54 11 2b 14 72 3d c4 ed ea 4e c0 31 88 a8 6b 0e d3 8c 35 92 29 54 87 9e fa b1 d3 93 71 f0 cf 6f cb c9 b9 42 7b 16 37 f1 06 ae 5d d0 4e f7 31 fa 8c 7b 81 35 0f 04 de 11 61 1e c5 9c 65 ae e0 fa 87 26 d3 3c b0 c7 19 9d 78 79 2a 06 c8 d3 40 59 16 31 cf 96 a1 7f 2f 13 79 62 f0 aa d5 31 bd 98 fb a0 44 0d e0 e6 5c 42 05 07 e9 86 ae 6a 15 de 0f 30 6d 6f 1d 13 b6 c5 3a 4a e7 a5 d7 c5 d2 03 9f c8 45 4d 3d 5a 76 0a 4d 60 18 5a cc 71 ea 28 5f 9d 39 49 df d5 cf be 94 3d 69 3f c3 6b 00 3f f7 64 f5 70 7d 43 14 c4 39 05 12 f7 93 28 c3 6b b1 66 46 ed 80 1c e6 ed fd 15 7e 47 84 24 7c 92 b4 7c 39 9f d8 d0 bf Data Ascii: eXg?88~DalquzP,f[``9T+r=N1k5)TqoB{7]N1{5ae&<xy*@Y1/yb1D\Bj0mo:JEM=ZvM`Zq(_9I=i?k?dp}C9(kfF~G$\|\|9
2025-04-23 14:22:39 UTC	4096	IN	Data Raw: a0 85 b1 f0 b1 77 46 63 61 36 cd af 96 ef d7 43 24 f7 5e 31 b9 8b a1 e7 bf 22 7a b6 5c 6c 09 06 11 68 c9 e8 e3 1b 95 6c 9d 9f c1 dc fa e7 57 7c cf 8f bd 35 01 3e 09 bf be e4 08 f2 5b 77 fc d1 eb d9 dc 77 8b 0d 2f 7d 68 11 fc 7c 56 8a 94 70 46 02 95 27 6f b9 71 44 50 84 33 ce 48 82 f7 39 fa 48 78 1e 92 91 30 c6 2b d6 0d 21 55 0c 5e 30 02 31 5b d1 e4 12 8e cf 33 30 ee c3 b3 6c 8a e3 7e b4 ab 3b 76 e0 ce 75 ef d1 14 ef 23 4c 32 f2 4c 61 ef 2e 92 b6 f6 fa cb 78 0b 8a c5 b0 5c cc ca da 05 1c 8b 17 ed 8a b5 37 5c 1f f5 7d 8f c5 d2 bd 8f 44 fd c0 91 18 3f 33 1f a7 4f e3 d2 e5 63 1d 39 37 32 33 f7 fe 9f 2b 9d b6 20 4f b4 c3 7c 1e 2e 5d d1 01 04 b3 2d 43 ec d6 fd 77 3f b9 25 76 6d e7 c0 06 14 57 93 2f 95 8a f7 b2 74 df 2a 48 58 5e 6c f1 18 88 ee 75 97 22 60 d8 5d Data Ascii: wFca6C$^1"z\lhlW\|5>[ww/}h\|VpF'oqDP3H9Hx0+!U^01[30l~;vu#L2La.x\7\}D?3Oc9723+ O\|.]-Cw?%vmW/t*HX^lu"`]
2025-04-23 14:22:39 UTC	4096	IN	Data Raw: 49 12 65 5e e7 18 94 ca 9e 31 33 5c f0 e5 e8 e1 56 13 6d 73 d7 2b 2e 0c a6 15 58 08 a8 42 4a 62 2a 22 57 e7 39 be f7 20 05 c5 e2 dc 28 84 60 15 3c f5 90 39 ba 10 28 a8 8d bb e9 53 b7 c7 e8 fd 07 a2 93 72 73 9c 67 c3 d9 04 78 7f c0 4c b7 24 7e ff 47 4f 6d e0 94 11 4f 3d b1 af 54 d1 99 63 f2 84 23 48 73 3c 43 fe 66 39 77 d6 cb 61 3f 08 3d 32 c2 ff 71 16 cd 4e f3 93 03 43 d4 cf 6b 24 ac e4 13 49 ba 58 8b 91 8a cb 25 7b d5 d2 b1 f0 4a eb cc d9 34 1f e7 79 b5 36 47 44 ca 96 11 91 f6 20 f8 6e ba b4 bd b9 7e 94 c4 25 9d 3c 09 0b 60 9e 86 38 cb c8 f9 d8 09 de 7f 87 86 d7 33 f7 78 c5 8e 3d 56 63 93 b3 66 eb d7 e8 95 12 ce 70 ec 5c c4 6a 98 0c de 6b 22 8a 0f f3 f4 e4 1f d3 9a 18 d8 01 6e 57 6c 88 f5 17 6f 89 26 af 0f cf f7 ec 04 f1 6e da 59 3a b1 4e e6 31 0d d6 77 Data Ascii: Ie^13\Vms+.XBJb*"W9 (`<9(SrsgxL$~GOmO=Tc#Hs<Cf9wa?=2qNCk$IX%{J4y6GD n~%<`83x=Vcfp\jk"nWlo&nY:N1w
2025-04-23 14:22:39 UTC	4096	IN	Data Raw: 78 23 6f 03 ee 8c 67 6f b8 08 e1 3f 13 8f f2 bb 8a 27 d9 ad 3b cd a6 4a 61 39 a4 8b ab aa dd 0b 9c 67 ac db 9d f7 47 79 17 de 7a f4 8e 15 c5 67 04 62 07 a1 74 56 a1 6b fc eb d5 2a ae 6e db 0a 14 f6 53 d9 46 ff a5 57 35 fa d9 92 f4 08 ca f8 cc 77 9e d6 c4 b4 83 58 14 d3 ca f6 cb 18 69 25 5c eb 2f c7 23 a9 90 c2 a7 6a eb e2 23 ff fc 42 f9 9f 12 ab eb 74 63 8d 0f f9 46 9f 0d 2b bd 8b 3d 23 c4 87 e0 dd 0c f1 15 71 6c 7b 21 99 44 2b c2 90 f4 68 53 54 c5 4a 62 93 4f 17 a3 79 78 41 a2 e4 25 0e 6e e1 8d d1 86 96 c0 54 4b 39 3d 43 06 93 cb 77 7b a4 f0 a9 44 66 8a 02 5d 14 a2 e4 37 d2 3b 7b 60 0b cb b8 82 9b ca 57 0a ca 48 85 d8 14 5d 97 b6 49 25 ae 94 ca 76 e9 b5 b3 a2 52 5a 46 27 8b 53 c8 8a 72 58 b3 ae 4f 15 40 6f 91 b0 0b 0c e3 7d 36 46 c5 cf b1 8a 87 2d 8c 1e Data Ascii: x#ogo?';Ja9gGyzgbtVk*nSFW5wXi%\/#j#BtcF+=#ql{!D+hSTJbOyxA%nTK9=Cw{Df]7;{`WH]I%vRZF'SrXO@o}6F-
2025-04-23 14:22:39 UTC	4096	IN	Data Raw: 62 39 ff 13 df 04 59 3a 4f 6f b3 3d 09 ad e0 46 c7 c3 b9 f3 ad 57 73 50 c8 07 7f e5 b6 df 7d 35 59 be a5 c2 17 55 10 b1 fc 99 e7 bf ea 3a 2e fb 0a b9 4a 8f 50 29 46 9a 34 f4 26 5e fd 48 ec 14 a0 7c aa 7a 0f 52 2a 5a 67 b3 2b 48 96 90 0d 92 57 61 2d c4 2e c2 53 f2 14 51 c8 3e b7 22 77 d2 bd 9c 75 45 e1 14 16 18 0b c3 64 84 30 ca dc 06 26 a1 d9 c6 a5 99 94 bd 5a c1 d1 4c 66 95 49 02 15 67 e3 64 aa b5 5a c6 36 14 a1 54 11 bb 31 75 fc 5d 45 3f 45 c8 1d 59 72 f2 9b 05 38 25 1d c1 be 62 68 53 3c ef aa 2b 62 f3 c6 31 7e 21 ab 27 7a fc 6d 41 7e d3 7c f7 4b f7 c6 96 e7 3f 2d cb 96 f6 94 1e 54 f7 f3 c9 4f 1d e0 9c 2c 0e 77 d8 b1 2e 05 5e 3a ba 40 e9 96 78 71 5c f1 57 6f da c1 e7 ea d8 a2 6c c9 05 44 25 29 f3 0b bf 50 ae b4 c5 7b cd ab c2 af 02 c8 bc d9 76 1b 4f 6e Data Ascii: b9Y:Oo=FWsP}5YU:.JP)F4&^H\|zR*Zg+HWa-.SQ>"wuEd0&ZLfIgdZ6T1u]E?EYr8%bhS<+b1~!'zmA~\|K?-TO,w.^:@xq\WolD%)P{vOn
2025-04-23 14:22:39 UTC	4096	IN	Data Raw: c9 d6 66 69 00 69 2c 4b 96 2d 81 1d b6 67 c2 76 d8 8c 43 13 e3 b0 27 0c 11 13 13 31 f3 45 22 e6 c3 7c 9a 31 8c 67 d1 d8 1a 19 79 91 6d c9 32 85 24 8b a6 01 51 a2 81 66 eb ee d7 0b dd f4 fe 6a df ab e6 ff fb 9f 9b ef bd 6a 10 92 6c 21 51 a5 97 af ea de bc 99 27 4f 9e 3c 79 4e e6 c9 e5 e6 25 0c 68 f3 1c bc fa 0b b8 b8 9a d7 e2 39 8e c6 0e 00 f8 c2 8f 06 24 4f 98 90 0a 47 9d e0 80 ca 7e 82 e0 0f 73 3f 56 22 fc 0a a3 2e b4 13 e3 f6 c6 a9 99 07 fe eb f7 f1 7e fc 0f 5d 41 20 14 f7 7b 37 fd f2 5d 6a 97 76 c8 5b 82 ea cc 10 17 5e a4 66 41 81 6a 0a 05 9f 32 31 56 04 63 89 42 73 c5 b9 c0 ba 53 48 0a ed 4a 21 1d 3d 8b c2 98 fd 42 31 10 30 4e 05 64 07 2c b0 30 92 2b 34 90 5f 4e a7 20 3d 86 5d 9b 05 18 61 c2 d4 0b 07 c3 b1 73 d9 ea dd a4 45 2a 3e ac 43 6f b0 98 2e ea Data Ascii: fii,K-gvC'1E"\|1gym2$Qfjjl!Q'O<yN%h9$OG~s?V".~]A {7]jv[^fAj21VcBsSHJ!=B10Nd,0+4_N =]asE*>Co.
2025-04-23 14:22:39 UTC	4096	IN	Data Raw: 9a 5e 44 78 b5 b0 a7 56 5b 86 56 a5 22 80 bd d0 99 81 ba 80 03 7e f9 59 77 33 bc 08 e0 10 85 03 fa 0c 01 38 4f 8d 8f a6 bf fb eb f8 c4 41 2d ae a6 56 7d 35 ea 6d 97 eb bd 0e 1d 09 f4 d5 bd b5 51 ae e4 5b 7e e9 63 e9 96 c1 eb d2 fb 2f ba 3a bd 45 0b 84 7d ea 95 d8 aa 92 7b ac c8 39 14 c2 fb c2 90 1e 55 7a 16 56 10 52 81 f9 6e 5b 9c fa b3 60 64 ba 43 99 0c 55 14 84 1b 2d 6f ed 76 f5 40 9d 05 a5 c0 aa 44 16 46 e7 40 d6 1a 53 48 29 33 fe 10 c0 88 cc 0b 74 39 ce a6 95 90 92 9e fc b8 e3 b2 90 39 ac e0 6c 8e 0b 00 43 d9 4b 4a 8a 52 db d2 83 3f 70 64 33 8a f2 05 4f a0 cd 66 90 52 3b 5f e7 1d 39 81 23 28 c9 3c 8b 70 32 62 df 9f e3 c0 cd 73 e5 07 6c 38 ee 55 be 37 ac c0 1e 44 05 60 76 6b 71 be f8 6c b5 0a 49 a1 68 1d a7 a5 20 9a ec b4 40 f8 8c 58 29 49 66 56 14 ff Data Ascii: ^DxV[V"~Yw38OA-V}5mQ[~c/:E}{9UzVRn[`dCU-ov@DF@SH)3t99lCKJR?pd3OfR;_9#(<p2bsl8U7D`vkqlIh @X)IfV
2025-04-23 14:22:40 UTC	4096	IN	Data Raw: 16 f9 e0 35 ef 48 5b b5 c5 fd e4 f8 f9 74 fb af 7c 2a fd e6 af ff 5a 7a ea a9 fd e9 7f fd df 3f 4d 8f ec 7d 34 3d fa ff be 26 c5 98 49 6f ff c5 0f 08 be 29 8e ed 11 63 19 d7 34 6a 80 3f 2f ff 22 3d 95 cc 15 d6 21 da 35 bb f3 92 8e fb 89 c5 b6 18 00 5a 99 54 01 21 0c a2 21 64 80 5a b4 70 51 c9 54 bf 05 9c 9a b2 28 14 83 c7 0c ab 50 e0 10 12 d2 23 24 e1 97 f0 09 4f 28 8b eb dc 18 c8 33 04 57 a9 84 9e 1c 2c 44 78 0a 87 4c 21 b4 e4 9b 7b 38 7a 2e 4f 33 0b bf 85 4c 30 08 b5 f3 73 98 02 84 83 bc 69 be 7d 07 9f 32 e1 87 f8 13 56 cd 06 7f 1e d8 1b 50 f9 b1 a7 0b 88 2a dd 99 47 14 0e ba 32 02 3d 56 e8 c8 38 63 84 e6 2c 23 0e 20 a5 8a 72 30 1b 06 6d 91 2e 68 09 3a a1 2f 3b f3 6c 91 70 29 ed 42 df 10 e1 ab 4e 41 7a d6 ad dd c5 2c 16 95 e3 96 89 ae 9c 81 b3 5c ab be Data Ascii: 5H[t\|Zz?M}4=&Io)c4j?/"=!5ZT!!dZpQT(P#$O(3W,DxL!{8z.O3L0si}2VPG2=V8c,# r0m.h:/;lp)BNAz,\

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:40 UTC	3641	OUT	POST /admin/v1/UserTokenValidator HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive Content-Length: 130 sec-ch-ua-platform: "Windows" Authorization: Bearer eyJ4NXQjUzI1NiI6ImdmZW5IdXhfN0N6SmlKNHc0SnFsSTBLTF90QXdwa2plMFJ3bUh6Rl9jMmMiLCJ4NXQiOiJIM1VKSDBsanFRRHZCU1FDQmJzSnFySWNQNU0iLCJraWQiOiJTSUdOSU5HX0tFWSIsImFsZyI6IlJTMjU2In0.eyJjbGllbnRfb2NpZCI6Im9jaWQxLmRvbWFpbmFwcC5vYzI5Lm1lLWFidWRoYWJpLTIuYW1hYWFhYWFhcXRwNWJhYXk2dG54aHQycDU1dmVldGZ4ZXN1eWFobTNjZWIya3RxYmFwNnNqbWdpN3ZhIiwic3ViIjoidWlSZXNldFBhc3N3b3JkIiwic2lkbGUiOjQ4MCwidXNlci50ZW5hbnQubmFtZSI6ImlkY3MtY2FkMTZlNzZhMWUwNDY1MzhlMGFmODAxODBmMzdiNGEiLCJpc3MiOiJodHRwczovL2lkZW50aXR5Lm9yYWNsZWNsb3VkLmNvbS8iLCJkb21haW5faG9tZSI6Im1lLWFidWRoYWJpLTIiLCJjYV9vY2lkIjoib2NpZDEudGVuYW5jeS5vYzI5Li5hYWFhYWFhYW53dTdsdGRjY294d21jY3g2YTZoNHN5Y3V0a29xeGlqeTZxeG1meTdodHRpcnpyeTJndHEiLCJjbGllbnRfaWQiOiJ1aVJlc2V0UGFzc3dvcmQiLCJkb21haW5faWQiOiJvY2lkMS5kb21haW4ub2MyOS4uYWFhYWFhYWFrcWRmaTV1djVvd3MzanN5cXVtemd3bHoyYWRieTZ4bWs3ZHNkazc0aWZjbm9tejZ4ZjRxIiwic3ViX3R5cGUiOiJjbGllbnQiLCJzY29wZSI6InVybjpvcGM6aWRtOnQuc2VjdXJpdHkuY2xpZW50IHVybjpvcGM6aWRtOnQuYXBwc2VydmljZXMgdXJuOm9wYzppZG06dC51c2VyLnJlc2V0cGFzc3dvcmQgdXJuOm9wYz [TRUNCATED] Cache-Control: no-cache Accept-Language: en-US Pragma: no-cache sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json Origin: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D Accept-Encoding: gzip, deflate, br, zstd
2025-04-23 14:22:40 UTC	130	OUT	Data Raw: 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 75 72 6e 3a 69 65 74 66 3a 70 61 72 61 6d 73 3a 73 63 69 6d 3a 73 63 68 65 6d 61 73 3a 6f 72 61 63 6c 65 3a 69 64 63 73 3a 55 73 65 72 54 6f 6b 65 6e 56 61 6c 69 64 61 74 6f 72 22 5d 2c 22 74 6f 6b 65 6e 22 3a 22 46 78 34 79 47 4f 4c 6c 45 32 34 4b 70 32 66 6d 58 32 37 78 49 62 53 4a 4b 57 4e 35 39 4c 34 59 4f 48 4e 66 61 47 43 62 50 46 59 3d 22 7d Data Ascii: {"schemas":["urn:ietf:params:scim:schemas:oracle:idcs:UserTokenValidator"],"token":"Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY="}
2025-04-23 14:22:41 UTC	743	IN	HTTP/1.1 400 Bad Request Date: Wed, 23 Apr 2025 14:22:41 GMT Content-Type: application/json Content-Length: 310 Connection: close x-oracle-dms-rid: 0:1 x-oracle-dms-ecid: 1FD0BC30A8B5208DFD1339881732BB65/Sws^b1xdd10000000 opc-request-id: 1FD0BC30A8B5208DFD1339881732BB65/Sws^b1xdd10000000 opc-total-items: 1 x-envoy-upstream-service-time: 21 via: 1.1 net-idcs-config pragma: no-cache cache-control: no-cache, no-store, must-revalidate expires: Sat, 01 Jan 2000 00:00:00 GMT x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: deny vary: origin x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:41 UTC	310	IN	Data Raw: 7b 22 73 63 68 65 6d 61 73 22 3a 5b 22 75 72 6e 3a 69 65 74 66 3a 70 61 72 61 6d 73 3a 73 63 69 6d 3a 61 70 69 3a 6d 65 73 73 61 67 65 73 3a 32 2e 30 3a 45 72 72 6f 72 22 2c 22 75 72 6e 3a 69 65 74 66 3a 70 61 72 61 6d 73 3a 73 63 69 6d 3a 61 70 69 3a 6f 72 61 63 6c 65 3a 69 64 63 73 3a 65 78 74 65 6e 73 69 6f 6e 3a 6d 65 73 73 61 67 65 73 3a 45 72 72 6f 72 22 5d 2c 22 64 65 74 61 69 6c 22 3a 22 59 6f 75 20 61 72 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 65 78 70 69 72 65 64 20 74 6f 6b 65 6e 2e 22 2c 22 73 74 61 74 75 73 22 3a 22 34 30 30 22 2c 22 75 72 6e 3a 69 65 74 66 3a 70 61 72 61 6d 73 3a 73 63 69 6d 3a 61 70 69 3a 6f 72 61 63 6c 65 3a 69 64 63 73 3a 65 78 74 65 6e 73 69 6f 6e 3a 6d 65 73 73 61 67 65 73 3a 45 72 72 6f 72 22 3a 7b 22 Data Ascii: {"schemas":["urn:ietf:params:scim:api:messages:2.0:Error","urn:ietf:params:scim:api:oracle:idcs:extension:messages:Error"],"detail":"You are trying to use an expired token.","status":"400","urn:ietf:params:scim:api:oracle:idcs:extension:messages:Error":{"

Timestamp	Bytes transferred	Direction	Data
2025-04-23 14:22:42 UTC	918	OUT	GET /ui/v1/public/25.3.195-250326165613/dist/commonModule/style/fonts/IDCS.ttf?mltxzn HTTP/1.1 Host: idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com Connection: keep-alive Origin: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/public/25.3.195-250326165613/dist/commonModule/style/font-icon.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 14:22:43 UTC	616	IN	HTTP/1.1 200 OK Date: Wed, 23 Apr 2025 14:22:42 GMT Content-Type: font/ttf Content-Length: 54760 Connection: close x-frame-options: DENY x-download-options: noopen accept-ranges: bytes cache-control: public, max-age=31536000 last-modified: Wed, 26 Mar 2025 17:07:06 GMT etag: W/"d5e8-195d36c0290" x-envoy-upstream-service-time: 6 via: 1.1 net-idcs-config x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: Accept-Encoding,origin x-envoy-decorator-operation: webtier.idcs-data-plane.svc.cluster.local:8990/* Strict-Transport-Security: max-age=31536000; includeSubDomains always
2025-04-23 14:22:43 UTC	3480	IN	Data Raw: 00 01 00 00 00 0b 00 80 00 03 00 30 4f 53 2f 32 0f 12 06 ed 00 00 00 bc 00 00 00 60 63 6d 61 70 e9 db e6 03 00 00 01 1c 00 00 00 5c 67 61 73 70 00 00 00 10 00 00 01 78 00 00 00 08 67 6c 79 66 9a 08 db 2b 00 00 01 80 00 00 ce 88 68 65 61 64 34 06 9e 84 00 00 d0 08 00 00 00 36 68 68 65 61 22 ea 1f a0 00 00 d0 40 00 00 00 24 68 6d 74 78 a3 16 15 1d 00 00 d0 64 00 00 02 94 6c 6f 63 61 6d 8e a3 6e 00 00 d2 f8 00 00 01 4c 6d 61 78 70 00 b9 06 18 00 00 d4 44 00 00 00 20 6e 61 6d 65 de 56 4c 02 00 00 d4 64 00 00 01 62 70 6f 73 74 00 03 00 00 00 00 d5 c8 00 00 00 20 00 03 04 24 01 90 00 05 00 00 02 99 02 cc 00 00 00 8f 02 99 02 cc 00 00 01 eb 00 33 01 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e9 Data Ascii: 0OS/2`cmap\gaspxglyf+head46hhea"@$hmtxdlocamnLmaxpD nameVLdbpost $3@
2025-04-23 14:22:43 UTC	4096	IN	Data Raw: 01 49 17 20 6e 35 2e 2f 45 15 14 14 15 45 2f 2e 35 6e 20 17 00 01 00 00 ff c0 04 00 03 c0 00 24 00 00 01 11 21 32 16 1d 01 14 06 23 21 11 14 06 2b 01 22 26 35 11 21 22 26 3d 01 34 36 33 21 11 34 36 3b 01 32 16 15 02 80 01 55 10 1b 1b 10 fe ab 1b 10 aa 10 1b fe ab 10 1b 1b 10 01 55 1b 10 aa 10 1b 03 95 fe ab 1b 10 aa 10 1b fe ab 10 1b 1b 10 01 55 1b 10 aa 10 1b 01 55 10 1b 1b 10 00 00 01 00 40 00 00 03 c0 03 80 00 24 00 00 09 01 16 14 0f 01 06 22 27 09 01 06 22 2f 01 26 34 37 09 01 26 34 3f 01 36 32 17 09 01 36 32 1f 01 16 14 07 01 02 a6 01 1a 0f 0f 64 0f 24 0f fe e6 fe e6 0f 24 0f 64 0f 0f 01 1a fe e6 0f 0f 64 0f 24 0f 01 1a 01 1a 0f 24 0f 64 0f 0f fe e6 01 c0 fe e6 0f 24 0f 64 0f 0f 01 1a fe e6 0f 0f 64 0f 24 0f 01 1a 01 1a 0f 24 0f 64 0f 0f fe e6 01 1a Data Ascii: I n5./EE/.5n $!2#!+"&5!"&=463!46;2UUUU@$"'"/&47&4?6262d$$dd$$d$dd$$d
2025-04-23 14:22:43 UTC	4096	IN	Data Raw: 0c 13 0d 2f 19 20 24 34 2a 2b 9a 1a 16 3c 22 27 2f 4f 3a 3a 4e 03 30 26 03 c0 ab f7 15 1e 1e 15 15 1e 1e 01 8d d5 d5 20 13 fc 6a 16 21 20 13 03 9a 13 20 fd 5a 0c 22 08 5a 19 2e de 1d 53 2a 1d 22 09 16 43 27 30 49 13 51 62 56 26 66 3c 22 f7 10 44 2c 3a 4f 4f 3a 29 42 10 00 00 00 04 00 00 00 1e 04 00 03 62 00 03 00 0f 00 12 00 21 00 00 01 05 11 05 01 35 34 26 23 21 22 06 1d 01 09 01 19 01 05 07 31 27 01 15 14 16 33 21 32 36 3d 01 01 07 01 44 fe bc 01 44 02 bc 33 27 fc b4 27 33 01 f7 02 09 fe b3 bc 6a fe 73 33 27 03 4c 24 36 fe 6b 74 01 bc d6 01 ab d5 01 3b 12 23 36 36 23 1a fe b7 01 51 fd ef 01 b4 da 77 44 fe fc 12 23 36 33 26 12 01 08 48 00 00 10 00 22 ff b7 03 de 03 c0 00 08 00 0d 00 11 00 15 00 1a 00 1f 00 24 00 52 00 57 00 5c 00 60 00 6b 00 73 00 7f 01 Data Ascii: / $4+<"'/O::N0& j! Z"Z.S"C'0IQbV&f<"D,:OO:)Bb!54&#!"1'3!26=DD3''3js3'L$6kt;#66#QwD#63&H"$RW\`ks
2025-04-23 14:22:43 UTC	4096	IN	Data Raw: 2b 18 18 0b 0d 0d 1f bb 5e bb 30 37 37 6e 34 34 2b 53 4e d0 13 13 14 37 13 d0 79 cf 14 14 00 00 00 08 00 80 ff c0 03 c0 03 c0 00 13 00 17 00 1b 00 1f 00 23 00 27 00 2b 00 2f 00 00 05 21 22 26 35 11 34 36 3b 01 11 21 11 33 32 16 15 11 14 06 01 23 15 33 15 23 15 33 15 23 15 33 01 21 15 21 15 21 15 21 15 21 15 21 01 21 15 21 03 80 fd 40 1a 26 26 1a 40 02 40 40 1a 26 26 fd e6 40 40 40 40 40 40 01 80 fe c0 01 40 fe c0 01 40 fe c0 01 40 fe 40 01 c0 fe 40 40 26 1a 03 80 1a 26 ff 00 01 00 26 1a fc 80 1a 26 02 40 40 40 40 40 40 01 40 40 40 40 40 40 03 00 c0 00 00 00 00 02 00 10 ff c0 02 0c 03 c0 00 3a 00 46 00 00 17 35 23 22 26 35 34 36 3b 01 35 23 22 26 35 34 36 3b 01 35 26 27 2e 01 27 26 37 36 37 3e 01 37 36 33 32 17 1e 01 17 16 17 16 07 0e 01 07 06 07 11 14 06 Data Ascii: +^077n44+SN7y#'+/!"&546;!32#3#3#3!!!!!!!!@&&@@@&&@@@@@@@@@@@@&&&&@@@@@@@@@@@@:F5#"&546;5#"&546;5&'.'&767>7632
2025-04-23 14:22:43 UTC	4096	IN	Data Raw: 26 36 37 3e 01 37 3e 01 37 25 2e 01 27 26 36 37 36 16 17 1e 01 17 1e 01 17 1e 01 15 14 06 27 22 26 27 22 26 37 3e 01 37 36 16 17 1e 01 17 16 06 27 03 22 26 27 34 36 33 32 16 15 16 06 23 e2 06 08 03 0a 0c 04 0c 0a 16 31 17 36 2b 2b 40 15 15 0a 03 01 1d 16 17 1c 04 41 40 19 3e 20 0d 11 0e 10 23 43 1a 23 25 1f 1d 1d 34 1a 19 10 03 06 31 34 36 8c 53 02 38 05 0c 10 1e 1d 4f 2f 2f 33 2d 29 29 43 17 17 08 03 01 0d 0c 0d 0a 03 02 14 15 48 31 30 38 47 42 43 6c 25 25 0b 03 02 0d 0d 0a 10 04 01 49 02 06 14 79 4d 43 6c 0d 03 02 03 06 36 26 0d 11 0d 0d 19 1a 01 15 16 47 2f 30 36 2f 2a 2a 41 15 16 04 07 02 16 1d 0d 0d 11 0d 23 38 03 03 03 1e 03 03 07 3c 30 04 07 06 0d 0c 03 10 0a 33 60 13 07 06 43 30 30 53 0a 03 02 04 0c 5d 3d 0a 11 03 06 10 10 36 46 69 4a 49 6a 03 01 Data Ascii: &67>7>7%.'&676'"&'"&7>76'"&'4632#16++@A@> #C#%4146S8O//3-))CH108GBCl%%IyMCl6&G/06/**A#8<03`C00S]=6FiJIj
2025-04-23 14:22:43 UTC	4096	IN	Data Raw: ff c0 03 80 03 c0 00 21 00 2a 00 40 00 56 00 00 01 23 35 34 27 2e 01 27 26 23 22 07 0e 01 07 06 1d 01 23 22 06 15 11 14 16 33 21 32 36 35 11 34 26 23 25 34 36 33 32 16 1d 01 21 03 33 34 37 3e 01 37 36 33 32 16 17 07 2e 01 23 22 06 15 33 07 27 21 14 07 0e 01 07 06 23 22 26 27 37 1e 01 33 32 36 35 23 37 17 23 03 1e 31 13 13 42 2c 2d 32 33 2d 2c 42 13 13 31 28 3a 3a 28 02 49 28 3a 3a 28 fe 44 59 3e 3f 59 fe d1 78 49 10 0f 35 24 24 29 1d 35 16 24 10 22 12 3d 57 49 63 60 01 d4 0f 10 35 24 24 29 1d 35 16 24 10 22 12 3d 57 49 63 64 4d 02 6b 61 33 2c 2d 42 13 13 13 13 42 2d 2c 33 61 3a 28 fe 19 29 39 39 29 01 e7 28 3a 61 3e 59 59 3e 61 fe af 29 24 24 35 0f 10 10 0f 24 09 09 57 3d 63 63 29 23 24 36 0f 0f 10 0e 24 08 0a 57 3d 63 63 00 02 00 58 ff c0 03 9d 03 c0 00 Data Ascii: !*@V#54'.'&#"#"3!2654&#%4632!347>7632.#"3'!#"&'73265#7#1B,-23-,B1(::(I(::(DY>?YxI5$$)5$"=WIc`5$$)5$"=WIcdMka3,-BB-,3a:()99)(:a>YY>a)$$5$W=cc)#$6$W=ccX
2025-04-23 14:22:43 UTC	4096	IN	Data Raw: 06 23 31 05 0e 01 17 1e 01 37 3e 01 35 2e 01 07 22 26 35 26 36 33 32 16 15 14 06 07 22 06 15 14 16 33 32 36 35 34 26 07 22 26 35 34 36 33 32 16 15 14 06 37 22 06 15 14 16 33 32 36 35 34 26 07 14 06 2b 01 0e 01 07 17 16 14 0f 01 06 22 2f 01 0e 01 23 15 14 06 2b 01 22 26 3d 01 2e 01 27 07 06 22 2f 01 26 34 3f 01 2e 01 27 23 22 26 3d 01 34 36 3b 01 3e 01 37 27 26 34 3f 01 36 32 1f 01 3e 01 37 35 34 36 3b 01 32 16 1d 01 1e 01 17 37 36 32 1f 01 16 14 0f 01 1e 01 17 33 32 16 1d 01 31 37 07 14 06 15 17 16 14 0f 01 14 22 2f 01 22 06 23 17 14 06 23 07 22 26 35 27 22 26 23 07 0e 01 2f 01 26 34 3f 01 2e 01 35 23 06 26 35 27 34 36 33 37 34 36 35 27 26 34 35 37 3e 01 1f 01 3e 01 37 27 34 36 37 33 32 16 15 17 16 32 17 37 36 32 1f 01 1e 01 0f 01 1e 01 17 37 32 16 17 15 Data Ascii: #17>5."&5&632"32654&"&546327"32654&+"/#+"&=.'"/&4?.'#"&=46;>7'&4?62>7546;27623217"/"##"&5'"&#/&4?.5#&5'4637465'&457>>7'46732276272
2025-04-23 14:22:43 UTC	4096	IN	Data Raw: 41 42 5e 5d 43 26 38 38 26 27 37 37 27 01 97 02 16 0f 2d 2b 2b 4c 21 21 1a 08 06 0b 0b 1c 08 2b 84 4d 0c 12 fe 3a 1c 19 07 1b 0b 0d 06 06 16 17 17 16 06 08 0b 0d 19 07 19 1c 01 d1 0f 0d 48 79 2a 08 1b 0b 0c 05 08 19 1e 1f 46 28 27 2a 0f 16 02 02 cd 5e 42 42 5e 5e 42 42 5e fc 38 26 27 37 37 27 26 38 fc c4 5e 42 42 5e 5e 42 42 5e fc 38 26 27 37 37 27 28 36 fc 5e 42 42 5e 5e 42 42 5e fc 38 26 27 37 37 27 28 36 00 00 00 00 09 00 00 ff c2 03 fe 03 c0 00 10 00 20 00 30 00 41 00 51 00 61 00 71 00 81 00 91 00 00 13 23 22 26 3d 01 34 36 3b 01 32 16 1d 01 0e 01 23 21 23 22 26 3d 01 34 36 3b 01 32 16 1d 01 14 06 05 23 22 26 3d 01 34 36 3b 01 32 16 1d 01 14 06 01 23 22 26 3d 01 34 36 3b 01 32 16 1d 01 0e 01 23 21 23 22 26 3d 01 34 36 3b 01 32 16 1d 01 14 06 21 23 22 Data Ascii: AB^]C&88&'77'-++L!!+M:HyF('^BB^^BB^8&'77'&8^BB^^BB^8&'77'(6^BB^^BB^8&'77'(6 0AQaq#"&=46;2#!#"&=46;2#"&=46;2#"&=46;2#!#"&=46;2!#"
2025-04-23 14:22:43 UTC	4096	IN	Data Raw: 13 02 0d 06 07 0f f0 15 1b 1e 12 16 1b 03 1e 16 01 b4 12 09 09 03 1a 33 0a 06 10 06 09 20 0c 09 0e 03 0b 28 29 5b 27 27 07 1e 16 15 34 0c 1b 2e e4 3f 12 01 c3 59 09 0a 3d 3d 8a 38 38 35 01 8e 1d ec 25 22 22 38 13 14 07 0a 0d 0d 01 15 15 3c 40 8b 31 45 10 09 0c 0e 1e 06 02 0d 03 07 1f 2a 72 43 06 19 18 28 03 03 24 fe d8 06 18 12 df 63 40 3a 3e bf 03 11 09 0f 36 0c 09 0b 0d fe cb 1b 15 16 1b 1b 16 15 1b 00 00 02 00 45 00 02 03 ab 03 75 00 1e 00 41 00 00 01 22 07 06 07 06 07 06 07 06 07 06 17 16 17 16 17 16 37 36 37 36 37 36 35 34 27 26 27 26 23 07 33 32 17 16 17 13 16 07 06 07 06 23 22 27 26 2f 01 23 07 06 07 06 23 22 27 26 27 26 37 13 36 37 36 33 01 f7 11 13 4f 41 29 2c 64 2e 12 01 1d 19 18 3e 3d 60 50 6d 6d 57 64 44 4a 4a 38 5b 5b 7c 25 3b 12 0e 0f 05 75 Data Ascii: 3 ()[''4.?Y==885%""8<@1E*rC($c@:>6EuA"76767654'&'&#32#"'&/##"'&'&76763OA),d.>=`PmmWdDJJ8[[\|%;u
2025-04-23 14:22:43 UTC	4096	IN	Data Raw: 05 f3 06 15 00 00 05 2e 01 27 3c 01 37 32 26 27 2e 01 35 34 26 27 2e 01 35 34 26 27 2e 01 37 36 26 27 2e 01 37 36 26 27 2e 01 35 34 26 27 2e 01 35 2f 01 22 06 15 14 16 17 1e 01 07 14 16 17 1e 01 17 1e 01 07 0e 01 15 14 06 07 0e 01 07 0e 01 17 1e 01 17 1e 01 17 1e 01 15 14 06 07 06 26 27 2e 01 2f 01 07 0e 01 07 0e 01 27 2e 01 27 2e 01 37 3e 01 33 32 36 37 36 34 27 2e 01 27 2e 01 37 3e 01 35 2e 01 27 2e 01 27 2e 01 2f 01 07 0e 01 07 0e 01 15 14 06 07 0e 01 07 0e 01 07 0e 01 17 1e 01 17 1e 01 17 1e 01 17 16 14 07 0e 01 23 22 06 07 06 26 27 2e 01 37 3e 01 35 34 36 37 3e 01 27 2e 01 27 34 36 37 3e 01 27 26 36 37 36 26 27 2e 01 15 14 06 23 22 06 15 14 06 07 06 16 17 1e 01 07 0e 01 15 14 06 27 2e 01 27 2e 01 35 34 26 27 2e 01 35 34 26 27 26 34 37 36 26 27 26 34 Data Ascii: .'<72&'.54&'.54&'.76&'.76&'.54&'.5/"&'./'.'.7>326764'.'.7>5.'.'./#"&'.7>5467>'.'467>'&676&'.#"'.'.54&'.54&'&476&'&4

Target ID:	1
Start time:	10:22:04
Start date:	23/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	10:22:08
Start date:	23/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2268,i,5811215626882022661,4807552495771223217,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2316 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Windows Analysis Report
https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D

Target ID:	9
Start time:	10:22:15
Start date:	23/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://idcs-cad16e76a1e046538e0af80180f37b4a.me-abudhabi-idcs-2.identity.oci.oraclecloud29.com/ui/v1/resetpwd?token=Fx4yGOLlE24Kp2fmX27xIbSJKWN59L4YOHNfaGCbPFY%3D"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre