Edit tour

Windows Analysis Report
https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/

Overview

General Information

Sample URL:	https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/
Analysis ID:	1540669
Tags:	urlscan
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6284 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2176,i,7684737893548512008,2564271063212719864,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: POST /jsdata? HTTP/1.1Host: cas.avalon.perfdrive.comConnection: keep-aliveContent-Length: 1360sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-type: application/x-www-form-urlencodedAccept: */*Origin: https://jobs.sap.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://jobs.sap.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://career5.successfactors.eu/careers?company=SAP	HTTP Parser: On click: togglePassword('password','show_button');
Source: https://career5.successfactors.eu/careers?company=SAP	HTTP Parser: On click: togglePassword('password','show_button');
Source: https://career5.successfactors.eu/careers?company=SAP	HTTP Parser: On click: togglePassword('password','show_button');

Source: https://career5.successfactors.eu/careers?company=SAP	HTTP Parser: No favicon
Source: https://career5.successfactors.eu/careers?company=SAP	HTTP Parser: No favicon
Source: https://career5.successfactors.eu/careers?company=SAP	HTTP Parser: No favicon

Source: https://career5.successfactors.eu/careers?company=SAP	HTTP Parser: No <meta name="author".. found
Source: https://career5.successfactors.eu/careers?company=SAP	HTTP Parser: No <meta name="author".. found
Source: https://career5.successfactors.eu/careers?company=SAP	HTTP Parser: No <meta name="author".. found

Source: https://career5.successfactors.eu/careers?company=SAP	HTTP Parser: No <meta name="copyright".. found
Source: https://career5.successfactors.eu/careers?company=SAP	HTTP Parser: No <meta name="copyright".. found
Source: https://career5.successfactors.eu/careers?company=SAP	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.10:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.10:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49888 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.10:50239 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: chromecache_319.3.dr	String found in binary or memory: <a href="http://www.youtube.com/user/lifeatsap" class="social-icon btn-youtube" target="_blank" aria-description="Wird auf einer neuen Registerkarte ge equals www.youtube.com (Youtube)
Source: chromecache_319.3.dr	String found in binary or memory: <a href="https://www.facebook.com/lifeatsap" class="social-icon btn-facebook" target="_blank" aria-description="Wird auf einer neuen Registerkarte ge equals www.facebook.com (Facebook)
Source: chromecache_319.3.dr	String found in binary or memory: <a href="https://www.linkedin.com/company/sap/careers?trk=tabs_biz_career" class="social-icon btn-linkedin" target="_blank" aria-description="Wird auf einer neuen Registerkarte ge equals www.linkedin.com (Linkedin)
Source: chromecache_474.3.dr, chromecache_386.3.dr, chromecache_683.3.dr	String found in binary or memory: const Facebook = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 264 512"><path d="M76.7 512V283H0v-91h76.7v-71.7C76.7 42.4 124.3 0 193.8 0c33.3 0 61.9 2.5 70.2 3.6V85h-48.2c-37.8 0-45.1 18-45.1 44.3V192H256l-11.7 91h-73.6v229"/></svg>`; equals www.facebook.com (Facebook)
Source: chromecache_474.3.dr, chromecache_386.3.dr, chromecache_683.3.dr	String found in binary or memory: const LinkedIn = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448.1 512"><path d="M100.3 448H7.4V148.9h92.9V448zM53.8 108.1C24.1 108.1 0 83.5 0 53.8S24.1 0 53.8 0s53.8 24.1 53.8 53.8-24.1 54.3-53.8 54.3zM448 448h-92.7V302.4c0-34.7-.7-79.2-48.3-79.2-48.3 0-55.7 37.7-55.7 76.7V448h-92.8V148.9h89.1v40.8h1.3c12.4-23.5 42.7-48.3 87.9-48.3 94 0 111.3 61.9 111.3 142.3V448h-.1z"/></svg> equals www.linkedin.com (Linkedin)
Source: chromecache_474.3.dr, chromecache_386.3.dr, chromecache_683.3.dr	String found in binary or memory: const Twitter = `<svg width="1200" height="1227" viewBox="0 0 1200 1227" xmlns="http://www.w3.org/2000/svg"> equals www.twitter.com (Twitter)
Source: chromecache_474.3.dr, chromecache_386.3.dr, chromecache_683.3.dr	String found in binary or memory: const Youtube = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 576 512"><path d="M549.655 124.083c-6.281-23.65-24.787-42.276-48.284-48.597C458.781 64 288 64 288 64S117.22 64 74.629 75.486c-23.497 6.322-42.003 24.947-48.284 48.597-11.412 42.867-11.412 132.305-11.412 132.305s0 89.438 11.412 132.305c6.281 23.65 24.787 41.5 48.284 47.821C117.22 448 288 448 288 448s170.78 0 213.371-11.486c23.497-6.321 42.003-24.171 48.284-47.821 11.412-42.867 11.412-132.305 11.412-132.305s0-89.438-11.412-132.305zm-317.51 213.508V175.185l142.739 81.205-142.739 81.201z"/></svg> equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: jobs.sap.com
Source: global traffic	DNS traffic detected: DNS query: rmkcdn.successfactors.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: contextualnavigation.api.community.sap.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.sap.com
Source: global traffic	DNS traffic detected: DNS query: cdn.perfdrive.com
Source: global traffic	DNS traffic detected: DNS query: client.px-cloud.net
Source: global traffic	DNS traffic detected: DNS query: cas.avalon.perfdrive.com
Source: global traffic	DNS traffic detected: DNS query: stk.px-cloud.net
Source: global traffic	DNS traffic detected: DNS query: collector-pxyach2hjb.px-cloud.net
Source: global traffic	DNS traffic detected: DNS query: consent.trustarc.com
Source: global traffic	DNS traffic detected: DNS query: career5.successfactors.eu
Source: global traffic	DNS traffic detected: DNS query: cdn.schemaapp.com
Source: global traffic	DNS traffic detected: DNS query: www-qa.sap.com
Source: global traffic	DNS traffic detected: DNS query: data.schemaapp.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2176,i,7684737893548512008,2564271063212719864,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 --field-trial-handle=2176,i,7684737893548512008,2564271063212719864,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://fontawesome.com	0%	URL Reputation	safe
http://api.jqueryui.com/category/ui-core/	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://consent.trustarc.com/log	0%	URL Reputation	safe
http://www.unicode.org/copyright.html	0%	URL Reputation	safe
https://fontawesome.com/license/free	0%	URL Reputation	safe
http://pajhome.org.uk/crypt/md5	0%	URL Reputation	safe

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/web/fundamentals/web-components/best-practices#avoid-reentrancy	chromecache_463.3.dr, chromecache_334.3.dr	false		unknown
https://www.sap.com/sustainability/our-approach.html	chromecache_665.3.dr, chromecache_562.3.dr, chromecache_481.3.dr	false		unknown
https://jsperf.com/typeof-fn-object/5	chromecache_463.3.dr, chromecache_334.3.dr	false		unknown
https://www.sap.com/germany/about/company/office-locations.html	chromecache_319.3.dr	false		unknown
http://cldr.unicode.org).	chromecache_476.3.dr, chromecache_333.3.dr	false		unknown
http://instagram.com/lifeatsap	chromecache_319.3.dr	false		unknown
https://news.sap.com/germany/	chromecache_410.3.dr, chromecache_445.3.dr, chromecache_319.3.dr, chromecache_460.3.dr	false		unknown
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti	chromecache_348.3.dr, chromecache_435.3.dr	false		unknown
https://jobs.sap.com/content/Studierende/?locale=de_DE	chromecache_665.3.dr, chromecache_562.3.dr, chromecache_481.3.dr	false		unknown
https://fontawesome.com	chromecache_474.3.dr, chromecache_386.3.dr, chromecache_683.3.dr	false	URL Reputation: safe	unknown
https://assets.adobedtm.com/ccc66c06b30b/d39f9a1eb34e/2e19b29790e0/RC5b865602d9e24b62a7ee680dbde83f8	chromecache_697.3.dr	false		unknown
https://one.int.sap/me	chromecache_319.3.dr	false		unknown
https://www.sap.com/germany/products/hcm.html	chromecache_410.3.dr, chromecache_445.3.dr, chromecache_460.3.dr	false		unknown
http://www.apache.org/licenses/LICENSE-2.0)	chromecache_418.3.dr, chromecache_561.3.dr	false		unknown
http://www.youtube.com/user/lifeatsap	chromecache_319.3.dr	false		unknown
http://getbootstrap.com)	chromecache_581.3.dr, chromecache_384.3.dr, chromecache_432.3.dr	false		unknown
https://performancemanager5.successfactors.eu/sf/careers/jobsearch?bplte_company=SAP	chromecache_665.3.dr, chromecache_562.3.dr, chromecache_481.3.dr	false		unknown
https://jobs.sap.com?locale=zh_CN	chromecache_319.3.dr	false		unknown
https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668101/	chromecache_319.3.dr	false		unknown
https://www.sap.com/germany/events.html	chromecache_410.3.dr, chromecache_445.3.dr, chromecache_319.3.dr, chromecache_460.3.dr	false		unknown
https://developers.google.com/web/fundamentals/web-components/best-practices#lazy-properties	chromecache_334.3.dr	false		unknown
https://jobs.sap.com/content/SAP-Privacy-Statement-Careers/	chromecache_674.3.dr, chromecache_502.3.dr, chromecache_503.3.dr	false		unknown
http://bugs.jquery.com/ticket/11820	chromecache_599.3.dr, chromecache_572.3.dr	false		unknown
https://help.sap.com	chromecache_410.3.dr, chromecache_445.3.dr, chromecache_460.3.dr	false		unknown
https://support.sap.com	chromecache_410.3.dr, chromecache_445.3.dr, chromecache_460.3.dr	false		unknown
http://docs.jquery.com/UI	chromecache_616.3.dr	false		unknown
https://jobs.sap.com/content/Life-at-SAP/?locale=de_DE	chromecache_665.3.dr, chromecache_562.3.dr, chromecache_481.3.dr	false		unknown
https://www.sap.com/diversity	chromecache_665.3.dr, chromecache_562.3.dr, chromecache_481.3.dr	false		unknown
http://api.jqueryui.com/category/ui-core/	chromecache_450.3.dr, chromecache_616.3.dr	false	URL Reputation: safe	unknown
https://jobs.sap.com/content/SAP-Privacy-Statement-Careers/?locale=de_DE	chromecache_319.3.dr	false		unknown
https://www.sap.com/germany/insights.html	chromecache_319.3.dr	false		unknown
https://developers.sap.com/	chromecache_319.3.dr	false		unknown
http://bugs.jquery.com/ticket/13335	chromecache_599.3.dr, chromecache_572.3.dr	false		unknown
http://www.crockford.com/JSON/license.html	chromecache_466.3.dr, chromecache_680.3.dr	false		unknown
https://jquery.com/	chromecache_488.3.dr	false	URL Reputation: safe	unknown
https://search.sap.com/search.html?t=	chromecache_408.3.dr, chromecache_438.3.dr	false		unknown
https://jobs.sap.com/content/Autism-at-Work/?locale=de_DE	chromecache_665.3.dr, chromecache_562.3.dr, chromecache_481.3.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_581.3.dr, chromecache_662.3.dr, chromecache_384.3.dr, chromecache_432.3.dr	false		unknown
https://jobs.sap.com/content/Auszeichnungen/?locale=de_DE	chromecache_665.3.dr, chromecache_562.3.dr, chromecache_481.3.dr	false		unknown
https://jobs.sap.com/content/Employee-Network-Groups/?locale=en_US	chromecache_665.3.dr, chromecache_562.3.dr, chromecache_481.3.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
130.211.29.114	cdn.perfdrive.com	United States	15169	GOOGLEUS	false
35.241.15.240	cas.avalon.perfdrive.com	United States	15169	GOOGLEUS	false
35.190.10.96	collector-pxyach2hjb.px-cloud.net	United States	15169	GOOGLEUS	false
13.32.121.93	unknown	United States	16509	AMAZON-02US	false
130.214.193.81	RMK12.jobs2web.com	United States	35039	SAP_CCDE	false
13.32.121.46	unknown	United States	16509	AMAZON-02US	false
13.35.58.22	d2unjxrejkh6j9.cloudfront.net	United States	16509	AMAZON-02US	false
13.32.121.47	d3nidttaq34fka.cloudfront.net	United States	16509	AMAZON-02US	false
34.107.199.61	stk.px-cloud.net	United States	15169	GOOGLEUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
13.225.78.53	unknown	United States	16509	AMAZON-02US	false
13.225.78.35	consent.trustarc.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.165.206.110	unknown	United States	16509	AMAZON-02US	false
143.204.215.5	unknown	United States	16509	AMAZON-02US	false
143.204.215.60	unknown	United States	16509	AMAZON-02US	false
143.204.215.21	d2yqaroqdoiwyp.cloudfront.net	United States	16509	AMAZON-02US	false

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Name	IP	Active	Malicious	Reputation
d2yqaroqdoiwyp.cloudfront.net	143.204.215.21	true	false	unknown
cdn.perfdrive.com	130.211.29.114	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
www.google.com	142.250.185.68	true	false	unknown
RMK12.jobs2web.com	130.214.193.81	true	false	unknown
cas.avalon.perfdrive.com	35.241.15.240	true	false	unknown
collector-pxyach2hjb.px-cloud.net	35.190.10.96	true	false	unknown
stk.px-cloud.net	34.107.199.61	true	false	unknown
d3nidttaq34fka.cloudfront.net	13.32.121.47	true	false	unknown
windowsupdatebg.s.llnwi.net	178.79.238.0	true	false	unknown
consent.trustarc.com	13.225.78.35	true	false	unknown
d2unjxrejkh6j9.cloudfront.net	13.35.58.22	true	false	unknown
jobs.sap.com	unknown	unknown	false	unknown
assets.adobedtm.com	unknown	unknown	false	unknown
www-qa.sap.com	unknown	unknown	false	unknown
career5.successfactors.eu	unknown	unknown	false	unknown
rmkcdn.successfactors.com	unknown	unknown	false	unknown
contextualnavigation.api.community.sap.com	unknown	unknown	false	unknown
www.sap.com	unknown	unknown	false	unknown
client.px-cloud.net	unknown	unknown	false	unknown
cdn.schemaapp.com	unknown	unknown	false	unknown
data.schemaapp.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://consent.trustarc.com/notice?domain=jobs.sap.com&c=teconsent&gtm=1&js=nj&noticeType=bb&text=true&pn=1-0&privacypolicylink=https%3A%2F%2Fjobs.sap.com%2Fcontent%2FSAP-Privacy-Statement-Careers%2F	false	unknown
https://contextualnavigation.api.community.sap.com/translations/navigation_labels/de-de/data_latest.json	false	unknown
https://contextualnavigation.api.community.sap.com/static/1.35.2/cxs-designsystem/cxs-designsystem.esm.js?v=lp76pj0z2h47y6142	false	unknown
https://stk.px-cloud.net/ns?c=ca58a560-9190-11ef-ba25-63182313daa2	false	unknown
https://contextualnavigation.api.community.sap.com/static/1.35.2/cxs-designsystem/p-5514883b.entry.js	false	unknown
https://contextualnavigation.api.community.sap.com/static/1.35.2/cxs-designsystem/p-1548411e.entry.js	false	unknown
https://jobs.sap.com/platform/bootstrap/3.4.1/css/bootstrap.min.css	false	unknown
https://contextualnavigation.api.community.sap.com/static/1.35.2/cxs-designsystem/assets/fonts/BentonSansBook.woff2	false	unknown
https://contextualnavigation.api.community.sap.com/static/1.35.2/cxs-designsystem/p-b6674c57.entry.js	false	unknown
https://jobs.sap.com/platform/js/search/search.js?h=e9e34341	false	unknown
https://consent.trustarc.com/bannermsg?action=views&domain=jobs.sap.com&behavior=implied&country=us&language=en&rand=0.32594376953022963&session=8e9e5669-2b2b-40e1-963b-b26338737ed3&userType=NEW&referer=https://career5.successfactors.eu	false	unknown
https://jobs.sap.com/platform/js/jquery/jquery.placeholder.2.0.7.min.js	false	unknown
https://jobs.sap.com/platform/js/j2w/min/j2w.agent.min.js?h=e9e34341	false	unknown
https://jobs.sap.com/sites/csb/sap/jobs-ui/components/job-ui.esm.js?v=lp76pj0z2h47y6142	false	unknown
https://cdn.schemaapp.com/highlighter/prod/Acronym/Jobssapcom/v2/aHR0cHM6Ly9jYXJlZXI1LnN1Y2Nlc3NmYWN0b3JzLmV1	false	unknown
https://jobs.sap.com/sites/csb/sap/jobs-ui/csb/global-footer.css?v=lp76pj0z2h47y6169	false	unknown
https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/	false	unknown
https://contextualnavigation.api.community.sap.com/static/1.35.2/index.js	false	unknown
https://jobs.sap.com/sites/csb/sap/jobs-ui/csb/global-head-keep.js?v=lp76pj0z2h47y6142	false	unknown
https://cas.avalon.perfdrive.com/jsdata?	false	unknown
https://contextualnavigation.api.community.sap.com/static/1.35.2/cxs-designsystem/p-ab8f0bf1.js	false	unknown
https://jobs.sap.com/platform/js/jquery/jquery.lightbox_me.js	false	unknown
https://jobs.sap.com/platform/js/jquery/js.cookie-2.2.1.min.js	false	unknown
https://jobs.sap.com/platform/csb/css/navbar-fixed-top.css	false	unknown
https://jobs.sap.com/platform/bootstrap/3.4.1/js/bootstrap.min.js	false	unknown
https://jobs.sap.com/platform/js/jquery/jquery-migrate-3.1.0.min.js	false	unknown
https://jobs.sap.com/services/jobs/options/facetValues/	false	unknown
https://jobs.sap.com/platform/css/search/BS3ColumnizedSearchHideLabels.css?h=e9e34341	false	unknown
https://jobs.sap.com/sites/csb/sap/jobs-ui/csb/global-head.css?v=lp76pj0z2h47y6142	false	unknown
https://contextualnavigation.api.community.sap.com/static/1.35.2/cxs-designsystem/assets/fonts/BentonSansBold.woff2	false	unknown
https://consent.trustarc.com/bannermsg?action=views&domain=jobs.sap.com&behavior=implied&country=us&language=en&rand=0.9555753146186843&session=215f540b-c60b-4a7a-9706-07da16437723&userType=NEW&referer=https://jobs.sap.com	false	unknown
https://career5.successfactors.eu/careers?company=SAP	false	unknown
https://jobs.sap.com/platform/js/j2w/min/j2w.core.min.js?h=e9e34341	false	unknown
https://jobs.sap.com/platform/css/j2w/min/sitebuilderframework.min.css?h=e9e34341	false	unknown

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540669
Start date and time:	2024-10-24 00:46:22 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/680@82/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Input	Output
URL: https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Jetzt bewerben ", "prominent_button_name": "Jetzt bewerben ", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Jetzt bewerben ", "prominent_button_name": "Jetzt bewerben ", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Jetzt bewerben ", "prominent_button_name": "Jetzt bewerben ", "text_input_field_labels": [ "Ausschreibungsnummer", "Ausschreibungsdatum" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/ Model: claude-3-haiku-20240307	```json { "brands": [ "SAP" ] }
	```json { "brands": [ "SAP" ] }
URL: https://career5.successfactors.eu/careers?company=SAP Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Haben Sie Ihr Kennwort vergessen?", "prominent_button_name": "Anmelden", "text_input_field_labels": [ "E-Mail-Adresse:", "Kennwort:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/ Model: claude-3-haiku-20240307	```json { "brands": [ "SAP" ] }
	```json { "brands": [ "SAP" ] }
URL: https://career5.successfactors.eu/careers?company=SAP Model: claude-3-haiku-20240307	```json { "brands": [ "SAP" ] }
	```json { "brands": [ "SAP" ] }
URL: https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/ Model: claude-3-haiku-20240307	```json { "brands": [ "SAP" ] }
	```json { "brands": [ "SAP" ] }
URL: https://career5.successfactors.eu/careers?company=SAP Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Anmelden", "text_input_field_labels": [ "E-Mail-Adresse:", "Kennwort:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://career5.successfactors.eu/careers?company=SAP Model: claude-3-haiku-20240307	```json { "brands": [ "SAP" ] }
	```json { "brands": [ "SAP" ] }
URL: https://career5.successfactors.eu/careers?company=SAP Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Haben Sie ihr Kennwort vergessen?", "prominent_button_name": "Anmelden", "text_input_field_labels": [ "E-Mail-Adresse:", "Kennwort:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://career5.successfactors.eu/careers?company=SAP Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Haben Sie ihr Kennwort vergessen?", "prominent_button_name": "Anmelden", "text_input_field_labels": [ "E-Mail-Adresse:", "Kennwort:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://career5.successfactors.eu/careers?company=SAP Model: claude-3-haiku-20240307	```json { "brands": [ "SAP" ] }
	```json { "brands": [ "SAP" ] }
URL: https://career5.successfactors.eu/careers?company=SAP Model: gpt-4o	```json{ "legit_domain": "successfactors.com", "classification": "wellknown", "reasons": [ "The brand 'SAP' is well-known and associated with the domain 'successfactors.com'.", "The URL 'career5.successfactors.eu' uses a subdomain of 'successfactors.eu', which is a legitimate domain extension for SAP's SuccessFactors in Europe.", "The use of 'successfactors.eu' is consistent with regional domain practices for global companies like SAP.", "The input fields 'E-Mail-Adresse:' and 'Kennwort:' are typical for login pages, which is expected for a career or HR-related site." ], "riskscore": 2}
URL: career5.successfactors.eu Brands: SAP Input Fields: E-Mail-Adresse:, Kennwort:
URL: https://career5.successfactors.eu/careers?company=SAP Model: claude-3-haiku-20240307	```json { "brands": [ "SAP" ] }
	```json { "brands": [ "SAP" ] }
URL: https://career5.successfactors.eu/careers?company=SAP Model: gpt-4o	```json{ "legit_domain": "successfactors.com", "classification": "wellknown", "reasons": [ "The brand 'SAP' is well-known and associated with enterprise software solutions.", "SuccessFactors is a legitimate SAP product, and the domain 'successfactors.com' is associated with SAP's HR solutions.", "The URL 'career5.successfactors.eu' uses a subdomain of 'successfactors.eu', which is a regional domain for SAP's SuccessFactors service.", "The use of a regional domain ('.eu') is common for global companies like SAP to cater to specific regions.", "The input fields 'E-Mail-Adresse:' and 'Kennwort:' are typical for login pages, which aligns with the purpose of SuccessFactors as an HR platform." ], "riskscore": 2}
URL: career5.successfactors.eu Brands: SAP Input Fields: E-Mail-Adresse:, Kennwort:
URL: https://career5.successfactors.eu/careers?company=SAP Model: gpt-4o	```json{ "legit_domain": "successfactors.com", "classification": "wellknown", "reasons": [ "The brand 'SAP' is well-known and associated with the domain 'successfactors.com'.", "The URL 'career5.successfactors.eu' uses a subdomain of 'successfactors.eu', which is a legitimate domain extension for SAP's SuccessFactors in Europe.", "The URL does not contain any suspicious elements such as misspellings or unusual characters.", "SuccessFactors is a cloud-based human capital management software provider owned by SAP, and the URL structure is consistent with legitimate SAP SuccessFactors URLs." ], "riskscore": 2}
URL: career5.successfactors.eu Brands: SAP Input Fields: E-Mail-Adresse:, Kennwort:

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 21:47:21 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9854373525904485
Encrypted:	false
SSDEEP:	48:8UhbdBTc2HbidAKZdA1uehwiZUklqehAy+3:8UhQZ/y
MD5:	217522E96FF00EB23C9DF2FF69205DC6
SHA1:	AE190AF89F76F4DE3268313E7A34A98EC47541BB
SHA-256:	7202B550BE064AE59B2D7FEFD17933AD17D0B169631265C73A5D89E2A04E5F85
SHA-512:	0EA0464599F3FFF2980358DBDFBEDE9BA1CBB10561F2C994C2E3251FBC40BE7144C9621C1E534E2ECC39F478DDA34B60BF95571892745BB855B6E88F4CD4382D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....H..%......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.IWY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY.....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.VWY.....M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.VWY............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VWY.....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Wc].....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 00:47:21.886087894 CEST	192.168.2.10	1.1.1.1	0x1e5e	Standard query (0)	jobs.sap.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:21.886327028 CEST	192.168.2.10	1.1.1.1	0x77d1	Standard query (0)	jobs.sap.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:23.847933054 CEST	192.168.2.10	1.1.1.1	0x4524	Standard query (0)	rmkcdn.successfactors.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:23.848202944 CEST	192.168.2.10	1.1.1.1	0xf7b	Standard query (0)	rmkcdn.successfactors.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:23.849863052 CEST	192.168.2.10	1.1.1.1	0xd51b	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:23.850095034 CEST	192.168.2.10	1.1.1.1	0x2471	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:23.850461006 CEST	192.168.2.10	1.1.1.1	0xb352	Standard query (0)	contextualnavigation.api.community.sap.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:23.850661993 CEST	192.168.2.10	1.1.1.1	0x5166	Standard query (0)	contextualnavigation.api.community.sap.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:24.660190105 CEST	192.168.2.10	1.1.1.1	0xfc3d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:24.660417080 CEST	192.168.2.10	1.1.1.1	0x3126	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:25.134520054 CEST	192.168.2.10	1.1.1.1	0x77a7	Standard query (0)	contextualnavigation.api.community.sap.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:25.134520054 CEST	192.168.2.10	1.1.1.1	0x316f	Standard query (0)	contextualnavigation.api.community.sap.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:25.471537113 CEST	192.168.2.10	1.1.1.1	0x88ca	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:25.471537113 CEST	192.168.2.10	1.1.1.1	0x98f2	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:27.126313925 CEST	192.168.2.10	1.1.1.1	0x4a8b	Standard query (0)	jobs.sap.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:27.126497030 CEST	192.168.2.10	1.1.1.1	0xf57	Standard query (0)	jobs.sap.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:28.281291962 CEST	192.168.2.10	1.1.1.1	0xf1a8	Standard query (0)	www.sap.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:28.281855106 CEST	192.168.2.10	1.1.1.1	0x3ace	Standard query (0)	www.sap.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:30.826877117 CEST	192.168.2.10	1.1.1.1	0x9d6e	Standard query (0)	www.sap.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:30.827235937 CEST	192.168.2.10	1.1.1.1	0x28e7	Standard query (0)	www.sap.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:32.089324951 CEST	192.168.2.10	1.1.1.1	0xa637	Standard query (0)	cdn.perfdrive.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:32.089603901 CEST	192.168.2.10	1.1.1.1	0x692c	Standard query (0)	cdn.perfdrive.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:32.090107918 CEST	192.168.2.10	1.1.1.1	0x2adb	Standard query (0)	client.px-cloud.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:32.090253115 CEST	192.168.2.10	1.1.1.1	0xe72d	Standard query (0)	client.px-cloud.net	65	IN (0x0001)	false
Oct 24, 2024 00:47:32.876687050 CEST	192.168.2.10	1.1.1.1	0x1549	Standard query (0)	rmkcdn.successfactors.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:32.877180099 CEST	192.168.2.10	1.1.1.1	0xb684	Standard query (0)	rmkcdn.successfactors.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:33.053584099 CEST	192.168.2.10	1.1.1.1	0xd9b7	Standard query (0)	cas.avalon.perfdrive.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:33.053584099 CEST	192.168.2.10	1.1.1.1	0xe8db	Standard query (0)	cas.avalon.perfdrive.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:33.057297945 CEST	192.168.2.10	1.1.1.1	0xe8d1	Standard query (0)	cdn.perfdrive.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:33.057658911 CEST	192.168.2.10	1.1.1.1	0x838	Standard query (0)	cdn.perfdrive.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:33.715620041 CEST	192.168.2.10	1.1.1.1	0x3920	Standard query (0)	stk.px-cloud.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:33.715620041 CEST	192.168.2.10	1.1.1.1	0x8b55	Standard query (0)	stk.px-cloud.net	65	IN (0x0001)	false
Oct 24, 2024 00:47:34.639292002 CEST	192.168.2.10	1.1.1.1	0x72d	Standard query (0)	collector-pxyach2hjb.px-cloud.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:34.639554024 CEST	192.168.2.10	1.1.1.1	0x4330	Standard query (0)	collector-pxyach2hjb.px-cloud.net	65	IN (0x0001)	false
Oct 24, 2024 00:47:34.657124043 CEST	192.168.2.10	1.1.1.1	0x7d7d	Standard query (0)	client.px-cloud.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:34.657254934 CEST	192.168.2.10	1.1.1.1	0x66bb	Standard query (0)	client.px-cloud.net	65	IN (0x0001)	false
Oct 24, 2024 00:47:34.852926016 CEST	192.168.2.10	1.1.1.1	0x5795	Standard query (0)	cas.avalon.perfdrive.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:34.853116989 CEST	192.168.2.10	1.1.1.1	0x85c3	Standard query (0)	cas.avalon.perfdrive.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:35.552961111 CEST	192.168.2.10	1.1.1.1	0xff7	Standard query (0)	collector-pxyach2hjb.px-cloud.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:35.553179026 CEST	192.168.2.10	1.1.1.1	0x80e3	Standard query (0)	collector-pxyach2hjb.px-cloud.net	65	IN (0x0001)	false
Oct 24, 2024 00:47:38.220860958 CEST	192.168.2.10	1.1.1.1	0xbe9d	Standard query (0)	stk.px-cloud.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:38.221065998 CEST	192.168.2.10	1.1.1.1	0x21a5	Standard query (0)	stk.px-cloud.net	65	IN (0x0001)	false
Oct 24, 2024 00:47:39.799565077 CEST	192.168.2.10	1.1.1.1	0xc88f	Standard query (0)	consent.trustarc.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:39.799732924 CEST	192.168.2.10	1.1.1.1	0xe35f	Standard query (0)	consent.trustarc.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:41.100256920 CEST	192.168.2.10	1.1.1.1	0xd3d3	Standard query (0)	consent.trustarc.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:41.100676060 CEST	192.168.2.10	1.1.1.1	0xaf07	Standard query (0)	consent.trustarc.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:43.062951088 CEST	192.168.2.10	1.1.1.1	0x20bd	Standard query (0)	career5.successfactors.eu	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:43.062951088 CEST	192.168.2.10	1.1.1.1	0xc322	Standard query (0)	career5.successfactors.eu	65	IN (0x0001)	false
Oct 24, 2024 00:47:43.851816893 CEST	192.168.2.10	1.1.1.1	0xed5b	Standard query (0)	cdn.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:43.852088928 CEST	192.168.2.10	1.1.1.1	0x6e11	Standard query (0)	cdn.schemaapp.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:45.034475088 CEST	192.168.2.10	1.1.1.1	0x4d38	Standard query (0)	rmkcdn.successfactors.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:45.034889936 CEST	192.168.2.10	1.1.1.1	0xa784	Standard query (0)	rmkcdn.successfactors.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:45.035722017 CEST	192.168.2.10	1.1.1.1	0xf109	Standard query (0)	jobs.sap.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:45.036092043 CEST	192.168.2.10	1.1.1.1	0x6a95	Standard query (0)	jobs.sap.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:45.037529945 CEST	192.168.2.10	1.1.1.1	0xebf4	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:45.037961960 CEST	192.168.2.10	1.1.1.1	0x3dfb	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:45.039697886 CEST	192.168.2.10	1.1.1.1	0x80e1	Standard query (0)	contextualnavigation.api.community.sap.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:45.042589903 CEST	192.168.2.10	1.1.1.1	0x55f6	Standard query (0)	contextualnavigation.api.community.sap.com	65	IN (0x0001)	false
Oct 24, 2024 00:47:46.359518051 CEST	192.168.2.10	1.1.1.1	0x7613	Standard query (0)	career5.successfactors.eu	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:46.360157013 CEST	192.168.2.10	1.1.1.1	0xf3d0	Standard query (0)	career5.successfactors.eu	65	IN (0x0001)	false
Oct 24, 2024 00:47:46.361906052 CEST	192.168.2.10	1.1.1.1	0xd094	Standard query (0)	cdn.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:46.362478018 CEST	192.168.2.10	1.1.1.1	0xe176	Standard query (0)	cdn.schemaapp.com	65	IN (0x0001)	false
Oct 24, 2024 00:48:10.555013895 CEST	192.168.2.10	1.1.1.1	0xb924	Standard query (0)	www-qa.sap.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:10.555152893 CEST	192.168.2.10	1.1.1.1	0xe820	Standard query (0)	www-qa.sap.com	65	IN (0x0001)	false
Oct 24, 2024 00:48:13.768632889 CEST	192.168.2.10	1.1.1.1	0x29c5	Standard query (0)	cdn.perfdrive.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:13.770042896 CEST	192.168.2.10	1.1.1.1	0xebf	Standard query (0)	cdn.perfdrive.com	65	IN (0x0001)	false
Oct 24, 2024 00:48:13.771826029 CEST	192.168.2.10	1.1.1.1	0xcd19	Standard query (0)	client.px-cloud.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:13.772377968 CEST	192.168.2.10	1.1.1.1	0xcc58	Standard query (0)	client.px-cloud.net	65	IN (0x0001)	false
Oct 24, 2024 00:48:14.718451023 CEST	192.168.2.10	1.1.1.1	0x2c76	Standard query (0)	cas.avalon.perfdrive.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:14.718760967 CEST	192.168.2.10	1.1.1.1	0xe506	Standard query (0)	cas.avalon.perfdrive.com	65	IN (0x0001)	false
Oct 24, 2024 00:48:15.555068970 CEST	192.168.2.10	1.1.1.1	0x65a9	Standard query (0)	stk.px-cloud.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:15.555466890 CEST	192.168.2.10	1.1.1.1	0xb17	Standard query (0)	stk.px-cloud.net	65	IN (0x0001)	false
Oct 24, 2024 00:48:15.577790976 CEST	192.168.2.10	1.1.1.1	0xa9ed	Standard query (0)	collector-pxyach2hjb.px-cloud.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:15.578038931 CEST	192.168.2.10	1.1.1.1	0x5e99	Standard query (0)	collector-pxyach2hjb.px-cloud.net	65	IN (0x0001)	false
Oct 24, 2024 00:48:30.552072048 CEST	192.168.2.10	1.1.1.1	0xe514	Standard query (0)	consent.trustarc.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:30.552243948 CEST	192.168.2.10	1.1.1.1	0xd9c7	Standard query (0)	consent.trustarc.com	65	IN (0x0001)	false
Oct 24, 2024 00:48:34.566354036 CEST	192.168.2.10	1.1.1.1	0xc91c	Standard query (0)	cdn.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:34.566354036 CEST	192.168.2.10	1.1.1.1	0x80ac	Standard query (0)	cdn.schemaapp.com	65	IN (0x0001)	false
Oct 24, 2024 00:48:35.845737934 CEST	192.168.2.10	1.1.1.1	0xa1bf	Standard query (0)	data.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:35.846637011 CEST	192.168.2.10	1.1.1.1	0x24c1	Standard query (0)	data.schemaapp.com	65	IN (0x0001)	false
Oct 24, 2024 00:48:37.390019894 CEST	192.168.2.10	1.1.1.1	0xdc7c	Standard query (0)	data.schemaapp.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:37.390019894 CEST	192.168.2.10	1.1.1.1	0x8883	Standard query (0)	data.schemaapp.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 00:47:21.908207893 CEST	1.1.1.1	192.168.2.10	0x1e5e	No error (0)	jobs.sap.com	sap.jobs2web.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:21.908207893 CEST	1.1.1.1	192.168.2.10	0x1e5e	No error (0)	sap.jobs2web.com	RMK12.jobs2web.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:21.908207893 CEST	1.1.1.1	192.168.2.10	0x1e5e	No error (0)	RMK12.jobs2web.com		130.214.193.81	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:21.909744024 CEST	1.1.1.1	192.168.2.10	0x77d1	No error (0)	jobs.sap.com	sap.jobs2web.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:21.909744024 CEST	1.1.1.1	192.168.2.10	0x77d1	No error (0)	sap.jobs2web.com	RMK12.jobs2web.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:23.858388901 CEST	1.1.1.1	192.168.2.10	0x4524	No error (0)	rmkcdn.successfactors.com	wildcard.successfactors.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:23.858490944 CEST	1.1.1.1	192.168.2.10	0xd51b	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:23.858947992 CEST	1.1.1.1	192.168.2.10	0xf7b	No error (0)	rmkcdn.successfactors.com	wildcard.successfactors.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:23.860162973 CEST	1.1.1.1	192.168.2.10	0x2471	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:23.875771046 CEST	1.1.1.1	192.168.2.10	0xb352	No error (0)	contextualnavigation.api.community.sap.com	d2yqaroqdoiwyp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:23.875771046 CEST	1.1.1.1	192.168.2.10	0xb352	No error (0)	d2yqaroqdoiwyp.cloudfront.net		143.204.215.21	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:23.875771046 CEST	1.1.1.1	192.168.2.10	0xb352	No error (0)	d2yqaroqdoiwyp.cloudfront.net		143.204.215.5	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:23.875771046 CEST	1.1.1.1	192.168.2.10	0xb352	No error (0)	d2yqaroqdoiwyp.cloudfront.net		143.204.215.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:23.875771046 CEST	1.1.1.1	192.168.2.10	0xb352	No error (0)	d2yqaroqdoiwyp.cloudfront.net		143.204.215.60	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:23.887592077 CEST	1.1.1.1	192.168.2.10	0x5166	No error (0)	contextualnavigation.api.community.sap.com	d2yqaroqdoiwyp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:24.669217110 CEST	1.1.1.1	192.168.2.10	0xfc3d	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:24.669316053 CEST	1.1.1.1	192.168.2.10	0x3126	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 00:47:25.175041914 CEST	1.1.1.1	192.168.2.10	0x316f	No error (0)	contextualnavigation.api.community.sap.com	d2yqaroqdoiwyp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:25.175041914 CEST	1.1.1.1	192.168.2.10	0x316f	No error (0)	d2yqaroqdoiwyp.cloudfront.net		143.204.215.5	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:25.175041914 CEST	1.1.1.1	192.168.2.10	0x316f	No error (0)	d2yqaroqdoiwyp.cloudfront.net		143.204.215.21	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:25.175041914 CEST	1.1.1.1	192.168.2.10	0x316f	No error (0)	d2yqaroqdoiwyp.cloudfront.net		143.204.215.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:25.175041914 CEST	1.1.1.1	192.168.2.10	0x316f	No error (0)	d2yqaroqdoiwyp.cloudfront.net		143.204.215.60	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:25.176304102 CEST	1.1.1.1	192.168.2.10	0x77a7	No error (0)	contextualnavigation.api.community.sap.com	d2yqaroqdoiwyp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:25.483735085 CEST	1.1.1.1	192.168.2.10	0x88ca	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:25.483838081 CEST	1.1.1.1	192.168.2.10	0x98f2	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:27.134704113 CEST	1.1.1.1	192.168.2.10	0x4a8b	No error (0)	jobs.sap.com	sap.jobs2web.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:27.134704113 CEST	1.1.1.1	192.168.2.10	0x4a8b	No error (0)	sap.jobs2web.com	RMK12.jobs2web.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:27.134704113 CEST	1.1.1.1	192.168.2.10	0x4a8b	No error (0)	RMK12.jobs2web.com		130.214.193.81	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:27.144330025 CEST	1.1.1.1	192.168.2.10	0xf57	No error (0)	jobs.sap.com	sap.jobs2web.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:27.144330025 CEST	1.1.1.1	192.168.2.10	0xf57	No error (0)	sap.jobs2web.com	RMK12.jobs2web.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:28.291790962 CEST	1.1.1.1	192.168.2.10	0xf1a8	No error (0)	www.sap.com	www.sap.com.cn.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:28.320781946 CEST	1.1.1.1	192.168.2.10	0x3ace	No error (0)	www.sap.com	www.sap.com.cn.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:30.855495930 CEST	1.1.1.1	192.168.2.10	0x9d6e	No error (0)	www.sap.com	www.sap.com.cn.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:30.864948034 CEST	1.1.1.1	192.168.2.10	0x28e7	No error (0)	www.sap.com	www.sap.com.cn.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:32.097330093 CEST	1.1.1.1	192.168.2.10	0xa637	No error (0)	cdn.perfdrive.com		130.211.29.114	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:32.097563028 CEST	1.1.1.1	192.168.2.10	0xe72d	No error (0)	client.px-cloud.net	client.px-cloud.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:32.098738909 CEST	1.1.1.1	192.168.2.10	0x2adb	No error (0)	client.px-cloud.net	client.px-cloud.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:32.888694048 CEST	1.1.1.1	192.168.2.10	0xb684	No error (0)	rmkcdn.successfactors.com	wildcard.successfactors.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:32.890125036 CEST	1.1.1.1	192.168.2.10	0x1549	No error (0)	rmkcdn.successfactors.com	wildcard.successfactors.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:33.062452078 CEST	1.1.1.1	192.168.2.10	0xd9b7	No error (0)	cas.avalon.perfdrive.com		35.241.15.240	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:33.075361967 CEST	1.1.1.1	192.168.2.10	0xe8d1	No error (0)	cdn.perfdrive.com		130.211.29.114	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:33.727643967 CEST	1.1.1.1	192.168.2.10	0x3920	No error (0)	stk.px-cloud.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:34.649945974 CEST	1.1.1.1	192.168.2.10	0x72d	No error (0)	collector-pxyach2hjb.px-cloud.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:34.666099072 CEST	1.1.1.1	192.168.2.10	0x66bb	No error (0)	client.px-cloud.net	client.px-cloud.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:34.667284966 CEST	1.1.1.1	192.168.2.10	0x7d7d	No error (0)	client.px-cloud.net	client.px-cloud.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:34.862437963 CEST	1.1.1.1	192.168.2.10	0x5795	No error (0)	cas.avalon.perfdrive.com		35.241.15.240	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:35.354150057 CEST	1.1.1.1	192.168.2.10	0x7c1e	No error (0)	windowsupdatebg.s.llnwi.net		178.79.238.0	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:35.564152956 CEST	1.1.1.1	192.168.2.10	0xff7	No error (0)	collector-pxyach2hjb.px-cloud.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:38.228460073 CEST	1.1.1.1	192.168.2.10	0xbe9d	No error (0)	stk.px-cloud.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:39.808824062 CEST	1.1.1.1	192.168.2.10	0xc88f	No error (0)	consent.trustarc.com		13.225.78.35	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:39.808824062 CEST	1.1.1.1	192.168.2.10	0xc88f	No error (0)	consent.trustarc.com		13.225.78.57	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:39.808824062 CEST	1.1.1.1	192.168.2.10	0xc88f	No error (0)	consent.trustarc.com		13.225.78.26	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:39.808824062 CEST	1.1.1.1	192.168.2.10	0xc88f	No error (0)	consent.trustarc.com		13.225.78.53	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:41.110393047 CEST	1.1.1.1	192.168.2.10	0xd3d3	No error (0)	consent.trustarc.com		13.225.78.53	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:41.110393047 CEST	1.1.1.1	192.168.2.10	0xd3d3	No error (0)	consent.trustarc.com		13.225.78.26	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:41.110393047 CEST	1.1.1.1	192.168.2.10	0xd3d3	No error (0)	consent.trustarc.com		13.225.78.57	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:41.110393047 CEST	1.1.1.1	192.168.2.10	0xd3d3	No error (0)	consent.trustarc.com		13.225.78.35	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:43.073118925 CEST	1.1.1.1	192.168.2.10	0xc322	No error (0)	career5.successfactors.eu	eu-only.successfactors.eu.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:43.086283922 CEST	1.1.1.1	192.168.2.10	0x20bd	No error (0)	career5.successfactors.eu	eu-only.successfactors.eu.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:43.878017902 CEST	1.1.1.1	192.168.2.10	0xed5b	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:43.878017902 CEST	1.1.1.1	192.168.2.10	0xed5b	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.47	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:43.878017902 CEST	1.1.1.1	192.168.2.10	0xed5b	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.93	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:43.878017902 CEST	1.1.1.1	192.168.2.10	0xed5b	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.44	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:43.878017902 CEST	1.1.1.1	192.168.2.10	0xed5b	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:43.880621910 CEST	1.1.1.1	192.168.2.10	0x6e11	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:45.043126106 CEST	1.1.1.1	192.168.2.10	0xa784	No error (0)	rmkcdn.successfactors.com	wildcard.successfactors.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:45.043293953 CEST	1.1.1.1	192.168.2.10	0x4d38	No error (0)	rmkcdn.successfactors.com	wildcard.successfactors.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:45.044696093 CEST	1.1.1.1	192.168.2.10	0xebf4	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:45.046540022 CEST	1.1.1.1	192.168.2.10	0x3dfb	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:45.052326918 CEST	1.1.1.1	192.168.2.10	0x6a95	No error (0)	jobs.sap.com	sap.jobs2web.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:45.052326918 CEST	1.1.1.1	192.168.2.10	0x6a95	No error (0)	sap.jobs2web.com	RMK12.jobs2web.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:45.058154106 CEST	1.1.1.1	192.168.2.10	0xf109	No error (0)	jobs.sap.com	sap.jobs2web.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:45.058154106 CEST	1.1.1.1	192.168.2.10	0xf109	No error (0)	sap.jobs2web.com	RMK12.jobs2web.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:45.058154106 CEST	1.1.1.1	192.168.2.10	0xf109	No error (0)	RMK12.jobs2web.com		130.214.193.81	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:45.058506012 CEST	1.1.1.1	192.168.2.10	0x80e1	No error (0)	contextualnavigation.api.community.sap.com	d2yqaroqdoiwyp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:45.058506012 CEST	1.1.1.1	192.168.2.10	0x80e1	No error (0)	d2yqaroqdoiwyp.cloudfront.net		143.204.215.60	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:45.058506012 CEST	1.1.1.1	192.168.2.10	0x80e1	No error (0)	d2yqaroqdoiwyp.cloudfront.net		143.204.215.5	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:45.058506012 CEST	1.1.1.1	192.168.2.10	0x80e1	No error (0)	d2yqaroqdoiwyp.cloudfront.net		143.204.215.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:45.058506012 CEST	1.1.1.1	192.168.2.10	0x80e1	No error (0)	d2yqaroqdoiwyp.cloudfront.net		143.204.215.21	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:45.070374966 CEST	1.1.1.1	192.168.2.10	0x55f6	No error (0)	contextualnavigation.api.community.sap.com	d2yqaroqdoiwyp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:46.368381977 CEST	1.1.1.1	192.168.2.10	0x7613	No error (0)	career5.successfactors.eu	eu-only.successfactors.eu.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:46.369883060 CEST	1.1.1.1	192.168.2.10	0xf3d0	No error (0)	career5.successfactors.eu	eu-only.successfactors.eu.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:46.381098986 CEST	1.1.1.1	192.168.2.10	0xe176	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:46.390810013 CEST	1.1.1.1	192.168.2.10	0xd094	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:47:46.390810013 CEST	1.1.1.1	192.168.2.10	0xd094	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.93	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:46.390810013 CEST	1.1.1.1	192.168.2.10	0xd094	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:46.390810013 CEST	1.1.1.1	192.168.2.10	0xd094	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.47	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:46.390810013 CEST	1.1.1.1	192.168.2.10	0xd094	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.44	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:50.507148981 CEST	1.1.1.1	192.168.2.10	0xba76	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:47:50.507148981 CEST	1.1.1.1	192.168.2.10	0xba76	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:10.567804098 CEST	1.1.1.1	192.168.2.10	0xb924	No error (0)	www-qa.sap.com	www54-qa.sap.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:48:10.597512960 CEST	1.1.1.1	192.168.2.10	0xe820	No error (0)	www-qa.sap.com	www54-qa.sap.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:48:13.498389959 CEST	1.1.1.1	192.168.2.10	0x9501	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:13.498389959 CEST	1.1.1.1	192.168.2.10	0x9501	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:13.831111908 CEST	1.1.1.1	192.168.2.10	0xcc58	No error (0)	client.px-cloud.net	client.px-cloud.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:48:13.831187963 CEST	1.1.1.1	192.168.2.10	0x29c5	No error (0)	cdn.perfdrive.com		130.211.29.114	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:13.831199884 CEST	1.1.1.1	192.168.2.10	0xcd19	No error (0)	client.px-cloud.net	client.px-cloud.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:48:14.738773108 CEST	1.1.1.1	192.168.2.10	0x2c76	No error (0)	cas.avalon.perfdrive.com		35.241.15.240	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:15.562489033 CEST	1.1.1.1	192.168.2.10	0x65a9	No error (0)	stk.px-cloud.net		34.107.199.61	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:15.585382938 CEST	1.1.1.1	192.168.2.10	0xa9ed	No error (0)	collector-pxyach2hjb.px-cloud.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:30.562033892 CEST	1.1.1.1	192.168.2.10	0xe514	No error (0)	consent.trustarc.com		13.225.78.53	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:30.562033892 CEST	1.1.1.1	192.168.2.10	0xe514	No error (0)	consent.trustarc.com		13.225.78.35	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:30.562033892 CEST	1.1.1.1	192.168.2.10	0xe514	No error (0)	consent.trustarc.com		13.225.78.57	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:30.562033892 CEST	1.1.1.1	192.168.2.10	0xe514	No error (0)	consent.trustarc.com		13.225.78.26	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:33.397257090 CEST	1.1.1.1	192.168.2.10	0x42d	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:33.397257090 CEST	1.1.1.1	192.168.2.10	0x42d	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:34.588807106 CEST	1.1.1.1	192.168.2.10	0xc91c	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:48:34.588807106 CEST	1.1.1.1	192.168.2.10	0xc91c	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.46	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:34.588807106 CEST	1.1.1.1	192.168.2.10	0xc91c	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.47	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:34.588807106 CEST	1.1.1.1	192.168.2.10	0xc91c	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.44	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:34.588807106 CEST	1.1.1.1	192.168.2.10	0xc91c	No error (0)	d3nidttaq34fka.cloudfront.net		13.32.121.93	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:34.591717005 CEST	1.1.1.1	192.168.2.10	0x80ac	No error (0)	cdn.schemaapp.com	d3nidttaq34fka.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:48:35.873997927 CEST	1.1.1.1	192.168.2.10	0x24c1	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:48:35.875766993 CEST	1.1.1.1	192.168.2.10	0xa1bf	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:48:35.875766993 CEST	1.1.1.1	192.168.2.10	0xa1bf	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.22	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:35.875766993 CEST	1.1.1.1	192.168.2.10	0xa1bf	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.127	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:35.875766993 CEST	1.1.1.1	192.168.2.10	0xa1bf	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.39	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:35.875766993 CEST	1.1.1.1	192.168.2.10	0xa1bf	No error (0)	d2unjxrejkh6j9.cloudfront.net		13.35.58.49	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:37.399347067 CEST	1.1.1.1	192.168.2.10	0x8883	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:48:37.428859949 CEST	1.1.1.1	192.168.2.10	0xdc7c	No error (0)	data.schemaapp.com	d2unjxrejkh6j9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 00:48:37.428859949 CEST	1.1.1.1	192.168.2.10	0xdc7c	No error (0)	d2unjxrejkh6j9.cloudfront.net		3.165.206.110	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:37.428859949 CEST	1.1.1.1	192.168.2.10	0xdc7c	No error (0)	d2unjxrejkh6j9.cloudfront.net		3.165.206.6	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:37.428859949 CEST	1.1.1.1	192.168.2.10	0xdc7c	No error (0)	d2unjxrejkh6j9.cloudfront.net		3.165.206.96	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:37.428859949 CEST	1.1.1.1	192.168.2.10	0xdc7c	No error (0)	d2unjxrejkh6j9.cloudfront.net		3.165.206.101	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:37.905302048 CEST	1.1.1.1	192.168.2.10	0x477e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 24, 2024 00:48:37.905302048 CEST	1.1.1.1	192.168.2.10	0x477e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:47:20 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:47:20 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:47:20 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 21 Oct 2024 13:21:21 GMT ETag: "0x8DCF1D34132B902" x-ms-request-id: 04de7e24-801e-008f-0e20-242c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224720Z-16849878b786wvrz321uz1cknn00000006v000000000hf31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:47:20 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-23 22:47:20 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-23 22:47:20 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-23 22:47:20 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-23 22:47:20 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-23 22:47:20 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-23 22:47:20 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-23 22:47:20 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-23 22:47:20 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-23 22:47:20 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:47:21 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:47:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:47:21 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 331d1c77-401e-0029-354e-229b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224721Z-16849878b786vsxz21496wc2qn00000006z00000000095v6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:47:21 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Windows Analysis Report
https://jobs.sap.com/job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:47:21 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:47:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:47:21 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 394abe64-001e-0028-050b-22c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224721Z-16849878b786wvrz321uz1cknn00000006yg000000003g31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:47:21 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:47:21 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:47:21 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:47:21 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224721Z-16849878b78c5zx4gw8tcga1b400000006t0000000007wm1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:47:21 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:47:21 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:47:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:47:21 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 626c88a9-b01e-003d-54f3-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224721Z-15b8d89586fmhkw4gksnr1w3ds0000000dd000000000kgwn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:47:21 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:47:21 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:47:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:47:21 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 084b2ff6-801e-0067-68fd-24fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224721Z-r197bdfb6b4ld6jc5asqwvvz0w00000000v0000000007yye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:47:21 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:47:22 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:47:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:47:22 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f5ab32e4-501e-00a3-0f09-25c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224722Z-r197bdfb6b4rkc6mhwyt3e61pc00000000r000000000s7py x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:47:22 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:47:22 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:47:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:47:22 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 83a5bbbc-601e-005c-5bad-24f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224722Z-15b8d89586fqj7k5uht6e8nnew0000000d1g00000000a86x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:47:22 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:47:22 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:47:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:47:22 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 8d314a1c-701e-0097-3ae5-21b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224722Z-16849878b7862vlcc7m66axrs000000006ug00000000hpve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:47:22 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:47:22 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:47:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:47:22 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 0a92035d-201e-00aa-57da-213928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224722Z-16849878b788tnsxzb2smucwdc00000006yg000000003h64 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-23 22:47:22 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:47:22 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-23 22:47:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 22:47:22 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241023T224722Z-15b8d89586fqckbz0ssbuzzp1n00000001b0000000007x0y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-23 22:47:22 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Timestamp	Bytes transferred	Direction	Data
2024-10-23 22:47:22 UTC	732	OUT	GET /job/Walldorf-Technology-Consultant-ABAP-Developer-%28wmd%29-69190/1109668201/ HTTP/1.1 Host: jobs.sap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 22:47:23 UTC	1315	IN	HTTP/1.1 200 200 date: Wed, 23 Oct 2024 22:47:23 GMT server: Apache strict-transport-security: max-age=31536000; includeSubDomains set-cookie: JSESSIONID=w8~E487EDF1810874D522472F79182BE51F; Path=/; Secure; HttpOnly referrer-policy: strict-origin-when-cross-origin content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' .contextualnavigation.api.community.sap.com .perfdrive.com .sap.com .px-cloud.net data: https: https://localhost http://localhost .sap.com rmk-map-12.jobs2web.com rmkcdn.successfactors.com .sapsf.eu .sapsf.com .successfactors.com .successfactors.eu .sapsf.cn .qualtrics.com d3537c9nadzkz1.cloudfront.net .linkedin.com .googleapis.com .gstatic.com .googletagmanager.com .google-analytics.com .googlesyndication.com .tagmanager.google.com .youtube.com .youtu.be .youtube-nocookie.com .vimeo.com vimeo.com .vimeocdn.com .wistia.net .pinterest.com .xing-share.com .xing.com .facil-iti.com .moatads.com .ytimg.com .twitter.com .facebook.com .facebook.net .doubleclick.net .adobedtm.com .adobe.com; frame-ancestors 'self' https://career5.successfactors.eu x-frame-options: SAMEORIGIN content-type: text/html;charset=UTF-8 x-content-type-options: nosniff transfer-encoding: chunked x-xss-protection: 1; mode=block connection: close
2024-10-23 22:47:23 UTC	8192	IN	Data Raw: 31 46 46 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 74 6d 6c 35 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 64 65 2d 44 45 22 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 0a 20 20 20 20 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: 1FF8<!DOCTYPE html><html class="html5" xml:lang="de-DE" lang="de-DE" xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /> <meta http-equiv="Content-Type" content=
2024-10-23 22:47:23 UTC	8192	IN	Data Raw: 31 46 46 38 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 75 73 74 6f 6d 2d 68 65 61 64 65 72 2d 72 6f 77 2d 63 6f 6e 74 65 6e 74 20 63 75 73 74 6f 6d 2d 68 65 61 64 65 72 2d 63 6f 6c 75 6d 6e 2d 31 20 63 6f 6c 2d 78 73 2d 34 20 63 6f 6e 74 65 6e 74 2d 61 6c 69 67 6e 2d 6c 65 66 74 20 63 6f 6e 74 65 6e 74 2d 61 6c 69 67 6e 2d 74 6f 70 20 62 61 63 6b 67 72 6f 75 6e 64 63 6f 6c 6f 72 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 3a 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 20 68 65 69 67 68 74 3a 70 78 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 75 73 74 6f 6d 2d 68 65 61 64 65 72 2d 72 6f 77 2d 63 6f Data Ascii: 1FF8<div class="custom-header-row-content custom-header-column-1 col-xs-4 content-align-left content-align-top backgroundcolor" style="padding:0px 0px 0px 0px; height:px;"> </div> <div class="custom-header-row-co
2024-10-23 22:47:23 UTC	8192	IN	Data Raw: 31 46 46 38 0d 0a 72 35 33 64 32 30 35 64 65 65 36 39 32 33 66 61 36 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 3a 32 30 70 78 20 30 70 78 20 30 70 78 20 30 70 78 3b 20 68 65 69 67 68 74 3a 34 30 70 78 3b 22 3e 0a 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 75 73 74 6f 6d 2d 68 65 61 64 65 72 2d 73 69 67 6e 69 6e 4c 61 6e 67 75 61 67 65 20 62 61 63 6b 67 72 6f 75 6e 64 63 6f 6c 6f 72 35 33 64 32 30 35 64 65 65 36 39 32 33 66 61 36 22 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 6e 65 72 20 6c 69 6d 69 74 77 69 64 74 68 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 73 22 20 72 6f 6c 65 3d 22 6c 69 73 Data Ascii: 1FF8r53d205dee6923fa6" style="padding:20px 0px 0px 0px; height:40px;"> <div class="custom-header-signinLanguage backgroundcolor53d205dee6923fa6" style="padding: 10px;"> <div class="inner limitwidth"> <div class="links" role="lis
2024-10-23 22:47:23 UTC	8192	IN	Data Raw: 31 46 46 38 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 70 74 69 6f 6e 73 46 61 63 65 74 20 63 6f 6c 2d 6d 64 2d 34 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 69 64 3d 22 6f 70 74 69 6f 6e 73 46 61 63 65 74 73 44 44 5f 63 6f 75 6e 74 72 79 5f 6c 61 62 65 6c 22 20 63 6c 61 73 73 3d 22 6f 70 74 69 6f 6e 73 46 61 63 65 74 Data Ascii: 1FF8 </div> <div class="optionsFacet col-md-4"> <div class="row"> <label id="optionsFacetsDD_country_label" class="optionsFacet
2024-10-23 22:47:23 UTC	8192	IN	Data Raw: 31 46 46 38 0d 0a 6d 6d 65 6e 61 72 62 65 69 74 20 75 6e 64 20 67 65 67 65 6e 73 65 69 74 69 67 65 20 55 6e 74 65 72 73 74 c3 bc 74 7a 75 6e 67 20 69 6d 20 54 65 61 6d 20 73 6f 77 69 65 20 61 75 66 20 4c 65 72 6e 65 6e 20 75 6e 64 20 45 6e 74 77 69 63 6b 6c 75 6e 67 2e 20 50 65 72 73 c3 b6 6e 6c 69 63 68 65 20 42 65 69 74 72 c3 a4 67 65 20 77 65 72 64 65 6e 20 61 6e 65 72 6b 61 6e 6e 74 2c 20 75 6e 64 20 64 75 20 68 61 73 74 20 64 69 65 20 57 61 68 6c 20 7a 77 69 73 63 68 65 6e 20 76 65 72 73 63 68 69 65 64 65 6e 65 6e 20 5a 75 73 61 74 7a 6c 65 69 73 74 75 6e 67 65 6e 2e 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0d 0a 0d 0a 3c 70 3e c2 a0 3c 2f 70 3e 0d 0a 0d 0a 3c 70 3e 3c 73 70 61 6e 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 Data Ascii: 1FF8mmenarbeit und gegenseitige Untersttzung im Team sowie auf Lernen und Entwicklung. Persnliche Beitrge werden anerkannt, und du hast die Wahl zwischen verschiedenen Zusatzleistungen.</span></span></p><p></p><p><span style="font-size:1
2024-10-23 22:47:24 UTC	8192	IN	Data Raw: 31 46 46 38 0d 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6a 6f 62 6c 61 79 6f 75 74 74 6f 6b 65 6e 2d 6c 61 62 65 6c 22 3e 4b 61 72 72 69 65 72 65 73 74 61 74 75 73 3a c2 a0 0a 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 0a 20 20 20 20 3c 73 70 61 6e 20 78 6d 6c 3a 6c 61 6e 67 3d 22 64 65 2d 44 45 22 20 6c 61 6e 67 3d 22 64 65 2d 44 45 22 20 64 61 74 61 2d 63 61 72 65 65 72 73 69 74 65 2d 70 72 6f 70 65 72 74 79 69 64 3d 22 63 75 73 74 6f 6d 66 69 65 6c 64 33 22 20 63 6c 61 73 73 3d 22 72 74 6c 74 65 78 74 61 6c 69 67 6e 65 6c 69 67 69 62 6c 65 22 3e 42 65 72 75 66 73 65 72 66 61 68 72 65 6e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f Data Ascii: 1FF8 <span class="joblayouttoken-label">Karrierestatus: </span> <span xml:lang="de-DE" lang="de-DE" data-careersite-propertyid="customfield3" class="rtltextaligneligible">Berufserfahren </span> </div> </
2024-10-23 22:47:24 UTC	8192	IN	Data Raw: 31 46 46 38 0d 0a 73 3d 24 28 22 23 6a 6f 62 2d 64 65 74 61 69 6c 73 22 29 2c 65 6c 65 6d 65 6e 74 73 54 6f 4d 6f 76 65 49 6e 4a 6f 62 73 3d 28 24 28 22 2e 6a 6f 62 44 69 73 70 6c 61 79 20 2e 6a 6f 62 22 29 2e 61 64 64 43 6c 61 73 73 28 22 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 22 29 2c 24 28 22 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 22 29 2e 61 66 74 65 72 28 6a 6f 62 44 65 74 69 6c 73 29 2c 24 28 22 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 2d 61 72 65 61 22 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 6d 64 2d 37 20 63 6f 6c 2d 6c 67 2d 38 20 70 78 2d 30 22 29 2c 24 28 6a 6f 62 44 65 74 69 6c 73 29 2e 61 64 64 43 6c 61 73 73 28 22 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 6d 64 2d 34 20 63 6f 6c Data Ascii: 1FF8s=$("#job-details"),elementsToMoveInJobs=($(".jobDisplay .job").addClass("main-content-area"),$(".main-content-area").after(jobDetils),$(".main-content-area").addClass("col-xs-12 col-md-7 col-lg-8 px-0"),$(jobDetils).addClass("col-xs-12 col-md-4 col
2024-10-23 22:47:24 UTC	16314	IN	Data Raw: 33 46 42 32 0d 0a 22 30 20 30 20 33 32 20 33 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 69 64 3d 22 69 6e 73 74 61 67 72 61 6d 31 22 20 64 3d 22 4d 32 30 2e 34 34 35 20 35 68 2d 38 2e 38 39 31 41 36 2e 35 35 39 20 36 2e 35 35 39 20 30 20 30 20 30 20 35 20 31 31 2e 35 35 34 76 38 2e 38 39 31 41 36 2e 35 35 39 20 36 2e 35 35 39 20 30 20 30 20 30 20 31 31 2e 35 35 34 20 32 37 68 38 2e 38 39 31 61 36 2e 35 36 20 36 2e 35 36 20 30 20 30 20 30 20 36 2e 35 35 34 2d 36 2e 35 35 35 76 2d 38 2e 38 39 31 41 36 2e 35 35 37 20 36 2e 35 35 37 20 30 20 30 20 30 20 32 30 2e 34 34 35 20 35 7a 6d 34 2e 33 34 32 20 31 35 2e 34 34 35 61 34 2e 33 34 33 20 34 2e 33 34 33 20 30 20 30 20 31 Data Ascii: 3FB2"0 0 32 32" xmlns="http://www.w3.org/2000/svg"><path id="instagram1" d="M20.445 5h-8.891A6.559 6.559 0 0 0 5 11.554v8.891A6.559 6.559 0 0 0 11.554 27h8.891a6.56 6.56 0 0 0 6.554-6.555v-8.891A6.557 6.557 0 0 0 20.445 5zm4.342 15.445a4.343 4.343 0 0 1
2024-10-23 22:47:24 UTC	8254	IN	Data Raw: 32 30 33 36 0d 0a 65 6d 6f 76 65 28 29 2c 24 28 22 2e 6a 6f 62 73 2d 75 69 2d 73 65 61 72 63 68 2d 6c 6f 63 61 74 69 6f 6e 73 65 61 72 63 68 20 73 70 61 6e 22 29 2e 72 65 6d 6f 76 65 28 29 2c 24 28 22 23 73 65 61 72 63 68 2d 77 72 61 70 70 65 72 20 2e 72 64 2d 73 65 61 72 63 68 62 75 74 74 6f 6e 22 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 22 2e 6a 6f 62 73 2d 75 69 2d 73 65 61 72 63 68 2d 6c 6f 63 61 74 69 6f 6e 73 65 61 72 63 68 22 29 2c 24 28 22 2e 6a 6f 62 73 2d 75 69 2d 73 65 61 72 63 68 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 64 2d 73 65 61 72 63 68 62 75 74 74 6f 6e 22 29 2e 61 74 74 72 28 22 63 6c 61 73 73 22 2c 22 6a 6f 62 73 2d 75 69 2d 73 65 61 72 63 68 2d 73 65 61 72 63 68 62 75 74 74 6f 6e 20 63 6f 6c 2d 78 73 2d 31 32 20 63 6f 6c 2d 6d 64 2d Data Ascii: 2036emove(),$(".jobs-ui-search-locationsearch span").remove(),$("#search-wrapper .rd-searchbutton").insertAfter(".jobs-ui-search-locationsearch"),$(".jobs-ui-search-container .rd-searchbutton").attr("class","jobs-ui-search-searchbutton col-xs-12 col-md-
2024-10-23 22:47:24 UTC	10488	IN	Data Raw: 32 38 45 42 0d 0a 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 6c 61 73 73 3d 22 6b 65 65 70 73 63 72 69 70 74 22 3e 69 6d 70 6f 72 74 20 7b 20 66 65 74 63 68 53 33 45 6e 74 72 69 65 73 20 7d 20 66 72 6f 6d 20 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 6e 61 76 69 67 61 74 69 6f 6e 2e 61 70 69 2e 63 6f 6d 6d 75 6e 69 74 79 2e 73 61 70 2e 63 6f 6d 2f 73 74 61 74 69 63 2f 31 2e 33 35 2e 32 2f 69 6e 64 65 78 2e 6a 73 22 3b 0a 76 61 72 20 65 3d 67 65 74 50 61 67 65 4c 61 6e 67 28 29 3b 31 3d 3d 65 2e 69 73 4c 61 6e 67 75 61 67 65 43 6f 64 65 26 26 31 3d 3d 65 2e 61 74 74 72 69 62 75 74 65 45 78 69 73 74 73 3f 28 22 7a 68 2d 63 6e 22 3d 3d 65 2e 61 74 74 72 69 62 75 74 65 43 6f 64 65 7c 7c 22 6a 61 2d 6a 70 22 3d 3d 65 2e 61 74 74 72 Data Ascii: 28EBipt type="module" class="keepscript">import { fetchS3Entries } from "https://contextualnavigation.api.community.sap.com/static/1.35.2/index.js";var e=getPageLang();1==e.isLanguageCode&&1==e.attributeExists?("zh-cn"==e.attributeCode\|\|"ja-jp"==e.attr