Edit tour

Windows Analysis Report
https://knowledgebase.campaignagent.com.au/en/articles/481

Overview

General Information

Sample URL:	https://knowledgebase.campaignagent.com.au/en/articles/481
Analysis ID:	1545549
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3792 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1916,i,13547063157224830196,10157729876826573636,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://knowledgebase.campaignagent.com.au/en/articles/481" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /v1/events HTTP/1.1Host: events.elev.ioConnection: keep-aliveContent-Length: 675sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;charset=UTF-8Accept: */*Origin: https://knowledgebase.campaignagent.com.auSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://knowledgebase.campaignagent.com.au/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Wed, 30 Oct 2024 16:10:11 GMTx-amz-apigw-id: AeMPiGDqIAMEvEw=x-amzn-RequestId: b7f9070c-5cc8-41d6-98aa-d68de807d479x-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 95ff0d830848b741160e24f658d880e8.cloudfront.net (CloudFront)X-Amz-Cf-Pop: AMS58-P1X-Amz-Cf-Id: ivQwwNuyHfKA8bs1R3C9spe6tQUi-0Q-9ZTt9YU8h-na0KoFmj68Ug==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Wed, 30 Oct 2024 16:10:34 GMTx-amz-apigw-id: AeMTRGzsoAMEPfg=x-amzn-RequestId: 47bc211c-e6ae-4bbd-b60a-fdd49fc5e0b4x-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 7b082441eaf35142a6f7785a74fb7a50.cloudfront.net (CloudFront)X-Amz-Cf-Pop: AMS58-P1X-Amz-Cf-Id: UesfQTnAICfLJSXJRkeyNtTg4-hwNK_3aIUCrFF_tkuxKL7BUqqV5Q==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Wed, 30 Oct 2024 16:10:55 GMTx-amz-apigw-id: AeMWhEiDoAMEutg=x-amzn-RequestId: f3ba91f1-7d15-4a97-8463-ee204fa5815dx-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 a4f5633e78f92f983940236e96220232.cloudfront.net (CloudFront)X-Amz-Cf-Pop: AMS58-P1X-Amz-Cf-Id: SoCkfWkvuB1CiBYBwNEI3S3Rho3_MHvYYJx9lO_FOIpG1e8HewbhdQ==
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Wed, 30 Oct 2024 16:11:08 GMTx-amz-apigw-id: AeMYkH8CIAMEM4w=x-amzn-RequestId: 139bef6b-deb4-4aff-9a28-6aca01a7e4f3x-amzn-ErrorType: MissingAuthenticationTokenExceptionX-Cache: Error from cloudfrontVia: 1.1 b10069b378f22e10f0382c21d0a9578e.cloudfront.net (CloudFront)X-Amz-Cf-Pop: AMS58-P1X-Amz-Cf-Id: d0ICvqwxEdwDYEH3niCYoxmwxgNKIPespBsohGX12RvpFyeNIl1aNQ==

Source: chromecache_302.2.dr, chromecache_292.2.dr	String found in binary or memory: http://localhost:8080/elevio-main.js
Source: chromecache_267.2.dr	String found in binary or memory: http://www.imagemagick.org
Source: chromecache_302.2.dr, chromecache_292.2.dr	String found in binary or memory: https://cdn.elev.io/sdk/main/v4/1714634144204/elevio-main.js
Source: chromecache_270.2.dr	String found in binary or memory: https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages
Source: chromecache_270.2.dr, chromecache_240.2.dr, chromecache_232.2.dr	String found in binary or memory: https://player.vimeo.com/NOTICE.txt
Source: chromecache_302.2.dr, chromecache_292.2.dr	String found in binary or memory: https://static.elev.io/js/widget.js
Source: chromecache_309.2.dr, chromecache_280.2.dr	String found in binary or memory: https://vimeo.com/ablincoln/vuid

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49383 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49300
Source: unknown	Network traffic detected: HTTP traffic on port 49406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49438 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49395 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49346
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49345
Source: unknown	Network traffic detected: HTTP traffic on port 49288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49344
Source: unknown	Network traffic detected: HTTP traffic on port 49431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49340
Source: unknown	Network traffic detected: HTTP traffic on port 49242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49339
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49334
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49330
Source: unknown	Network traffic detected: HTTP traffic on port 49316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49329
Source: unknown	Network traffic detected: HTTP traffic on port 49230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49327
Source: unknown	Network traffic detected: HTTP traffic on port 49219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49323
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49320
Source: unknown	Network traffic detected: HTTP traffic on port 49391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49319
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49318
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49316
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49389
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49388
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49385
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49384
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49383
Source: unknown	Network traffic detected: HTTP traffic on port 49393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49381
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49380
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49379
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49378
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49377
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49375
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49371
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49370
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49364
Source: unknown	Network traffic detected: HTTP traffic on port 49408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49360
Source: unknown	Network traffic detected: HTTP traffic on port 49209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49350
Source: unknown	Network traffic detected: HTTP traffic on port 49314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49349
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49298
Source: unknown	Network traffic detected: HTTP traffic on port 49297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49295
Source: unknown	Network traffic detected: HTTP traffic on port 49319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49293
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49292
Source: unknown	Network traffic detected: HTTP traffic on port 49354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49291
Source: unknown	Network traffic detected: HTTP traffic on port 49194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49289
Source: unknown	Network traffic detected: HTTP traffic on port 49330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49280
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49275
Source: unknown	Network traffic detected: HTTP traffic on port 49182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49270
Source: unknown	Network traffic detected: HTTP traffic on port 49423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49425 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49401 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49459 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49403 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49398 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49413 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49425
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49423
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49422
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49421
Source: unknown	Network traffic detected: HTTP traffic on port 49269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49420
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49419
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49418
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49417
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49416
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49414
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49413
Source: unknown	Network traffic detected: HTTP traffic on port 49350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49412
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49411
Source: unknown	Network traffic detected: HTTP traffic on port 49163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49410
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49408

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49260 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49449 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@22/203@48/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1916,i,13547063157224830196,10157729876826573636,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://knowledgebase.campaignagent.com.au/en/articles/481"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1916,i,13547063157224830196,10157729876826573636,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
dy8wyl92rt4zl.cloudfront.net	18.66.112.64	true	false	unknown
player-telemetry.vimeo.com	34.120.202.204	true	false	unknown
events.elev.io	18.66.102.98	true	false	unknown
campaignagent.elevio.help	54.157.241.171	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
vimeo.com	162.159.138.60	true	false	unknown
vimeo.map.fastly.net	151.101.192.217	true	false	unknown
d21e3rlvpsyo06.cloudfront.net	18.172.112.126	true	false	unknown
fresnel.vimeocdn.com	34.120.202.204	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
ipa-alb-20180423-772954875.us-east-1.elb.amazonaws.com	23.20.125.226	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
vimeo-video.map.fastly.net	151.101.66.109	true	false	unknown
i.vimeocdn.com	unknown	unknown	false	unknown
ipa.elev.io	unknown	unknown	false	unknown
knowledgebase.campaignagent.com.au	unknown	unknown	false	unknown
f.vimeocdn.com	unknown	unknown	false	unknown
player.vimeo.com	unknown	unknown	false	unknown
cdn.campaignagent.com.au	unknown	unknown	false	unknown
cdn.elev.io	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/qnOdkoEwzZ9_pDN75XBm7rqCquXQeJzU3a1gMuaW96w/2023-01-31_14-14-49-en4.gif	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/i-dOFdRu-5Z6K058LnScNrFMZJjVPBk9NionMQyJwuE/Screenshot%202023-11-09%20135049-cbc.png	false	unknown
https://cdn.elev.io/kb/v2/deployed/5de5c1e688134/4db52de3-999b-4de9-a518-4952820c5cb9/script-snippet.js	false	unknown
https://cdn.elev.io/file/uploads/Vj0zDk7x-MmbNLYp2XJ-R0-Sd74MvbRj1kcZvrmLBvI/oNRWBZGVOWmacmBPZOvCpSMsbIXF0D4ASzV_6l0me80/1658999444303-V14.png	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/2fww_btJ423Vy88SJ2Q5IWKLROZRak18D6mq2-1MAPw/2023-11-09_12-55-13-4-4.png	false	unknown
https://cdn.elev.io/sdk/fonts/elevio-noto-sans-400.woff	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/hR5TK0WJDElXaydWj6c7Hr8StVa1MQ9k56fzm4T4zks/Add%20Payment%20Portal-row.png	false	unknown
https://f.vimeocdn.com/p/4.39.0/js/player.module.js	false	unknown
https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/localisation/en/lang.js	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/emojione/2.0.1/assets/svg/1f4a1.svg	false	unknown
https://cdn.elev.io/sdk/fonts/elevio-noto-sans-700.woff	false	unknown
https://cdn.elev.io/sdk/icons/v9/book.svg	false	unknown
https://cdn.elev.io/file/uploads/Vj0zDk7x-MmbNLYp2XJ-R0-Sd74MvbRj1kcZvrmLBvI/5WV1IdkfdIRSh2GnX5ERFQi0f9Ml4RTgpv_7U6USAIw/1658999266632-C28.png	false	unknown
https://cdn.elev.io/sdk/icons/v9/envelope.svg	false	unknown
https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request	false	unknown
https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/assets/opensans/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6FxZCJgg.woff2	false	unknown
https://cdn.elev.io/sdk/icons/v9/money.svg	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/VJG8pQvtfxy-4L_vWcLZtn7sEL4JAlB8TQIfJh_CX78/2023-11-09_13-16-20-hFg.png	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/5nReMwCINwOpxQkU4s0_Uigmf9pzJSvfep5v48N6vx4/2023-11-09_13-17-09-xdI.png	false	unknown
https://cdn.elev.io/file/uploads/Vj0zDk7x-MmbNLYp2XJ-R0-Sd74MvbRj1kcZvrmLBvI/NOiNZlFdEYs28e66Nva66GyaY0cWzsRVrw0-SFuAe4I/1659597177718-pRU.gif	false	unknown
https://ipa.elev.io/api/settings/5de5c1e688134/en?is_init_load=true&loggedin_only=false&first_name=null&last_name=null&registered_at=null&previewMode=false&url=https%3A%2F%2Fknowledgebase.campaignagent.com.au%2Fen%2Farticles%2F419-how-to-create-a-vpapay-payment-request	false	unknown
https://i.vimeocdn.com/video/1892190581-734b4cdf427d7ff090c75a960ecec9f333f75a48034b47b2829e7b0d9731ace6-d?mw=700&mh=394	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/JjCi9TejR6FXv7qK_NpJQvPUiIhZ6RlxSHdQoMDRRKk/2023-11-09_13-19-22-Ctg.png	false	unknown
https://cdn.campaignagent.com.au/CA_LinkedIn_Banner.png	false	unknown
https://cdn.elev.io/sdk/main/v4/1714634144204/elevio-main.js	false	unknown
https://cdn.elev.io/kb/v2/deployed/5de5c1e688134/4db52de3-999b-4de9-a518-4952820c5cb9/localisation/en/lang-snippet.js	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/4ByF9R8N3k6z57Jsrc3TdK2u4BxGr_sokO7PVgbccag/portal2-t-Y.png	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/OsOFUPxmwvAhgpYBuNj_megWSBxvENU2DZ1s34TBiFk/1699504624427-AFU.png	false	unknown
https://f.vimeocdn.com/p/4.39.0/js/vendor.module.js	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/-8GkZpBDzRJeT8NDENojkWJfl3ZVC-XMk-FdjmaA86A/2023-11-09_12-43-37-KEk.png	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/HjvnNW_LUVv7Zb9lUM5inV8w7PeVZY8CvZU8HS-R9WA/2023-01-31_14-17-53-KQ8.png	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/rgcyKZcN1PvxWAPgFPXL1ZupNFF8O1lPQwRLMchKsts/2023-11-09_12-34-21-5T8.gif	false	unknown
https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/script.js	false	unknown
https://cdn.elev.io/file/uploads/Vj0zDk7x-MmbNLYp2XJ-R0-Sd74MvbRj1kcZvrmLBvI/78zqh-92XW-1-Eh_9R95xE2Wk-gaTMK2OqoTqoM0Cks/1658999116403-PyU.png	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/p2NnZFkS1zXyQJXovJXAEPQpYFskgfARZhd9igox-fk/pdf3-uXQ.png	false	unknown
https://cdn.elev.io/sdk/bootloader/v4/elevio-bootloader.js?cid=5de5c1e688134	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/YtZt_9imFpF9QW4vXmM-KZd1N5cnE9jd6Ns1SyyTUQ4/Add%20Payment%20AI%20Tool-3Xc.png	false	unknown
https://player-telemetry.vimeo.com/add/player-stats?beacon=1&session-id=2b3550ab29d6607ce617cc564fbd135cc5c0d4f31730304667	false	unknown
https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/styles.css	false	unknown
https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/assets/favicon.ico	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/bA6_r0z7PmduA_pjPx1M6HWUeYsXkJzt-aD9tot8sKM/2023-11-09_12-50-22-jdU.png	false	unknown
https://knowledgebase.campaignagent.com.au/en/articles/481	false	unknown
https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/yvX_Qddf0AGmj1Pknk_iDCLGt8hEYZCPdUh1RVh8pZA/2023-11-09_14-10-13-xWg.png	false	unknown
https://events.elev.io/v1/events	false	unknown
https://ipa.elev.io/api/settings/5de5c1e688134/en?is_init_load=true&loggedin_only=false&first_name=null&last_name=null&registered_at=null&previewMode=false&url=https%3A%2F%2Fknowledgebase.campaignagent.com.au%2Fen%2Farticles%2F481	false	unknown
https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/assets/opensans/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2	false	unknown
https://cdn.elev.io/sdk/icons/v9/arrow-circle-right.svg	false	unknown
https://f.vimeocdn.com/p/4.39.0/css/player.css	false	unknown
https://player-telemetry.vimeo.com/add/player-stats?beacon=1&session-id=19ad24ef5f4ef5a397f3900d32666c93917554191730304631	false	unknown
https://f.vimeocdn.com/js_opt/modules/utils/vuid.min.js	false	unknown
https://cdn.elev.io/kb/v2/deployed/5de5c1e688134/4db52de3-999b-4de9-a518-4952820c5cb9/styles-snippet.css	false	unknown
https://i.vimeocdn.com/video/1892190581-734b4cdf427d7ff090c75a960ecec9f333f75a48034b47b2829e7b0d9731ace6-d?mw=80&q=85	false	unknown
https://player-telemetry.vimeo.com/add/player-stats?beacon=1&session-id=cbd69856355231e104629f1e6f7161c5d46a55111730304652	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://www.imagemagick.org	chromecache_267.2.dr	false	unknown
https://player.vimeo.com/NOTICE.txt	chromecache_270.2.dr, chromecache_240.2.dr, chromecache_232.2.dr	false	unknown
https://static.elev.io/js/widget.js	chromecache_302.2.dr, chromecache_292.2.dr	false	unknown
http://localhost:8080/elevio-main.js	chromecache_302.2.dr, chromecache_292.2.dr	false	unknown
https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages	chromecache_270.2.dr	false	unknown
https://vimeo.com/ablincoln/vuid	chromecache_309.2.dr, chromecache_280.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.66.102.98	events.elev.io	United States	3	MIT-GATEWAYSUS	false
18.66.112.115	unknown	United States	3	MIT-GATEWAYSUS	false
23.20.125.226	ipa-alb-20180423-772954875.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.172.112.53	unknown	United States	3	MIT-GATEWAYSUS	false
18.66.112.79	unknown	United States	3	MIT-GATEWAYSUS	false
54.152.108.239	unknown	United States	14618	AMAZON-AESUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
18.172.112.126	d21e3rlvpsyo06.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.192.217	vimeo.map.fastly.net	United States	54113	FASTLYUS	false
34.120.202.204	player-telemetry.vimeo.com	United States	15169	GOOGLEUS	false
151.101.130.109	unknown	United States	54113	FASTLYUS	false
18.66.112.64	dy8wyl92rt4zl.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.66.109	vimeo-video.map.fastly.net	United States	54113	FASTLYUS	false
54.157.241.171	campaignagent.elevio.help	United States	14618	AMAZON-AESUS	false
18.238.243.57	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545549
Start date and time:	2024-10-30 17:08:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://knowledgebase.campaignagent.com.au/en/articles/481
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@22/203@48/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 216.58.206.78, 173.194.76.84, 34.104.35.123, 184.28.90.27, 142.250.186.74, 142.250.184.202, 142.250.185.234, 172.217.16.138, 142.250.74.202, 142.250.185.170, 142.250.185.106, 216.58.206.42, 142.250.185.138, 142.250.181.234, 142.250.185.202, 172.217.18.10, 142.250.186.106, 216.58.212.170, 142.250.186.138, 142.250.186.42, 192.229.221.95, 52.149.20.212, 13.95.31.18, 93.184.221.240, 13.85.23.206, 20.242.39.171, 162.159.128.61, 162.159.138.60, 142.250.185.163, 142.250.186.99, 142.250.185.227
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, e16604.g.akamaiedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, prod.fs.microsoft.com.akadns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, player.vimeo.com.cdn.cloudflare.net, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://knowledgebase.campaignagent.com.au/en/articles/481

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 451, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	43975
Entropy (8bit):	7.974034917006744
Encrypted:	false
SSDEEP:	768:G5EFVfGw2KmpTuhqXIh5DDKCvP+P11vFEQWHC0BBeUaF6:G2Gw2NsnHU1LFlqdQ6
MD5:	0F3580285E8258553C270CD54591CD16
SHA1:	F05704B06C158B791A1F6FB16E25625C616757EF
SHA-256:	48309024AF9BE5EF8DCF8597A860F46345CD0D3D82FF93B007B4A344FBB70D8A
SHA-512:	5DE0DA5B851A5F507BBB1817BAF4FB8575AB2AFCD88711D7B9E36277360C0436DFA9AF15C421DEC649178533E7B225416F1C170BA8FC25815DEB2EFB40400CDD
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/PZfTqH7t4v64m4g298ntnpXCadDNdnuc7-8mMTCweLE/1652680544763-2vY.png
Preview:	.PNG........IHDR...:.........-=.... .IDATx...{\.U.....##...D../...y.k..-.....2/..f.e.jf[.Mm++...M.J3Lw5o`J.\.$.A..... 3..c..0.(7.......<.y.....w...s..:.4"..B...)...B.!...E..!..B.X...!....@G.!..-..:B.!.h.T.].q.Q(.8).(...B.!.g4.1.Ao0b4....&...D.D...F.!..Ba...T0......].[.t].+.J..!.hHJ...J...I.}..[r..J.!..R.@.$....d]Wa.!h<.........T.n...M..&...(...j...B..........%(..Jz8..........e..C..8g.TP..........D.}.X8.....mOI...k.q..\|.I?._4...O`J...].z..........sk..?..F#I.B.Q.....Z.n.IY.....m.`G.u.G..:....N....b.k+....&.ID.?...o&....].zi.RV.d.2..!..c.T.Jir.B....F...z../..Cz.1...[i...[/..=f<...'Dc.Q..;..c...F.~..I..x.5....g....K@.-&.I..d...w.<. ).........z.s27...L.h...7....e..+......V[l=.....vK......x.sQ[....k.:.....G..?R.2.e.F#)i.$.f..\|5..J...xX.-..dn~......h4....Em.u_n^>'s.........G.5..NU[k...0i.hZ.j.J.2. ...!...iX....r&M.MY.J.o..G........=h.f..G....$.......M.S.F.t:..1.i...>z...@. ...$.f..ss.1v.[..Wa.!...b.BC.e..bS.`.6u.l..1.?n......h<.e.]..;.d.....1s..;.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	239
Entropy (8bit):	4.431052786448216
Encrypted:	false
SSDEEP:	6:tcO4poQOFbwFVWPg7ongTpvWd6zaQ2RXoFCUZUUVY:tcPyrmf7o4iwaQ2RXf8TY
MD5:	8A826E037D34C2EDE8CC6F360C1CCE0A
SHA1:	7DD9E81949F7C393EE303B2EF677A2932A534341
SHA-256:	BA47C1C144A671000674F97F45C8A9ECAC6114536DFF9A497C2D4547CAD97687
SHA-512:	47546AC30C3EC11F3B4A7FE7FD2FC9FC6D5799C84E02F8F1CA2F418705DDB17FB8213807E1209B15DEF789A32DA2B953B405A9804793D15708E39415E5AD3418
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/sdk/icons/v9/envelope.svg
Preview:	<svg viewBox="0 0 24 24"><path d="M20 7H4c-1.103 0-2 .897-2 2v9c0 1.103.897 2 2 2h16c1.103 0 2-.897 2-2V9c0-1.103-.897-2-2-2zm-1.887 2L12 12.82 5.887 9h12.226zM4 18v-7.821l7.47 4.669a1.002 1.002 0 0 0 1.06 0l7.47-4.67.001 7.822H4z"/></svg>

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1914 x 960
Category:	downloaded
Size (bytes):	2880201
Entropy (8bit):	7.96508520166352
Encrypted:	false
SSDEEP:	49152:lq3ajA8eCVaa5fMhAhi51E0WN3DCG7J9hGPKr2z1rbuTsoV/8xq8w:lq338eEaadLUYt7J7Ke2RuTsm/xx
MD5:	40E036F818F03BDB8F1F68EE353F6F97
SHA1:	BFDB2761673BC5B25C2E7DB3D1A89F6CE95CE39E
SHA-256:	3F061C728C8BAA3AE20E53D54D966F5EFBA00F0548D1272DA05470D710D015BF
SHA-512:	51DCA999976D330710792EA442851416F2AA8AC02C543413E52DACE29A23CF7E9AB81E8A3FDB4DDAACDA0A4806D38ADD763170EB9C92F76D97619B5C0639BA31
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/rgcyKZcN1PvxWAPgFPXL1ZupNFF8O1lPQwRLMchKsts/2023-11-09_12-34-21-5T8.gif
Preview:	GIF89az...w..!..NETSCAPE2.0.....!.. .!.......,....z.........$&"$..............""...&.'4..$$.2,..$......"...4"...$........,'........".,...'....'...&..&4.....$&.,2$$..."4..)",.....%....)4"24."....2+......$......."'&."$.&,.............%.&.& ....".$......".4"......,........."........."$.............&$...2.."..&,".*..24"&4.",........&&..".V@0.$<(.(,,@<@....@@\|28(...&.((..">@22T6....2(. .L." 8.,$..46,@@"@..<..@R.(,.86<"(P8.28<..p.....22@B...& ..< ..JL,2@..4&<.22.,"8..<2~.8,,@.tB8@6..$..2B@,8<,8(86(..<2V0 .64. .~L.0"P................$..4.............,.......","",2$...&.4&&,.",........."......"$4.&$.$.24&.<...22$.....,........$......&".&2<......"&$2.42.,.......4&&$......&$."$...&24...22,...*,....&,.4...............&$............""$".....224..,.........&,...&,.,"&,......&".2.$24.........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s...gEy....J...H.*]...P.J.J...X.j....`..K...h.]...p..K...x.........

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1104 x 444, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	40694
Entropy (8bit):	7.830982238350629
Encrypted:	false
SSDEEP:	768:dSCxM7uBsLor006wJwt2iYvqhPqHqSN+uGKg2R9gP4sN0dc0C30:dSgIwJwt2hvsPl3Kh9gBOqZ30
MD5:	5E505F846690E2F5AB507EAEC5CBCCBA
SHA1:	871483AF406B2833C494224747EA346D21EBB7DA
SHA-256:	B974A5E5DB6F6394FA965602CAF06EDB1CFAC35CA736131A0220BD40932A884E
SHA-512:	E4F2B734808758A862E037698A3AA466A0CEF7D3619D3B2E245697FF9EC709199332CBDE6628859453D3F66E329341BB2284DB74C7885AE643AD381ED84199F0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P.........v[.5.. .IDATx...WSW....%?d..b.........,V.U.......v..UY...zAt@[...L....m.0..Xd...A.V.. .R. Z3.....m..Y{..e...C.C....j..s.....9......._..<.@..@..@..@..@..@ +......... .. .. .. .. ....<...\ .. .. .. .. ..YK..'k.....@..@..@..@..@......@..@..@..@..@ k.@.d..B...............@.@................d-.....Z.y...................................%....S.5.. .. .. .. .. ...... .. .. .. .. ... x.vj..A..@..@..@..@.. x x@..@..@..@..@......O.N-.<.................................@...........................................Z.kP..o..q....G X.(.k'....b}......K....._.1F.._.a..7CQ.K.9.............$.HA.D~..[..I...[^?.6.W{.....S.o.h...z.o..LE..p./..r'':.....W.[.{L.}.>.\|.....N4&.O............<...]wB.....f.N][..U...b.^m.A..^...`\|.m..^?....zM.?_x..]3...:$.p...]Z).J.$..N.2..............D`!...y.%*u8...._.K.G.\\|-......k:.....w....V..Qp...........L.."M...1Q...6C.H..r.35.l6.^.....\;]`.:....$.;....\|2...g.7.M............,....g.....>_~i......g?.\..n.._..l/....;c....

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	147
Entropy (8bit):	4.748408485068983
Encrypted:	false
SSDEEP:	3:toKcvXjXRHoNcHqXVO8+a/ISMITF2yRFOvK9V4+H4VLRn6P/ISN7JIOvK9K/:tcO4X8d/BKvK3B4hRnk/JqOvKY
MD5:	9ECB59D4C122C91CC69BDC20AE2EEED1
SHA1:	01D3DB3EEF86B09462BE19724CE3BEBFCB6AFD74
SHA-256:	E2538D2992B86A9E708CA25461F21CA07CD3267D702EBDBA152EFB6215014C92
SHA-512:	1E6B3253D7F8019696F37BE1B62538D1A598AD4ECFAE7785E0ABB94FA2F3E3E93FFBE8324350873A6779CDA546EA9FBE7F6FF33CB9AFCA9BD8A6B7D547DC1036
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="0 0 24 24"><path d="M6 20.415L4.586 19l7-7-7-7L6 3.586 14.414 12z"/><path d="M11 20.415L9.586 19l7-7-7-7L11 3.586 19.414 12z"/></svg>

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 540 x 810, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	49076
Entropy (8bit):	7.96053282965815
Encrypted:	false
SSDEEP:	768:0htkscNGYfAss+wCMVnYRyYG6pZOKdUmsVo1xhunESYjw7U+c/HGWy2EqPPx:uesm3fAW1CnL6LIkotmf+WPZ
MD5:	032051F741EBCB639C205939F39ACA51
SHA1:	4DE6D90EBB6AF28C7772BC2FE00995766C346672
SHA-256:	31FAFA703AFA4FE35807C773610B5A75B9D04B31F12D1BB3FAECA1E45820217C
SHA-512:	2C45F1BA47C4E5FEE4F0AB7C7A90B8A31ABCAB571DB02E06CC1EFA0516B49F3B088AE3FD76AF4337F4B8632742639F9A3CAE1785B033438B659DE578644633B1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x....pHYs..........+......tIME.....9...8~.. .IDATx...{\T.........D' O.>.F"......^a.%...ox.,l{....fY^..-.AS...z.c.w.C.N. ..l+..(I..#.?......(...x.CX.Y........Y.....!..B.+.z.w@.!..w>.8..B.au.p.!....$..B.!..I.!..B....C.!..V'...B.!.N..!..BX...B.!..:.8..B.au.p.!....$..B.!..I.!..B....C.!..V'...B.!.N..!..BX...B.!..:.8..B.au.p.!....$.@i...?....Q..~.......G?........@.)........V..E......W.>.;y..F.q.k....b....cb..>..U.\.;.R.'r.....?&....=.5..:N.SoU).._..S.2....}..5..{y.X.U.d...'.e!GI"......DJ.r.5....ju.&...._.UXuW+..6..^.U.."k;.c.2H.....yq.^N..T.!:.[..8+...Nd......o.;...q..C&..n......h./i.d..84'r.o.%d4#....<.G..}x..?..Qq.^.....1.....l.YE..C...A[..ec.....Y%.Q..).n{.)#..v.u.+!..l...>L_3.'...V.b..M.?.Asl./&....}..};r.r-YO........w...}b9#.L...y........#../swg3....).n?..1b...&?....3..o.....O....z.[g....T}F1'j,..u.....)......>..q....B.[....<...8H..5.5..d.....-_r..o......c..*.mL...I(1..thc...efWL. .......~.......O..q.........5?.e..u.3.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2489
Entropy (8bit):	4.168429974603143
Encrypted:	false
SSDEEP:	48:CnASXW21k6X8XUnU8PGi36T4QRbsvLfSlcF6rwJ:KcoU8PG5nqvTSl5rG
MD5:	EBF3A116079D4474D9C13F48B7599AB3
SHA1:	94B232E2FBA789753F93012504A53F7A74907F11
SHA-256:	525FB1E47D0C629F29582774F5B99D9876BDDD998527E80F58D587E56D54193F
SHA-512:	CB3BD7369D198C249F89CAFC0F80DDC1A4930B55240A2599E450695FC9C10E1A9FDC35DB4164C003BBE6CAD3036DB8A6DA0051EE56673F64FD7682B28396EAFD
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/emojione/2.0.1/assets/svg/1f4a1.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" enable-background="new 0 0 64 64"><path fill="#ffce31" d="M24.938,48h14.125c0.838-4.313,3.513-8.505,6.315-12.898C48.632,29.999,52,24.716,52,19.586...C52,9.889,43.027,2,32,2S12,9.889,12,19.586c0,5.13,3.368,10.413,6.621,15.516C21.425,39.495,24.103,43.688,24.938,48z"/><g fill="#94989b"><path d="m26.449 33.595c.144.596.273 1.193.425 1.772.265 1.091.522 2.147.771 3.169.92 3.758 1.73 6.987 2.371 9.464h.594c-.526-2.513-1.244-5.799-2.105-9.628-.232-1.021-.473-2.086-.72-3.178-.131-.534-.244-1.076-.368-1.632.832-.183 2.653-.803 4.584-2.889 1.932 2.085 3.752 2.706 4.584 2.889-.124.556-.237 1.098-.368 1.632-.247 1.092-.487 2.156-.719 3.178-.862 3.829-1.58 7.115-2.106 9.628h.594c.642-2.477 1.451-5.706 2.372-9.464.246-1.021.505-2.078.771-3.169.149-.579.28-1.177.424-1.772.756-.051 1.479-.287 2.043-.804.578-.569.88-1.314.744-2.107-.061-.38-.345-.872-.896-1.041-.254-.083-.508-.101-.832-.018-.268.102-.464.251-.598.396-.533.592-.726 1.183-.945 1

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 451, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	44031
Entropy (8bit):	7.9780895574470545
Encrypted:	false
SSDEEP:	768:D6GVmY2I2yGrprfkrv4ol+/XHX/7ExakNJICxl/RHPethLHsol1KpIPfKzLUNjP6:DN72mGrAx+/XHTEkktlpvebLMoSpIPNG
MD5:	5FB2A34EEC3882C822414BAE33AF8C84
SHA1:	C7AE982A709E4C9C37808D3961A95E634A5D0120
SHA-256:	80B3FD3A67BEEA295A54354F015D9561E2DED5A0B9B7CB75BCF2913BB5C878E7
SHA-512:	C2B8DE66CB3FD3F172FCEAC91EED262CEF696A28C01B669CB98FD94DD0CD719B12F39A02DD790F9DC8F2B39CB8AA74A65A30571203B655CB6A6788FF78CF366E
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/BgZg9ca-iYvCwOCA9yDcgXy_BqCtxbUpA3V_QwJkbZs/1652680684244-hzg.png
Preview:	.PNG........IHDR...:.........-=.... .IDATx...{\.U.....##...D../...y.k..-.....2/..f.e.j.nn7.......R)[i....SB." .."^..P.....sa..F.)~.W...9..g.\|.s....h...!..B.fH....B.!.h(...!....@G.!....:B.!.h.$..B.!D..j.....B..I.@.0..B..8....z...Q.675.tD.'%J..7B.q.....E.R..`.Loh....JX.T...!D}R..T.mJ.....#.TB.Q...'y.6.F....A..........t...o...7.wVD.w....N.(..-9.\|..:./...P...S.!.QVV...v.9...s..J...A!9;M@..K@D.7..sg.!.....t.^.....l..7..#.E....x&E>.....y9.\|....=8;..#.h4..,...0..\..e.....^a...U.v$_.i4h...;.x`......+.......`".@.....f...nj...I...B s..t...#.E.R.TJ...B..h4b0....\|..............z.N.Qc.9t(!......{/...5....O..ANNn.../c..x..""..k...pg.c....Q!X...!.G0's.HN.....S.Prj.a=.....?k.E.sX...m.t.......;..E...C....~t..#95.Z.h4...ARJ:..V.-.p.....>.bN..U._....F#9.y\..[....q2'...~x...r.X}.jU...SP....E...T...i..B......)++c....^.....w4h,.}.a....n..Lz.I>(9O....p.l.j..4H..!..Y.M.L..........n")%...O.;.b..........b-........S.d.....i.N...F.a-.....9v8....p.._d..C,Y

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12442
Entropy (8bit):	7.935729351082169
Encrypted:	false
SSDEEP:	192:h2NENpbMAEoq8XEWV5kJwWWjD9nbcj3cSD33mOykIVvcCoUiayfI1m92zzRMWJ:h2wbdVUk6lWf9o3Z7mOy1v7hiPxgRX
MD5:	67745534EE99C0749B0232F14D41065A
SHA1:	469C227F5EF282E8F90C47C950CCF1995F59B6E8
SHA-256:	327B1C8A8315FD8A0F3EEFBC87B1D27406BE8F5FDC7FC8EDDD6C412AEFE1D899
SHA-512:	8106F04998EA9F899AD4878D744576A1F4CB7D6CB95C9F5526940E631AC2D991E7782AF652C7543E7EB8EE289EEE35590BCE99CFBFBA33E1FA036FE26FE1BEA2
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/zdoNy297JCDDVBYQNT1eATyuiLXB1bPo44__MGdXZ_k/VPA%203.0-DyM.png
Preview:	.PNG........IHDR...,...,.....y}.u....tEXtSoftware.Adobe ImageReadyq.e<..0<IDATx..}...e.n...=.gG...3.A....H..W...0...-ifpDp:.3..0. 87..a.U..3r.......v.8.,..xe.N....vX...Ht.{..x..........$U.<.....z..{..{...$........................................04.P._.....8...c.Oz........K........3zd.s...y....Sn8..D....6,...@X..1y.?>:..:R..O...?...N....!.....-Sn....[..kk.!..3......1".... ,('............~...k..T.=..M..ji.55.kk.\..y......AX...T..tu.o....Cz...RMV.T..1F\r.KA....g...x.....;~.....t..O..\|D`....iSo...p{..j.#...<.....:..v..={.N#)-...K3..[0o6..F(/..P.D.:..Ac{.>...].!)-.....do.....YX.......1.j...?x:...(....ri.s.... 9f..6.N..........:_.myz......^zpq(S3~,..I.........g.F.l......[..U.h.q.Fr.[@\ ,.".Z...?.#T.QQ..c...r..H:..\/.........=TnEE..I......\|.e..j.id...J.-.!.R.J..f.O~..AFd'>:Yv......J#*..QFR.5.........k..^.MMz..'....c..?... F^......}.=_>...m@i......j.lAp....u....o../..c..e/.A']wuf.u.9I9U...."Z...N..+Y=..z.Bi...4.... ....1}..>...m.[.!..O.%.:c~YK.f..d..=..J.......

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1914 x 960
Category:	dropped
Size (bytes):	2880201
Entropy (8bit):	7.96508520166352
Encrypted:	false
SSDEEP:	49152:lq3ajA8eCVaa5fMhAhi51E0WN3DCG7J9hGPKr2z1rbuTsoV/8xq8w:lq338eEaadLUYt7J7Ke2RuTsm/xx
MD5:	40E036F818F03BDB8F1F68EE353F6F97
SHA1:	BFDB2761673BC5B25C2E7DB3D1A89F6CE95CE39E
SHA-256:	3F061C728C8BAA3AE20E53D54D966F5EFBA00F0548D1272DA05470D710D015BF
SHA-512:	51DCA999976D330710792EA442851416F2AA8AC02C543413E52DACE29A23CF7E9AB81E8A3FDB4DDAACDA0A4806D38ADD763170EB9C92F76D97619B5C0639BA31
Malicious:	false
Reputation:	low
Preview:	GIF89az...w..!..NETSCAPE2.0.....!.. .!.......,....z.........$&"$..............""...&.'4..$$.2,..$......"...4"...$........,'........".,...'....'...&..&4.....$&.,2$$..."4..)",.....%....)4"24."....2+......$......."'&."$.&,.............%.&.& ....".$......".4"......,........."........."$.............&$...2.."..&,".*..24"&4.",........&&..".V@0.$<(.(,,@<@....@@\|28(...&.((..">@22T6....2(. .L." 8.,$..46,@@"@..<..@R.(,.86<"(P8.28<..p.....22@B...& ..< ..JL,2@..4&<.22.,"8..<2~.8,,@.tB8@6..$..2B@,8<,8(86(..<2V0 .64. .~L.0"P................$..4.............,.......","",2$...&.4&&,.",........."......"$4.&$.$.24&.<...22$.....,........$......&".&2<......"&$2.42.,.......4&&$......&$."$...&24...22,...*,....&,.4...............&$............""$".....224..,.........&,...&,.,"&,......&".2.$24.........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s...gEy....J...H.*]...P.J.J...X.j....`..K...h.]...p..K...x.........

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	42702
Entropy (8bit):	7.976730428420686
Encrypted:	false
SSDEEP:	768:m4kjaUhR+ENNMGJzQbofyIW1ZiHriFd1CpliyBOWyFFbm90:SP+8RQ0TgfFD0iHWyDC+
MD5:	80A2E53F27B50F7ECCAA0199CBA465D3
SHA1:	003710A3B4B1A6BD5A255832A4B72D74358447F1
SHA-256:	51874D5131F24F547BD6CDE952F36EDEB6A96C9B5208303E593DA0A84D7EAAAF
SHA-512:	7C71C8FFDCDB35AA799E6E24B96CAB29ED3E35697FE25A377F468B31CBD2B2572FA1624B841B3759E30B4FDAECEF409BB4193A6B79A62D86794E039D7E065818
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/VJG8pQvtfxy-4L_vWcLZtn7sEL4JAlB8TQIfJh_CX78/2023-11-09_13-16-20-hFg.png
Preview:	.PNG........IHDR...:...X.....ktL.....pHYs..........+......tIME......:.FvK.. .IDATx...y\TU.....2. k8..."....."..e..P{p7M.L}...6+....4M-.2.r...rI%.Pq.tDP...e.......x....{...{.3.;.{..c.z...A..Ah.$.].A..A..."..A..A.Z,.... ...b.@G..A...K.:. .. .X"...A....... .. .-..t.A..Ah.D.#.. .B.e.6../.C{.....\|.EEE.k..b..!L..,.._.....8...K[..>.OO......8. ..BQQ1.....}.IIW..8.......d.......###.JJJ.!j'............sb...v.../.o...........!/'...z`nn...^c.K...IS.T...q..i.-.y..r..4...........OT...........Q..5yB.O>..k7.{.....5..i.k.........D.p.. .F.R.T*)--.]..\|.:........<Np@?:Z.....G.1.\|.o....W^..../.p..M.._.3q8..2h`_..}.SS..J%.Mx.?........=i.5......;....m.R................G........w<...I.s..X[YrM~.....T......).73(....'....G....:r.[...\|.^....p.r2;v..z......#.f.d.....K...J.pui...!.._.......8.w<.v.@_.k.T..o..A.w.r....m.D"!...Fk.......N.V.......'jt.A.j.R.P.T...p.v.'.Nd...]....8...gl@'..j..A...\|.....0Ei.@...........9..L"#.v.<]=;.1c....}....SG76..)NN..\|.%%.:}..~=(,...!

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	dropped
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 856 x 901, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	73698
Entropy (8bit):	7.857153414532413
Encrypted:	false
SSDEEP:	1536:dDQuB8e5sX6yyNLXcr4hevZlNA20QQZwmMzQUK/3cxzctKw:tQuCeSX6yyNLjhEDNA20QGyQeF4
MD5:	AD1E27B6140DAE4331893E3D4FE095C1
SHA1:	C565A96B37A80E37B40C709911A4BD8BA364850C
SHA-256:	3151CEC0E9461357B13D98CB9647A965ADB2646CCDB27F064B09CCA6D84ECD75
SHA-512:	1321C89468D31D9B081EB5C03AD25C8E24CCB54117F48223B4D9C61FB857F8EC39E1254D7E3324072105298D32721C4A908568AD69B156C2107C7C0710A9ADF8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X..........].... .IDATx...W.W.....?....8'g..839&O2..dFO&~...$.(I'...u..D...`k....FA.DD..qG..,.b...w....i.}.V.Bu..B.=}.....}}>u..V..<o..............\|@..@..@..@..".@{.....T.=x.:.....T..'..X....'k....c..6n>K....@.8......DsM......Ah.H..9.P...r...s..m.5..q..MU.\|.@8.iu.8.}.F...}..9.....r`.xj.&.B.F}.hp..t.@.B.B...\|...r..i....kC.`.........ND.:?.@.B.F.......9.oB...V.....@..@..@..@ ..L..!.... .. .. ..QI`BM..h..(/..............O..!..O..~..........@. .G..........@.....R.....@..@..@.. .!.A..@..@..@ J.@.F...... .. .. ...... .. .. .. ... ....x.............A.A...........R...Q.x<...............A..@..@..@..@ ..@..G..@..@..@......`.:>..zPd..............04.-.. .. .. ...H`BaM.B..+...........@4..Px.B0....!.QF...........&.................h$0.....R...................t4..q..(............ .!.A..@..@..@ J.@.F..}}b.. .. .. ..... . ..........D)...(u..{.A.@..@..@..\|%.!.!.. .. .. ..QJ.B0J..................&..}..[.....7.I,n.D7.H/...].KfLu8...]..M..@.....:....Z.29....r..

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	867
Entropy (8bit):	4.193734902129467
Encrypted:	false
SSDEEP:	24:tc/R6PbL+e7xopEOMhHp6lHI3vbUUmBBmhQgp:2/0PbtqMhHoFq4UwjU
MD5:	A26448DA25793BB07CCF10FAB4A8F5B4
SHA1:	BFF76E7D6D123B5922814B18A743F35375E2D95C
SHA-256:	C28D8F41FA57DBF00650A9B59E9473EC0753BBE90C13DEC3CFC8E06221115F5C
SHA-512:	C07D874E312E916659117B4A0033CF0595F71FB1617EA6732BA6B47C09268DF305E60D4A9EDDE793EB350E6DB266AA70AFC57F0519528105E297A6E150050137
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/sdk/icons/v9/money.svg
Preview:	<svg viewBox="0 0 24 24"><path d="M14 10.5c1.93 0 3.5-1.57 3.5-3.5S15.93 3.5 14 3.5 10.5 5.07 10.5 7s1.57 3.5 3.5 3.5zm0-5c.827 0 1.5.673 1.5 1.5s-.673 1.5-1.5 1.5-1.5-.673-1.5-1.5.673-1.5 1.5-1.5z"/><path d="M23 0H5a1 1 0 0 0-1 1v11.08c.328-.047.66-.08 1-.08.348 0 .666.034 1 .083.029-.029 0-3.668 0-3.668l2.182 2.181a6.95 6.95 0 0 1 2.261-.567L6 5.586V2h9.586L22 8.415V12h-6.106a7.02 7.02 0 0 1 1.423 2H23a1 1 0 0 0 1-1V1a1 1 0 0 0-1-1zm-1 5.586L18.414 2H22v3.586z"/><path d="M11 12c-1.78 0-3.336.943-4.222 2.348A4.866 4.866 0 0 0 5 14c-2.757 0-5 2.243-5 5s2.243 5 5 5c1.777 0 3.321-.944 4.205-2.347A4.94 4.94 0 0 0 11 22c2.757 0 5-2.243 5-5s-2.243-5-5-5zM5 22c-1.654 0-3-1.346-3-3s1.346-3 3-3c.382 0 .745.076 1.08.208-.042.261-.08.521-.08.792 0 1.41.591 2.679 1.533 3.589A2.99 2.99 0 0 1 5 22zm6-2c-1.654 0-3-1.346-3-3s1.346-3 3-3 3 1.346 3 3-1.346 3-3 3z"/></svg>

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1196 x 772, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	128184
Entropy (8bit):	7.959434867262871
Encrypted:	false
SSDEEP:	3072:Nu+LdPu3AJzMKfrpmt9kf6WIE/G7rUGqfHeSLmeY/DvYx5J:tD5rpKOf6X7rpY+ul+vYx5J
MD5:	8E8B82A397DDA53745F966F5A640EB24
SHA1:	7611498B6E123167EDE37C320A359B956B0E90F7
SHA-256:	2910BC83C2CE93B0AF93A3F7AE779773B3B1B6164863D0796189B8758CDCC312
SHA-512:	713A4B49A8DEB34E60822BF0C7A1C8D9125A0A0543467BB76058402F118BEBF891416337947B2DA6EDF9D5A18AF8F2CEC8FF103D64B93E0025DF0EBDF19356EF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............O.D....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..\|.....1..w..P......Cqw...R(.V.8-.w'...xr..os.............3.{.;.g..if .. .. .. .. ...{.Q..A..A..A..A..."X.. .. .. .. ......A..A..A..A..h..V. .. .. .. .B.B.+A..A..A..A..!Z!.. .. .. .. ......J..A..A..A..A.V.`%.. .. .. .. D+D...A..A..A..A..."X.. .. .. .. ......A..A..A..A..h..V. .. .. .. .B.B.+A..A..A..A..!Z!.. .. .. .. ......J..A..A..A..A.V.`%.. .. .. .. D+D...A..A..A..A..."X.. .. .. .. ......A..A..A..A..h..V. .. .. .. .B.B.+A..A..A..A..!Z!.. .. .. .. ......J..A..A..A..A.V.`%.. .. .. .. D+D...A..A..A..A..."X.. .. .. .. ......A..A..A..A..h..V. .. .. .. .B.B.+A..A..A..A..!Z!.. .. .. .. ......J..A..A..A..A.V.`%.. .. .. .. D+D...A..A..A..A..."X.. .. .. .. ......A..A..A..A..h..V. .. .. .. .B.B.+A..A..A..A..!Z!.. .. .. .. ......J..A..A..A..A.V.`%.. .. .. .. D+D...A..A..A..A..."X.. .. .. .. ......A..A..A..A..h..V. .. .. .. .B.B.+A..A..A..A..!Z!.. .. .. .. ......J..A..A..A..A.V.`%.. .. .. .. D+.43.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 700, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	45605
Entropy (8bit):	7.964959410902497
Encrypted:	false
SSDEEP:	768:OTTTwkMu6xgUg6lYTTTH0FTvVzQdV3TgvkVwXBT/XnUVaAhHAwRT7q4d8U92JQ:duZUm0F9aCkVYXnUFa4TEc2m
MD5:	9E1708134FCC3FCE6BD4DDDA67ACBBAA
SHA1:	5D0206EFF8D2763EF62049B9C864C87182F65D35
SHA-256:	66C28B94B69C6C654CE3E115E927F2E4AA961482A3EFAD991359FC5DFDE21A1D
SHA-512:	FB2E017165063F4223DD8371FFFD777898556F6099F0B4BCB78341192110E6173748603EAE152166A4D4ED4773335E8033FC6F55401DD5E37C6BFB8610CCA7BC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:.............. .IDATx....\UU...W....8..A.. P......TD\|..o.T...W.j..}>\|k.~n..Vx..S8...K..H.F...B"P...CeDA.@...}..8..@..~>.>..}.^{...^...Z{{[WWW.B.!...h.hg@.!..b.H.#..B..%...B.!,..:B.!..X...!...bI.#..B..%...B.!,..:B.!..X...!...bI.#..B..%...B.!,..:B.!..X...!...bI.#..B..%...B.!,..:B.!..X...!...bI.#n.vj2...H..~K.......X..D.{.D>.._.%,~.\|.vu>c#.~K...HZ....4Q).%.U:...<...8v..~V..D.z]Y...........k....k..s';w.....\...B...H........5.I.l..]...v.$.K..0..s.0.....l......1l(.y...DoN.xc;.mW.F6sW.....0.?.....>&....[..........W.X.T....^..Wn,..{.fg.5....`:....W7...=%..x9o...#.....L.._.aF.3J....LR.Z.\.F.(..c..1.]...^.....{....h..2.................5a...=...\|`V.s..5>....=.J.....P.....O.@e...Z;.Ksxk]...3..Qs.......{)....v.....r...LT\|..V.g.H...O.iOO...XN....$..+...j......K..~..&.........W.......=...!.).._..8)..o&..a.&2............<..o .=.o.....k.....l05....#..[..\|.{+...p....'r.?...f..a[e*1..-..8.g3.....M...........v....o.....a...:....

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1426 x 1501, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	195889
Entropy (8bit):	7.922510653550072
Encrypted:	false
SSDEEP:	3072:DuSMqoC+mdp3zJcB5UFP/VMIvB7QzvkknG7/NaSunWnuS8ckJsuIeIJ+IGVJbXDh:11r+2p3zJcBOF9b7e9nGrNaa8Pa3VIIG
MD5:	89182B9D52C5F5BE5542C6C06B486F12
SHA1:	3781C821803F29381382A773737157987A91261D
SHA-256:	295F2067E0A095E19603070CDD3DD92AD4B9D924F12BE5E5A18C5CEC3208F76F
SHA-512:	1C3835227922EC54437BFF2711FDDC4304D4314683811249C3B956764416944CAAA9A5A2960481A9CDFC4541EAAF885B615C06EF8520B77F3648A6CEB3E88C6F
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/Vj0zDk7x-MmbNLYp2XJ-R0-Sd74MvbRj1kcZvrmLBvI/5WV1IdkfdIRSh2GnX5ERFQi0f9Ml4RTgpv_7U6USAIw/1658999266632-C28.png
Preview:	.PNG........IHDR..............x?... .IDATx...y\.....YX..ADT@9=@..<..o..[Y..ZYV.e.Yi...e.....Ge.W^y.'.."..}..\.....o...,...z>.C>..\|...=.....3fLHH.p7.N'jQ.T......@.2. ....g.CBB>..X......dKw.\_..t....~.t.....-.t.`I...t.....X...P...,.......31J"D....+................@.....,.........V..-......"........(...>{..7-........1+.Vk.>........t...............(..D......B1I......(.a.......PVL.........h.......P.-......BQ.......(..-......B.........E.......(.a.......P.-......BY...Y........2.m...............P(.......@..[......."l...............P(.F..Y........2..7nl.>.......R.T..........r[......."l...............P(.......@..[......."l............}.......a...o.>.......*...t.......d........(.a.......P.-......B.........E.......(............DV.............+;;;K.......@..J..t.......d........(........a..M.&j...wF>\|.E...1.V.~....N.9.t3Y.._..~}.yf...Z.w...,[.......[...d.....K!l...I.1....",..qcl\BaQ.#.$lQ..t...[1.q-Z..poimmm.....0......)))nnnO>....s-m(%%e.....=..#nnn....a....s....>z&,<6....T..

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 856 x 901, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	73698
Entropy (8bit):	7.857153414532413
Encrypted:	false
SSDEEP:	1536:dDQuB8e5sX6yyNLXcr4hevZlNA20QQZwmMzQUK/3cxzctKw:tQuCeSX6yyNLjhEDNA20QGyQeF4
MD5:	AD1E27B6140DAE4331893E3D4FE095C1
SHA1:	C565A96B37A80E37B40C709911A4BD8BA364850C
SHA-256:	3151CEC0E9461357B13D98CB9647A965ADB2646CCDB27F064B09CCA6D84ECD75
SHA-512:	1321C89468D31D9B081EB5C03AD25C8E24CCB54117F48223B4D9C61FB857F8EC39E1254D7E3324072105298D32721C4A908568AD69B156C2107C7C0710A9ADF8
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/JqZGr_j7RmswjvmkR6N4qoEuNJkdKxloTdhxuFmbZNw/1727660316790-tpM.png
Preview:	.PNG........IHDR...X..........].... .IDATx...W.W.....?....8'g..839&O2..dFO&~...$.(I'...u..D...`k....FA.DD..qG..,.b...w....i.}.V.Bu..B.=}.....}}>u..V..<o..............\|@..@..@..@..".@{.....T.=x.:.....T..'..X....'k....c..6n>K....@.8......DsM......Ah.H..9.P...r...s..m.5..q..MU.\|.@8.iu.8.}.F...}..9.....r`.xj.&.B.F}.hp..t.@.B.B...\|...r..i....kC.`.........ND.:?.@.B.F.......9.oB...V.....@..@..@..@ ..L..!.... .. .. ..QI`BM..h..(/..............O..!..O..~..........@. .G..........@.....R.....@..@..@.. .!.A..@..@..@ J.@.F...... .. .. ...... .. .. .. ... ....x.............A.A...........R...Q.x<...............A..@..@..@..@ ..@..G..@..@..@......`.:>..zPd..............04.-.. .. .. ...H`BaM.B..+...........@4..Px.B0....!.QF...........&.................h$0.....R...................t4..q..(............ .!.A..@..@..@ J.@.F..}}b.. .. .. ..... . ..........D)...(u..{.A.@..@..@..\|%.!.!.. .. .. ..QJ.B0J..................&..}..[.....7.I,n.D7.H/...].KfLu8...]..M..@.....:....Z.29....r..

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	147
Entropy (8bit):	4.748408485068983
Encrypted:	false
SSDEEP:	3:toKcvXjXRHoNcHqXVO8+a/ISMITF2yRFOvK9V4+H4VLRn6P/ISN7JIOvK9K/:tcO4X8d/BKvK3B4hRnk/JqOvKY
MD5:	9ECB59D4C122C91CC69BDC20AE2EEED1
SHA1:	01D3DB3EEF86B09462BE19724CE3BEBFCB6AFD74
SHA-256:	E2538D2992B86A9E708CA25461F21CA07CD3267D702EBDBA152EFB6215014C92
SHA-512:	1E6B3253D7F8019696F37BE1B62538D1A598AD4ECFAE7785E0ABB94FA2F3E3E93FFBE8324350873A6779CDA546EA9FBE7F6FF33CB9AFCA9BD8A6B7D547DC1036
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/sdk/icons/v9/arrow-circle-right.svg
Preview:	<svg viewBox="0 0 24 24"><path d="M6 20.415L4.586 19l7-7-7-7L6 3.586 14.414 12z"/><path d="M11 20.415L9.586 19l7-7-7-7L11 3.586 19.414 12z"/></svg>

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35489
Entropy (8bit):	7.965882828015313
Encrypted:	false
SSDEEP:	768:aCqBqKVR8Y+PMMvnVuMs3hFWbf/5p8ZrE5si7+YWpCCgvRDJZHOJn2l22222222V:a1VT+PMevH5+e5T+YWBiDJB22l22222a
MD5:	8481E2D0AEBACF26DF0D4466228FD406
SHA1:	929553190DA2AC965C901FB16DD07A5C2F8D3E9E
SHA-256:	FE2F22743A520098D192E478EB3F933ACFCF338B7427078042BEC02337D49AA9
SHA-512:	EF3AB5F0F3FC61368AF0BFDD6BF91F5D023E69F9C8CD980C96CD5A89424293CF7747765745E96A16F135FD76190CD433BBC25F1D977B9FE0727C0D22C77281EF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:...X.....ktL.....pHYs..........+......tIME............ .IDATx...y\TU.....2."k."..."...........qM.$....4i.).....4M-...4.L.\..BDe..A@du........(....kf.9..s.\...9..L....A..A.Z Is.@..A.....@G..A...K.:. .. .X"...A....... .. .-..t.A..Ah.D.#.. .B.%..A..A.Z,.... ...b.<..ikK....---.%^....Q..I...../....Wls..sph.scF....ns.G...PTTLll.?.9@R......h5.# ....).t.tCOO....R....OVo@v.VS...D.9...%'.<..M....y....d.\|.r.2._w......j.b.. <......y.;......-_%...@..:ZZZ\|..{.....)(($h.R..z.)..^....~l.....6wq...o.}.6..1....$...)..P..BAYY.....=....o......X....Y.\|...TcbN"G......&_...:o......p..m./Z...1X[Y0dP_.-x.CC....xi....q..K.s\|...].6.....o....m.J...+........9.ytq..>Q..".+..:.t...)7d....B...n......~;...b..5.---R..$..Y22...<=..4..d.....^..^NH.M............J.pth......bdd@....\.+.......,...[8wT6.]..Bqq1...".HH.u...6\|..^.i.........D.. .B=.............._..zu^s..y8<.[.'1...k.:..g.s.g.\.%?&5MQ.$..........%9EF.....S)..........q~=r..wsp...o.bkk..W\R......Na.=....

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	38461
Entropy (8bit):	7.968405091991825
Encrypted:	false
SSDEEP:	768:pjcZ27/2Ns0imTF9CSvFIj3wLMqYubOjSZX:uZC2m0iXSvF8K4eOuX
MD5:	2E98BCD1F003A4739741852C9B22287C
SHA1:	79A46EE6B3DD029C7FC44C19B948940A7DF832A7
SHA-256:	7F7CAFAEE609E52610AFFDD184837309FE1F6F3546CEF5A0B428342639D0C943
SHA-512:	D9B5615F39762F80C663504DC35D4C95D489BB27AD5690A60D851958DE00A2BB7678D9A32406CB59D43E3ABCA34A1A3ABF9A4EA8EFF6A4D4BE2124D14BB80CC1
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/5nReMwCINwOpxQkU4s0_Uigmf9pzJSvfep5v48N6vx4/2023-11-09_13-17-09-xdI.png
Preview:	.PNG........IHDR...:...X.....ktL.....pHYs..........+......tIME.......~.i... .IDATx...y\T......2. k."..."....$i.Y./..fI...jV........L..b.i.a.b.n.......""..2..c..dU...].f.<.9.9.33.y...H..J.A..A..!IK.@..A.....@G..A..vK.:. .. .["...A....... .. ...t.A..Ah.D.#.. .B.%..A..A..-.... ...n.<....K....===._.Jii...u..76..S.e...q.\bK....v..qO....aK.G...M(--#11..w.'-.jK.G.........1kZ..\|<122......F...]...o6q..qt.........Z.8M..3./[Da......9zzz-],A..VM.TRPP....`ni..+.`..h.@GOO..>~....d.y..K.].&..>..EhV...0..Q.......tq..W..sG.zb8...H$..S...>J...BAEE.{..F...\|.....V...z.Q.C.a..0......CTr.....W..f....q.&.........myt....~.SS.....O.....`gkC...t....C........:w.H.BA.D....@r.e.......ccc..%"....z...%.d7.]..R.:.......}..eee<=.1....z.c.O.s+W.....{;..]Ng._...oJ..:vt.....y\H..=n...7.....r!..ff&......s.....>.d.\......9............DB.-........N.........'jt.A..TQ....s.v.'.2..-]....8.-...8.......?.../.!.y..,.....1G....!..2......U.xy.$l.t.~.......O..]....qrr..++/.......GI.]F..D.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	239
Entropy (8bit):	4.431052786448216
Encrypted:	false
SSDEEP:	6:tcO4poQOFbwFVWPg7ongTpvWd6zaQ2RXoFCUZUUVY:tcPyrmf7o4iwaQ2RXf8TY
MD5:	8A826E037D34C2EDE8CC6F360C1CCE0A
SHA1:	7DD9E81949F7C393EE303B2EF677A2932A534341
SHA-256:	BA47C1C144A671000674F97F45C8A9ECAC6114536DFF9A497C2D4547CAD97687
SHA-512:	47546AC30C3EC11F3B4A7FE7FD2FC9FC6D5799C84E02F8F1CA2F418705DDB17FB8213807E1209B15DEF789A32DA2B953B405A9804793D15708E39415E5AD3418
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="0 0 24 24"><path d="M20 7H4c-1.103 0-2 .897-2 2v9c0 1.103.897 2 2 2h16c1.103 0 2-.897 2-2V9c0-1.103-.897-2-2-2zm-1.887 2L12 12.82 5.887 9h12.226zM4 18v-7.821l7.47 4.669a1.002 1.002 0 0 0 1.06 0l7.47-4.67.001 7.822H4z"/></svg>

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	46009
Entropy (8bit):	7.974744383634104
Encrypted:	false
SSDEEP:	768:OQ+6eSRnklLM0MW3GFfDPe+IbvFzMWViJCTfxo0IGKTxa1bS3:9mAGLM3WeDPdIbtzMWcJ+O0LGIFI
MD5:	61948FD7507335DE723B56753824501C
SHA1:	2D42AE49C0FD246E16CF5F6B1563DFC82FC01FED
SHA-256:	FE62FA659AFED03263890943DB1DF67B3F921EFB990975B0FF7348764F5310C3
SHA-512:	05397B9ACC7CEC94722C1AF10B2BC71F1B328D9FCCDC79974321ACBB45EA184F59A1B1151BE2AB18F2CC6608EA63B95E891373B2AEBA9E28BC56E804AE025F42
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:...X.....ktL.....pHYs..........+......tIME......./>}... .IDATx...y\.u.....0."g.r)....)y`Y.mZ.R+...,..ls.u.Vw....C..;,K..P..D..PDT......1.0.......cf......\|g...\|......F..B.!:!...B.!Dk.@G.!.....:B.!..$..B.!D.%...B.!:-.t..B..iI.#..B.NK..!..BtZ...!....R.UA..^=.P(..:}.....U.u....v.._{.#.'^......}.m...`kks..#...Byy...I\|..{...\...@......<:}...C....@.....-....d.;...................iQ..=xq.<....3j.NNN(..k]-!.h.F#..E...0N.....2.v.V.t...o....0..z..2{.Kl....B.zt...=........:-j.3....w.6..Z.R)=.B......`@.......~..o...ZW..?.V.F............'.z....<..L.<....._d...:....;.............3...}.x..1.........-[........7...=.!.....r..."..........jM]b}.....g3.y.<F..4.........9TTTp..7.P(.8s.......k........'O..y....l7%.4.y...@..<.'....FcK`@.lll8.\|.GG{............J...,.f.'...;...**.....RI....{o..o.10..]]Q..(..i..B.F..F.F#:....8.{.=.....p+/,\|..F....\|.9$....^....Z.*.....x......!=#..{.!'.r.<.C.0...l.i.?..E~~.}z....w......8t.(#........Le_.7......

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (60309)
Category:	downloaded
Size (bytes):	72252
Entropy (8bit):	5.276872209185141
Encrypted:	false
SSDEEP:	1536:lXLdcP+VcaRiAXeoWb+dSBPkwrBUKtHf4p8Eu8WU9:TcScj4eo2ISd1rBUKtA22WQ
MD5:	9573DF3E61139CCF5031A29F6D90DD30
SHA1:	6AB1CD7D52973678100390EE7F2424C812252E13
SHA-256:	69E5D3F1E7F2D720163A27593ACC96B7D666FD490488226B85AD4DF790182D69
SHA-512:	210ED644624F58549033373422F78EF36E6BE4621F3D387EAB0FE013441EBA416B2DB403A201CC9BA15B4675D384C6A9217ECB4373B980C3B2C19D59EE0FEF46
Malicious:	false
Reputation:	low
URL:	https://knowledgebase.campaignagent.com.au/en/articles/481
Preview:	<!DOCTYPE html>.<html lang="en">. <head prefix="og: http://ogp.me/ns#">. <title>Understanding Pay Now Campaigns</title>. <style>. body {. margin: 0;. }. .elevio-kb-wrapper {. -webkit-box-align: center;. -ms-flex-align: center;. align-items: center;. color: #3e4c59;. display: -webkit-box;. display: -ms-flexbox;. display: flex;. height: 100vh;. -webkit-box-orient: vertical;. -webkit-box-direction: normal;. -ms-flex-direction: column;. flex-direction: column;. -webkit-box-pack: center;. -ms-flex-pack: center;. justify-content: center;. }. .elevio-kb-loading-spinner {. -webkit-animation-name: elevio-kb-spin;. animation-name: elevio-kb-spin;. -webkit-animation-duration: 800ms;. animation-duration: 800ms;. -webkit-animation-iteration-count: infinite;. animation-iteration-count: infinite;. -webkit-anima

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65462)
Category:	dropped
Size (bytes):	425984
Entropy (8bit):	5.359867943285284
Encrypted:	false
SSDEEP:	6144:BWWJ8uoV36YzsucSCGOqrOPToGeGsSMm5XQF2Z68gf8IfRJZLSxleV:nuctGO0O7oG1OmZQF2cM4B1
MD5:	456B080A945F48D773E2689394E8AD0A
SHA1:	D97EA286789AF6CCECF1D7F83017AC35D1E21564
SHA-256:	67B6618DAE79D244A83A1951E3F6EC2704047D7FCAE97D899F25145B87A2B2BD
SHA-512:	029A6FAB8E32FBD842415576A535B2F6F6CBD587DABAC73E9D9510B84F1A02E7C9F7D05766E320A3692B0938E0A376AE648CEE80E43EEEC0BFA47B49EA0C67B1
Malicious:	false
Reputation:	low
Preview:	/! For license information please see script.js.LICENSE.txt /.var e,t,n={78:(e,t)=>{var n;!function(){var r={}.hasOwnProperty;function a(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var o=typeof n;if("string"===o\|\|"number"===o)e.push(n);else if(Array.isArray(n)){if(n.length){var i=a.apply(null,n);i&&e.push(i)}}else if("object"===o){if(n.toString!==Object.prototype.toString&&!n.toString.toString().includes("[native code]")){e.push(n.toString());continue}for(var l in n)r.call(n,l)&&n[l]&&e.push(l)}}}return e.join(" ")}e.exports?(a.default=a,e.exports=a):void 0===(n=function(){return a}.apply(t,[]))\|\|(e.exports=n)}()},5:function(e,t){var n="undefined"!=typeof self?self:this,r=function(){function e(){this.fetch=!1,this.DOMException=n.DOMException}return e.prototype=n,new e}();!function(e){!function(t){var n="URLSearchParams"in e,r="Symbol"in e&&"iterator"in Symbol,a="FileReader"in e&&"Blob"in e&&function(){try{return new Blob,!0}catch(e){return!1}}(),o="FormData"in

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4700 x 796, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5105578
Entropy (8bit):	7.987363865910071
Encrypted:	false
SSDEEP:	98304:jpuI9/tRUDa/kxRKKElRqG7PQWXO5qF11A2WSobBmj9hPKUrWTBEx:T/tiWsfElRPPQKsu3hnj9hPKbBEx
MD5:	7C4C98385A7132F9762C5A03ACD5566C
SHA1:	715D5201A566E648A1EEEDFD59D70D3D30966778
SHA-256:	03CAF60A77338D1F0740B1E5BC992284C5C95A3359284A91530E58BE88FAF420
SHA-512:	592F1D695A36703D4CB1DC02BB17BAB635B03F967B35F74928BC371E5E23EDC10C1A213DE6824345202FAA20767B7F662BDD47304C1BB75D368AF705D56DB5A5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........+......pHYs...#...#.x.?v.. .IDATx..I.dY...;....\|..........F.. @J"$h.$P.6.7Zh........Z...Zh..%Q..6E..X]Y..2.2f...{....7..{dV........nn..}..............Wp.9.r@.........b.....wh?....?..F.k\|...5....{........../...........N.g... ...u.g.=. ......3W/....vY..z.<>V....?."..2".\|{...Z:\C).p.n.8.....s...=.Dr.....].?.r-......K.....8.....K.......pw....Q$.dAS...o.......(;.0.f....5+..!.hV......n8.%.[(..f.. .&.#.N/#.nd.v...K..O?g..Q........r....}.5cSG...j.....~.....\.F^....3^..x........,S........}..N.q.;..v.g;..o.jdq>....I..y.mIdU^......./..F..R.#.P....,.i..Z.pr.....M\|....X..no..n..W`#V+..@m.P...`..n.a..-!.I=..x.+R+.).R.b.T1Iq5..!.U...P.4..(....tw$.......&E..8}. "..Gp6).E8..O..`...x.5....,B.E....q.:.f..j.U.k.B...q.@...\UAQT..8.f.s..!.5"..`e...m7$Q>..r.3.F.......j.=.. ..Y....g..t.{........e4jq.......~....;..r.?./.C)t.}..r....q.;}R:......KRJ<{r....8.....q..O....."tg.c-.j(..b,.9....K. Y.....n:@QU...#...4;...u].}... ...\|X.T.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	24070
Entropy (8bit):	7.971302993019255
Encrypted:	false
SSDEEP:	384:vPRni9oc8hZ1tjwS4VrJvC6hyZE7CUX6kpmiqyy4hCknyLDJSpmAAgBd7ndW8:vPRniyZ19wS4ThmE7CM6cmShCknGDJSf
MD5:	392BF28B713899EEE8DA29CF1729395E
SHA1:	7D8597CB0CA625E4350D91E886F47B70F055DA14
SHA-256:	1D9B25B739D54AD195D4E7C6B7F403B7CFD57AC332A7074ED671816B50D39D13
SHA-512:	BD88A13F5A00A4A24C829E7777ED6A372A229F820E91EE780ACDF9C8BD74DA3772FBAA7236B9894A01444CC7816EDE9130E7A53C2744F560A95AA3C6B76C23FF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:...,....../.... .IDATx....\UU.....GQ...lDKL.........%Q..(N.d.1.G./\..C....)....7..!.O.w.G.d.50.K..pU..P.(...g..9p......\|<\|<.....k...{....NQ..!..B..4..3 ..B..S$..B.!..@G.!..6K..!..B.,.t..B.a.$..B.!..@G.!..6K..!..B.,.t..B.a.$..B.!..@G.!..6K..!..B.,.t..B.a.$..B.!..@G.!..6K..!..B.,.t..B.a.$......{..zt6.......Bog./j...x.....;..w.zlS........w.Y.zl3..c.jy...X..;.k...\...U...L_...r...q)))l....F..illd...l.....s.Ns=.&....x...=.........&;r\|.z.y's...k.P.....v.q...6.u.<...1?!...t.454.l.T...%`.y4...VP....U.-.7o....s....1......w.8{..]......r.....L..+&m.r..\.^.....p.l....<.D....V.1..>](.!.....,.z.-.L..G`2.[..u..-m...0m.,....CQ..Gy....!C...f..V.;........j.......@.......g.....eM.cyl\...w...K]...,&s]...9...`.:.....oW".7.V..N=.9].[.D.*.%`h:WFfB4Q.&..J....6[...X.\r....X2..g.2.\1l....q..H.x...2........7..#.]M..5..3..r6.+6+..-..}&........N.....F....s.m.....4..b.....o..3~.yp..]..Nf...r......?.O.m.v..?._..V.;.A./..K......@.............

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 39372, version 1.0
Category:	downloaded
Size (bytes):	39372
Entropy (8bit):	7.994889102159506
Encrypted:	true
SSDEEP:	768:7Q9hYWk2+fmpSRBH6JstMqHiw0M+l9+ltOXUAyXhtaV3EHG8DXXmTC:k9u1fvRBHKstMJw0M+lkltxaV3Em8zXt
MD5:	40B6965B5CD26213FAF61E5AB6765BB9
SHA1:	8B040E0FC0C40E0E7CE54EBA07EDA98F35512948
SHA-256:	FBEB296C1ECC216A17BDA77BF65E833CC0410CFBE1908E121F7A4549CC390675
SHA-512:	F4408F43D41C995B5EEF4026E0884B0E62F418E341ACFDA562AFC9C5B1647AF2D7AC7260F7BC72094DF7B7343A1A7CBFBA78466382BE14458255FB9709D96149
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/assets/opensans/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2
Preview:	wOF2...............\|...].........................b. ..P?HVAR.x.`?STAT.$'..../V.....X.u....0....6.$..8. ..~. ....l.V...0.Y.8...7F.6...l.3.!l.."...OIN..........B.\.F..!.:.....V.Qy.}...3.W...H"=.U...$..(%<..F.h$.d..6...i..o..`...X.........b...K.y5..IL.....<...q^f.H"M(..l.....in...n.DN.F...Z.(%.XD.E.....`.#.......a.2"W.nx~.....2..-..e%..D.T+...f..Z6.C......."u..X.....E.M..1....Z..$.=bwU....g+....p......1k.F...(:5..m%.Uy.Sg0...6.....p.D0....%.RP..H......F]....K{.n.n..{....>..D\| 7......CM.....iB...o3.t.=...n..x...?.#.C.3..K.V.....D9..~........&.L........uu..~o!..h....o.....j.....4.D....T..3.16KD.d&OL."..?.R3.K..^b...B(.b..w.D.UKD..l.G.......j.2.......+.o..J.x.A.... .J....I.G{!. M......j.........%C...').4t.y2]......-.mE.$...1..b.En..~..:.M._...J..V.........\.X..Z..U.p..p...F...H..j.5@q...&...@r^...a...A.I;.....EPzn..gH.@mL'..7..\|..w.}....oZ.........8...?.i.n.^Kr.Zs.o}.R5j..BZ...........J.,\|...u}.(;....;1.x.v....a..]AQ.B....m..keU...'..:\|...}..&..E

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 700, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	45605
Entropy (8bit):	7.964959410902497
Encrypted:	false
SSDEEP:	768:OTTTwkMu6xgUg6lYTTTH0FTvVzQdV3TgvkVwXBT/XnUVaAhHAwRT7q4d8U92JQ:duZUm0F9aCkVYXnUFa4TEc2m
MD5:	9E1708134FCC3FCE6BD4DDDA67ACBBAA
SHA1:	5D0206EFF8D2763EF62049B9C864C87182F65D35
SHA-256:	66C28B94B69C6C654CE3E115E927F2E4AA961482A3EFAD991359FC5DFDE21A1D
SHA-512:	FB2E017165063F4223DD8371FFFD777898556F6099F0B4BCB78341192110E6173748603EAE152166A4D4ED4773335E8033FC6F55401DD5E37C6BFB8610CCA7BC
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/DcdJ-wWrTmdgCXUgukd8lTDPZwC4JoY7tncMxQqHyC4/1652680188703-_rA.png
Preview:	.PNG........IHDR...:.............. .IDATx....\UU...W....8..A.. P......TD\|..o.T...W.j..}>\|k.~n..Vx..S8...K..H.F...B"P...CeDA.@...}..8..@..~>.>..}.^{...^...Z{{[WWW.B.!...h.hg@.!..b.H.#..B..%...B.!,..:B.!..X...!...bI.#..B..%...B.!,..:B.!..X...!...bI.#..B..%...B.!,..:B.!..X...!...bI.#..B..%...B.!,..:B.!..X...!...bI.#n.vj2...H..~K.......X..D.{.D>.._.%,~.\|.vu>c#.~K...HZ....4Q).%.U:...<...8v..~V..D.z]Y...........k....k..s';w.....\...B...H........5.I.l..]...v.$.K..0..s.0.....l......1l(.y...DoN.xc;.mW.F6sW.....0.?.....>&....[..........W.X.T....^..Wn,..{.fg.5....`:....W7...=%..x9o...#.....L.._.aF.3J....LR.Z.\.F.(..c..1.]...^.....{....h..2.................5a...=...\|`V.s..5>....=.J.....P.....O.@e...Z;.Ksxk]...3..Qs.......{)....v.....r...LT\|..V.g.H...O.iOO...XN....$..+...j......K..~..&.........W.......=...!.).._..8)..o&..a.&2............<..o .=.o.....k.....l05....#..[..\|.{+...p....'r.?...f..a[e*1..-..8.g3.....M...........v....o.....a...:....

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 832 x 558, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	109440
Entropy (8bit):	7.975124878699861
Encrypted:	false
SSDEEP:	3072:ng21ypY53Yd9bck9te4BFpbfy+Ad5A3Y7gFmow7s:vxYd9te4B3bfqMsgFm/7s
MD5:	F6525E3F53F6104BDC142E965B80685E
SHA1:	C3CA29AD5BF69FFF14BABB02A53F07AEE393BE38
SHA-256:	3E68ABD3FB286AAEA92C282A8562EE63A619F5165F5AEFE9DC7070D147A8D4D0
SHA-512:	22185D4A07315F814B45D2413ECBF227A8CA09060FB35E4EC8F95EC3097D32CEBA27BFA7890FA2C194020B4C63E2FCF1A088B5A57F5D49DCDBD3F54AF6982BFD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...........h... .IDATx..._.I..}./..u.g..3{.....qv...q.c.b..*(9..."..b.L.(9..@w.9'..... .Zq.<.....4.WW]....T]u..r.^".......`@0 ...........\`...J.:..,...........`@0 ...H...$v....`@0 ...........``.0 ...}...V}..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 .....$...@....`@0 .........9..@..9..X..+>....`@0 .......B...$..`@0 ...........``.0 ...}...V\|..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 .....$...@....`@0 .........9..@..9..X..+>....`@0 .......B...$..`@0 ...........``.0 ...}...V\|..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 .....$...@....`@0 .........9..@..9..X..+>....`@0 .......B...$..`@0 ...........``.0 ...}...V\|..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 ..

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	145
Entropy (8bit):	4.620917366349625
Encrypted:	false
SSDEEP:	3:2LGfEaDBBWRKKEKjHXKRATJJUNXR5QJJUIg+URdMLnfmURx0kH3e:2LGFXWRTvaATKIxeMbZ00e
MD5:	42A94D69F30BB1D6593CF1EBEAE45CC6
SHA1:	9DCD89661746CD10EAD242ABCEE09C51089E5DB9
SHA-256:	1F76737DD179FE15C0F84212BD861BCFB29936BB9B901A4D3346E454DB842C36
SHA-512:	E4648DA60F017CFC33B32A5EDA4327C88F69AF17415883530421CA4355517E8A45F39EC0777D610A6C02363DE40263E3142122E2596EE5AE14131E958C115087
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/kb/v2/deployed/5de5c1e688134/4db52de3-999b-4de9-a518-4952820c5cb9/localisation/en/lang-snippet.js
Preview:	(function() { window.customLocalisationData = {'kb_footer': null, 'kb_header': null, 'kb_meta': null, 'kb_tagline': null, 'kb_title': null} })();

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (60218)
Category:	downloaded
Size (bytes):	97195
Entropy (8bit):	5.257075254400086
Encrypted:	false
SSDEEP:	1536:eIlllbbbbbbbbbbXqrYIqatyQa/PaZL0F/d8Uu8WU9:0ai8amWQ
MD5:	69C6F3A86F38D23A3EB498F1E7899F2F
SHA1:	C3DFA482B5D353DB214E14CC5D2C722EDBF5FB9A
SHA-256:	25985C2EB22E8069E188A6628A08E3857E07AE1C55B799F1AE2EB40924954DAA
SHA-512:	B4C16E2C68162318C27D22F9DD49B75CEABA6639EE8C65F777E60B9E5C6C4DA34D04587E9F962FF955F6EC6781901003822A1E1656F7C9D2515238298E4D3EB9
Malicious:	false
Reputation:	low
URL:	https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request
Preview:	<!DOCTYPE html>.<html lang="en">. <head prefix="og: http://ogp.me/ns#">. <title>How to Create a VPAPay Payment Request</title>. <style>. body {. margin: 0;. }. .elevio-kb-wrapper {. -webkit-box-align: center;. -ms-flex-align: center;. align-items: center;. color: #3e4c59;. display: -webkit-box;. display: -ms-flexbox;. display: flex;. height: 100vh;. -webkit-box-orient: vertical;. -webkit-box-direction: normal;. -ms-flex-direction: column;. flex-direction: column;. -webkit-box-pack: center;. -ms-flex-pack: center;. justify-content: center;. }. .elevio-kb-loading-spinner {. -webkit-animation-name: elevio-kb-spin;. animation-name: elevio-kb-spin;. -webkit-animation-duration: 800ms;. animation-duration: 800ms;. -webkit-animation-iteration-count: infinite;. animation-iteration-count: infinite;. -webki

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 856 x 901, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61147
Entropy (8bit):	7.7996290421032946
Encrypted:	false
SSDEEP:	768:TJljkcSQcaTQVSu+JEbGLa0SItSPE/VoUJ6/jFZDkk7rP6Ro/S03qJIJP69b4jp3:T7YDQjwYapUo8W/NBx69JG
MD5:	3DF2D45558FE944066081439E4A8818E
SHA1:	D7E5C1BFD7D15D2F9670A062B2917B762B4607CC
SHA-256:	60DF66674B21E487AA6BF46EAF318C398C55CFFA68A7919785097B096911E50F
SHA-512:	9CBB6BFFCAFC20FC00D330A791208518B90DA9035EEAFDCDCB4AA2578A9014F622FFC08A55772E3B9DBB849C0493A551CD292FA811236F082A465278B9DDFDF2
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/wqyZMvQTjBUpjrf8yGk1E5gDErQgg-UeGC1Zecp9mX0/1727660563386-TzA.png
Preview:	.PNG........IHDR...X..........].... .IDATx..WTW.....>.q..=.990....sl.!.`b...6.........czU..PB..T.&(...J...QDP@....R.v.....[..b..0..j.\s..7..Y..i\|...#........4......... .. .. .. ...............9-.................=.s...b/..1............<..B....@..@..@..b....Nx.c..i..........'0....... .. .. .. ....4@..b.#. .. .. .. .....@..@..@..@..b.......,vd..@..@..@..dx.Q.@..@..@..@ V..k8VK............y...1_....@..@..@ V.@..j.#. .. .. ..1O.B0................X-y...@..@..@ ..@..\|............X%.!..%.\|..........<.9.7.b.............@,.....RG.A..@..@..@@.e.AT............Q.s...5..e.l..........8.9.7..8.d..@..@..@..b........,z...@..@..@ ...)i....J............&.9W.u.f.k...........q.XP:.+.... .. .. ... .c..s..........'.!...............]....[..s.PK..-+....;..o.z.;?/..G..;6'..7w^...3..aLo........1.I".o........tP/.4x......c."....1.....C.......s.<..9.....?.q..e.../lX...K.;6'-^H..K.6o....-...GOhEK.ij...[.`...y.Z..'3.b...`.t-.V....S.........S"&>1...9....8.Z..l...T.._.z.......{9../..x

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 566 x 578, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	58544
Entropy (8bit):	7.979616778695922
Encrypted:	false
SSDEEP:	1536:XWSeAgT/q4LS0SwRa6GbFxAKCdY23Vw4ksxo0mA:1fgT/q8vG4dNa4k+
MD5:	49398D51CF1396AF8B1A383C67003E49
SHA1:	9BC90BCB7BBB10914495D8BC91DC814C97135700
SHA-256:	EE5D37F6EA7976BA4558306C6995B698E9023B2BE8A5477DD4FC343377F3F14F
SHA-512:	3180A7A506E27DC692996620402F801C947FF1049987F6DAE69F5A01D94D55D538682C3427B817011BBB14B4E0E05E15A4D9CB4C85F81EB27D0BC5C74D27FA40
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/OsOFUPxmwvAhgpYBuNj_megWSBxvENU2DZ1s34TBiFk/1699504624427-AFU.png
Preview:	.PNG........IHDR...6...B.............sRGB.........gAMA......a.....pHYs..........o.d...EIDATx^..@......!.. "....7Jb...._M3...LK.YVffeZYjY^y.w....... .. .........^.E......;.......w.yvF.A.. .. ....hJs. .. .Z.... .. ..$l.. ...3..!.. ...@..D.44.-M.6..H..A.E..U.....a..^.bC(.....mMh..F.$.. ......e)/S...Q.....0..A.../Sy.JT.$l...V.I&.. .J...d..>...FKK..:.~.... ;;[....z..&.=..._...B.....3.d.H..+....M......J..A.Enn..GD._...%H."9...sS.T......q#...tuu....<...0~.e5b.>..j.A....>.....F./..N.k.B...5o.5../}....... H.. .....)).8r.${y.a.....M~~.r.H.T5U&lxE.......H!%....._..3RH....#....X.n...;%..N..FQ.....y3..5D..hjR.%A.Dypa......<l..w...?{.H...R.j...?z...R.'.>......;R@.Qe...'.......%`..q...X[Y.U/.!...@..c.......--..#..7...6..=!. ................ih......8.Ll.j.)..L...H.....i...F...OHDNN....W.aQ....e<NL*......[ ,<....DGw.wC.aC....".I2n....9zz.h...:::B....Z.t..x.U.....b.....Ll.........V....UWs....p.d.d..<...^pa..G... ......xsT".K..?.....bE.s^.a........=Z..H.SEz"n

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	dropped
Size (bytes):	413276
Entropy (8bit):	5.373855592666549
Encrypted:	false
SSDEEP:	6144:C3vl7ZKxOQ4IfY80Sk6hPYLb8BycYTHNWvNbv4GirTt6JsNGDf66T:86h+cYTYvNE7Tt6JsN4So
MD5:	A43F0C305C53D5DC0ED4C2C493ABB1BF
SHA1:	C1D771F8A7994D82C0BE9DC7729932ECAC063528
SHA-256:	E21296C1E41372E1B93D621BA9F90AB700D8FB868BD56C1550A41727F2F53C45
SHA-512:	E47071F3C273041788415D04575CCB84CB4AE33F7352BF011396B2156F12789D0E69239339536EBF3CF985F3248723FC9BEE124AF67428450AF4B9FF258002D5
Malicious:	false
Reputation:	low
Preview:	/* VimeoPlayer - v4.39.0 - 2024-10-29 - https://player.vimeo.com/NOTICE.txt */.var e=Object.prototype;function t(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)}function n(e,t){return function(n){return e(t(n))}}var r=n(Object.keys,Object),i=Object.prototype.hasOwnProperty;function o(e){if(!t(e))return r(e);var n=[];for(var o in Object(e))i.call(e,o)&&"constructor"!=o&&n.push(o);return n}var s="object"==typeof global&&global&&global.Object===Object&&global,a="object"==typeof self&&self&&self.Object===Object&&self,c=s\|\|a\|\|Function("return this")(),u=c.Symbol,l=Object.prototype,d=l.hasOwnProperty,h=l.toString,f=u?u.toStringTag:void 0,_=Object.prototype.toString,p=u?u.toStringTag:void 0;function m(e){return null==e?void 0===e?"[object Undefined]":"[object Null]":p&&p in Object(e)?function(e){var t=d.call(e,f),n=e[f];try{e[f]=void 0;var r=!0}catch(xl){}var i=h.call(e);return r&&(t?e[f]=n:delete e[f]),i}(e):function(e){return _.call(e)}(e)}function v(e){var t=typ

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1362 x 1287, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	116803
Entropy (8bit):	7.932400654900833
Encrypted:	false
SSDEEP:	3072:W6EurbAObe2oKtvDQ2qi/wsuUW2HVLwA9:/IOC+trQYzl9VLwC
MD5:	0CA2EB06177B6FF792E37AF71C5422F4
SHA1:	FD9961CE75F66C46A8697A4D257061D19A259711
SHA-256:	82E794D16B5CCAA025527B449D16FB0613099CEA606DBEAFF5CD525806AD7EA0
SHA-512:	58CBB7214DEDFC54A033C6E4E7245FA00B82377AA593D128BC33D29C93B50EB0C74EB74228A7DB6162E06FAB30E6227097DE80A804ED5A2F8690C0ADFBECDA1F
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/p2NnZFkS1zXyQJXovJXAEPQpYFskgfARZhd9igox-fk/pdf3-uXQ.png
Preview:	.PNG........IHDR...R............:....pHYs..$...$..P$......tIME.....24<..~.. .IDATx...}X.u...w..E.!b(..A...LF."...e.6.C...6...360.g;.j.......hQ['.hL.H.(....0L..@HDb!.R...x.X.R.......{...~.{.....>\w...............N..............\.............. UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ ..(,*

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 13744, version 1.0
Category:	downloaded
Size (bytes):	13744
Entropy (8bit):	7.955595683131451
Encrypted:	false
SSDEEP:	384:dsZazX0Xb76NWeia5Zo/5j3shfWMrrs29lwe:QkXIb7YFvO5TQg6lwe
MD5:	D0F1CC11F68556411A88C400C8E199ED
SHA1:	B4928C0DB93F5652F88A8D8E402C3BA38613DE9C
SHA-256:	3D4AD7BDEEA12089935E069557D320D851F83AAA2FB5A95B02669DC71CFC69EB
SHA-512:	61C4FEA476831BBFFA8B2C0275653AA65B40ED0EF39110CA48CB6EF61EA2BD4A39FF5A79D7042377089418B6BA3239956C8198276B72897BED00F9866E3B4B49
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/sdk/fonts/elevio-noto-sans-700.woff
Preview:	wOFF......5.......NX........................FFTM...l........o..~GDEF.......H...\.)..GPOS.......r...DU..DGSUB...D...2...@5.N.OS/2...x...`...`y...cmap..............(zgasp...\...........#glyf...l..'$..8.....head.......4...6...hhea...........$....hmtx.......$...p..Q.loca..1.........."..maxp..2.... ... .:..name..2..........HR.post..4........LK...webf..5...........X..........=..............4k.x.....@P.....M.T...}A{..4c..n.iI@..\|SPy.......-..u.`a..;.>....../.?..x..IHUQ...W....H....G....=.8<.J.....i.....-..h.9+.h.....W.......Jx..-.0..>~}..s.......S i.v.Y.....i...#Z.w.h.RJ0.\|^.[s].Gz... ..I... ..@..n..dP..A&(..s.M......Ta(I$.SE..t....)"]4..`n..._...H.....G.....J.,.M:.rr.T..:.U...C...(\..p......xH^..xf....^........0.'....g{.Se....2..\|u...].ha\y....7.+g}...._M..{..[.*.^..p.n.~..b.[...R............A...v.~;..-W}...5@#4A.3[...vr..A.DQ.y/s..~..\|..a...p.N.\|.n3~..w.......16....<....^.kx...==}....>.\...M.D.^.O..=]z..t..2...."GJ.R...C..3...h.&..@+.q.N.;...W.R)K.,..T.R)...?<~x.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24803)
Category:	downloaded
Size (bytes):	38190
Entropy (8bit):	5.367527896816759
Encrypted:	false
SSDEEP:	768:BkYPHymAIqTHE+XeFVffDVMBJ+XqTf8jzXCAoCoDJQo736096Mt0HWOBl87f2KTH:BkGHhALz7WdFokE
MD5:	2D84702E8BCF044708D12E3D8C5551D7
SHA1:	A1E2183F33AF39419222501840D7529BFEFA041E
SHA-256:	095EE36C8A94F2001BDB0CEB7F356EEC01DF133BCEDB3C806DB655A5F50D4191
SHA-512:	0690C74C697C39998EB4598B66C353FCC7AEF978D3E5B4CCB2F428392AB0741C1BCF101C3CF40CBC8B301A0C6D2C2EA0C7D1DBED9529B550756E64003B29DF08
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/styles.css
Preview:	@font-face{font-display:swap;font-family:Open Sans;font-stretch:100%;font-style:italic;font-weight:300;src:url(assets/opensans/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6FxZCJgvAQ.woff2) format("woff2");unicode-range:u+0460-052f,u+1c80-1c88,u+20b4,u+2de0-2dff,u+a640-a69f,u+fe2e-fe2f}@font-face{font-display:swap;font-family:Open Sans;font-stretch:100%;font-style:italic;font-weight:300;src:url(assets/opensans/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6FxZCJgvAQ.woff2) format("woff2");unicode-range:u+0301,u+0400-045f,u+0490-0491,u+04b0-04b1,u+2116}@font-face{font-display:swap;font-family:Open Sans;font-stretch:100%;font-style:italic;font-weight:300;src:url(assets/opensans/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6FxZCJgvAQ.woff2) format("woff2");unicode-range:u+1f??}@font-face{font-display:swap;font-family:Open Sans;font-stretch:100%;font-style:italic;font-weight:300;src:url(assets/opensans/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6FxZCJgvAQ.woff2) format("woff2");unicode-range:u+0370-0

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1002 x 282, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29824
Entropy (8bit):	7.856345498198017
Encrypted:	false
SSDEEP:	384:1YHMqZpZI7n5BOz02ttMKdcrFS1NerX2+NGorEN7zjlOokhlZrybUf+vzd0VS:wLZajGJttndcrc14iaUQfbS
MD5:	532590C3C7AEFBBA68D97743DAD7F547
SHA1:	2126964CF5C3F871CD90B90AF805E35921F277E4
SHA-256:	F86A7BB77F2E98FE4E2960D66D61FD67E7A59C25BDD8DA51D794AEA367E20CEE
SHA-512:	E09FB424C98CA610C6BA1063330F2416605CF956EBE9C3CF7C1481D9CD638DA864AAADD6A862EFFC0D1118ECF23F71357EC14DB707382126169AB632F89C2B1A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................... .IDATx...p....d2.L2.sOUNyRs..W.k.{...WN.M.q...$.Hl..!....:v.x...'.....<.b..,@`^62.d...y........F..#.......{...[{K_.b..z=~k...[.V..z....AWWw...}..>.6..W.\|.T...W........................@.\|..yn2..}.4...B.P?..O{0B.....4.B..d.......8.Q.2V.O.."..6.6.6.6.6.6.6.6P.m .......B.\.6.kS......4....I.....{v.'q.'....................v..9.&..$.....PO!.- ~....2l&c...r.ZZ7..tARYu.V.P.P.P.P.P.P.P..~m ...._r...[.....\|....{X..w.. 1.3..................x..ET.L.D1*....F..Q.o..D=.}....U....Bv.........................@.;.....W+..".l$..(....r7..:...x....................6PH].......P/Q......-_..q.V=.................B.(.hL.=....%..P....X.W\|.....................h.....y/..ECU.. ......................6 ......6.6.6.6.6.6.6.6.6.6.6.6PDm g..y..>...~.?1P.P.P.P.P.P.P.P.P.P.P.P.P.H......s...I.3..]...6...........................s..9.u..H...........................u4.t...9.u..k..........................zn..Z.D@.D@.D@.D@.D@.D@..F@B.`h..............

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	145
Entropy (8bit):	4.620917366349625
Encrypted:	false
SSDEEP:	3:2LGfEaDBBWRKKEKjHXKRATJJUNXR5QJJUIg+URdMLnfmURx0kH3e:2LGFXWRTvaATKIxeMbZ00e
MD5:	42A94D69F30BB1D6593CF1EBEAE45CC6
SHA1:	9DCD89661746CD10EAD242ABCEE09C51089E5DB9
SHA-256:	1F76737DD179FE15C0F84212BD861BCFB29936BB9B901A4D3346E454DB842C36
SHA-512:	E4648DA60F017CFC33B32A5EDA4327C88F69AF17415883530421CA4355517E8A45F39EC0777D610A6C02363DE40263E3142122E2596EE5AE14131E958C115087
Malicious:	false
Reputation:	low
Preview:	(function() { window.customLocalisationData = {'kb_footer': null, 'kb_header': null, 'kb_meta': null, 'kb_tagline': null, 'kb_title': null} })();

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 396 x 84
Category:	downloaded
Size (bytes):	99074
Entropy (8bit):	7.820837064247666
Encrypted:	false
SSDEEP:	3072:OrFMup8lpp6Kdg7juXT1Xj3D9UZcLrNK+X:yFjFKdGSfrNBX
MD5:	FA72E0BC312EEAD0559CFC43C5AFAEF5
SHA1:	0646851443C65F7855BFF1EA410BD68A186E229F
SHA-256:	E4BC06AE2B868CD0346D65766017034C5A41CCD43C0E4093C995A4C6A2DAB35A
SHA-512:	9C7DD48345539A1490CC14F668749E2EB5C2A7BD224275CFE65F24095C95B1691BFE3C9455678275C06CF3DC67186E43370371AD6B225590EFEA66B341E5CB35
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/qnOdkoEwzZ9_pDN75XBm7rqCquXQeJzU3a1gMuaW96w/2023-01-31_14-14-49-en4.gif
Preview:	GIF89a..T.w..!..NETSCAPE2.0.....!.. .!.......,......T..RL.VL.`D.Z^.`^.BZpFZpZD.`D.ZD.^L.^T.^T.^^.^L.D`lTL.L^lLT.D^.L^.TD.DT.TZl^ZlTZ.ZHlHTl.4x.4.&.8"$8&$8HH\|".862(:2(68(.4.2,@8,@R.\|."(."8..(6..&<.\\..$.26(.@\|\\.8,,,. (..(&..,`$..B8@..D..(\N.BD...D..tBD...(2B0NV... ..02V...$2BP.T.VV.F.......<.. 6@..Z.V<.B .....Z\<J.> ........FpJ..B ........P$.2.6 ."(P.&(22@....^.2VHB<.2&.... .2~.F"...$.0 ....$.(...~L...H">@......R.,$........L..$ . ..". ... ..(..&0(22T".8, .&....@0"P .(4"0...B...0,6464..&((.@"@208.6.,,@. .86<,"8@.x28<.......2(V@0FZd..4224...::$......*,&,...."......$..$..$*4&"$2.&$22$......&"...&$..,&",.$..........,...BZd..."",.&.2..22,:6,"&,.",.....$::,"................,...2..2.4.........2.$.....&&$...2.,2:$""..&....2$...2:,""$..."......".....4."$..,&".*$&&,.$...2....:6$...""."&$&,......M..H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K.,.U..:\|..(.W..Z..6"..VY\......{.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	39850
Entropy (8bit):	7.958619062871414
Encrypted:	false
SSDEEP:	768:LVoPm1N4nB283DEqJ8HSxKAfkYHJyBXkUjlVxkbAQYh0Y:BoPkNufTE+CStRUVZbkbiGY
MD5:	2F151D704FEB2019E4F6E6DEE59521FE
SHA1:	868B21424894A07FF9F6B380F566E9E3D01AC9F7
SHA-256:	C68DFF5CC6697B8481577C4D7899AEC69DA57908B86459C168CF09DD58C6261B
SHA-512:	B73D6194E24EBE4301B0931C193503FFE5B938E0245F7C78522CA44EA6433D98964C976D507B19A4A2A3BD431034E4272DE1D84F65F3A96AA36411017E6FDC71
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/KE8lAwS02mN__nx-ChzR9ZvEWvTy3PmEalKKuUGwafY/1652680257372-qOQ.png
Preview:	.PNG........IHDR...:...X.....ktL... .IDATx....\T.......t..R.....@A....M."..'..=..h..>...o..~.....M.y..\.X.%..?J4.p.Q.... ..P.........` Q....G...k....k..Zko~..O?...B.!...q.3 ..B.1T$..B.!..@G.!..vK..!..B.-.t..B.a.$..B.!..@G.!..vK..!..B.-.t..B.a.$..B.!..@G.!..vK..!..B.-.t..B.a.$..B.!..@G.!..vK..!..B.-.t..B.a.$..7A;.9..<....../....pt.@..I.<<.....y.j.6u1g..As..ZGV.m.2U)..]..wM.lJ.bN.6..Q.n k..,.....o..{.=v...?.h.:?..#;w.d..7<?C..\kA.Y.<.Cp.\.."X.2..R.m./'.+'YP'n@z].....,Y....x..ld..Hy^).L\r.'...h..mh3w....].C..l..J.cr..b.9K.Z_.7M..oHd.<.vV...Gi.:.l...a..bj.W.7.tn....7..(..{+....6....@.=...R...6...O.Ks..pE.E.-j..-.c.8/.....+..]m..a..Y.......ye{..+7k.~.F.......g.M..?..={8..<...7<?C...(.H\R&.g../k.\.,...._.._.n.+u.dnN$.\..<...#..(....v.....\{.;..g..............U..\|..rW...._?.S.y\|-o.Z....TS.s.Q.rb.AJ.....?..a.[).z.c...pm..-Y..VX.g...D=....6..s............z..r.r........N5X.\|.dA.......r.v&..n....).L.I...z.n...8..N.... ..;.$....gH..+..

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	downloaded
Size (bytes):	413276
Entropy (8bit):	5.373855592666549
Encrypted:	false
SSDEEP:	6144:C3vl7ZKxOQ4IfY80Sk6hPYLb8BycYTHNWvNbv4GirTt6JsNGDf66T:86h+cYTYvNE7Tt6JsN4So
MD5:	A43F0C305C53D5DC0ED4C2C493ABB1BF
SHA1:	C1D771F8A7994D82C0BE9DC7729932ECAC063528
SHA-256:	E21296C1E41372E1B93D621BA9F90AB700D8FB868BD56C1550A41727F2F53C45
SHA-512:	E47071F3C273041788415D04575CCB84CB4AE33F7352BF011396B2156F12789D0E69239339536EBF3CF985F3248723FC9BEE124AF67428450AF4B9FF258002D5
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.39.0/js/vendor.module.js
Preview:	/* VimeoPlayer - v4.39.0 - 2024-10-29 - https://player.vimeo.com/NOTICE.txt */.var e=Object.prototype;function t(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)}function n(e,t){return function(n){return e(t(n))}}var r=n(Object.keys,Object),i=Object.prototype.hasOwnProperty;function o(e){if(!t(e))return r(e);var n=[];for(var o in Object(e))i.call(e,o)&&"constructor"!=o&&n.push(o);return n}var s="object"==typeof global&&global&&global.Object===Object&&global,a="object"==typeof self&&self&&self.Object===Object&&self,c=s\|\|a\|\|Function("return this")(),u=c.Symbol,l=Object.prototype,d=l.hasOwnProperty,h=l.toString,f=u?u.toStringTag:void 0,_=Object.prototype.toString,p=u?u.toStringTag:void 0;function m(e){return null==e?void 0===e?"[object Undefined]":"[object Null]":p&&p in Object(e)?function(e){var t=d.call(e,f),n=e[f];try{e[f]=void 0;var r=!0}catch(xl){}var i=h.call(e);return r&&(t?e[f]=n:delete e[f]),i}(e):function(e){return _.call(e)}(e)}function v(e){var t=typ

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1426 x 1501, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	125135
Entropy (8bit):	7.897534928462052
Encrypted:	false
SSDEEP:	3072:cDn3lE9Jt6QFmnBtEDHkyWhLpx0QqFJzsV9uD2vR1:SOF6QERhv7qFJ52X
MD5:	27B74B29602881F2937CBBA6402502F7
SHA1:	B5175692A00ED874BBAB0C0068522CF826383A37
SHA-256:	350F38E5A4FE0E04AE6F0743ADAEEC2F513748D552B4B084C27B98640CFF0429
SHA-512:	D8B00F9BC8830B74E19CE4840B6DFCC208506201B5438E952254EE34B4BAE252B976D799F1C3188ED60B4CACD69BD3B4CCA116A2F5737EED54B2D8C86842DFAF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............s.......pHYs..$...$..P$......tIME......6..@t.. .IDATx...{\|..y...}K.,..6...mN...CI\.qi....~....iki.%..B..[._..m.$d[..V.C.@J.#....$5..B....'[`....lY.t..?t.%Y>........}..m.}_.>Ji..]'..(J...q..B.!..B.!..B...#...cg..`...i4.%..B.!..B.!..b.P.U..!..B.!..B.!....x.@.!..B.!..B.!..M..d!..B.!..B.!...HE..B.!..B.!..B..T)H.B.!..B.!..B...T$.!..B.!..B.!.HHE.$.!..B.!..B.!.H@*...B.!..B.!..B$$A..B.!..B.!..B..T.l!..B.!..B.!.."..H.B.!..B.!..B.....B.!..B.!..B.!.. Y.!..B.!..B.!DB.$.!..B.!..B.!.HH.d!..B.!..B.!...I.,..B.!..B.!.."!....B.!..B.!..B$$A..B.!..B.!..B..$H.B.!..B.!..B.....B.!..B.!..B.!.. Y.!..B.!..B.!DB.$.!..B.!..B.!.HH.d!..B.!..B.!...I.,..B.!..B.!.."!.x.@...j.r..X...:r.F[.x.I....]....5...I..\..B.!..BLl....q....r....~..x.I.1J.[.......u.. .....L.Z.fw.p.t=.....b.2..\..j..~.&v..3.....K...}........B.!..B.....~._.J.,..$A2..p..e<.\|YTx.W.......k...<U7.#.c.j.......<.s.CR.,......{.....)...[.(,.'%E>.!..B.!...<./..&.\|.....<..x. ?.......#.....d..j........G....=

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1468 x 722, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	64407
Entropy (8bit):	7.843012927021704
Encrypted:	false
SSDEEP:	1536:QL8fkfVws8A4kgg3+OA3QoJS5teSoPb24HyLi3/kn5R2LG:m5fqJgOOqQcSPeZ5y+/k5Rz
MD5:	8CA45EF1D0B962D5C1FC414EC7898551
SHA1:	95BFE7E4BA1F078F310BFD31AF92AB344C59C2DA
SHA-256:	DA5C0F7DE09004E42A33FC6F1190A4C581AD0A0963E2F19BC0196E8C4784CBCF
SHA-512:	4A70550ECE3D684E70F3754486F9CF8C7DA34D1175288B5F161F86B61F3D309CC6157717E9D87F632F48AAFB9A32CF7A9C1D98E994F055EA5FBB7C227CE7E890
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................... .IDATx...w\|TU....$C...$..R...w."b_u.u-..~..ZW......!bEPP.A..^.!!.BK.t.&3.?b.$.N2i$........;w.........KAA.CM`.X.r.&.zl..I.........h......d..........&.o.m.......@S.Z....p........`...............:k.w]!vc.........P...oW....,........@u-.x..^7.vC.........p~h......u..u-W{..biR;.........G........_{.."U.%.$9$..j..p.L.m..7..........2dnzp..^.5..Xd.;dw..t.X.$.m.......@=.....^...u._R.Cr.k..j.P..........E...C0OI........@.&..f..M{p.f.]aw.!K....^Vy{Y.... .........`......m.....PE..%.....x...J.........h..d.S....sW.6...U8,.;...~.^.............. ..=...n...w.C..~&L......W...........Q..ow....'...IR......-..G35.........3.....].....?.....~...d..............T..qpJ..SM..~....V7........e5...Y.nI.=....;..............@..[P.U.n..[r.1!..........Mu&.u.RY{Ze.]..w..&..........U...6c,e...U..t.f7........s.x.U.._U....:.y.p.........0r..w....v............b.x.......+.?....^.z6.B.........MfH.k..=.F9.Y$Y..a...W.6............%.,....R&...............zv.^=..."Y

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1980), with no line terminators
Category:	dropped
Size (bytes):	1980
Entropy (8bit):	4.708092622826162
Encrypted:	false
SSDEEP:	48:uArP9+DpqxoOqBpMcEpauPMcQKeIjODIGo:uArPAqxoOq1+PMfKeIjOC
MD5:	607D620E77C71B39B5F6FCF8E8C34F12
SHA1:	DBB2B05E56B3C292D5B641EBC53C93F38302D443
SHA-256:	1E7A1766D510624721061D906FE7C65ACFC37206C7FDD3BCB64A7B6DB1307F27
SHA-512:	F7259DF55C29DF9ED94C0BA95548EBC7746C6262C581CD14FC5653C62101B6B9E1FC45D1BC50A8DFA38E0FB1355EF7A7621751E71951313F34E89777F2BDABFF
Malicious:	false
Reputation:	low
Preview:	(function() { window.localisationData = {'internal': {'restricted': 'For internal use, with restrictions', 'unrestricted': 'For internal use'}, 'external': {'restricted': 'For public use, with restrictions', 'unrestricted': 'For public use'}, 'sdk': {'feedback_helpful': 'Was this helpful?', 'general': {'something_went_wrong': 'Sorry, something went wrong'}, 'thankyou': 'Thank you', 'modules': {'support': {'email': 'Email'}}, 'feedback_type': 'Type your feedback here', 'submit': 'Submit', 'feedback_improve': 'How can it be improved?', 'submit_anon': 'Are you sure you want to send this anonymously?', 'skip': 'Skip', 'kb': {'login': 'Login', 'requires_login': 'This content requires login', 'click_to_login': 'Click here to login', 'content_unavailable': 'The content may no longer be available, or you may have mistyped the URL', 'unavailable_suggestion': 'Try searching above, or visit the home page'}, 'more': 'More', 'trigger_search': 'Hit enter to search for:', 'sorry': 'Sorry', 'no_result

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65447)
Category:	dropped
Size (bytes):	612167
Entropy (8bit):	5.628926758438663
Encrypted:	false
SSDEEP:	6144:r4e1VmaYlNkTXY2JO5IEtGTa3zAy31q1Yu02f1SCw3aIgW/C:JXzY3ehEFDA41q1Yt2f1SCwqd
MD5:	C5AC31842070F1F00A120A5B26ED224E
SHA1:	5B524D0BDA499A837FD9FC8283E17BADC7EF671F
SHA-256:	B5910BC08F33A440CCBFF5FA455A4A26331107D7FDE4BBF2B688A73A9D6D19DC
SHA-512:	ED82481D2CACE0B13FC930E71F531DC4F7E181CB7900808289F6D898C41E04FF7E424F911F65CF77768D87A53970201D529089021D4BABA184410AB0ED51EEC0
Malicious:	false
Reputation:	low
Preview:	/* VimeoPlayer - v4.39.0 - 2024-10-29 - https://player.vimeo.com/NOTICE.txt */.import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,u as c,L as d,g as u,f as p,x as _,h as v,j as m,t as f,k as h,V as g,l as b,m as E,n as y,o as C,r as T,p as L,q as w,P as A,T as S,v as I,w as P,y as O,z as k,A as R,G as N,B as D,D as M,F as x,E as B,Q as V,S as U,H as F,I as H,J as G,R as W,K as Y,M as q,N as $,O as K,U as j,W as z,X,Y as Z,Z as J,$ as Q,a0 as ee,a1 as te,a2 as ne,a3 as ie,a4 as oe,a5 as re,a6 as ae,a7 as se,a8 as le,a9 as ce,aa as de,ab as ue,ac as pe,ad as _e,ae as ve,af as me,ag as fe,ah as he,ai as ge,aj as be,ak as Ee,al as ye,am as Ce,an as Te,ao as Le,ap as we,aq as Ae,ar as Se,as as Ie,at as Pe,au as Oe,av as ke,aw as Re,ax as Ne,ay as De,az as Me,aA as xe,aB as Be,aC as Ve,aD as Ue,aE as Fe,aF as He,aG as Ge,aH as We,aI as Ye,aJ as qe,aK as $e,aL as Ke,aM as je,aN as ze,aO as Xe,aP as Ze,aQ as Je,aR as Qe,aS as et,aT as tt,aU as nt,aV as it,aW as ot,aX as rt,aY as

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 13976, version 1.0
Category:	downloaded
Size (bytes):	13976
Entropy (8bit):	7.950747915797219
Encrypted:	false
SSDEEP:	384:aCzX0/WojcQqO58nhiedYkTXvaDoZO/hcg:XX8WMlR5k2kTfUoScg
MD5:	66388EF84FF4C5D874ED3875EA4C110B
SHA1:	E2D4357D05167A2E646B99A4B885835F9AFAD166
SHA-256:	0EC90D231372019FBB27C844CCEFDC46A6837F62906FD4C9ADEFAB05FA10C963
SHA-512:	5BE06EA05056DF461353F5F9F95ACAC4158985D5F2E98A84284DF45304C3CE89653F393EDD9DB558D84971E948E94B223000B069A8C258D3564E617167DC03C8
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/sdk/fonts/elevio-noto-sans-400.woff
Preview:	wOFF......6.......N.........................FFTM...l........o.u.GDEF.......H...\.)..GPOS.......r...DU..DGSUB...D...2...@5.N.OS/2...x...`...`w..cmap..............(zgasp...\...........#glyf...l..(...94X..Xhead../x...2...6....hhea../........$....hmtx../....$...p..\.loca..1............maxp..3.... ... ....name..3...........Qbpost..4........LK...webf..6.........g.W..........=........Y....."..x.....@P.....M.T...}A{..4c..n.iI@..\|SPy.......-..u.`a..;.>....../.?..x..IHUQ...W....H....G....=.8<.J.....i.....-..h.9+.h.....W.......Jx..-.0..>~}..s.......S i.v.Y.....i...#Z.w.h.RJ0.\|^.[s].Gz... ..I... ..@..n..dP..A&(..s.M......Ta(I$.SE..t....)"]4..`n..._...H.....G.....J.,.M:.rr.T..:.U...C...(\..p......xH^..xf....^........0.'....g{.Se....2..\|u...].ha\y....7.+g}...._M..{..[..^..p.n.~..b.[...R............A...v.~;..-W}...5@#4A.3[...vr..A.DQ.y/s..~..\|..a...p.N.\|.n3~..w.......16....<....^.kx...==}....>.\...M.D.^.O..=]z..t..2...."GJ.R...C..3...h.&..@+.q.N.;...W.R)K.,..T.R)...?<~x.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 540 x 619, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	52418
Entropy (8bit):	7.963722494643051
Encrypted:	false
SSDEEP:	1536:OVggS7NU73S3Q+xdp/PtZwEoHtZZZZZZrE3Lpwb1Xhz76:O2X/x9ZwDbZZZZZrY+bZhn6
MD5:	9C01DFD69AA193AD5AAC620045CE83F6
SHA1:	CD44AF5EAC2617F83C005CE8D197ED2DB7D865E7
SHA-256:	23EB9DC9ADCD70F6BC11F3CE1B96B9CA32B6AEEB46A74CCB11DC17DA002212B9
SHA-512:	AB630CB5E186CA6AB2C49CF9FD5185E96D80FC6AB9136C0346CC87250BE1DA059427EC5CFAF17CF5996538BDEF5FCC87AA43CCB5A8A0C248367F7BB3398473C7
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/-8GkZpBDzRJeT8NDENojkWJfl3ZVC-XMk-FdjmaA86A/2023-11-09_12-43-37-KEk.png
Preview:	.PNG........IHDR.......k.......J.....pHYs..........+......tIME.....1#...... .IDATx...}\T....0..=.. .2.(...xW1JH.+I%.7k..nM.$6M.i6i.M.I.ll.&k.vM6I.5...c....A.t.Qn..&......`.AA...y>.<..s.s.3...\.u..4..u!..B.aE....B.!....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....1H...........x.....Ys.e.._......B.!F2.5..]./.?...!S.3o...'..;k....9.EKn.......C.?@.;~..7..<..O.9\.<.....j..{<.Ng...xl.d<......b....0.............._ji....v.:..>K7......7..%........m..B.....H..\|..5..KZ.Zn.../3.....r......ui..l:..c.> wP..Z...};......a.....x..#L/...[..[.h/[.1....I.$l.!...-...X...`...e.9v\|.!.....^L..aW-a..}.....{.#/..Q..f.........W..!...{.<.l..#.!~1.;8..x.C\|..V.R.G;.......m'..> ..{.~\|?!.M..B....-.....L.T.O.C.........\|..\.+..[y....0.8.!a.s..y..y.S_5........S._v.........+..=......G>.L..\|6.g.7.4.).xr...+f...N.....2.)T_.."v.....Ys.......8.....o.....L.]<q....q..9..E.\|....N...c................}\....Ms.x..J..

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24070
Entropy (8bit):	7.971302993019255
Encrypted:	false
SSDEEP:	384:vPRni9oc8hZ1tjwS4VrJvC6hyZE7CUX6kpmiqyy4hCknyLDJSpmAAgBd7ndW8:vPRniyZ19wS4ThmE7CM6cmShCknGDJSf
MD5:	392BF28B713899EEE8DA29CF1729395E
SHA1:	7D8597CB0CA625E4350D91E886F47B70F055DA14
SHA-256:	1D9B25B739D54AD195D4E7C6B7F403B7CFD57AC332A7074ED671816B50D39D13
SHA-512:	BD88A13F5A00A4A24C829E7777ED6A372A229F820E91EE780ACDF9C8BD74DA3772FBAA7236B9894A01444CC7816EDE9130E7A53C2744F560A95AA3C6B76C23FF
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/-W-EZ52hKquAJIjFs13hcik1zMDOeR77nY7LOFH0zKs/1652680064022-v6Q.png
Preview:	.PNG........IHDR...:...,....../.... .IDATx....\UU.....GQ...lDKL.........%Q..(N.d.1.G./\..C....)....7..!.O.w.G.d.50.K..pU..P.(...g..9p......\|<\|<.....k...{....NQ..!..B..4..3 ..B..S$..B.!..@G.!..6K..!..B.,.t..B.a.$..B.!..@G.!..6K..!..B.,.t..B.a.$..B.!..@G.!..6K..!..B.,.t..B.a.$..B.!..@G.!..6K..!..B.,.t..B.a.$......{..zt6.......Bog./j...x.....;..w.zlS........w.Y.zl3..c.jy...X..;.k...\...U...L_...r...q)))l....F..illd...l.....s.Ns=.&....x...=.........&;r\|.z.y's...k.P.....v.q...6.u.<...1?!...t.454.l.T...%`.y4...VP....U.-.7o....s....1......w.8{..]......r.....L..+&m.r..\.^.....p.l....<.D....V.1..>](.!.....,.z.-.L..G`2.[..u..-m...0m.,....CQ..Gy....!C...f..V.;........j.......@.......g.....eM.cyl\...w...K]...,&s]...9...`.:.....oW".7.V..N=.9].[.D.*.%`h:WFfB4Q.&..J....6[...X.\r....X2..g.2.\1l....q..H.x...2........7..#.]M..5..3..r6.+6+..-..}&........N.....F....s.m.....4..b.....o..3~.yp..]..Nf...r......?.O.m.v..?._..V.;.A./..K......@.............

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 42900, version 1.0
Category:	downloaded
Size (bytes):	42900
Entropy (8bit):	7.995220548635573
Encrypted:	true
SSDEEP:	768:XdIfVe20u9F4E6P9l7JtsAs4dovEXTMA1YzH6oZpjP4Xi/cX673BUfdYE96nF6Qw:X2fopXP9l9ls3vEYWKpZpjP0X+3BsdY8
MD5:	EF7E7A205F0F00208A6EDB007083C9EF
SHA1:	84E04BEAD4DB2D13B48E4453DBFB9C57702ECD79
SHA-256:	4FCC5A257CB11BEF495A924221E1BECCC7D612A68BCE5465B1C925F7A4682322
SHA-512:	9134D62BFB456754F05E137BE3D8E44B54E3C3803A753D2E9A98098C329550A5458A7D8E9D073770962CFF19D6CAB1A0FF4C78F0D12C467A2BB003153AE6A4F7
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/assets/opensans/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6FxZCJgg.woff2
Preview:	wOF2...................&.............................F..T?HVAR.9.`?STAT. '..../V.....@.z...0....6.$..P. .... [..Q!'.^...ND.\...b..t'i..tV.H..q. .N..?!9...;$......F.G..L.........$..e.6.QT.6.1hM.........].qM.B..."_.........q:...;....:..FM.H...K..s..........V&.CssX.Z...C..'<OtV.:.$.....}4g..<5<?......E..0..).HG.(..X...X.... ^Z.E.wFrV.%`S"(.c,.....?.........J..H6X........!.6Q.a`.}....{.][W...5..1.nlB..d.X..@.`qB.....3n>....gI..%c...qu.-A.gIi..Nu....M.........@.."NB....X."..tUN..R.]...[1...x.gw....(.TL.m.aS1JF.p..\|....n...qaL.....@.@..$.5........}....o...v...`...W!.l^.U..!........1.7Mw:..st.1..c$.~.}..mo.Jbb.E...AP@.1UT...e...wH^U.i...7.c.Q"#5......g...L..><..'.[......`(..x....V5....N..JVq.L.}..'.-..^.....Q.kF@..............~.J..eg.K.-.-.L..%_`...N.u..!(.9W\....\@.{.....ct.TI..&m......=.s.b.?bBT+.n."V..+.4].x....%e.ua.~.?..f.4.Cu(..:.pX.<.....7..?L..J#.Vg.1O&......+.......Z.....h.K....j....^...qQbQ._..%..J..^....M...#.7...!..H...A..2..v).n.).)CPM...I...

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H+uZYn:euZYn
MD5:	46DF3E5E2D15256CA16616EBFDA5427F
SHA1:	BE8F9B307E458075DA0D43585A05F1D451469182
SHA-256:	AF3248D0B278571EFF9A22F8ED1CEB54B70D202B44FD70ECA4CA13A5771CECC3
SHA-512:	88FBCC0A92317A0BADE7D4B72C023A16792F3728443075BF4B1767C8A55258836B54D56B24EABE36AE4EF240F796B58B8F1EA10C7E3C146BDE89882FC9ADE302
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAnOZC-dT4fBjhIFDZFhlU4=?alt=proto
Preview:	CgkKBw2RYZVOGgA=

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2128
Entropy (8bit):	4.797898345534174
Encrypted:	false
SSDEEP:	48:YZ9GIGNvxEVNjfXf3CivHxSZwsSr86x8+obTSWASY:I97IvxOXf3CWRSZwsSxtlB
MD5:	575CBC4F823F84486F4278C545C86A86
SHA1:	C085253F1C07A652684449C309D63294FD41AB65
SHA-256:	16F04875C1C4527A204F0122009AE5DA3276AEEA7D81F2BE7F032787195B8CAA
SHA-512:	33F0BEE18C1735FE4EC106A20028A7891843F7C2AD325BFF6EE364E6E87761D34DA0208CFF0AD2C92730F4929AB152E5A2B1202419DBF74F8ECCC7836FD50059
Malicious:	false
Reputation:	low
URL:	https://ipa.elev.io/api/settings/5de5c1e688134/en?is_init_load=true&loggedin_only=false&first_name=null&last_name=null&registered_at=null&previewMode=false&url=https%3A%2F%2Fknowledgebase.campaignagent.com.au%2Fen%2Farticles%2F419-how-to-create-a-vpapay-payment-request
Preview:	{"lang":"en","settings":{"companyId":13566,"font":"Helvetica","tab_color":"#061933","tab_text_color":"#ffffff","contextual_color":"#1abb9c","side":"right","tab_teaser":"Self - Help","theme":"light","enabled":true,"docked_position":"wall","push_in_margin":false,"button_icon":"","auto_open":true,"loggedin_only":false,"ginny_pig_for_ab":false,"display_type":"full","useLiveSearch":false,"article_feedback_enabled":true,"hide_article_feedback_email":true,"show_related_articles":true,"close_assistant_on_escape":false,"suggestions_count":3},"modules":{"modules":[{"id":18,"title":"Contact Us","moduleType":"single_article","order":1,"settings":"{\"article_id\":\"383\",\"askForFeedback\":\"1\"}","icon":"envelope"},{"id":7,"title":"Create a Payment","moduleType":"single_article","order":2,"settings":"{\"article_id\":\"419\",\"askForFeedback\":\"1\"}","icon":"money"},{"id":23,"title":"Repay CampaignAgent","moduleType":"single_article","order":3,"settings":"{\"article_id\":\"502\",\"askForFeedback\"

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65462)
Category:	downloaded
Size (bytes):	433216
Entropy (8bit):	5.356571344931859
Encrypted:	false
SSDEEP:	6144:BWWJ8uoV36YzsucSCGOqrOPToGeGsSMm5XQF2Z68gf8IfRJZLSxlejLGgq:nuctGO0O7oG1OmZQF2cM4BDLGgq
MD5:	E18D4C37AF59666D496145E44B587F5C
SHA1:	232374E05F64DB88C1A47D5677399ED65B83DA1F
SHA-256:	86C69987098406D96C0A53989EA31A66F82E61C635A64B469A7FCA6BE3B90EF8
SHA-512:	3004C0C412586317100C8ED61525F55D267B7D184887198525A436887B617C312BA5BDA733A6BDB34A425384E24B00939E49C39543077B2816744F4B1974AEFD
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/script.js
Preview:	/! For license information please see script.js.LICENSE.txt /.var e,t,n={78:(e,t)=>{var n;!function(){var r={}.hasOwnProperty;function a(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var o=typeof n;if("string"===o\|\|"number"===o)e.push(n);else if(Array.isArray(n)){if(n.length){var i=a.apply(null,n);i&&e.push(i)}}else if("object"===o){if(n.toString!==Object.prototype.toString&&!n.toString.toString().includes("[native code]")){e.push(n.toString());continue}for(var l in n)r.call(n,l)&&n[l]&&e.push(l)}}}return e.join(" ")}e.exports?(a.default=a,e.exports=a):void 0===(n=function(){return a}.apply(t,[]))\|\|(e.exports=n)}()},5:function(e,t){var n="undefined"!=typeof self?self:this,r=function(){function e(){this.fetch=!1,this.DOMException=n.DOMException}return e.prototype=n,new e}();!function(e){!function(t){var n="URLSearchParams"in e,r="Symbol"in e&&"iterator"in Symbol,a="FileReader"in e&&"Blob"in e&&function(){try{return new Blob,!0}catch(e){return!1}}(),o="FormData"in

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 702 x 729, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	32797
Entropy (8bit):	7.737568961492824
Encrypted:	false
SSDEEP:	768:pwK6G3Py2JINx8B/QEy97IkDsnd+FhX0IU:pPVZID8B/Lksd2RU
MD5:	0D1FEBE72D12825DBA85DDB9664EE08D
SHA1:	FBA7ED7E987A8B2460CF77F68C162BA3290412EC
SHA-256:	95A1B5948169210A826D69C8936EC64E029BD4FC3A438EBADBE0FD062B4E4310
SHA-512:	E01861079A562EE274C29D359066B5D7E8746F7B64967F55291C8A4BD6E6454C89A0F0C0A25189EFF2EACAB17099915C4D5BA5BDEC5CAA4BD9B710EC06907589
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................... .IDATx...STW..}...~...!T....h.M.$S...h2w....yFg...p.q.9..X<..U.1T:.7....h.PF.!-Q!8..FM...'8..`..x.Sk..^{.n.7tKw.JYa......g..y........... ...@ c..!.$... ...@....F...@....@..H...H...@......6...@....@..H...H...@......6...@....@..H...H...@......6...@....@..H...H...@......6...@....@..H...H...@......6...@....@...!..>...'...~...!l-..g_.k..#../..<..o..F..'.y....)..K......;..L.Z..4..B...$.5.`<.u.\|.G......~\|u.c2....i.)?........?mS....#.C:.......r..X:.g./.x...tp[.RGH.....so.'.~8o..t.A.#. ....G:<..c5...)..g...Yq..F..z.fv..\..t("t......=..;..r.[;.j^.h..@...tp...............~........,Vt6..v.nr!1....(.....e]h.N.t......~........,Vt6..v.nr!1....(*.9...D.....^..RI.......=).?[..W.N.![.\|q...~..?.=.r..).....Cm/...q1......W.......Y....L...].=..gv.O.`.w..):.s.....R..9/...m~...k.....RC...+...;.=.u....W?....s!..<.2.u....l.'.N.\...Z;......4.3N.h;...v.Bz....9xV.D...W..}Y.\|....._..^aq...m.T.~........b.I.....g.y..}S....M...M)

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4700 x 796, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5105578
Entropy (8bit):	7.987363865910071
Encrypted:	false
SSDEEP:	98304:jpuI9/tRUDa/kxRKKElRqG7PQWXO5qF11A2WSobBmj9hPKUrWTBEx:T/tiWsfElRPPQKsu3hnj9hPKbBEx
MD5:	7C4C98385A7132F9762C5A03ACD5566C
SHA1:	715D5201A566E648A1EEEDFD59D70D3D30966778
SHA-256:	03CAF60A77338D1F0740B1E5BC992284C5C95A3359284A91530E58BE88FAF420
SHA-512:	592F1D695A36703D4CB1DC02BB17BAB635B03F967B35F74928BC371E5E23EDC10C1A213DE6824345202FAA20767B7F662BDD47304C1BB75D368AF705D56DB5A5
Malicious:	false
Reputation:	low
URL:	https://cdn.campaignagent.com.au/CA_LinkedIn_Banner.png
Preview:	.PNG........IHDR...\.........+......pHYs...#...#.x.?v.. .IDATx..I.dY...;....\|..........F.. @J"$h.$P.6.7Zh........Z...Zh..%Q..6E..X]Y..2.2f...{....7..{dV........nn..}..............Wp.9.r@.........b.....wh?....?..F.k\|...5....{........../...........N.g... ...u.g.=. ......3W/....vY..z.<>V....?."..2".\|{...Z:\C).p.n.8.....s...=.Dr.....].?.r-......K.....8.....K.......pw....Q$.dAS...o.......(;.0.f....5+..!.hV......n8.%.[(..f.. .&.#.N/#.nd.v...K..O?g..Q........r....}.5cSG...j.....~.....\.F^....3^..x........,S........}..N.q.;..v.g;..o.jdq>....I..y.mIdU^......./..F..R.#.P....,.i..Z.pr.....M\|....X..no..n..W`#V+..@m.P...`..n.a..-!.I=..x.+R+.).R.b.T1Iq5..!.U...P.4..(....tw$.......&E..8}. "..Gp6).E8..O..`...x.5....,B.E....q.:.f..j.U.k.B...q.@...\UAQT..8.f.s..!.5"..`e...m7$Q>..r.3.F.......j.=.. ..Y....g..t.{........e4jq.......~....;..r.?./.C)t.}..r....q.;}R:......KRJ<{r....8.....q..O....."tg.c-.j(..b,.9....K. Y.....n:@QU...#...4;...u].}... ...\|X.T.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1426 x 1501, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	192178
Entropy (8bit):	7.921280748951518
Encrypted:	false
SSDEEP:	3072:JVpHJjf3viSO0+RBKwWZ0t04CpjNOqyvEtN8WBKIpcvF+wHllArLXNo2VdR4ygQX:3/jHiSbcBKwWet0rpDshArG2x4n4d
MD5:	9202A607A9A24F81F8BB1BBCD3B17A27
SHA1:	8A59557C01986D6C695710B1977961EB0CD98E83
SHA-256:	A57B2B2482B42AE74F2DF8855FBC2B28B5A52A3653974CFFB812ABF33BE64901
SHA-512:	9549664076DBC60F8365FDE841060397E16DA7934C84FEBC7940677FAD31CFDB6AD0C0B8ECAB9404CCE919B5255C0520E562F38E597CF1D88FDBA3B90B2BE80B
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/Vj0zDk7x-MmbNLYp2XJ-R0-Sd74MvbRj1kcZvrmLBvI/oNRWBZGVOWmacmBPZOvCpSMsbIXF0D4ASzV_6l0me80/1658999444303-V14.png
Preview:	.PNG........IHDR..............x?... .IDATx...w\.w......@...eoP@.q#.......Uk.Vk..Z.j]....nqV...B..2.Qd...,CH...=O.xw.0s.........Kr......L.4...x.T..p8..........E.B...Cdd$.....>.6..@..'.Uu...{e......;V...t@?t.........t@._......!...@G.S..O.(.o.P...........`.5..........vR...Su.............m....................R._....o.Uu7..........$.............@M..........`...........R.$........,.I"........R.[........K.a...........F[........K!l........,...........R.m........,......................R.[........K!l........,.VPP..>........0.h........`).-....................B.........X.a........`).-..........:u..>........0P...Uu...........q8.U...........r[........K!l........,......................R.[........K!l........,.V[[..>........0P...Ru............D"U...........r[........K!l........,......................R.[........K...!r........l......>........0P...Ru...........q8.U............[........KqU....(2z..E...?....;..@..H$.1.W.n.G<...%....r`...L...X...a......4..s....J..............T./..FE?.o..e.kj.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2814 x 572, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	60856
Entropy (8bit):	7.575637423933491
Encrypted:	false
SSDEEP:	1536:I3aOW1bVdMVsJ7Kx7vJDSZ3O96vOVF09G5:caLHdgO7YLJeZ3DvOV4k
MD5:	C18DAE71ABFB5FD24C23E2E4B656B92A
SHA1:	B7C0C2D245F70C7E99626E2F63B108A8EFD19CE1
SHA-256:	D16273F9EBEC3AAB69C6C0532A4B1566D0BEF3A98EC39D02B52B31551C8DB502
SHA-512:	133883A986CD9FD1ACDAE07E526EA62A4C4CFB8B49C419F51BF6F432646A05457FE76B5CEB6E457341C0D4E1E3378C7D1D24FF82EBCB23B1A5775CD19CF1BA54
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.....3.NC.. .IDATx...gxTe.....$3.)..B.J....E........m].........Z....V....HGj..H.$..g.......a.Iy..+.s.s..\|..!.O.c......0..C~....Z.c...................K...................8.................@.@........................................_................. .................t....................../...................................:..................@.@........................................_................. .................t....................../...................................:..................@.@........................................_................. .................t..@.......................D.a...6.%...z...............:..fD;K@.S......................2..-...'..%$.................4'.[;O..B..2......^...................hC.....p....=.................v..n.....i..2..a....w..7g................:'.0..GkB..u..9....>....os...\|..................@...:..........p...6...poC..................@.P_.._p.....pC..@...e.9...u..Cr.%S.L.4j...M..f.........

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	187
Entropy (8bit):	4.297657412045876
Encrypted:	false
SSDEEP:	3:toKcvXjXRHoNcHb9Fv3FUxUudv9GavYImqv3IGjNIHwBIbT27+H8L8bTS9i:tcO4b9d1elV9GaEKYH6l08wb+Y
MD5:	E6F130FDABC50710B7BF204829B45E60
SHA1:	966E02786239703CB68CA8EA0641906ABC7D4F11
SHA-256:	53738A1A4DEB8DC4895FD2D0753F2DAAE97BA496C510DDE4C3C3C32A7FDAA063
SHA-512:	5C45A1D549A35CB9926A5C80169B57216F9BEDE40C6E7EDF65B8B8F2C91F4356C025FD4D10C63845466ACBAAD25BC0C41685B2C1830EE12B02C79AF9185127BE
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/sdk/icons/v9/book.svg
Preview:	<svg viewBox="0 0 24 24"><path d="M19 2.001H5a1 1 0 0 0-1 1v18a1 1 0 0 0 1 1h14a1 1 0 0 0 1-1v-18a1 1 0 0 0-1-1zm-13 2h2v16H6v-16zm12 16h-8v-16h8v16z"/><path d="M11 6.001h6v3h-6z"/></svg>

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 547 x 614, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	51787
Entropy (8bit):	7.96854465952102
Encrypted:	false
SSDEEP:	768:bkGlBW5Rg2ZRyf8Ujy66YC4sKIeTT3aLYTQX8NQ/+vKfKju80wbvc:bQgyR7NEIUraLY0X8NQVCjZc
MD5:	4CC05B615065AAF5AFBE6831CD18EAAB
SHA1:	87A3CE369DE16CED6335D670A639127473F06EBA
SHA-256:	041C1BC026C1DED5108AF873928227E1C21B6373299897EEF91F397A391F1E65
SHA-512:	5F20E6DAA9E9FC77B4965B70EA9D9FADD1846FD7F60483E3389D612788CF6C022781762CF82D967BC78B930843B9042233532E2B365995AEC31721DA6ADEEC41
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...#...f........n....pHYs..........+......tIME.....2.5..... .IDATx...{\Uu.....7l..%@.......m.,m.F..Xg..X..i._.iN5ur..93M..3G;.4f....M.o...;..U@.q.......rW.X.....!{.......{....E}cs;B.!..fbi...!...M..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..0\..]...n:......\|7......ew...O.!...(F....w......@....[.......j.kr..rlG".5..O9.\|..>.U...r6..x.-)..v..<.....l....\|......:~...].A..<.....g...E..rq!..b...3r..S.y......5..&C.......8.u?3..].!....6.=#].Y...1...cu........q.._y!!..W....1....{.S..e.....^.....1y......+.8../...W+....;rz/....P.!....[.F\... ......y..W...y.. se0a...S....r.T.W....f..S.Z....\Mz...?..._.......k:\......0....yy.+........g\.z..w.b<..l............1.{~.?.0).3....sh.{.....M.\|.Me...s..... a..;.nA.DM.-...+...!}........+.tmwH..!..7...X.C..7....KU......,y.=........o~....R.8.X.B.{.fQ...u..]..A....I...fu.....\.(.'.../V..5.!... 3C.2x...e.l.......k.M$o..a..B..#3.Ms.k.]?.X......C....y

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	40885
Entropy (8bit):	7.969670339102256
Encrypted:	false
SSDEEP:	768:XV1o5YP8ZHN5TNQ8OWUqgbZt265rGFh0n2ovrXkDrr3UJ3QZZUzFfO5e52RL1r+u:XV1TP8f5TNo2api0n2grXkrrEAZ/M2R1
MD5:	447E4CF4B4DDD388AB4AAF0E28BEA841
SHA1:	619263C24E96FB89D5EF9D46623BF20658E8F716
SHA-256:	E9EC8D84E70CF75FC650ED72F2BD2153D2EFF6CFF04E13427A556F22E060CD71
SHA-512:	470EC6843E4256FFD7BD1646E2F687E12603207630677A771908593BD2DD060961F2F6B6F0525B653F511BAD1A4E93E16179AF657546312AC5915EF2642CB481
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:...X.....ktL... .IDATx...yX.u...'..9.".."H..(..3.f8..6.3....dZY..5sfZ..~5V..N%.1...d..)...h".H..a......,...........?.}...=/>.K...&..B.!....+ ..B..^$..!...iI..B.!...#..B..%AG.!..NK....].......\\._.!.h>........I&6w6.:......B..B......E......`.....J.(..r.......J...L.....#.TB..p......q.Y:..fP4.>..h...8..Q.n...N..{.x}.F..>...i....kZrz..`.m....R)=.B...z..s.$.<.........F.....\.{...{..d.\|z...:.q"...n`.....vs............]gW.M.............N...W.%.!D.L&....v.....*[...V..:..]........q.....,.qM{U....;.......v.>....i.7..V...........R.D..&W!.h..d.h4b0.. .?..<.'..u.Z.......2i.8.}..j~d_.!>.{...n}./._l.9.y.,[..C.S.h..w:/.X...7..y...Y..B.hb.Fq!....Yt..&,..".q2...Q...Z.k4e.{X...;n.>.;z8.>.j..69.V..a.....;,...Y..&....Y...$g.z4e.^.....>..r......A.L&r..(......p!...a..x{q...G.Q4.nkMd.0.O.....J..2.@Zt...1.i.&.z=.MB..Z.....h..<..C<0.?=../r.o....E.'}../....S.v.:.....,...>i.C......v.Od..S..{?;-.W1..y........h..a.rl....m.v...........}m...:............

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2128
Entropy (8bit):	4.797898345534174
Encrypted:	false
SSDEEP:	48:YZ9GIGNvxEVNjfXf3CivHxSZwsSr86x8+obTSWASY:I97IvxOXf3CWRSZwsSxtlB
MD5:	575CBC4F823F84486F4278C545C86A86
SHA1:	C085253F1C07A652684449C309D63294FD41AB65
SHA-256:	16F04875C1C4527A204F0122009AE5DA3276AEEA7D81F2BE7F032787195B8CAA
SHA-512:	33F0BEE18C1735FE4EC106A20028A7891843F7C2AD325BFF6EE364E6E87761D34DA0208CFF0AD2C92730F4929AB152E5A2B1202419DBF74F8ECCC7836FD50059
Malicious:	false
Reputation:	low
Preview:	{"lang":"en","settings":{"companyId":13566,"font":"Helvetica","tab_color":"#061933","tab_text_color":"#ffffff","contextual_color":"#1abb9c","side":"right","tab_teaser":"Self - Help","theme":"light","enabled":true,"docked_position":"wall","push_in_margin":false,"button_icon":"","auto_open":true,"loggedin_only":false,"ginny_pig_for_ab":false,"display_type":"full","useLiveSearch":false,"article_feedback_enabled":true,"hide_article_feedback_email":true,"show_related_articles":true,"close_assistant_on_escape":false,"suggestions_count":3},"modules":{"modules":[{"id":18,"title":"Contact Us","moduleType":"single_article","order":1,"settings":"{\"article_id\":\"383\",\"askForFeedback\":\"1\"}","icon":"envelope"},{"id":7,"title":"Create a Payment","moduleType":"single_article","order":2,"settings":"{\"article_id\":\"419\",\"askForFeedback\":\"1\"}","icon":"money"},{"id":23,"title":"Repay CampaignAgent","moduleType":"single_article","order":3,"settings":"{\"article_id\":\"502\",\"askForFeedback\"

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	867
Entropy (8bit):	4.193734902129467
Encrypted:	false
SSDEEP:	24:tc/R6PbL+e7xopEOMhHp6lHI3vbUUmBBmhQgp:2/0PbtqMhHoFq4UwjU
MD5:	A26448DA25793BB07CCF10FAB4A8F5B4
SHA1:	BFF76E7D6D123B5922814B18A743F35375E2D95C
SHA-256:	C28D8F41FA57DBF00650A9B59E9473EC0753BBE90C13DEC3CFC8E06221115F5C
SHA-512:	C07D874E312E916659117B4A0033CF0595F71FB1617EA6732BA6B47C09268DF305E60D4A9EDDE793EB350E6DB266AA70AFC57F0519528105E297A6E150050137
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="0 0 24 24"><path d="M14 10.5c1.93 0 3.5-1.57 3.5-3.5S15.93 3.5 14 3.5 10.5 5.07 10.5 7s1.57 3.5 3.5 3.5zm0-5c.827 0 1.5.673 1.5 1.5s-.673 1.5-1.5 1.5-1.5-.673-1.5-1.5.673-1.5 1.5-1.5z"/><path d="M23 0H5a1 1 0 0 0-1 1v11.08c.328-.047.66-.08 1-.08.348 0 .666.034 1 .083.029-.029 0-3.668 0-3.668l2.182 2.181a6.95 6.95 0 0 1 2.261-.567L6 5.586V2h9.586L22 8.415V12h-6.106a7.02 7.02 0 0 1 1.423 2H23a1 1 0 0 0 1-1V1a1 1 0 0 0-1-1zm-1 5.586L18.414 2H22v3.586z"/><path d="M11 12c-1.78 0-3.336.943-4.222 2.348A4.866 4.866 0 0 0 5 14c-2.757 0-5 2.243-5 5s2.243 5 5 5c1.777 0 3.321-.944 4.205-2.347A4.94 4.94 0 0 0 11 22c2.757 0 5-2.243 5-5s-2.243-5-5-5zM5 22c-1.654 0-3-1.346-3-3s1.346-3 3-3c.382 0 .745.076 1.08.208-.042.261-.08.521-.08.792 0 1.41.591 2.679 1.533 3.589A2.99 2.99 0 0 1 5 22zm6-2c-1.654 0-3-1.346-3-3s1.346-3 3-3 3 1.346 3 3-1.346 3-3 3z"/></svg>

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	39850
Entropy (8bit):	7.958619062871414
Encrypted:	false
SSDEEP:	768:LVoPm1N4nB283DEqJ8HSxKAfkYHJyBXkUjlVxkbAQYh0Y:BoPkNufTE+CStRUVZbkbiGY
MD5:	2F151D704FEB2019E4F6E6DEE59521FE
SHA1:	868B21424894A07FF9F6B380F566E9E3D01AC9F7
SHA-256:	C68DFF5CC6697B8481577C4D7899AEC69DA57908B86459C168CF09DD58C6261B
SHA-512:	B73D6194E24EBE4301B0931C193503FFE5B938E0245F7C78522CA44EA6433D98964C976D507B19A4A2A3BD431034E4272DE1D84F65F3A96AA36411017E6FDC71
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:...X.....ktL... .IDATx....\T.......t..R.....@A....M."..'..=..h..>...o..~.....M.y..\.X.%..?J4.p.Q.... ..P.........` Q....G...k....k..Zko~..O?...B.!...q.3 ..B.1T$..B.!..@G.!..vK..!..B.-.t..B.a.$..B.!..@G.!..vK..!..B.-.t..B.a.$..B.!..@G.!..vK..!..B.-.t..B.a.$..B.!..@G.!..vK..!..B.-.t..B.a.$..7A;.9..<....../....pt.@..I.<<.....y.j.6u1g..As..ZGV.m.2U)..]..wM.lJ.bN.6..Q.n k..,.....o..{.=v...?.h.:?..#;w.d..7<?C..\kA.Y.<.Cp.\.."X.2..R.m./'.+'YP'n@z].....,Y....x..ld..Hy^).L\r.'...h..mh3w....].C..l..J.cr..b.9K.Z_.7M..oHd.<.vV...Gi.:.l...a..bj.W.7.tn....7..(..{+....6....@.=...R...6...O.Ks..pE.E.-j..-.c.8/.....+..]m..a..Y.......ye{..+7k.~.F.......g.M..?..={8..<...7<?C...(.H\R&.g../k.\.,...._.._.n.+u.dnN$.\..<...#..(....v.....\{.;..g..............U..\|..rW...._?.S.y\|-o.Z....TS.s.Q.rb.AJ.....?..a.[).z.c...pm..-Y..VX.g...D=....6..s............z..r.r........N5X.\|.dA.......r.v&..n....).L.I...z.n...8..N.... ..;.$....gH..+..

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with very long lines (52504)
Category:	dropped
Size (bytes):	400896
Entropy (8bit):	5.392598385190293
Encrypted:	false
SSDEEP:	6144:G69CYv0UWLt2F2OKT1GmXWT08gq607IN+FB4xTz:NWLt2FDuEw04+UR
MD5:	CB11F8CA9F8A5761D8CD635EC64618AE
SHA1:	866FD79D720CF774B694A53F9C07CDF375D868F9
SHA-256:	EFF675463CDD7FA83E596BEF0DA69AFFED168D370AF3F8703993AE42C4D80A10
SHA-512:	923BDD300E0B73932A344D150B5D6D74D562646AA9CB063EEEFC25F919F14275793CABA5E07DCFB5CAD2F796393DF01DBCD845FE847ABD35178E543BBEA5A708
Malicious:	false
Reputation:	low
Preview:	(function (exports, require$$0, require$$1$1) {. 'use strict';.. function ownKeys(object, enumerableOnly) {. var keys = Object.keys(object);. if (Object.getOwnPropertySymbols) {. var symbols = Object.getOwnPropertySymbols(object);. enumerableOnly && (symbols = symbols.filter(function (sym) {. return Object.getOwnPropertyDescriptor(object, sym).enumerable;. })), keys.push.apply(keys, symbols);. }. return keys;. }. function _objectSpread2(target) {. for (var i = 1; i < arguments.length; i++) {. var source = null != arguments[i] ? arguments[i] : {};. i % 2 ? ownKeys(Object(source), !0).forEach(function (key) {. _defineProperty(target, key, source[key]);. }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)) : ownKeys(Object(source)).forEach(function (key) {. Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));. });. }. re

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	46009
Entropy (8bit):	7.974744383634104
Encrypted:	false
SSDEEP:	768:OQ+6eSRnklLM0MW3GFfDPe+IbvFzMWViJCTfxo0IGKTxa1bS3:9mAGLM3WeDPdIbtzMWcJ+O0LGIFI
MD5:	61948FD7507335DE723B56753824501C
SHA1:	2D42AE49C0FD246E16CF5F6B1563DFC82FC01FED
SHA-256:	FE62FA659AFED03263890943DB1DF67B3F921EFB990975B0FF7348764F5310C3
SHA-512:	05397B9ACC7CEC94722C1AF10B2BC71F1B328D9FCCDC79974321ACBB45EA184F59A1B1151BE2AB18F2CC6608EA63B95E891373B2AEBA9E28BC56E804AE025F42
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/yvX_Qddf0AGmj1Pknk_iDCLGt8hEYZCPdUh1RVh8pZA/2023-11-09_14-10-13-xWg.png
Preview:	.PNG........IHDR...:...X.....ktL.....pHYs..........+......tIME......./>}... .IDATx...y\.u.....0."g.r)....)y`Y.mZ.R+...,..ls.u.Vw....C..;,K..P..D..PDT......1.0.......cf......\|g...\|......F..B.!:!...B.!Dk.@G.!.....:B.!..$..B.!D.%...B.!:-.t..B..iI.#..B.NK..!..BtZ...!....R.UA..^=.P(..:}.....U.u....v.._{.#.'^......}.m...`kks..#...Byy...I\|..{...\...@......<:}...C....@.....-....d.;...................iQ..=xq.<....3j.NNN(..k]-!.h.F#..E...0N.....2.v.V.t...o....0..z..2{.Kl....B.zt...=........:-j.3....w.6..Z.R)=.B......`@.......~..o...ZW..?.V.F............'.z....<..L.<....._d...:....;.............3...}.x..1.........-[........7...=.!.....r..."..........jM]b}.....g3.y.<F..4.........9TTTp..7.P(.8s.......k........'O..y....l7%.4.y...@..<.'....FcK`@.lll8.\|.GG{............J...,.f.'...;...**.....RI....{o..o.10..]]Q..(..i..B.F..F.F#:....8.{.=.....p+/,\|..F....\|.9$....^....Z.*.....x......!=#..{.!'.r.<.C.0...l.i.?..E~~.}z....w......8t.(#........Le_.7......

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1002 x 282, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29824
Entropy (8bit):	7.856345498198017
Encrypted:	false
SSDEEP:	384:1YHMqZpZI7n5BOz02ttMKdcrFS1NerX2+NGorEN7zjlOokhlZrybUf+vzd0VS:wLZajGJttndcrc14iaUQfbS
MD5:	532590C3C7AEFBBA68D97743DAD7F547
SHA1:	2126964CF5C3F871CD90B90AF805E35921F277E4
SHA-256:	F86A7BB77F2E98FE4E2960D66D61FD67E7A59C25BDD8DA51D794AEA367E20CEE
SHA-512:	E09FB424C98CA610C6BA1063330F2416605CF956EBE9C3CF7C1481D9CD638DA864AAADD6A862EFFC0D1118ECF23F71357EC14DB707382126169AB632F89C2B1A
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/wAzjxChAFXcWxrvgBd47plQr0u3M6wbhJYi1Z6U7wbk/1627622795328-9wU.png
Preview:	.PNG........IHDR................... .IDATx...p....d2.L2.sOUNyRs..W.k.{...WN.M.q...$.Hl..!....:v.x...'.....<.b..,@`^62.d...y........F..#.......{...[{K_.b..z=~k...[.V..z....AWWw...}..>.6..W.\|.T...W........................@.\|..yn2..}.4...B.P?..O{0B.....4.B..d.......8.Q.2V.O.."..6.6.6.6.6.6.6.6P.m .......B.\.6.kS......4....I.....{v.'q.'....................v..9.&..$.....PO!.- ~....2l&c...r.ZZ7..tARYu.V.P.P.P.P.P.P.P..~m ...._r...[.....\|....{X..w.. 1.3..................x..ET.L.D1*....F..Q.o..D=.}....U....Bv.........................@.;.....W+..".l$..(....r7..:...x....................6PH].......P/Q......-_..q.V=.................B.(.hL.=....%..P....X.W\|.....................h.....y/..ECU.. ......................6 ......6.6.6.6.6.6.6.6.6.6.6.6PDm g..y..>...~.?1P.P.P.P.P.P.P.P.P.P.P.P.P.H......s...I.3..]...6...........................s..9.u..H...........................u4.t...9.u..k..........................zn..Z.D@.D@.D@.D@.D@.D@..F@B.`h..............

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	42
Entropy (8bit):	4.136248672727249
Encrypted:	false
SSDEEP:	3:YIzIX/GZR49aLVAL4n:YIyGvvVln
MD5:	905B1FBB26E082557FF0B3B3553CDA6C
SHA1:	8FE0790D6026998BDB2C9FFA3B915952E613E1B4
SHA-256:	F249B63CB2FCB66B47E86F906C98F8FD912E82DD035B4E53D7E72FC1960CFD16
SHA-512:	284567E83A5C15761498249B27B4B700AA081A65B858F29458E5D0F3DEBDEA93DD5CFAD94EEFAEB43837E70CC288B2A34EA168D2771CB57C993E269C287097CE
Malicious:	false
Reputation:	low
Preview:	{"message":"Missing Authentication Token"}

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1468 x 722, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	64407
Entropy (8bit):	7.843012927021704
Encrypted:	false
SSDEEP:	1536:QL8fkfVws8A4kgg3+OA3QoJS5teSoPb24HyLi3/kn5R2LG:m5fqJgOOqQcSPeZ5y+/k5Rz
MD5:	8CA45EF1D0B962D5C1FC414EC7898551
SHA1:	95BFE7E4BA1F078F310BFD31AF92AB344C59C2DA
SHA-256:	DA5C0F7DE09004E42A33FC6F1190A4C581AD0A0963E2F19BC0196E8C4784CBCF
SHA-512:	4A70550ECE3D684E70F3754486F9CF8C7DA34D1175288B5F161F86B61F3D309CC6157717E9D87F632F48AAFB9A32CF7A9C1D98E994F055EA5FBB7C227CE7E890
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/HD-I5FVohHpuZciYt3QKyUm01uDRuGLl7y6CxI9qtTA/1641443180485-MvM.png
Preview:	.PNG........IHDR................... .IDATx...w\|TU....$C...$..R...w."b_u.u-..~..ZW......!bEPP.A..^.!!.BK.t.&3.?b.$.N2i$........;w.........KAA.CM`.X.r.&.zl..I.........h......d..........&.o.m.......@S.Z....p........`...............:k.w]!vc.........P...oW....,........@u-.x..^7.vC.........p~h......u..u-W{..biR;.........G........_{.."U.%.$9$..j..p.L.m..7..........2dnzp..^.5..Xd.;dw..t.X.$.m.......@=.....^...u._R.Cr.k..j.P..........E...C0OI........@.&..f..M{p.f.]aw.!K....^Vy{Y.... .........`......m.....PE..%.....x...J.........h..d.S....sW.6...U8,.;...~.^.............. ..=...n...w.C..~&L......W...........Q..ow....'...IR......-..G35.........3.....].....?.....~...d..............T..qpJ..SM..~....V7........e5...Y.nI.=....;..............@..[P.U.n..[r.1!..........Mu&.u.RY{Ze.]..w..&..........U...6c,e...U..t.f7........s.x.U.._U....:.y.p.........0r..w....v............b.x.......+.?....^.z6.B.........MfH.k..=.F9.Y$Y..a...W.6............%.,....R&...............zv.^=..."Y

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1077
Entropy (8bit):	6.99603046915572
Encrypted:	false
SSDEEP:	24:5kQKb1TlL4EmaI+9xzjg0EMEZO57DwPoQNAn8qlf6:mr194EXI+9x1Eu7D4FNAn8qlC
MD5:	00D41EB4B8D463C922876361C48E734D
SHA1:	C260D393777909C1C6DBB60213D12F8EDAFA0573
SHA-256:	8AECD7806B8107333ED8103B7A7D8A09DB657538B39A59868ECED11F56D85C69
SHA-512:	885C189D9925EC3414DE7FE51E0AC78A93CBFE18E70FB16FA650C9E75864ECCBD4396FB4EB6722D3812C871DB4E086DF14A9B5FB5BD3CE8FC4C829FB4E898790
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....PLTEH.}H.}G.\|F.\|K..Y..Z..M..G.}s.............z................~.L.....D.zS........P..W.......E.{.....`..T.......G.\|......[........w.n......J...............a..Q..........D.zI.~..{.s.r.y.....I.~............_..f..f......h&.....tRNS..Zv5....bKGDOnfAI....pHYs...H...H.F.k>....IDAT..c``D..0>..L.L2....3#.88..yx.......B."..P.1.qV..I)i.........#....23D@EUM.(.....5T[G..QO...j..........:.Z..K+k..[..v....N...bP.7w.}MMO/o...%}\|..U........].g.e..'.$.....%tEXtdate:create.2019-06-20T05:41:07+00:00.a.....%tEXtdate:modify.2019-06-20T05:41:07+00:00k<.F...FtEXtsoftware.ImageMagick 6.7.8-9 2014-05-12 Q16 http://www.imagemagick.org.......tEXtThumb::Document::Pages.1.../....tEXtThumb::Image::height.192..r.....tEXtThumb::Image::Width.192.!.....tEXtThumb::Mimetype.image/png?.VN....tEXtThumb::MTime.1561009267.(.T....tEXtThumb::Size.0BB..>....VtEXtThumb::URI.file:///mntlog

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 378, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	23432
Entropy (8bit):	7.914469988852275
Encrypted:	false
SSDEEP:	384:kcDEZZI8YK16+i8hai27u1+g9XQKzT32FOY7Th7o8WIF82l3ak:k9VYm6+i7i2U+QvXgtJc8XF8E/
MD5:	A2DF9BFB75CCBEB69E7DD44F5FFD1470
SHA1:	6DE58D84D5034AECC0829452970608DA69EB058C
SHA-256:	C98A32C6B19A52A3B41234A3B000287DDB7932208C50B4E324394AF5F8EC9E85
SHA-512:	59952597BFB40F07183489CD3B42A7D081705DDFC90D7BED36BF94B9EB5FEDF98CB51F86925E59AF41758F1D2A1798BDD1DD231F8B92F0040C6821BAFC93CB1F
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/9pgTsfVUx0UQ63yOPHSuOROdL7cVxfC8pBMBM2t-TFw/1652679355928-Pck.png
Preview:	.PNG........IHDR...:...z........1.. .IDATx....XTe.........CX..".....4.5+.I..\#..-e.u...pW-5.V}..M.Tf.ajJ%.(.h..().....cf`@@P~..y]..5.9........}.43..FDDDDl.-M]........#"""6KAGDDDl.......,......Y.:"""b..tDDD.f)....R........#"""6KAGDDDl.......,......Y.:"""b..tDDD.f)....R........#......b.....8....i.*5..o.;q$.'....-zf.,.....8..:.+"...{.=bcc.x.b...x.".......{}....r.#...9....A....I....k."k..x......zX_....c.3..4..R.....?...06:.......n....G..(B.[.I..6..R..#yUtY...>...)W=v..~....Xo:....@.....L ......l\..X.m\.......x._Z.y..`8..w.Y..S.&.....?.....+....c....'..}\|e=...Y03.a.-.s..W].\...5o.....\|.....;./^..>.../......@A'.-....x.../0%......].v.E.F.d...3..37...) .._$..wGB...~x...V.....eR.7.8g.R...qQ.D..P..3C..8.,.q.$[b.3rf..8.........2...z\.U.$..h8.W}...m\...G..X...8.([bg1r.RR. .4.n}x......).~3..{,....;..3..1~\4q.r..s..x:#.ZEjI....p.....{..u.qwwg...^...:.[..O.M.b....2.!.........#......Qr....B._l..P.c.../4q.n...._.F.. .........X..te0.........(a...R.u)......:..I

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1426 x 1501, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	125135
Entropy (8bit):	7.897534928462052
Encrypted:	false
SSDEEP:	3072:cDn3lE9Jt6QFmnBtEDHkyWhLpx0QqFJzsV9uD2vR1:SOF6QERhv7qFJ52X
MD5:	27B74B29602881F2937CBBA6402502F7
SHA1:	B5175692A00ED874BBAB0C0068522CF826383A37
SHA-256:	350F38E5A4FE0E04AE6F0743ADAEEC2F513748D552B4B084C27B98640CFF0429
SHA-512:	D8B00F9BC8830B74E19CE4840B6DFCC208506201B5438E952254EE34B4BAE252B976D799F1C3188ED60B4CACD69BD3B4CCA116A2F5737EED54B2D8C86842DFAF
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/YtZt_9imFpF9QW4vXmM-KZd1N5cnE9jd6Ns1SyyTUQ4/Add%20Payment%20AI%20Tool-3Xc.png
Preview:	.PNG........IHDR.............s.......pHYs..$...$..P$......tIME......6..@t.. .IDATx...{\|..y...}K.,..6...mN...CI\.qi....~....iki.%..B..[._..m.$d[..V.C.@J.#....$5..B....'[`....lY.t..?t.%Y>........}..m.}_.>Ji..]'..(J...q..B.!..B.!..B...#...cg..`...i4.%..B.!..B.!..b.P.U..!..B.!..B.!....x.@.!..B.!..B.!..M..d!..B.!..B.!...HE..B.!..B.!..B..T)H.B.!..B.!..B...T$.!..B.!..B.!.HHE.$.!..B.!..B.!.H@*...B.!..B.!..B$$A..B.!..B.!..B..T.l!..B.!..B.!.."..H.B.!..B.!..B.....B.!..B.!..B.!.. Y.!..B.!..B.!DB.$.!..B.!..B.!.HH.d!..B.!..B.!...I.,..B.!..B.!.."!....B.!..B.!..B$$A..B.!..B.!..B..$H.B.!..B.!..B.....B.!..B.!..B.!.. Y.!..B.!..B.!DB.$.!..B.!..B.!.HH.d!..B.!..B.!...I.,..B.!..B.!.."!.x.@...j.r..X...:r.F[.x.I....]....5...I..\..B.!..BLl....q....r....~..x.I.1J.[.......u.. .....L.Z.fw.p.t=.....b.2..\..j..~.&v..3.....K...}........B.!..B.....~._.J.,..$A2..p..e<.\|YTx.W.......k...<U7.#.c.j.......<.s.CR.,......{.....)...[.(,.'%E>.!..B.!...<./..&.\|.....<..x. ?.......#.....d..j........G....=

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65447)
Category:	downloaded
Size (bytes):	612167
Entropy (8bit):	5.628926758438663
Encrypted:	false
SSDEEP:	6144:r4e1VmaYlNkTXY2JO5IEtGTa3zAy31q1Yu02f1SCw3aIgW/C:JXzY3ehEFDA41q1Yt2f1SCwqd
MD5:	C5AC31842070F1F00A120A5B26ED224E
SHA1:	5B524D0BDA499A837FD9FC8283E17BADC7EF671F
SHA-256:	B5910BC08F33A440CCBFF5FA455A4A26331107D7FDE4BBF2B688A73A9D6D19DC
SHA-512:	ED82481D2CACE0B13FC930E71F531DC4F7E181CB7900808289F6D898C41E04FF7E424F911F65CF77768D87A53970201D529089021D4BABA184410AB0ED51EEC0
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.39.0/js/player.module.js
Preview:	/* VimeoPlayer - v4.39.0 - 2024-10-29 - https://player.vimeo.com/NOTICE.txt */.import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,u as c,L as d,g as u,f as p,x as _,h as v,j as m,t as f,k as h,V as g,l as b,m as E,n as y,o as C,r as T,p as L,q as w,P as A,T as S,v as I,w as P,y as O,z as k,A as R,G as N,B as D,D as M,F as x,E as B,Q as V,S as U,H as F,I as H,J as G,R as W,K as Y,M as q,N as $,O as K,U as j,W as z,X,Y as Z,Z as J,$ as Q,a0 as ee,a1 as te,a2 as ne,a3 as ie,a4 as oe,a5 as re,a6 as ae,a7 as se,a8 as le,a9 as ce,aa as de,ab as ue,ac as pe,ad as _e,ae as ve,af as me,ag as fe,ah as he,ai as ge,aj as be,ak as Ee,al as ye,am as Ce,an as Te,ao as Le,ap as we,aq as Ae,ar as Se,as as Ie,at as Pe,au as Oe,av as ke,aw as Re,ax as Ne,ay as De,az as Me,aA as xe,aB as Be,aC as Ve,aD as Ue,aE as Fe,aF as He,aG as Ge,aH as We,aI as Ye,aJ as qe,aK as $e,aL as Ke,aM as je,aN as ze,aO as Xe,aP as Ze,aQ as Je,aR as Qe,aS as et,aT as tt,aU as nt,aV as it,aW as ot,aX as rt,aY as

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1134 x 401, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	34450
Entropy (8bit):	7.939106266570693
Encrypted:	false
SSDEEP:	768:U+UeLN+r3W8ZtSrKKINIin3imjvjfZzncwM:7P5i3lZzKod3imvRc9
MD5:	C99477F3010E6412849CF62E4237B19E
SHA1:	E50C2D37E25C86F076E3E9934934EBE730AB3C6C
SHA-256:	D4719540CA32975D59FC3B7D1DF491311ABD952FB2A0EC33F44E3FF1A9C240C0
SHA-512:	5ABEB9AA14FF97CB472F6316165F5158F60C2F8DE74C346CC34C0537FE2C5F7B60095FF5258ACDB01A4CC0FE2ECAFE26565A8AB05AB94B658D7F568AAF9BD405
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...n.........41......pHYs..$...$..P$......tIME.....)....Q.. .IDATx...y\.....,....,.....(Q.q....hb..Ic.4...kN.=..9].M..kO..s.....&..i....D".h.%.\...:l....3s.1.@@Y......G.;....0. ...\...f.""""""""2...]..........L.............FDDDDDDDd.Rp#"""""""2B).....................P.nDDDDDDDDF(.7""""""""#............J.............FDDDDDDDd.Rp#"""""""2B).....................P.nDDDDDDDDF(.7""""""""#............J.............FDDDDDDDd.2...>./...........3..p..y...aMO.............+.4W+...M{(...:.t>.v..nDDDDDDD$P........m.....JxsU.............>PX#"""""""#.?.0.:.........%....g...k\|>........Y,X,&.&.F.._'&"""""""r9^..V....C...........t..3......6.s`..zi.x.b .j!.j............F.....#>.&c...!.P...7]C........q6+f.v!..........n.`.1S.t...b..h.x\|..aIP:......HLT.B.........jf.?..h....>z.i..-E..i....@..>6"""""""2.........e..!..P........f........hb6...Z.a.u3....)^.._...F."""""""2.[-.....d..[......a............f...cX.K.ip.yJ........t..EDDDDDDD...b.........`.lRp#""""

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2450 x 1668, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	852431
Entropy (8bit):	7.979498184258141
Encrypted:	false
SSDEEP:	12288:tyZjFHExMHHGgMQZGridHuo+b1oeNOq4spJlgJWRnOAoNVtQme3lySLlziIoodLK:gxx/mgMQ79AooOq4syJWP+slBLlzfNd0
MD5:	CBB89D0774522AAB8FC577AB03AAEDFA
SHA1:	2375B6EE64D3EB1B3FA9BFA8C16006CFD1BB8834
SHA-256:	BA886B2FED2A97E53D61011879A84E6B6131BC1EB1654BCA90A81D49DFE24AB8
SHA-512:	0AE7269A0A1D3403D724393FA85A450922B66D6B6C6342D91809878C3B928C318871C5F200BEC1BFA30D234986C270A39220221FBBF78F61F7A130745D8189DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............ciy.....pHYs..$...$..P$......tIME......-9..... .IDATx....x.}...$......."....[1..&v.s.$N..v...f..M.t.m..z..i.&[....ni.c]..&N.....NIH....c...`...,##$.GHG..H.........yx.....9..WG..y.....y.H.........([....(H.........P............... .........@..$.........(s.d.........eN........................9A2.........2'H.........P............. .........@..$.........(s.d.........eN........................9A2.........2'H.........P............. .........@..$.........(s.d.........eN........................9A2.........2'H.........P............. .........@..1..0}.....3....x...._7....PB...l..h>......r.......HU,^z..T...s...(.\|.S]...g._.Z...3.e......p.2.......N.\|....?4.e......p..$..o..v!2....;.qg.~..S].........A2N.3..........3.......gK....x..S].....g:....... .'.._7.%..p.\|........l............9A2.........2'H.........P............................\...TVVLQE......0......8##IOo!.........Y3...&K/.....p.......0..... ...}/.gg....]..h1.=...O...\}.4..~.........

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1426 x 1501, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	192178
Entropy (8bit):	7.921280748951518
Encrypted:	false
SSDEEP:	3072:JVpHJjf3viSO0+RBKwWZ0t04CpjNOqyvEtN8WBKIpcvF+wHllArLXNo2VdR4ygQX:3/jHiSbcBKwWet0rpDshArG2x4n4d
MD5:	9202A607A9A24F81F8BB1BBCD3B17A27
SHA1:	8A59557C01986D6C695710B1977961EB0CD98E83
SHA-256:	A57B2B2482B42AE74F2DF8855FBC2B28B5A52A3653974CFFB812ABF33BE64901
SHA-512:	9549664076DBC60F8365FDE841060397E16DA7934C84FEBC7940677FAD31CFDB6AD0C0B8ECAB9404CCE919B5255C0520E562F38E597CF1D88FDBA3B90B2BE80B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x?... .IDATx...w\.w......@...eoP@.q#.......Uk.Vk..Z.j]....nqV...B..2.Qd...,CH...=O.xw.0s.........Kr......L.4...x.T..p8..........E.B...Cdd$.....>.6..@..'.Uu...{e......;V...t@?t.........t@._......!...@G.S..O.(.o.P...........`.5..........vR...Su.............m....................R._....o.Uu7..........$.............@M..........`...........R.$........,.I"........R.[........K.a...........F[........K!l........,...........R.m........,......................R.[........K!l........,.VPP..>........0.h........`).-....................B.........X.a........`).-..........:u..>........0P...Uu...........q8.U...........r[........K!l........,......................R.[........K!l........,.V[[..>........0P...Ru............D"U...........r[........K!l........,......................R.[........K...!r........l......>........0P...Ru...........q8.U............[........KqU....(2z..E...?....;..@..H$.1.W.n.G<...%....r`...L...X...a......4..s....J..............T./..FE?.o..e.kj.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1134 x 401, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	34450
Entropy (8bit):	7.939106266570693
Encrypted:	false
SSDEEP:	768:U+UeLN+r3W8ZtSrKKINIin3imjvjfZzncwM:7P5i3lZzKod3imvRc9
MD5:	C99477F3010E6412849CF62E4237B19E
SHA1:	E50C2D37E25C86F076E3E9934934EBE730AB3C6C
SHA-256:	D4719540CA32975D59FC3B7D1DF491311ABD952FB2A0EC33F44E3FF1A9C240C0
SHA-512:	5ABEB9AA14FF97CB472F6316165F5158F60C2F8DE74C346CC34C0537FE2C5F7B60095FF5258ACDB01A4CC0FE2ECAFE26565A8AB05AB94B658D7F568AAF9BD405
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/4ByF9R8N3k6z57Jsrc3TdK2u4BxGr_sokO7PVgbccag/portal2-t-Y.png
Preview:	.PNG........IHDR...n.........41......pHYs..$...$..P$......tIME.....)....Q.. .IDATx...y\.....,....,.....(Q.q....hb..Ic.4...kN.=..9].M..kO..s.....&..i....D".h.%.\...:l....3s.1.@@Y......G.;....0. ...\...f.""""""""2...]..........L.............FDDDDDDDd.Rp#"""""""2B).....................P.nDDDDDDDDF(.7""""""""#............J.............FDDDDDDDd.Rp#"""""""2B).....................P.nDDDDDDDDF(.7""""""""#............J.............FDDDDDDDd.2...>./...........3..p..y...aMO.............+.4W+...M{(...:.t>.v..nDDDDDDD$P........m.....JxsU.............>PX#"""""""#.?.0.:.........%....g...k\|>........Y,X,&.&.F.._'&"""""""r9^..V....C...........t..3......6.s`..zi.x.b .j!.j............F.....#>.&c...!.P...7]C........q6+f.v!..........n.`.1S.t...b..h.x\|..aIP:......HLT.B.........jf.?..h....>z.i..-E..i....@..>6"""""""2.........e..!..P........f........hb6...Z.a.u3....)^.._...F."""""""2.[-.....d..[......a............f...cX.K.ip.yJ........t..EDDDDDDD...b.........`.lRp#""""

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	38461
Entropy (8bit):	7.968405091991825
Encrypted:	false
SSDEEP:	768:pjcZ27/2Ns0imTF9CSvFIj3wLMqYubOjSZX:uZC2m0iXSvF8K4eOuX
MD5:	2E98BCD1F003A4739741852C9B22287C
SHA1:	79A46EE6B3DD029C7FC44C19B948940A7DF832A7
SHA-256:	7F7CAFAEE609E52610AFFDD184837309FE1F6F3546CEF5A0B428342639D0C943
SHA-512:	D9B5615F39762F80C663504DC35D4C95D489BB27AD5690A60D851958DE00A2BB7678D9A32406CB59D43E3ABCA34A1A3ABF9A4EA8EFF6A4D4BE2124D14BB80CC1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:...X.....ktL.....pHYs..........+......tIME.......~.i... .IDATx...y\T......2. k."..."....$i.Y./..fI...jV........L..b.i.a.b.n.......""..2..c..dU...].f.<.9.9.33.y...H..J.A..A..!IK.@..A.....@G..A..vK.:. .. .["...A....... .. ...t.A..Ah.D.#.. .B.%..A..A..-.... ...n.<....K....===._.Jii...u..76..S.e...q.\bK....v..qO....aK.G...M(--#11..w.'-.jK.G.........1kZ..\|<122......F...]...o6q..qt.........Z.8M..3./[Da......9zzz-],A..VM.TRPP....`ni..+.`..h.@GOO..>~....d.y..K.].&..>..EhV...0..Q.......tq..W..sG.zb8...H$..S...>J...BAEE.{..F...\|.....V...z.Q.C.a..0......CTr.....W..f....q.&.........myt....~.SS.....O.....`gkC...t....C........:w.H.BA.D....@r.e.......ccc..%"....z...%.d7.]..R.:.......}..eee<=.1....z.c.O.s+W.....{;..]Ng._...oJ..:vt.....y\H..=n...7.....r!..ff&......s.....>.d.\......9............DB.-........N.........'jt.A..TQ....s.v.'.2..-]....8.-...8.......?.../.!.y..,.....1G....!..2......U.xy.$l.t.~.......O..]....qrr..++/.......GI.]F..D.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with very long lines (52504)
Category:	downloaded
Size (bytes):	400896
Entropy (8bit):	5.392598385190293
Encrypted:	false
SSDEEP:	6144:G69CYv0UWLt2F2OKT1GmXWT08gq607IN+FB4xTz:NWLt2FDuEw04+UR
MD5:	CB11F8CA9F8A5761D8CD635EC64618AE
SHA1:	866FD79D720CF774B694A53F9C07CDF375D868F9
SHA-256:	EFF675463CDD7FA83E596BEF0DA69AFFED168D370AF3F8703993AE42C4D80A10
SHA-512:	923BDD300E0B73932A344D150B5D6D74D562646AA9CB063EEEFC25F919F14275793CABA5E07DCFB5CAD2F796393DF01DBCD845FE847ABD35178E543BBEA5A708
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/sdk/main/v4/1714634144204/elevio-main.js
Preview:	(function (exports, require$$0, require$$1$1) {. 'use strict';.. function ownKeys(object, enumerableOnly) {. var keys = Object.keys(object);. if (Object.getOwnPropertySymbols) {. var symbols = Object.getOwnPropertySymbols(object);. enumerableOnly && (symbols = symbols.filter(function (sym) {. return Object.getOwnPropertyDescriptor(object, sym).enumerable;. })), keys.push.apply(keys, symbols);. }. return keys;. }. function _objectSpread2(target) {. for (var i = 1; i < arguments.length; i++) {. var source = null != arguments[i] ? arguments[i] : {};. i % 2 ? ownKeys(Object(source), !0).forEach(function (key) {. _defineProperty(target, key, source[key]);. }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)) : ownKeys(Object(source)).forEach(function (key) {. Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key));. });. }. re

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	47899
Entropy (8bit):	7.96629305953007
Encrypted:	false
SSDEEP:	768:zjdwjtYdQupvKeHR4Ti3zjs3Nulze9BfRaVIYIfZJ0g7G86EZ3D9XwVXLX:zNQmeO3E3glzMBfRaVmfr7qK3aV7
MD5:	C1368B072BCE9364A8E75E42CF6CA971
SHA1:	4AC001A0E89035ABFA25DCE22D42CDCF683D1D78
SHA-256:	EF1517904E19EC37EE538D7ACD88F4F424B936B52EDB02D9A894A75EF5C5E750
SHA-512:	3D8E376B8C54E40022D991E2DBB63A93C642225CCA5F73978745A584DEA6261AF960AB5013EBF6B7FE8EA62065835838299BF6F2F5ABE1A08F372CA6402BC80A
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/HjvnNW_LUVv7Zb9lUM5inV8w7PeVZY8CvZU8HS-R9WA/2023-01-31_14-17-53-KQ8.png
Preview:	.PNG........IHDR...:...X.....ktL.....pHYs..$...$..P$......tIME......:e..... .IDATx...ut.......w"@.B.`-.^..PJ.-.......}k.B)....;.C...w.#..!..q.q.......3...yf....]_..4.....?=.r...Z....9.&.m...[..V.>.\|....<...E#'..@......Wf......5}.+#j...&.;....>..;g.d.m.S.....Oa@.....(.`0(.Ln....t.A~*@..C#'@....N....{........4....~...y.o2.E.i..?...SY.e..B..~...`:...9[...~g..~Vm.F.Yg.....9....7..>...g}.$..^.w....A.8F[.SQT.....B.!.IQvt...B.!...!..B.,.:B.!.0Y.t..B.a.$..!...dI..B.!...#..B..%AG.!..&K...B.!L...!..B.,.:B.!.0Y.t..B.a.$..!...dI..B.!...#..B..%AG.!..&K...B.!L........C..g..\|..7.].qEyy9?/Y.[g3l.X.....].vu..9... o......-.._}..cyh..-....c}...\|.....5.3eee...6.:...l..G..+..Nd.....g8\|.(z...V..pF.8....6r,o...ee...x..F.e..,_......T5..<m&o.......].6.@i0.X.b._~...99..WT.i.RRRy.w.3~2c.O...$&&..\|...\|.....6w.=l..Neee..Y......j._{..'..%".m.R\\|..1)).,..Zu\.\|E..... l...0l.X... k.m.....2...3.0. ==.%?...SVV..."==..s.V/O.....r........9{..V.V..x.....e.....N...n.>.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 540 x 619, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	52418
Entropy (8bit):	7.963722494643051
Encrypted:	false
SSDEEP:	1536:OVggS7NU73S3Q+xdp/PtZwEoHtZZZZZZrE3Lpwb1Xhz76:O2X/x9ZwDbZZZZZrY+bZhn6
MD5:	9C01DFD69AA193AD5AAC620045CE83F6
SHA1:	CD44AF5EAC2617F83C005CE8D197ED2DB7D865E7
SHA-256:	23EB9DC9ADCD70F6BC11F3CE1B96B9CA32B6AEEB46A74CCB11DC17DA002212B9
SHA-512:	AB630CB5E186CA6AB2C49CF9FD5185E96D80FC6AB9136C0346CC87250BE1DA059427EC5CFAF17CF5996538BDEF5FCC87AA43CCB5A8A0C248367F7BB3398473C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......k.......J.....pHYs..........+......tIME.....1#...... .IDATx...}\T....0..=.. .2.(...xW1JH.+I%.7k..nM.$6M.i6i.M.I.ll.&k.vM6I.5...c....A.t.Qn..&......`.AA...y>.<..s.s.3...\.u..4..u!..B.aE....B.!....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....!..B....1H...........x.....Ys.e.._......B.!F2.5..]./.?...!S.3o...'..;k....9.EKn.......C.?@.;~..7..<..O.9\.<.....j..{<.Ng...xl.d<......b....0.............._ji....v.:..>K7......7..%........m..B.....H..\|..5..KZ.Zn.../3.....r......ui..l:..c.> wP..Z...};......a.....x..#L/...[..[.h/[.1....I.$l.!...-...X...`...e.9v\|.!.....^L..aW-a..}.....{.#/..Q..f.........W..!...{.<.l..#.!~1.;8..x.C\|..V.R.G;.......m'..> ..{.~\|?!.M..B....-.....L.T.O.C.........\|..\.+..[y....0.8.!a.s..y..y.S_5........S._v.........+..=......G>.L..\|6.g.7.4.).xr...+f...N.....2.)T_.."v.....Ys.......8.....o.....L.]<q....q..9..E.\|....N...c................}\....Ms.x..J..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x45, components 3
Category:	dropped
Size (bytes):	1206
Entropy (8bit):	7.262565193936539
Encrypted:	false
SSDEEP:	24:emockmN3gsLl9Yx7d1W7qFCYLOTp1I3t/zBO25Wb71DM8:emocZLPY9+GPLOTSOF1x
MD5:	FB5D6A6D596F894F8063D70844F1D5A7
SHA1:	C377054B95D861602A8207D6C12BE8D9A6E68D7E
SHA-256:	DD80EB8AB920F3EF52F2F3AD42BEE92B19BBD040622C51B07F0A287508FA4783
SHA-512:	29C951F70DA4916E92747A3514315C3383885898EE703E5BA8A36E50DBDBA4AEC223EDF20B297D7D4D611DA303D65E2FCD4C16788180DB90A5C2C6E9FE986C91
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......-.P.."................................................\|.n..B..F.i1..P..q...)q........................................j.U.9.....g.....................................I..S%3,....-..........................!.. "123A.0B..#a.........?...89'....t..h...f.0]....b.\z=.......v.V..W..Y.V...O.o.......Q.6I$j.o...* ."!...J...N..*.2.;..7...\|..l.l.........[._....1V..-M...$r.. .d?O{j.F.,K....Z.......%.....'...[..n>).dX.q.Z....1.yl.....S0.V...0.rZvV.p.!...\.G\|t..mc.6..?.o...E[.k).....WD).I.w.S.8oC%.7.....F........m\|/.]b{.%..Y..."p".7 o.......G.Y..W)~[.n.l<....Xk......S/.. ..vV..RJ.K:....R<..o...x)A.jk...h.G......J(...X..-.......I....x...W...Z..^.N..0.I.(....'~.$.GK.....w.&0O..z\..b."..'.k.._..V... tA.j...G...........rv...<........v.............(.......................!..1..SAQ..."2a........?...C.....1.....k.U.......

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1839)
Category:	dropped
Size (bytes):	1862
Entropy (8bit):	5.378704584910478
Encrypted:	false
SSDEEP:	48:kq9vYpOXSCKt9Y67c8ouBCWs3cTPaLGqviMaE8FEbEfESEHZ:kq9vYQiCKt9Y6g8ZBCCra3viHEIEbEfc
MD5:	83583A4061DDC27E8B6EE0DC269519CD
SHA1:	8B1C0ACC28729208F640473EB5D8FB82C4BA3E15
SHA-256:	C051B8B5EB2A0AEF699780F15A449491868FAA6F8B39B684B5AE8F64F345B94A
SHA-512:	3652AB4345C138245677F415607E6447358DC064B8B3AD7820F34BF225A0D70B0820AFD87E5D2235919AFC703248DA54F126DF8F793DFDA529D1FA336FBA22C3
Malicious:	false
Reputation:	low
Preview:	(function(t){var e=false,n,o,i,r=typeof t.navigator.sendBeacon==="function",u="https://vimeo.com/ablincoln/vuid",a;function f(){return 2147483647}function c(t,e){if(arguments.length===0){e=0;t=f()}return Math.floor(Math.random()(t-e+1))+e}function d(t){var e=(new Date).getTime()/1e3,n=parseInt(e,10);return t?e:Math.round((e-n)1e3)/1e3+" "+n}function v(t,e,n){var o,i,r,u;e\|=0;o=Math.pow(10,e);t=o;u=t>0\|-(t<0);r=t%1===.5u;i=Math.floor(t);if(r){t=i+(u>0)}return(r?t:Math.round(t))/o}function h(t){var e=t+"",n=e.charCodeAt(0),o,i;if(55296<=n&&n<=56319){o=n;if(e.length===1){return n}i=e.charCodeAt(1);return(o-55296)1024+(i-56320)+65536}if(56320<=n&&n<=57343){return n}return n}function g(){return v(c()/f()2147483647)}function l(t){var e=t.toString(),n=1,o,i,r;if(typeof e!=="undefined"&&e!==""){n=0;o=e.length-1;for(o;o>=0;o--){i=h(e.charAt(o));n=(n<<6&268435455)+i+(i<<14);r=n&266338304;if(r){n^=r>>21}}}return n}function s(t,e,n,o,i,r,u){var a,f;if(arguments.length>1){if(n){a=new Date;a.s

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 451, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	44031
Entropy (8bit):	7.9780895574470545
Encrypted:	false
SSDEEP:	768:D6GVmY2I2yGrprfkrv4ol+/XHX/7ExakNJICxl/RHPethLHsol1KpIPfKzLUNjP6:DN72mGrAx+/XHTEkktlpvebLMoSpIPNG
MD5:	5FB2A34EEC3882C822414BAE33AF8C84
SHA1:	C7AE982A709E4C9C37808D3961A95E634A5D0120
SHA-256:	80B3FD3A67BEEA295A54354F015D9561E2DED5A0B9B7CB75BCF2913BB5C878E7
SHA-512:	C2B8DE66CB3FD3F172FCEAC91EED262CEF696A28C01B669CB98FD94DD0CD719B12F39A02DD790F9DC8F2B39CB8AA74A65A30571203B655CB6A6788FF78CF366E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:.........-=.... .IDATx...{\.U.....##...D../...y.k..-.....2/..f.e.j.nn7.......R)[i....SB." .."^..P.....sa..F.)~.W...9..g.\|.s....h...!..B.fH....B.!.h(...!....@G.!....:B.!.h.$..B.!D..j.....B..I.@.0..B..8....z...Q.675.tD.'%J..7B.q.....E.R..`.Loh....JX.T...!D}R..T.mJ.....#.TB.Q...'y.6.F....A..........t...o...7.wVD.w....N.(..-9.\|..:./...P...S.!.QVV...v.9...s..J...A!9;M@..K@D.7..sg.!.....t.^.....l..7..#.E....x&E>.....y9.\|....=8;..#.h4..,...0..\..e.....^a...U.v$_.i4h...;.x`......+.......`".@.....f...nj...I...B s..t...#.E.R.TJ...B..h4b0....\|..............z.N.Qc.9t(!......{/...5....O..ANNn.../c..x..""..k...pg.c....Q!X...!.G0's.HN.....S.Prj.a=.....?k.E.sX...m.t.......;..E...C....~t..#95.Z.h4...ARJ:..V.-.p.....>.bN..U._....F#9.y\..[....q2'...~x...r.X}.jU...SP....E...T...i..B......)++c....^.....w4h,.}.a....n..Lz.I>(9O....p.l.j..4H..!..Y.M.L..........n")%...O.;.b..........b-........S.d.....i.N...F.a-.....9v8....p.._d..C,Y

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 439 x 747, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	47856
Entropy (8bit):	7.972306980035206
Encrypted:	false
SSDEEP:	768:2EwQ7MJaMJQTsLYCa7csh5N/ntPkFimlmxN8WAWncA6eCSIUTHIbnD5Wmd:8Q7o7JQTsLs7ptkFoBA6cAJdFTAD55
MD5:	BA826E45FE0C89216E33E536B1E2C1CA
SHA1:	8E8E69AE155702681A2758DFBAEE576236CBADE9
SHA-256:	EC46F8909BE9EC8D21BC2F0241D1E1BD68BD7951F01DAA2EA01C78D051F53ECF
SHA-512:	2CBFD27D99DBA274B701D71133ED5E01FED5FE94F964D14616D817D4A36B1125BBA4E9B5A5EB709B626D2C857C868C9E61D0F063049D8111B12362C1F4A4B484
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............}3.... .IDATx....\...?...............AQJ.djj..i..J..Vf...k7...a.V.MhJ.../..E..D...?...J..cwa..]........!.=s.3.wg.........B...... ..B:..7B.!z...!...C...B...F.!D.Pp#...w(..B..;...!....n..B...7B.!z...!...C...B...F.!D.Pp#...w(..B..;...!....n..B....n..! .E...W.t.]...Y....n.>..B.uv+.!.I..6...e...%.;x..b..M...n....va.-(.....@D...[D..`..[u..Fa..w....C.Z."R..1(.....D.........Y(....r...j !.....?.e.=.sfOE..@.X...+. ....".\|B1.I...0g./D.. BH...:..Y.........~.........\...:.:B..b..o....n.!....F.q........pV......4......WQQ..,.b.[.. .."..l'.e[4..).......^[....U../.[.4..4e..M.j..J.EG"".,.....!h.",..".g.y..."u."....ER."8.N...3.=.....J..BT.Yd....Bga../.A....E.T68..A..l/"B5?{.H=..m..x..2.`..).,....6W...>v........1....+.../.\|..s.Zy...B1.}&b.G...O j.....l.(.\|k.^....Yp....X=.....]..f...wT...t..y.v)...n.&.9.s......0a....k......\|..,..Ep.8.....kBH.y..%..vM..Z.-Yv...z..../. +.....b./W..$.3.4o.v+...H.....5.C.Y...>"...w..0eE<J...............

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 702 x 729, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	32797
Entropy (8bit):	7.737568961492824
Encrypted:	false
SSDEEP:	768:pwK6G3Py2JINx8B/QEy97IkDsnd+FhX0IU:pPVZID8B/Lksd2RU
MD5:	0D1FEBE72D12825DBA85DDB9664EE08D
SHA1:	FBA7ED7E987A8B2460CF77F68C162BA3290412EC
SHA-256:	95A1B5948169210A826D69C8936EC64E029BD4FC3A438EBADBE0FD062B4E4310
SHA-512:	E01861079A562EE274C29D359066B5D7E8746F7B64967F55291C8A4BD6E6454C89A0F0C0A25189EFF2EACAB17099915C4D5BA5BDEC5CAA4BD9B710EC06907589
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/00saQrBfK4opoFXxjbDUgIHf4gZ9U4kzlxJocPnxRic/1701390351427-E00.png
Preview:	.PNG........IHDR................... .IDATx...STW..}...~...!T....h.M.$S...h2w....yFg...p.q.9..X<..U.1T:.7....h.PF.!-Q!8..FM...'8..`..x.Sk..^{.n.7tKw.JYa......g..y........... ...@ c..!.$... ...@....F...@....@..H...H...@......6...@....@..H...H...@......6...@....@..H...H...@......6...@....@..H...H...@......6...@....@..H...H...@......6...@....@...!..>...'...~...!l-..g_.k..#../..<..o..F..'.y....)..K......;..L.Z..4..B...$.5.`<.u.\|.G......~\|u.c2....i.)?........?mS....#.C:.......r..X:.g./.x...tp[.RGH.....so.'.~8o..t.A.#. ....G:<..c5...)..g...Yq..F..z.fv..\..t("t......=..;..r.[;.j^.h..@...tp...............~........,Vt6..v.nr!1....(.....e]h.N.t......~........,Vt6..v.nr!1....(*.9...D.....^..RI.......=).?[..W.N.![.\|q...~..?.=.r..).....Cm/...q1......W.......Y....L...].=..gv.O.`.w..):.s.....R..9/...m~...k.....RC...+...;.=.u....W?....s!..<.2.u....l.'.N.\...Z;......4.3N.h;...v.Bz....9xV.D...W..}Y.\|....._..^aq...m.T.~........b.I.....g.y..}S....M...M)

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 832 x 558, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	109440
Entropy (8bit):	7.975124878699861
Encrypted:	false
SSDEEP:	3072:ng21ypY53Yd9bck9te4BFpbfy+Ad5A3Y7gFmow7s:vxYd9te4B3bfqMsgFm/7s
MD5:	F6525E3F53F6104BDC142E965B80685E
SHA1:	C3CA29AD5BF69FFF14BABB02A53F07AEE393BE38
SHA-256:	3E68ABD3FB286AAEA92C282A8562EE63A619F5165F5AEFE9DC7070D147A8D4D0
SHA-512:	22185D4A07315F814B45D2413ECBF227A8CA09060FB35E4EC8F95EC3097D32CEBA27BFA7890FA2C194020B4C63E2FCF1A088B5A57F5D49DCDBD3F54AF6982BFD
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/Scsa32GtqArsgRhgeiP0RQL8apKrqnPqEY9g49DSxvs/1701390183090-6gE.png
Preview:	.PNG........IHDR...@...........h... .IDATx..._.I..}./..u.g..3{.....qv...q.c.b..*(9..."..b.L.(9..@w.9'..... .Zq.<.....4.WW]....T]u..r.^".......`@0 ...........\`...J.:..,...........`@0 ...H...$v....`@0 ...........``.0 ...}...V}..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 .....$...@....`@0 .........9..@..9..X..+>....`@0 .......B...$..`@0 ...........``.0 ...}...V\|..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 .....$...@....`@0 .........9..@..9..X..+>....`@0 .......B...$..`@0 ...........``.0 ...}...V\|..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 .....$...@....`@0 .........9..@..9..X..+>....`@0 .......B...$..`@0 ...........``.0 ...}...V\|..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 ..

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 396 x 84
Category:	dropped
Size (bytes):	99074
Entropy (8bit):	7.820837064247666
Encrypted:	false
SSDEEP:	3072:OrFMup8lpp6Kdg7juXT1Xj3D9UZcLrNK+X:yFjFKdGSfrNBX
MD5:	FA72E0BC312EEAD0559CFC43C5AFAEF5
SHA1:	0646851443C65F7855BFF1EA410BD68A186E229F
SHA-256:	E4BC06AE2B868CD0346D65766017034C5A41CCD43C0E4093C995A4C6A2DAB35A
SHA-512:	9C7DD48345539A1490CC14F668749E2EB5C2A7BD224275CFE65F24095C95B1691BFE3C9455678275C06CF3DC67186E43370371AD6B225590EFEA66B341E5CB35
Malicious:	false
Reputation:	low
Preview:	GIF89a..T.w..!..NETSCAPE2.0.....!.. .!.......,......T..RL.VL.`D.Z^.`^.BZpFZpZD.`D.ZD.^L.^T.^T.^^.^L.D`lTL.L^lLT.D^.L^.TD.DT.TZl^ZlTZ.ZHlHTl.4x.4.&.8"$8&$8HH\|".862(:2(68(.4.2,@8,@R.\|."(."8..(6..&<.\\..$.26(.@\|\\.8,,,. (..(&..,`$..B8@..D..(\N.BD...D..tBD...(2B0NV... ..02V...$2BP.T.VV.F.......<.. 6@..Z.V<.B .....Z\<J.> ........FpJ..B ........P$.2.6 ."(P.&(22@....^.2VHB<.2&.... .2~.F"...$.0 ....$.(...~L...H">@......R.,$........L..$ . ..". ... ..(..&0(22T".8, .&....@0"P .(4"0...B...0,6464..&((.@"@208.6.,,@. .86<,"8@.x28<.......2(V@0FZd..4224...::$......*,&,...."......$..$..$*4&"$2.&$22$......&"...&$..,&",.$..........,...BZd..."",.&.2..22,:6,"&,.",.....$::,"................,...2..2.4.........2.$.....&&$...2.,2:$""..&....2$...2:,""$..."......".....4."$..,&".*$&&,.$...2....:6$...""."&$&,......M..H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K.,.U..:\|..(.W..Z..6"..VY\......{.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 832 x 558, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	109440
Entropy (8bit):	7.975124878699861
Encrypted:	false
SSDEEP:	3072:ng21ypY53Yd9bck9te4BFpbfy+Ad5A3Y7gFmow7s:vxYd9te4B3bfqMsgFm/7s
MD5:	F6525E3F53F6104BDC142E965B80685E
SHA1:	C3CA29AD5BF69FFF14BABB02A53F07AEE393BE38
SHA-256:	3E68ABD3FB286AAEA92C282A8562EE63A619F5165F5AEFE9DC7070D147A8D4D0
SHA-512:	22185D4A07315F814B45D2413ECBF227A8CA09060FB35E4EC8F95EC3097D32CEBA27BFA7890FA2C194020B4C63E2FCF1A088B5A57F5D49DCDBD3F54AF6982BFD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...........h... .IDATx..._.I..}./..u.g..3{.....qv...q.c.b..*(9..."..b.L.(9..@w.9'..... .Zq.<.....4.WW]....T]u..r.^".......`@0 ...........\`...J.:..,...........`@0 ...H...$v....`@0 ...........``.0 ...}...V}..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 .....$...@....`@0 .........9..@..9..X..+>....`@0 .......B...$..`@0 ...........``.0 ...}...V\|..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 .....$...@....`@0 .........9..@..9..X..+>....`@0 .......B...$..`@0 ...........``.0 ...}...V\|..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 .....$...@....`@0 .........9..@..9..X..+>....`@0 .......B...$..`@0 ...........``.0 ...}...V\|..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 ..

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 378, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	23432
Entropy (8bit):	7.914469988852275
Encrypted:	false
SSDEEP:	384:kcDEZZI8YK16+i8hai27u1+g9XQKzT32FOY7Th7o8WIF82l3ak:k9VYm6+i7i2U+QvXgtJc8XF8E/
MD5:	A2DF9BFB75CCBEB69E7DD44F5FFD1470
SHA1:	6DE58D84D5034AECC0829452970608DA69EB058C
SHA-256:	C98A32C6B19A52A3B41234A3B000287DDB7932208C50B4E324394AF5F8EC9E85
SHA-512:	59952597BFB40F07183489CD3B42A7D081705DDFC90D7BED36BF94B9EB5FEDF98CB51F86925E59AF41758F1D2A1798BDD1DD231F8B92F0040C6821BAFC93CB1F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:...z........1.. .IDATx....XTe.........CX..".....4.5+.I..\#..-e.u...pW-5.V}..M.Tf.ajJ%.(.h..().....cf`@@P~..y]..5.9........}.43..FDDDDl.-M]........#"""6KAGDDDl.......,......Y.:"""b..tDDD.f)....R........#"""6KAGDDDl.......,......Y.:"""b..tDDD.f)....R........#......b.....8....i.*5..o.;q$.'....-zf.,.....8..:.+"...{.=bcc.x.b...x.".......{}....r.#...9....A....I....k."k..x......zX_....c.3..4..R.....?...06:.......n....G..(B.[.I..6..R..#yUtY...>...)W=v..~....Xo:....@.....L ......l\..X.m\.......x._Z.y..`8..w.Y..S.&.....?.....+....c....'..}\|e=...Y03.a.-.s..W].\...5o.....\|.....;./^..>.../......@A'.-....x.../0%......].v.E.F.d...3..37...) .._$..wGB...~x...V.....eR.7.8g.R...qQ.D..P..3C..8.,.q.$[b.3rf..8.........2...z\.U.$..h8.W}...m\...G..X...8.([bg1r.RR. .4.n}x......).~3..{,....;..3..1~\4q.r..s..x:#.ZEjI....p.....{..u.qwwg...^...:.[..O.M.b....2.!.........#......Qr....B._l..P.c.../4q.n...._.F.. .........X..te0.........(a...R.u)......:..I

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35489
Entropy (8bit):	7.965882828015313
Encrypted:	false
SSDEEP:	768:aCqBqKVR8Y+PMMvnVuMs3hFWbf/5p8ZrE5si7+YWpCCgvRDJZHOJn2l22222222V:a1VT+PMevH5+e5T+YWBiDJB22l22222a
MD5:	8481E2D0AEBACF26DF0D4466228FD406
SHA1:	929553190DA2AC965C901FB16DD07A5C2F8D3E9E
SHA-256:	FE2F22743A520098D192E478EB3F933ACFCF338B7427078042BEC02337D49AA9
SHA-512:	EF3AB5F0F3FC61368AF0BFDD6BF91F5D023E69F9C8CD980C96CD5A89424293CF7747765745E96A16F135FD76190CD433BBC25F1D977B9FE0727C0D22C77281EF
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/JjCi9TejR6FXv7qK_NpJQvPUiIhZ6RlxSHdQoMDRRKk/2023-11-09_13-19-22-Ctg.png
Preview:	.PNG........IHDR...:...X.....ktL.....pHYs..........+......tIME............ .IDATx...y\TU.....2."k."..."...........qM.$....4i.).....4M-...4.L.\..BDe..A@du........(....kf.9..s.\...9..L....A..A.Z Is.@..A.....@G..A...K.:. .. .X"...A....... .. .-..t.A..Ah.D.#.. .B.%..A..A.Z,.... ...b.<..ikK....---.%^....Q..I...../....Wls..sph.scF....ns.G...PTTLll.?.9@R......h5.# ....).t.tCOO....R....OVo@v.VS...D.9...%'.<..M....y....d.\|.r.2._w......j.b.. <......y.;......-_%...@..:ZZZ\|..{.....)(($h.R..z.)..^....~l.....6wq...o.}.6..1....$...)..P..BAYY.....=....o......X....Y.\|...TcbN"G......&_...:o......p..m./Z...1X[Y0dP_.-x.CC....xi....q..K.s\|...].6.....o....m.J...+........9.ytq..>Q..".+..:.t...)7d....B...n......~;...b..5.---R..$..Y22...<=..4..d.....^..^NH.M............J.pth......bdd@....\.+.......,...[8wT6.]..Bqq1...".HH.u...6\|..^.i.........D.. .B=.............._..zu^s..y8<.[.'1...k.:..g.s.g.\.%?&5MQ.$..........%9EF.....S)..........q~=r..wsp...o.bkk..W\R......Na.=....

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 856 x 901, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61147
Entropy (8bit):	7.7996290421032946
Encrypted:	false
SSDEEP:	768:TJljkcSQcaTQVSu+JEbGLa0SItSPE/VoUJ6/jFZDkk7rP6Ro/S03qJIJP69b4jp3:T7YDQjwYapUo8W/NBx69JG
MD5:	3DF2D45558FE944066081439E4A8818E
SHA1:	D7E5C1BFD7D15D2F9670A062B2917B762B4607CC
SHA-256:	60DF66674B21E487AA6BF46EAF318C398C55CFFA68A7919785097B096911E50F
SHA-512:	9CBB6BFFCAFC20FC00D330A791208518B90DA9035EEAFDCDCB4AA2578A9014F622FFC08A55772E3B9DBB849C0493A551CD292FA811236F082A465278B9DDFDF2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X..........].... .IDATx..WTW.....>.q..=.990....sl.!.`b...6.........czU..PB..T.&(...J...QDP@....R.v.....[..b..0..j.\s..7..Y..i\|...#........4......... .. .. .. ...............9-.................=.s...b/..1............<..B....@..@..@..b....Nx.c..i..........'0....... .. .. .. ....4@..b.#. .. .. .. .....@..@..@..@..b.......,vd..@..@..@..dx.Q.@..@..@..@ V..k8VK............y...1_....@..@..@ V.@..j.#. .. .. ..1O.B0................X-y...@..@..@ ..@..\|............X%.!..%.\|..........<.9.7.b.............@,.....RG.A..@..@..@@.e.AT............Q.s...5..e.l..........8.9.7..8.d..@..@..@..b........,z...@..@..@ ...)i....J............&.9W.u.f.k...........q.XP:.+.... .. .. ... .c..s..........'.!...............]....[..s.PK..-+....;..o.z.;?/..G..;6'..7w^...3..aLo........1.I".o........tP/.4x......c."....1.....C.......s.<..9.....?.q..e.../lX...K.;6'-^H..K.6o....-...GOhEK.ij...[.`...y.Z..'3.b...`.t-.V....S.........S"&>1...9....8.Z..l...T.._.z.......{9../..x

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 439 x 747, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	47856
Entropy (8bit):	7.972306980035206
Encrypted:	false
SSDEEP:	768:2EwQ7MJaMJQTsLYCa7csh5N/ntPkFimlmxN8WAWncA6eCSIUTHIbnD5Wmd:8Q7o7JQTsLs7ptkFoBA6cAJdFTAD55
MD5:	BA826E45FE0C89216E33E536B1E2C1CA
SHA1:	8E8E69AE155702681A2758DFBAEE576236CBADE9
SHA-256:	EC46F8909BE9EC8D21BC2F0241D1E1BD68BD7951F01DAA2EA01C78D051F53ECF
SHA-512:	2CBFD27D99DBA274B701D71133ED5E01FED5FE94F964D14616D817D4A36B1125BBA4E9B5A5EB709B626D2C857C868C9E61D0F063049D8111B12362C1F4A4B484
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/dBNIcHjRZJagV1uyH2ROQunHlErp8MQz-8qMz-en_fw/1641443643509-fT4.png
Preview:	.PNG........IHDR.............}3.... .IDATx....\...?...............AQJ.djj..i..J..Vf...k7...a.V.MhJ.../..E..D...?...J..cwa..]........!.=s.3.wg.........B...... ..B:..7B.!z...!...C...B...F.!D.Pp#...w(..B..;...!....n..B...7B.!z...!...C...B...F.!D.Pp#...w(..B..;...!....n..B....n..! .E...W.t.]...Y....n.>..B.uv+.!.I..6...e...%.;x..b..M...n....va.-(.....@D...[D..`..[u..Fa..w....C.Z."R..1(.....D.........Y(....r...j !.....?.e.=.sfOE..@.X...+. ....".\|B1.I...0g./D.. BH...:..Y.........~.........\...:.:B..b..o....n.!....F.q........pV......4......WQQ..,.b.[.. .."..l'.e[4..).......^[....U../.[.4..4e..M.j..J.EG"".,.....!h.",..".g.y..."u."....ER."8.N...3.=.....J..BT.Yd....Bga../.A....E.T68..A..l/"B5?{.H=..m..x..2.`..).,....6W...>v........1....+.../.\|..s.Zy...B1.}&b.G...O j.....l.(.\|k.^....Yp....X=.....]..f...wT...t..y.v)...n.&.9.s......0a....k......\|..,..Ep.8.....kBH.y..%..vM..Z.-Yv...z..../. +.....b./W..$.3.4o.v+...H.....5.C.Y...>"...w..0eE<J...............

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	40885
Entropy (8bit):	7.969670339102256
Encrypted:	false
SSDEEP:	768:XV1o5YP8ZHN5TNQ8OWUqgbZt265rGFh0n2ovrXkDrr3UJ3QZZUzFfO5e52RL1r+u:XV1TP8f5TNo2api0n2grXkrrEAZ/M2R1
MD5:	447E4CF4B4DDD388AB4AAF0E28BEA841
SHA1:	619263C24E96FB89D5EF9D46623BF20658E8F716
SHA-256:	E9EC8D84E70CF75FC650ED72F2BD2153D2EFF6CFF04E13427A556F22E060CD71
SHA-512:	470EC6843E4256FFD7BD1646E2F687E12603207630677A771908593BD2DD060961F2F6B6F0525B653F511BAD1A4E93E16179AF657546312AC5915EF2642CB481
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/lTTQm6i1CHhAOg4PEJrVVw8MGysjj4WjoWFYjHi3QTY/1652679303110-6jA.png
Preview:	.PNG........IHDR...:...X.....ktL... .IDATx...yX.u...'..9.".."H..(..3.f8..6.3....dZY..5sfZ..~5V..N%.1...d..)...h".H..a......,...........?.}...=/>.K...&..B.!....+ ..B..^$..!...iI..B.!...#..B..%AG.!..NK....].......\\._.!.h>........I&6w6.:......B..B......E......`.....J.(..r.......J...L.....#.TB..p......q.Y:..fP4.>..h...8..Q.n...N..{.x}.F..>...i....kZrz..`.m....R)=.B...z..s.$.<.........F.....\.{...{..d.\|z...:.q"...n`.....vs............]gW.M.............N...W.%.!D.L&....v.....*[...V..:..]........q.....,.qM{U....;.......v.>....i.7..V...........R.D..&W!.h..d.h4b0.. .?..<.'..u.Z.......2i.8.}..j~d_.!>.{...n}./._l.9.y.,[..C.S.h..w:/.X...7..y...Y..B.hb.Fq!....Yt..&,..".q2...Q...Z.k4e.{X...;n.>.;z8.>.j..69.V..a.....;,...Y..&....Y...$g.z4e.^.....>..r......A.L&r..(......p!...a..x{q...G.Q4.nkMd.0.O.....J..2.@Zt...1.i.&.z=.MB..Z.....h..<..C<0.?=../r.o....E.'}../....S.v.:.....,...>i.C......v.Od..S..{?;-.W1..y........h..a.rl....m.v...........}m...:............

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	downloaded
Size (bytes):	794
Entropy (8bit):	5.516003536427111
Encrypted:	false
SSDEEP:	24:2/s+P5RzYDx/MvuHyRWZ9pAyhKHFzRG6RZOqz:RA5RzYDxMwREiyz
MD5:	96C5DB343C7753FA2229B742BC1FE147
SHA1:	D8A551210E2D99CABEE9792838A9ACCFEF3DF192
SHA-256:	AB135659FD911EEC420C7F1586B70D71D616415247B9A6DDB4A10E234DCD2AA3
SHA-512:	9A8A23B4C5923FA133EF9DC7BA1EAD9A85B29DDB25FA05418E02A00E914807161840EC1E54B648C37CC7BBAA3B14FF92AA56EAAEABD11F2E5F4E88A3D91A3160
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/sdk/bootloader/v4/elevio-bootloader.js?cid=5de5c1e688134
Preview:	(function () {. 'use strict';.. var MAIN_V4_URL="https://cdn.elev.io/sdk/main/v4/1714634144204/elevio-main.js",MAIN_URL_LOCALHOST="http://localhost:8080/elevio-main.js",MAIN_V3_URL="https://static.elev.io/js/widget.js",QS_LOCALHOST="elevio-version=localhost",QS_V3="elevio-version=v3",QS_VISUALISER="elevio-envisage",location=window.location.href;function createScriptWithUrl(e){var t=document.createElement("script"),i=document.getElementsByTagName("script")[0];t.type="text/javascript",t.async=1,t.src=e,i.parentNode.insertBefore(t,i);}window.elc?createScriptWithUrl(window.elc):location.indexOf(QS_VISUALISER)>-1\|\|location.indexOf(QS_V3)>-1?createScriptWithUrl(MAIN_V3_URL):location.indexOf(QS_LOCALHOST)>-1?createScriptWithUrl(MAIN_URL_LOCALHOST):createScriptWithUrl(MAIN_V4_URL);..})();.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2450 x 1668, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	852431
Entropy (8bit):	7.979498184258141
Encrypted:	false
SSDEEP:	12288:tyZjFHExMHHGgMQZGridHuo+b1oeNOq4spJlgJWRnOAoNVtQme3lySLlziIoodLK:gxx/mgMQ79AooOq4syJWP+slBLlzfNd0
MD5:	CBB89D0774522AAB8FC577AB03AAEDFA
SHA1:	2375B6EE64D3EB1B3FA9BFA8C16006CFD1BB8834
SHA-256:	BA886B2FED2A97E53D61011879A84E6B6131BC1EB1654BCA90A81D49DFE24AB8
SHA-512:	0AE7269A0A1D3403D724393FA85A450922B66D6B6C6342D91809878C3B928C318871C5F200BEC1BFA30D234986C270A39220221FBBF78F61F7A130745D8189DD
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/hR5TK0WJDElXaydWj6c7Hr8StVa1MQ9k56fzm4T4zks/Add%20Payment%20Portal-row.png
Preview:	.PNG........IHDR.............ciy.....pHYs..$...$..P$......tIME......-9..... .IDATx....x.}...$......."....[1..&v.s.$N..v...f..M.t.m..z..i.&[....ni.c]..&N.....NIH....c...`...,##$.GHG..H.........yx.....9..WG..y.....y.H.........([....(H.........P............... .........@..$.........(s.d.........eN........................9A2.........2'H.........P............. .........@..$.........(s.d.........eN........................9A2.........2'H.........P............. .........@..$.........(s.d.........eN........................9A2.........2'H.........P............. .........@..1..0}.....3....x...._7....PB...l..h>......r.......HU,^z..T...s...(.\|.S]...g._.Z...3.e......p.2.......N.\|....?4.e......p..$..o..v!2....;.qg.~..S].........A2N.3..........3.......gK....x..S].....g:....... .'.._7.%..p.\|........l............9A2.........2'H.........P............................\...TVVLQE......0......8##IOo!.........Y3...&K/.....p.......0..... ...}/.gg....]..h1.=...O...\}.4..~.........

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2128
Entropy (8bit):	4.797898345534174
Encrypted:	false
SSDEEP:	48:YZ9GIGNvxEVNjfXf3CivHxSZwsSr86x8+obTSWASY:I97IvxOXf3CWRSZwsSxtlB
MD5:	575CBC4F823F84486F4278C545C86A86
SHA1:	C085253F1C07A652684449C309D63294FD41AB65
SHA-256:	16F04875C1C4527A204F0122009AE5DA3276AEEA7D81F2BE7F032787195B8CAA
SHA-512:	33F0BEE18C1735FE4EC106A20028A7891843F7C2AD325BFF6EE364E6E87761D34DA0208CFF0AD2C92730F4929AB152E5A2B1202419DBF74F8ECCC7836FD50059
Malicious:	false
Reputation:	low
URL:	https://ipa.elev.io/api/settings/5de5c1e688134/en?is_init_load=true&loggedin_only=false&first_name=null&last_name=null&registered_at=null&previewMode=false&url=https%3A%2F%2Fknowledgebase.campaignagent.com.au%2Fen%2Farticles%2F481
Preview:	{"lang":"en","settings":{"companyId":13566,"font":"Helvetica","tab_color":"#061933","tab_text_color":"#ffffff","contextual_color":"#1abb9c","side":"right","tab_teaser":"Self - Help","theme":"light","enabled":true,"docked_position":"wall","push_in_margin":false,"button_icon":"","auto_open":true,"loggedin_only":false,"ginny_pig_for_ab":false,"display_type":"full","useLiveSearch":false,"article_feedback_enabled":true,"hide_article_feedback_email":true,"show_related_articles":true,"close_assistant_on_escape":false,"suggestions_count":3},"modules":{"modules":[{"id":18,"title":"Contact Us","moduleType":"single_article","order":1,"settings":"{\"article_id\":\"383\",\"askForFeedback\":\"1\"}","icon":"envelope"},{"id":7,"title":"Create a Payment","moduleType":"single_article","order":2,"settings":"{\"article_id\":\"419\",\"askForFeedback\":\"1\"}","icon":"money"},{"id":23,"title":"Repay CampaignAgent","moduleType":"single_article","order":3,"settings":"{\"article_id\":\"502\",\"askForFeedback\"

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1196 x 772, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	128184
Entropy (8bit):	7.959434867262871
Encrypted:	false
SSDEEP:	3072:Nu+LdPu3AJzMKfrpmt9kf6WIE/G7rUGqfHeSLmeY/DvYx5J:tD5rpKOf6X7rpY+ul+vYx5J
MD5:	8E8B82A397DDA53745F966F5A640EB24
SHA1:	7611498B6E123167EDE37C320A359B956B0E90F7
SHA-256:	2910BC83C2CE93B0AF93A3F7AE779773B3B1B6164863D0796189B8758CDCC312
SHA-512:	713A4B49A8DEB34E60822BF0C7A1C8D9125A0A0543467BB76058402F118BEBF891416337947B2DA6EDF9D5A18AF8F2CEC8FF103D64B93E0025DF0EBDF19356EF
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/i-dOFdRu-5Z6K058LnScNrFMZJjVPBk9NionMQyJwuE/Screenshot%202023-11-09%20135049-cbc.png
Preview:	.PNG........IHDR..............O.D....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..\|.....1..w..P......Cqw...R(.V.8-.w'...xr..os.............3.{.;.g..if .. .. .. .. ...{.Q..A..A..A..A..."X.. .. .. .. ......A..A..A..A..h..V. .. .. .. .B.B.+A..A..A..A..!Z!.. .. .. .. ......J..A..A..A..A.V.`%.. .. .. .. D+D...A..A..A..A..."X.. .. .. .. ......A..A..A..A..h..V. .. .. .. .B.B.+A..A..A..A..!Z!.. .. .. .. ......J..A..A..A..A.V.`%.. .. .. .. D+D...A..A..A..A..."X.. .. .. .. ......A..A..A..A..h..V. .. .. .. .B.B.+A..A..A..A..!Z!.. .. .. .. ......J..A..A..A..A.V.`%.. .. .. .. D+D...A..A..A..A..."X.. .. .. .. ......A..A..A..A..h..V. .. .. .. .B.B.+A..A..A..A..!Z!.. .. .. .. ......J..A..A..A..A.V.`%.. .. .. .. D+D...A..A..A..A..."X.. .. .. .. ......A..A..A..A..h..V. .. .. .. .B.B.+A..A..A..A..!Z!.. .. .. .. ......J..A..A..A..A.V.`%.. .. .. .. D+D...A..A..A..A..."X.. .. .. .. ......A..A..A..A..h..V. .. .. .. .B.B.+A..A..A..A..!Z!.. .. .. .. ......J..A..A..A..A.V.`%.. .. .. .. D+.43.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 540 x 810, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	49076
Entropy (8bit):	7.96053282965815
Encrypted:	false
SSDEEP:	768:0htkscNGYfAss+wCMVnYRyYG6pZOKdUmsVo1xhunESYjw7U+c/HGWy2EqPPx:uesm3fAW1CnL6LIkotmf+WPZ
MD5:	032051F741EBCB639C205939F39ACA51
SHA1:	4DE6D90EBB6AF28C7772BC2FE00995766C346672
SHA-256:	31FAFA703AFA4FE35807C773610B5A75B9D04B31F12D1BB3FAECA1E45820217C
SHA-512:	2C45F1BA47C4E5FEE4F0AB7C7A90B8A31ABCAB571DB02E06CC1EFA0516B49F3B088AE3FD76AF4337F4B8632742639F9A3CAE1785B033438B659DE578644633B1
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/2fww_btJ423Vy88SJ2Q5IWKLROZRak18D6mq2-1MAPw/2023-11-09_12-55-13-4-4.png
Preview:	.PNG........IHDR..............x....pHYs..........+......tIME.....9...8~.. .IDATx...{\T.........D' O.>.F"......^a.%...ox.,l{....fY^..-.AS...z.c.w.C.N. ..l+..(I..#.?......(...x.CX.Y........Y.....!..B.+.z.w@.!..w>.8..B.au.p.!....$..B.!..I.!..B....C.!..V'...B.!.N..!..BX...B.!..:.8..B.au.p.!....$..B.!..I.!..B....C.!..V'...B.!.N..!..BX...B.!..:.8..B.au.p.!....$.@i...?....Q..~.......G?........@.)........V..E......W.>.;y..F.q.k....b....cb..>..U.\.;.R.'r.....?&....=.5..:N.SoU).._..S.2....}..5..{y.X.U.d...'.e!GI"......DJ.r.5....ju.&...._.UXuW+..6..^.U.."k;.c.2H.....yq.^N..T.!:.[..8+...Nd......o.;...q..C&..n......h./i.d..84'r.o.%d4#....<.G..}x..?..Qq.^.....1.....l.YE..C...A[..ec.....Y%.Q..).n{.)#..v.u.+!..l...>L_3.'...V.b..M.?.Asl./&....}..};r.r-YO........w...}b9#.L...y........#../swg3....).n?..1b...&?....3..o.....O....z.[g....T}F1'j,..u.....)......>..q....B.[....<...8H..5.5..d.....-_r..o......c..*.mL...I(1..thc...efWL. .......~.......O..q.........5?.e..u.3.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	42702
Entropy (8bit):	7.976730428420686
Encrypted:	false
SSDEEP:	768:m4kjaUhR+ENNMGJzQbofyIW1ZiHriFd1CpliyBOWyFFbm90:SP+8RQ0TgfFD0iHWyDC+
MD5:	80A2E53F27B50F7ECCAA0199CBA465D3
SHA1:	003710A3B4B1A6BD5A255832A4B72D74358447F1
SHA-256:	51874D5131F24F547BD6CDE952F36EDEB6A96C9B5208303E593DA0A84D7EAAAF
SHA-512:	7C71C8FFDCDB35AA799E6E24B96CAB29ED3E35697FE25A377F468B31CBD2B2572FA1624B841B3759E30B4FDAECEF409BB4193A6B79A62D86794E039D7E065818
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:...X.....ktL.....pHYs..........+......tIME......:.FvK.. .IDATx...y\TU.....2. k8..."....."..e..P{p7M.L}...6+....4M-.2.r...rI%.Pq.tDP...e.......x....{...{.3.;.{..c.z...A..Ah.$.].A..A..."..A..A.Z,.... ...b.@G..A...K.:. .. .X"...A....... .. .-..t.A..Ah.D.#.. .B.e.6../.C{.....\|.EEE.k..b..!L..,.._.....8...K[..>.OO......8. ..BQQ1.....}.IIW..8.......d.......###.JJJ.!j'............sb...v.../.o...........!/'...z`nn...^c.K...IS.T...q..i.-.y..r..4...........OT...........Q..5yB.O>..k7.{.....5..i.k.........D.p.. .F.R.T*)--.]..\|.:........<Np@?:Z.....G.1.\|.o....W^..../.p..M.._.3q8..2h`_..}.SS..J%.Mx.?........=i.5......;....m.R................G........w<...I.s..X[YrM~.....T......).73(....'....G....:r.[...\|.^....p.r2;v..z......#.f.d.....K...J.pui...!.._.......8.w<.v.@_.k.T..o..A.w.r....m.D"!...Fk.......N.V.......'jt.A.j.R.P.T...p.v.'.Nd...]....8...gl@'..j..A...\|.....0Ei.@...........9..L"#.v.<]=;.1c....}....SG76..)NN..\|.%%.:}..~=(,...!

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x394, components 3
Category:	dropped
Size (bytes):	20410
Entropy (8bit):	7.900822108100617
Encrypted:	false
SSDEEP:	384:3X+rdRl8V3WBMMvNH+Ubtet0pczMJ45Z7xwa4c9WYoh:3XURvBzNH+UpetkczMCwat9e
MD5:	88634A66F01112565EBB19E99AE26B37
SHA1:	514D05269FF25D2F4E5F0AC1C5914B27EEA340B9
SHA-256:	E50E735F5CAD686B6924090EB12137CFED63BDAD2FDD010537989E953BDFC490
SHA-512:	6FE2C8A81E3C7B80C2DDC325A6B72BE0B005B0F9138AA531404A19E9A0358972E6520B5721517BD8FF6BD8EF01B23A592CD2CE452E5CA8648609279EEA1CC088
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}..........."...........................................................c ................................c ..@.........................................................j....n...........}.&......,.Jg........ZI.+..I..E.^.......?^...z......gq7@......3..........i..j...E.r.5R..7]..#....jT.eyN...@6.....j.S.b.I..K........Q.......2.........~.&.kk.g1...X..5.:x.u:E^...U.M9.=d..}5...+.C7@..,2.3.....~..`H.".AX...I...o._.F....5..U..k%...\.....d..vXk.Q../W..IK.1..Xd....Eu.....iV.u..u&..:......[y.Y...,....b.I.^..k.Z...ej=...F/....2. a...k+.........9..6.W......IU...w...Z.....W.4..~....=...B.yiK.........m....m.\..-._..6..._>>....u...(.)...aU.M8..^....{q.V.....L...`....'.}..6.o..j....n.Ru.....%.......S......3..F....h0...2`.X3.OP.Z..Nvf.rr7/...s(.....@.....le.*.....:.-m'..>.D...a.........{.Y...G.{.._[;....[f8....c.c!D..,c

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.3275671571169285
Encrypted:	false
SSDEEP:	3:mSnuZoSMUyoSISRn:mSnuZoSrFS1R
MD5:	762128743321BBC936E18BDC0082E8A6
SHA1:	E2C46A17373D14E962BA7F271C9E22BFF85D315F
SHA-256:	11F94B85D259B4AA25F0D4B87C107A3AB43835B5A01D0ECD909201E55736C890
SHA-512:	608AC813104D444417B98CF40614EE640A497A9B20CCABC2490AD3B18966EFFE6C4093A3B3194B504181E49113A5EAF09A74E69A5E0CC62284525C2B6C82ED75
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSHgn8RVwxgJ12iRIFDZFhlU4SBQ3njUAOEgUN47whKg==?alt=proto
Preview:	ChsKBw2RYZVOGgAKBw3njUAOGgAKBw3jvCEqGgA=

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1077
Entropy (8bit):	6.99603046915572
Encrypted:	false
SSDEEP:	24:5kQKb1TlL4EmaI+9xzjg0EMEZO57DwPoQNAn8qlf6:mr194EXI+9x1Eu7D4FNAn8qlC
MD5:	00D41EB4B8D463C922876361C48E734D
SHA1:	C260D393777909C1C6DBB60213D12F8EDAFA0573
SHA-256:	8AECD7806B8107333ED8103B7A7D8A09DB657538B39A59868ECED11F56D85C69
SHA-512:	885C189D9925EC3414DE7FE51E0AC78A93CBFE18E70FB16FA650C9E75864ECCBD4396FB4EB6722D3812C871DB4E086DF14A9B5FB5BD3CE8FC4C829FB4E898790
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/assets/favicon.ico
Preview:	.PNG........IHDR.............(-.S....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....PLTEH.}H.}G.\|F.\|K..Y..Z..M..G.}s.............z................~.L.....D.zS........P..W.......E.{.....`..T.......G.\|......[........w.n......J...............a..Q..........D.zI.~..{.s.r.y.....I.~............_..f..f......h&.....tRNS..Zv5....bKGDOnfAI....pHYs...H...H.F.k>....IDAT..c``D..0>..L.L2....3#.88..yx.......B."..P.1.qV..I)i.........#....23D@EUM.(.....5T[G..QO...j..........:.Z..K+k..[..v....N...bP.7w.}MMO/o...%}\|..U........].g.e..'.$.....%tEXtdate:create.2019-06-20T05:41:07+00:00.a.....%tEXtdate:modify.2019-06-20T05:41:07+00:00k<.F...FtEXtsoftware.ImageMagick 6.7.8-9 2014-05-12 Q16 http://www.imagemagick.org.......tEXtThumb::Document::Pages.1.../....tEXtThumb::Image::height.192..r.....tEXtThumb::Image::Width.192.!.....tEXtThumb::Mimetype.image/png?.VN....tEXtThumb::MTime.1561009267.(.T....tEXtThumb::Size.0BB..>....VtEXtThumb::URI.file:///mntlog

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 547 x 614, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	51787
Entropy (8bit):	7.96854465952102
Encrypted:	false
SSDEEP:	768:bkGlBW5Rg2ZRyf8Ujy66YC4sKIeTT3aLYTQX8NQ/+vKfKju80wbvc:bQgyR7NEIUraLY0X8NQVCjZc
MD5:	4CC05B615065AAF5AFBE6831CD18EAAB
SHA1:	87A3CE369DE16CED6335D670A639127473F06EBA
SHA-256:	041C1BC026C1DED5108AF873928227E1C21B6373299897EEF91F397A391F1E65
SHA-512:	5F20E6DAA9E9FC77B4965B70EA9D9FADD1846FD7F60483E3389D612788CF6C022781762CF82D967BC78B930843B9042233532E2B365995AEC31721DA6ADEEC41
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/bA6_r0z7PmduA_pjPx1M6HWUeYsXkJzt-aD9tot8sKM/2023-11-09_12-50-22-jdU.png
Preview:	.PNG........IHDR...#...f........n....pHYs..........+......tIME.....2.5..... .IDATx...{\Uu.....7l..%@.......m.,m.F..Xg..X..i._.iN5ur..93M..3G;.4f....M.o...;..U@.q.......rW.X.....!{.......{....E}cs;B.!..fbi...!...M..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..B.!.J..0\..]...n:......\|7......ew...O.!...(F....w......@....[.......j.kr..rlG".5..O9.\|..>.U...r6..x.-)..v..<.....l....\|......:~...].A..<.....g...E..rq!..b...3r..S.y......5..&C.......8.u?3..].!....6.=#].Y...1...cu........q.._y!!..W....1....{.S..e.....^.....1y......+.8../...W+....;rz/....P.!....[.F\... ......y..W...y.. se0a...S....r.T.W....f..S.Z....\Mz...?..._.......k:\......0....yy.+........g\.z..w.b<..l............1.{~.?.0).3....sh.{.....M.\|.Me...s..... a..;.nA.DM.-...+...!}........+.tmwH..!..7...X.C..7....KU......,y.=........o~....R.8.X.B.{.fQ...u..]..A....I...fu.....\.(.'.../V..5.!... 3C.2x...e.l.......k.M$o..a..B..#3.Ms.k.]?.X......C....y

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	dropped
Size (bytes):	794
Entropy (8bit):	5.516003536427111
Encrypted:	false
SSDEEP:	24:2/s+P5RzYDx/MvuHyRWZ9pAyhKHFzRG6RZOqz:RA5RzYDxMwREiyz
MD5:	96C5DB343C7753FA2229B742BC1FE147
SHA1:	D8A551210E2D99CABEE9792838A9ACCFEF3DF192
SHA-256:	AB135659FD911EEC420C7F1586B70D71D616415247B9A6DDB4A10E234DCD2AA3
SHA-512:	9A8A23B4C5923FA133EF9DC7BA1EAD9A85B29DDB25FA05418E02A00E914807161840EC1E54B648C37CC7BBAA3B14FF92AA56EAAEABD11F2E5F4E88A3D91A3160
Malicious:	false
Reputation:	low
Preview:	(function () {. 'use strict';.. var MAIN_V4_URL="https://cdn.elev.io/sdk/main/v4/1714634144204/elevio-main.js",MAIN_URL_LOCALHOST="http://localhost:8080/elevio-main.js",MAIN_V3_URL="https://static.elev.io/js/widget.js",QS_LOCALHOST="elevio-version=localhost",QS_V3="elevio-version=v3",QS_VISUALISER="elevio-envisage",location=window.location.href;function createScriptWithUrl(e){var t=document.createElement("script"),i=document.getElementsByTagName("script")[0];t.type="text/javascript",t.async=1,t.src=e,i.parentNode.insertBefore(t,i);}window.elc?createScriptWithUrl(window.elc):location.indexOf(QS_VISUALISER)>-1\|\|location.indexOf(QS_V3)>-1?createScriptWithUrl(MAIN_V3_URL):location.indexOf(QS_LOCALHOST)>-1?createScriptWithUrl(MAIN_URL_LOCALHOST):createScriptWithUrl(MAIN_V4_URL);..})();.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1104 x 444, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	40694
Entropy (8bit):	7.830982238350629
Encrypted:	false
SSDEEP:	768:dSCxM7uBsLor006wJwt2iYvqhPqHqSN+uGKg2R9gP4sN0dc0C30:dSgIwJwt2hvsPl3Kh9gBOqZ30
MD5:	5E505F846690E2F5AB507EAEC5CBCCBA
SHA1:	871483AF406B2833C494224747EA346D21EBB7DA
SHA-256:	B974A5E5DB6F6394FA965602CAF06EDB1CFAC35CA736131A0220BD40932A884E
SHA-512:	E4F2B734808758A862E037698A3AA466A0CEF7D3619D3B2E245697FF9EC709199332CBDE6628859453D3F66E329341BB2284DB74C7885AE643AD381ED84199F0
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/Jw8idP_I6saqNPffarxW15PheMJilc0PFPKEXUVGDwg/1727660441380-trs.png
Preview:	.PNG........IHDR...P.........v[.5.. .IDATx...WSW....%?d..b.........,V.U.......v..UY...zAt@[...L....m.0..Xd...A.V.. .R. Z3.....m..Y{..e...C.C....j..s.....9......._..<.@..@..@..@..@..@ +......... .. .. .. .. ....<...\ .. .. .. .. ..YK..'k.....@..@..@..@..@......@..@..@..@..@ k.@.d..B...............@.@................d-.....Z.y...................................%....S.5.. .. .. .. .. ...... .. .. .. .. ... x.vj..A..@..@..@..@.. x x@..@..@..@..@......O.N-.<.................................@...........................................Z.kP..o..q....G X.(.k'....b}......K....._.1F.._.a..7CQ.K.9.............$.HA.D~..[..I...[^?.6.W{.....S.o.h...z.o..LE..p./..r'':.....W.[.{L.}.>.\|.....N4&.O............<...]wB.....f.N][..U...b.^m.A..^...`\|.m..^?....zM.?_x..]3...:$.p...]Z).J.$..N.2..............D`!...y.%*u8...._.K.G.\\|-......k:.....w....V..Qp...........L.."M...1Q...6C.H..r.35.l6.^.....\;]`.:....$.;....\|2...g.7.M............,....g.....>_~i......g?.\..n.._..l/....;c....

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2489
Entropy (8bit):	4.168429974603143
Encrypted:	false
SSDEEP:	48:CnASXW21k6X8XUnU8PGi36T4QRbsvLfSlcF6rwJ:KcoU8PG5nqvTSl5rG
MD5:	EBF3A116079D4474D9C13F48B7599AB3
SHA1:	94B232E2FBA789753F93012504A53F7A74907F11
SHA-256:	525FB1E47D0C629F29582774F5B99D9876BDDD998527E80F58D587E56D54193F
SHA-512:	CB3BD7369D198C249F89CAFC0F80DDC1A4930B55240A2599E450695FC9C10E1A9FDC35DB4164C003BBE6CAD3036DB8A6DA0051EE56673F64FD7682B28396EAFD
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" enable-background="new 0 0 64 64"><path fill="#ffce31" d="M24.938,48h14.125c0.838-4.313,3.513-8.505,6.315-12.898C48.632,29.999,52,24.716,52,19.586...C52,9.889,43.027,2,32,2S12,9.889,12,19.586c0,5.13,3.368,10.413,6.621,15.516C21.425,39.495,24.103,43.688,24.938,48z"/><g fill="#94989b"><path d="m26.449 33.595c.144.596.273 1.193.425 1.772.265 1.091.522 2.147.771 3.169.92 3.758 1.73 6.987 2.371 9.464h.594c-.526-2.513-1.244-5.799-2.105-9.628-.232-1.021-.473-2.086-.72-3.178-.131-.534-.244-1.076-.368-1.632.832-.183 2.653-.803 4.584-2.889 1.932 2.085 3.752 2.706 4.584 2.889-.124.556-.237 1.098-.368 1.632-.247 1.092-.487 2.156-.719 3.178-.862 3.829-1.58 7.115-2.106 9.628h.594c.642-2.477 1.451-5.706 2.372-9.464.246-1.021.505-2.078.771-3.169.149-.579.28-1.177.424-1.772.756-.051 1.479-.287 2.043-.804.578-.569.88-1.314.744-2.107-.061-.38-.345-.872-.896-1.041-.254-.083-.508-.101-.832-.018-.268.102-.464.251-.598.396-.533.592-.726 1.183-.945 1

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 566 x 578, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	58544
Entropy (8bit):	7.979616778695922
Encrypted:	false
SSDEEP:	1536:XWSeAgT/q4LS0SwRa6GbFxAKCdY23Vw4ksxo0mA:1fgT/q8vG4dNa4k+
MD5:	49398D51CF1396AF8B1A383C67003E49
SHA1:	9BC90BCB7BBB10914495D8BC91DC814C97135700
SHA-256:	EE5D37F6EA7976BA4558306C6995B698E9023B2BE8A5477DD4FC343377F3F14F
SHA-512:	3180A7A506E27DC692996620402F801C947FF1049987F6DAE69F5A01D94D55D538682C3427B817011BBB14B4E0E05E15A4D9CB4C85F81EB27D0BC5C74D27FA40
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...B.............sRGB.........gAMA......a.....pHYs..........o.d...EIDATx^..@......!.. "....7Jb...._M3...LK.YVffeZYjY^y.w....... .. .........^.E......;.......w.yvF.A.. .. ....hJs. .. .Z.... .. ..$l.. ...3..!.. ...@..D.44.-M.6..H..A.E..U.....a..^.bC(.....mMh..F.$.. ......e)/S...Q.....0..A.../Sy.JT.$l...V.I&.. .J...d..>...FKK..:.~.... ;;[....z..&.=..._...B.....3.d.H..+....M......J..A.Enn..GD._...%H."9...sS.T......q#...tuu....<...0~.e5b.>..j.A....>.....F./..N.k.B...5o.5../}....... H.. .....)).8r.${y.a.....M~~.r.H.T5U&lxE.......H!%....._..3RH....#....X.n...;%..N..FQ.....y3..5D..hjR.%A.Dypa......<l..w...?{.H...R.j...?z...R.'.>......;R@.Qe...'.......%`..q...X[Y.U/.!...@..c.......--..#..7...6..=!. ................ih......8.Ll.j.)..L...H.....i...F...OHDNN....W.aQ....e<NL*......[ ,<....DGw.wC.aC....".I2n....9zz.h...:::B....Z.t..x.U.....b.....Ll.........V....UWs....p.d.d..<...^pa..G... ......xsT".K..?.....bE.s^.a........=Z..H.SEz"n

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1362 x 1287, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	116803
Entropy (8bit):	7.932400654900833
Encrypted:	false
SSDEEP:	3072:W6EurbAObe2oKtvDQ2qi/wsuUW2HVLwA9:/IOC+trQYzl9VLwC
MD5:	0CA2EB06177B6FF792E37AF71C5422F4
SHA1:	FD9961CE75F66C46A8697A4D257061D19A259711
SHA-256:	82E794D16B5CCAA025527B449D16FB0613099CEA606DBEAFF5CD525806AD7EA0
SHA-512:	58CBB7214DEDFC54A033C6E4E7245FA00B82377AA593D128BC33D29C93B50EB0C74EB74228A7DB6162E06FAB30E6227097DE80A804ED5A2F8690C0ADFBECDA1F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R............:....pHYs..$...$..P$......tIME.....24<..~.. .IDATx...}X.u...w..E.!b(..A...LF."...e.6.C...6...360.g;.j.......hQ['.hL.H.(....0L..@HDb!.R...x.X.R.......{...~.{.....>\w...............N..............\.............. UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ UDDDDDDDDD....""""""""""6(H...........AA.............REDDDDDDDDDlP."""""""""b..T........................ ..(,*

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	dropped
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1839)
Category:	downloaded
Size (bytes):	1862
Entropy (8bit):	5.378704584910478
Encrypted:	false
SSDEEP:	48:kq9vYpOXSCKt9Y67c8ouBCWs3cTPaLGqviMaE8FEbEfESEHZ:kq9vYQiCKt9Y6g8ZBCCra3viHEIEbEfc
MD5:	83583A4061DDC27E8B6EE0DC269519CD
SHA1:	8B1C0ACC28729208F640473EB5D8FB82C4BA3E15
SHA-256:	C051B8B5EB2A0AEF699780F15A449491868FAA6F8B39B684B5AE8F64F345B94A
SHA-512:	3652AB4345C138245677F415607E6447358DC064B8B3AD7820F34BF225A0D70B0820AFD87E5D2235919AFC703248DA54F126DF8F793DFDA529D1FA336FBA22C3
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/js_opt/modules/utils/vuid.min.js
Preview:	(function(t){var e=false,n,o,i,r=typeof t.navigator.sendBeacon==="function",u="https://vimeo.com/ablincoln/vuid",a;function f(){return 2147483647}function c(t,e){if(arguments.length===0){e=0;t=f()}return Math.floor(Math.random()(t-e+1))+e}function d(t){var e=(new Date).getTime()/1e3,n=parseInt(e,10);return t?e:Math.round((e-n)1e3)/1e3+" "+n}function v(t,e,n){var o,i,r,u;e\|=0;o=Math.pow(10,e);t=o;u=t>0\|-(t<0);r=t%1===.5u;i=Math.floor(t);if(r){t=i+(u>0)}return(r?t:Math.round(t))/o}function h(t){var e=t+"",n=e.charCodeAt(0),o,i;if(55296<=n&&n<=56319){o=n;if(e.length===1){return n}i=e.charCodeAt(1);return(o-55296)1024+(i-56320)+65536}if(56320<=n&&n<=57343){return n}return n}function g(){return v(c()/f()2147483647)}function l(t){var e=t.toString(),n=1,o,i,r;if(typeof e!=="undefined"&&e!==""){n=0;o=e.length-1;for(o;o>=0;o--){i=h(e.charAt(o));n=(n<<6&268435455)+i+(i<<14);r=n&266338304;if(r){n^=r>>21}}}return n}function s(t,e,n,o,i,r,u){var a,f;if(arguments.length>1){if(n){a=new Date;a.s

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2814 x 572, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	60856
Entropy (8bit):	7.575637423933491
Encrypted:	false
SSDEEP:	1536:I3aOW1bVdMVsJ7Kx7vJDSZ3O96vOVF09G5:caLHdgO7YLJeZ3DvOV4k
MD5:	C18DAE71ABFB5FD24C23E2E4B656B92A
SHA1:	B7C0C2D245F70C7E99626E2F63B108A8EFD19CE1
SHA-256:	D16273F9EBEC3AAB69C6C0532A4B1566D0BEF3A98EC39D02B52B31551C8DB502
SHA-512:	133883A986CD9FD1ACDAE07E526EA62A4C4CFB8B49C419F51BF6F432646A05457FE76B5CEB6E457341C0D4E1E3378C7D1D24FF82EBCB23B1A5775CD19CF1BA54
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/pBoI4Y_sqdPC1Qo_S_HMFlW_eiDacjXB7qSoBhG1yK4/1641443263154-rp0.png
Preview:	.PNG........IHDR.......<.....3.NC.. .IDATx...gxTe.....$3.)..B.J....E........m].........Z....V....HGj..H.$..g.......a.Iy..+.s.s..\|..!.O.c......0..C~....Z.c...................K...................8.................@.@........................................_................. .................t....................../...................................:..................@.@........................................_................. .................t....................../...................................:..................@.@........................................_................. .................t..@.......................D.a...6.%...z...............:..fD;K@.S......................2..-...'..%$.................4'.[;O..B..2......^...................hC.....p....=.................v..n.....i..2..a....w..7g................:'.0..GkB..u..9....>....os...\|..................@...:..........p...6...poC..................@.P_.._p.....pC..@...e.9...u..Cr.%S.L.4j...M..f.........

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	47899
Entropy (8bit):	7.96629305953007
Encrypted:	false
SSDEEP:	768:zjdwjtYdQupvKeHR4Ti3zjs3Nulze9BfRaVIYIfZJ0g7G86EZ3D9XwVXLX:zNQmeO3E3glzMBfRaVmfr7qK3aV7
MD5:	C1368B072BCE9364A8E75E42CF6CA971
SHA1:	4AC001A0E89035ABFA25DCE22D42CDCF683D1D78
SHA-256:	EF1517904E19EC37EE538D7ACD88F4F424B936B52EDB02D9A894A75EF5C5E750
SHA-512:	3D8E376B8C54E40022D991E2DBB63A93C642225CCA5F73978745A584DEA6261AF960AB5013EBF6B7FE8EA62065835838299BF6F2F5ABE1A08F372CA6402BC80A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:...X.....ktL.....pHYs..$...$..P$......tIME......:e..... .IDATx...ut.......w"@.B.`-.^..PJ.-.......}k.B)....;.C...w.#..!..q.q.......3...yf....]_..4.....?=.r...Z....9.&.m...[..V.>.\|....<...E#'..@......Wf......5}.+#j...&.;....>..;g.d.m.S.....Oa@.....(.`0(.Ln....t.A~*@..C#'@....N....{........4....~...y.o2.E.i..?...SY.e..B..~...`:...9[...~g..~Vm.F.Yg.....9....7..>...g}.$..^.w....A.8F[.SQT.....B.!.IQvt...B.!...!..B.,.:B.!.0Y.t..B.a.$..!...dI..B.!...#..B..%AG.!..&K...B.!L...!..B.,.:B.!.0Y.t..B.a.$..!...dI..B.!...#..B..%AG.!..&K...B.!L........C..g..\|..7.].qEyy9?/Y.[g3l.X.....].vu..9... o......-.._}..cyh..-....c}...\|.....5.3eee...6.:...l..G..+..Nd.....g8\|.(z...V..pF.8....6r,o...ee...x..F.e..,_......T5..<m&o.......].6.@i0.X.b._~...99..WT.i.RRRy.w.3~2c.O...$&&..\|...\|.....6w.=l..Neee..Y......j._{..'..%".m.R\\|..1)).,..Zu\.\|E..... l...0l.X... k.m.....2...3.0. ==.%?...SVV..."==..s.V/O.....r........9{..V.V..x.....e.....N...n.>.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	929
Entropy (8bit):	7.082967523552409
Encrypted:	false
SSDEEP:	24:+cKYj6LUlb/td0RP8l6AjgqHYBKX7Gxm3p/SiGk5MICo:+cKYjwUlbtyRPk6k7HY4X7Gxm3paiGaR
MD5:	5E066483CCD467BC142335DE705076BC
SHA1:	7B1C9106C393D4BE677A8D83C165283F5B709097
SHA-256:	7C5BC5175A47D06DEF9500BA1B9DA7E41C6D9D7980D825E99587FDAE901A984D
SHA-512:	63F0282F5A027146DF449AC58543F93877EC1E6FA4C09BC5B2F79AA3DED2E6AB142C7C4659C9FF896DDDD57E7AD02E21184575045DF40E21AE84F515A149266A
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/1892190581-734b4cdf427d7ff090c75a960ecec9f333f75a48034b47b2829e7b0d9731ace6-d?mw=80&q=85
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......P...-....pixi............av1C........colrnclx...........ipma...................mdat......g......2..Dx.a....u..1...v..H...Vs..FD...^..N....">.`!^....z....k6.#rB..u1r!.Y...8I.e.. N.u..._,-.......I....;..c...!.t..Ni.`..i&..0..kvT{a..1...5h..Z.'0...X..L..L.A..G.8..NN.E..#.).d?.....0s.?.D.`2i._...\..fO.3.G....ud(Z.X.w..P...W._.7%0.>V..[....b....}......f..r.q.S........B1...1.k%.d..kC.].....]....!.mt..=.B....?.5P.O..9J...4.P.w @.vaz....=6..k....8.Z7..............'zz2...E..?x.N;H.....AB..o.K.$.j>G.....Yj.M.Cd9.Z..:....P..aaV..3....@..R>.....TA.r.T..I... .E.w._.....e..M............Mp.2.#W..3.u.M...\|.$Ve....Iv.Y...l.5c.V.@...+6.r.....ds.9..c......'8MhAH..........J....f..ai r.._.....1..O.:.V..A..3...l....#E.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65495)
Category:	downloaded
Size (bytes):	221354
Entropy (8bit):	5.12634727976628
Encrypted:	false
SSDEEP:	1536:cWyoOYWxuY++npUEJAWSnnJRerKz9EQ/E2o4h1uQ2RSzFLMc6af7VbhXGnNoB+cZ:qrF21u+LMc6afvXZai
MD5:	CCF34D0EDA0FDD7A941104079C874703
SHA1:	EB9B1D63CCA55E4B0F7489C9411845F0A68B0B4C
SHA-256:	E087E0496BA5DB1F9BAC9A0D2DD755121384594AC7DD79B07AF13B77CBEDC741
SHA-512:	ED735755821E5CE9B31EA48C8685074AB546B9CAECE4EDF86F688B9473EC43A61BBA9633E23F16DED829E8A93EF0D5A6DF1A42C2801CF8111612EA205BA9CA70
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.39.0/css/player.css
Preview:	/* VimeoPlayer - v4.39.0 - 2024-10-29 */.@keyframes buffer{100%{transform:translateX(-10px)}}@-moz-keyframes bufferLeft{0%{left:0}100%{left:-10px}}@keyframes throb{0%,100%{background-color:#555}50%{background-color:#444}}@keyframes wiggle{0%{transform:translateY(10px)}20%{transform:translateY(0)}40%,80%{transform:translateX(8px)}60%{transform:translateX(-8px)}100%{transform:translateX(0)}}@keyframes pulse{50%{transform:scale(.9)}}@keyframes dash{0%{stroke-dasharray:1,200;stroke-dashoffset:0}50%{stroke-dasharray:89,200;stroke-dashoffset:-35px}100%{stroke-dasharray:89,200;stroke-dashoffset:-135px}}@keyframes rotate{100%{transform:rotate(360deg)}}:fullscreen-ancestor>:not(:fullscreen-ancestor):not(:fullscreen){display:none!important}body:not(.showfocus) .player a,body:not(.showfocus) .player button,body:not(.showfocus) .player li,body:not(.showfocus) .player span,body:not(.showfocus) .player svg{outline:0!important}body:not(.showfocus) .player input{outline:0}.vp-center{display:flex;align

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2128
Entropy (8bit):	4.797898345534174
Encrypted:	false
SSDEEP:	48:YZ9GIGNvxEVNjfXf3CivHxSZwsSr86x8+obTSWASY:I97IvxOXf3CWRSZwsSxtlB
MD5:	575CBC4F823F84486F4278C545C86A86
SHA1:	C085253F1C07A652684449C309D63294FD41AB65
SHA-256:	16F04875C1C4527A204F0122009AE5DA3276AEEA7D81F2BE7F032787195B8CAA
SHA-512:	33F0BEE18C1735FE4EC106A20028A7891843F7C2AD325BFF6EE364E6E87761D34DA0208CFF0AD2C92730F4929AB152E5A2B1202419DBF74F8ECCC7836FD50059
Malicious:	false
Reputation:	low
Preview:	{"lang":"en","settings":{"companyId":13566,"font":"Helvetica","tab_color":"#061933","tab_text_color":"#ffffff","contextual_color":"#1abb9c","side":"right","tab_teaser":"Self - Help","theme":"light","enabled":true,"docked_position":"wall","push_in_margin":false,"button_icon":"","auto_open":true,"loggedin_only":false,"ginny_pig_for_ab":false,"display_type":"full","useLiveSearch":false,"article_feedback_enabled":true,"hide_article_feedback_email":true,"show_related_articles":true,"close_assistant_on_escape":false,"suggestions_count":3},"modules":{"modules":[{"id":18,"title":"Contact Us","moduleType":"single_article","order":1,"settings":"{\"article_id\":\"383\",\"askForFeedback\":\"1\"}","icon":"envelope"},{"id":7,"title":"Create a Payment","moduleType":"single_article","order":2,"settings":"{\"article_id\":\"419\",\"askForFeedback\":\"1\"}","icon":"money"},{"id":23,"title":"Repay CampaignAgent","moduleType":"single_article","order":3,"settings":"{\"article_id\":\"502\",\"askForFeedback\"

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2717)
Category:	dropped
Size (bytes):	35946
Entropy (8bit):	5.471620889692367
Encrypted:	false
SSDEEP:	768:6DyNw5wDn4toiuumfztiabrBOWi5uf/J8P2Bcn+irSPMRpk+b/902GwD3DJgiOYA:e3Vuum7tiGrBOWguXTc+irY3Q/902Gwe
MD5:	05345F56355FA8421E88B29947743EF5
SHA1:	C2652FD719B401718457C94BC3292D3204699D00
SHA-256:	A2BDD8CB01353D4ED2A9AB4C7D7C263225F6908AA875614D015A2F39956D9D73
SHA-512:	DB343C949AFF72FA05C45F914A02F874770367153574CB70DC6ECA426D3C7EFBACABD93670C97F715EE71C0037973E6CB6F4A6E9DC61DC91D77F0735C1059D68
Malicious:	false
Reputation:	low
Preview:	// Copyright Google Inc. All Rights Reserved..(function() { /.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var h=this\|\|self,aa=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"},ba=function(a){var b=aa(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length},ca=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},da=function(a,b,c){return a.call.apply(a.bind,arguments)},ea=function(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);.Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}},k=function(a,b,c){k=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?da:ea;return k.apply(null,arguments)},l=function(a,b){a=a.split(".");var c=h;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	187
Entropy (8bit):	4.297657412045876
Encrypted:	false
SSDEEP:	3:toKcvXjXRHoNcHb9Fv3FUxUudv9GavYImqv3IGjNIHwBIbT27+H8L8bTS9i:tcO4b9d1elV9GaEKYH6l08wb+Y
MD5:	E6F130FDABC50710B7BF204829B45E60
SHA1:	966E02786239703CB68CA8EA0641906ABC7D4F11
SHA-256:	53738A1A4DEB8DC4895FD2D0753F2DAAE97BA496C510DDE4C3C3C32A7FDAA063
SHA-512:	5C45A1D549A35CB9926A5C80169B57216F9BEDE40C6E7EDF65B8B8F2C91F4356C025FD4D10C63845466ACBAAD25BC0C41685B2C1830EE12B02C79AF9185127BE
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="0 0 24 24"><path d="M19 2.001H5a1 1 0 0 0-1 1v18a1 1 0 0 0 1 1h14a1 1 0 0 0 1-1v-18a1 1 0 0 0-1-1zm-13 2h2v16H6v-16zm12 16h-8v-16h8v16z"/><path d="M11 6.001h6v3h-6z"/></svg>

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5190), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	8036
Entropy (8bit):	5.85776697020617
Encrypted:	false
SSDEEP:	192:+MOvhAgBcYydjFfdoR4U1jGyL8nARBmIssUS5Iujjcv:8zDR4UFdWgUIzg
MD5:	46B9A88748E6CBF0BF158E0425CE938C
SHA1:	C97F6824C1D01E7957EEB80752C6E0B94EB12B3A
SHA-256:	6E1B37ADE0D68E8A4A95FB885033A636FA865E5D378FA4EDA5441C12EE8CE143
SHA-512:	2135D7EA6FBAD4652C215B93D44B0312D770FDA6C01B7D581C34CD9CC8C3F8C15E0598E7EDDAD2F67934C2C5B69DECE55907C585453DEA76B2B230E6BE802B2B
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/kb/v2/deployed/5de5c1e688134/4db52de3-999b-4de9-a518-4952820c5cb9/styles-snippet.css
Preview:	a.link-color {. color: #28aae1;.}.a.link-color:hover {. color: #28aae1;.}..link-color svg {. fill: #28aae1;.}..link-color:hover svg {. fill: #28aae1;.}..show-more {. background-color: #28aae1;.}..search-bg-color {. background-color: #061933;.}..header-text-color * {. color: #ffffff;.}..header-bg-color {. background-color: #061933;.}..bg-color {. background-color: #e4e4e4;.}..page-text-color {. color: #333333;.}..logged-in .login-link,..logged-out .logout-link {. display: none.}.@import url('https://fonts.googleapis.com/css?family=Roboto:100,300,400,500,700,900&display=swap');.....index-page {.. font-family: "roboto", sans-serif !important;..}.....footer {.. background-color: #e4e4e4;..}.....header-bg-color {.. padding: 20px 0 13px 0;..}.....search-bg-color {.. padding: 55px 0;.. background-image: url(https://cdn.campaignagent.com.au/CA_LinkedIn_Banner.png );.. .. background-repeat: no-repeat;.. background-position-x: center;.. background-size: cover

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 1920 x 1080
Category:	downloaded
Size (bytes):	15785051
Entropy (8bit):	7.963108840321511
Encrypted:	false
SSDEEP:	393216:yq0BKb256+p5uMIWjs/SoigkKZ4UO5Q97vdya:sK6dpcXWjJgkKZ3V
MD5:	16848005B5C8945FD559C84DA4E093C0
SHA1:	66BBA6509C3C188F6E9B59A76877B5B0B0E49E7A
SHA-256:	D59F72D2AE4EB9CE9B0D0D81D25C034A6204AFC6785F3D7FFC6E2EC0D2E79115
SHA-512:	C8C47E62B8534833C7F550FD8C5674163A608DCCDFFE1C54645CEA0D74DC6D83209A3983FF975D3310CB600389A725CD86D69F8754C886C538DABE7F14CEE221
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/Vj0zDk7x-MmbNLYp2XJ-R0-Sd74MvbRj1kcZvrmLBvI/NOiNZlFdEYs28e66Nva66GyaY0cWzsRVrw0-SFuAe4I/1659597177718-pRU.gif
Preview:	GIF87a..8.w..!..NETSCAPE2.0.....!.. .!.......,......8....s..d~.2Z!1..sO.....).x.onQG..)+-...P...Gx.^.pI%I`.g..8....0J]j....u3_\X....H....Iz.\|..[......WC.....m..>?APE90^.o.%2E...u....$%(..gtv.W0.......x.bo....kN..t..a.2.V....664.."qn#+^.zg...Fq."......>3....d2...7.......v......<u..q.......f....^lz0/+bJ;......Q#...........[}!..cBBPPeQOQ!0.s^Osrk....../P.B;,.k%....'....>HZ-o._f!......\|....]w..............WE.hlr...A2,.......L.?N4..(n....m%........s ...5<9......l4....ka..../J..y]av%0H.Urif2..r.]...G..05L.UD....$.....otKzb..4...4$(.............$<K.'.......... S.....+.............. Xq....\|...............&.#1..........2404?."$........~...........$=.................4"&L.........&3..?.....@......`..^.h.(Z.@"......"4224..............4..4264..............4...........4.",..................H......\....#J.H....3j.... C..I...(S.\...0c.I...8s....G[.la....G."5.t.S.P.Jm....W.b..u.W.`.......g.5.v.[.p..m....w...w._....

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	9659
Entropy (8bit):	7.9614296649368965
Encrypted:	false
SSDEEP:	192:+Wpqgpm4+bvEEoM8OeZ2ZONAxCWl6/2Hp0nuw6dxLj/yWs:nmpEEwZjGCWlW2Cq//xs
MD5:	9320996BB22CC928698CB42B7BE30F28
SHA1:	1C3CD35CF0504B977F1B058868AAB1184670DE5B
SHA-256:	7689DDEF854156DABB5B2417B861693D9825D953DA8EEB53E8227ED5F799590E
SHA-512:	DE04871D7DEFEBE05FE5EE92C282352DBCE1C8C109431BAF1C9F41EDE816188187B6AADA3C75FDDE621B16777E1C00F46A058BD260AF944E9B24C9B88BC7759A
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/1892190581-734b4cdf427d7ff090c75a960ecec9f333f75a48034b47b2829e7b0d9731ace6-d?mw=700&mh=394
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............$....(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma.................$.mdat.....f+.K..4..2.IF....0......L...&.;....,.R....].S.7...Z(........p..k......_93.dfi........o.y^..u...Z.......+...}N&N)...C.p\..>.F....h....h....Z+.6h...O..o..s.[......7...c...\.\E9......<p.\|.../.Z....S.U2.+../@vO.t.1.&..R.&....#....@......ID..Q....b.+......L......JW.x,..9...`.n.".q(!H......JE.^)2P...\|.?.Q..B.?..',S.S.&.A..;O..V....r..@5$...6....<.`l........Fm;My....TcH.j....&......8 ..w.V....!.q.R.r..i..^...{(]![E&i..>'SL..7...5........z..0.... .;..n........s.uN.@6F.j..iE0.v.6..4........q..;.....\K3.[..p....fI...bkd.-k.G....[.S48m...a.....<...D>d.......n%E..Pt....1.f..K.-...'e...F."..K...l.....o.*@(`C..+D'.}..)...jC..!...&k.....V.u0y}....a...-Y..R...".........R'v...

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1426 x 1501, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	172146
Entropy (8bit):	7.889765643217744
Encrypted:	false
SSDEEP:	3072:ApWREkKKTlE0caCt4DDJ06XkJ5yROePPK3xVljzuakY7q6P:2Pkm0cB43J9S5aPgxvOamY
MD5:	3161930F37B0945B2221602CACFED4D6
SHA1:	0910115B6169340792BBA6C4705A738C63544926
SHA-256:	B5F5FB852151DDCA9B055E93478C23A5750F0315B5A590004AE7667F712E1D70
SHA-512:	91C72896BFA492E1E9AAFB2D3FC6056E5369C7086B7546954D7484B3705BB181C3D7858B67E7EF2250AFE3315951D2E1344A5794B2A2715C7537C94F876D2DA9
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/Vj0zDk7x-MmbNLYp2XJ-R0-Sd74MvbRj1kcZvrmLBvI/78zqh-92XW-1-Eh_9R95xE2Wk-gaTMK2OqoTqoM0Cks/1658999116403-PyU.png
Preview:	.PNG........IHDR..............x?... .IDATx...w\.....OB.3leo......v.Z[.^..j.V........uT.Z...(..@.D..{......o~........\|..^..O.7.......&......d2....G.........J..`F.BBB.~~~?...x.......n..v,.n.&.Cs..k.&.C..lk.&@kZ......U.......y....M.hopi..).%.G............................m.6.....................NBn.........(>..-.........x..[.dIk7.....................`...........Q.$..........A"........Q.[........G.1D...........-....................B.T........(...........B.........8.a.........(.-........................v.........X..........p...........Q.[........G!l...................p...........Q\|....n.............~k..............v.........X .........p...........Q.[........G!l...................p...........Q.....n..........~yyyk..........._,..v.........X .........p...........Q.[........G!l...................p...G................m........`....n.6...........x..n..........$..........B.........8J....h.BB.f.^@....%..}.U....Ri......O.>K..$.8:......I.:t0k..A.u..?...M.k...O......Z......N...?.....Bqbb

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1426 x 1501, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	172146
Entropy (8bit):	7.889765643217744
Encrypted:	false
SSDEEP:	3072:ApWREkKKTlE0caCt4DDJ06XkJ5yROePPK3xVljzuakY7q6P:2Pkm0cB43J9S5aPgxvOamY
MD5:	3161930F37B0945B2221602CACFED4D6
SHA1:	0910115B6169340792BBA6C4705A738C63544926
SHA-256:	B5F5FB852151DDCA9B055E93478C23A5750F0315B5A590004AE7667F712E1D70
SHA-512:	91C72896BFA492E1E9AAFB2D3FC6056E5369C7086B7546954D7484B3705BB181C3D7858B67E7EF2250AFE3315951D2E1344A5794B2A2715C7537C94F876D2DA9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x?... .IDATx...w\.....OB.3leo......v.Z[.^..j.V........uT.Z...(..@.D..{......o~........\|..^..O.7.......&......d2....G.........J..`F.BBB.~~~?...x.......n..v,.n.&.Cs..k.&.C..lk.&@kZ......U.......y....M.hopi..).%.G............................m.6.....................NBn.........(>..-.........x..[.dIk7.....................`...........Q.$..........A"........Q.[........G.1D...........-....................B.T........(...........B.........8.a.........(.-........................v.........X..........p...........Q.[........G!l...................p...........Q\|....n.............~k..............v.........X .........p...........Q.[........G!l...................p...........Q.....n..........~yyyk..........._,..v.........X .........p...........Q.[........G!l...................p...G................m........`....n.6...........x..n..........$..........B.........8J....h.BB.f.^@....%..}.U....Ri......O.>K..$.8:......I.:t0k..A.u..?...M.k...O......Z......N...?.....Bqbb

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 570 x 451, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	43975
Entropy (8bit):	7.974034917006744
Encrypted:	false
SSDEEP:	768:G5EFVfGw2KmpTuhqXIh5DDKCvP+P11vFEQWHC0BBeUaF6:G2Gw2NsnHU1LFlqdQ6
MD5:	0F3580285E8258553C270CD54591CD16
SHA1:	F05704B06C158B791A1F6FB16E25625C616757EF
SHA-256:	48309024AF9BE5EF8DCF8597A860F46345CD0D3D82FF93B007B4A344FBB70D8A
SHA-512:	5DE0DA5B851A5F507BBB1817BAF4FB8575AB2AFCD88711D7B9E36277360C0436DFA9AF15C421DEC649178533E7B225416F1C170BA8FC25815DEB2EFB40400CDD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...:.........-=.... .IDATx...{\.U.....##...D../...y.k..-.....2/..f.e.jf[.Mm++...M.J3Lw5o`J.\.$.A..... 3..c..0.(7.......<.y.....w...s..:.4"..B...)...B.!...E..!..B.X...!....@G.!..-..:B.!.h.T.].q.Q(.8).(...B.!.g4.1.Ao0b4....&...D.D...F.!..Ba...T0......].[.t].+.J..!.hHJ...J...I.}..[r..J.!..R.@.$....d]Wa.!h<.........T.n...M..&...(...j...B..........%(..Jz8..........e..C..8g.TP..........D.}.X8.....mOI...k.q..\|.I?._4...O`J...].z..........sk..?..F#I.B.Q.....Z.n.IY.....m.`G.u.G..:....N....b.k+....&.ID.?...o&....].zi.RV.d.2..!..c.T.Jir.B....F...z../..Cz.1...[i...[/..=f<...'Dc.Q..;..c...F.~..I..x.5....g....K@.-&.I..d...w.<. ).........z.s27...L.h...7....e..+......V[l=.....vK......x.sQ[....k.:.....G..?R.2.e.F#)i.$.f..\|5..J...xX.-..dn~......h4....Em.u_n^>'s.........G.5..NU[k...0i.hZ.j.J.2. ...!...iX....r&M.MY.J.o..G........=h.f..G....$.......M.S.F.t:..1.i...>z...@. ...$.f..ss.1v.[..Wa.!...b.BC.e..bS.`.6u.l..1.?n......h<.e.]..;.d.....1s..;.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 87a, 1920 x 1080
Category:	dropped
Size (bytes):	15785051
Entropy (8bit):	7.963108840321511
Encrypted:	false
SSDEEP:	393216:yq0BKb256+p5uMIWjs/SoigkKZ4UO5Q97vdya:sK6dpcXWjJgkKZ3V
MD5:	16848005B5C8945FD559C84DA4E093C0
SHA1:	66BBA6509C3C188F6E9B59A76877B5B0B0E49E7A
SHA-256:	D59F72D2AE4EB9CE9B0D0D81D25C034A6204AFC6785F3D7FFC6E2EC0D2E79115
SHA-512:	C8C47E62B8534833C7F550FD8C5674163A608DCCDFFE1C54645CEA0D74DC6D83209A3983FF975D3310CB600389A725CD86D69F8754C886C538DABE7F14CEE221
Malicious:	false
Reputation:	low
Preview:	GIF87a..8.w..!..NETSCAPE2.0.....!.. .!.......,......8....s..d~.2Z!1..sO.....).x.onQG..)+-...P...Gx.^.pI%I`.g..8....0J]j....u3_\X....H....Iz.\|..[......WC.....m..>?APE90^.o.%2E...u....$%(..gtv.W0.......x.bo....kN..t..a.2.V....664.."qn#+^.zg...Fq."......>3....d2...7.......v......<u..q.......f....^lz0/+bJ;......Q#...........[}!..cBBPPeQOQ!0.s^Osrk....../P.B;,.k%....'....>HZ-o._f!......\|....]w..............WE.hlr...A2,.......L.?N4..(n....m%........s ...5<9......l4....ka..../J..y]av%0H.Urif2..r.]...G..05L.UD....$.....otKzb..4...4$(.............$<K.'.......... S.....+.............. Xq....\|...............&.#1..........2404?."$........~...........$=.................4"&L.........&3..?.....@......`..^.h.(Z.@"......"4224..............4..4264..............4...........4.",..................H......\....#J.H....3j.... C..I...(S.\...0c.I...8s....G[.la....G."5.t.S.P.Jm....W.b..u.W.`.......g.5.v.[.p..m....w...w._....

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1426 x 1501, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	195889
Entropy (8bit):	7.922510653550072
Encrypted:	false
SSDEEP:	3072:DuSMqoC+mdp3zJcB5UFP/VMIvB7QzvkknG7/NaSunWnuS8ckJsuIeIJ+IGVJbXDh:11r+2p3zJcBOF9b7e9nGrNaa8Pa3VIIG
MD5:	89182B9D52C5F5BE5542C6C06B486F12
SHA1:	3781C821803F29381382A773737157987A91261D
SHA-256:	295F2067E0A095E19603070CDD3DD92AD4B9D924F12BE5E5A18C5CEC3208F76F
SHA-512:	1C3835227922EC54437BFF2711FDDC4304D4314683811249C3B956764416944CAAA9A5A2960481A9CDFC4541EAAF885B615C06EF8520B77F3648A6CEB3E88C6F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x?... .IDATx...y\.....YX..ADT@9=@..<..o..[Y..ZYV.e.Yi...e.....Ge.W^y.'.."..}..\.....o...,...z>.C>..\|...=.....3fLHH.p7.N'jQ.T......@.2. ....g.CBB>..X......dKw.\_..t....~.t.....-.t.`I...t.....X...P...,.......31J"D....+................@.....,.........V..-......"........(...>{..7-........1+.Vk.>........t...............(..D......B1I......(.a.......PVL.........h.......P.-......BQ.......(..-......B.........E.......(.a.......P.-......BY...Y........2.m...............P(.......@..[......."l...............P(.F..Y........2..7nl.>.......R.T..........r[......."l...............P(.......@..[......."l............}.......a...o.>.......*...t.......d........(.a.......P.-......B.........E.......(............DV.............+;;;K.......@..J..t.......d........(........a..M.&j...wF>\|.E...1.V.~....N.9.t3Y.._..~}.yf...Z.w...,[.......[...d.....K!l...I.1....",..qcl\BaQ.#.$lQ..t...[1.q-Z..poimmm.....0......)))nnnO>....s-m(%%e.....=..#nnn....a....s....>z&,<6....T..

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2717)
Category:	downloaded
Size (bytes):	35946
Entropy (8bit):	5.471620889692367
Encrypted:	false
SSDEEP:	768:6DyNw5wDn4toiuumfztiabrBOWi5uf/J8P2Bcn+irSPMRpk+b/902GwD3DJgiOYA:e3Vuum7tiGrBOWguXTc+irY3Q/902Gwe
MD5:	05345F56355FA8421E88B29947743EF5
SHA1:	C2652FD719B401718457C94BC3292D3204699D00
SHA-256:	A2BDD8CB01353D4ED2A9AB4C7D7C263225F6908AA875614D015A2F39956D9D73
SHA-512:	DB343C949AFF72FA05C45F914A02F874770367153574CB70DC6ECA426D3C7EFBACABD93670C97F715EE71C0037973E6CB6F4A6E9DC61DC91D77F0735C1059D68
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js
Preview:	// Copyright Google Inc. All Rights Reserved..(function() { /.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var h=this\|\|self,aa=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"},ba=function(a){var b=aa(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length},ca=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},da=function(a,b,c){return a.call.apply(a.bind,arguments)},ea=function(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);.Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}},k=function(a,b,c){k=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?da:ea;return k.apply(null,arguments)},l=function(a,b){a=a.split(".");var c=h;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 832 x 558, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	109440
Entropy (8bit):	7.975124878699861
Encrypted:	false
SSDEEP:	3072:ng21ypY53Yd9bck9te4BFpbfy+Ad5A3Y7gFmow7s:vxYd9te4B3bfqMsgFm/7s
MD5:	F6525E3F53F6104BDC142E965B80685E
SHA1:	C3CA29AD5BF69FFF14BABB02A53F07AEE393BE38
SHA-256:	3E68ABD3FB286AAEA92C282A8562EE63A619F5165F5AEFE9DC7070D147A8D4D0
SHA-512:	22185D4A07315F814B45D2413ECBF227A8CA09060FB35E4EC8F95EC3097D32CEBA27BFA7890FA2C194020B4C63E2FCF1A088B5A57F5D49DCDBD3F54AF6982BFD
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/file/uploads/v0hexpKvpDIxjFNhDDxvCPN0bTnm1dRymLABWGmTde4/lwAMUetVmOsIH-MN8YpTJyN1rKbB0x235mpvQ-XnpPQ/1701390163886-WiM.png
Preview:	.PNG........IHDR...@...........h... .IDATx..._.I..}./..u.g..3{.....qv...q.c.b..*(9..."..b.L.(9..@w.9'..... .Zq.<.....4.WW]....T]u..r.^".......`@0 ...........\`...J.:..,...........`@0 ...H...$v....`@0 ...........``.0 ...}...V}..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 .....$...@....`@0 .........9..@..9..X..+>....`@0 .......B...$..`@0 ...........``.0 ...}...V\|..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 .....$...@....`@0 .........9..@..9..X..+>....`@0 .......B...$..`@0 ...........``.0 ...}...V\|..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 .....$...@....`@0 .........9..@..9..X..+>....`@0 .......B...$..`@0 ...........``.0 ...}...V\|..`@0 ............@B...$...........`@0 ..3...$`.3......#...........`@0 ...@B.........`@0 ........B......b.G..........`@0 ..

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12442
Entropy (8bit):	7.935729351082169
Encrypted:	false
SSDEEP:	192:h2NENpbMAEoq8XEWV5kJwWWjD9nbcj3cSD33mOykIVvcCoUiayfI1m92zzRMWJ:h2wbdVUk6lWf9o3Z7mOy1v7hiPxgRX
MD5:	67745534EE99C0749B0232F14D41065A
SHA1:	469C227F5EF282E8F90C47C950CCF1995F59B6E8
SHA-256:	327B1C8A8315FD8A0F3EEFBC87B1D27406BE8F5FDC7FC8EDDD6C412AEFE1D899
SHA-512:	8106F04998EA9F899AD4878D744576A1F4CB7D6CB95C9F5526940E631AC2D991E7782AF652C7543E7EB8EE289EEE35590BCE99CFBFBA33E1FA036FE26FE1BEA2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...,.....y}.u....tEXtSoftware.Adobe ImageReadyq.e<..0<IDATx..}...e.n...=.gG...3.A....H..W...0...-ifpDp:.3..0. 87..a.U..3r.......v.8.,..xe.N....vX...Ht.{..x..........$U.<.....z..{..{...$........................................04.P._.....8...c.Oz........K........3zd.s...y....Sn8..D....6,...@X..1y.?>:..:R..O...?...N....!.....-Sn....[..kk.!..3......1".... ,('............~...k..T.=..M..ji.55.kk.\..y......AX...T..tu.o....Cz...RMV.T..1F\r.KA....g...x.....;~.....t..O..\|D`....iSo...p{..j.#...<.....:..v..={.N#)-...K3..[0o6..F(/..P.D.:..Ac{.>...].!)-.....do.....YX.......1.j...?x:...(....ri.s.... 9f..6.N..........:_.myz......^zpq(S3~,..I.........g.F.l......[..U.h.q.Fr.[@\ ,.".Z...?.#T.QQ..c...r..H:..\/.........=TnEE..I......\|.e..j.id...J.-.!.R.J..f.O~..AFd'>:Yv......J#*..QFR.5.........k..^.MMz..'....c..?... F^......}.=_>...m@i......j.lAp....u....o../..c..e/.A']wuf.u.9I9U...."Z...N..+Y=..z.Bi...4.... ....1}..>...m.[.!..O.%.:c~YK.f..d..=..J.......

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1980), with no line terminators
Category:	downloaded
Size (bytes):	1980
Entropy (8bit):	4.708092622826162
Encrypted:	false
SSDEEP:	48:uArP9+DpqxoOqBpMcEpauPMcQKeIjODIGo:uArPAqxoOq1+PMfKeIjOC
MD5:	607D620E77C71B39B5F6FCF8E8C34F12
SHA1:	DBB2B05E56B3C292D5B641EBC53C93F38302D443
SHA-256:	1E7A1766D510624721061D906FE7C65ACFC37206C7FDD3BCB64A7B6DB1307F27
SHA-512:	F7259DF55C29DF9ED94C0BA95548EBC7746C6262C581CD14FC5653C62101B6B9E1FC45D1BC50A8DFA38E0FB1355EF7A7621751E71951313F34E89777F2BDABFF
Malicious:	false
Reputation:	low
URL:	https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/localisation/en/lang.js
Preview:	(function() { window.localisationData = {'internal': {'restricted': 'For internal use, with restrictions', 'unrestricted': 'For internal use'}, 'external': {'restricted': 'For public use, with restrictions', 'unrestricted': 'For public use'}, 'sdk': {'feedback_helpful': 'Was this helpful?', 'general': {'something_went_wrong': 'Sorry, something went wrong'}, 'thankyou': 'Thank you', 'modules': {'support': {'email': 'Email'}}, 'feedback_type': 'Type your feedback here', 'submit': 'Submit', 'feedback_improve': 'How can it be improved?', 'submit_anon': 'Are you sure you want to send this anonymously?', 'skip': 'Skip', 'kb': {'login': 'Login', 'requires_login': 'This content requires login', 'click_to_login': 'Click here to login', 'content_unavailable': 'The content may no longer be available, or you may have mistyped the URL', 'unavailable_suggestion': 'Try searching above, or visit the home page'}, 'more': 'More', 'trigger_search': 'Hit enter to search for:', 'sorry': 'Sorry', 'no_result

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 17:09:58.269113064 CET	192.168.2.6	1.1.1.1	0x2bfa	Standard query (0)	knowledgebase.campaignagent.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:09:58.269289017 CET	192.168.2.6	1.1.1.1	0x45e7	Standard query (0)	knowledgebase.campaignagent.com.au	65	IN (0x0001)	false
Oct 30, 2024 17:10:00.485579967 CET	192.168.2.6	1.1.1.1	0x97bd	Standard query (0)	cdn.elev.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:00.486270905 CET	192.168.2.6	1.1.1.1	0x5f9c	Standard query (0)	cdn.elev.io	65	IN (0x0001)	false
Oct 30, 2024 17:10:01.731890917 CET	192.168.2.6	1.1.1.1	0x8b77	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:01.732028008 CET	192.168.2.6	1.1.1.1	0x2c44	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 17:10:04.039124966 CET	192.168.2.6	1.1.1.1	0xbb42	Standard query (0)	cdn.elev.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.039561033 CET	192.168.2.6	1.1.1.1	0x5123	Standard query (0)	cdn.elev.io	65	IN (0x0001)	false
Oct 30, 2024 17:10:04.383577108 CET	192.168.2.6	1.1.1.1	0x204e	Standard query (0)	cdn.campaignagent.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.385210991 CET	192.168.2.6	1.1.1.1	0xa616	Standard query (0)	cdn.campaignagent.com.au	65	IN (0x0001)	false
Oct 30, 2024 17:10:04.459104061 CET	192.168.2.6	1.1.1.1	0x1671	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.460066080 CET	192.168.2.6	1.1.1.1	0xf7e	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 30, 2024 17:10:04.521557093 CET	192.168.2.6	1.1.1.1	0x1dcb	Standard query (0)	events.elev.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.521557093 CET	192.168.2.6	1.1.1.1	0x4593	Standard query (0)	events.elev.io	65	IN (0x0001)	false
Oct 30, 2024 17:10:05.248310089 CET	192.168.2.6	1.1.1.1	0x3764	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:05.248466015 CET	192.168.2.6	1.1.1.1	0xbc27	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 30, 2024 17:10:08.033735991 CET	192.168.2.6	1.1.1.1	0x974f	Standard query (0)	ipa.elev.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:08.035043955 CET	192.168.2.6	1.1.1.1	0x60b4	Standard query (0)	ipa.elev.io	65	IN (0x0001)	false
Oct 30, 2024 17:10:09.196779013 CET	192.168.2.6	1.1.1.1	0x9d6a	Standard query (0)	events.elev.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:09.196930885 CET	192.168.2.6	1.1.1.1	0xb7c4	Standard query (0)	events.elev.io	65	IN (0x0001)	false
Oct 30, 2024 17:10:12.872064114 CET	192.168.2.6	1.1.1.1	0xb575	Standard query (0)	ipa.elev.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:12.872416973 CET	192.168.2.6	1.1.1.1	0xb9b8	Standard query (0)	ipa.elev.io	65	IN (0x0001)	false
Oct 30, 2024 17:10:14.706296921 CET	192.168.2.6	1.1.1.1	0x40f8	Standard query (0)	cdn.campaignagent.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:14.706720114 CET	192.168.2.6	1.1.1.1	0x14df	Standard query (0)	cdn.campaignagent.com.au	65	IN (0x0001)	false
Oct 30, 2024 17:10:30.378971100 CET	192.168.2.6	1.1.1.1	0xd627	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:30.379453897 CET	192.168.2.6	1.1.1.1	0xee91	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Oct 30, 2024 17:10:31.546560049 CET	192.168.2.6	1.1.1.1	0x2cd5	Standard query (0)	fresnel.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:31.546941042 CET	192.168.2.6	1.1.1.1	0x1f58	Standard query (0)	fresnel.vimeocdn.com	65	IN (0x0001)	false
Oct 30, 2024 17:10:31.548866034 CET	192.168.2.6	1.1.1.1	0xcf61	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:31.549191952 CET	192.168.2.6	1.1.1.1	0xda3d	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Oct 30, 2024 17:10:31.549877882 CET	192.168.2.6	1.1.1.1	0x988b	Standard query (0)	f.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:31.550395012 CET	192.168.2.6	1.1.1.1	0x3fa6	Standard query (0)	f.vimeocdn.com	65	IN (0x0001)	false
Oct 30, 2024 17:10:34.862220049 CET	192.168.2.6	1.1.1.1	0x6b4	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:34.862647057 CET	192.168.2.6	1.1.1.1	0x1cdf	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Oct 30, 2024 17:10:34.941689968 CET	192.168.2.6	1.1.1.1	0xf285	Standard query (0)	f.vimeocdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:34.942260981 CET	192.168.2.6	1.1.1.1	0x7b95	Standard query (0)	f.vimeocdn.com	65	IN (0x0001)	false
Oct 30, 2024 17:10:36.515337944 CET	192.168.2.6	1.1.1.1	0xa413	Standard query (0)	player-telemetry.vimeo.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:36.515574932 CET	192.168.2.6	1.1.1.1	0x2dfe	Standard query (0)	player-telemetry.vimeo.com	65	IN (0x0001)	false
Oct 30, 2024 17:10:36.761578083 CET	192.168.2.6	1.1.1.1	0x7189	Standard query (0)	vimeo.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:36.761775017 CET	192.168.2.6	1.1.1.1	0xaef7	Standard query (0)	vimeo.com	65	IN (0x0001)	false
Oct 30, 2024 17:11:05.707344055 CET	192.168.2.6	1.1.1.1	0x1223	Standard query (0)	knowledgebase.campaignagent.com.au	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:05.707515001 CET	192.168.2.6	1.1.1.1	0xe5a	Standard query (0)	knowledgebase.campaignagent.com.au	65	IN (0x0001)	false
Oct 30, 2024 17:11:05.718564987 CET	192.168.2.6	1.1.1.1	0x7286	Standard query (0)	cdn.elev.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:05.718787909 CET	192.168.2.6	1.1.1.1	0xd3f6	Standard query (0)	cdn.elev.io	65	IN (0x0001)	false
Oct 30, 2024 17:11:06.257956028 CET	192.168.2.6	1.1.1.1	0x1907	Standard query (0)	events.elev.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:06.258147955 CET	192.168.2.6	1.1.1.1	0xff10	Standard query (0)	events.elev.io	65	IN (0x0001)	false
Oct 30, 2024 17:11:07.153938055 CET	192.168.2.6	1.1.1.1	0x87e8	Standard query (0)	cdn.elev.io	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:07.154103994 CET	192.168.2.6	1.1.1.1	0x2724	Standard query (0)	cdn.elev.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 17:09:58.304621935 CET	1.1.1.1	192.168.2.6	0x2bfa	No error (0)	knowledgebase.campaignagent.com.au	campaignagent.elevio.help		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:09:58.304621935 CET	1.1.1.1	192.168.2.6	0x2bfa	No error (0)	campaignagent.elevio.help		54.157.241.171	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:09:58.304621935 CET	1.1.1.1	192.168.2.6	0x2bfa	No error (0)	campaignagent.elevio.help		34.224.144.42	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:09:58.447308064 CET	1.1.1.1	192.168.2.6	0x45e7	No error (0)	knowledgebase.campaignagent.com.au	campaignagent.elevio.help		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:00.494791985 CET	1.1.1.1	192.168.2.6	0x97bd	No error (0)	cdn.elev.io	dy8wyl92rt4zl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:00.494791985 CET	1.1.1.1	192.168.2.6	0x97bd	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.64	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:00.494791985 CET	1.1.1.1	192.168.2.6	0x97bd	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.79	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:00.494791985 CET	1.1.1.1	192.168.2.6	0x97bd	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.115	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:00.494791985 CET	1.1.1.1	192.168.2.6	0x97bd	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:00.494822979 CET	1.1.1.1	192.168.2.6	0x5f9c	No error (0)	cdn.elev.io	dy8wyl92rt4zl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:01.739471912 CET	1.1.1.1	192.168.2.6	0x2c44	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 17:10:01.739975929 CET	1.1.1.1	192.168.2.6	0x8b77	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.047637939 CET	1.1.1.1	192.168.2.6	0x5123	No error (0)	cdn.elev.io	dy8wyl92rt4zl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:04.058871984 CET	1.1.1.1	192.168.2.6	0xbb42	No error (0)	cdn.elev.io	dy8wyl92rt4zl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:04.058871984 CET	1.1.1.1	192.168.2.6	0xbb42	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.115	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.058871984 CET	1.1.1.1	192.168.2.6	0xbb42	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.64	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.058871984 CET	1.1.1.1	192.168.2.6	0xbb42	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.79	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.058871984 CET	1.1.1.1	192.168.2.6	0xbb42	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.414036989 CET	1.1.1.1	192.168.2.6	0x204e	No error (0)	cdn.campaignagent.com.au	d21e3rlvpsyo06.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:04.414036989 CET	1.1.1.1	192.168.2.6	0x204e	No error (0)	d21e3rlvpsyo06.cloudfront.net		18.172.112.126	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.414036989 CET	1.1.1.1	192.168.2.6	0x204e	No error (0)	d21e3rlvpsyo06.cloudfront.net		18.172.112.80	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.414036989 CET	1.1.1.1	192.168.2.6	0x204e	No error (0)	d21e3rlvpsyo06.cloudfront.net		18.172.112.53	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.414036989 CET	1.1.1.1	192.168.2.6	0x204e	No error (0)	d21e3rlvpsyo06.cloudfront.net		18.172.112.40	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.467175961 CET	1.1.1.1	192.168.2.6	0x1671	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.467175961 CET	1.1.1.1	192.168.2.6	0x1671	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.467679024 CET	1.1.1.1	192.168.2.6	0xf7e	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 30, 2024 17:10:04.530179024 CET	1.1.1.1	192.168.2.6	0x1dcb	No error (0)	events.elev.io		18.66.102.98	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.530179024 CET	1.1.1.1	192.168.2.6	0x1dcb	No error (0)	events.elev.io		18.66.102.106	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.530179024 CET	1.1.1.1	192.168.2.6	0x1dcb	No error (0)	events.elev.io		18.66.102.117	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.530179024 CET	1.1.1.1	192.168.2.6	0x1dcb	No error (0)	events.elev.io		18.66.102.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:04.555917978 CET	1.1.1.1	192.168.2.6	0xa616	No error (0)	cdn.campaignagent.com.au	d21e3rlvpsyo06.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:05.255644083 CET	1.1.1.1	192.168.2.6	0x3764	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:05.255644083 CET	1.1.1.1	192.168.2.6	0x3764	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:05.256242037 CET	1.1.1.1	192.168.2.6	0xbc27	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 30, 2024 17:10:08.399569988 CET	1.1.1.1	192.168.2.6	0x974f	No error (0)	ipa.elev.io	ipa-alb-20180423-772954875.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:08.399569988 CET	1.1.1.1	192.168.2.6	0x974f	No error (0)	ipa-alb-20180423-772954875.us-east-1.elb.amazonaws.com		23.20.125.226	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:08.399569988 CET	1.1.1.1	192.168.2.6	0x974f	No error (0)	ipa-alb-20180423-772954875.us-east-1.elb.amazonaws.com		54.152.108.239	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:08.405061960 CET	1.1.1.1	192.168.2.6	0x60b4	No error (0)	ipa.elev.io	ipa-alb-20180423-772954875.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:08.827790022 CET	1.1.1.1	192.168.2.6	0x8300	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:08.827790022 CET	1.1.1.1	192.168.2.6	0x8300	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:10.036195993 CET	1.1.1.1	192.168.2.6	0x9d6a	No error (0)	events.elev.io		18.238.243.57	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:10.036195993 CET	1.1.1.1	192.168.2.6	0x9d6a	No error (0)	events.elev.io		18.238.243.129	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:10.036195993 CET	1.1.1.1	192.168.2.6	0x9d6a	No error (0)	events.elev.io		18.238.243.18	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:10.036195993 CET	1.1.1.1	192.168.2.6	0x9d6a	No error (0)	events.elev.io		18.238.243.36	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:13.256607056 CET	1.1.1.1	192.168.2.6	0xb575	No error (0)	ipa.elev.io	ipa-alb-20180423-772954875.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:13.256607056 CET	1.1.1.1	192.168.2.6	0xb575	No error (0)	ipa-alb-20180423-772954875.us-east-1.elb.amazonaws.com		54.152.108.239	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:13.256607056 CET	1.1.1.1	192.168.2.6	0xb575	No error (0)	ipa-alb-20180423-772954875.us-east-1.elb.amazonaws.com		23.20.125.226	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:13.264553070 CET	1.1.1.1	192.168.2.6	0xb9b8	No error (0)	ipa.elev.io	ipa-alb-20180423-772954875.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:14.882046938 CET	1.1.1.1	192.168.2.6	0x14df	No error (0)	cdn.campaignagent.com.au	d21e3rlvpsyo06.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:14.977709055 CET	1.1.1.1	192.168.2.6	0x40f8	No error (0)	cdn.campaignagent.com.au	d21e3rlvpsyo06.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:14.977709055 CET	1.1.1.1	192.168.2.6	0x40f8	No error (0)	d21e3rlvpsyo06.cloudfront.net		18.172.112.53	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:14.977709055 CET	1.1.1.1	192.168.2.6	0x40f8	No error (0)	d21e3rlvpsyo06.cloudfront.net		18.172.112.126	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:14.977709055 CET	1.1.1.1	192.168.2.6	0x40f8	No error (0)	d21e3rlvpsyo06.cloudfront.net		18.172.112.40	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:14.977709055 CET	1.1.1.1	192.168.2.6	0x40f8	No error (0)	d21e3rlvpsyo06.cloudfront.net		18.172.112.80	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:30.388062000 CET	1.1.1.1	192.168.2.6	0xd627	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:30.389303923 CET	1.1.1.1	192.168.2.6	0xee91	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:31.555064917 CET	1.1.1.1	192.168.2.6	0x2cd5	No error (0)	fresnel.vimeocdn.com		34.120.202.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:31.557089090 CET	1.1.1.1	192.168.2.6	0xda3d	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:31.557751894 CET	1.1.1.1	192.168.2.6	0xcf61	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:31.557751894 CET	1.1.1.1	192.168.2.6	0xcf61	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:31.557751894 CET	1.1.1.1	192.168.2.6	0xcf61	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:31.557751894 CET	1.1.1.1	192.168.2.6	0xcf61	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:31.557751894 CET	1.1.1.1	192.168.2.6	0xcf61	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:31.558234930 CET	1.1.1.1	192.168.2.6	0x988b	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:31.558234930 CET	1.1.1.1	192.168.2.6	0x988b	No error (0)	vimeo-video.map.fastly.net		151.101.66.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:31.558234930 CET	1.1.1.1	192.168.2.6	0x988b	No error (0)	vimeo-video.map.fastly.net		151.101.194.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:31.558234930 CET	1.1.1.1	192.168.2.6	0x988b	No error (0)	vimeo-video.map.fastly.net		151.101.130.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:31.558234930 CET	1.1.1.1	192.168.2.6	0x988b	No error (0)	vimeo-video.map.fastly.net		151.101.2.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:31.558743000 CET	1.1.1.1	192.168.2.6	0x3fa6	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:34.871023893 CET	1.1.1.1	192.168.2.6	0x6b4	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:34.871023893 CET	1.1.1.1	192.168.2.6	0x6b4	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:34.871023893 CET	1.1.1.1	192.168.2.6	0x6b4	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:34.871023893 CET	1.1.1.1	192.168.2.6	0x6b4	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:34.871023893 CET	1.1.1.1	192.168.2.6	0x6b4	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:34.871206045 CET	1.1.1.1	192.168.2.6	0x1cdf	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:34.950083971 CET	1.1.1.1	192.168.2.6	0xf285	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:34.950083971 CET	1.1.1.1	192.168.2.6	0xf285	No error (0)	vimeo-video.map.fastly.net		151.101.130.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:34.950083971 CET	1.1.1.1	192.168.2.6	0xf285	No error (0)	vimeo-video.map.fastly.net		151.101.66.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:34.950083971 CET	1.1.1.1	192.168.2.6	0xf285	No error (0)	vimeo-video.map.fastly.net		151.101.2.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:34.950083971 CET	1.1.1.1	192.168.2.6	0xf285	No error (0)	vimeo-video.map.fastly.net		151.101.194.109	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:34.952132940 CET	1.1.1.1	192.168.2.6	0x7b95	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:10:36.524229050 CET	1.1.1.1	192.168.2.6	0xa413	No error (0)	player-telemetry.vimeo.com		34.120.202.204	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:36.769750118 CET	1.1.1.1	192.168.2.6	0x7189	No error (0)	vimeo.com		162.159.138.60	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:10:36.769750118 CET	1.1.1.1	192.168.2.6	0x7189	No error (0)	vimeo.com		162.159.128.61	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:05.726507902 CET	1.1.1.1	192.168.2.6	0x7286	No error (0)	cdn.elev.io	dy8wyl92rt4zl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:11:05.726507902 CET	1.1.1.1	192.168.2.6	0x7286	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.79	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:05.726507902 CET	1.1.1.1	192.168.2.6	0x7286	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:05.726507902 CET	1.1.1.1	192.168.2.6	0x7286	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.115	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:05.726507902 CET	1.1.1.1	192.168.2.6	0x7286	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.64	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:05.738163948 CET	1.1.1.1	192.168.2.6	0xd3f6	No error (0)	cdn.elev.io	dy8wyl92rt4zl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:11:05.740547895 CET	1.1.1.1	192.168.2.6	0xe5a	No error (0)	knowledgebase.campaignagent.com.au	campaignagent.elevio.help		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:11:06.007400990 CET	1.1.1.1	192.168.2.6	0x1223	No error (0)	knowledgebase.campaignagent.com.au	campaignagent.elevio.help		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:11:06.007400990 CET	1.1.1.1	192.168.2.6	0x1223	No error (0)	campaignagent.elevio.help		54.157.241.171	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:06.007400990 CET	1.1.1.1	192.168.2.6	0x1223	No error (0)	campaignagent.elevio.help		34.224.144.42	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:06.269303083 CET	1.1.1.1	192.168.2.6	0x1907	No error (0)	events.elev.io		18.66.102.98	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:06.269303083 CET	1.1.1.1	192.168.2.6	0x1907	No error (0)	events.elev.io		18.66.102.117	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:06.269303083 CET	1.1.1.1	192.168.2.6	0x1907	No error (0)	events.elev.io		18.66.102.106	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:06.269303083 CET	1.1.1.1	192.168.2.6	0x1907	No error (0)	events.elev.io		18.66.102.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:07.164884090 CET	1.1.1.1	192.168.2.6	0x2724	No error (0)	cdn.elev.io	dy8wyl92rt4zl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:11:07.166898012 CET	1.1.1.1	192.168.2.6	0x87e8	No error (0)	cdn.elev.io	dy8wyl92rt4zl.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:11:07.166898012 CET	1.1.1.1	192.168.2.6	0x87e8	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.79	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:07.166898012 CET	1.1.1.1	192.168.2.6	0x87e8	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:07.166898012 CET	1.1.1.1	192.168.2.6	0x87e8	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.64	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:11:07.166898012 CET	1.1.1.1	192.168.2.6	0x87e8	No error (0)	dy8wyl92rt4zl.cloudfront.net		18.66.112.115	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49709	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:09:54 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 67 50 41 2f 4e 73 44 75 55 30 71 6d 42 74 52 31 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 32 66 35 38 32 38 31 32 33 62 66 66 39 62 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: gPA/NsDuU0qmBtR1.1Context: 52f5828123bff9ba
2024-10-30 16:09:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-30 16:09:54 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 67 50 41 2f 4e 73 44 75 55 30 71 6d 42 74 52 31 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 32 66 35 38 32 38 31 32 33 62 66 66 39 62 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 75 70 70 69 5a 57 4c 6c 76 62 5a 71 4f 45 54 4a 36 57 74 66 62 4d 41 58 54 7a 32 4e 65 44 44 37 66 7a 47 4a 33 47 37 54 65 4b 4a 6c 68 70 46 50 34 5a 79 63 67 33 45 65 50 72 36 76 59 64 39 62 4a 32 4f 4e 38 43 59 5a 57 71 62 43 35 69 64 56 32 4c 71 7a 53 43 4c 6e 66 71 34 74 74 32 46 2f 44 68 34 4b 67 68 48 42 39 78 74 30 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: gPA/NsDuU0qmBtR1.2Context: 52f5828123bff9ba<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVuppiZWLlvbZqOETJ6WtfbMAXTz2NeDD7fzGJ3G7TeKJlhpFP4Zycg3EePr6vYd9bJ2ON8CYZWqbC5idV2LqzSCLnfq4tt2F/Dh4KghHB9xt0
2024-10-30 16:09:54 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 67 50 41 2f 4e 73 44 75 55 30 71 6d 42 74 52 31 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 32 66 35 38 32 38 31 32 33 62 66 66 39 62 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: gPA/NsDuU0qmBtR1.3Context: 52f5828123bff9ba<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-30 16:09:55 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-30 16:09:55 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 54 78 70 4f 55 48 7a 4d 4a 55 65 4e 75 7a 51 52 46 35 38 7a 6e 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: TxpOUHzMJUeNuzQRF58znw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:09:58 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:09:58 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:09:58 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: acfedf75-801e-002a-2768-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T160958Z-17c5cb586f66g7mvgrudxte954000000036g00000000ghp4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:09:58 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-30 16:09:58 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-30 16:09:58 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-30 16:09:59 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-30 16:09:59 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-30 16:09:59 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-30 16:09:59 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-30 16:09:59 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-30 16:09:59 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-30 16:09:59 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49717	54.157.241.171	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:09:59 UTC	692	OUT	GET /en/articles/481 HTTP/1.1 Host: knowledgebase.campaignagent.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:00 UTC	275	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 30 Oct 2024 16:09:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 72252 Connection: close ETag: W/"11a3c-arHNfVKXNngQA5DufyQkyBIlLhM" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-10-30 16:10:00 UTC	16109	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 6e 64 65 72 73 74 61 6e 64 69 6e 67 20 50 61 79 20 4e 6f 77 20 43 61 6d 70 61 69 67 6e 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 65 6c 65 76 69 6f 2d 6b 62 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d Data Ascii: <!DOCTYPE html><html lang="en"> <head prefix="og: http://ogp.me/ns#"> <title>Understanding Pay Now Campaigns</title> <style> body { margin: 0; } .elevio-kb-wrapper { -webkit-box-align: center; -ms-flex-
2024-10-30 16:10:00 UTC	16384	IN	Data Raw: 5c 5c 22 66 72 2d 66 69 63 20 66 72 2d 64 69 62 20 66 72 2d 72 6f 75 6e 64 65 64 20 66 72 2d 62 6f 72 64 65 72 65 64 5c 5c 22 20 73 74 79 6c 65 3d 5c 5c 22 77 69 64 74 68 3a 20 32 36 33 70 78 3b 5c 5c 22 5c 5c 75 30 30 33 45 5c 5c 75 30 30 33 43 5c 5c 75 30 30 32 46 70 5c 5c 75 30 30 33 45 5c 5c 75 30 30 33 43 70 5c 5c 75 30 30 33 45 5c 5c 75 30 30 33 43 73 74 72 6f 6e 67 5c 5c 75 30 30 33 45 54 69 6d 65 66 72 61 6d 65 3a 5c 5c 75 30 30 33 43 5c 5c 75 30 30 32 46 73 74 72 6f 6e 67 5c 5c 75 30 30 33 45 20 50 61 79 6d 65 6e 74 73 20 61 72 65 20 72 65 63 65 69 76 65 64 20 62 79 20 43 61 6d 70 61 69 67 6e 41 67 65 6e 74 20 69 6d 6d 65 64 69 61 74 65 6c 79 2e 20 46 75 6e 64 69 6e 67 20 74 6f 20 79 6f 75 72 20 41 67 65 6e 63 79 20 69 73 20 70 72 6f 63 65 73 73 Data Ascii: \\"fr-fic fr-dib fr-rounded fr-bordered\\" style=\\"width: 263px;\\"\\u003E\\u003C\\u002Fp\\u003E\\u003Cp\\u003E\\u003Cstrong\\u003ETimeframe:\\u003C\\u002Fstrong\\u003E Payments are received by CampaignAgent immediately. Funding to your Agency is process
2024-10-30 16:10:00 UTC	16384	IN	Data Raw: 20 79 6f 75 72 20 74 65 61 6d 20 6e 65 65 64 73 20 74 6f 20 61 63 74 69 6f 6e 20 74 68 65 6d 20 65 66 66 69 63 69 65 6e 74 6c 79 20 61 6e 64 20 74 6f 20 63 6f 6e 66 69 64 65 6e 74 6c 79 20 70 72 6f 76 69 64 65 20 61 64 76 69 63 65 20 74 6f 20 79 6f 75 72 20 56 65 6e 64 6f 72 73 20 72 65 67 61 72 64 69 6e 67 20 74 68 65 69 72 20 70 61 79 6d 65 6e 74 73 2e 50 61 79 20 4e 6f 77 20 69 73 20 64 69 66 66 65 72 65 6e 74 20 74 6f 20 50 61 79 20 4c 61 74 65 72 20 69 6e 20 74 68 61 74 20 74 68 65 72 65 20 69 73 20 6e 6f 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 66 6f 72 20 43 61 6d 70 61 69 67 6e 41 67 65 6e 74 5c 27 73 20 52 65 76 69 65 77 20 54 65 61 6d 20 74 6f 20 70 72 6f 63 65 73 73 20 69 66 20 61 20 56 65 6e 64 6f 72 20 68 61 73 20 63 68 6f 73 65 6e 20 50 61 79 Data Ascii: your team needs to action them efficiently and to confidently provide advice to your Vendors regarding their payments.Pay Now is different to Pay Later in that there is no application for CampaignAgent\'s Review Team to process if a Vendor has chosen Pay
2024-10-30 16:10:00 UTC	16384	IN	Data Raw: 3a 22 37 32 2d 74 68 65 2d 76 65 6e 64 6f 72 2d 73 2d 65 73 74 61 74 65 2d 69 73 2d 72 65 70 72 65 73 65 6e 74 65 64 2d 62 79 2d 61 6e 2d 65 78 65 63 75 74 6f 72 2d 6f 66 2d 65 73 74 61 74 65 22 2c 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 6c 61 73 74 50 75 62 6c 69 73 68 65 64 41 74 22 3a 31 37 31 30 39 39 39 39 35 32 30 30 30 2c 22 61 63 63 65 73 73 43 6f 6e 74 72 6f 6c 22 3a 7b 22 61 63 63 65 73 73 22 3a 22 50 55 42 4c 49 43 22 2c 22 69 73 49 6e 74 65 72 6e 61 6c 22 3a 66 61 6c 73 65 7d 7d 2c 7b 22 69 64 22 3a 22 33 32 36 22 2c 22 74 69 74 6c 65 22 3a 22 48 6f 77 20 74 6f 20 52 65 71 75 65 73 74 20 46 75 6e 64 69 6e 67 20 69 66 20 79 6f 75 72 20 56 65 6e 64 6f 72 20 69 73 20 61 20 43 6f 6d 70 61 6e 79 20 6f 72 20 53 75 70 65 72 20 46 75 6e 64 20 Data Ascii: :"72-the-vendor-s-estate-is-represented-by-an-executor-of-estate","summary":null,"lastPublishedAt":1710999952000,"accessControl":{"access":"PUBLIC","isInternal":false}},{"id":"326","title":"How to Request Funding if your Vendor is a Company or Super Fund
2024-10-30 16:10:00 UTC	6991	IN	Data Raw: 6c 65 22 3a 22 48 6f 77 20 74 6f 20 53 65 74 75 70 20 79 6f 75 72 20 52 65 61 6c 48 75 62 20 49 6e 74 65 67 72 61 74 69 6f 6e 22 2c 22 73 6c 75 67 22 3a 22 33 30 30 2d 68 6f 77 2d 74 6f 2d 73 65 74 75 70 2d 79 6f 75 72 2d 72 65 61 6c 68 75 62 2d 69 6e 74 65 67 72 61 74 69 6f 6e 22 2c 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 6c 61 73 74 50 75 62 6c 69 73 68 65 64 41 74 22 3a 31 37 30 30 34 35 35 32 31 37 30 30 30 2c 22 61 63 63 65 73 73 43 6f 6e 74 72 6f 6c 22 3a 7b 22 61 63 63 65 73 73 22 3a 22 50 55 42 4c 49 43 22 2c 22 69 73 49 6e 74 65 72 6e 61 6c 22 3a 66 61 6c 73 65 7d 7d 2c 7b 22 69 64 22 3a 22 34 30 35 22 2c 22 74 69 74 6c 65 22 3a 22 48 6f 77 20 74 6f 20 43 72 65 61 74 65 20 61 20 46 75 6e 64 69 6e 67 20 52 65 71 75 65 73 74 20 75 73 69 6e Data Ascii: le":"How to Setup your RealHub Integration","slug":"300-how-to-setup-your-realhub-integration","summary":null,"lastPublishedAt":1700455217000,"accessControl":{"access":"PUBLIC","isInternal":false}},{"id":"405","title":"How to Create a Funding Request usin

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:01 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:01 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:01 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3be177bf-d01e-007a-546e-28f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161001Z-15b8d89586fbmg6qpd9yf8zhm000000003700000000098pc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:10:01 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:01 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:01 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:01 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 455cb2eb-701e-005c-341c-29bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161001Z-r197bdfb6b48pl4k4a912hk2g400000007m00000000046sh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:01 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:01 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:01 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161001Z-16849878b78wv88bk51myq5vxc00000008ng000000001her x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:01 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:01 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:01 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:01 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: e9f225b3-c01e-0014-22e8-27a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161001Z-r197bdfb6b4wmcgqdschtyp7yg000000086g00000000kx8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:01 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49721	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:01 UTC	605	OUT	GET /kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/styles.css HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:02 UTC	698	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 38190 Connection: close Last-Modified: Thu, 02 May 2024 23:50:26 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: X.sBL0N6gltggJxa0U19FHI5AwCj.X9S Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 14:50:37 GMT Cache-Control: public, max-age=31550000, immutable Etag: "2d84702e8bcf044708d12e3d8c5551d7" Vary: Accept-Encoding Via: 1.1 eb6e5773d654b9aeadbed8169564506c.cloudfront.net (CloudFront) Age: 4765 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: eOSCNKyWN6mKxXsawWeXQwTyhPDBZltUe6lTjGGVPK-pCyXy3mPfLA==
2024-10-30 16:10:02 UTC	15686	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4f 70 65 6e 20 53 61 6e 73 3b 66 6f 6e 74 2d 73 74 72 65 74 63 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 61 73 73 65 74 73 2f 6f 70 65 6e 73 61 6e 73 2f 6d 65 6d 74 59 61 47 73 31 32 36 4d 69 5a 70 42 41 2d 55 46 55 49 63 56 58 53 43 45 6b 78 32 63 6d 71 76 58 6c 57 71 57 74 45 36 46 78 5a 43 4a 67 76 41 51 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 75 2b 30 34 36 30 2d 30 35 32 66 2c 75 2b 31 63 38 30 2d 31 63 38 38 2c 75 2b 32 30 62 34 2c 75 2b 32 64 65 30 2d Data Ascii: @font-face{font-display:swap;font-family:Open Sans;font-stretch:100%;font-style:italic;font-weight:300;src:url(assets/opensans/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6FxZCJgvAQ.woff2) format("woff2");unicode-range:u+0460-052f,u+1c80-1c88,u+20b4,u+2de0-
2024-10-30 16:10:02 UTC	6700	IN	Data Raw: 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 30 2c 2e 31 2c 31 29 7d 2e 73 65 61 72 63 68 52 6f 6f 74 20 2e 63 6c 6f 73 65 42 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 20 73 76 67 7b 66 69 6c 6c 3a 23 66 66 66 3b 68 65 69 67 68 74 3a 39 70 78 3b 77 69 64 74 68 3a 39 70 78 7d 2e 73 65 61 72 63 68 52 6f 6f 74 20 2e 63 6c 6f 73 65 42 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 30 37 64 38 62 7d 2e 73 65 61 72 63 68 52 6f 6f 74 20 2e 64 72 6f 70 64 6f 77 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 39 7d 2e 73 65 61 72 63 68 52 6f 6f 74 20 2e 6d 61 69 6e 56 69 65 77 43 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e Data Ascii: .25s cubic-bezier(.55,0,.1,1)}.searchRoot .closeButtonContainer svg{fill:#fff;height:9px;width:9px}.searchRoot .closeButtonContainer:hover{background-color:#607d8b}.searchRoot .dropdown{position:relative;z-index:9}.searchRoot .mainViewContainer{backgroun
2024-10-30 16:10:02 UTC	15804	IN	Data Raw: 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 68 65 69 67 68 74 3a 31 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 6d 61 72 67 69 6e 3a 2d 2e 31 65 6d 20 2e 31 65 6d 20 2e 31 65 6d 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 77 69 64 74 68 3a 31 65 6d 7d 2e 61 72 74 69 63 6c 65 42 6f 64 79 20 2e 66 72 2d 74 65 78 74 2d 67 72 61 79 7b 63 6f 6c 6f 72 3a 23 61 61 61 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 72 74 69 63 6c 65 42 6f 64 79 20 61 2e 66 72 2d 67 72 65 65 6e 2c 2e 61 72 74 69 63 Data Ascii: repeat:no-repeat!important;display:inline-block;font-size:inherit;height:1em;line-height:1;margin:-.1em .1em .1em;min-height:20px;min-width:20px;vertical-align:middle;width:1em}.articleBody .fr-text-gray{color:#aaa!important}.articleBody a.fr-green,.artic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49720	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:01 UTC	627	OUT	GET /kb/v2/deployed/5de5c1e688134/4db52de3-999b-4de9-a518-4952820c5cb9/styles-snippet.css HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:02 UTC	659	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 8036 Connection: close Date: Wed, 30 Oct 2024 16:10:03 GMT Last-Modified: Fri, 25 Nov 2022 04:06:20 GMT Etag: "46b9a88748e6cbf0bf158e0425ce938c" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=31550000, immutable X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 ab985bb6f3435d42701015dfa6015878.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: LmGJrasSo0AmZFCglSi2F5QVvSXrCkjyvdLe9g2acdxmo2ORzmZ9mw==
2024-10-30 16:10:02 UTC	8036	IN	Data Raw: 61 2e 6c 69 6e 6b 2d 63 6f 6c 6f 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 38 61 61 65 31 3b 0a 7d 0a 61 2e 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 68 6f 76 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 38 61 61 65 31 3b 0a 7d 0a 2e 6c 69 6e 6b 2d 63 6f 6c 6f 72 20 73 76 67 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 32 38 61 61 65 31 3b 0a 7d 0a 2e 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 68 6f 76 65 72 20 73 76 67 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 32 38 61 61 65 31 3b 0a 7d 0a 2e 73 68 6f 77 2d 6d 6f 72 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 38 61 61 65 31 3b 0a 7d 0a 2e 73 65 61 72 63 68 2d 62 67 2d 63 6f 6c 6f 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 36 31 39 33 33 3b 0a 7d 0a 2e 68 65 61 64 Data Ascii: a.link-color { color: #28aae1;}a.link-color:hover { color: #28aae1;}.link-color svg { fill: #28aae1;}.link-color:hover svg { fill: #28aae1;}.show-more { background-color: #28aae1;}.search-bg-color { background-color: #061933;}.head

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49723	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:01 UTC	626	OUT	GET /kb/v2/deployed/5de5c1e688134/4db52de3-999b-4de9-a518-4952820c5cb9/localisation/en/lang-snippet.js HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:02 UTC	649	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 145 Connection: close Date: Wed, 30 Oct 2024 16:10:03 GMT Last-Modified: Fri, 25 Nov 2022 04:06:20 GMT Etag: "42a94d69f30bb1d6593cf1ebeae45cc6" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=31550000, immutable X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 cf2071a2896a4f71dbfdbc521d554362.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: kMwVpVLUR5-U35JrlUrdk90TPxoKjjOEDI1U2z_qeq6TYlC3telyfQ==
2024-10-30 16:10:02 UTC	145	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 4c 6f 63 61 6c 69 73 61 74 69 6f 6e 44 61 74 61 20 3d 20 7b 27 6b 62 5f 66 6f 6f 74 65 72 27 3a 20 6e 75 6c 6c 2c 20 27 6b 62 5f 68 65 61 64 65 72 27 3a 20 6e 75 6c 6c 2c 20 27 6b 62 5f 6d 65 74 61 27 3a 20 6e 75 6c 6c 2c 20 27 6b 62 5f 74 61 67 6c 69 6e 65 27 3a 20 6e 75 6c 6c 2c 20 27 6b 62 5f 74 69 74 6c 65 27 3a 20 6e 75 6c 6c 7d 20 7d 29 28 29 3b Data Ascii: (function() { window.customLocalisationData = {'kb_footer': null, 'kb_header': null, 'kb_meta': null, 'kb_tagline': null, 'kb_title': null} })();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49724	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:01 UTC	590	OUT	GET /kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/script.js HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:01 UTC	714	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 433216 Connection: close Last-Modified: Thu, 02 May 2024 23:50:26 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: 3ZI5k_AACTiNFw1PceM4hNrIfRILg_hx Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 16:10:01 GMT Cache-Control: public, max-age=31550000, immutable Etag: "e18d4c37af59666d496145e44b587f5c" Vary: Accept-Encoding Via: 1.1 fd080e20137c93d47ed43a67821248f0.cloudfront.net (CloudFront) Age: 36318 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: iohP9krTDNim8JsMAj27rF81h6B5uoZS-DyJOWX0baHbIc5A1vEo3w==
2024-10-30 16:10:02 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 63 72 69 70 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 65 2c 74 2c 6e 3d 7b 37 38 3a 28 65 2c 74 29 3d 3e 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 69 66 28 6e 29 7b 76 61 72 20 6f 3d 74 79 70 65 6f 66 20 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 6f 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 3d 6f 29 65 2e 70 Data Ascii: /! For license information please see script.js.LICENSE.txt /var e,t,n={78:(e,t)=>{var n;!function(){var r={}.hasOwnProperty;function a(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var o=typeof n;if("string"===o\|\|"number"===o)e.p
2024-10-30 16:10:02 UTC	16384	IN	Data Raw: 63 61 73 65 22 63 6f 6d 6d 61 22 3a 63 61 73 65 22 73 65 70 61 72 61 74 6f 72 22 3a 72 65 74 75 72 6e 28 74 2c 6e 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 2e 69 6e 63 6c 75 64 65 73 28 65 2e 61 72 72 61 79 46 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 2c 6f 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 21 61 26 26 75 28 6e 2c 65 29 2e 69 6e 63 6c 75 64 65 73 28 65 2e 61 72 72 61 79 46 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 3b 6e 3d 6f 3f 75 28 6e 2c 65 29 3a 6e 3b 63 6f 6e 73 74 20 69 3d 61 7c 7c 6f 3f 6e 2e 73 70 6c 69 74 28 65 2e 61 72 72 61 79 46 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 2e 6d 61 70 28 28 74 3d 3e 75 28 74 2c 65 29 29 29 3a 6e 75 6c 6c 3d 3d 3d Data Ascii: case"comma":case"separator":return(t,n,r)=>{const a="string"==typeof n&&n.includes(e.arrayFormatSeparator),o="string"==typeof n&&!a&&u(n,e).includes(e.arrayFormatSeparator);n=o?u(n,e):n;const i=a\|\|o?n.split(e.arrayFormatSeparator).map((t=>u(t,e))):null===
2024-10-30 16:10:02 UTC	16384	IN	Data Raw: 79 70 65 6f 66 20 4d 53 41 70 70 26 26 4d 53 41 70 70 2e 65 78 65 63 55 6e 73 61 66 65 4c 6f 63 61 6c 46 75 6e 63 74 69 6f 6e 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 4d 53 41 70 70 2e 65 78 65 63 55 6e 73 61 66 65 4c 6f 63 61 6c 46 75 6e 63 74 69 6f 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 65 28 65 2c 74 29 7d 29 29 7d 3a 67 65 29 3b 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 2c 74 29 7b 69 66 28 74 29 7b 76 61 72 20 6e 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 69 66 28 6e 26 26 6e 3d 3d 3d 65 2e 6c 61 73 74 43 68 69 6c 64 26 26 33 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6e 2e 6e 6f 64 65 56 61 6c 75 65 3d 74 29 7d 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 7d 76 61 72 20 76 65 Data Ascii: ypeof MSApp&&MSApp.execUnsafeLocalFunction?function(e,t,n,r){MSApp.execUnsafeLocalFunction((function(){return ge(e,t)}))}:ge);function ye(e,t){if(t){var n=e.firstChild;if(n&&n===e.lastChild&&3===n.nodeType)return void(n.nodeValue=t)}e.textContent=t}var ve
2024-10-30 16:10:02 UTC	16384	IN	Data Raw: 3a 63 61 73 65 22 6d 6f 75 73 65 64 6f 77 6e 22 3a 63 61 73 65 22 66 6f 63 75 73 6f 75 74 22 3a 72 65 74 75 72 6e 21 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 6e 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 28 65 3d 65 2e 64 65 74 61 69 6c 29 26 26 22 64 61 74 61 22 69 6e 20 65 3f 65 2e 64 61 74 61 3a 6e 75 6c 6c 7d 76 61 72 20 71 6e 3d 21 31 3b 76 61 72 20 48 6e 3d 7b 63 6f 6c 6f 72 3a 21 30 2c 64 61 74 65 3a 21 30 2c 64 61 74 65 74 69 6d 65 3a 21 30 2c 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 3a 21 30 2c 65 6d 61 69 6c 3a 21 30 2c 6d 6f 6e 74 68 3a 21 30 2c 6e 75 6d 62 65 72 3a 21 30 2c 70 61 73 73 77 6f 72 64 3a 21 30 2c 72 61 6e 67 65 3a 21 30 2c 73 65 61 72 63 68 Data Ascii: :case"mousedown":case"focusout":return!0;default:return!1}}function zn(e){return"object"==typeof(e=e.detail)&&"data"in e?e.data:null}var qn=!1;var Hn={color:!0,date:!0,datetime:!0,"datetime-local":!0,email:!0,month:!0,number:!0,password:!0,range:!0,search
2024-10-30 16:10:02 UTC	16384	IN	Data Raw: 63 75 72 72 65 6e 74 3b 63 61 28 4a 61 29 2c 65 2e 74 79 70 65 2e 5f 63 6f 6e 74 65 78 74 2e 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 72 6f 28 65 2c 74 29 7b 66 6f 72 28 3b 6e 75 6c 6c 21 3d 3d 65 3b 29 7b 76 61 72 20 6e 3d 65 2e 61 6c 74 65 72 6e 61 74 65 3b 69 66 28 28 65 2e 63 68 69 6c 64 4c 61 6e 65 73 26 74 29 3d 3d 3d 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 28 6e 2e 63 68 69 6c 64 4c 61 6e 65 73 26 74 29 3d 3d 3d 74 29 62 72 65 61 6b 3b 6e 2e 63 68 69 6c 64 4c 61 6e 65 73 7c 3d 74 7d 65 6c 73 65 20 65 2e 63 68 69 6c 64 4c 61 6e 65 73 7c 3d 74 2c 6e 75 6c 6c 21 3d 3d 6e 26 26 28 6e 2e 63 68 69 6c 64 4c 61 6e 65 73 7c 3d 74 29 3b 65 3d 65 2e 72 65 74 75 72 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 6f 28 65 2c 74 Data Ascii: current;ca(Ja),e.type._context._currentValue=t}function ro(e,t){for(;null!==e;){var n=e.alternate;if((e.childLanes&t)===t){if(null===n\|\|(n.childLanes&t)===t)break;n.childLanes\|=t}else e.childLanes\|=t,null!==n&&(n.childLanes\|=t);e=e.return}}function ao(e,t
2024-10-30 16:10:02 UTC	16384	IN	Data Raw: 61 6e 65 73 2c 61 2e 65 6e 74 61 6e 67 6c 65 64 4c 61 6e 65 73 7c 3d 65 3b 66 6f 72 28 76 61 72 20 72 3d 61 2e 65 6e 74 61 6e 67 6c 65 6d 65 6e 74 73 2c 69 3d 65 3b 30 3c 69 3b 29 7b 76 61 72 20 73 3d 33 31 2d 7a 74 28 69 29 2c 63 3d 31 3c 3c 73 3b 72 5b 73 5d 7c 3d 65 2c 69 26 3d 7e 63 7d 7d 7d 29 2c 5b 6e 2c 74 2c 72 5d 29 2c 73 2e 75 73 65 45 66 66 65 63 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 74 2e 5f 73 6f 75 72 63 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 70 2e 67 65 74 53 6e 61 70 73 68 6f 74 2c 6e 3d 70 2e 73 65 74 53 6e 61 70 73 68 6f 74 3b 74 72 79 7b 6e 28 65 28 74 2e 5f 73 6f 75 72 63 65 29 29 3b 76 61 72 20 72 3d 70 73 28 6d 29 3b 61 2e 6d 75 74 61 62 6c 65 52 65 61 64 4c 61 6e 65 73 7c 3d 72 26 Data Ascii: anes,a.entangledLanes\|=e;for(var r=a.entanglements,i=e;0<i;){var s=31-zt(i),c=1<<s;r[s]\|=e,i&=~c}}}),[n,t,r]),s.useEffect((function(){return r(t._source,(function(){var e=p.getSnapshot,n=p.setSnapshot;try{n(e(t._source));var r=ps(m);a.mutableReadLanes\|=r&
2024-10-30 16:10:02 UTC	16384	IN	Data Raw: 3b 63 61 73 65 22 73 65 6c 65 63 74 22 3a 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 3d 7b 77 61 73 4d 75 6c 74 69 70 6c 65 3a 21 21 72 2e 6d 75 6c 74 69 70 6c 65 7d 2c 6f 3d 61 28 7b 7d 2c 72 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 4e 72 28 22 69 6e 76 61 6c 69 64 22 2c 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 65 78 74 61 72 65 61 22 3a 73 65 28 65 2c 72 29 2c 6f 3d 6c 65 28 65 2c 72 29 2c 4e 72 28 22 69 6e 76 61 6c 69 64 22 2c 65 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 6f 3d 72 7d 6b 65 28 6e 2c 6f 29 3b 76 61 72 20 75 3d 6f 3b 66 6f 72 28 6c 20 69 6e 20 75 29 69 66 28 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6c 29 29 7b 76 61 72 20 64 3d 75 5b 6c 5d 3b 22 73 74 79 6c 65 22 3d 3d 3d 6c 3f 77 65 28 65 2c 64 29 3a 22 64 Data Ascii: ;case"select":e._wrapperState={wasMultiple:!!r.multiple},o=a({},r,{value:void 0}),Nr("invalid",e);break;case"textarea":se(e,r),o=le(e,r),Nr("invalid",e);break;default:o=r}ke(n,o);var u=o;for(l in u)if(u.hasOwnProperty(l)){var d=u[l];"style"===l?we(e,d):"d
2024-10-30 16:10:02 UTC	16384	IN	Data Raw: 7b 66 73 28 29 2c 65 2e 70 69 6e 67 65 64 4c 61 6e 65 73 7c 3d 65 2e 73 75 73 70 65 6e 64 65 64 4c 61 6e 65 73 26 61 3b 62 72 65 61 6b 7d 65 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 3d 71 72 28 50 73 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 29 2c 72 29 3b 62 72 65 61 6b 7d 50 73 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 69 66 28 76 73 28 65 2c 6e 29 2c 28 34 31 38 36 31 31 32 26 6e 29 3d 3d 3d 6e 29 62 72 65 61 6b 3b 66 6f 72 28 72 3d 65 2e 65 76 65 6e 74 54 69 6d 65 73 2c 61 3d 2d 31 3b 30 3c 6e 3b 29 7b 76 61 72 20 6c 3d 33 31 2d 7a 74 28 6e 29 3b 6f 3d 31 3c 3c 6c 2c 28 6c 3d 72 5b 6c 5d 29 3e 61 26 26 28 61 3d 6c 29 2c 6e 26 3d 7e 6f 7d 69 66 28 6e 3d 61 2c 31 30 3c 28 6e 3d 28 31 32 30 3e 28 6e 3d 24 61 28 29 2d 6e 29 3f 31 32 30 3a 34 38 30 3e Data Ascii: {fs(),e.pingedLanes\|=e.suspendedLanes&a;break}e.timeoutHandle=qr(Ps.bind(null,e),r);break}Ps(e);break;case 4:if(vs(e,n),(4186112&n)===n)break;for(r=e.eventTimes,a=-1;0<n;){var l=31-zt(n);o=1<<l,(l=r[l])>a&&(a=l),n&=~o}if(n=a,10<(n=(120>(n=$a()-n)?120:480>
2024-10-30 16:10:02 UTC	16384	IN	Data Raw: 3d 6e 75 6c 6c 2c 61 2e 74 61 69 6c 3d 6e 75 6c 6c 2c 61 2e 6c 61 73 74 45 66 66 65 63 74 3d 6e 75 6c 6c 29 2c 75 61 28 46 6f 2c 46 6f 2e 63 75 72 72 65 6e 74 29 2c 72 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 61 73 65 20 32 33 3a 63 61 73 65 20 32 34 3a 72 65 74 75 72 6e 20 74 2e 6c 61 6e 65 73 3d 30 2c 56 69 28 65 2c 74 2c 6e 29 7d 72 65 74 75 72 6e 20 6f 6c 28 65 2c 74 2c 6e 29 7d 6a 69 3d 30 21 3d 28 31 36 33 38 34 26 65 2e 66 6c 61 67 73 29 7d 65 6c 73 65 20 6a 69 3d 21 31 3b 73 77 69 74 63 68 28 74 2e 6c 61 6e 65 73 3d 30 2c 74 2e 74 61 67 29 7b 63 61 73 65 20 32 3a 69 66 28 72 3d 74 2e 74 79 70 65 2c 6e 75 6c 6c 21 3d 3d 65 26 26 28 65 2e 61 6c 74 65 72 6e 61 74 65 3d 6e 75 6c 6c 2c 74 2e 61 6c 74 65 72 6e 61 74 65 3d 6e 75 6c 6c Data Ascii: =null,a.tail=null,a.lastEffect=null),ua(Fo,Fo.current),r)break;return null;case 23:case 24:return t.lanes=0,Vi(e,t,n)}return ol(e,t,n)}ji=0!=(16384&e.flags)}else ji=!1;switch(t.lanes=0,t.tag){case 2:if(r=t.type,null!==e&&(e.alternate=null,t.alternate=null
2024-10-30 16:10:03 UTC	16384	IN	Data Raw: 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 74 3f 22 6f 62 6a 65 63 74 20 77 69 74 68 20 6b 65 79 73 20 7b 22 2b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2b 22 7d 22 3a 74 29 29 3b 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 5b 5d 2c 61 3d 30 3b 72 65 74 75 72 6e 20 4f 28 65 2c 72 2c 22 22 2c 22 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 6e 2c 65 2c 61 2b 2b 29 7d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 69 66 28 2d 31 3d 3d 3d 65 2e 5f 73 74 61 74 75 73 29 7b 76 61 72 20 74 3d 65 2e 5f 72 65 73 75 6c 74 3b 74 3d 74 28 29 2c 65 2e 5f 73 74 Data Ascii: object Object]"===t?"object with keys {"+Object.keys(e).join(", ")+"}":t));return s}function _(e,t,n){if(null==e)return e;var r=[],a=0;return O(e,r,"","",(function(e){return t.call(n,e,a++)})),r}function N(e){if(-1===e._status){var t=e._result;t=t(),e._st

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49722	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:01 UTC	604	OUT	GET /kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/localisation/en/lang.js HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:01 UTC	712	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1980 Connection: close Last-Modified: Thu, 02 May 2024 23:50:32 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: O6Y6s_9RU8Ejo05lxbWerM4i3COlYyRX Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 16:10:01 GMT Cache-Control: public, max-age=31550000, immutable Etag: "607d620e77c71b39b5f6fcf8e8c34f12" Vary: Accept-Encoding Via: 1.1 ab985bb6f3435d42701015dfa6015878.cloudfront.net (CloudFront) Age: 65285 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: gL2-IfKgpzW_augKqfRoIO6HB1IIhJg4Jv9bTDbgbTingPF66edOOA==
2024-10-30 16:10:01 UTC	1980	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 69 73 61 74 69 6f 6e 44 61 74 61 20 3d 20 7b 27 69 6e 74 65 72 6e 61 6c 27 3a 20 7b 27 72 65 73 74 72 69 63 74 65 64 27 3a 20 27 46 6f 72 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 2c 20 77 69 74 68 20 72 65 73 74 72 69 63 74 69 6f 6e 73 27 2c 20 27 75 6e 72 65 73 74 72 69 63 74 65 64 27 3a 20 27 46 6f 72 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 27 7d 2c 20 27 65 78 74 65 72 6e 61 6c 27 3a 20 7b 27 72 65 73 74 72 69 63 74 65 64 27 3a 20 27 46 6f 72 20 70 75 62 6c 69 63 20 75 73 65 2c 20 77 69 74 68 20 72 65 73 74 72 69 63 74 69 6f 6e 73 27 2c 20 27 75 6e 72 65 73 74 72 69 63 74 65 64 27 3a 20 27 46 6f 72 20 70 75 62 6c 69 63 20 75 73 65 27 7d 2c 20 27 73 64 6b 27 3a 20 7b 27 66 65 65 Data Ascii: (function() { window.localisationData = {'internal': {'restricted': 'For internal use, with restrictions', 'unrestricted': 'For internal use'}, 'external': {'restricted': 'For public use, with restrictions', 'unrestricted': 'For public use'}, 'sdk': {'fee

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:01 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:01 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:01 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 5d69bbb7-d01e-008e-6d6a-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161001Z-17c5cb586f6mkpfkkpsf1dpups00000003h000000000f8v6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:01 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:02 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 070d1cb7-b01e-0084-2b6b-2ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161002Z-r197bdfb6b4wbz6dd37axgrp9s00000000zg00000000upxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:02 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:02 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:02 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161002Z-16849878b78bcpfn2qf7sm6hsn00000009s000000000xw0z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:02 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:02 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:02 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:02 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: c60d5dca-401e-005b-2742-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161002Z-17c5cb586f6sqz6f73fsew1zd800000001yg00000000fgpm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:02 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:02 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:02 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161002Z-16849878b78nx5sne3fztmu6xc000000099000000000893z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:03 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:03 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7aa26785-f01e-0020-1b7f-2a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161003Z-15b8d89586fnsf5zkvx8tfb0zc00000003dg000000008p55 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:03 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49737	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:03 UTC	585	OUT	GET /sdk/bootloader/v4/elevio-bootloader.js?cid=5de5c1e688134 HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:03 UTC	687	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 794 Connection: close Last-Modified: Thu, 02 May 2024 07:15:45 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: lsYuJL1M7m3xYYeJB2rD8_uduNN10msk Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 09:14:40 GMT Cache-Control: max-age=300 Etag: "96c5db343c7753fa2229b742bc1fe147" Vary: Accept-Encoding Via: 1.1 ffdf2668ac264ec6d8784ccc7453073c.cloudfront.net (CloudFront) Age: 24924 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: DQHZruwqX0pNTIQbT214hV1SEvPom2PCc5lxBw10T-1cD3xMW2YSow==
2024-10-30 16:10:03 UTC	794	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 76 61 72 20 4d 41 49 4e 5f 56 34 5f 55 52 4c 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 65 6c 65 76 2e 69 6f 2f 73 64 6b 2f 6d 61 69 6e 2f 76 34 2f 31 37 31 34 36 33 34 31 34 34 32 30 34 2f 65 6c 65 76 69 6f 2d 6d 61 69 6e 2e 6a 73 22 2c 4d 41 49 4e 5f 55 52 4c 5f 4c 4f 43 41 4c 48 4f 53 54 3d 22 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 38 30 38 30 2f 65 6c 65 76 69 6f 2d 6d 61 69 6e 2e 6a 73 22 2c 4d 41 49 4e 5f 56 33 5f 55 52 4c 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 65 6c 65 76 2e 69 6f 2f 6a 73 2f 77 69 64 67 65 74 2e 6a 73 22 2c 51 53 5f 4c 4f 43 41 4c 48 4f 53 54 3d 22 65 6c 65 76 69 6f 2d 76 65 72 73 69 6f 6e 3d 6c 6f 63 61 6c Data Ascii: (function () { 'use strict'; var MAIN_V4_URL="https://cdn.elev.io/sdk/main/v4/1714634144204/elevio-main.js",MAIN_URL_LOCALHOST="http://localhost:8080/elevio-main.js",MAIN_V3_URL="https://static.elev.io/js/widget.js",QS_LOCALHOST="elevio-version=local

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:03 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:03 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9985b9b7-a01e-0021-5827-28814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161003Z-15b8d89586f6nn8zqg1h5suba800000003g000000000an67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:03 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.6	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:03 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:03 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:03 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161003Z-16849878b785jrf8dn0d2rczaw00000009eg00000000a3hb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:03 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:03 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:03 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161003Z-16849878b785jrf8dn0d2rczaw00000009dg00000000eetn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:03 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:03 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:03 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:03 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: b80877bf-b01e-0084-28e3-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161003Z-17c5cb586f6lxnvg801rcb3n8n000000088g000000009m4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:03 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49742	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:04 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 77 6f 6e 70 31 56 54 34 4f 45 57 77 7a 77 6b 6f 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 36 31 62 30 37 38 30 38 35 65 33 61 65 34 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: wonp1VT4OEWwzwko.1Context: d61b078085e3ae45
2024-10-30 16:10:04 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-30 16:10:04 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 77 6f 6e 70 31 56 54 34 4f 45 57 77 7a 77 6b 6f 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 36 31 62 30 37 38 30 38 35 65 33 61 65 34 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 75 70 70 69 5a 57 4c 6c 76 62 5a 71 4f 45 54 4a 36 57 74 66 62 4d 41 58 54 7a 32 4e 65 44 44 37 66 7a 47 4a 33 47 37 54 65 4b 4a 6c 68 70 46 50 34 5a 79 63 67 33 45 65 50 72 36 76 59 64 39 62 4a 32 4f 4e 38 43 59 5a 57 71 62 43 35 69 64 56 32 4c 71 7a 53 43 4c 6e 66 71 34 74 74 32 46 2f 44 68 34 4b 67 68 48 42 39 78 74 30 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: wonp1VT4OEWwzwko.2Context: d61b078085e3ae45<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVuppiZWLlvbZqOETJ6WtfbMAXTz2NeDD7fzGJ3G7TeKJlhpFP4Zycg3EePr6vYd9bJ2ON8CYZWqbC5idV2LqzSCLnfq4tt2F/Dh4KghHB9xt0
2024-10-30 16:10:04 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 77 6f 6e 70 31 56 54 34 4f 45 57 77 7a 77 6b 6f 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 36 31 62 30 37 38 30 38 35 65 33 61 65 34 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: wonp1VT4OEWwzwko.3Context: d61b078085e3ae45<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-30 16:10:04 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-30 16:10:04 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4a 59 53 57 70 38 4d 43 76 55 69 38 6a 64 61 4b 33 2f 72 72 62 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: JYSWp8MCvUi8jdaK3/rrbA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:04 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:04 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161004Z-16849878b78hh85qc40uyr8sc800000008g000000000n0sy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:04 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:04 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:04 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161004Z-16849878b78nx5sne3fztmu6xc000000096000000000n4ea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:04 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:04 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 6484a1a6-201e-0000-75a3-26a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161004Z-16849878b78fkwcjkpn19c5dsn000000077000000000q1x0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:04 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:04 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:04 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:04 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 94fafadb-001e-0049-3f27-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161004Z-r197bdfb6b4g24ztpxkw4umce800000009rg00000000mb7z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:04 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49749	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:04 UTC	569	OUT	GET /sdk/main/v4/1714634144204/elevio-main.js HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:05 UTC	713	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 400896 Connection: close Last-Modified: Thu, 02 May 2024 07:15:45 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: Q4cFTfD0NTVe99rdHOv63VqG7bJ7Pq_T Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 06:51:37 GMT Cache-Control: max-age=2592000, public, immutable Etag: "cb11f8ca9f8a5761d8cd635ec64618ae" Vary: Accept-Encoding Via: 1.1 3a21078459f955a33f79dacf082781c4.cloudfront.net (CloudFront) Age: 33509 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: Ql0AKktU-VbN0eQMU26Zw3pKGOv3Rxv7dCxN9fFO3rjwyakmpIxlag==
2024-10-30 16:10:05 UTC	15671	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 65 78 70 6f 72 74 73 2c 20 72 65 71 75 69 72 65 24 24 30 2c 20 72 65 71 75 69 72 65 24 24 31 24 31 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6f 77 6e 4b 65 79 73 28 6f 62 6a 65 63 74 2c 20 65 6e 75 6d 65 72 61 62 6c 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 76 61 72 20 6b 65 79 73 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 62 6a 65 63 74 29 3b 0a 20 20 20 20 69 66 20 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 73 79 6d 62 6f 6c 73 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 6f 62 6a 65 63 74 29 3b 0a 20 20 20 20 20 20 65 6e 75 6d 65 Data Ascii: (function (exports, require$$0, require$$1$1) { 'use strict'; function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); enume
2024-10-30 16:10:05 UTC	16384	IN	Data Raw: 6f 74 74 6f 6d 3a 33 30 70 78 7d 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 31 67 6a 7a 61 20 5b 64 61 74 61 2d 65 6c 65 76 69 6f 2d 61 72 74 69 63 6c 65 5d 2c 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 31 67 6a 7a 61 20 5b 64 61 74 61 2d 65 6c 65 76 69 6f 2d 6d 6f 64 75 6c 65 5d 2c 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 31 67 6a 7a 61 20 61 2c 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 31 67 6a 7a 61 20 73 70 61 6e 5b 72 6f 6c 65 3d 6c 69 6e 6b 5d 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 72 67 62 61 28 37 34 2c 31 34 34 2c 32 32 36 2c 2e 36 29 20 35 Data Ascii: ottom:30px}#_elev_io ._1gjza [data-elevio-article],#_elev_io ._1gjza [data-elevio-module],#_elev_io ._1gjza a,#_elev_io ._1gjza span[role=link]{word-wrap:break-word;background-color:transparent;background-image:linear-gradient(180deg,rgba(74,144,226,.6) 5
2024-10-30 16:10:05 UTC	16384	IN	Data Raw: 6f 72 6d 61 6c 20 31 30 30 25 20 65 6c 65 76 69 6f 2d 6e 6f 74 6f 2d 73 61 6e 73 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 2d 6d 6f 7a 2d 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 73 74 61 72 74 3b 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 61 73 74 3a 73 74 61 72 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 6e 6f 6e 65 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 3b 74 65 78 74 2d 6a 75 73 74 69 66 79 3a 61 75 74 6f 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 65 6c 65 Data Ascii: ormal 100% elevio-noto-sans,Helvetica,Arial,sans-serif;letter-spacing:normal;text-align:left;-moz-text-align-last:start;text-align-last:start;text-decoration:none;text-emphasis:none;text-indent:0;text-justify:auto;text-shadow:none;text-transform:none}.ele
2024-10-30 16:10:05 UTC	16384	IN	Data Raw: 77 69 64 74 68 3a 31 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 74 38 6f 35 66 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 37 65 62 65 66 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 74 38 6f 35 66 2c 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 74 38 6f 35 66 20 2a 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 31 74 6d 6a 73 7b 30 25 7b 6f Data Ascii: width:14px!important}#_elev_io ._t8o5f{background-color:#fff;border-top:1px solid #e7ebef;color:rgba(0,0,0,.8);font-size:14px;font-weight:700;padding:15px;text-transform:uppercase}#_elev_io ._t8o5f,#_elev_io ._t8o5f *{cursor:pointer}@keyframes _1tmjs{0%{o
2024-10-30 16:10:05 UTC	16384	IN	Data Raw: 2e 70 75 73 68 28 5b 41 54 54 52 5f 56 41 4c 55 45 2c 73 2e 73 75 62 73 74 72 28 30 2c 73 2e 6c 65 6e 67 74 68 2d 31 29 5d 29 2c 73 3d 22 22 2c 6e 3d 54 45 58 54 29 3a 6e 3d 3d 3d 4f 50 45 4e 26 26 2f 5e 21 2d 2d 24 2f 2e 74 65 73 74 28 73 29 3f 28 54 2e 63 6f 6d 6d 65 6e 74 73 26 26 74 2e 70 75 73 68 28 5b 4f 50 45 4e 2c 73 5d 2c 5b 41 54 54 52 5f 4b 45 59 2c 22 63 6f 6d 6d 65 6e 74 22 5d 2c 5b 41 54 54 52 5f 45 51 5d 29 2c 73 3d 72 2c 6e 3d 43 4f 4d 4d 45 4e 54 29 3a 6e 3d 3d 3d 54 45 58 54 7c 7c 6e 3d 3d 3d 43 4f 4d 4d 45 4e 54 3f 73 2b 3d 72 3a 6e 3d 3d 3d 4f 50 45 4e 26 26 22 2f 22 3d 3d 3d 72 26 26 73 2e 6c 65 6e 67 74 68 7c 7c 28 6e 3d 3d 3d 4f 50 45 4e 26 26 2f 5c 73 2f 2e 74 65 73 74 28 72 29 3f 28 73 2e 6c 65 6e 67 74 68 26 26 74 2e 70 75 73 68 Data Ascii: .push([ATTR_VALUE,s.substr(0,s.length-1)]),s="",n=TEXT):n===OPEN&&/^!--$/.test(s)?(T.comments&&t.push([OPEN,s],[ATTR_KEY,"comment"],[ATTR_EQ]),s=r,n=COMMENT):n===TEXT\|\|n===COMMENT?s+=r:n===OPEN&&"/"===r&&s.length\|\|(n===OPEN&&/\s/.test(r)?(s.length&&t.push
2024-10-30 16:10:05 UTC	16384	IN	Data Raw: 62 72 22 2c 22 61 64 64 72 65 73 73 22 2c 22 61 72 74 69 63 6c 65 22 2c 22 61 73 69 64 65 22 2c 22 62 22 2c 22 62 64 69 22 2c 22 62 64 6f 22 2c 22 63 69 74 65 22 2c 22 63 6f 64 65 22 2c 22 63 6f 6d 6d 61 6e 64 22 2c 22 64 64 22 2c 22 64 66 6e 22 2c 22 64 74 22 2c 22 65 6d 22 2c 22 66 69 67 63 61 70 74 69 6f 6e 22 2c 22 66 69 67 75 72 65 22 2c 22 66 6f 6f 74 65 72 22 2c 22 68 65 61 64 65 72 22 2c 22 69 22 2c 22 6b 62 64 22 2c 22 6d 61 72 6b 22 2c 22 6e 61 76 22 2c 22 6e 6f 73 63 72 69 70 74 22 2c 22 72 70 22 2c 22 72 74 22 2c 22 72 75 62 79 22 2c 22 73 22 2c 22 73 61 6d 70 22 2c 22 73 65 63 74 69 6f 6e 22 2c 22 73 6d 61 6c 6c 22 2c 22 73 74 72 6f 6e 67 22 2c 22 73 75 62 22 2c 22 73 75 6d 6d 61 72 79 22 2c 22 73 75 70 22 2c 22 75 22 2c 22 76 61 72 22 2c 22 Data Ascii: br","address","article","aside","b","bdi","bdo","cite","code","command","dd","dfn","dt","em","figcaption","figure","footer","header","i","kbd","mark","nav","noscript","rp","rt","ruby","s","samp","section","small","strong","sub","summary","sup","u","var","
2024-10-30 16:10:05 UTC	16384	IN	Data Raw: 76 61 72 20 73 2c 69 2c 61 3d 74 5b 70 61 72 65 6e 74 52 6f 75 74 65 28 65 29 5d 2c 75 3d 63 68 69 6c 64 52 6f 75 74 65 28 65 29 3b 73 3d 61 2e 6d 6f 64 65 6c 2e 6e 61 6d 65 2c 21 30 3d 3d 3d 28 69 3d 6f 2e 6d 6f 64 65 6c 73 5b 73 5d 29 2e 68 61 73 52 6f 75 74 65 50 61 72 61 6d 73 26 26 28 63 28 73 29 2c 6c 28 69 29 29 2c 6d 28 75 2c 61 2e 73 75 62 76 69 65 77 73 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 69 66 28 21 65 7c 7c 21 74 29 72 65 74 75 72 6e 20 6e 6f 6f 70 24 32 3b 76 61 72 20 72 3d 74 5b 70 61 72 65 6e 74 52 6f 75 74 65 28 65 29 5d 7c 7c 74 5b 6e 5d 2c 73 3d 72 2e 6d 6f 64 65 6c 2e 6e 61 6d 65 2c 69 3d 63 68 69 6c 64 52 6f 75 74 65 28 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 Data Ascii: var s,i,a=t[parentRoute(e)],u=childRoute(e);s=a.model.name,!0===(i=o.models[s]).hasRouteParams&&(c(s),l(i)),m(u,a.subviews);}}function p(e,t,n){if(!e\|\|!t)return noop$2;var r=t[parentRoute(e)]\|\|t[n],s=r.model.name,i=childRoute(e);return function(){return r
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 70 65 2e 73 68 61 6c 6c 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 32 3f 6b 65 28 54 65 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3a 78 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 65 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 32 3f 6b 65 28 49 65 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 3a 77 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 72 75 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 32 3f 6b 65 28 44 65 2c 61 Data Ascii: pe.shallow=function(){return arguments.length<2?ke(Te,arguments[0]):x.apply(null,arguments)},e.prototype.deep=function(){return arguments.length<2?ke(Ie,arguments[0]):w.apply(null,arguments)},e.prototype.struct=function(){return arguments.length<2?ke(De,a
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 73 70 79 4c 69 73 74 65 6e 65 72 73 2e 69 6e 64 65 78 4f 66 28 65 29 3b 2d 31 21 3d 3d 74 26 26 65 65 2e 73 70 79 4c 69 73 74 65 6e 65 72 73 2e 73 70 6c 69 63 65 28 74 2c 31 29 3b 7d 29 29 7d 2c 74 2e 61 73 52 65 66 65 72 65 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 49 74 28 22 61 73 52 65 66 65 72 65 6e 63 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 6f 62 73 65 72 76 61 62 6c 65 2e 72 65 66 20 69 6e 73 74 65 61 64 22 29 2c 6a 2e 72 65 66 28 65 29 7d 2c 74 2e 61 73 53 74 72 75 63 74 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 49 74 28 22 61 73 53 74 72 75 63 74 75 72 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2e 20 55 73 65 20 6f 62 73 65 72 76 61 62 6c 65 2e 73 74 72 75 63 74 2c 20 Data Ascii: spyListeners.indexOf(e);-1!==t&&ee.spyListeners.splice(t,1);}))},t.asReference=function(e){return It("asReference is deprecated, use observable.ref instead"),j.ref(e)},t.asStructure=function(e){return It("asStructure is deprecated. Use observable.struct,
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 5f 5f 6d 6f 62 78 4c 61 7a 79 49 6e 69 74 69 61 6c 69 7a 65 72 73 22 2c 69 2e 5f 5f 6d 6f 62 78 4c 61 7a 79 49 6e 69 74 69 61 6c 69 7a 65 72 73 26 26 69 2e 5f 5f 6d 6f 62 78 4c 61 7a 79 49 6e 69 74 69 61 6c 69 7a 65 72 73 2e 73 6c 69 63 65 28 29 7c 7c 5b 5d 29 3b 76 61 72 20 6c 3d 73 2e 76 61 6c 75 65 2c 70 3d 73 2e 69 6e 69 74 69 61 6c 69 7a 65 72 3b 72 65 74 75 72 6e 20 69 2e 5f 5f 6d 6f 62 78 4c 61 7a 79 49 6e 69 74 69 61 6c 69 7a 65 72 73 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 2c 61 2c 70 3f 70 2e 63 61 6c 6c 28 74 29 3a 6c 2c 75 2c 73 29 3b 7d 29 29 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 72 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 21 30 21 3d 3d 74 Data Ascii: __mobxLazyInitializers",i.__mobxLazyInitializers&&i.__mobxLazyInitializers.slice()\|\|[]);var l=s.value,p=s.initializer;return i.__mobxLazyInitializers.push((function(t){e(t,a,p?p.call(t):l,u,s);})),{enumerable:r,configurable:!0,get:function(){return !0!==t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49751	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:04 UTC	410	OUT	GET /kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/localisation/en/lang.js HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:05 UTC	712	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1980 Connection: close Last-Modified: Thu, 02 May 2024 23:50:32 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: O6Y6s_9RU8Ejo05lxbWerM4i3COlYyRX Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 16:10:01 GMT Cache-Control: public, max-age=31550000, immutable Etag: "607d620e77c71b39b5f6fcf8e8c34f12" Vary: Accept-Encoding Via: 1.1 02d68f3a4f2a3f8967c5e021dcd7f96a.cloudfront.net (CloudFront) Age: 65289 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: rJJqyaA9Dk-MGTda7W-cRJGCThGSkkOA5gJd9J757cTSgDN2xcxlxA==
2024-10-30 16:10:05 UTC	1980	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 69 73 61 74 69 6f 6e 44 61 74 61 20 3d 20 7b 27 69 6e 74 65 72 6e 61 6c 27 3a 20 7b 27 72 65 73 74 72 69 63 74 65 64 27 3a 20 27 46 6f 72 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 2c 20 77 69 74 68 20 72 65 73 74 72 69 63 74 69 6f 6e 73 27 2c 20 27 75 6e 72 65 73 74 72 69 63 74 65 64 27 3a 20 27 46 6f 72 20 69 6e 74 65 72 6e 61 6c 20 75 73 65 27 7d 2c 20 27 65 78 74 65 72 6e 61 6c 27 3a 20 7b 27 72 65 73 74 72 69 63 74 65 64 27 3a 20 27 46 6f 72 20 70 75 62 6c 69 63 20 75 73 65 2c 20 77 69 74 68 20 72 65 73 74 72 69 63 74 69 6f 6e 73 27 2c 20 27 75 6e 72 65 73 74 72 69 63 74 65 64 27 3a 20 27 46 6f 72 20 70 75 62 6c 69 63 20 75 73 65 27 7d 2c 20 27 73 64 6b 27 3a 20 7b 27 66 65 65 Data Ascii: (function() { window.localisationData = {'internal': {'restricted': 'For internal use, with restrictions', 'unrestricted': 'For internal use'}, 'external': {'restricted': 'For public use, with restrictions', 'unrestricted': 'For public use'}, 'sdk': {'fee

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49753	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:04 UTC	432	OUT	GET /kb/v2/deployed/5de5c1e688134/4db52de3-999b-4de9-a518-4952820c5cb9/localisation/en/lang-snippet.js HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:05 UTC	656	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 145 Connection: close Date: Wed, 30 Oct 2024 16:10:03 GMT Last-Modified: Fri, 25 Nov 2022 04:06:20 GMT Etag: "42a94d69f30bb1d6593cf1ebeae45cc6" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=31550000, immutable X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 f952757fdddf3c9caa357164f2d464d8.cloudfront.net (CloudFront) Age: 3 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: OIc3ziwDVlMRxHsPKYzTIkpYJD7SegTJQ0MQUUMcnPYXGPNuTlP-xQ==
2024-10-30 16:10:05 UTC	145	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 4c 6f 63 61 6c 69 73 61 74 69 6f 6e 44 61 74 61 20 3d 20 7b 27 6b 62 5f 66 6f 6f 74 65 72 27 3a 20 6e 75 6c 6c 2c 20 27 6b 62 5f 68 65 61 64 65 72 27 3a 20 6e 75 6c 6c 2c 20 27 6b 62 5f 6d 65 74 61 27 3a 20 6e 75 6c 6c 2c 20 27 6b 62 5f 74 61 67 6c 69 6e 65 27 3a 20 6e 75 6c 6c 2c 20 27 6b 62 5f 74 69 74 6c 65 27 3a 20 6e 75 6c 6c 7d 20 7d 29 28 29 3b Data Ascii: (function() { window.customLocalisationData = {'kb_footer': null, 'kb_header': null, 'kb_meta': null, 'kb_tagline': null, 'kb_title': null} })();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49752	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:04 UTC	391	OUT	GET /sdk/bootloader/v4/elevio-bootloader.js?cid=5de5c1e688134 HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:05 UTC	687	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 794 Connection: close Last-Modified: Thu, 02 May 2024 07:15:45 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: lsYuJL1M7m3xYYeJB2rD8_uduNN10msk Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 09:14:40 GMT Cache-Control: max-age=300 Etag: "96c5db343c7753fa2229b742bc1fe147" Vary: Accept-Encoding Via: 1.1 0162e02b2d0212054988a68716227daa.cloudfront.net (CloudFront) Age: 24926 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: Yztxi0WxKz0ocV8ygS7LQJZIBWbVURb-o2rz38A47vPkFJyBkqZiSg==
2024-10-30 16:10:05 UTC	794	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 76 61 72 20 4d 41 49 4e 5f 56 34 5f 55 52 4c 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 65 6c 65 76 2e 69 6f 2f 73 64 6b 2f 6d 61 69 6e 2f 76 34 2f 31 37 31 34 36 33 34 31 34 34 32 30 34 2f 65 6c 65 76 69 6f 2d 6d 61 69 6e 2e 6a 73 22 2c 4d 41 49 4e 5f 55 52 4c 5f 4c 4f 43 41 4c 48 4f 53 54 3d 22 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 38 30 38 30 2f 65 6c 65 76 69 6f 2d 6d 61 69 6e 2e 6a 73 22 2c 4d 41 49 4e 5f 56 33 5f 55 52 4c 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 65 6c 65 76 2e 69 6f 2f 6a 73 2f 77 69 64 67 65 74 2e 6a 73 22 2c 51 53 5f 4c 4f 43 41 4c 48 4f 53 54 3d 22 65 6c 65 76 69 6f 2d 76 65 72 73 69 6f 6e 3d 6c 6f 63 61 6c Data Ascii: (function () { 'use strict'; var MAIN_V4_URL="https://cdn.elev.io/sdk/main/v4/1714634144204/elevio-main.js",MAIN_URL_LOCALHOST="http://localhost:8080/elevio-main.js",MAIN_V3_URL="https://static.elev.io/js/widget.js",QS_LOCALHOST="elevio-version=local

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49756	104.17.24.14	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	643	OUT	GET /ajax/libs/emojione/2.0.1/assets/svg/1f4a1.svg HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:05 UTC	952	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:05 GMT Content-Type: image/svg+xml; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e50-9b9" Last-Modified: Mon, 04 May 2020 16:09:52 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 602742 Expires: Mon, 20 Oct 2025 16:10:05 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0S7GUks6lWFH2eQhZQbwvRIKQbr2bFgJaXzToq2UDZUY50vc0UFePmEfyqFtUxoIB%2F2S%2BXCpANCqGV9%2B4KIZPIz%2Bm%2Fip82SugzhCv8KaTomp5Omwk5XQS0WtbUHp2U7dPK6Zb8GT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8dacac6639bd2e79-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 16:10:05 UTC	417	IN	Data Raw: 39 62 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 36 34 20 36 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 63 65 33 31 22 20 64 3d 22 4d 32 34 2e 39 33 38 2c 34 38 68 31 34 2e 31 32 35 63 30 2e 38 33 38 2d 34 2e 33 31 33 2c 33 2e 35 31 33 2d 38 2e 35 30 35 2c 36 2e 33 31 35 2d 31 32 2e 38 39 38 43 34 38 2e 36 33 32 2c 32 39 2e 39 39 39 2c 35 32 2c 32 34 2e 37 31 36 2c 35 32 2c 31 39 2e 35 38 36 0a 09 09 43 35 32 2c 39 2e 38 38 39 2c 34 33 2e 30 32 37 2c 32 2c 33 32 2c 32 53 31 32 2c 39 2e 38 38 39 2c 31 32 2c 31 39 2e 35 38 Data Ascii: 9b9<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" enable-background="new 0 0 64 64"><path fill="#ffce31" d="M24.938,48h14.125c0.838-4.313,3.513-8.505,6.315-12.898C48.632,29.999,52,24.716,52,19.586C52,9.889,43.027,2,32,2S12,9.889,12,19.58
2024-10-30 16:10:05 UTC	1369	IN	Data Raw: 2e 31 34 37 2e 37 37 31 20 33 2e 31 36 39 2e 39 32 20 33 2e 37 35 38 20 31 2e 37 33 20 36 2e 39 38 37 20 32 2e 33 37 31 20 39 2e 34 36 34 68 2e 35 39 34 63 2d 2e 35 32 36 2d 32 2e 35 31 33 2d 31 2e 32 34 34 2d 35 2e 37 39 39 2d 32 2e 31 30 35 2d 39 2e 36 32 38 2d 2e 32 33 32 2d 31 2e 30 32 31 2d 2e 34 37 33 2d 32 2e 30 38 36 2d 2e 37 32 2d 33 2e 31 37 38 2d 2e 31 33 31 2d 2e 35 33 34 2d 2e 32 34 34 2d 31 2e 30 37 36 2d 2e 33 36 38 2d 31 2e 36 33 32 2e 38 33 32 2d 2e 31 38 33 20 32 2e 36 35 33 2d 2e 38 30 33 20 34 2e 35 38 34 2d 32 2e 38 38 39 20 31 2e 39 33 32 20 32 2e 30 38 35 20 33 2e 37 35 32 20 32 2e 37 30 36 20 34 2e 35 38 34 20 32 2e 38 38 39 2d 2e 31 32 34 2e 35 35 36 2d 2e 32 33 37 20 31 2e 30 39 38 2d 2e 33 36 38 20 31 2e 36 33 32 2d 2e 32 34 37 Data Ascii: .147.771 3.169.92 3.758 1.73 6.987 2.371 9.464h.594c-.526-2.513-1.244-5.799-2.105-9.628-.232-1.021-.473-2.086-.72-3.178-.131-.534-.244-1.076-.368-1.632.832-.183 2.653-.803 4.584-2.889 1.932 2.085 3.752 2.706 4.584 2.889-.124.556-.237 1.098-.368 1.632-.247
2024-10-30 16:10:05 UTC	710	IN	Data Raw: 30 37 34 2e 34 39 36 2e 30 35 39 2d 2e 32 30 36 2e 31 32 2d 2e 34 31 34 2e 31 39 2d 2e 36 31 34 6d 2d 36 2e 35 39 32 2d 34 2e 37 30 34 63 2e 31 36 34 2d 2e 32 34 38 2e 33 38 2d 2e 33 38 38 2e 36 30 33 2d 2e 33 38 38 73 2e 34 33 38 2e 31 34 31 2e 36 30 34 2e 33 38 38 63 2e 31 39 35 2e 33 31 2e 31 32 37 2e 37 33 32 2d 2e 30 36 34 20 31 2e 31 34 35 2d 2e 31 34 2e 32 39 32 2d 2e 33 33 33 2e 35 37 2d 2e 35 34 2e 38 33 38 2d 2e 32 30 38 2d 2e 32 36 39 2d 2e 34 2d 2e 35 34 36 2d 2e 35 33 39 2d 2e 38 33 38 2d 2e 31 39 31 2d 2e 34 31 33 2d 2e 32 36 2d 2e 38 33 35 2d 2e 30 36 34 2d 31 2e 31 34 35 6d 2d 36 2e 37 36 20 33 2e 34 39 37 63 2e 30 34 31 2d 2e 32 32 31 2e 31 34 36 2d 2e 33 33 36 2e 32 35 39 2d 2e 33 36 34 2e 30 36 32 2d 2e 30 33 2e 31 36 2d 2e 30 31 35 2e Data Ascii: 074.496.059-.206.12-.414.19-.614m-6.592-4.704c.164-.248.38-.388.603-.388s.438.141.604.388c.195.31.127.732-.064 1.145-.14.292-.333.57-.54.838-.208-.269-.4-.546-.539-.838-.191-.413-.26-.835-.064-1.145m-6.76 3.497c.041-.221.146-.336.259-.364.062-.03.16-.015.
2024-10-30 16:10:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49754	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	396	OUT	GET /kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/script.js HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:05 UTC	714	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 433216 Connection: close Last-Modified: Thu, 02 May 2024 23:50:26 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: 3ZI5k_AACTiNFw1PceM4hNrIfRILg_hx Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 16:10:01 GMT Cache-Control: public, max-age=31550000, immutable Etag: "e18d4c37af59666d496145e44b587f5c" Vary: Accept-Encoding Via: 1.1 3517ce13630d84c5b14e88de469985cc.cloudfront.net (CloudFront) Age: 36322 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: w53_U0YFAJJyau-gY7pc6AuNbuSvpXrvamZESAR5defWJXLlKogLMw==
2024-10-30 16:10:05 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 73 63 72 69 70 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 65 2c 74 2c 6e 3d 7b 37 38 3a 28 65 2c 74 29 3d 3e 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 69 66 28 6e 29 7b 76 61 72 20 6f 3d 74 79 70 65 6f 66 20 6e 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 6f 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 3d 6f 29 65 2e 70 Data Ascii: /! For license information please see script.js.LICENSE.txt /var e,t,n={78:(e,t)=>{var n;!function(){var r={}.hasOwnProperty;function a(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var o=typeof n;if("string"===o\|\|"number"===o)e.p
2024-10-30 16:10:05 UTC	16384	IN	Data Raw: 63 61 73 65 22 63 6f 6d 6d 61 22 3a 63 61 73 65 22 73 65 70 61 72 61 74 6f 72 22 3a 72 65 74 75 72 6e 28 74 2c 6e 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 2e 69 6e 63 6c 75 64 65 73 28 65 2e 61 72 72 61 79 46 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 2c 6f 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 21 61 26 26 75 28 6e 2c 65 29 2e 69 6e 63 6c 75 64 65 73 28 65 2e 61 72 72 61 79 46 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 3b 6e 3d 6f 3f 75 28 6e 2c 65 29 3a 6e 3b 63 6f 6e 73 74 20 69 3d 61 7c 7c 6f 3f 6e 2e 73 70 6c 69 74 28 65 2e 61 72 72 61 79 46 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 2e 6d 61 70 28 28 74 3d 3e 75 28 74 2c 65 29 29 29 3a 6e 75 6c 6c 3d 3d 3d Data Ascii: case"comma":case"separator":return(t,n,r)=>{const a="string"==typeof n&&n.includes(e.arrayFormatSeparator),o="string"==typeof n&&!a&&u(n,e).includes(e.arrayFormatSeparator);n=o?u(n,e):n;const i=a\|\|o?n.split(e.arrayFormatSeparator).map((t=>u(t,e))):null===
2024-10-30 16:10:05 UTC	16384	IN	Data Raw: 79 70 65 6f 66 20 4d 53 41 70 70 26 26 4d 53 41 70 70 2e 65 78 65 63 55 6e 73 61 66 65 4c 6f 63 61 6c 46 75 6e 63 74 69 6f 6e 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 4d 53 41 70 70 2e 65 78 65 63 55 6e 73 61 66 65 4c 6f 63 61 6c 46 75 6e 63 74 69 6f 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 65 28 65 2c 74 29 7d 29 29 7d 3a 67 65 29 3b 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 2c 74 29 7b 69 66 28 74 29 7b 76 61 72 20 6e 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 69 66 28 6e 26 26 6e 3d 3d 3d 65 2e 6c 61 73 74 43 68 69 6c 64 26 26 33 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 76 6f 69 64 28 6e 2e 6e 6f 64 65 56 61 6c 75 65 3d 74 29 7d 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 74 7d 76 61 72 20 76 65 Data Ascii: ypeof MSApp&&MSApp.execUnsafeLocalFunction?function(e,t,n,r){MSApp.execUnsafeLocalFunction((function(){return ge(e,t)}))}:ge);function ye(e,t){if(t){var n=e.firstChild;if(n&&n===e.lastChild&&3===n.nodeType)return void(n.nodeValue=t)}e.textContent=t}var ve
2024-10-30 16:10:05 UTC	16384	IN	Data Raw: 3a 63 61 73 65 22 6d 6f 75 73 65 64 6f 77 6e 22 3a 63 61 73 65 22 66 6f 63 75 73 6f 75 74 22 3a 72 65 74 75 72 6e 21 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 6e 28 65 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 28 65 3d 65 2e 64 65 74 61 69 6c 29 26 26 22 64 61 74 61 22 69 6e 20 65 3f 65 2e 64 61 74 61 3a 6e 75 6c 6c 7d 76 61 72 20 71 6e 3d 21 31 3b 76 61 72 20 48 6e 3d 7b 63 6f 6c 6f 72 3a 21 30 2c 64 61 74 65 3a 21 30 2c 64 61 74 65 74 69 6d 65 3a 21 30 2c 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 3a 21 30 2c 65 6d 61 69 6c 3a 21 30 2c 6d 6f 6e 74 68 3a 21 30 2c 6e 75 6d 62 65 72 3a 21 30 2c 70 61 73 73 77 6f 72 64 3a 21 30 2c 72 61 6e 67 65 3a 21 30 2c 73 65 61 72 63 68 Data Ascii: :case"mousedown":case"focusout":return!0;default:return!1}}function zn(e){return"object"==typeof(e=e.detail)&&"data"in e?e.data:null}var qn=!1;var Hn={color:!0,date:!0,datetime:!0,"datetime-local":!0,email:!0,month:!0,number:!0,password:!0,range:!0,search
2024-10-30 16:10:05 UTC	16384	IN	Data Raw: 63 75 72 72 65 6e 74 3b 63 61 28 4a 61 29 2c 65 2e 74 79 70 65 2e 5f 63 6f 6e 74 65 78 74 2e 5f 63 75 72 72 65 6e 74 56 61 6c 75 65 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 72 6f 28 65 2c 74 29 7b 66 6f 72 28 3b 6e 75 6c 6c 21 3d 3d 65 3b 29 7b 76 61 72 20 6e 3d 65 2e 61 6c 74 65 72 6e 61 74 65 3b 69 66 28 28 65 2e 63 68 69 6c 64 4c 61 6e 65 73 26 74 29 3d 3d 3d 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 28 6e 2e 63 68 69 6c 64 4c 61 6e 65 73 26 74 29 3d 3d 3d 74 29 62 72 65 61 6b 3b 6e 2e 63 68 69 6c 64 4c 61 6e 65 73 7c 3d 74 7d 65 6c 73 65 20 65 2e 63 68 69 6c 64 4c 61 6e 65 73 7c 3d 74 2c 6e 75 6c 6c 21 3d 3d 6e 26 26 28 6e 2e 63 68 69 6c 64 4c 61 6e 65 73 7c 3d 74 29 3b 65 3d 65 2e 72 65 74 75 72 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 6f 28 65 2c 74 Data Ascii: current;ca(Ja),e.type._context._currentValue=t}function ro(e,t){for(;null!==e;){var n=e.alternate;if((e.childLanes&t)===t){if(null===n\|\|(n.childLanes&t)===t)break;n.childLanes\|=t}else e.childLanes\|=t,null!==n&&(n.childLanes\|=t);e=e.return}}function ao(e,t
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 61 6e 65 73 2c 61 2e 65 6e 74 61 6e 67 6c 65 64 4c 61 6e 65 73 7c 3d 65 3b 66 6f 72 28 76 61 72 20 72 3d 61 2e 65 6e 74 61 6e 67 6c 65 6d 65 6e 74 73 2c 69 3d 65 3b 30 3c 69 3b 29 7b 76 61 72 20 73 3d 33 31 2d 7a 74 28 69 29 2c 63 3d 31 3c 3c 73 3b 72 5b 73 5d 7c 3d 65 2c 69 26 3d 7e 63 7d 7d 7d 29 2c 5b 6e 2c 74 2c 72 5d 29 2c 73 2e 75 73 65 45 66 66 65 63 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 74 2e 5f 73 6f 75 72 63 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 70 2e 67 65 74 53 6e 61 70 73 68 6f 74 2c 6e 3d 70 2e 73 65 74 53 6e 61 70 73 68 6f 74 3b 74 72 79 7b 6e 28 65 28 74 2e 5f 73 6f 75 72 63 65 29 29 3b 76 61 72 20 72 3d 70 73 28 6d 29 3b 61 2e 6d 75 74 61 62 6c 65 52 65 61 64 4c 61 6e 65 73 7c 3d 72 26 Data Ascii: anes,a.entangledLanes\|=e;for(var r=a.entanglements,i=e;0<i;){var s=31-zt(i),c=1<<s;r[s]\|=e,i&=~c}}}),[n,t,r]),s.useEffect((function(){return r(t._source,(function(){var e=p.getSnapshot,n=p.setSnapshot;try{n(e(t._source));var r=ps(m);a.mutableReadLanes\|=r&
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 3b 63 61 73 65 22 73 65 6c 65 63 74 22 3a 65 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 3d 7b 77 61 73 4d 75 6c 74 69 70 6c 65 3a 21 21 72 2e 6d 75 6c 74 69 70 6c 65 7d 2c 6f 3d 61 28 7b 7d 2c 72 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 4e 72 28 22 69 6e 76 61 6c 69 64 22 2c 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 65 78 74 61 72 65 61 22 3a 73 65 28 65 2c 72 29 2c 6f 3d 6c 65 28 65 2c 72 29 2c 4e 72 28 22 69 6e 76 61 6c 69 64 22 2c 65 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 6f 3d 72 7d 6b 65 28 6e 2c 6f 29 3b 76 61 72 20 75 3d 6f 3b 66 6f 72 28 6c 20 69 6e 20 75 29 69 66 28 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6c 29 29 7b 76 61 72 20 64 3d 75 5b 6c 5d 3b 22 73 74 79 6c 65 22 3d 3d 3d 6c 3f 77 65 28 65 2c 64 29 3a 22 64 Data Ascii: ;case"select":e._wrapperState={wasMultiple:!!r.multiple},o=a({},r,{value:void 0}),Nr("invalid",e);break;case"textarea":se(e,r),o=le(e,r),Nr("invalid",e);break;default:o=r}ke(n,o);var u=o;for(l in u)if(u.hasOwnProperty(l)){var d=u[l];"style"===l?we(e,d):"d
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 7b 66 73 28 29 2c 65 2e 70 69 6e 67 65 64 4c 61 6e 65 73 7c 3d 65 2e 73 75 73 70 65 6e 64 65 64 4c 61 6e 65 73 26 61 3b 62 72 65 61 6b 7d 65 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 3d 71 72 28 50 73 2e 62 69 6e 64 28 6e 75 6c 6c 2c 65 29 2c 72 29 3b 62 72 65 61 6b 7d 50 73 28 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 69 66 28 76 73 28 65 2c 6e 29 2c 28 34 31 38 36 31 31 32 26 6e 29 3d 3d 3d 6e 29 62 72 65 61 6b 3b 66 6f 72 28 72 3d 65 2e 65 76 65 6e 74 54 69 6d 65 73 2c 61 3d 2d 31 3b 30 3c 6e 3b 29 7b 76 61 72 20 6c 3d 33 31 2d 7a 74 28 6e 29 3b 6f 3d 31 3c 3c 6c 2c 28 6c 3d 72 5b 6c 5d 29 3e 61 26 26 28 61 3d 6c 29 2c 6e 26 3d 7e 6f 7d 69 66 28 6e 3d 61 2c 31 30 3c 28 6e 3d 28 31 32 30 3e 28 6e 3d 24 61 28 29 2d 6e 29 3f 31 32 30 3a 34 38 30 3e Data Ascii: {fs(),e.pingedLanes\|=e.suspendedLanes&a;break}e.timeoutHandle=qr(Ps.bind(null,e),r);break}Ps(e);break;case 4:if(vs(e,n),(4186112&n)===n)break;for(r=e.eventTimes,a=-1;0<n;){var l=31-zt(n);o=1<<l,(l=r[l])>a&&(a=l),n&=~o}if(n=a,10<(n=(120>(n=$a()-n)?120:480>
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 3d 6e 75 6c 6c 2c 61 2e 74 61 69 6c 3d 6e 75 6c 6c 2c 61 2e 6c 61 73 74 45 66 66 65 63 74 3d 6e 75 6c 6c 29 2c 75 61 28 46 6f 2c 46 6f 2e 63 75 72 72 65 6e 74 29 2c 72 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 61 73 65 20 32 33 3a 63 61 73 65 20 32 34 3a 72 65 74 75 72 6e 20 74 2e 6c 61 6e 65 73 3d 30 2c 56 69 28 65 2c 74 2c 6e 29 7d 72 65 74 75 72 6e 20 6f 6c 28 65 2c 74 2c 6e 29 7d 6a 69 3d 30 21 3d 28 31 36 33 38 34 26 65 2e 66 6c 61 67 73 29 7d 65 6c 73 65 20 6a 69 3d 21 31 3b 73 77 69 74 63 68 28 74 2e 6c 61 6e 65 73 3d 30 2c 74 2e 74 61 67 29 7b 63 61 73 65 20 32 3a 69 66 28 72 3d 74 2e 74 79 70 65 2c 6e 75 6c 6c 21 3d 3d 65 26 26 28 65 2e 61 6c 74 65 72 6e 61 74 65 3d 6e 75 6c 6c 2c 74 2e 61 6c 74 65 72 6e 61 74 65 3d 6e 75 6c 6c Data Ascii: =null,a.tail=null,a.lastEffect=null),ua(Fo,Fo.current),r)break;return null;case 23:case 24:return t.lanes=0,Vi(e,t,n)}return ol(e,t,n)}ji=0!=(16384&e.flags)}else ji=!1;switch(t.lanes=0,t.tag){case 2:if(r=t.type,null!==e&&(e.alternate=null,t.alternate=null
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 3d 74 3f 22 6f 62 6a 65 63 74 20 77 69 74 68 20 6b 65 79 73 20 7b 22 2b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2b 22 7d 22 3a 74 29 29 3b 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 5b 5d 2c 61 3d 30 3b 72 65 74 75 72 6e 20 4f 28 65 2c 72 2c 22 22 2c 22 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 6e 2c 65 2c 61 2b 2b 29 7d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 69 66 28 2d 31 3d 3d 3d 65 2e 5f 73 74 61 74 75 73 29 7b 76 61 72 20 74 3d 65 2e 5f 72 65 73 75 6c 74 3b 74 3d 74 28 29 2c 65 2e 5f 73 74 Data Ascii: object Object]"===t?"object with keys {"+Object.keys(e).join(", ")+"}":t));return s}function _(e,t,n){if(null==e)return e;var r=[],a=0;return O(e,r,"","",(function(e){return t.call(n,e,a++)})),r}function N(e){if(-1===e._status){var t=e._result;t=t(),e._st

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:05 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161005Z-16849878b78tg5n42kspfr0x48000000085000000000wxf4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:05 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49755	18.172.112.126	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	600	OUT	GET /CA_LinkedIn_Banner.png HTTP/1.1 Host: cdn.campaignagent.com.au Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.elev.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:06 UTC	549	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5105578 Connection: close Date: Wed, 30 Oct 2024 16:10:07 GMT x-amz-replication-status: COMPLETED Last-Modified: Fri, 25 Nov 2022 04:02:55 GMT ETag: "7c4c98385a7132f9762c5a03acd5566c" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e2239bbca97bdb08942ca2cd020caca8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: szZhpHI397EjbhJQ7PGM_8-_3vjMIFTUMsZXZzrV81y1_qfcj4PHOQ==
2024-10-30 16:10:07 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 12 5c 00 00 03 1c 08 06 00 00 00 2b c5 bf a3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 da dc bd 49 8f 64 59 96 df f7 3b e7 de f7 cc 7c 88 c8 88 c8 a9 ab b2 ba ba aa 87 aa 46 93 dd 20 40 4a 22 24 68 80 24 50 82 36 02 37 5a 68 a3 cf a0 0f a0 a5 d6 fa 00 5a f1 13 08 5a 68 c7 0d 25 51 03 04 36 45 8a e8 a1 58 5d 59 c5 1a 32 b3 32 66 1f cc ec bd 7b cf d1 e2 dc 37 98 b9 7b 64 56 b1 bb 05 c8 13 99 19 e1 6e 6e f6 de 7d f7 9e f1 ff ff 1f f9 1f fe bb ff c6 11 10 57 70 c7 39 f9 72 40 da bf 0e 18 88 80 0b 88 08 00 62 8e 09 f1 03 00 77 68 3f f7 e9 0d a7 3f 1c bd 46 da 6b 7c f9 f9 fa 35 f3 87 03 e8 ea 7b ed af 0e 98 c7 1f ac fd 9e f0 ee 2f f7 b8 f8 dc de da da fb ba 1d Data Ascii: PNGIHDR\+pHYs.#.#x?v IDATxIdY;\|F @J"$h$P67ZhZZh%Q6EX]Y22f{7{dVnn}Wp9r@bwh??Fk\|5{/
2024-10-30 16:10:07 UTC	15990	IN	Data Raw: ed 33 40 6a 9f 39 ab 03 ba 4d 38 3b 01 9a ec fa b3 43 88 24 40 34 f8 3b 1c 36 21 6e 7f 0f c8 40 f9 ed f7 09 6e 45 a7 0a ae 56 27 b6 2c dd f8 32 e0 36 04 bc 56 c1 fb 53 c6 af ce 8f d0 47 60 9a 18 69 8a 98 38 80 43 e9 50 12 ce dd 3e 28 00 00 20 00 49 44 41 54 8a 6c f0 15 de e6 79 02 f5 f3 5e ea a9 a9 d0 4d d7 d0 45 e8 1c 86 d9 4a 33 e1 ef 57 03 22 71 51 21 0f e0 46 13 e4 22 04 70 0f fd db 84 dc ea 7a 12 69 89 b8 9e 14 4b c1 0d c2 c4 e0 69 c2 dd c7 af f1 e3 3f fd 53 13 ef e1 6f f0 cd af de 20 d2 84 78 3c 9a 39 a6 18 78 89 83 bd 2b 35 17 5c f2 05 6b 2e be ce 55 4c 31 20 85 09 81 19 d3 7c c0 5c 2a 8e 3a 61 29 2b 1e 97 33 1e 15 78 7f b9 e0 ab 9c 71 fb 70 8f bb 34 e1 ee 78 c0 cb 17 2f 90 6e 8e 38 de dd e1 ee 78 83 cb ba 60 59 0c 7a 74 59 2e c8 cb 82 58 33 e6 c3 Data Ascii: 3@j9M8;C$@4;6!n@nEV',26VSG`i8CP>( IDATly^MEJ3W"qQ!F"pziKi?So x<9x+5\k.UL1 \|\*:a)+3xqp4x/n8x`YztY.X3
2024-10-30 16:10:07 UTC	1873	IN	Data Raw: 38 36 06 82 07 0f 89 79 fc 55 04 52 2b ca 6a cf 2a a7 16 72 6e 6f 7d 64 36 60 ad 7b a5 1b 8c 39 b4 9a 0f e4 5f ab 1d 5a 45 e4 c1 f6 fe 8c 53 6d bd 2b 98 37 a9 8e 3d 67 06 b1 9d 43 38 36 c0 70 ed 1e 47 66 de fc 07 0e 48 ef f3 84 2c bd f7 5b 61 60 22 d2 0d 6a 2f 30 a0 a1 fa 59 d1 c2 39 1c 60 e4 fd 1d 0b a3 d9 fb 8a 9a 1f ba 03 5f d9 67 0f 3e 23 27 07 6e 30 6c 7d 84 6b fd 4d 6f d0 f4 8c da 3d a7 55 37 5d 5e eb aa db ac 70 78 6e 36 e3 b5 af a1 62 df 4f 4d df c6 ec 83 99 ba c1 5e d4 c3 6e da 73 d2 8e b9 1d 62 1d c7 90 d6 76 b9 69 58 77 b0 79 49 21 7d 5d 27 b2 6b 4e 41 11 c4 fa 3d 61 25 83 65 2d e6 21 c9 2a c8 55 bd 96 c0 c6 a8 a8 0a c4 08 f2 e0 b0 24 a6 21 5d 8a cd 21 27 5f 3b 5f a4 09 e7 e5 82 ac 84 fb ac 98 6a 31 b8 77 08 08 60 dc 9f 33 1e cf f7 78 71 3b 03 Data Ascii: 86yUR+jrno}d6`{9_ZESm+7=gC86pGfH,[a`"j/0Y9`_g>#'n0l}kMo=U7]^pxn6bOM^nsbviXwyI!}]'kNA=a%e-!U$!]!'_;_j1w`3xq;
2024-10-30 16:10:08 UTC	16384	IN	Data Raw: 76 b8 f1 d8 65 45 a0 84 57 af 7e 84 1f 7f f9 15 0e 59 31 c6 88 31 45 9c 35 a3 d4 8a b9 16 dc 3d bf c1 fe d9 0e b7 9f ed 30 9f 26 bc fe c7 d7 f8 eb ff fd ff 42 b2 2d 6f a3 1d ee 67 5f b1 a1 63 37 5f f1 02 fc 21 4f cd 6c 83 89 06 85 a7 15 f8 a2 19 b2 20 de ac 97 e5 50 cf 4e 3e 67 a6 47 ba f2 26 ac 21 6f 0e c6 40 3d 3c b1 b2 0d 0a 4a 8b 26 52 6b 7a b6 e6 5b f0 c1 5e 3b b0 2f 7b 2a 5b 72 9d 37 ec b9 9b a0 16 13 b9 b6 c4 0f af 61 1b 4d fb 6f 1e 32 2a 14 a3 30 be 0c 03 6e 86 80 9b 81 31 fb 6b 47 28 a6 0e a1 20 fc 29 25 bc 1c 07 bc 7a 41 f8 7f fe df 0b 3e 9c 32 66 b1 46 9c d8 36 8a 91 02 84 0b aa 00 a3 2a 06 10 6e 28 20 82 51 87 01 d3 b3 cf f0 ec b3 af f0 c5 69 c2 48 23 2e 0d 2a c7 b6 95 26 55 ec bc 7e 2c 22 90 18 6c 10 2c 8a 7a 3a 75 13 c9 8f bf bc c5 e9 92 30 Data Ascii: veEW~Y11E5=0&B-og_c7_!Ol PN>gG&!o@=<J&Rkz[^;/{[r7aMo20n1kG( )%zA>2fF6n( QiH#.&U~,"l,z:u0
2024-10-30 16:10:08 UTC	1024	IN	Data Raw: 62 56 de 50 d7 46 54 d7 6a d9 79 a5 42 35 2c 60 dd 47 9f 05 2f 35 07 29 8a 66 64 c9 38 57 05 a6 95 41 d0 cf e6 fb 87 11 37 c3 1e b7 bb 11 e7 d3 01 1f 1f 7e 8d 71 b7 c7 17 77 15 e7 4b c5 74 9a 30 27 c2 8f 5e dc 42 ea 01 c7 f3 05 c7 e9 82 10 03 be ba 7d 86 49 2a 1e a6 19 5f 7f 3c 41 fe 56 b1 1f 5e e1 ab 2f 5e e1 df fd 25 41 ff 83 e2 3f bd ff 15 2e 75 42 6c 53 28 8e 08 1e e0 4c 7c b0 50 ee 6c b5 7d 20 02 d5 65 64 d5 ad 75 3e 2f 53 31 2f d5 9c 0b de 1d cf ae 8d b0 20 c9 51 04 a3 ee a0 1a 11 93 9b 8a 35 5c 69 2c aa d5 4c 1e 96 ce 5e 87 ad 22 42 1c e2 ac 20 8a 1d 52 db cc fa d6 63 14 0c 31 20 11 bb b5 c0 f0 6e 15 16 04 c0 be c6 93 0a aa 70 5f 37 e1 af 51 aa 78 bf bd f6 fe a6 f6 3d 9f c0 ae 13 36 28 74 f5 0e a6 fb 2d b8 d5 19 0e dd 01 90 52 04 91 81 96 86 5d 44 Data Ascii: bVPFTjyB5,`G/5)fd8WA7~qwKt0'^B}I*_<AV^/^%A?.uBlS(L\|Pl} edu>/S1/ Q5\i,L^"B Rc1 np_7Qx=6(t-R]D
2024-10-30 16:10:08 UTC	16384	IN	Data Raw: 43 d7 9d 10 c8 ae bf b2 ff 7d 57 a4 12 83 6a fb 3b 3e 67 6c 35 29 d4 3e aa ea 7b 41 60 f7 04 db f3 a9 ee 31 16 6c 9a 18 90 5a 6f a2 4a 3f 6f f7 70 b0 ee 73 db da 45 cd be af 4f 44 70 7a 2d cc d8 5a 71 c5 fa b0 4c 43 48 77 91 3d 84 a7 c8 0e 04 ae c5 8a 5a 9b 51 05 07 7e 73 af e9 94 5a bf d5 7c 9a 3a 80 f9 b7 a0 04 78 68 40 1d f4 08 7b 19 18 f1 a0 f3 e8 2d 28 ef 87 37 1e 40 e4 5e c7 68 87 de 0d 3a 39 34 00 83 ff b3 cd b9 88 87 e0 2d ed 21 1f 5d 07 25 5b 00 59 87 c4 b3 81 98 6c 2f b7 f3 95 b8 b7 99 9a c7 2e 78 08 bb 88 79 e1 7d e4 6b 1e b9 ad 41 4a 44 36 a7 24 75 b7 b3 05 93 33 a1 df 53 16 e0 c3 08 fe fd 9b 6e 22 5c 81 e7 5b 5c 9c 4a b5 8b c7 ec ba 34 bb d0 0d c4 46 6c f5 46 ef 33 7a a8 5e 9b 99 74 a5 8b cf fa d5 e1 58 b5 0a 38 72 87 59 30 39 24 4e b6 33 83 Data Ascii: C}Wj;>gl5)>{A`1lZoJ?opsEODpz-ZqLCHw=ZQ~sZ\|:xh@{-(7@^h:94-!]%[Yl/.xy}kAJD6$u3Sn"\[\J4FlF3z^tX8rY09$N3
2024-10-30 16:10:08 UTC	16384	IN	Data Raw: 5f bc 04 03 78 f3 ee 2d ce 0f 0f b8 b9 bb c3 e1 ee 0e cc 8c f3 21 63 9a 13 52 8c 38 2d 0b ce 8f 0f 78 09 45 9c 4d 48 0a 8e a0 e9 00 ad 19 a2 84 9b db 17 e0 90 ac 3f ac c0 2c 66 d0 0e 81 31 c7 64 f7 bc a7 4e 9a b0 d2 ef e1 18 41 61 85 88 20 6a e9 82 6e 8a 01 9c a2 87 48 d8 ec 5c 49 b1 d4 8c f3 ba 62 59 16 2c eb 8a 4b ce 88 c4 38 44 33 db c0 e1 8a b4 64 30 33 d2 ed c1 34 ec 3c 79 df da 3e 4b 61 46 c9 19 22 19 cc 09 3c 29 22 11 26 6e 69 97 8c 50 b7 84 bb be 46 78 b9 b6 e6 da 13 94 8b 43 41 7b 2d 50 2b 56 07 65 51 8a 90 22 98 0e 07 68 55 ac a7 05 eb e5 64 86 00 55 c4 10 5d 0c e8 a1 4f 6e d6 58 98 71 0a 66 0a e6 14 4d 64 9b 26 70 48 38 dc de e1 e6 78 8b fa f2 25 96 e5 82 e5 72 b6 eb 71 ba a0 96 d2 62 93 91 92 69 56 c8 93 89 69 65 a8 16 64 37 47 ab 0a 52 08 88 Data Ascii: _x-!cR8-xEMH?,f1dNAa jnH\IbY,K8D3d034<y>KaF"<)"&niPFxCA{-P+VeQ"hUdU]OnXqfMd&pH8x%rqbiVied7GR
2024-10-30 16:10:08 UTC	2048	IN	Data Raw: 81 00 24 22 94 10 90 a9 22 97 02 ac c0 31 a5 0e d8 b1 f7 b2 18 60 da e1 58 4c b6 c5 94 aa 28 55 10 29 38 c0 c9 68 77 c5 f5 e0 d2 d6 64 da df eb 40 84 14 79 a7 17 5c 3d 64 88 e0 ef b7 56 54 65 ac 52 11 1d 28 25 0e d2 5d b2 f7 fe 57 05 cf 11 51 ed b3 d9 3a 34 68 e2 69 7f b6 57 d9 7c 08 21 18 78 92 a8 d5 bf d4 e1 e3 e2 f5 7a 47 c2 c0 fe 8c b2 f1 13 12 c2 10 a8 b2 0f a1 ec 7b 8c 83 1b 47 d0 54 ad ee 23 ec 30 20 c2 30 7d 75 9f a1 c1 d8 94 1b 78 0c 3d 08 4e 55 37 7d 0c 86 c0 30 07 ad 12 d1 2e 4c 4c db bb 49 9b d7 84 f6 a9 96 18 4a 13 5f 37 06 49 54 bb 65 a2 fb 8c d7 16 ea e8 eb 40 d7 9e ca 06 91 66 b2 bd 46 aa 76 bf 61 ab c1 45 15 51 f7 6b b7 ea 78 be da 40 a6 4a af 08 fa 47 1f 58 0b d7 f2 fa a4 c7 7a ca 90 79 e9 c9 d5 ed 7a 62 08 73 a3 31 dd d7 af 75 87 60 0d Data Ascii: $""1`XL(U)8hwd@y\=dVTeR(%]WQ:4hiW\|!xzG{GT#0 0}ux=NU7}0.LLIJ_7ITe@fFvaEQkx@JGXzyzbs1u`
2024-10-30 16:10:08 UTC	16384	IN	Data Raw: 01 94 2c 28 c9 21 8e cc 1c 69 f4 3d f1 6b 15 c4 73 34 8c 46 db b5 83 9b 47 ff de 2e 1a d9 2b 9e 69 cb 21 a0 27 f7 00 fa 64 92 84 7d 04 26 f1 71 24 20 7d a7 76 8b 3e 71 7f fb 6e 60 d1 93 7a b1 4f 84 30 75 61 f5 27 33 3a 3e f1 eb 6e 93 a7 99 ff 70 a8 c8 f7 dc 7e bf e3 4b 6f 92 db 41 8f fe fe e3 f7 69 df fb fa 7f bf 77 49 17 67 c6 d1 96 0a f3 d3 63 41 c1 c7 01 24 46 f6 09 65 8e 5d 39 e4 69 b4 01 9f 7a 3f b4 29 14 b6 8d 78 a2 8f 53 6b 2e 5a 95 4f a6 48 da a3 16 68 ef 03 72 d4 b9 1c a9 c9 da 93 e7 d1 81 a6 b4 26 aa d2 06 28 10 ff 65 f4 f3 c8 66 0e 47 ab 01 9e 12 83 0b 60 55 d0 b4 e2 e1 78 c0 59 18 6d f7 02 75 4a b0 89 c1 13 43 99 a1 e4 09 ae 1c 8d 7e a5 75 70 c0 79 7d 37 ac 04 b5 2b eb 0a 5d 3e 8b f9 7b 92 ab 2a e8 42 3b 3f 32 ef 68 cd 4b e8 e6 04 ee e9 d2 01 Data Ascii: ,(!i=ks4FG.+i!'d}&q$ }v>qn`zO0ua'3:>np~KoAiwIgcA$Fe]9iz?)xSk.ZOHhr&(efG`UxYmuJC~upy}7+]>{*B;?2hK
2024-10-30 16:10:08 UTC	1024	IN	Data Raw: 0c e0 ee 8a 0f 1f 5b 2e d9 61 77 ec 6b 3b b3 a1 e4 84 9c 0b 4a 2a c8 c5 eb 9a 12 c0 7a 23 f7 e4 94 64 c8 89 70 b7 cf c8 73 c6 54 b2 f7 3d f2 2d 92 b1 3f 29 aa 0e a3 8a eb a2 46 68 22 0e 24 94 05 68 0d b2 2c 01 25 11 9c b4 e2 2c 02 4d 82 5d 0a 00 97 31 52 f6 3e c6 c4 0e 4e ef 36 c8 e0 d3 bb fe 3d 8e dc c4 36 50 56 7e 6e f5 be 46 ca 29 02 8a d4 ef 5f 71 3d b4 d4 e6 6b 6d 75 90 61 4e 04 3d 2f 01 ad cb 10 d2 01 6b f6 80 31 ba f0 55 74 1f 20 71 d4 81 89 50 c8 7f cc cc 2b 84 86 1c a8 c5 e6 c1 a2 68 0a 69 02 6d 40 15 c2 a2 cd 41 54 a2 7e 0d 2c 43 d9 a1 e1 0e bd b1 61 f8 17 d3 78 76 d3 78 da d3 d0 b8 05 f4 03 fe 1a 9a 39 38 bc 7b 04 74 0b 3f 1d 61 73 0e 77 e8 b1 00 3e 57 4f 0e 60 88 73 bb 06 98 47 6d 15 13 b8 31 d6 21 41 0a c3 94 32 72 9e 30 91 07 0f ec 0b 61 36 Data Ascii: [.awk;J*z#dpsT=-?)Fh"$h,%,M]1R>N6=6PV~nF)_q=kmuaN=/k1Ut qP+him@AT~,Caxvx98{t?asw>WO`sGm1!A2r0a6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49761	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	717	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/rgcyKZcN1PvxWAPgFPXL1ZupNFF8O1lPQwRLMchKsts/2023-11-09_12-34-21-5T8.gif HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:06 UTC	616	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 2880201 Connection: close Date: Wed, 30 Oct 2024 16:10:06 GMT Last-Modified: Thu, 09 Nov 2023 01:39:18 GMT Etag: "40e036f818f03bdb8f1f68ee353f6f97" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: EQqP.sVZ6y36qp5oYOAEK.ZQw4s.c1pg Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 f952757fdddf3c9caa357164f2d464d8.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: X9Xq87WLw2dzpCr8OAc7nQPfhVzF0xOQP7JocVPL4tvGBq77nXtvKA==
2024-10-30 16:10:06 UTC	15768	IN	Data Raw: 47 49 46 38 39 61 7a 07 c0 03 77 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 00 21 f9 04 05 0a 00 ff 00 2c 00 00 00 00 7a 07 c0 03 87 16 1a 1a 02 13 24 26 22 24 04 12 1c 0a 0e 15 16 12 14 0a 0e 0c 2e 2a 1c 22 22 1c 12 15 26 16 27 34 0b 15 24 2a 2a 24 2e 32 2c 14 1a 24 0e 16 1b 1a 11 14 22 1a 15 1a 2a 34 2a 22 18 1a 1e 24 0e 0e 14 16 08 06 0d 1f 2c 27 18 0c 1e 16 14 16 0e 09 22 2e 2c 0a 12 18 27 1a 15 06 1b 27 1f 12 05 26 1e 18 26 2a 34 02 06 09 1f 1a 24 26 2e 2c 32 24 24 1a 1e 1c 22 2a 34 12 1e 29 22 2a 2c 06 06 19 0d 1a 25 06 0a 15 1e 29 34 22 32 34 2e 22 16 0a 0a 14 32 2b 1b 1a 07 0c 1a 1a 24 0e 02 04 06 0e 15 16 22 27 2a 26 1c 2a 22 24 18 Data Ascii: GIF89azw!NETSCAPE2.0! !,z$&"$.""&'4$$.2,$"4"$,'".,''&&4$&.,2$$"4)",%)4"24."2+$"'&"$
2024-10-30 16:10:06 UTC	222	IN	Data Raw: 1c cf 31 1d d7 b1 1d df 31 1e e7 b1 1e ef 31 1f f7 b1 1f ff 31 20 07 b2 20 0f 32 21 17 b2 21 1f 32 22 27 b2 22 2f 32 23 37 b2 23 3f 32 24 47 b2 24 4f 32 25 57 b2 25 5f 32 26 67 b2 26 6f 32 27 77 b2 27 7f 32 28 87 b2 28 8f 32 29 97 b2 29 9f 32 2a a7 b2 2a af 32 2b b7 b2 2b 33 f0 37 c4 b2 2c cf 32 2d d7 b2 2d df 32 2e e7 b2 2e ef 32 2f f7 b2 2f ff 32 30 07 b3 30 0f 33 31 17 b3 31 1f 33 32 27 b3 32 2f 33 33 37 b3 33 3f 33 34 47 b3 34 4f 33 35 57 b3 35 5f 33 36 67 b3 36 6f 33 37 77 b3 37 7f 33 38 87 b3 38 8f 33 39 97 b3 39 9f 33 3a a7 b3 3a af 33 3b 1b 73 40 00 00 21 f9 04 05 0a 00 ff 00 2c 00 00 00 00 7a 07 c0 03 87 27 25 22 30 3e 4b 0d 11 17 48 56 5e 0e 13 2b Data Ascii: 1111 2!!2"'"/2#7#?2$G$O2%W%_2&g&o2'w'2((2))2**2++37,2--2..2//20031132'2/3373?34G4O35W5_36g6o37w73883993::3;s@!,z'%"0>KHV^+
2024-10-30 16:10:06 UTC	968	IN	Data Raw: 50 42 2e 0e 0e 0c 38 21 16 51 48 41 1b 29 46 44 49 4f 50 65 64 5c 55 50 2e 47 54 22 23 23 39 40 47 15 1b 1e 3c 38 30 3b 48 51 38 30 2b 31 32 2c 19 26 33 04 28 44 5c 5e 64 59 49 2e 63 5d 57 15 36 4f 12 13 15 63 57 31 21 18 09 2d 0e 0e 47 41 3f 36 11 14 50 55 5e 0d 1b 22 2d 1c 1d 0b 03 04 48 3a 2d 17 16 15 2e 48 5d 66 55 4f 5a 64 64 63 5b 4a 5d 52 40 47 66 64 51 5b 61 03 05 2b 5c 47 46 4e 31 23 42 41 43 3f 2f 28 3d 28 09 44 3a 17 54 4f 43 56 65 64 56 55 53 36 36 34 48 60 64 40 4d 5d 18 14 0a 3c 53 5d 47 46 43 23 0f 05 22 0f 14 22 36 47 50 39 22 2f 25 1e 18 03 04 58 42 2b 2f 2d 2c 1a 1a 1b 2a 2a 2c 20 2d 38 23 19 17 36 32 44 3f 39 3f 02 04 18 32 33 35 14 1d 2f 56 5c 60 23 3e 53 30 2b 22 23 1e 1a 20 25 31 2f 35 49 42 39 2c 26 2e 44 5e 5e 5c 62 62 5c 47 4d 5d Data Ascii: PB.8!QHA)FDIOPed\UP.GT"##9@G<80;HQ80+12,&3(D\^dYI.c]W6OcW1!-GA?6PU^"-H:-.H]fUOZddc[J]R@GfdQ[a+\GFN1#BAC?/(=(D:TOCVedVUS664H`d@M]<S]GFC#""6GP9"/%XB+/-,**, -8#62D?9?235/V\`#>S0+"# %1/5IB9,&.D^^\bb\GM]
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 77 e5 74 81 7d 0b 1f 4e bc b8 f1 e3 c8 93 2b 5f ce bc b9 f3 e7 d0 a3 4b 9f 4e bd ba f5 eb d8 b3 f7 06 ae bd bb f7 ef e0 c3 8b ff 1f 4f be bc f9 f3 e8 d3 ab 5f cf be bd fb ee dc df cb 9f 4f bf be fd fb f8 f3 eb df cf bf bf ff ff 00 92 17 5f 80 04 16 68 e0 81 08 26 a8 e0 82 0c 36 e8 e0 83 10 de 17 5c 84 14 56 68 e1 85 18 66 a8 e1 86 1c 76 e8 e1 87 c4 4d 08 a2 69 22 8e 68 e2 89 28 a6 a8 e2 8a 2c b6 e8 e2 8b 30 c6 28 e3 8c 34 d6 68 e3 8d 38 e6 a8 e3 8e 3c f6 e8 e3 8f 40 06 29 e4 90 44 16 b9 9e 01 0e a8 b8 81 03 25 1a e9 e4 93 50 46 29 e5 94 54 56 59 1c 00 37 ec 93 a2 03 57 34 69 e5 97 60 86 29 e6 98 64 96 e9 24 96 5a a2 c8 a5 97 66 b6 e9 e6 9b 70 c6 29 e7 9c fe a1 b9 65 97 74 e6 a9 e7 9e 7c f6 e9 e7 9f be d9 a9 26 9e 80 16 6a e8 a1 88 26 aa 28 a2 82 4e d6 e4 Data Ascii: wt}N+_KNO_O_h&6\VhfvMi"h(,0(4h8<@)D%PF)TVY7W4i`)d$Zfp)et\|&j&(N
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: e0 05 a0 78 53 c7 36 73 46 40 40 28 db 3e 18 c1 81 3f 42 b8 00 1c 29 20 80 00 0f 3c 1c a0 a4 00 33 50 34 42 0c 24 9c db 46 9d ff 27 c4 b8 61 9b 6d 28 4b 81 0b 2c 10 09 0e 8b 22 02 18 40 8f f5 80 62 c0 93 1c fc e2 66 8a 0b d8 40 c0 0f 07 a4 18 23 bb 96 6c 48 41 9d 26 02 b0 c1 9c 10 36 08 c1 8d 1d 44 40 51 1e 3c d6 19 10 cd 34 d5 5c 93 cd 36 dd 7c 13 ce 38 e5 9c 93 ce 3a ed bc 13 cf 3c a9 2a 50 28 19 64 08 2a 92 45 d4 d1 a2 0a 70 cc a9 62 07 1b 6c a0 70 a3 0b 0f 1c a1 c2 e4 80 42 2c 04 7b 1c 28 e4 0a 00 24 68 e1 09 43 ea b9 a0 80 0e 0a 69 01 1c 70 5e cb f1 36 13 12 b1 30 0a 1e cf 28 07 48 47 90 08 c0 8f 0b 84 42 52 c9 6d 3a 89 0e 49 6e 2e 78 07 3b 96 7c b8 32 cb 07 6c e0 a2 92 f1 54 d8 21 00 52 eb 79 22 23 3d a5 9d 96 da 6a ad bd 16 db 6c b5 dd 96 db 6e bd Data Ascii: xS6sF@@(>?B) <3P4B$F'am(K,"@bf@#lHA&6D@Q<4\6\|8:<P(dEpblpB,{($hCip^60(HGBRm:In.x;\|2lT!Ry"#=jln
2024-10-30 16:10:06 UTC	2048	IN	Data Raw: 25 64 cc 03 16 1c 60 05 1a 20 c0 01 74 39 0f 73 98 03 09 01 70 82 03 8a 40 01 00 bc a0 03 22 30 07 3f 42 20 07 19 fc 21 04 42 18 00 80 19 11 e5 1f 6b 93 07 36 40 c0 01 04 4a de 06 87 b9 d5 ae 7e 75 29 1f 24 d3 35 aa b9 d6 48 43 b3 ad 73 3d 3b 8a a4 e0 1f 18 98 48 3b e8 12 62 75 56 95 98 ef d8 03 26 10 21 03 05 9c 38 02 13 30 81 19 0e 80 04 3e 2c 40 04 de f5 33 0f 20 20 e8 1d 1c 00 ff 00 4c 20 80 21 cc 41 56 50 8b c2 0b 32 c8 c2 04 16 c0 82 fa 76 00 97 fc 70 80 22 f0 41 85 05 dc 60 00 1e 08 f0 3c a4 ac 04 19 20 80 07 77 28 a9 aa fb d9 65 58 13 bc e0 af 1e 33 ad 75 ad 70 81 e1 7a e1 0e e7 4f 0a b8 c1 0d 17 0c 20 d8 f5 5a 8a 74 2b 8a 8f 00 e0 57 0e 08 78 f6 0e 22 00 02 36 d4 f8 c6 2c be 76 04 56 90 ed 6d 17 5a 05 04 f8 42 99 06 60 01 0b 78 c0 0b 00 88 6a 06 Data Ascii: %d` t9sp@"0?B !Bk6@J~u)$5HCs=;H;buV&!80>,@3 L !AVP2vp"A`< w(eX3upzO Zt+Wx"6,vVmZB`xj
2024-10-30 16:10:06 UTC	8949	IN	Data Raw: 75 ae 80 12 70 c0 04 38 29 54 71 00 09 94 94 1d 80 40 05 48 00 05 1c 00 57 41 40 05 b0 40 04 98 43 3e 24 53 0c 90 00 a1 cd 43 3e dc 01 07 f0 aa 7a e1 11 12 c4 40 1c 28 01 a1 85 a0 e9 66 b0 70 a1 25 6c b6 ae 07 af ee 07 87 70 2b 95 43 0b 50 41 b6 be 03 d1 ba 83 05 98 30 b6 2a e0 51 e6 6e b1 ee 2e 08 fc 01 86 da dc 0c 0f 2f 22 20 01 08 40 82 21 a1 42 0a 88 40 f8 6a 03 33 01 00 0e c4 ff 80 39 10 c2 09 b4 43 a0 ea e9 90 22 40 e1 06 2f 00 cf 83 75 8a 49 9c 72 00 00 68 41 0d 50 04 07 ac 00 1a 94 c0 3b 68 42 0d 68 01 00 d4 81 93 62 01 16 88 03 07 88 00 22 50 70 16 a4 b1 0c 00 1f 02 5c 80 07 00 30 08 88 80 08 a8 97 d5 0a 01 09 4c 80 06 14 d5 3c 04 c0 1d 64 ac 05 10 1a 20 01 00 08 f0 71 51 61 b0 06 2f 72 b1 be a6 5a 8a 30 24 63 5c 24 47 f2 ed 9a 43 3c 4c 6d 2a b6 Data Ascii: up8)Tq@HWA@@C>$SC>z@(fp%lp+CPA0Qn./" @!B@j39C"@/uIrhAP;hBhb"Pp\0L<d qQa/rZ0$c\$GC<Lm
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: a8 95 b2 e2 a5 58 db db ec 6e 37 90 b7 ed ee 78 cb 1b 3a e0 9e b7 bd ef 8d ef a9 c2 3b df fc ee 37 5c ea ed ef 80 0b 7c e0 26 dc 37 c1 0f 8e 70 ac 00 3c e1 0c 6f b8 c3 7b 66 f0 87 4b 7c e2 a5 31 12 c5 2f 8e f1 8c 33 4d e3 1c ef 78 c5 c5 e3 f1 90 8b 7c e4 dc 89 38 c9 4f ce ed 85 a3 7c e5 2c 6f f9 59 4c ee f2 98 73 5a e5 32 af b9 cd 6f ee 14 98 e3 7c e7 43 a6 39 cf 7f 0e f4 96 eb 3c e8 44 67 b0 cf 8b 8e f4 a4 53 7c ff e8 4a 6f fa 54 8f ee f4 a8 4b 9d df 4c 9f ba d5 d3 09 f5 ab 6b 7d eb d7 ae 3a d7 bf 2e c8 ac 83 7d ec 64 af b3 d7 cb 8e 76 10 8a 3d ed 6c 6f 3b 84 cf ee f6 b8 d3 6e ed 72 af bb dd a1 0a f7 bb eb 1d 68 74 df bb df ff 7e c8 bc 03 7e f0 c5 ea 3b e1 0f 8f 78 0f 0a 3e f1 8c 27 92 e1 1b 0f f9 c8 1b 6d f1 92 af fc 8d 1e 6f f9 cc 6b 9e 58 94 df bc e7 Data Ascii: Xn7x:;7\\|&7p<o{fK\|1/3Mx\|8O\|,oYLsZ2o\|C9<DgS\|JoTKLk}:.}dv=lo;nrht~~;x>'mokX
2024-10-30 16:10:06 UTC	2804	IN	Data Raw: 58 81 04 a8 80 85 92 83 26 a0 72 c5 1e 69 51 a8 6f 2d 9f 80 5c f6 72 30 17 73 32 6f 01 09 50 00 2a e0 01 10 68 f1 35 6f 73 37 78 f3 03 90 ed 19 68 01 1b b0 81 4b cf 8a a3 12 74 69 9f f6 be fc 73 6a bf 76 13 d7 df 4b a8 01 2a 00 84 0b 88 02 f8 6e f2 15 f0 01 11 88 01 41 b9 13 b3 e6 02 1b 88 03 09 08 04 08 90 80 30 51 00 4c 5e 80 0f 90 80 0b 00 04 1b 88 88 ec 7c 03 76 60 81 b1 ce 80 ce 50 05 40 58 e9 13 58 80 2b 00 01 21 28 81 2b 20 85 5a 20 82 2b 10 85 ff 2c df f2 c3 7c 41 01 f7 03 37 70 03 29 48 80 16 f0 02 1f 28 01 3c 90 80 53 48 81 09 60 f3 05 00 f3 42 80 73 1f 98 81 09 30 05 0f 87 6e 0a b0 21 54 30 03 6c 9f f9 13 2f 71 9a bf f9 a7 d6 5f 71 71 80 14 b8 82 34 4f 01 e1 01 00 31 f0 f9 1d 97 80 ea 4e 83 b3 36 02 01 10 80 19 77 2a 1f 40 f3 14 48 82 03 c8 01 Data Ascii: X&riQo-\r0s2oPh5os7xhKtisjvKnA0QL^\|v`P@XX+!(+ Z +,\|A7p)H(<SH`Bs0n!T0l/q_qq4O1N6w*@H
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 50 10 99 26 28 60 00 12 58 80 0f 5a d0 85 cd 93 3f f3 57 17 fd 8b 43 8f 7e e3 29 06 02 1f b8 04 b5 99 1b 76 c7 62 7c 02 5c f0 c1 00 64 50 05 14 08 20 06 6d 2f 35 1a fc 9e ee 25 40 1a 1c 00 00 28 c0 0b 1c 40 88 ed 43 3a a4 c3 13 b0 c0 02 a4 80 00 5c 80 e0 99 80 04 d8 43 1b ec c0 05 98 41 0e ec c0 07 40 df 15 80 c0 f5 65 1f b0 35 c1 0d bc 47 10 24 40 ed 95 1f 0b 1e dc f9 ad 9f 8a a9 1f 0c 02 8f 67 40 c0 3f 10 c0 62 ec 45 5d 50 5c 2a 3d 81 2d a8 42 8d ad 80 0f 6c 41 17 2c 40 02 0c c0 01 54 ff 81 18 f4 df ff c9 80 d1 19 c0 00 16 20 00 7c c0 0b d0 82 8f d9 c3 09 c0 81 24 a4 44 15 2c c0 15 9c 41 05 96 d9 28 a4 c0 11 ec 43 0e 7c c2 07 56 1f 0d cc 03 f6 a1 80 19 48 00 c0 11 1b ed 8d 5f 0b d6 21 b2 bd e0 0c 4a 98 0c e6 e1 ef ac 03 04 b8 c3 2a 70 00 31 75 8d 5c f0 Data Ascii: P&(`XZ?WC~)vb\|\dP m/5%@(@C:\CA@e5G$@g@?bE]P\=-BlA,@T \|$D,A(C\|VH_!Jp1u\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49759	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	717	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/-8GkZpBDzRJeT8NDENojkWJfl3ZVC-XMk-FdjmaA86A/2023-11-09_12-43-37-KEk.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:06 UTC	614	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 52418 Connection: close Date: Wed, 30 Oct 2024 16:10:06 GMT Last-Modified: Thu, 09 Nov 2023 01:49:44 GMT Etag: "9c01dfd69aa193ad5aac620045ce83f6" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: MNWt8RxEVfxxl3CBNM_IpBc592V6yl7s Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 ffdf2668ac264ec6d8784ccc7453073c.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: IHPU73dqrpHDKTQxp0AXUl5jUXzGzt4oVbQzkmT8hvZrPvml7kNw_g==
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1c 00 00 02 6b 08 06 00 00 00 ab d9 4a 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 01 31 23 a8 b5 e3 f6 00 00 20 00 49 44 41 54 78 9c ec dd 7d 5c 54 e7 9d ff ff 17 30 03 c3 3d 11 08 20 b7 32 e8 28 a0 88 a8 78 57 31 4a 48 b4 2b 49 25 89 37 6b d3 c4 6e 4d dd 24 36 4d 7f 69 36 69 fa 4d d2 a6 49 d3 6c 6c 9b 26 6b e2 76 4d 36 49 13 35 e2 da b1 11 63 d0 88 05 15 15 41 05 74 d4 51 6e 05 e4 26 dc df 0d c2 ef 8f 19 60 c0 41 41 19 c5 f8 79 3e 1e 3c 1e cc 99 73 ae 73 9d 33 07 ce fb 5c d7 75 ce d8 34 b5 b4 75 21 84 10 42 08 61 45 b6 b7 ba 02 42 08 21 84 f8 ee 93 c0 21 84 10 42 08 ab 93 c0 21 84 10 42 08 ab 93 c0 21 84 10 42 08 ab 93 c0 21 84 10 42 08 ab Data Ascii: PNGIHDRkJpHYs+tIME1# IDATx}\T0= 2(xW1JH+I%7knM$6Mi6iMIll&kvM6I5cAtQn&`AAy><ss3\u4u!BaEB!!B!B!B!B
2024-10-30 16:10:06 UTC	576	IN	Data Raw: e0 05 bc 91 69 a4 b6 80 6e 68 a5 2e 1a 86 29 69 ea a2 52 b1 de 0a 8a 16 53 d3 65 37 4a 53 8b c5 92 64 93 9f 58 26 95 e0 26 36 69 8a a6 e0 05 2d 14 d4 80 12 30 41 10 74 44 9c df 1f 33 c0 70 1f 10 44 e9 79 bf 5e f3 12 ce f9 9e ef 79 ce 99 23 e7 99 ef e5 cc 6c af 2c 62 f6 56 6d cd 45 d2 f5 fc 00 00 20 00 49 44 41 54 70 f2 5d 82 2f d1 ac 8b cd a8 5c 58 76 86 a8 b0 3d d8 ce 5e 82 77 f7 16 3c 4e 71 07 cc f0 5c 95 cc 99 55 ee 98 b7 76 28 42 88 bb ea 8f 95 70 94 64 10 13 e2 83 ab b3 23 76 ce 6e 4c 09 89 23 b3 a2 19 5f fb c9 70 b3 92 a8 57 dd e8 e7 30 8f 98 4b da 55 79 49 ac f7 f7 c2 d9 c1 11 3b 57 2f e6 47 a4 50 58 a3 f9 5f 87 6e f9 1a fb d1 76 f7 cc de cc be e8 25 b8 3a eb 7c 1a ad 37 be aa 52 d7 7b 60 37 29 9a 73 ba 0b 8f ae a5 9f 83 4f 65 8b 82 6e 7d 0e ae 78 Data Ascii: inh.)iRSe7JSdX&&6i-0AtD3pDy^y#l,bVmE IDATp]/\Xv=^w<Nq\Uv(Bpd#vnL#_pW0KUyI;W/GPX_nv%:\|7R{`7)sOen}x
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 7f 7c 50 ad f3 c1 2f 3a a3 f6 fd 94 28 79 d3 7d 16 3b bb 2e 61 57 52 12 49 3b 96 68 f6 53 bd bb e0 c7 f7 58 ba c7 9e d7 d7 6f 66 c1 a3 66 7a c7 57 ce e9 89 c9 d8 9e 8a e5 a0 4e 18 a9 87 f6 a0 72 f6 62 74 77 34 63 19 26 79 55 d6 a7 fc 98 d9 e6 bb 98 ee bb 96 63 25 b5 54 58 af 68 de 58 57 c8 d3 ab 36 b3 f5 19 7b fd 36 29 2b 22 35 6a 23 51 26 6e cc 71 b7 6b b8 fc e5 cb a4 63 43 47 13 ed ef 19 4a 62 52 fa e1 3d d2 0e f3 47 dd f0 cc de c8 ce 6a f7 a8 5e de 01 9a 56 8e 2f b2 2a 5b 37 02 02 f0 ee 5a ff ae f6 85 87 73 6e e8 0a f6 24 29 d9 15 fc 04 59 e1 b3 98 af f3 7e 9e 8b 9a 85 47 68 16 4f 7f b0 87 94 a4 04 22 9f 55 11 e6 ad ed 1a b2 7c 82 f1 e3 21 6a af ce fb 99 7f 88 44 a5 02 ef b1 3a 89 8e 72 2d 2b 4f 3a b3 3a 46 49 d2 ee 50 c6 5d 08 67 ba af 17 d3 df 29 64 Data Ascii: \|P/:(y};.aWRI;hSXoffzWNrbtw4c&yUc%TXhXW6{6)+"5j#Q&nqkcCGJbR=Gj^V/*[7Zsn$)Y~GhO"U\|!jD:r-+O::FIP]g)d
2024-10-30 16:10:06 UTC	15990	IN	Data Raw: 41 40 96 f9 fd b1 0b 2c 97 05 54 d6 eb f7 fd 7a f1 02 66 9f 79 e6 3b cf cc ee 7c f7 99 67 66 7c 70 6a 05 1c 8f 64 48 57 6f 5c 82 76 19 38 10 17 90 b2 37 0d a7 6e 90 34 63 42 45 32 13 b8 38 89 3c 8d ae 48 71 01 97 80 36 ad 2d aa cc 69 d5 da fa fa ea a9 a1 84 84 4f a3 48 7d c9 47 7b 1a e4 86 cb 68 b5 69 65 03 87 32 c9 ba c9 7a 84 10 e2 7e 24 09 c7 2d b0 e7 e0 09 de 5d f8 f5 ed 0e a3 42 ce ce 58 36 9e 03 70 c6 bd b7 05 50 42 c2 9a 35 c4 14 82 53 40 28 3f ee 5e cb ae 43 1f 30 bd 1d 64 ef 89 24 fa b8 0d 9e 6f 4c c4 b7 fc 2c 8a eb 50 82 de 98 88 a7 2d e4 fd 9e 4e 42 21 64 c4 9f 31 70 20 be 48 d6 ef 90 ba 36 8a e8 87 c6 b1 f5 a7 68 92 57 f4 27 6f 65 28 23 57 a5 69 8b e4 5e 24 a3 de a8 1b 50 4f 75 b9 f1 c4 7c f6 00 41 c3 fa 60 70 38 6f 6d 65 5a d9 e0 dc 2c 9b a4 Data Ascii: A@,Tzfy;\|gf\|pjdHWo\v87n4cBE28<Hq6-iOH}G{hie2z~$-]BX6pPB5S@(?^C0d$oL,P-NB!d1p H6hW'oe(#Wi^$POu\|A`p8omeZ,
2024-10-30 16:10:06 UTC	3084	IN	Data Raw: 97 1e 7d 8a e7 07 3d ca f1 d3 bf 55 99 7c fe 50 04 af 7a ba d1 d5 c9 0d 8f 97 3e 22 a1 da 57 e5 e2 d3 5b 78 ff a5 a7 e9 5e 7e 6a e6 d3 54 2e 57 f4 92 a4 32 df c9 85 57 37 a5 92 b8 32 08 8f 5e 2e 74 ed f5 34 2f 7c b4 af ca e9 1b 34 e7 d9 1e e6 5f f1 fa ab 2b 0f b1 3d dc 85 ae 1f a5 ea 2f 89 f4 af e7 e8 4e 03 b9 e1 f1 d2 1c b6 9f ad 63 4d bf 0e a2 eb ab 91 24 7c 3d 87 17 dc 5d b4 f3 4c 8a 20 b1 4a fc fa 75 ba d0 7b 48 08 9f a6 5e d6 bd 76 99 ed 6f b9 d0 35 6c 1f c5 d5 eb ed 35 87 c4 e2 f2 65 6c 20 f1 bf 7a 71 e9 96 71 39 35 92 d7 87 3c 51 59 ef 31 fd 5a 80 3f 0f b1 ea 8d a1 f4 ae ad dd b2 b7 f0 aa 93 0b f3 7f f8 8d cd 61 fe 15 65 fe 1d fd 9b 36 96 23 1f d1 d5 e9 69 fe b3 0f 12 fe f3 34 5d 9d 82 d8 9c 5d bd 05 b4 6d ef f1 9f 7d b0 6f 16 1e 4e da de 90 13 2b Data Ascii: }=U\|Pz>"W[x^~jT.W2W72^.t4/\|4_+=/NcM$\|=]L Ju{H^vo5l5el zqq95<QY1Z?ae6#i4]]m}oN+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49760	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	717	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/bA6_r0z7PmduA_pjPx1M6HWUeYsXkJzt-aD9tot8sKM/2023-11-09_12-50-22-jdU.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:06 UTC	614	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 51787 Connection: close Date: Wed, 30 Oct 2024 16:10:06 GMT Last-Modified: Thu, 09 Nov 2023 01:50:41 GMT Etag: "4cc05b615065aaf5afbe6831cd18eaab" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: d_XMBOuxAds2YnxenqasvYO0sjbHlZmY Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 eb6e5773d654b9aeadbed8169564506c.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: 7070lor2FAC9eHrop9apchvRhfb2dUT-Kuse3o6EIcspr550LJ1ckA==
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 23 00 00 02 66 08 06 00 00 00 8e bf 80 6e 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 01 32 1c 35 fe 9d 08 00 00 20 00 49 44 41 54 78 9c ec dd 7b 5c 55 75 be ff f1 17 b0 37 6c ee c4 25 40 ae b2 d1 ad 80 02 a2 e2 6d c4 94 2c 6d a4 46 ca db 58 67 f2 cc 58 9e ca 69 9a 5f d3 a9 69 4e 35 75 72 1a 7f 39 33 4d 1d cb 33 47 3b d5 34 66 e1 cf b0 d4 0c 4d 18 6f a8 08 2a a0 3b d9 c8 55 40 2e 71 91 9b 9b cb ef 8f bd 81 0d 72 57 dc 58 9f e7 e3 e1 e3 21 7b af b5 be df b5 d6 17 d6 7b 7f bf df b5 b6 45 7d 63 73 3b 42 08 21 84 10 66 62 69 ee 0a 08 21 84 10 e2 87 4d c2 88 10 42 08 21 cc 4a c2 88 10 42 08 21 cc 4a c2 88 10 42 08 21 cc 4a c2 88 10 42 08 21 cc 4a c2 Data Ascii: PNGIHDR#fnpHYs+tIME25 IDATx{\Uu7l%@m,mFXgXi_iN5ur93M3G;4fMo*;U@.qrWX!{{E}cs;B!fbi!MB!JB!JB!JB!J
2024-10-30 16:10:06 UTC	576	IN	Data Raw: 01 69 01 75 07 ec 34 fa d1 9d d4 5d 40 cf a2 96 f8 c0 c2 28 21 5d f4 50 51 72 34 75 25 75 71 fd 81 5f da 28 39 ea ca 42 49 d2 ca 43 ac 94 73 0c d8 55 9b 64 71 3c 29 ac 82 9c 83 48 b6 40 6b 8c a5 42 90 23 d2 7c ff 98 01 86 df 83 a2 28 be 9f 8f 07 0f 9c fb be ee eb ba ee 7b 6e b9 6b 74 9a d2 00 00 20 00 49 44 41 54 df 73 5d ef fb 1e 66 5c 48 62 41 78 30 0b b6 d4 32 ff 3f ff 8b 22 5d 16 ab 7d 4a d9 f8 dc 56 0a 9a 2b b2 f1 fc 49 5f b5 c6 d2 ff 5c f6 45 ba 91 b3 6e 09 29 c5 80 fa 15 8a f4 59 ac 9f 08 93 e2 b2 28 d2 6f 65 8e 73 67 47 c0 c8 a9 6d 0b 59 b0 0b 9e ff 53 2e 45 47 32 58 7c 23 89 d7 d3 da 96 aa cc 8a 61 56 fc 59 26 6d 3a 48 91 fe 20 5b 7c 8e f3 ea 9c 0d 1c 6d 00 e7 e0 ad 14 e9 77 10 0e 84 ef d0 53 a4 7f 05 7f b0 fd 9c ee 92 91 82 8d b3 88 3c ec c6 96 Data Ascii: iu4]@(!]PQr4u%uq_(9BICsUdq<)H@kB#\|({nkt IDATs]f\HbAx02?"]}JV+I_\En)Y(oesgGmYS.EG2X\|#aVY&m:H [\|mwS<
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: df 63 0a 1e 13 60 6a 3e 8d 7a 3c 7f 2c fb b9 e4 60 ad 55 25 e6 f7 a9 f5 b8 98 f7 b1 d3 e3 d4 52 69 ae 29 66 8c da f4 c6 a7 d7 ac 16 5e 33 1d 59 69 f5 1e 5c cd 35 bd fe f3 76 6d dd 68 df 56 a1 e9 f7 ed 8e bb cd e7 74 cb 6b cb 7b dd f2 de 17 b6 39 d6 e6 ae 9d 35 7d fc d6 5b a6 4f 2e 74 bd 4b 42 88 fe 73 fe eb ef 4c b5 df 35 b4 5c df 9b af f7 7d 15 3f d4 7f 6f 34 0d ac 9c 11 5d 1c 1a af b8 2e 56 b6 7e 8a 2f 2f cc c2 38 3d c1 3c da d1 6c 8c 37 53 49 a2 bc 1a 18 69 d9 62 a4 f5 c7 ce 4b 9c 3a 5e 81 e2 29 0d be 76 ad 4b 95 3e 1a 7c 1b 74 94 1b c0 7f 64 db 16 95 da e5 1c d4 b6 5d 36 d4 4e 41 07 1e 23 70 b1 aa d3 d6 fe b5 f2 26 28 d2 9b c4 0f 8f 53 1e ae c2 b3 a2 90 4f aa b5 84 4f 77 03 a0 e4 4c 1e 4c 4f c2 df c1 6a 13 3b 6f a6 3e e3 46 e2 ff 9c c5 10 e5 dd b1 4f Data Ascii: c`j>z<,`U%Ri)f^3Yi\5vmhVtk{95}[O.tKBsL5\}?o4].V~//8=<l7SIibK:^)vK>\|td]6NA#p&(SOOwLLOj;o>FO
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: 89 74 b2 bf c6 f6 45 f7 cf a1 f5 14 7f dc db 00 8b b2 78 41 82 88 10 c2 c9 c6 56 18 69 ae a4 ec 3c 10 a2 25 74 b6 06 0d 50 fb 7e a5 c3 4d 17 a0 85 8a ec 35 ec fe f3 a7 8c 0f 88 20 72 91 16 ef e6 d3 e8 36 67 f2 e6 65 5b 09 d3 91 f5 6c ca 3b 4d 93 8f 96 c8 45 11 04 bb 7e 8a 7e e7 1a 0e 9c b1 df 30 2d 35 e8 36 64 51 78 be 03 55 58 14 91 0b 82 19 6f d2 b3 fb a9 6f 76 a3 2c 3b b8 0b a3 a7 96 f0 05 1a 7c 3a cd 54 1c 3c 40 49 33 f8 fe 74 13 1b 53 22 f0 01 78 30 8e 8d 1b e3 50 bb 0f d1 d0 bc 24 52 42 5c e9 a8 38 4c e1 f9 db b0 5f a6 4c 47 de ff e7 47 c8 4f 23 08 ba af 03 73 c5 01 9e 5d b3 91 7d 7f f3 21 e4 a7 11 68 3c 6f 60 ae 38 40 8e a1 5f 50 2b cb e7 f0 95 a9 3d 65 4c 45 59 3c db b3 7c d4 41 6d 9e ed fa 5a fe e3 27 44 2e 8a 40 75 fd 34 ba cd bb d0 f7 d9 f7 60 Data Ascii: tExAVi<%tP~M5 r6ge[l;ME~~0-56dQxUXoov,;\|:T<@I3tS"x0P$RB\8L_LGGO#s]}!h<o`8@_P+=eLEY<\|AmZ'D.@u4`
2024-10-30 16:10:06 UTC	2059	IN	Data Raw: ca ab b7 91 d8 53 45 73 0f 80 07 b7 eb 36 d9 3b 76 b2 7c a6 15 23 da 46 e2 9a 02 96 d3 43 c7 a7 c1 36 0d c7 13 64 d3 48 c7 c5 c1 29 d6 df 45 fb 59 0b 79 73 12 47 c2 dc cc 4d 54 96 0c 9e 63 e8 1a 79 2c e4 ed 2c c6 19 63 c5 98 16 47 de d3 05 c4 0f b8 e8 1e 1c 72 5f d3 0e 8e 04 8a a9 dc 91 4b fc 34 03 eb cc 7c 2a 77 64 d0 fd 7a 0b dd 21 ab 0b 69 db f6 f3 42 56 0c d6 68 1b 89 eb 8b d9 38 dd cb e5 cf 7d 10 61 c1 88 b6 62 89 04 4b 94 15 23 da c0 12 31 76 f8 96 68 83 a9 51 91 10 19 c9 d4 68 03 c3 02 cc 74 b0 64 fa 55 9a 3b 87 d2 c8 55 3a 5a bc 24 2e 74 60 1b ae 99 4f e5 9e e0 7d 37 66 24 b3 f9 e0 ab 2c 67 e4 5a fb db 0e b3 e7 13 07 e5 af 15 93 32 c3 c0 98 e1 60 fb cb c5 58 9b 1a 68 1d b3 42 23 22 0a 23 22 f7 23 f6 ef 99 1a 32 c9 19 53 a7 86 1f 5e 5a c3 89 3d 59 Data Ascii: SEs6;v\|#FC6dH)EYysGMTcy,,cGr_K4\|*wdz!iBVh8}abK#1vhQhtdU;U:Z$.t`O}7f$,gZ2`XhB#"#"#2S^Z=Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49762	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	736	OUT	GET /kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/assets/opensans/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2 HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://knowledgebase.campaignagent.com.au sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:06 UTC	796	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 39372 Connection: close Date: Wed, 30 Oct 2024 16:10:06 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT Last-Modified: Thu, 02 May 2024 23:50:29 GMT Etag: "40b6965b5cd26213faf61e5ab6765bb9" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=31550000, immutable X-Amz-Version-Id: JfkorgZHH9AdR8ytWmZ22PxSMOLBjxQS Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method Via: 1.1 da9380f22ff2303fc2fd4652bf7ec7ba.cloudfront.net (CloudFront) Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: rluFkCDZxhrRquMzSwN4KJo0Ryz27olK_C84jD49Q-UANgS6Iw28hQ==
2024-10-30 16:10:06 UTC	15588	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 99 cc 00 13 00 00 00 00 ff 7c 00 00 99 5d 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 62 1b 20 1c 84 50 3f 48 56 41 52 88 78 06 60 3f 53 54 41 54 81 24 27 1e 00 82 0c 2f 56 11 10 0a 81 8b 58 f2 75 0b 84 1e 00 30 82 c7 0e 01 36 02 24 03 88 38 04 20 05 87 7e 07 20 1b b0 ef 15 6c 9b 56 b3 db 06 30 e3 59 dd 38 f5 d2 09 37 46 1e 36 0e 08 db 6c ee 33 12 21 6c 1c 00 22 b1 e3 93 ff 4f 49 4e c6 10 ec c1 9c a9 96 fd 87 c8 42 04 5c a8 46 b6 ab 21 93 3a 04 0b a3 1a d3 86 56 9b 51 79 c5 7d 0d 07 d6 33 b2 57 84 8e a4 48 22 3d b0 55 c8 e5 c2 24 95 9a 28 25 3c 1c c2 46 af 68 24 dc 64 07 c6 36 85 10 d1 69 09 b1 6f ea a2 f6 60 88 bd 1d 58 81 ae 18 82 0f bd a7 fd f2 62 f1 d0 e1 4b b4 79 35 f2 af da 9f 49 4c bc a2 Data Ascii: wOF2\|]b P?HVARx`?STAT$'/VXu06$8 ~ lV0Y87F6l3!l"OINB\F!:VQy}3WH"=U$(%<Fh$d6io`XbKy5IL
2024-10-30 16:10:06 UTC	1156	IN	Data Raw: ae c5 11 80 67 1e 62 e2 5a 45 ae 46 5a 1b 28 8e d4 54 50 34 81 5f 5a 4e 73 41 78 6a 2f 2c d7 c4 26 f5 ff 1a a6 06 ca ae 53 08 48 87 a3 f1 7f 2b 18 43 db 05 51 08 c3 8e f7 0a d0 9a 1e 82 34 c5 09 59 b4 3c cf 4e 65 8b 9d 55 2e 8f d3 5c 3c 64 5b 86 08 0f 45 6c 4a 54 83 13 ef c2 0b 7e 79 22 83 71 06 d6 4f ac f4 6a c2 35 dc a2 cf 7f 16 8a cd 33 85 42 3e e5 b4 31 44 0a c5 d2 31 f8 ec e7 b5 9d 58 79 ae 5f af 8b a9 fa f6 da d8 ee 42 cb 0d 6d 77 bb b9 3a 18 f4 d9 75 9b 9f d1 e0 e2 e1 63 5d 2a 49 b1 ac 83 b4 e9 ba 8a c1 e4 61 74 f2 a7 7e 17 f1 8e 1e 42 d9 04 c8 fc ab 56 b5 fc 25 60 2d d5 91 aa 55 31 12 ce 87 9a 22 4a 24 f0 cd b4 81 2d 76 2b 69 16 6f a6 35 2a 2c 89 9e d2 1b e1 d2 db 27 4f 3c ff 8a 5e e3 f4 a4 3e d3 25 9c 14 d1 29 1f b8 a0 54 c3 eb 1a 71 bb d9 94 a5 Data Ascii: gbZEFZ(TP4_ZNsAxj/,&SH+CQ4Y<NeU.\<d[ElJT~y"qOj53B>1D1Xy_Bmw:uc]Iat~BV%`-U1"J$-v+io5,'O<^>%)Tq
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: f9 d7 5c 3e 0f 20 87 05 65 0b ce 06 20 3e db 68 1c 0e 6b 42 61 ee 4f 90 3e 6d 1b 59 f0 e4 f5 ec be 26 04 97 92 ca 55 cf d9 73 f0 21 b7 9f 70 a6 4e 3a b7 4c 13 bb 13 93 d6 73 40 be 6b 09 84 30 62 56 b0 cb b6 0d 22 fd 7a 5f a5 08 84 46 19 ae 35 6a c2 56 72 41 e5 52 81 38 b5 97 01 ef 74 5e 54 68 45 e2 09 d6 17 76 93 5f 7f 97 b8 1a 93 21 1a 47 1e e5 6e a8 be c5 f5 ff ec 59 8b 0a da 8f f6 26 2c 36 9d 6b 67 e4 83 fd 05 ad b5 05 84 5a b3 22 f5 86 c2 91 2a 19 d8 20 07 f2 ef 3a 3d 78 47 47 29 c6 59 17 b3 24 87 66 d3 1f f0 eb 97 71 8f 39 32 34 3f f4 f0 0c a3 b7 b6 55 59 e1 d1 ae 25 2b 08 33 1b 9d 6e 9e 77 fb fa 22 bb ba 1b c0 2f b9 81 76 30 9a 05 c4 f8 84 84 05 f6 2d 1a 45 8c 88 0c 68 12 c1 38 ad ed 27 cf 3c d7 24 29 f0 6d 02 6f 3d 26 89 09 66 36 70 e3 c3 4c 67 e1 Data Ascii: \> e >hkBaO>mY&Us!pN:Ls@k0bV"z_F5jVrAR8t^ThEv_!GnY&,6kgZ"* :=xGG)Y$fq924?UY%+3nw"/v0-Eh8'<$)mo=&f6pLg
2024-10-30 16:10:06 UTC	6244	IN	Data Raw: 52 6e f2 6d 43 c7 76 ad 54 f6 f7 f7 bd b7 cf e7 4f c2 66 c9 de af 69 92 76 9b 54 82 a0 f9 a2 48 f0 ba 6b db c9 bb 59 2c 6e dc 3c cc 0f cd 11 3b ee 1a 8d 2c f8 54 ec fa b3 2c 71 59 38 91 3e 4b df fe 70 f0 c7 8f 97 f7 72 0a f1 b1 92 a3 47 76 82 b4 fc 9e d6 b6 e3 76 1a 91 af 49 2d ff f6 a1 8f bd 8d 89 06 60 89 29 b8 5f d3 8c 1b 8d 1a d7 e9 36 5f 64 1e a2 d6 2b 95 e2 dd ac 11 99 fd 43 c3 2d 85 c2 16 fe 1a 3a 92 f1 57 95 e9 91 5c 1f da 40 d8 09 b6 2c 58 20 66 68 66 4c 63 5b 76 68 6a be 04 b5 27 34 35 64 8c 04 c9 ce 73 75 c5 69 a4 80 19 29 9a 13 01 8d 81 7d f0 24 96 69 0a 52 ab dd 7e bd 70 80 9a cc a5 4c f1 96 ed 21 50 22 c3 f5 51 39 be 58 5f a0 4c 8d ac d7 69 e3 6e a1 d6 30 15 29 5e ed 43 f2 65 fa 1f d3 d1 28 aa a8 e2 04 8c cd ec c2 b2 27 c2 a8 bb 85 d0 3a b3 Data Ascii: RnmCvTOfivTHkY,n<;,T,qY8>KprGvvI-`)_6_d+C-:W\@,X fhfLc[vhj'45dsui)}$iR~pL!P"Q9X_Lin0)^Ce(':

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49758	18.66.102.98	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	546	OUT	OPTIONS /v1/events HTTP/1.1 Host: events.elev.io Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://knowledgebase.campaignagent.com.au User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:05 UTC	680	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 0 Connection: close Date: Wed, 30 Oct 2024 16:10:05 GMT Access-Control-Allow-Credentials: true x-amzn-RequestId: 7e80da9a-29f5-42ae-9669-0eb4dcc96900 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type,X-Amz-Date,Authorization,X-Api-Key,X-Amz-Security-Token,x-elevio-debug-temp x-amz-apigw-id: AeMOsEcQIAMEJVg= Access-Control-Allow-Methods: OPTIONS,POST Access-Control-Max-Age: 86400 X-Cache: Miss from cloudfront Via: 1.1 80a51c83bb9479e2a3aa1ea59b366458.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: S_Od1Esnh8vAEjycqFDp6W54cEpx8a80q52CUWkzrcHm51QV2NNG2w==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49763	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	739	OUT	GET /kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/assets/opensans/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6FxZCJgg.woff2 HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://knowledgebase.campaignagent.com.au sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdn.elev.io/kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:06 UTC	796	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 42900 Connection: close Date: Wed, 30 Oct 2024 16:10:06 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT Last-Modified: Thu, 02 May 2024 23:50:29 GMT Etag: "ef7e7a205f0f00208a6edb007083c9ef" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=31550000, immutable X-Amz-Version-Id: b9BaT2qzLiTYGV2Q.27Zxj0laDZ1KDhe Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method Via: 1.1 b30b1c2659a3fb836783824fe37110ee.cloudfront.net (CloudFront) Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: K7WY8tWudzEotJHP_duLZEJ4WIyW-0u80bVWeAD-25ZZtmPJPq_Wyw==
2024-10-30 16:10:06 UTC	15588	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 a7 94 00 13 00 00 00 01 18 c4 00 00 a7 26 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 85 1c 1b 93 46 1c 85 54 3f 48 56 41 52 89 39 06 60 3f 53 54 41 54 81 20 27 1e 00 82 1c 2f 56 11 10 0a 81 90 40 fa 7a 0b 84 2a 00 30 82 da 10 01 36 02 24 03 88 50 04 20 05 89 08 07 20 5b 8a 0a 51 21 27 1b 5e ce 0d 01 4e 44 b9 5c 9a 1c a3 62 e3 0e 74 27 69 f9 d2 74 56 db 48 84 b0 71 00 20 c9 4e cd fe 3f 21 39 19 a2 a0 3b 24 da 18 bf fe 10 1c 46 a6 47 cb 10 4c 1b f1 c0 82 8c c0 86 a2 f2 24 84 cc 88 65 ca 36 1e 51 54 f3 36 12 31 68 4d cb f0 94 e0 0c 8e c3 19 d0 fd 5d b4 71 4d 0b 42 19 d7 14 22 5f ba 82 aa 86 f7 a0 c4 cf d7 71 3a b1 94 dd 3b f1 ee 8e e3 17 3a af 8d 46 4d f4 48 13 8f f8 4b 1a 88 73 fe fd b9 7f 07 c9 Data Ascii: wOF2&FT?HVAR9`?STAT '/V@z*06$P [Q!'^ND\bt'itVHq N?!9;$FGL$e6QT61hM]qMB"_q:;:FMHKs
2024-10-30 16:10:06 UTC	402	IN	Data Raw: e4 76 6e 6d 1f 97 f0 c4 42 88 84 43 80 8b 98 3e d1 33 03 60 c1 09 42 22 a3 0d 78 fb 90 e6 f5 81 d3 b6 31 4c 09 1b 07 87 d4 f0 50 46 44 1a b0 06 0c e6 52 99 53 64 9e 53 7b ba 99 c2 aa 09 48 d1 ed 93 d1 7d 64 e4 6d 61 5c bf 05 cd f3 aa ed 6a 73 4c ca 88 34 82 e1 bd 13 6f fa 7d 64 4d 74 8f 39 0e 6e 4a e5 73 a2 a5 7e ce 1b 49 c8 4d 16 7d c8 97 22 81 2c e6 5e 1a 35 66 4c c3 a6 bd c8 3a 87 51 9a b1 61 85 a4 ca 14 fc b7 ed a3 f3 9b 1b 96 08 17 8c 1c 62 33 48 d1 07 09 47 16 d0 c1 95 b5 ca 37 b5 26 bb c6 f9 39 b7 03 0e a2 2c 96 7d 5f 8b f0 62 1d ef 20 50 be 86 ce 3f 68 11 bb af 06 35 67 70 ea eb 59 27 2a b8 1f d4 83 81 65 12 37 bd de e0 b4 8b 42 69 b9 66 40 3c 0e 61 bc 76 8b 9b 43 bf 4d 4b c6 a1 95 9e 24 32 9a ce d4 d9 52 3a 13 ba 3d 80 e6 3d 5e 6b d5 67 b8 24 12 Data Ascii: vnmBC>3`B"x1LPFDRSdS{H}dma\jsL4o}dMt9nJs~IM}",^5fL:Qab3HG7&9,}_b P?h5gpY'*e7Bif@<avCMK$2R:==^kg$
2024-10-30 16:10:06 UTC	754	IN	Data Raw: 56 3a b2 0e 98 2a c4 99 cc da d0 da a9 a4 0c f7 d2 a0 08 20 2e e5 3f 31 ad 25 89 06 1c ad 92 60 a0 f6 16 a5 d6 37 05 68 76 52 24 50 a9 62 04 a2 ae b9 30 16 19 b4 ed 72 87 1c b1 a8 aa 40 30 1e 19 e7 f9 c6 22 bb 2a a9 9c bf 04 ed 1b ef 56 93 52 20 f2 b5 c1 88 30 37 b0 99 bd 4c 77 78 3f 05 15 1a cf f6 84 57 5d e4 6c 56 65 6c 49 1d c9 6c ac 1f 67 40 1c 56 25 02 f4 3f e2 10 71 47 57 d3 46 52 af 71 ae ac ff 5f 4b 89 c7 bd 8b 52 7c b8 ea c1 59 f0 e1 69 69 8a f8 b5 e0 ec a8 31 a3 ae 0f eb 6c 60 1f f2 3c e8 ff 61 ac bd 9f 6b 44 61 83 a4 93 cf 51 d7 2d 7a 83 87 0c 8e b2 6c f6 29 e5 94 f4 74 b5 d0 6a bc df 05 fc 18 16 b1 63 a4 1c 59 7e ef ed 6f c6 ac d2 a6 de 79 9d b0 53 fa ab d7 ee 84 d9 d4 28 a9 97 e1 33 f9 eb de 0c 75 16 99 76 44 e3 e4 e2 30 36 15 c7 bc 77 2e cb Data Ascii: V:* .?1%`7hvR$Pb0r@0"*VR 07Lwx?W]lVelIlg@V%?qGWFRq_KR\|Yii1l`<akDaQ-zl)tjcY~oyS(3uvD06w.
2024-10-30 16:10:06 UTC	16384	IN	Data Raw: cb 08 a7 b4 36 2b de 68 5b 18 fa 9f c7 f8 9a df 8f cf 6c c7 48 0b 7b 18 74 96 01 6d b8 ae 4a e2 71 c8 c2 8f a1 50 ae 4a 65 81 bf bf d8 b7 2d e0 20 07 39 6e 38 db 8a 10 50 e0 b6 d7 b5 3b 47 f4 11 ef 52 1e 08 da f0 f5 e3 85 ff be 23 6d fd bb 1e 02 9b 03 d7 3f 7f e8 63 6c 00 ab 2e ab ea 0e bb 12 60 0f 19 98 dd f3 4b 78 ed 1c c0 c2 a5 f3 45 62 5c 76 f6 73 61 8a c3 64 a0 e4 88 d9 8d 73 cb 20 12 2e 84 1b 76 65 05 7d d9 88 c2 3e d3 1a bc a9 38 58 b9 40 a1 04 d9 8c c1 1f e1 a2 b8 51 fd c4 ae af a2 da 75 a8 6a a2 51 4a 48 50 e7 7f cb 20 63 d2 d0 f2 b3 3b 20 44 d9 2f 03 a2 ad 1e 06 bc 55 04 0f 83 f7 6f a7 ee 94 85 14 5c 80 db 43 e5 0f 96 4c 46 69 47 09 8a 4a c1 61 19 21 54 11 58 d5 f2 f5 16 d9 06 94 1c 92 99 54 41 37 a1 12 32 fa 25 ad 96 28 bb 58 89 f0 8a c8 93 88 Data Ascii: 6+h[lH{tmJqPJe- 9n8P;GR#m?cl.`KxEb\vsads .ve}>8X@QujQJHP c; D/Uo\CLFiGJa!TXTA72%(X
2024-10-30 16:10:06 UTC	9772	IN	Data Raw: 13 3c c8 ca 94 70 df 3d c5 b6 ad db 70 cb 3d b7 73 71 85 d3 3d 01 cb a4 53 e9 32 f1 cd dc 10 ec 42 97 12 b4 67 e4 47 a6 dd 54 d1 3b fe a4 7d a6 0c 95 52 43 8b f0 6e c0 fd 43 b6 b2 f9 e9 8e 8b 78 95 38 82 a1 96 0f 84 e9 59 23 49 38 44 96 6d c2 7b 60 a3 6a 35 db 8d fc ca 11 98 d9 99 24 58 b8 a3 16 31 57 eb 1a 4e e6 60 64 da e5 5a ee 8c 49 74 58 57 8b 0d ad d5 30 39 68 bc 47 93 4e a8 b6 8f 8a fc 22 f0 63 f5 47 d6 b4 83 42 49 68 55 a9 4d 62 76 a7 22 82 c9 f9 45 2e 1a 1b 12 c2 fa 88 2d f3 ec 51 d3 e0 17 0e 04 0a 14 9a d7 9d 29 62 49 0b 8e 4e 7c d8 e6 5c 3f dd 39 92 f1 a9 f8 07 ab 5f ac 72 b2 d9 2a ac 96 e1 df e9 44 7c f5 e1 ac 86 3d e2 2f d4 f1 11 d7 37 27 2b a3 d9 11 30 dc 52 9e 2d ae 8f 59 e2 05 bb 75 d8 d9 3c 69 20 d0 e4 c6 09 74 e2 9e 0d 43 0c b8 91 c7 0f Data Ascii: <p=p=sq=S2BgGT;}RCnCx8Y#I8Dm{`j5$X1WN`dZItXW09hGN"cGBIhUMbv"E.-Q)bIN\|\?9_r*D\|=/7'+0R-Yu<i tC

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bf2855ec-b01e-0084-57b7-2ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161005Z-16849878b78j5kdg3dndgqw0vg00000009x000000000qaaz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:10:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 48d00a26-901e-007b-7d77-2aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161005Z-r197bdfb6b4xfp4mncra29rqkc00000001u00000000013mf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:05 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:05 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f99c795-b01e-0097-3bfd-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161005Z-15b8d89586f5s5nz3ffrgxn5ac000000092g000000002g96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:05 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:05 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:05 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 09de4432-901e-0064-2428-27e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161005Z-17c5cb586f6z6tq2xr35mhd5x000000000v000000000ct4g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:10:05 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49769	104.17.24.14	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:05 UTC	389	OUT	GET /ajax/libs/emojione/2.0.1/assets/svg/1f4a1.svg HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:06 UTC	952	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:05 GMT Content-Type: image/svg+xml; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e50-9b9" Last-Modified: Mon, 04 May 2020 16:09:52 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 602742 Expires: Mon, 20 Oct 2025 16:10:05 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AA5a94Lv%2FNI24egRqgizBlKflWqFBJXY2B0gdy3LXr8a0xA38SVk0Z%2F%2Byz%2Bdi3MRU6tnQoijZNosMk6XuG0H1pqKhg2Y8UR0BIIRKjtDitlNFqIEbAFreo1G3MPkN%2BMcsBbOZrms"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8dacac6b1b483aa8-DFW alt-svc: h3=":443"; ma=86400
2024-10-30 16:10:06 UTC	417	IN	Data Raw: 39 62 39 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 34 20 36 34 22 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 36 34 20 36 34 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 63 65 33 31 22 20 64 3d 22 4d 32 34 2e 39 33 38 2c 34 38 68 31 34 2e 31 32 35 63 30 2e 38 33 38 2d 34 2e 33 31 33 2c 33 2e 35 31 33 2d 38 2e 35 30 35 2c 36 2e 33 31 35 2d 31 32 2e 38 39 38 43 34 38 2e 36 33 32 2c 32 39 2e 39 39 39 2c 35 32 2c 32 34 2e 37 31 36 2c 35 32 2c 31 39 2e 35 38 36 0a 09 09 43 35 32 2c 39 2e 38 38 39 2c 34 33 2e 30 32 37 2c 32 2c 33 32 2c 32 53 31 32 2c 39 2e 38 38 39 2c 31 32 2c 31 39 2e 35 38 Data Ascii: 9b9<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" enable-background="new 0 0 64 64"><path fill="#ffce31" d="M24.938,48h14.125c0.838-4.313,3.513-8.505,6.315-12.898C48.632,29.999,52,24.716,52,19.586C52,9.889,43.027,2,32,2S12,9.889,12,19.58
2024-10-30 16:10:06 UTC	1369	IN	Data Raw: 2e 31 34 37 2e 37 37 31 20 33 2e 31 36 39 2e 39 32 20 33 2e 37 35 38 20 31 2e 37 33 20 36 2e 39 38 37 20 32 2e 33 37 31 20 39 2e 34 36 34 68 2e 35 39 34 63 2d 2e 35 32 36 2d 32 2e 35 31 33 2d 31 2e 32 34 34 2d 35 2e 37 39 39 2d 32 2e 31 30 35 2d 39 2e 36 32 38 2d 2e 32 33 32 2d 31 2e 30 32 31 2d 2e 34 37 33 2d 32 2e 30 38 36 2d 2e 37 32 2d 33 2e 31 37 38 2d 2e 31 33 31 2d 2e 35 33 34 2d 2e 32 34 34 2d 31 2e 30 37 36 2d 2e 33 36 38 2d 31 2e 36 33 32 2e 38 33 32 2d 2e 31 38 33 20 32 2e 36 35 33 2d 2e 38 30 33 20 34 2e 35 38 34 2d 32 2e 38 38 39 20 31 2e 39 33 32 20 32 2e 30 38 35 20 33 2e 37 35 32 20 32 2e 37 30 36 20 34 2e 35 38 34 20 32 2e 38 38 39 2d 2e 31 32 34 2e 35 35 36 2d 2e 32 33 37 20 31 2e 30 39 38 2d 2e 33 36 38 20 31 2e 36 33 32 2d 2e 32 34 37 Data Ascii: .147.771 3.169.92 3.758 1.73 6.987 2.371 9.464h.594c-.526-2.513-1.244-5.799-2.105-9.628-.232-1.021-.473-2.086-.72-3.178-.131-.534-.244-1.076-.368-1.632.832-.183 2.653-.803 4.584-2.889 1.932 2.085 3.752 2.706 4.584 2.889-.124.556-.237 1.098-.368 1.632-.247
2024-10-30 16:10:06 UTC	710	IN	Data Raw: 30 37 34 2e 34 39 36 2e 30 35 39 2d 2e 32 30 36 2e 31 32 2d 2e 34 31 34 2e 31 39 2d 2e 36 31 34 6d 2d 36 2e 35 39 32 2d 34 2e 37 30 34 63 2e 31 36 34 2d 2e 32 34 38 2e 33 38 2d 2e 33 38 38 2e 36 30 33 2d 2e 33 38 38 73 2e 34 33 38 2e 31 34 31 2e 36 30 34 2e 33 38 38 63 2e 31 39 35 2e 33 31 2e 31 32 37 2e 37 33 32 2d 2e 30 36 34 20 31 2e 31 34 35 2d 2e 31 34 2e 32 39 32 2d 2e 33 33 33 2e 35 37 2d 2e 35 34 2e 38 33 38 2d 2e 32 30 38 2d 2e 32 36 39 2d 2e 34 2d 2e 35 34 36 2d 2e 35 33 39 2d 2e 38 33 38 2d 2e 31 39 31 2d 2e 34 31 33 2d 2e 32 36 2d 2e 38 33 35 2d 2e 30 36 34 2d 31 2e 31 34 35 6d 2d 36 2e 37 36 20 33 2e 34 39 37 63 2e 30 34 31 2d 2e 32 32 31 2e 31 34 36 2d 2e 33 33 36 2e 32 35 39 2d 2e 33 36 34 2e 30 36 32 2d 2e 30 33 2e 31 36 2d 2e 30 31 35 2e Data Ascii: 074.496.059-.206.12-.414.19-.614m-6.592-4.704c.164-.248.38-.388.603-.388s.438.141.604.388c.195.31.127.732-.064 1.145-.14.292-.333.57-.54.838-.208-.269-.4-.546-.539-.838-.191-.413-.26-.835-.064-1.145m-6.76 3.497c.041-.221.146-.336.259-.364.062-.03.16-.015.
2024-10-30 16:10:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:06 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:06 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161006Z-16849878b78zqkvcwgr6h55x9n00000007pg00000000msar x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:06 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:06 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:06 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: ef4969e5-401e-002a-2c3c-28c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161006Z-15b8d89586ff5l62aha9080wv000000009pg0000000035h3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:06 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:06 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:06 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161006Z-16849878b78x6gn56mgecg60qc0000000a400000000077tc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.6	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:06 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:06 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:06 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: bb81791c-801e-00ac-6687-29fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161006Z-17c5cb586f6r59nt4rzfbx40ys00000000kg000000002w7c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:06 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49774	18.66.102.98	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:06 UTC	657	OUT	POST /v1/events HTTP/1.1 Host: events.elev.io Connection: keep-alive Content-Length: 675 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Accept: / Origin: https://knowledgebase.campaignagent.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:06 UTC	675	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 77 65 62 2d 6b 62 2d 65 76 65 6e 74 2d 32 22 2c 22 65 76 65 6e 74 73 22 3a 5b 7b 22 61 70 70 5f 6c 61 6e 67 22 3a 22 65 6e 22 2c 22 63 75 73 74 6f 6d 65 72 5f 75 69 64 22 3a 22 35 64 65 35 63 31 65 36 38 38 31 33 34 22 2c 22 75 73 65 72 5f 6c 6f 67 67 65 64 69 6e 22 3a 66 61 6c 73 65 2c 22 74 69 6d 65 73 74 61 6d 70 5f 63 72 65 61 74 65 64 22 3a 31 37 33 30 33 30 34 36 30 33 35 32 32 2c 22 70 61 67 65 5f 64 6f 63 75 6d 65 6e 74 5f 73 69 7a 65 5f 68 65 69 67 68 74 22 3a 39 30 37 2c 22 70 61 67 65 5f 64 6f 63 75 6d 65 6e 74 5f 73 69 7a 65 5f 77 69 64 74 68 22 3a 31 32 38 30 2c 22 70 61 67 65 5f 70 61 67 65 5f 6f 66 66 73 65 74 5f 6c 65 66 74 22 3a 30 2c 22 70 61 67 65 5f 70 61 67 65 5f 6f 66 66 73 65 74 5f 74 6f 70 22 3a 30 2c 22 Data Ascii: {"type":"web-kb-event-2","events":[{"app_lang":"en","customer_uid":"5de5c1e688134","user_loggedin":false,"timestamp_created":1730304603522,"page_document_size_height":907,"page_document_size_width":1280,"page_page_offset_left":0,"page_page_offset_top":0,"
2024-10-30 16:10:07 UTC	823	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 13 Connection: close Date: Wed, 30 Oct 2024 16:10:07 GMT Access-Control-Allow-Credentials: true x-amzn-RequestId: 3a76328b-4f62-48f3-b7b9-47a3a75abaf0 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization x-amz-apigw-id: AeMO6E0xIAMEAGQ= Access-Control-Allow-Methods: POST, OPTIONS X-Amzn-Trace-Id: Root=1-67225a5f-5bbc81812d56aa155899e9b6;Parent=03fcc589af1ea07b;Sampled=0;Lineage=1:ba02c674:0 Access-Control-Max-Age: 86400 X-Cache: Miss from cloudfront Via: 1.1 1f0db25765b79d244ad1fa2184395c12.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: 1RxBMkb1j8jKXZQY3i1U3jdLkiMHxLtXo81WHLw8UBkcQUTrjRh6Jw==
2024-10-30 16:10:07 UTC	13	IN	Data Raw: 50 72 6f 63 65 73 73 69 6e 67 2e 2e 2e Data Ascii: Processing...

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.6	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:07 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 128a8aa7-901e-005b-27fd-272005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161007Z-15b8d89586fxdh48ft0acdbg44000000020000000000fchk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:07 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:07 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: deaa19c2-701e-006f-33de-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161007Z-17c5cb586f6wmhkn5q6fu8c5ss00000007rg000000005yq1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49777	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:07 UTC	717	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/2fww_btJ423Vy88SJ2Q5IWKLROZRak18D6mq2-1MAPw/2023-11-09_12-55-13-4-4.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:08 UTC	614	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 49076 Connection: close Date: Wed, 30 Oct 2024 16:10:08 GMT Last-Modified: Thu, 09 Nov 2023 01:57:25 GMT Etag: "032051f741ebcb639c205939f39aca51" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: krdVKcuFERYw3GKUvSqCV3MiXPZ.2T3G Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 d4744f6f4cb683596fb4a26e59b2aba8.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: Yz_RwdWmyhm8gK3NzH94Shap4TpTbNNS-5fyfeQQk0MYctS_iSoOBg==
2024-10-30 16:10:08 UTC	8192	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1c 00 00 03 2a 08 06 00 00 00 c9 aa 98 78 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 01 39 11 a8 bb 38 7e 00 00 20 00 49 44 41 54 78 9c ec dd 7b 5c 54 f5 be f8 ff 97 0e c3 00 13 44 27 20 4f e0 3e 8a 46 22 86 a0 05 f9 95 d8 5e 61 bb 25 cb cb 06 6f 78 84 2c 6c 7b a9 b4 bc 95 66 59 5e 2a dd e1 a5 2d e5 41 53 c3 f0 84 7a 0a 63 83 77 82 43 d0 4e d0 20 8c 14 6c 2b fd 0c 28 49 0e c8 80 23 bf 3f e6 c2 00 83 0e ca 28 e8 fb f9 78 cc 43 58 f3 59 eb b3 d6 b0 9c f5 9e f7 e7 fd 59 d3 a5 fa b2 a6 01 21 84 10 42 08 2b ea 7a bb 77 40 08 21 84 10 77 3e 09 38 84 10 42 08 61 75 12 70 08 21 84 10 c2 ea 24 e0 10 42 08 21 84 d5 49 c0 21 84 10 42 08 ab 93 80 43 08 21 Data Ascii: PNGIHDRxpHYs+tIME98~ IDATx{\TD' O>F"^a%ox,l{fY^-ASzcwCN l+(I#?(xCXYY!B+zw@!w>8Baup!$B!I!BC!
2024-10-30 16:10:08 UTC	8748	IN	Data Raw: 42 58 9d 04 1c 42 08 21 84 b0 3a 09 38 84 10 42 08 61 75 32 2d 56 88 bb 94 e1 1e 3a cd dd ec 5c 7b 21 84 30 47 32 1c 42 dc 45 1a 1a 1a 68 68 68 e0 ea d5 ab c6 87 b6 ec 18 75 e9 a1 c6 e7 5a 0b 44 84 10 e2 66 48 86 43 88 bb 80 69 10 71 f5 ea 55 ef 0b 91 ef 00 00 20 00 49 44 41 54 5d d0 51 9e ce d5 1f 56 c1 af 19 c6 e5 a6 d9 0d c9 74 08 21 da 93 04 1c 42 dc c1 4c bf 7a c0 10 68 68 cb 8e d1 50 b4 9a 2e bf 65 36 69 5b 57 57 87 42 a1 40 a1 50 d0 b5 ab 2e f9 29 41 87 10 a2 bd 48 c0 21 c4 1d c8 5c 46 c3 10 68 f0 6b 06 e6 c2 88 fa fa 7a e3 cf ed f5 dd 09 42 08 61 20 01 87 b8 43 54 90 fa 5a 0c 47 06 c7 b1 7a d4 8d 7c 65 ec 9d a1 79 46 e3 ea d5 ab 5c 2d 4f 37 9b d1 68 ae a6 a6 06 3b 3b 3b 6c 6d 6d e9 d2 a5 8b 31 cb 21 44 5b b5 16 a8 4a 00 7b 77 93 80 43 dc 31 7e bf Data Ascii: BXB!:8Bau2-V:\{!0G2BEhhhuZDfHCiqU IDAT]QVt!BLzhhP.e6i[WWB@P.)AH!\FhkzBa CTZGz\|eyF\-O7h;;;lmm1!D[J{wC1~
2024-10-30 16:10:08 UTC	16384	IN	Data Raw: cd 63 a5 df ff cf de bd c7 55 55 26 7c ff ff 00 0a 1e 10 d3 60 6b 03 8e 89 85 a9 a8 48 4d 68 63 4c 59 26 38 76 18 d4 9c 6c 74 52 e2 2e 0f 4f 3a 1d 9c f1 34 0c e3 69 2a ed 57 dd 6a cd 4d e8 fc f4 56 ef f2 30 95 8d 80 95 19 59 4a 93 8a 89 9a 4c 61 3d c2 ad 6e 98 54 14 15 94 bd 9e 3f f6 06 f6 e6 0c b2 d8 20 df f7 eb c5 0b 5d c7 6b 2d d7 e1 bb ae eb 5a cb 7e cc 4a 3e 5f 3e 2c 7b 03 0f 86 8c 61 9d 53 0d 9a bd 79 6f 11 bb 8a 4a cb f8 34 ef 9c 2a fd 73 24 7f 48 83 5d 73 22 cb 87 97 3a 97 cd 3b 7f 9a 60 2f 67 c4 68 66 6d c8 ae b9 c9 ef a2 7d fa 88 b0 7e 04 87 44 f0 c0 f4 bf b2 c7 e9 1f be b4 a9 6c 57 d6 16 e2 1f b5 1f db 61 51 b3 59 57 71 ff 38 2f a7 c2 fe a9 52 49 3e 7b de 9a cd d8 88 7e 65 ff de ce fb dc 5e eb b0 86 5d 1b 66 13 11 e6 74 de d4 ba 1e c7 71 14 61 Data Ascii: cUU&\|`kHMhcLY&8vltR.O:4iWjMV0YJLa=nT? ]k-Z~J>_>,{aSyoJ4s$H]s":;`/ghfm}~DlWaQYWq8/RI>{~e^]ftqa
2024-10-30 16:10:08 UTC	8949	IN	Data Raw: e3 d1 e5 16 ee ff 3f cb 49 88 be 01 e3 c3 1f c8 01 7e da 6b 04 a5 d9 c5 88 ea 49 77 2f 80 6e 04 8d 2d 5d 7a 09 93 42 7b 43 49 2e 59 9b ea bb af 44 c4 2c 6a 52 11 71 bb 50 62 ff 1c c7 f0 9f 00 74 64 f0 13 9b f9 c7 c4 0a 93 d8 fb 91 f2 d3 61 ab 98 77 f2 25 5e 4e f9 77 35 cb 32 b8 5a 78 8a 3c ab d3 a0 90 3b 99 38 61 3a 51 bd 81 c2 1f 38 90 0a dc 7f 1f b7 76 85 c2 23 5b 88 5b e4 d4 46 f3 ab f9 ac 1f 77 2b dd 6f be 03 48 65 4b e6 f7 0c 0f bc 99 3e 8f dc 00 49 67 ed 6b e8 7b 3f c1 dd e1 4c c6 3e 76 d6 b6 69 a7 93 79 e3 bd 81 bc 34 a1 1f 11 13 9f 63 58 5a d5 4d 2b c6 dd 4f 30 26 cc 17 4e ed 61 d9 b3 6f b2 df 31 dc 72 d7 ff e1 8f 33 ee 60 f0 88 b1 f4 4b fd 82 5c eb 2f 08 b2 f4 64 b4 01 db 3d e0 ae fe 41 f8 96 5c a1 d8 cb 9b 6e 37 47 00 5f 82 2d 86 db 6e 02 4e 7c Data Ascii: ?I~kIw/n-]zB{CI.YD,jRqPbtdaw%^Nw52Zx<;8a:Q8v#[[Fw+oHeK>Igk{?L>viy4cXZM+O0&Nao1r3`K\/d=A\n7G_-nN\|
2024-10-30 16:10:08 UTC	6803	IN	Data Raw: 26 d0 74 10 ef d8 17 31 e4 56 f7 6e cd ba c5 d2 d9 ee e0 54 95 09 06 11 13 1b cb 07 e9 fb dd 23 38 7b ec 1c 8e 8f a5 bd 39 8b ed ef a7 32 64 ca 78 3a 37 02 cc 41 b4 8e 9f c0 b8 e3 49 6c 76 54 95 a6 37 0b ed 27 d8 d9 38 31 da 5d 97 c1 d1 dc d3 d3 c9 b1 7f 65 01 07 d8 fc 16 8c 1b 11 47 a8 19 30 37 e5 9e d8 e8 52 47 97 aa cb af 3e 66 71 83 49 4c 19 d2 d4 5d fe c8 41 0c e9 98 c4 67 87 bc da b3 93 bb 9e 43 e3 e2 19 76 c0 4e 5a d9 11 97 7a 91 4c fc 2c 85 29 9d bc da a3 a8 0e 81 4a db 3d 63 07 ab 1a 3d c2 b0 58 77 dd 5b c2 bb d1 bb 63 25 45 f6 d1 16 95 5f 93 59 a4 6d b6 33 e4 91 78 5a 07 bb eb bb f3 e8 d7 98 db 25 08 27 07 d8 fc 86 85 29 4f 0f a2 99 19 08 8e 64 c8 83 d1 ac fa 3c a3 f8 94 bd fa c5 16 d7 e1 90 a7 27 11 fc 9e 9d c3 55 35 4d 71 7d 7a ae c5 26 36 26 Data Ascii: &t1VnT#8{92dx:7AIlvT7'81]eG07RG>fqIL]AgCvNZzL,)J=c=Xw[c%E_Ym3xZ%')Od<'U5Mq}z&6&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49778	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:07 UTC	717	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/VJG8pQvtfxy-4L_vWcLZtn7sEL4JAlB8TQIfJh_CX78/2023-11-09_13-16-20-hFg.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:08 UTC	614	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 42702 Connection: close Date: Wed, 30 Oct 2024 16:10:08 GMT Last-Modified: Thu, 09 Nov 2023 02:24:19 GMT Etag: "80a2e53f27b50f7eccaa0199cba465d3" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: mDQjxKsPfJwz75rczL1eg5PJmC4RptO. Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 1fd323b9134f7d940dac0d007036a604.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: i0I2GYcY8Kp8v_AnkHQ-GRcsaIop_a8j_jU4NGXR7xG9PWw_UoVqow==
2024-10-30 16:10:08 UTC	6396	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 3a 00 00 02 58 08 06 00 00 00 6b 74 4c 91 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 02 17 3a 0d 46 76 4b 00 00 20 00 49 44 41 54 78 9c ec dd 79 5c 54 55 ff c0 f1 0f c3 32 ec 20 6b 38 8a 80 a2 22 8a 08 0a 2e a0 22 a8 19 65 a9 bf 50 7b 70 37 4d a3 4c 7d 1e cd d2 36 2b d3 a7 b4 cc ec a9 34 4d 2d c5 32 ca 72 0d d3 dc 72 49 25 84 50 71 01 74 44 50 90 1d 87 65 e6 f7 c7 0c c3 80 ac 2a b2 78 de af 17 af 99 7b cf b9 f7 9e 7b b9 33 f7 3b e7 9c 7b ae de 63 ed 7a aa 10 04 41 10 04 41 68 81 24 8d 5d 00 41 10 04 41 10 84 86 22 02 1d 41 10 04 41 10 5a 2c 11 e8 08 82 20 08 82 d0 62 89 40 47 10 04 41 10 84 16 4b 04 3a 82 20 08 82 20 b4 58 22 d0 11 04 41 10 04 Data Ascii: PNGIHDR:XktLpHYs+tIME:FvK IDATxy\TU2 k8"."eP{p7ML}6+4M-2rrI%PqtDPe*x{{3;{czAAh$]AA"AAZ, b@GAK: X"A
2024-10-30 16:10:08 UTC	10564	IN	Data Raw: 8e 1e 3b 45 c8 a0 00 da bb b5 a3 9b 67 27 de 5b ba 8a 74 cd 98 3b 77 14 ea 74 a1 9e a4 ce f4 f2 d5 27 e1 5c 1a b1 27 d2 50 aa 00 7d 7d 2c ed 9d f1 ed ac 0e 0e 2c dd 3d f1 56 26 10 97 98 c0 6f e7 01 03 13 9c 3a b8 e1 6c 08 38 75 c6 3b 2f 9e d8 c4 44 0e 5e 00 69 2b 7b 1c cd 6e 92 51 5a 5d b4 63 8b 67 8f 22 4a e3 e4 fc 79 28 0d f4 f4 31 b3 97 d1 db a3 ca 7b 9a ea cd a4 bd 27 de 25 09 c4 c5 c5 92 54 76 7b 79 57 0f ed 1d 57 b5 69 d3 d5 85 dc 53 c9 24 9c 8a 23 41 62 88 8d cc 1a b3 ab 39 28 8b ab 59 c0 cc 04 c9 f5 8b ec bb a0 be dd db c6 d5 8d ae 36 d5 e4 c5 9c 4e 3e 2e 94 9c b9 4a cc 91 9b da db cb bd bb 97 dd 71 05 a0 8f b5 59 01 f1 7f fe 85 42 09 06 66 d6 78 74 71 56 07 81 12 19 be be 2a 62 62 53 39 79 48 fd 65 2f 6d e5 88 77 87 6a 37 08 76 76 38 99 e5 90 74 Data Ascii: ;Eg'[t;wt'\'P}},,=V&o:l8u;/D^i+{nQZ]cg"Jy(1{'%Tv{yWWiS$#Ab9(Y6N>.JqYBfxtqV*bbS9yHe/mwj7vv8t
2024-10-30 16:10:08 UTC	8949	IN	Data Raw: a0 8c 8a a8 88 8a 28 29 ce e3 95 ca 31 4b cb 32 f5 5e 4b 4b cb 7e d6 d5 5b 36 db e0 6d b0 be 5a 59 56 5e 35 4d 8b 52 73 2c ca d9 9c 19 44 c4 09 41 44 50 06 51 40 11 0e c3 d9 bf 3f 0e c8 01 41 40 05 14 3f af e7 39 cf a3 7b ad bd d6 3a 9b bd f7 f9 ec b5 d6 de 3b 89 25 af de 78 c1 87 7b 2a 19 80 43 8f 67 59 a0 59 c3 a2 d5 ab 79 6b fb cf e4 5b d8 d1 69 e0 13 bc f8 98 4f a9 00 55 88 fb c9 dd 78 96 a8 40 d9 bb ae ca 2a 20 7a d1 3c 3e 3a 94 83 77 ff 89 7c 3a bc 05 8d 48 26 64 ee d7 04 9b f5 8f 37 0d e8 82 f7 da cd 1c dc b9 9e 8c 0b 60 d3 ab f4 15 7c f5 d9 60 db 10 c0 8e fe 63 46 d0 b5 51 99 e4 26 2d e0 fa 2c 95 5b a0 6e 4c a7 7f fd 87 c5 13 0b b8 96 78 8c bf d7 af 67 45 f8 66 de fa be 31 8b a7 77 36 f5 0a dd 95 ae 10 1d 75 09 bc fa d1 02 c0 a9 29 9e 9c 21 bb ec Data Ascii: ()1K2^KK~[6mZYV^5MRs,DADPQ@?A@?9{:;%x{CgYYyk[iOUx@ z<>:w\|:H&d7`\|`cFQ&-,[nLxgEf1w6u)!
2024-10-30 16:10:08 UTC	16384	IN	Data Raw: b0 74 a6 8e 01 e3 c6 31 ea d1 71 8c f4 bf f1 c7 3a 25 ed 34 90 c8 d2 cd 06 c6 06 4d e2 cd a0 73 ec 09 f9 93 55 73 c7 b3 a5 8a 13 7f 2b 72 34 bb ea 57 9e d5 c9 cb b1 2c 6e f7 9a 36 e5 5a 0d b5 cd 3c c8 01 b8 7a 85 f9 0b 0e 5c 0f 76 7e b0 68 c7 db 23 dd aa db 5c 93 4a ee ae d2 38 39 a3 3a 1d 87 f1 22 d0 04 c8 4c c2 68 68 82 ca 26 05 63 62 21 d8 6b 80 64 94 ab a0 6a ee 02 80 72 39 06 43 e8 6e 8c d7 0c a0 b2 42 d5 74 10 96 81 ee 68 30 0d bd e4 a7 7a 63 f1 60 23 0a d7 85 60 7a c7 6e 08 d7 d6 b5 44 3b 22 08 d5 f5 f4 2e 58 10 47 ee ba 83 d0 c6 07 25 ee 00 4a 7e 21 58 b7 47 db b3 37 96 45 c7 5e 7e d4 26 f2 cf 24 80 a2 41 d5 a4 0b aa 2b 07 51 9a 3e 81 75 e7 d2 33 de f3 c3 7f 22 ff dc 65 20 8e fc 75 07 29 70 33 e5 51 b2 12 30 1c da 8e f1 ea 35 50 d9 a0 6a d6 1f cb Data Ascii: t1q:%4MsUs+r4W,n6Z<z\v~h#\J89:"Lhh&cb!kdjr9CnBth0zc`#`znD;".XG%J~!XG7E^~&$A+Q>u3"e u)p3Q05Pj
2024-10-30 16:10:08 UTC	409	IN	Data Raw: 05 cb d0 91 24 49 c1 32 74 24 49 52 b0 0c 1d 49 92 14 2c 43 47 92 24 05 cb d0 91 24 49 c1 32 74 24 49 52 b0 0c 1d 49 92 14 2c 43 47 92 24 05 cb d0 91 24 49 c1 32 74 24 49 52 b0 0c 1d 49 92 14 2c 43 47 92 24 05 cb d0 91 24 49 c1 32 74 24 49 52 b0 0c 1d 49 92 14 2c 43 47 92 24 05 cb d0 91 24 49 c1 32 74 24 49 52 b0 0c 1d 49 92 14 2c 43 47 92 24 05 cb d0 91 24 49 c1 32 74 24 49 52 b0 0c 1d 49 92 14 2c 43 47 92 24 05 cb d0 91 24 49 c1 32 74 24 49 52 b0 0c 1d 49 92 14 2c 43 47 92 24 05 cb d0 91 24 49 c1 32 74 24 49 52 b0 0c 1d 49 92 14 2c 43 47 92 24 05 cb d0 91 24 49 c1 32 74 24 49 52 b0 0c 1d 49 92 14 2c 43 47 92 24 05 cb d0 91 24 49 c1 32 74 24 49 52 b0 0c 1d 49 92 14 2c 43 47 92 24 05 cb d0 91 24 49 c1 32 74 24 49 52 b0 0c 1d 49 92 14 2c 43 47 92 24 05 cb Data Ascii: $I2t$IRI,CG$$I2t$IRI,CG$$I2t$IRI,CG$$I2t$IRI,CG$$I2t$IRI,CG$$I2t$IRI,CG$$I2t$IRI,CG$$I2t$IRI,CG$$I2t$IRI,CG$$I2t$IRI,CG$$I2t$IRI,CG$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49780	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:07 UTC	717	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/5nReMwCINwOpxQkU4s0_Uigmf9pzJSvfep5v48N6vx4/2023-11-09_13-17-09-xdI.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:08 UTC	614	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 38461 Connection: close Date: Wed, 30 Oct 2024 16:10:08 GMT Last-Modified: Thu, 09 Nov 2023 02:21:56 GMT Etag: "2e98bcd1f003a4739741852c9b22287c" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: vOBkFiWpCdP2y73TpY1SexmdncaceVsE Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 cf2071a2896a4f71dbfdbc521d554362.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: z_Il6oIfG8rSWTALEGvAxVR-0hWXz4lB9fsUo3hDoGue6vPg_ltTnw==
2024-10-30 16:10:08 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 3a 00 00 02 58 08 06 00 00 00 6b 74 4c 91 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 02 14 07 7e 03 69 99 00 00 20 00 49 44 41 54 78 9c ec dd 79 5c 54 e5 fe c0 f1 0f c3 32 ec 20 6b 88 22 a8 a8 08 22 a2 82 0b b8 24 69 85 59 ea 2f cc ae bb 66 49 98 a9 f7 6a 56 b6 d9 cd f4 96 b6 18 dd 4c d3 ab 96 62 d7 b8 69 ae 61 99 62 09 6e 88 10 02 2e 80 8e 08 22 22 ab c3 32 f3 fb 63 16 06 64 55 90 a5 e7 5d be 66 e6 3c cf 39 e7 39 87 33 33 df 79 b6 a3 f7 48 97 01 4a 04 41 10 04 41 10 da 21 49 4b 17 40 10 04 41 10 04 a1 b9 88 40 47 10 04 41 10 84 76 4b 04 3a 82 20 08 82 20 b4 5b 22 d0 11 04 41 10 04 a1 dd 12 81 8e 20 08 82 20 08 ed 96 08 74 04 41 10 04 41 68 b7 Data Ascii: PNGIHDR:XktLpHYs+tIME~i IDATxy\T2 k""$iY/fIjVLbiabn.""2cdU]f<9933yHJAA!IK@A@GAvK: ["A tAAh
2024-10-30 16:10:08 UTC	576	IN	Data Raw: 20 0b 40 46 62 a2 ea cb 37 ef b7 7d 1c 2a 04 e7 d1 2f f0 a6 7a bd 37 47 db 40 66 14 7b e3 74 ca 6c ea cf f2 8f 5f 61 ee 9c 29 84 ad 78 8e 91 40 d9 c5 34 64 58 e0 ea ef 8b 67 17 d5 6f 2e e7 5e be f8 f4 71 c4 90 5c e2 4e ca 28 c3 83 17 17 8e 63 a8 ff 08 a6 bc f5 1c a3 3b 58 70 e7 03 dc 80 9c 00 00 20 00 49 44 41 54 42 2a 79 cd 7c 8a 1f 98 81 21 28 d4 01 8a 22 89 9f fe 97 86 c3 e8 17 58 f8 94 3b 0e 56 16 38 0f 99 c2 d2 10 67 52 23 23 38 7e 07 50 c4 b3 f7 47 19 3d 42 16 30 73 88 33 a6 56 36 b8 3f 35 8f b0 81 25 1c da 7f 82 e2 c6 ec bb 43 00 0b 43 47 e0 ea 60 81 43 b7 11 cc 1a e7 0a 85 06 8c 78 61 0a 43 bb d9 60 ea e0 4e 70 88 3f 0e 8a 34 52 2e aa 56 49 db 15 c1 21 85 3f 8b fe 1e 84 bb 83 05 0e 9e e3 58 14 e2 8c 2c ea 08 89 3a 5f a8 3d 26 fe 9d b9 a3 5d 71 b0 Data Ascii: @Fb7}/z7G@f{tl_a)x@4dXgo.^q\N(c;Xp IDATBy\|!("X;V8gR##8~PG=B0s3V6?5%CCG`CxaC`Np?4R.VI!?X,:_=&]q
2024-10-30 16:10:08 UTC	9592	IN	Data Raw: b1 e9 b3 dd cc 7c 26 00 4f 17 5f 66 7e dc c6 7a 2a 03 64 5e 21 b1 d8 04 9f 3e ae 55 16 5b fb fb e3 b3 e3 07 52 2e c1 50 ab 34 e2 14 36 8c f6 ac da df ca 73 5e e5 df b5 b0 a1 fb 33 b6 54 37 8b a8 98 da 58 02 25 98 e9 d6 df 9b 9a 62 45 09 65 72 80 2c 52 2e 94 60 e8 e3 8d bb ce 7a d6 dd dc 71 50 24 21 cb 42 db 54 e6 6c a7 5b 3e 4b 1c ac 20 a5 ae b2 38 79 e0 6f b7 8f 88 9d 9b 71 e6 31 02 3c 9d 31 75 f2 fd 7f f6 ee 3b 2c aa 33 7d f8 f8 77 1a 43 91 a2 38 82 52 44 11 15 b1 a1 a8 d8 62 5d b1 c5 96 d5 c4 c4 55 77 4d 34 d1 c4 fc 62 5e dd b4 4d 31 75 53 37 a6 1a e3 aa 89 89 89 c6 1a 4d 82 6b 41 0d 62 c1 82 88 0d 41 44 50 8a 28 a0 94 61 da fb c7 20 0c 88 02 2a a0 78 7f ae 8b eb d2 f3 9c 39 cf 3d 67 ce cc b9 cf 53 ce 61 c2 e3 55 7d 33 b5 a4 a2 c1 c8 2a 87 b2 5d 1e d5 Data Ascii: \|&O_f~zd^!>U[R.P46s^3T7X%bEer,R.`zqP$!BTl[>K 8yoq1<1u;,3}wC8RDb]UwM4b^M1uS7MkAbADP(a x9=gSaU}3*]
2024-10-30 16:10:08 UTC	11909	IN	Data Raw: 97 43 41 51 6d 06 76 73 b5 93 e8 74 0c e3 c9 60 88 7c 65 16 af ac 3a 64 73 72 75 a1 eb f8 e7 98 31 63 48 99 04 22 f3 42 02 d0 8e 8c ff 95 bb 7a af e6 c0 df 32 8a 4f ec e7 32 ab 90 20 54 67 5d 74 78 b4 00 ce 64 92 7e 8b a1 b9 b8 37 01 20 23 ab 0a ad 0a d5 8a ed c6 f4 27 0f f1 3b d0 5b 57 7c 82 3f 16 ce 9a 4c 7f 26 7e bc 92 45 2f 4e 62 58 cf 9e 0c 1b ff 1a 8b 16 bf 40 ef cc 08 3e fd ad 38 41 f0 eb cf 98 fe 90 b9 6a 33 d1 36 c7 7b ee 91 08 7e 47 cb c4 be 5d aa d6 15 d5 f4 41 5e 7b bd 3f ba 43 8b 99 bf f8 10 95 5d c7 1d 5d 3e 87 57 b6 c0 d4 85 7f f0 dd 5b cf 31 26 6c 3c 53 5f fc 8e ed 6b a7 d1 f5 d0 62 1e ff 22 ca ba 8d a6 5d 18 d8 17 8e ee 8b 23 b9 e4 d5 c7 88 fe 43 8f 4e a7 25 f3 fb 70 9b 41 ce 99 9c 3e 98 02 7d fb d1 a5 69 55 82 2e 65 ed ae 3a cb 57 5f ef Data Ascii: CAQmvst`\|e:dsru1cH"Bz2O2 Tg]txd~7 #';[W\|?L&~E/NbX@>8Aj36{~G]A^{?C...W[1&l<S_kb"]#CN%pA>}iU.e:W_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49779	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:07 UTC	717	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/JjCi9TejR6FXv7qK_NpJQvPUiIhZ6RlxSHdQoMDRRKk/2023-11-09_13-19-22-Ctg.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:08 UTC	614	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 35489 Connection: close Date: Wed, 30 Oct 2024 16:10:08 GMT Last-Modified: Thu, 09 Nov 2023 02:22:19 GMT Etag: "8481e2d0aebacf26df0d4466228fd406" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: sjeZVor00wpLxbD0PZc3e1_AUCd_xB6_ Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 0341da327f4c4c49034aa07ebeeab1f0.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: 55ElcftTyaR2gaufKdujtvNVyf5SK_BBIe1YmrHUE0TBeGkCGz1Pog==
2024-10-30 16:10:08 UTC	15345	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 3a 00 00 02 58 08 06 00 00 00 6b 74 4c 91 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 02 14 0d 9e d6 80 87 00 00 20 00 49 44 41 54 78 9c ec dd 79 5c 54 55 ff c0 f1 0f c3 32 ec 22 6b 88 22 a0 88 08 22 a2 82 0b ae a0 a6 a8 a5 fe c2 ec 71 4d b3 24 cc d4 e7 d1 34 69 f3 29 d3 a7 d4 d2 ec c9 34 4d 2d c5 1e a3 34 d7 b0 4c d4 5c 91 10 42 44 65 d1 11 41 40 64 75 d8 e6 f7 c7 0c c3 b0 83 8a 28 9e f7 eb c5 6b 66 ee 39 f7 de 73 ef 5c ee fd ce 39 e7 9e ab f5 4c fb 9e 0a 04 41 10 04 41 10 5a 20 49 73 17 40 10 04 41 10 04 a1 a9 88 40 47 10 04 41 10 84 16 4b 04 3a 82 20 08 82 20 b4 58 22 d0 11 04 41 10 04 a1 c5 12 81 8e 20 08 82 20 08 2d 96 08 74 04 41 10 04 41 Data Ascii: PNGIHDR:XktLpHYs+tIME IDATxy\TU2"k""qM$4i)4M-4L\BDeA@du(kf9s\9LAAZ Is@A@GAK: X"A -tAA
2024-10-30 16:10:08 UTC	1615	IN	Data Raw: 5b 48 6c f2 f5 3e 3c b1 5f ce e7 df e7 ed 98 be 6c 01 c3 6c ab 24 46 6e 61 e2 3a 58 fa cd 34 dc 9a a5 74 82 f0 74 7b 02 02 9d 72 06 38 7b ba e2 a8 0a 6a f2 13 a3 39 71 76 0f 8b e3 6e b0 f4 3f 93 70 93 36 6f e9 1e 86 f4 bd 2b 98 1b 96 c6 b0 e0 55 4c f7 6a ee d2 34 4e bf a9 ef f3 b2 27 20 cf e4 f2 d1 03 6c fe e6 df 9c f8 7b 1a cb 67 7a f0 74 c5 a1 ca c0 fc 78 ef 27 e7 22 ad 66 3d 88 e5 8b 07 63 5d 75 ba be 49 13 af b8 90 f4 d8 48 7e c1 81 51 03 6d 9e dc e3 a5 4c c6 f6 2d c7 f1 5e ec 8b d9 03 2f ec 09 3e 8e 04 e1 31 f3 04 05 3a a6 f8 be 30 49 e3 d7 52 21 be eb fe cd 8a c8 48 7e 89 78 0e 37 ff a6 3e 19 0b 75 31 32 31 c1 b0 15 80 09 9e 81 b3 59 de 71 0b 0b d6 85 12 ea d5 85 e9 5e 4f d0 61 f6 34 d3 36 c4 b0 95 49 33 04 1a 26 f4 5b b8 8a 7e 8f 7c bd 0f 99 04 48 Data Ascii: [Hl><_ll$Fna:X4tt{r8{j9qvn?p6o+ULj4N' l{gztx'"f=c]uIH~QmL-^/>1:0IR!H~x7>u121Yq^Oa46I3&[~\|H
2024-10-30 16:10:08 UTC	16384	IN	Data Raw: 49 69 a0 6b 80 61 2b 53 8c b4 41 d7 c8 14 c3 56 06 e8 4a 80 d4 38 4e 67 c0 e0 31 63 70 b6 36 c1 d0 de 83 c0 57 27 31 d6 c3 84 a2 c7 e9 fa 93 ba 9f b9 2f cf 67 a2 e6 df db e1 a4 6b e6 b9 9f fd 1a 15 47 b1 f3 18 82 5f 54 7d ef 5e e3 18 e7 09 b2 bf e2 2a 2f bb d6 72 3d 21 fb 0f c0 d0 87 49 2f 3a 90 7f 72 3b a1 b1 35 67 49 08 3b 40 94 f9 20 96 aa 8e 33 43 7b 2f a6 2f 1a 43 a7 94 fd 6c fe 2d b7 f6 e3 e8 ee 71 be ab f4 ff 61 47 bf e0 49 04 e8 c7 f1 cb 11 e5 8f 85 cb 7f c5 51 6c 3b 98 c0 81 ca ff 1f 87 61 d3 99 3f de 0b 6b ed 9c ff 67 ef ce c3 aa aa f6 c7 8f bf 99 05 e4 40 e0 51 11 44 14 8f 8a 38 21 a8 e0 90 38 24 a5 39 76 b5 2c a7 ae a6 5d 2d fb 69 5f bd 95 8d 56 da a4 dd c8 bc 99 79 d5 34 2d cc 79 48 cc 01 07 c4 81 41 44 9c 10 45 04 05 8e 98 a0 08 c8 b0 7f 7f Data Ascii: Iika+SAVJ8Ng1cp6W'1/gkG_T}^*/r=!I/:r;5gI;@ 3C{//Cl-qaGIQl;a?kg@QD8!8$9v,]-i_Vy4-yHADE
2024-10-30 16:10:08 UTC	2145	IN	Data Raw: 55 ab a4 32 0b c4 6d 79 8d a1 9f c2 47 1b 97 32 ac c8 70 bb b9 65 43 b8 a4 25 09 f4 1a 9d 78 e2 8e 81 d9 40 fd 94 59 84 fa 0d 65 e8 3e 1f 36 af 7e 07 0f cb c2 f9 64 a5 a5 91 65 56 a4 0b bc b1 0b 9e 2c 23 2e 11 b0 47 08 01 80 1a 27 5f 08 4a 4f 83 92 7f ea a5 0d 29 20 6d 88 78 c2 d4 8e 1e 9d c4 2d bc dd 61 28 2b 8a 0c 4b c7 c5 06 c3 08 37 dd dd 09 f9 57 24 05 1f 33 80 0e be bc ee 7e 9a 95 1b 82 8b 74 c3 66 11 ba 61 19 41 6d a7 d2 b7 03 80 19 ad dc 7c 60 77 38 a7 f4 93 dd d8 c5 a7 63 5f 63 6d 8c de b2 1c c8 28 f8 77 49 65 02 59 e1 5f f0 e6 f4 2b bc fa d3 a2 62 0d 14 80 ba a5 3b ed 4e 07 12 19 ab b7 30 36 8a 10 ad 23 ed 9b df 6f b6 ee 5f cd 15 6f a0 20 9e 3f 67 79 30 aa e8 41 49 8c 21 04 1f 34 15 b8 b1 44 88 ba cf 91 96 5d 1d 09 0a 08 26 4e 6f 69 da b9 60 82 Data Ascii: U2myG2peC%x@Ye>6~deV,#.G'_JO) mx-a(+K7W$3~tfaAm\|`w8c_cm(wIeY_+b;N06#o_o ?gy0AI!4D]&Noi`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49783	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	730	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/i-dOFdRu-5Z6K058LnScNrFMZJjVPBk9NionMQyJwuE/Screenshot%202023-11-09%20135049-cbc.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:11 UTC	615	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 128184 Connection: close Date: Wed, 30 Oct 2024 16:10:11 GMT Last-Modified: Thu, 09 Nov 2023 03:09:45 GMT Etag: "8e8b82a397dda53745f966f5a640eb24" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: ADtBQhcII107e2BvtX1vnIgd66MVTKLy Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 5c14dc328191a14142654d833f772c6c.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: JZDxQWswMyDgJhrbm9tVcphMKTSyDEm9UtBquMnq1pyktFfFLtI21w==
2024-10-30 16:10:11 UTC	15345	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 ac 00 00 03 04 08 06 00 00 00 92 4f bd 44 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec 9d 05 7c 15 c7 16 c6 bf 08 31 82 14 77 97 e2 50 dc dd a1 14 87 b6 b8 43 71 77 f7 16 f7 52 28 ee 56 bc 38 2d 14 77 27 b8 bb 84 78 72 f7 dd 6f 73 e7 b2 b9 84 08 84 12 fa ce ff fd e6 ed de d9 91 33 b3 7b d3 3b 1f 67 ce da 69 66 20 08 82 20 08 82 20 08 82 20 08 82 20 08 d1 04 7b cb 51 10 04 41 10 04 41 10 04 41 10 04 41 10 a2 05 22 58 09 82 20 08 82 20 08 82 20 08 82 20 08 d1 0a 11 ac 04 41 10 04 41 10 04 41 10 04 41 10 84 68 85 08 56 82 20 08 82 20 08 82 20 08 82 20 08 42 b4 42 04 Data Ascii: PNGIHDRODsRGBgAMAapHYsodIDATx^\|1wPCqwR(V8-w'xros3{;gif {QAAAA"X AAAAhV BB
2024-10-30 16:10:11 UTC	1582	IN	Data Raw: fa 7a 7d 51 88 60 15 8d a1 d0 c4 e0 db 14 7b 78 64 e0 f1 0f 81 8b 66 2e a6 2b 54 a8 a0 0b 4e dc 12 c7 ad 76 14 a1 dc dd dd f5 85 b9 5a 94 73 11 4f 71 83 7d f3 ed 7f f4 92 e2 36 af 83 07 0f ea 5b fc e8 2d c5 f6 54 9b b6 30 8f c9 b8 c8 6f d6 ac 19 76 ee dc a9 0b 34 7c 7b 1f 05 33 f6 c1 6b aa 2d 7a 51 71 7b 1a b7 06 d2 d3 88 7d 52 0c 52 a8 be 58 96 42 00 ed 54 f3 42 51 8b b6 b2 4d 05 fb 67 39 8a 6d 0c c0 ce 2d 70 2c a7 ca 73 3c 14 33 d8 5e 58 28 1b 79 e4 56 b1 4b 97 2e e9 f5 55 5b 14 c3 94 a7 52 44 50 fd f1 c8 b7 05 52 fc 63 3b b4 9f 47 ce 13 3d a5 88 1a b3 12 b5 b8 e5 6f e1 c2 85 fa 9b fe e8 75 c5 37 31 d2 eb 48 cd a7 12 4d 08 e7 93 f7 90 6f 8a e4 d6 4b be 79 91 f5 28 20 52 f4 51 e5 42 83 6d 71 7c ac 4b 9b 22 93 8c 5e 50 b4 9b ed 70 6c 2a 31 2f b2 70 ae 38 Data Ascii: z}Q`{xdf.+TNvZsOq}6[-T0ov4\|{3k-zQq{}RRXBTBQMg9m-p,s<3^X(yVK.U[RDPRc;G=ou71HMoKy( RQBmq\|K"^Ppl*1/p8
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 2b 08 26 06 3e 7f ab 9c 19 30 e1 e9 b1 55 98 fa fb 29 24 28 5b 1f cd 5b 36 45 ed 52 19 11 70 ec 38 3c 5c 32 23 47 46 a7 08 d8 05 f8 df dc 88 fe 3f 8d c4 f1 44 3f 60 d2 ac 81 61 8a 55 24 f2 76 86 46 20 ae ad 1f 82 8e a3 fe 46 b2 26 bf 60 66 ff aa 5f b4 58 45 22 3a 72 41 10 04 41 10 04 41 10 04 41 10 a2 03 41 77 b0 6d fb 29 38 e7 2d 8f 92 89 6d b6 99 39 65 43 95 f2 e9 f1 e6 c8 66 6c bf ad 04 24 7f 3c ba 7c 14 87 0f 1f d6 d3 a1 bf 77 60 e9 f8 41 f8 ed 98 86 3c 15 cb 5a ca 84 86 2b be 69 d9 1d 75 52 be c4 9d 27 b6 81 dc df e2 96 b3 30 f2 ba 7b 60 e5 cc f5 b8 ee ad 01 81 4f 71 e8 b7 e9 d8 74 2f 11 ca 55 ca 0b 27 d7 ec 28 9a 3f 2e ce af 99 89 4d 1e 6f cc 35 02 f1 e8 e8 02 4c ff e3 26 52 97 ab 84 5c ce ef 0a 2b 4e 69 cb a1 5a 9e 20 6c 9f 33 0d 7f dd f7 05 4c af Data Ascii: +&>0U)$([[6ERp8<\2#GF?D?`aU$vF F&`f_XE":rAAAAAwm)8-m9eCfl$<\|w`A<Z+iuR'0{`Oqt/U'(?.Mo5L&R\+NiZ l3L
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 6e 71 50 ae 65 73 e4 f4 dc 82 41 9d 47 63 ed e1 6b 78 e1 e3 87 d7 77 4f 60 f5 e8 1e 98 b0 cf 0f 85 cd 6b 82 42 ee ef ae 49 dc 72 16 46 5e 77 0f ac 9c b9 1e d7 f9 6f c8 81 4f 71 e8 b7 e9 d8 74 2f 11 ca 55 ca 0b 27 fb f8 28 55 b9 30 02 f6 cf c7 ec fd f7 11 00 3f dc fa 73 26 96 1c 73 46 99 6a c5 10 0b 8e c8 50 a9 2a 72 fa ee c1 ec 69 7b f0 c0 4f 43 d0 ab f3 58 3c 6b 03 1e a6 29 8f 0a 39 9d e1 94 b6 1c aa e5 09 c2 f6 39 d3 f0 d7 7d 5f f3 a2 e6 35 4e 2d 99 83 4d 77 93 a3 62 a5 5c a1 04 8a 8f fe 44 7c 25 2d 7c 12 8c 0b 6c 2e e0 f9 59 25 05 f3 55 c0 73 2e 82 79 fe a1 8b 73 d5 b6 b1 be ca 53 c9 16 db 7c 63 59 a3 cd a1 c1 7e 6c c7 a5 12 f3 a3 12 d5 1e db 36 1e 8d a8 be df 37 7e d5 06 af 7f 08 c6 31 a9 f6 89 b1 af f0 50 f3 a5 6c e0 b9 4a ea b3 3a da a6 a8 c6 d8 26 Data Ascii: nqPesAGckxwO`kBIrF^woOqt/U'(U0?s&sFjP*ri{OCX<k)99}_5N-Mwb\D\|%-\|l.Y%Us.ysS\|cY~l67~1PlJ:&
2024-10-30 16:10:11 UTC	3824	IN	Data Raw: 89 9e e5 5f 57 41 74 26 7e bc e8 2e b6 6f 65 e2 99 cf 79 f6 ad 9f cf 8c d5 27 2d 55 db 08 51 d5 23 1d d3 55 c4 33 4f d8 65 ee 03 38 b2 79 0b b7 5f 4a ac 9e b1 67 e3 ce 90 f1 7a ac dc f3 79 52 3e cd 2b 5a eb bc 13 f6 a4 7b 07 5d 03 03 2f 9c e7 4a d8 41 b0 73 23 57 be ec 96 6a 7b 4c 38 91 33 5f 2e 5c c3 36 1e 7c 05 6f ef 88 a3 e9 94 be 18 c5 d2 d9 22 87 a0 4b 1c 3c f8 7c d0 e7 7f e6 10 c7 1f 86 ce 89 9b bb 20 79 12 e7 20 7b 5a 5b 1b 1b cb f2 47 8e dc 0b ef 62 68 f5 e8 c0 3e 4e da 06 7b 77 ca 50 92 92 e9 fe 86 38 d0 52 ce b2 97 a9 4b bb 2f 47 f2 fd fc 35 6c 5e bf 84 ef 47 f5 a5 5d a3 4a 14 ca 90 28 52 0b a0 50 66 bf cb ac 18 fe 19 23 37 dc 78 6e 5f df da 3b 2e bb af 67 e2 de 59 6f 6e d9 ba 59 62 67 c7 e5 ed df 33 71 e2 c4 d7 4f d3 d6 70 31 28 ec 55 9b b8 7b Data Ascii: _WAt&~.oey'-UQ#U3Oe8y_JgzyR>+Z{]/JAs#Wj{L83_.\6\|o"K<\| y {Z[Gbh>N{wP8RK/G5l^G]J(RPf#7xn_;.gYonYbg3qOp1(U{
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 72 cf e7 49 f9 28 06 1c ff 7f 72 48 5d 93 9e 1d cb c4 bc 6b a0 43 6a 6a 7d 3d 9d 89 5d 2b 93 2e 4e a4 9f 17 a6 20 9e dc f7 c1 e7 fe 13 82 22 d5 9a 1d 13 64 a3 ee 97 53 f9 fe ab 1a bc 74 71 c0 17 39 66 a1 64 d1 54 96 77 29 82 63 aa 7c e4 8f e6 89 ce d9 0a 92 2f 52 eb 27 eb 7b 96 ad 44 29 4b 85 de 76 f7 1d 89 9b b3 11 63 67 ff c8 80 8f 4b 91 ca 16 42 c6 88 43 22 f2 d6 ea ce b4 59 13 f8 24 4f 7c db cc 28 38 e5 a4 41 b3 d2 24 8e 62 d5 c1 37 2e 73 2d a4 4b e5 df 58 76 63 b4 fd 50 f6 89 8b f1 f9 b4 ef e9 57 3f 1f 09 23 1f 7a 53 20 4f ee f9 70 c7 f7 31 01 91 53 13 97 54 94 6d 3b 8a 1f 46 34 24 dd 0b dd 3a 63 0f 03 49 4b 74 e1 bb 1f 06 52 37 77 92 e7 02 65 53 e0 13 ee f9 dc c1 f7 71 c0 73 61 90 6b ea 92 74 18 f3 03 43 ea 67 fa 47 c7 a3 73 ce 5d 87 a6 a5 93 47 f1 Data Ascii: rI(rH]kCjj}=]+.N "dStq9fdTw)c\|/R'{D)KvcgKBC"Y$O\|(8A$b7.s-KXvcPW?#zS Op1STm;F4$:cIKtR7weSqsaktCgGs]G
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 6b e5 3b 80 23 eb b6 e2 9b b5 2a 55 73 86 86 49 c6 7b 5e 78 df 09 e4 c2 e2 2f a9 57 ab 16 b5 42 a6 fa f4 5b 76 91 a0 db 97 b8 f4 24 64 31 0b 07 52 a7 4d 6b f9 7f 28 fb 78 ee b8 d9 05 13 6c a9 ac 07 dd ba c0 c5 c7 f1 c8 9e 23 8d a5 ca 6e e3 92 9d bc 59 dd 42 6f 07 df e4 fc c5 c7 24 cd 99 8f 34 91 02 23 d7 ac 79 c9 19 f7 31 17 ce fb d8 e6 80 f3 07 29 f8 20 6c 25 a6 87 f8 de f5 c7 25 41 42 dc c3 8e b0 4b 21 ea 36 c8 c5 95 39 9f 52 b3 52 2d 5a 76 1f cc cf fb 9e 91 31 6f 26 12 44 7a 17 ec 5c 12 90 c0 2d 98 bb 3e f7 22 ba 64 49 2c e3 44 e9 ee b3 59 b0 60 41 a4 69 2e 7d 2a 25 b0 3d 6e e5 48 f2 94 c9 23 ca 55 8c f8 71 f4 e7 81 8c dc e6 4a 8b a1 fd a9 94 22 ac d4 46 2d 41 85 be ac de b4 89 4d 91 a7 f5 bf d0 2c bb 8b 6d 09 03 1f 14 ff 98 ce 0d 33 e0 bd 76 01 3f 4f Data Ascii: k;#UsI{^x/WB[v$d1RMk(xl#nYBo$4#y1) l%%ABK!69RR-Zv1o&Dz\->"dI,DY`Ai.}%=nH#UqJ"F-AM,m3v?O
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: ef e1 fe 32 e8 d3 0f 4b 11 80 97 9e ef 85 9f 17 11 11 11 11 11 11 d1 77 a6 7c 8f a3 33 fa 62 e0 a2 d3 08 d7 b9 f1 94 d8 58 c1 52 94 84 c4 44 e1 3e 3a e1 36 7e e9 d2 12 23 77 7a eb 84 40 72 bc 7d 1b 00 a5 b5 13 b2 59 a5 91 1c 19 15 40 11 17 63 bc f6 f0 c0 c7 c7 9e 29 3f c0 d3 d3 1f 66 2e 85 91 d7 58 8a 42 85 5d a0 7a ed 01 af 8f 0f 64 53 22 c2 c3 13 81 26 f9 50 58 3d 35 ce d7 8e a1 33 f7 d5 47 19 d8 c7 b8 60 61 e4 93 bc 81 87 c7 a7 c1 8c 8a 08 2f 78 f8 4b 91 5f 28 53 7a 33 05 19 b2 ff 74 60 25 7b 73 1e 67 9e 28 51 a1 41 7d 64 4d 55 13 a6 25 1b c1 35 af 1c b7 8f 9f c4 3b bd 99 d1 33 c2 1c 35 db b5 42 ae d7 bf 63 d6 c2 03 b8 ef e5 0b f7 db fb 31 7f ce 5e 84 16 68 8d 36 55 cc 21 32 cd 87 82 b9 55 b8 f3 c7 06 9c 7d 26 34 a2 bb 87 b1 78 e5 29 84 ab 32 9a 7b 8a Data Ascii: 2Kw\|3bXRD>:6~#wz@r}Y@c)?f.XB]zdS"&PX=53G`a/xK_(Sz3t`%{sg(QA}dMU%5;35Bc1^h6U!2U}&4x)2{
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 8f b0 75 c9 29 bc b7 b6 82 38 c6 1f 8f af 5d c5 f3 50 dd 19 c4 44 70 70 9d 81 df e7 37 87 1d a3 58 22 22 22 22 22 22 a2 4c 8b 81 15 65 1e 89 b7 31 ab cd 68 1c 0b f9 34 5f 95 1e b3 62 18 be 69 23 7a 16 36 d1 ae 20 22 22 22 22 22 22 a2 cc 88 fd 50 28 f3 90 38 22 9b 7d 3a 83 fd a4 4e 68 34 76 06 ba 32 ac 22 22 22 22 22 22 22 ca f4 18 58 51 e6 21 75 42 c1 62 ce b0 b7 90 42 f3 3c 38 b1 11 ac b2 e6 43 85 86 3d 31 63 e3 36 cc 6e 9d 1f 46 9a 0d 89 88 88 88 88 88 88 28 33 e3 90 40 ca 94 94 72 19 94 62 23 48 19 b9 12 11 11 11 11 11 11 fd eb 30 b0 22 22 22 22 22 22 22 22 22 83 c2 fe 29 44 44 44 44 44 44 44 44 64 50 18 58 11 11 11 11 11 11 11 11 91 41 61 60 45 44 44 44 44 44 44 44 44 06 85 81 15 11 11 11 11 11 11 11 11 19 14 06 56 44 44 44 44 44 44 44 44 64 50 18 58 Data Ascii: u)8]PDpp7X""""""Le1h4_bi#z6 """"""P(8"}:Nh4v2"""""""XQ!uBbB<8C=1c6nF(3@rb#H0""""""""")DDDDDDDDdPXAa`EDDDDDDDDVDDDDDDDDdPX
2024-10-30 16:10:11 UTC	9129	IN	Data Raw: eb 41 76 b7 4c d4 7b af 14 85 f2 16 e3 d5 ac 5e 14 ae 59 8b f2 39 b2 50 b5 78 5a ae 5d 0a c1 e4 93 8f 6f a6 7c 49 9b ac 76 ce 1c bf 48 b8 9b 3b 21 c1 37 5c b7 1d da d8 36 ba 2f 9f 6c cd 4e ff 2f 4a 93 c6 38 98 42 77 ae 67 41 70 02 7c 2e ed 61 ee c2 5d 04 fb 79 73 64 d9 66 4e 58 63 86 65 96 47 ce 29 9f 82 15 e9 54 23 27 79 0a 97 a3 72 e6 9b 04 3d d0 3e 13 09 fc 13 72 7d db 0a c6 cf d9 4d 54 85 0f 59 d8 a7 98 71 56 3c 2a 49 e9 9a 74 a9 9a 99 ac 85 5f a7 53 55 33 cb 57 04 61 8d a3 0d c4 76 fe e6 76 8c 5b 33 fa 3b 4f 59 da 54 c9 41 a1 8a f9 c9 e1 9d 85 b7 9b 17 21 77 de e2 94 0a b8 c3 a5 2b d6 b8 db e9 3c de 62 3b e6 1f 6d f3 5d 6e 3e 3e 78 bb 19 c7 8d 9f 1f 7e ce 61 73 f7 cf b3 14 87 37 3d e6 7c 34 1b fb ab 36 d5 f3 67 a5 6a a9 8c f8 e5 2d 43 eb b2 99 28 58 Data Ascii: AvL{^Y9PxZ]o\|IvH;!7\6/lN/J8BwgAp\|.a]ysdfNXceG)T#'yr=>r}MTYqV<*It_SU3Wavv[3;OYTA!w+<b;m]n>>x~as7=\|46gj-C(X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49790	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	717	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/yvX_Qddf0AGmj1Pknk_iDCLGt8hEYZCPdUh1RVh8pZA/2023-11-09_14-10-13-xWg.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:10 UTC	614	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 46009 Connection: close Date: Wed, 30 Oct 2024 16:10:11 GMT Last-Modified: Thu, 09 Nov 2023 03:10:47 GMT Etag: "61948fd7507335de723b56753824501c" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: yvzdyRsUg2F9O6zFnIB0RnBvUfX7o26Y Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 98652de9f742fc1df9de714d921e14c2.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: Lb-CEo29BiUUrfWpyh30o-5SadrfPz8GVd1IqzCC6WVKZyWJSdeL7w==
2024-10-30 16:10:10 UTC	15770	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 3a 00 00 02 58 08 06 00 00 00 6b 74 4c 91 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 03 0a 14 2f 3e 7d af 00 00 20 00 49 44 41 54 78 9c ec dd 79 5c d4 75 fe c0 f1 d7 1c 30 dc 22 67 88 72 29 2a a2 88 07 1e 29 79 60 59 d1 a5 6d 5a fd 52 2b dd 0e b3 2c db d5 6c 73 ab 75 b7 56 77 d7 2e b3 cd b4 43 dd 0c 3b 2c 4b d3 d2 b2 50 f3 96 10 44 c0 03 50 44 54 90 1b 06 e6 f8 fd 31 c3 30 dc a0 80 80 ef e7 e3 c1 63 66 be 9f cf f7 fb f9 7c 67 86 99 f7 7c ae af e2 06 ff a1 46 84 10 42 08 21 3a 21 e5 b5 ae 80 10 42 08 21 44 6b 91 40 47 08 21 84 10 9d 96 04 3a 42 08 21 84 e8 b4 24 d0 11 42 08 21 44 a7 25 81 8e 10 42 08 21 3a 2d 09 74 84 10 42 08 d1 69 49 a0 23 84 Data Ascii: PNGIHDR:XktLpHYs+tIME/>} IDATxy\u0"gr)*)y`YmZR+,lsuVw.C;,KPDPDT10cf\|g\|FB!:!B!Dk@G!:B!$B!D%B!:-tBiI#
2024-10-30 16:10:10 UTC	1158	IN	Data Raw: dd de 9f 4d 41 05 40 c9 61 53 90 d3 52 4a 0e 60 b8 64 75 0e 8d d5 47 9f 8e 6e 9f 55 7d 8a 0e 98 03 52 21 84 10 d7 b3 0e 1f e8 a0 af a7 a5 06 c0 c9 c1 3c ee c3 19 9c 1a c8 d7 d0 31 6a 66 cd 4c 31 dd 71 0d 42 e5 ee 6b ba 5f 74 0c 83 65 88 50 31 86 13 c7 4c 77 bb 4c 40 3d 79 1e aa 1e e6 11 be 19 07 60 c8 54 6c fb 05 99 f3 ba a3 1c f5 14 36 c1 75 14 54 72 0c 43 5a b6 39 db 1d a8 27 3f 85 d2 cd 3c 2b e9 74 2c ba 6a 03 83 34 28 42 9e 42 7d f7 54 14 e6 2c c6 bc f4 06 27 9f 81 0e 63 69 31 86 bc 62 f4 71 7b 4c ad 39 80 c2 cd 74 4e fa a4 fd e6 43 0f 46 75 f7 3c d4 a1 bd 4d 8f f3 e3 31 e4 81 31 fd 18 46 bd b9 ec d0 a7 b0 99 3c 03 85 5d 83 05 36 5f 97 08 94 bd 46 a2 f0 6c 42 7d 52 8e 60 d4 59 d5 e7 ee 56 a8 8f 10 42 88 0e a7 e3 07 3a 0d 31 6a c0 06 b0 71 42 51 d7 18 Data Ascii: MA@aSRJ`duGnU}R!<1jfL1qBk_teP1LwL@=y`Tl6uTrCZ9'?<+t,j4(BB}T,'ci1bq{L9tNCFu<M11F<]6_FlB}R`YVB:1jqBQ
2024-10-30 16:10:10 UTC	16384	IN	Data Raw: e6 14 63 bc 68 1e f0 6a e3 87 c2 cb 3a 4d 8d d2 cb dc 95 a2 4f c6 70 02 94 7d ee 40 d5 7f 30 0a 1b 73 40 a4 d0 80 d7 1d a8 6e 0e 33 3d e1 37 8c 44 15 d8 cd 3c 08 5a 8d 42 5d 77 bc a9 1a 7e 3f aa 80 20 2c 17 80 52 b9 a3 e8 33 03 9b 61 2d 7c 41 aa 1e 61 28 2b 7b ca ce 1d 41 af 07 45 b7 91 d8 8c bb 03 85 a3 d5 85 36 35 41 28 23 ee 47 e5 03 a8 fc 51 8f 9c 50 75 8e 0e 83 51 74 a9 7e 58 45 af 71 a8 7a 54 76 33 a9 51 f4 b8 f5 8a a7 7c 37 bb 3e 4e 11 28 bb b5 f1 85 bb 84 10 42 b4 3b 0a a3 b1 25 e6 5d d7 af 68 ed df 6b 6d b3 9d da 3a 97 3a 30 6a 4b fe 9f bd 7b 0f 8b aa 5a 1f 38 fe e5 e6 28 36 83 17 40 fd 81 4a 18 9c a6 49 45 34 41 f1 46 09 58 12 9a 7a 30 45 4d 4c 43 ca d0 e4 68 5a de ef 97 28 f5 68 66 6a 72 44 33 39 92 49 98 a1 96 4a 21 60 88 a8 07 31 11 f2 02 a5 Data Ascii: chj:MOp}@0s@n3=7D<ZB]w~? ,R3a-\|Aa(+{AE65A(#GQPuQt~XEqzTv3Q\|7>N(B;%]hkm::0jK{Z8(6@JIE4AFXz0EMLChZ(hfjrD39IJ!`1
2024-10-30 16:10:11 UTC	12697	IN	Data Raw: 56 24 a9 18 31 ce 8d 65 ee b5 08 5f b4 9f 2f d3 a0 7d 7f 1f 32 17 3e 0f c0 b8 85 3e 64 f6 7f f2 82 1c 90 1e 1d 21 8a 39 b8 73 37 31 87 cb 58 78 fd 0a 29 49 c5 4f f3 29 a6 f6 b4 eb e3 50 62 c5 0b 24 26 5d 00 5b 57 da 59 58 83 4b 43 a2 a2 d2 48 bc d2 89 97 2d a0 30 28 c1 d6 95 c0 de ae a8 80 76 a6 7f 92 18 76 4a f7 fd 8a 96 97 e2 f7 23 24 5f 37 c5 a9 a5 1a 33 07 e8 50 e7 14 c9 07 53 19 e8 a0 bb e0 a7 1f 21 f9 1a d8 7a fb f2 56 a7 86 40 1b 6c af 2f 67 f6 4f da c5 37 93 7e 23 ee 9a 82 97 df ea c3 cb cd 80 d6 36 e4 a4 ae 25 2a f1 30 17 3a 76 d3 6d a4 19 be 6f 7b d1 ce 18 a8 7f 85 c4 cf 0f 73 3a f3 02 66 0e 0d 31 ab ab 3d 95 98 d6 b5 40 55 a7 64 e6 2e 70 e6 02 60 55 f2 73 05 8d ff d1 46 db 53 42 3e 71 bf a6 71 bd 8e 03 23 df f6 42 63 0c b4 b4 e0 fa cc ad c4 fd Data Ascii: V$1e_/}2>>d!9s71Xx)IO)Pb$&][WYXKCH-0(vvJ#$_73PS!zV@l/gO7~#6%*0:vmo{s:f1=@Ud.p`UsFSB>qq#Bc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49788	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	711	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/OsOFUPxmwvAhgpYBuNj_megWSBxvENU2DZ1s34TBiFk/1699504624427-AFU.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:10 UTC	614	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 58544 Connection: close Date: Wed, 30 Oct 2024 16:10:11 GMT Last-Modified: Thu, 09 Nov 2023 04:37:07 GMT Etag: "49398d51cf1396af8b1a383c67003e49" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: xgHBIN2qBC9m5uHz5zAAvzdA8HChkIO. Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 342054511f9732c450e11bade76323dc.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: 8wiVCwu_-abXQ6Q_yYuW20YlIXx3LPT1FxpA2U7cRSRZS9uZonE4mQ==
2024-10-30 16:10:10 UTC	14588	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 36 00 00 02 42 08 06 00 00 00 d3 05 8d e2 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 e4 45 49 44 41 54 78 5e ec 9d 09 40 16 c5 fb c7 bf dc f7 21 08 88 20 22 8a 17 88 8a 37 4a 62 1e 98 96 e7 5f 4d 33 b5 bc ca 4c 4b 7f 59 56 66 66 65 5a 59 6a 59 5e 79 e6 99 77 1e 18 de a2 a2 88 88 e2 85 20 20 88 80 20 20 d7 cb f9 9f d9 dd 17 de 17 5e e0 45 01 01 9f 8f 2e bb 3b b3 ef ee ec ee ec cc 77 9f 79 76 46 a3 41 e3 8e 05 20 08 82 20 08 82 a8 03 68 4a 73 82 20 08 82 20 88 5a 0f 09 1b 82 20 08 82 20 ea 0c 24 6c 08 82 20 08 82 a8 33 90 b0 21 08 82 20 08 a2 ce 40 ce c3 44 09 34 34 00 2d 4d 0d 36 e7 93 14 Data Ascii: PNGIHDR6BsRGBgAMAapHYsodEIDATx^@! "7Jb_M3LKYVffeZYjY^yw ^E.;wyvFA hJs Z $l 3! @D44-M6
2024-10-30 16:10:10 UTC	2372	IN	Data Raw: d8 27 88 03 5b 8c 1b 25 f7 83 aa 05 44 ec c5 b8 0f 7f c5 5e e9 eb bf c9 de 6a f6 4f 44 10 04 51 07 20 61 43 10 a5 91 a7 0b bb 0e 2e 70 7b 7b 1e 3e a8 2c 1f 99 ea 40 5b fa 2c dc dc 05 e3 7e fd 95 7a f3 25 08 e2 a5 e2 c5 f9 d8 10 04 41 10 04 41 54 32 64 b1 21 08 82 20 08 a2 ce 40 c2 86 20 08 82 20 88 3a 03 09 1b 82 20 08 82 20 ea 0c 24 6c 08 82 20 08 82 a8 33 90 b0 21 08 82 20 08 a2 ce 40 c2 86 20 08 82 20 88 3a 03 09 1b 82 20 08 82 20 ea 0c 24 6c 08 82 20 08 82 a8 33 90 b0 21 08 82 20 08 a2 ce 40 c2 86 20 08 82 20 88 3a 03 09 1b 82 20 08 82 20 ea 0c 24 6c 08 82 20 08 82 a8 33 90 b0 21 08 82 20 08 a2 ce 40 c2 86 20 08 82 20 88 3a 03 09 1b 82 20 08 82 20 ea 0c 24 6c 08 82 20 08 82 a8 33 90 b0 21 08 82 20 08 a2 ce 40 c2 86 20 08 82 20 88 3a 03 09 1b 82 20 08 Data Ascii: '[%D^jODQ aC.p{{>,@[,~z%AAT2d! @ : $l 3! @ : $l 3! @ : $l 3! @ : $l 3! @ :
2024-10-30 16:10:10 UTC	16384	IN	Data Raw: b7 a1 85 29 ff 0b e9 d6 89 18 1a c2 8c 89 d6 1c c1 b2 10 87 bb b7 33 a1 d3 ce 0d ce 0a bf 33 6f ca 2a e3 fc 38 c4 28 dc 46 bb fa 8a e9 33 65 95 b5 b4 58 1a b6 ad d0 85 e5 bb 93 3b 37 e0 58 60 0c 32 f8 f1 6c dd 31 72 d2 00 b8 94 f7 db ea 44 95 f3 f0 5c 2f e5 a6 a9 0a 5f 57 c0 71 f8 a7 58 56 6c 3f 3a ac d2 56 9b da 72 fd 24 cc fb 8c c2 58 db 4c 1c da 5a cc 62 2b c0 f2 d9 dd 4c 18 ba b4 82 9d 62 e9 5b 8f 95 4d ec fd 2c 28 54 6e df 54 41 d8 3d 5c ca b7 43 e7 76 0a f9 4f d3 19 cd 9b 32 b1 14 2d 66 d0 e6 6d 5b 41 27 f6 24 56 6f f6 47 44 3c f7 f5 d1 86 f3 40 f6 b2 d5 4b 5e 28 12 44 dd 47 f1 d1 aa e1 28 7f 15 35 74 e8 28 7c b3 70 09 96 4d 72 2b aa f0 f2 93 10 b4 79 39 e6 ce 98 23 09 a0 e2 9f 89 db a1 93 27 b7 e9 de c2 a5 2b 11 08 b9 ce de 8e 0c dd d0 e5 b9 be c1 Data Ascii: )33o*8(F3eX;7X`2l1rD\/_WqXVl?:Vr$XLZb+Lb[M,(TnTA=\CvO2-fm[A'$VoGD<@K^(DG(5t(\|pMr+y9#'+
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 42 0e 9e 42 90 81 1b db 37 3b 97 6e ba b8 b2 b7 c8 4a 14 11 99 8d de 13 f9 3e dc 60 f5 20 04 a7 1e b8 61 cc c7 fd d0 c1 14 70 ec 33 be 4a 45 0d 41 10 04 41 d4 46 aa c5 13 b4 85 b3 35 ab f7 ef 8b 02 83 37 43 c1 1e 1d 9a f3 95 58 dc b8 97 8d 16 9d 3d 60 a3 03 68 37 f2 40 17 bb 14 44 ca 35 50 a3 96 f0 6e a4 cb 52 69 06 7b 4b 5d a4 a7 a6 08 16 8e c8 38 33 74 f0 6c 0c 6d 68 41 bf 71 33 34 35 96 b6 bf 1d 89 08 33 67 0c 68 6b c6 56 74 61 d3 c5 0d 2e f9 b1 08 91 ef cf d4 16 5d 9b f1 38 55 64 e2 ca d6 8d f8 fe 17 3e 6d c3 c6 6b 5a e8 32 d8 0b 2d 58 8c 7d 37 6f 7c 30 b8 3d cc d9 d5 d2 6e c4 8f 97 8d e4 64 16 e1 e2 84 16 99 f1 b8 9d 04 64 5d 8f 46 8c ad 3d da 4a dd bc d8 b7 60 db f3 2f a3 4d ed d0 80 a5 4f 58 e7 57 db 96 fd de 34 0f 59 99 7c ab 70 dc 88 30 40 bb 9e Data Ascii: BB7;nJ>` ap3JEAAF57CX=`h7@D5PnRi{K]83tlmhAq3453ghkVta.]8Ud>mkZ2-X}7o\|0=ndd]F=J`/MOXW4Y\|p0@
2024-10-30 16:10:11 UTC	8816	IN	Data Raw: 9a ed 2b f3 b2 d8 7f 2c 96 39 e6 ae b7 4c 65 5c ff 67 a2 9a ae f3 b8 b3 28 77 45 9f 89 1a de 5e 54 77 30 b0 a1 5a a6 10 e9 ff 5c 80 b9 bf f5 c2 3b 9f 45 e1 64 d2 72 44 1a 8e 61 44 49 be 1d aa 1b d2 f1 f1 dc 0c f4 5e 13 a9 3c d2 fd f9 92 80 1a 7b 84 dd 5e de 2f 44 e2 c3 67 ab f9 38 74 c7 91 f8 66 53 60 8d 95 f9 ba ca 62 52 c3 65 d2 3d 6e af 5b 16 03 1b aa 5d 2e 1a 11 f3 4e 6b 84 4d 32 c0 43 56 db 3b 38 c2 6b c8 33 98 e1 7c 0c e9 da 53 33 b2 71 b7 d2 dc 47 f1 a5 19 b1 e5 99 e0 b2 6d 48 98 3f 5d c9 07 d4 35 38 1a 29 62 9c cc 18 ee 33 f7 b4 da 72 ab e9 ec 4e e6 7f 9a a2 e6 0d 32 cf 55 24 e5 1a d7 6a 35 0d a6 fc 46 f2 ac 7e 0e 42 8d 96 39 98 54 85 30 2e 36 1f 96 8b 84 f0 10 44 24 16 42 36 a9 9f 1e 3d 07 3d b5 7c 4e f3 b6 9b 32 32 cb 33 71 f3 dc 4a ea f2 95 7e Data Ascii: +,9Le\g(wE^Tw0Z\;EdrDaDI^<{^/Dg8tfS`bRe=n[].NkM2CV;8k3\|S3qGmH?]58)b3rN2U$j5F~B9T0.6D$B6==\|N223qJ~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49789	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	612	OUT	GET /kb/v2/deployed/5de5c1e688134/4db52de3-999b-4de9-a518-4952820c5cb9/script-snippet.js HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:10 UTC	647	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 0 Connection: close Date: Wed, 30 Oct 2024 16:10:11 GMT Last-Modified: Fri, 25 Nov 2022 04:06:20 GMT Etag: "d41d8cd98f00b204e9800998ecf8427e" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=31550000, immutable X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 ee6745944298a5956e13c939ebdcf8f2.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: _gh69YRXBeO3Ubl_B30mgeRcTamyRXoolmeCOw_g8Lg9Ctx9QwChkw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49787	23.20.125.226	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	787	OUT	GET /api/settings/5de5c1e688134/en?is_init_load=true&loggedin_only=false&first_name=null&last_name=null&registered_at=null&previewMode=false&url=https%3A%2F%2Fknowledgebase.campaignagent.com.au%2Fen%2Farticles%2F481 HTTP/1.1 Host: ipa.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://knowledgebase.campaignagent.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:10 UTC	161	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:10 GMT Content-Type: application/json Content-Length: 2128 Connection: close Access-Control-Allow-Origin: *
2024-10-30 16:10:10 UTC	2128	IN	Data Raw: 7b 22 6c 61 6e 67 22 3a 22 65 6e 22 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 63 6f 6d 70 61 6e 79 49 64 22 3a 31 33 35 36 36 2c 22 66 6f 6e 74 22 3a 22 48 65 6c 76 65 74 69 63 61 22 2c 22 74 61 62 5f 63 6f 6c 6f 72 22 3a 22 23 30 36 31 39 33 33 22 2c 22 74 61 62 5f 74 65 78 74 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 63 6f 6e 74 65 78 74 75 61 6c 5f 63 6f 6c 6f 72 22 3a 22 23 31 61 62 62 39 63 22 2c 22 73 69 64 65 22 3a 22 72 69 67 68 74 22 2c 22 74 61 62 5f 74 65 61 73 65 72 22 3a 22 53 65 6c 66 20 2d 20 48 65 6c 70 22 2c 22 74 68 65 6d 65 22 3a 22 6c 69 67 68 74 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 6f 63 6b 65 64 5f 70 6f 73 69 74 69 6f 6e 22 3a 22 77 61 6c 6c 22 2c 22 70 75 73 68 5f 69 6e 5f 6d 61 72 67 69 6e 22 3a Data Ascii: {"lang":"en","settings":{"companyId":13566,"font":"Helvetica","tab_color":"#061933","tab_text_color":"#ffffff","contextual_color":"#1abb9c","side":"right","tab_teaser":"Self - Help","theme":"light","enabled":true,"docked_position":"wall","push_in_margin":

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: daa440d4-101e-0028-4cca-2a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161010Z-r197bdfb6b4cxj4bmw6ag8gees00000000z0000000008q1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:10 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:10 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161010Z-16849878b7828dsgct3vrzta7000000006rg00000000709y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:10 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: d63b5638-a01e-0021-2ab4-27814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161010Z-16849878b78z2wx67pvzz63kdg00000006v000000000mer4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:10 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: b9cb9fa3-701e-005c-6994-2abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161010Z-16849878b78hh85qc40uyr8sc800000008fg00000000q80n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:10 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:10 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 69b48820-e01e-0099-092d-27da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161010Z-17c5cb586f6f8m6jnehy0z65x400000007eg00000000m461 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49793	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	463	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/-8GkZpBDzRJeT8NDENojkWJfl3ZVC-XMk-FdjmaA86A/2023-11-09_12-43-37-KEk.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:11 UTC	621	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 52418 Connection: close Date: Wed, 30 Oct 2024 16:10:06 GMT Last-Modified: Thu, 09 Nov 2023 01:49:44 GMT Etag: "9c01dfd69aa193ad5aac620045ce83f6" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: MNWt8RxEVfxxl3CBNM_IpBc592V6yl7s Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 b6be6ee8d445cfa291adcacd75a3fb12.cloudfront.net (CloudFront) Age: 5 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: 8yYiAQ0d0uMLxrSjNN52q0c-gCd5zrJ95to_t0v2bdKM9CGZw7W2Ig==
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1c 00 00 02 6b 08 06 00 00 00 ab d9 4a 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 01 31 23 a8 b5 e3 f6 00 00 20 00 49 44 41 54 78 9c ec dd 7d 5c 54 e7 9d ff ff 17 30 03 c3 3d 11 08 20 b7 32 e8 28 a0 88 a8 78 57 31 4a 48 b4 2b 49 25 89 37 6b d3 c4 6e 4d dd 24 36 4d 7f 69 36 69 fa 4d d2 a6 49 d3 6c 6c 9b 26 6b e2 76 4d 36 49 13 35 e2 da b1 11 63 d0 88 05 15 15 41 05 74 d4 51 6e 05 e4 26 dc df 0d c2 ef 8f 19 60 c0 41 41 19 c5 f8 79 3e 1e 3c 1e cc 99 73 ae 73 9d 33 07 ce fb 5c d7 75 ce d8 34 b5 b4 75 21 84 10 42 08 61 45 b6 b7 ba 02 42 08 21 84 f8 ee 93 c0 21 84 10 42 08 ab 93 c0 21 84 10 42 08 ab 93 c0 21 84 10 42 08 ab 93 c0 21 84 10 42 08 ab Data Ascii: PNGIHDRkJpHYs+tIME1# IDATx}\T0= 2(xW1JH+I%7knM$6Mi6iMIll&kvM6I5cAtQn&`AAy><ss3\u4u!BaEB!!B!B!B!B
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: e0 05 bc 91 69 a4 b6 80 6e 68 a5 2e 1a 86 29 69 ea a2 52 b1 de 0a 8a 16 53 d3 65 37 4a 53 8b c5 92 64 93 9f 58 26 95 e0 26 36 69 8a a6 e0 05 2d 14 d4 80 12 30 41 10 74 44 9c df 1f 33 c0 70 1f 10 44 e9 79 bf 5e f3 12 ce f9 9e ef 79 ce 99 23 e7 99 ef e5 cc 6c af 2c 62 f6 56 6d cd 45 d2 f5 fc 00 00 20 00 49 44 41 54 70 f2 5d 82 2f d1 ac 8b cd a8 5c 58 76 86 a8 b0 3d d8 ce 5e 82 77 f7 16 3c 4e 71 07 cc f0 5c 95 cc 99 55 ee 98 b7 76 28 42 88 bb ea 8f 95 70 94 64 10 13 e2 83 ab b3 23 76 ce 6e 4c 09 89 23 b3 a2 19 5f fb c9 70 b3 92 a8 57 dd e8 e7 30 8f 98 4b da 55 79 49 ac f7 f7 c2 d9 c1 11 3b 57 2f e6 47 a4 50 58 a3 f9 5f 87 6e f9 1a fb d1 76 f7 cc de cc be e8 25 b8 3a eb 7c 1a ad 37 be aa 52 d7 7b 60 37 29 9a 73 ba 0b 8f ae a5 9f 83 4f 65 8b 82 6e 7d 0e ae 78 Data Ascii: inh.)iRSe7JSdX&&6i-0AtD3pDy^y#l,bVmE IDATp]/\Xv=^w<Nq\Uv(Bpd#vnL#_pW0KUyI;W/GPX_nv%:\|7R{`7)sOen}x
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 23 fd bf 31 f6 e2 67 cb f1 f8 77 26 60 8c 83 a3 25 5d 1b 31 f6 f5 c6 8f 1b 98 e8 9d 80 85 df 8b 04 c5 0c 63 d0 c3 5d aa ae df bf 16 cf 80 e3 3c 1f fe 4f d6 8d 7a 90 82 fd 5b 58 30 67 11 d7 b7 6c 23 68 94 b1 7e f5 b8 bc c8 85 a3 33 6a ec 5b b5 7f 2d 7d 96 9b 32 6c 00 d0 5e 8f 32 c0 c5 ed 6f 30 31 a4 94 39 1b 37 f2 51 af 9b 28 37 bd c9 8c a7 42 88 f9 dd a4 69 cd 00 00 20 00 49 44 41 54 3e 04 77 4b 3d f7 25 84 10 a2 82 24 1c 77 d1 85 ac cb 1c 3b f3 4b ab ec db 77 55 64 c5 27 ee ab 07 37 f0 d7 e9 71 1c f9 76 0b 31 a7 bd 58 e0 a8 5f 1d b9 99 99 9a 1f fc 5e 23 29 68 98 fe 3b cf df 47 f0 cc 04 ba af d1 f9 3a f9 2a 8a f9 fe ff f6 c1 4b 2b 09 9a a0 f9 be 74 eb 09 8b 79 3b f5 59 3c fe ef 07 16 8e 1a 4d 47 7d ea 31 34 a6 a3 a5 71 b5 85 f9 ec 8a 3f c2 30 ff 30 dc 14 Data Ascii: #1gw&`%]1c]<Oz[X0gl#h~3j[-}2l^2o0197Q(7Bi IDAT>wK=%$w;KwUd'7qv1X_^#)h;G:*K+ty;Y<MG}14q?00
2024-10-30 16:10:11 UTC	3266	IN	Data Raw: 08 21 8c 4e 12 0e 21 ca 69 fe 24 f1 d3 69 bc e0 e9 46 57 27 17 ba ba 0f e5 f5 95 87 f8 53 53 59 24 e5 23 17 ba be ba 85 3f 6f 5f 94 42 08 71 57 92 84 43 08 00 cd 79 36 bf ee cd b8 2d 4d f1 79 6f 3d f1 09 df b2 ed c3 51 58 ee 78 99 01 af 6f e1 bc a6 fe 2a c4 9d e0 4f 36 bf ea c2 ab 5f d7 9d 12 fe f9 75 90 24 8e 42 dc 62 4d 6e 77 00 42 dc 09 2e ef fa 88 ff 24 b9 f2 de e6 99 0c fb 3f ed b4 96 bd 9f e3 bd 4f e0 cc 90 b9 7c 72 ea 14 40 00 00 0c 19 49 44 41 54 7a 68 20 ef f6 36 bf bd 41 0a 21 c4 5d 4c 7a 38 84 e0 4f 76 c7 ee 01 9f 51 78 ff 5f b5 97 1e 7d 8a e7 07 3d ca f1 d3 bf 55 99 7c fe 50 04 af 7a ba d1 d5 c9 0d 8f 97 3e 22 a1 da 57 e5 e2 d3 5b 78 ff a5 a7 e9 5e 7e 6a e6 d3 54 2e 57 f4 92 a4 32 df c9 85 57 37 a5 92 b8 32 08 8f 5e 2e 74 ed f5 34 2f 7c b4 af Data Ascii: !N!i$iFW'SSY$#?o_BqWCy6-Myo=QXxo*O6_u$BbMnwB.$?O\|r@IDATzh 6A!]Lz8OvQx_}=U\|Pz>"W[x^~jT.W2W72^.t4/\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49797	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	463	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/bA6_r0z7PmduA_pjPx1M6HWUeYsXkJzt-aD9tot8sKM/2023-11-09_12-50-22-jdU.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:11 UTC	621	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 51787 Connection: close Date: Wed, 30 Oct 2024 16:10:06 GMT Last-Modified: Thu, 09 Nov 2023 01:50:41 GMT Etag: "4cc05b615065aaf5afbe6831cd18eaab" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: d_XMBOuxAds2YnxenqasvYO0sjbHlZmY Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 f952757fdddf3c9caa357164f2d464d8.cloudfront.net (CloudFront) Age: 4 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: y-EIxM42Cq30nswqRa1X3kCt7AJhJhYvvY33bBQ3cdWvj6vf8rp3YQ==
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 23 00 00 02 66 08 06 00 00 00 8e bf 80 6e 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 01 32 1c 35 fe 9d 08 00 00 20 00 49 44 41 54 78 9c ec dd 7b 5c 55 75 be ff f1 17 b0 37 6c ee c4 25 40 ae b2 d1 ad 80 02 a2 e2 6d c4 94 2c 6d a4 46 ca db 58 67 f2 cc 58 9e ca 69 9a 5f d3 a9 69 4e 35 75 72 1a 7f 39 33 4d 1d cb 33 47 3b d5 34 66 e1 cf b0 d4 0c 4d 18 6f a8 08 2a a0 3b d9 c8 55 40 2e 71 91 9b 9b cb ef 8f bd 81 0d 72 57 dc 58 9f e7 e3 e1 e3 21 7b af b5 be df b5 d6 17 d6 7b 7f bf df b5 b6 45 7d 63 73 3b 42 08 21 84 10 66 62 69 ee 0a 08 21 84 10 e2 87 4d c2 88 10 42 08 21 cc 4a c2 88 10 42 08 21 cc 4a c2 88 10 42 08 21 cc 4a c2 88 10 42 08 21 cc 4a c2 Data Ascii: PNGIHDR#fnpHYs+tIME25 IDATx{\Uu7l%@m,mFXgXi_iN5ur93M3G;4fMo*;U@.qrWX!{{E}cs;B!fbi!MB!JB!JB!JB!J
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 01 69 01 75 07 ec 34 fa d1 9d d4 5d 40 cf a2 96 f8 c0 c2 28 21 5d f4 50 51 72 34 75 25 75 71 fd 81 5f da 28 39 ea ca 42 49 d2 ca 43 ac 94 73 0c d8 55 9b 64 71 3c 29 ac 82 9c 83 48 b6 40 6b 8c a5 42 90 23 d2 7c ff 98 01 86 df 83 a2 28 be 9f 8f 07 0f 9c fb be ee eb ba ee 7b 6e b9 6b 74 9a d2 00 00 20 00 49 44 41 54 df 73 5d ef fb 1e 66 5c 48 62 41 78 30 0b b6 d4 32 ff 3f ff 8b 22 5d 16 ab 7d 4a d9 f8 dc 56 0a 9a 2b b2 f1 fc 49 5f b5 c6 d2 ff 5c f6 45 ba 91 b3 6e 09 29 c5 80 fa 15 8a f4 59 ac 9f 08 93 e2 b2 28 d2 6f 65 8e 73 67 47 c0 c8 a9 6d 0b 59 b0 0b 9e ff 53 2e 45 47 32 58 7c 23 89 d7 d3 da 96 aa cc 8a 61 56 fc 59 26 6d 3a 48 91 fe 20 5b 7c 8e f3 ea 9c 0d 1c 6d 00 e7 e0 ad 14 e9 77 10 0e 84 ef d0 53 a4 7f 05 7f b0 fd 9c ee 92 91 82 8d b3 88 3c ec c6 96 Data Ascii: iu4]@(!]PQr4u%uq_(9BICsUdq<)H@kB#\|({nkt IDATs]f\HbAx02?"]}JV+I_\En)Y(oesgGmYS.EG2X\|#aVY&m:H [\|mwS<
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 02 42 22 8e 21 df d7 5a 2c e0 be af a7 b9 21 de 1f ae eb ba 27 f1 dd 65 f2 48 7a 64 03 c5 d7 1c da ea 6c e4 58 5a 18 8b d7 e7 71 c6 aa 21 36 2d 85 59 13 bf c5 85 12 42 88 6f e8 07 ce 1e c0 ed d6 f2 49 19 46 5c 71 9d 00 1d c6 32 aa 5a 42 09 f7 74 f6 a8 ee 1c f3 f1 c3 94 84 65 11 e9 ed ec 91 8c 11 d7 4e b1 f1 c9 3c ea fd 13 39 7a ec 69 e6 79 f4 3b df 79 5e 69 ca 00 00 20 00 49 44 41 54 fc 21 85 7a 2b 2c ca e6 e8 be 68 3c 00 3a 1f 42 31 2b 9e 5c dd 29 6a 13 52 08 02 a8 7e 91 87 1e cf 43 31 29 8c 25 11 0d bc 53 da 38 44 a7 57 39 b6 63 3b e7 06 38 73 ae e4 30 f5 f8 91 f1 72 1e 69 c1 b6 63 ab 54 ad 68 37 17 f0 d6 87 e9 cc 5f e4 0e 35 a7 38 d4 00 93 d3 5f e1 68 5a 00 00 b1 f7 37 f2 d0 56 3d 85 1f 6e 20 ea 51 5b e2 a8 cd 4d 65 53 29 cc df 5e 82 2e d6 ef 5b 5d 26 Data Ascii: B"!Z,!'eHzdlXZq!6-YBoIF\q2ZBteN<9ziy;y^i IDAT!z+,h<:B1+\)jR~C1)%S8DW9c;8s0ricTh7_58_hZ7V=n Q[MeS)^.[]&
2024-10-30 16:10:11 UTC	2635	IN	Data Raw: 5a f4 52 15 8f da 0b a8 bf 3e d4 76 15 ad c3 f7 3d 89 d4 55 15 34 5f 1b d5 ff 81 60 df 86 ef e9 ee 33 5a 55 13 b9 0b 85 11 91 30 37 e8 73 81 33 21 8e b1 6b 1f 56 b2 f7 34 70 ec d7 71 23 5f 7d ba 97 67 9b 22 d9 f8 d6 79 da fe b8 93 b9 b7 8e 52 b4 f7 0c 43 d3 35 9e 46 d6 e6 ed c5 3b bf 86 8f da 3b f8 e8 b5 6c 6e 1f 2a e0 e9 f7 bc 61 2d bb 5f 29 a1 de 52 c8 b1 0f cf f3 fe 8e 0c fc 47 8a d9 7d 76 a8 95 00 ee aa 42 4a 4f 4f 16 dd c7 df 00 00 09 a2 49 44 41 54 61 c5 c1 56 3a 3f 7c 9b d5 ff 53 43 d9 3b e1 bd f3 9e 7c 9e 27 f7 f6 92 52 de 4c 67 7b 33 e5 f1 5d 94 2e ad a0 7d 60 82 e1 ba f6 f3 c6 e7 49 fc ee 44 07 6d f5 5b 71 5e af 61 dd 96 46 fa 06 27 cd be e3 1b 58 b8 d7 4b 4e 75 2b 9d ed ad 1c 5a 10 e0 8d 55 9b 82 93 32 06 ce 8c 0c 68 ea c0 3d 3c 0f fb 71 bb 5c Data Ascii: ZR>v=U4_`3ZU07s3!kV4pq#_}g"yRC5F;;ln*a-_)RG}vBJOOIDATaV:?\|SC;\|'RLg{3].}`IDm[q^aF'XKNu+ZU2h=<q\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49794	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	375	OUT	GET /sdk/main/v4/1714634144204/elevio-main.js HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:11 UTC	713	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 400896 Connection: close Last-Modified: Thu, 02 May 2024 07:15:45 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: Q4cFTfD0NTVe99rdHOv63VqG7bJ7Pq_T Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 06:51:37 GMT Cache-Control: max-age=2592000, public, immutable Etag: "cb11f8ca9f8a5761d8cd635ec64618ae" Vary: Accept-Encoding Via: 1.1 f7d063966b06905209f8790f5fd607e2.cloudfront.net (CloudFront) Age: 33515 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: iIKvEuR42RhBuj68QAqcib4Q6w_ellShblfZuLN1V-0kYVN7BvJCDg==
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 65 78 70 6f 72 74 73 2c 20 72 65 71 75 69 72 65 24 24 30 2c 20 72 65 71 75 69 72 65 24 24 31 24 31 29 20 7b 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6f 77 6e 4b 65 79 73 28 6f 62 6a 65 63 74 2c 20 65 6e 75 6d 65 72 61 62 6c 65 4f 6e 6c 79 29 20 7b 0a 20 20 20 20 76 61 72 20 6b 65 79 73 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 62 6a 65 63 74 29 3b 0a 20 20 20 20 69 66 20 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 73 79 6d 62 6f 6c 73 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 6f 62 6a 65 63 74 29 3b 0a 20 20 20 20 20 20 65 6e 75 6d 65 Data Ascii: (function (exports, require$$0, require$$1$1) { 'use strict'; function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); enume
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 31 67 6a 7a 61 20 70 20 69 6d 67 7b 6d 61 72 67 69 6e 3a 30 7d 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 31 67 6a 7a 61 20 68 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 31 67 6a 7a 61 20 70 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 31 67 6a 7a 61 20 64 69 76 3e 69 6d 67 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 7d 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 31 67 6a 7a 61 20 69 6d 67 7b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 76 65 72 74 69 63 61 6c 2d 61 6c Data Ascii: 1gjza p img{margin:0}#_elev_io ._1gjza hr{margin-bottom:8px;margin-top:8px}#_elev_io ._1gjza p{margin-top:0}#_elev_io ._1gjza div>img{margin:10px 0}#_elev_io ._1gjza img{border-style:none;cursor:pointer;height:auto;margin:30px 0;max-width:100%;vertical-al
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 6e 6f 6e 65 3b 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 6e 6f 6e 65 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 3b 74 65 78 74 2d 6a 75 73 74 69 66 79 3a 61 75 74 6f 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 2e 65 6c 65 76 69 6f 52 65 73 65 74 20 69 6e 70 75 74 3a 3a 73 65 6c 65 63 74 69 6f 6e 2c 2e 65 6c 65 76 69 6f 52 65 73 65 74 20 74 65 78 74 61 72 65 61 3a 3a 73 65 6c 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 33 64 34 66 63 7d 2e 65 6c 65 76 69 6f 52 65 73 65 74 20 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 2c 2e 65 6c 65 76 69 6f 52 65 73 65 74 20 74 65 78 74 61 72 65 61 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 7b 62 Data Ascii: none;text-emphasis:none;text-indent:0;text-justify:auto;text-shadow:none;text-transform:none}.elevioReset input::selection,.elevioReset textarea::selection{background-color:#b3d4fc}.elevioReset input::-moz-selection,.elevioReset textarea::-moz-selection{b
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 5f 69 6f 20 2e 5f 78 79 36 71 73 2e 5f 6b 65 6b 64 61 2c 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 78 79 36 71 73 2e 5f 7a 76 64 79 6a 7b 61 6e 69 6d 61 74 69 6f 6e 3a 30 73 20 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 31 7d 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 31 39 7a 6e 68 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 7d 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 73 62 67 78 34 2c 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 73 62 67 78 34 20 61 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 5f 65 6c 65 76 5f 69 6f 20 2e 5f 73 62 67 78 34 20 61 7b 63 6f 6c 6f 72 3a 23 39 62 39 62 39 62 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 74 65 78 74 2d 64 Data Ascii: _io ._xy6qs._kekda,#_elev_io ._xy6qs._zvdyj{animation:0s none;opacity:1}#_elev_io ._19znh{transform:translateZ(0)}}#_elev_io ._sbgx4,#_elev_io ._sbgx4 a{text-align:right}#_elev_io ._sbgx4 a{color:#9b9b9b;display:block;font-size:10px;font-weight:300;text-d
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 22 3d 3d 3d 72 3f 6e 3d 41 54 54 52 5f 56 41 4c 55 45 5f 53 51 3a 6e 3d 3d 3d 41 54 54 52 5f 56 41 4c 55 45 5f 44 51 26 26 27 22 27 3d 3d 3d 72 7c 7c 6e 3d 3d 3d 41 54 54 52 5f 56 41 4c 55 45 5f 53 51 26 26 22 27 22 3d 3d 3d 72 3f 28 74 2e 70 75 73 68 28 5b 41 54 54 52 5f 56 41 4c 55 45 2c 73 5d 2c 5b 41 54 54 52 5f 42 52 45 41 4b 5d 29 2c 73 3d 22 22 2c 6e 3d 41 54 54 52 29 3a 6e 21 3d 3d 41 54 54 52 5f 56 41 4c 55 45 5f 57 7c 7c 2f 5c 73 2f 2e 74 65 73 74 28 72 29 3f 6e 3d 3d 3d 41 54 54 52 5f 56 41 4c 55 45 26 26 2f 5c 73 2f 2e 74 65 73 74 28 72 29 3f 28 74 2e 70 75 73 68 28 5b 41 54 54 52 5f 56 41 4c 55 45 2c 73 5d 2c 5b 41 54 54 52 5f 42 52 45 41 4b 5d 29 2c 73 3d 22 22 2c 6e 3d 41 54 54 52 29 3a 6e 21 3d 3d 41 54 54 52 5f 56 41 4c 55 45 26 26 6e 21 Data Ascii: "===r?n=ATTR_VALUE_SQ:n===ATTR_VALUE_DQ&&'"'===r\|\|n===ATTR_VALUE_SQ&&"'"===r?(t.push([ATTR_VALUE,s],[ATTR_BREAK]),s="",n=ATTR):n!==ATTR_VALUE_W\|\|/\s/.test(r)?n===ATTR_VALUE&&/\s/.test(r)?(t.push([ATTR_VALUE,s],[ATTR_BREAK]),s="",n=ATTR):n!==ATTR_VALUE&&n!
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 4d 4c 4c 65 67 65 6e 64 45 6c 65 6d 65 6e 74 3a 5b 22 6c 65 67 65 6e 64 22 5d 2c 48 54 4d 4c 4c 69 6e 6b 45 6c 65 6d 65 6e 74 3a 5b 22 6c 69 6e 6b 22 5d 2c 48 54 4d 4c 4d 61 70 45 6c 65 6d 65 6e 74 3a 5b 22 6d 61 70 22 5d 2c 48 54 4d 4c 4d 61 72 71 75 65 65 45 6c 65 6d 65 6e 74 3a 5b 22 6d 61 72 71 75 65 65 22 5d 2c 48 54 4d 4c 4d 65 64 69 61 45 6c 65 6d 65 6e 74 3a 5b 22 6d 65 64 69 61 22 5d 2c 48 54 4d 4c 4d 65 6e 75 45 6c 65 6d 65 6e 74 3a 5b 22 6d 65 6e 75 22 5d 2c 48 54 4d 4c 4d 65 6e 75 49 74 65 6d 45 6c 65 6d 65 6e 74 3a 5b 22 6d 65 6e 75 69 74 65 6d 22 5d 2c 48 54 4d 4c 4d 65 74 61 45 6c 65 6d 65 6e 74 3a 5b 22 6d 65 74 61 22 5d 2c 48 54 4d 4c 4d 65 74 65 72 45 6c 65 6d 65 6e 74 3a 5b 22 6d 65 74 65 72 22 5d 2c 48 54 4d 4c 4d 6f 64 45 6c 65 6d 65 Data Ascii: MLLegendElement:["legend"],HTMLLinkElement:["link"],HTMLMapElement:["map"],HTMLMarqueeElement:["marquee"],HTMLMediaElement:["media"],HTMLMenuElement:["menu"],HTMLMenuItemElement:["menuitem"],HTMLMetaElement:["meta"],HTMLMeterElement:["meter"],HTMLModEleme
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 75 72 6e 20 6f 7c 7c 28 6f 3d 43 29 2c 73 28 22 22 2e 63 6f 6e 63 61 74 28 65 29 2e 63 6f 6e 63 61 74 28 74 29 2c 6e 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 66 6f 72 45 61 63 68 24 32 28 6f 2e 70 6c 75 67 69 6e 73 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 6f 3d 6e 5b 65 5d 3b 6f 26 26 74 28 6f 29 3b 7d 29 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 65 26 26 76 28 22 6f 6e 45 72 72 6f 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 28 65 2c 6f 29 7d 29 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 65 66 61 75 6c 74 52 6f 75 74 65 72 4d 6f 64 65 6c 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 7b 6e 61 6d 65 3a 22 5f 72 6f 75 74 65 72 22 2c 73 74 61 74 65 3a 7b 5f 72 6f 75 74 65 73 3a 65 2c 5f 73 Data Ascii: urn o\|\|(o=C),s("".concat(e).concat(t),n,o)}}function v(e,t){forEach$2(o.plugins,(function(n){var o=n[e];o&&t(o);}));}function C(e){e&&v("onError",(function(t){return t(e,o)}));}}function defaultRouterModel(e,t,n){return {name:"_router",state:{_routes:e,_s
2024-10-30 16:10:12 UTC	16384	IN	Data Raw: 21 65 2c 22 3a 28 22 29 2c 68 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 55 74 28 74 2c 6e 29 2c 6a 74 28 21 69 7c 7c 21 69 2e 67 65 74 2c 78 74 28 22 6d 30 32 32 22 29 29 2c 5a 65 28 71 65 28 74 2c 76 6f 69 64 20 30 29 2c 6e 2c 72 2c 65 29 3b 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 24 6d 6f 62 78 2e 76 61 6c 75 65 73 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 67 65 74 28 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6f 74 28 74 68 69 73 2c 65 2c 74 29 3b 7d 29 2c 21 30 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 52 28 22 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 29 7b 72 65 74 75 72 6e 20 63 Data Ascii: !e,":("),ht((function(t,n,r,o,i){Ut(t,n),jt(!i\|\|!i.get,xt("m022")),Ze(qe(t,void 0),n,r,e);}),(function(e){var t=this.$mobx.values[e];if(void 0!==t)return t.get()}),(function(e,t){ot(this,e,t);}),!0,!1)}function T(e,t){return R("",e)}function E(e){return c
2024-10-30 16:10:12 UTC	16384	IN	Data Raw: 61 72 20 24 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 2c 6e 2c 72 29 7b 74 68 69 73 2e 61 72 72 61 79 3d 6e 2c 74 68 69 73 2e 6f 77 6e 65 64 3d 72 2c 74 68 69 73 2e 6c 61 73 74 4b 6e 6f 77 6e 4c 65 6e 67 74 68 3d 30 2c 74 68 69 73 2e 69 6e 74 65 72 63 65 70 74 6f 72 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 68 61 6e 67 65 4c 69 73 74 65 6e 65 72 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 61 74 6f 6d 3d 6e 65 77 20 4d 28 65 7c 7c 22 4f 62 73 65 72 76 61 62 6c 65 41 72 72 61 79 40 22 2b 53 74 28 29 29 2c 74 68 69 73 2e 65 6e 68 61 6e 63 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 28 6e 2c 72 2c 65 2b 22 5b 2e 2e 5d 22 29 7d 3b 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 74 65 Data Ascii: ar $e=function(){function e(e,t,n,r){this.array=n,this.owned=r,this.lastKnownLength=0,this.interceptors=null,this.changeListeners=null,this.atom=new M(e\|\|"ObservableArray@"+St()),this.enhancer=function(n,r){return t(n,r,e+"[..]")};}return e.prototype.inte
2024-10-30 16:10:13 UTC	16384	IN	Data Raw: 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 63 3c 33 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 61 2c 66 29 2c 66 7d 72 65 74 75 72 6e 20 6f 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 62 74 28 61 72 67 75 6d 65 6e 74 73 29 29 72 65 74 75 72 6e 20 69 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 69 28 6e 2c 72 2c 6f 2c 65 2c 74 29 7d 7d 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 24 74 28 65 2c 22 5f 5f 6d 6f 62 78 49 6e 69 74 69 61 6c 69 7a 65 64 Data Ascii: ==arguments.length&&c<3)&&Object.defineProperty(i,a,f),f}return o?function(){if(bt(arguments))return i.apply(null,arguments);var e=arguments,t=arguments.length;return function(n,r,o){return i(n,r,o,e,t)}}:i}function dt(e,t,n,r,o,i){$t(e,"__mobxInitialized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49792	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	463	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/5nReMwCINwOpxQkU4s0_Uigmf9pzJSvfep5v48N6vx4/2023-11-09_13-17-09-xdI.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:11 UTC	621	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 38461 Connection: close Date: Wed, 30 Oct 2024 16:10:08 GMT Last-Modified: Thu, 09 Nov 2023 02:21:56 GMT Etag: "2e98bcd1f003a4739741852c9b22287c" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: vOBkFiWpCdP2y73TpY1SexmdncaceVsE Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 da9380f22ff2303fc2fd4652bf7ec7ba.cloudfront.net (CloudFront) Age: 4 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: FQq9pKuPMfO1EmdFpfIC0yznA3-ropqo_EJVCXmcryES8olwYQjt2g==
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 3a 00 00 02 58 08 06 00 00 00 6b 74 4c 91 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 02 14 07 7e 03 69 99 00 00 20 00 49 44 41 54 78 9c ec dd 79 5c 54 e5 fe c0 f1 0f c3 32 ec 20 6b 88 22 a8 a8 08 22 a2 82 0b b8 24 69 85 59 ea 2f cc ae bb 66 49 98 a9 f7 6a 56 b6 d9 cd f4 96 b6 18 dd 4c d3 ab 96 62 d7 b8 69 ae 61 99 62 09 6e 88 10 02 2e 80 8e 08 22 22 ab c3 32 f3 fb 63 16 06 64 55 90 a5 e7 5d be 66 e6 3c cf 39 e7 39 87 33 33 df 79 b6 a3 f7 48 97 01 4a 04 41 10 04 41 10 da 21 49 4b 17 40 10 04 41 10 04 a1 b9 88 40 47 10 04 41 10 84 76 4b 04 3a 82 20 08 82 20 b4 5b 22 d0 11 04 41 10 04 a1 dd 12 81 8e 20 08 82 20 08 ed 96 08 74 04 41 10 04 41 68 b7 Data Ascii: PNGIHDR:XktLpHYs+tIME~i IDATxy\T2 k""$iY/fIjVLbiabn.""2cdU]f<9933yHJAA!IK@A@GAvK: ["A tAAh
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 20 0b 40 46 62 a2 ea cb 37 ef b7 7d 1c 2a 04 e7 d1 2f f0 a6 7a bd 37 47 db 40 66 14 7b e3 74 ca 6c ea cf f2 8f 5f 61 ee 9c 29 84 ad 78 8e 91 40 d9 c5 34 64 58 e0 ea ef 8b 67 17 d5 6f 2e e7 5e be f8 f4 71 c4 90 5c e2 4e ca 28 c3 83 17 17 8e 63 a8 ff 08 a6 bc f5 1c a3 3b 58 70 e7 03 dc 80 9c 00 00 20 00 49 44 41 54 42 2a 79 cd 7c 8a 1f 98 81 21 28 d4 01 8a 22 89 9f fe 97 86 c3 e8 17 58 f8 94 3b 0e 56 16 38 0f 99 c2 d2 10 67 52 23 23 38 7e 07 50 c4 b3 f7 47 19 3d 42 16 30 73 88 33 a6 56 36 b8 3f 35 8f b0 81 25 1c da 7f 82 e2 c6 ec bb 43 00 0b 43 47 e0 ea 60 81 43 b7 11 cc 1a e7 0a 85 06 8c 78 61 0a 43 bb d9 60 ea e0 4e 70 88 3f 0e 8a 34 52 2e aa 56 49 db 15 c1 21 85 3f 8b fe 1e 84 bb 83 05 0e 9e e3 58 14 e2 8c 2c ea 08 89 3a 5f a8 3d 26 fe 9d b9 a3 5d 71 b0 Data Ascii: @Fb7}/z7G@f{tl_a)x@4dXgo.^q\N(c;Xp IDATBy\|!("X;V8gR##8~PG=B0s3V6?5%CCG`CxaC`Np?4R.VI!?X,:_=&]q
2024-10-30 16:10:11 UTC	5693	IN	Data Raw: 3f 48 bf a6 2a 62 d6 2c 23 ce ad 2d 05 a7 4e 90 5e 00 4e 2d 83 79 7c 34 ac bf d6 f2 b4 65 19 5f 5e bc 56 b7 10 42 08 21 2a 52 f3 63 74 94 6d 69 df c2 c4 e9 93 67 8b 17 24 12 97 68 c2 3f a0 2d 00 e9 bb 7e 63 fd 25 6f a6 cc 9c c2 bc 71 4d 49 fd 63 0b 91 b9 c5 ab a6 5e a0 b0 ef 43 bc f4 ec 18 c2 1a 65 10 11 75 16 b8 44 e4 fa bd a4 36 ef cf bc e7 26 31 e0 12 3f b9 00 00 15 ac 49 44 41 54 b3 b7 03 d9 f9 c5 eb eb 8f b0 72 7d 22 9a 1e 63 78 e9 b9 89 4c 69 97 cf d6 35 bb 4a bb a4 ae 16 a0 ee 3e 9c 97 6e 96 e4 00 50 44 fa de 44 52 34 6e f8 79 40 d2 b6 5d ec 55 b6 65 e6 b3 d6 18 f3 f6 46 b3 57 ef 40 8f 40 1d d9 89 a7 49 07 d0 27 92 74 a9 11 6d 83 1c 00 c8 ca 77 65 c2 93 53 78 69 5a 10 4e f1 d1 ac 4c 6a ca 94 67 a6 f0 d2 84 e6 18 a3 f7 b2 23 17 a0 80 b8 5f 23 38 ec Data Ascii: ?Hb,#-N^N-y\|4e_^VB!Rctmig$h?-~c%oqMIc^CeuD6&1?IDATr}"cxLi5J>nPDDR4ny@]UeFW@@I'tmweSxiZNLjg#_#8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49796	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	463	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/JjCi9TejR6FXv7qK_NpJQvPUiIhZ6RlxSHdQoMDRRKk/2023-11-09_13-19-22-Ctg.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:11 UTC	621	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 35489 Connection: close Date: Wed, 30 Oct 2024 16:10:08 GMT Last-Modified: Thu, 09 Nov 2023 02:22:19 GMT Etag: "8481e2d0aebacf26df0d4466228fd406" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: sjeZVor00wpLxbD0PZc3e1_AUCd_xB6_ Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 b30b1c2659a3fb836783824fe37110ee.cloudfront.net (CloudFront) Age: 4 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: B5OW3ddc4ucz6SvgYe2861uhbrpMOo-PUlXvZoMjywb3JHkvCNfYyA==
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 3a 00 00 02 58 08 06 00 00 00 6b 74 4c 91 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 02 14 0d 9e d6 80 87 00 00 20 00 49 44 41 54 78 9c ec dd 79 5c 54 55 ff c0 f1 0f c3 32 ec 22 6b 88 22 a0 88 08 22 a2 82 0b ae a0 a6 a8 a5 fe c2 ec 71 4d b3 24 cc d4 e7 d1 34 69 f3 29 d3 a7 d4 d2 ec c9 34 4d 2d c5 1e a3 34 d7 b0 4c d4 5c 91 10 42 44 65 d1 11 41 40 64 75 d8 e6 f7 c7 0c c3 b0 83 8a 28 9e f7 eb c5 6b 66 ee 39 f7 de 73 ef 5c ee fd ce 39 e7 9e ab f5 4c fb 9e 0a 04 41 10 04 41 10 5a 20 49 73 17 40 10 04 41 10 04 a1 a9 88 40 47 10 04 41 10 84 16 4b 04 3a 82 20 08 82 20 b4 58 22 d0 11 04 41 10 04 a1 c5 12 81 8e 20 08 82 20 08 2d 96 08 74 04 41 10 04 41 Data Ascii: PNGIHDR:XktLpHYs+tIME IDATxy\TU2"k""qM$4i)4M-4L\BDeA@du(kf9s\9LAAZ Is@A@GAK: X"A -tAA
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 67 e4 aa 79 0a a2 d9 fc c1 76 4e e8 0f 26 e4 e3 f7 f9 ec 0d 1f 8a fe f8 9a 77 76 25 55 5a f4 ef df 6f 26 c9 6d 3a 9f ac 5e c0 52 5f 73 62 0f 7e cd 8f 17 81 ae 13 d8 b4 7a 36 81 d6 e0 30 6c 36 9b 56 bf c1 60 1b 00 19 fb 3e fc 9a 30 79 0f 42 3e 7e 9f 4d ef 4d 62 70 d9 69 56 7c 10 f8 01 7c 05 00 00 20 00 49 44 41 54 4a 42 19 4f 96 fb d9 af 57 f7 f0 ce f2 fd a4 7b bd c2 27 ab df e7 93 57 7b 28 f7 eb ff 64 0d 5c e9 93 b2 ff 4c e9 f5 f2 18 fa dd 8b e6 ab ef e3 28 ae 2d db 9d e3 ac 78 ab e2 38 db f4 ce 8b b8 a5 ed e7 9d 95 e1 ca f3 45 ad c7 91 ea ff e3 e7 34 dc 26 2f 60 d3 ea 05 bc dc 36 89 0d 1f 6c e6 4c 81 32 bd f8 e4 66 16 6f 4b c0 fa 45 e5 ff cf 07 63 6d 88 0d fb 9c b5 e1 b9 b5 95 46 10 5a bc 27 37 d0 b9 13 4d e8 9e 38 00 bc bb 38 03 25 5c f8 3d 92 6c cc 99 Data Ascii: gyvN&wv%UZo&m:^R_sb~z60l6V`>0yB>~MMbpiV\|\| IDATJBOW{'W{(d\L(-x8E4&/`6lL2foKEcmFZ'7M88%\=l
2024-10-30 16:10:11 UTC	2721	IN	Data Raw: d2 cb a7 09 61 30 ed 5c 74 ff cd 48 4f 86 e6 6a 1a 15 4a a4 a6 51 f3 82 7f 3b d2 77 e2 0c 46 bb 17 de b3 b4 0b 61 84 ea 35 6e 66 2a 15 2a fd 97 5c dd 08 67 c5 b2 d5 78 cc 1e 4b 8f b2 0e a9 10 75 48 d9 6d 48 1a 91 c7 02 69 d7 c1 8c b0 f9 f7 03 91 37 96 04 93 f6 80 ad a4 0d 11 a2 ee ab 65 77 5d e9 ae 8a 1c 9d 35 b4 1d be 1a cd 8a 55 4c ef 50 42 2f cf 92 54 d8 02 00 00 0a 10 49 44 41 54 43 d0 ee 59 cc 57 59 33 f8 fc e3 91 b4 53 ab 50 39 7a 33 fd d3 8f f0 dc b0 90 0d a7 75 0d 82 8d a5 19 18 9b 61 a3 52 a1 2a 77 b1 31 ac fd ea 5b cc 3e 98 44 df fc 86 43 ab 3d 5d f1 0a a6 07 f2 dd fb fb 99 30 73 0c ed 8a ac 0a f5 d3 1d 13 c7 ce a3 f8 cd e5 07 56 4d 75 2f e1 0a 4d 88 27 99 96 a4 cb 70 ca ef 13 36 58 cf e0 b7 93 a1 1c f6 1b 49 da cf e3 18 bb ec 21 be 8f 25 95 20 Data Ascii: a0\tHOjJQ;wFa5nf*\gxKuHmHi7ew]5ULPB/TIDATCYWY3SP9z3uaRw1[>DC=]0sVMu/M'p6XI!%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49795	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	463	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/VJG8pQvtfxy-4L_vWcLZtn7sEL4JAlB8TQIfJh_CX78/2023-11-09_13-16-20-hFg.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:11 UTC	621	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 42702 Connection: close Date: Wed, 30 Oct 2024 16:10:08 GMT Last-Modified: Thu, 09 Nov 2023 02:24:19 GMT Etag: "80a2e53f27b50f7eccaa0199cba465d3" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: mDQjxKsPfJwz75rczL1eg5PJmC4RptO. Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 55107fc1be09ed1afcf3154ed9bd93cc.cloudfront.net (CloudFront) Age: 4 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: mvcu6UCC6y5BlyaBh7qadNXZ43I_1qPHGSfmafT_qmh7RdJuIIqy0g==
2024-10-30 16:10:11 UTC	15763	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 3a 00 00 02 58 08 06 00 00 00 6b 74 4c 91 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 02 17 3a 0d 46 76 4b 00 00 20 00 49 44 41 54 78 9c ec dd 79 5c 54 55 ff c0 f1 0f c3 32 ec 20 6b 38 8a 80 a2 22 8a 08 0a 2e a0 22 a8 19 65 a9 bf 50 7b 70 37 4d a3 4c 7d 1e cd d2 36 2b d3 a7 b4 cc ec a9 34 4d 2d c5 32 ca 72 0d d3 dc 72 49 25 84 50 71 01 74 44 50 90 1d 87 65 e6 f7 c7 0c c3 80 ac 2a b2 78 de af 17 af 99 7b cf b9 f7 9e 7b b9 33 f7 3b e7 9c 7b ae de 63 ed 7a aa 10 04 41 10 04 41 68 81 24 8d 5d 00 41 10 04 41 10 84 86 22 02 1d 41 10 04 41 10 5a 2c 11 e8 08 82 20 08 82 d0 62 89 40 47 10 04 41 10 84 16 4b 04 3a 82 20 08 82 20 b4 58 22 d0 11 04 41 10 04 Data Ascii: PNGIHDR:XktLpHYs+tIME:FvK IDATxy\TU2 k8"."eP{p7ML}6+4M-2rrI%PqtDPe*x{{3;{czAAh$]AA"AAZ, b@GAK: X"A
2024-10-30 16:10:11 UTC	16384	IN	Data Raw: 38 51 a0 4e 2f 3e ba 8e 05 1b 13 71 18 a3 fe fc bc 33 c2 91 f8 a8 95 7c 1a 9d 5b 5d 69 04 a1 c5 6b be 81 ce ed 58 22 b7 27 00 e0 d7 c5 1d 28 e1 cc fe d3 64 61 c3 e8 97 26 32 64 80 3f a1 ff 1e 45 10 90 75 e8 38 f1 80 ac b7 17 32 20 e6 ec 3f ea 2f a1 f8 d3 ec 2f 00 43 5f 1f 3c 75 8e 84 df b8 57 99 1f 11 ce a4 88 b9 cc 0f b1 00 0a 31 eb 3b 93 25 b3 c3 99 14 f1 32 f3 42 2c 00 39 f1 f1 ea 8b 6f d6 1f 3b d9 9b 07 b2 21 cf b3 50 b3 dc c2 21 36 90 1a cd 8e 18 9d 32 9b fa b3 e8 a3 97 99 36 35 9c 88 c5 63 08 02 8a 2f 26 21 c7 02 17 7f 1f 3c db a9 7f 73 c9 3a fb e0 dd cd 11 43 32 89 39 29 a7 18 0f a6 cf 1e 4e 3f ff 81 84 bf 31 86 21 ad 2c c8 3e 97 48 56 03 1f e2 fb 66 60 08 4a 4d 80 a2 4c e0 d7 9f 92 70 18 f2 3c b3 9f 72 c7 c1 ca 02 59 df 70 e6 87 c9 48 8c 8a e4 48 Data Ascii: 8QN/>q3\|[]ikX"'(da&2d?Eu82 ?//C_<uW1;%2B,9o;!P!6265c/&!<s:C29)N?1!,>HVf`JMLp<rYpHH
2024-10-30 16:10:11 UTC	10555	IN	Data Raw: d9 9c aa 28 8a 92 a9 6c 7d bd 95 e2 f2 e1 f6 72 f2 bc a3 fc 5d dd 33 dd b5 78 65 eb d6 58 e5 6a 52 98 f2 ce ff 2b 1d ec 7c 7f a4 9a 65 09 51 cb a2 be f2 55 5c 26 07 97 3a ee a2 be e9 a7 b8 3c 64 76 8c e7 6e 57 e6 78 b4 52 ca b9 8e ba 51 66 88 f2 ba 47 2b 65 ce ae 52 47 97 f2 f7 87 37 1e 73 8a a2 28 ca d5 bd ca 47 0f f5 53 e6 cf 7f e7 c6 40 a7 3a f5 16 57 ff d7 0c c5 25 a0 4c 39 e1 73 95 4e 1e 33 94 ad 99 55 cf 23 84 a8 5c ad 0c 5d b5 9f 18 c6 de a5 9f 31 b1 7b 2b ac 6f f6 88 42 6d 99 77 0b 57 f6 38 c3 63 3b 58 1b d1 8e 09 a3 ba 53 fa 9d 9b 56 74 19 35 89 9e 11 0b d9 66 3e 69 f1 d2 3e 96 be 31 c6 34 9c 54 6a a8 28 82 05 9e de f8 4f df 01 9b 66 e3 ef e9 cd b3 eb d3 ca a9 30 0b 9c 27 f1 e6 b8 7e b8 9b 2f d6 bb e2 8d 01 8a e6 0d a4 9d 8e e0 68 3b 7f 5a 99 bf Data Ascii: (l}r]3xeXjR+\|eQU\&:<dvnWxRQfG+eRG7s(GS@:W%L9sN3U#\]1{+oBmwW8c;XSVt5f>i>14Tj(Of0'~/h;Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49798	18.238.243.57	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:10 UTC	347	OUT	GET /v1/events HTTP/1.1 Host: events.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:11 UTC	477	IN	HTTP/1.1 403 Forbidden Content-Type: application/json Content-Length: 42 Connection: close Date: Wed, 30 Oct 2024 16:10:11 GMT x-amz-apigw-id: AeMPiGDqIAMEvEw= x-amzn-RequestId: b7f9070c-5cc8-41d6-98aa-d68de807d479 x-amzn-ErrorType: MissingAuthenticationTokenException X-Cache: Error from cloudfront Via: 1.1 95ff0d830848b741160e24f658d880e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: ivQwwNuyHfKA8bs1R3C9spe6tQUi-0Q-9ZTt9YU8h-na0KoFmj68Ug==
2024-10-30 16:10:11 UTC	42	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 4d 69 73 73 69 6e 67 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 54 6f 6b 65 6e 22 7d Data Ascii: {"message":"Missing Authentication Token"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:11 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: ca0e8e6b-b01e-00ab-6a67-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161011Z-15b8d89586f5s5nz3ffrgxn5ac0000000920000000003qyd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:11 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:11 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161011Z-16849878b78sx229w7g7at4nkg00000006gg00000000d7pk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:11 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:11 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:11 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: d5dcea80-601e-0050-0829-2a2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161011Z-r197bdfb6b4cxj4bmw6ag8gees00000000wg00000000h5pu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:11 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:11 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:11 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161011Z-16849878b78zqkvcwgr6h55x9n00000007kg00000000zsm4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:11 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.6	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:11 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:11 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:11 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 5e2f3c3f-901e-0048-1b49-28b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161011Z-r197bdfb6b46kmj4701qkq602400000007g000000000553q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:11 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49806	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:13 UTC	463	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/2fww_btJ423Vy88SJ2Q5IWKLROZRak18D6mq2-1MAPw/2023-11-09_12-55-13-4-4.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:13 UTC	621	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 49076 Connection: close Date: Wed, 30 Oct 2024 16:10:08 GMT Last-Modified: Thu, 09 Nov 2023 01:57:25 GMT Etag: "032051f741ebcb639c205939f39aca51" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: krdVKcuFERYw3GKUvSqCV3MiXPZ.2T3G Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 3517ce13630d84c5b14e88de469985cc.cloudfront.net (CloudFront) Age: 6 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: 1y2GGrgQ_3acs0yu1up0lHRm9s_plvIS08tGlOz7s94QWkOjW8Wdnw==
2024-10-30 16:10:13 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1c 00 00 03 2a 08 06 00 00 00 c9 aa 98 78 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 01 39 11 a8 bb 38 7e 00 00 20 00 49 44 41 54 78 9c ec dd 7b 5c 54 f5 be f8 ff 97 0e c3 00 13 44 27 20 4f e0 3e 8a 46 22 86 a0 05 f9 95 d8 5e 61 bb 25 cb cb 06 6f 78 84 2c 6c 7b a9 b4 bc 95 66 59 5e 2a dd e1 a5 2d e5 41 53 c3 f0 84 7a 0a 63 83 77 82 43 d0 4e d0 20 8c 14 6c 2b fd 0c 28 49 0e c8 80 23 bf 3f e6 c2 00 83 0e ca 28 e8 fb f9 78 cc 43 58 f3 59 eb b3 d6 b0 9c f5 9e f7 e7 fd 59 d3 a5 fa b2 a6 01 21 84 10 42 08 2b ea 7a bb 77 40 08 21 84 10 77 3e 09 38 84 10 42 08 61 75 12 70 08 21 84 10 c2 ea 24 e0 10 42 08 21 84 d5 49 c0 21 84 10 42 08 ab 93 80 43 08 21 Data Ascii: PNGIHDRxpHYs+tIME98~ IDATx{\TD' O>F"^a%ox,l{fY^-ASzcwCN l+(I#?(xCXYY!B+zw@!w>8Baup!$B!I!BC!
2024-10-30 16:10:13 UTC	16384	IN	Data Raw: 3a 5b 62 93 28 a8 b9 56 9b 24 a2 bd fa b2 f2 db 5b b6 57 9d 46 79 d2 4c 3c 67 24 51 0e b4 3c 37 3b a2 3c 56 76 fa bf a5 ee 18 ae fd 7f be 82 a3 5b 62 d9 9d df 96 77 50 4b b6 db 94 a6 28 89 d7 27 05 e3 ed d5 17 4f bf 60 a2 37 65 53 ae 6d 43 97 a2 c3 eb 94 01 87 ca cb 9b 21 1c 20 fc be 3f 1e 00 00 20 00 49 44 41 54 bf d8 74 69 05 c7 8f 15 42 69 1a c7 9b 2c 3f 43 fe 61 18 d4 d7 13 d5 ad dd cd 4e a0 8e f3 d9 db 58 7b a0 90 4b d7 6f 7c 83 ee 84 37 65 0b 5d 3a c3 ee 4d 5b c9 32 5e 23 25 80 bb 71 2d cf cd a6 01 89 b0 0e 73 e7 ec 25 4e 7f 16 c7 96 af 4b ad d7 ed c5 03 2c 0c 5f 4a 56 8f 99 7c 72 20 9d b4 4d 53 e0 a3 28 a6 6c 29 b4 5e 9f e2 96 b3 b9 dd 3b 70 43 ba f5 65 a0 bb 86 ff 2d 3a 0f 7e 1e ba 65 97 72 f9 df 74 0f ba bb 17 72 24 b7 82 48 4f 17 dd f2 d2 33 1c Data Ascii: :[b(V$[WFyL<g$Q<7;<Vv[bwPK('O`7eSmC! ? IDATtiBi,?CaNX{Ko\|7e]:M[2^#%q-s%NK,_JV\|r MS(l)^;pCe-:~ertr$HO3
2024-10-30 16:10:13 UTC	16308	IN	Data Raw: e7 9f 3c ae 78 77 a4 e7 9d 31 fc fe cf bf a2 6b 13 f6 0b f1 0d 1f 47 c2 fd 45 fa a6 81 88 a8 86 43 a4 b9 18 3b a0 37 00 a7 f7 ad e3 b5 2f f2 1c 43 7f 60 eb d2 2d 84 ac 9c c2 ed 5d 82 18 30 1a de 4b ae 69 29 85 7c b7 63 0e 0b 2b 56 1a 74 1b c3 a2 a5 0f d1 27 74 18 13 42 df 67 c5 61 00 83 2b 17 cf 73 a9 a8 88 a2 2b 25 80 17 5e 6d 7d 68 e7 db 89 0e 6d 16 7d 6a 49 00 00 20 00 49 44 41 54 3d c0 28 a6 f0 df 3f 72 b9 fd 8d dc d8 b1 ad cb e2 8c e2 f3 e4 9f 2d c1 cf ff 86 ca b5 17 2e 7c 19 1c f3 1c c3 92 ff 93 cf 7d 6a 6f cc b1 15 5f e4 e2 c5 8b 14 15 5f c5 e6 d9 06 6f 9f 0e 74 e8 d8 81 b6 9e c0 d5 42 ce fc 78 11 9f 2e 01 74 28 2b ce 15 2e fe f8 6f 0a 6d 9d e8 e2 df b1 fc 82 76 b5 90 33 3f 16 d3 fe c6 2e 34 41 85 8e 88 d4 81 6a 38 44 9a 0b 2f 80 42 4e 67 1d a9 30 Data Ascii: <xw1kGEC;7/C`-]0Ki)\|c+Vt'tBga+s+%^m}hm}jI IDAT=(?r-.\|}jo__otBx.t(+.omv3?.4Aj8D/BNg0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49808	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:13 UTC	611	OUT	GET /sdk/fonts/elevio-noto-sans-400.woff HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://knowledgebase.campaignagent.com.au sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:14 UTC	713	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 13976 Connection: close Date: Wed, 30 Oct 2024 16:10:14 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT Last-Modified: Tue, 07 Jul 2020 06:02:44 GMT Etag: "66388ef84ff4c5d874ed3875ea4c110b" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method Via: 1.1 0afa2d721972ae312ad1dd54e47c43ca.cloudfront.net (CloudFront) Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: rCG6t1hVC9KXKHT4mvl2iedmQ_U6u8UPRnl804QyJtdbYHyFRE2bWg==
2024-10-30 16:10:14 UTC	13976	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 36 98 00 10 00 00 00 00 4e 88 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 6f 8a 75 b1 47 44 45 46 00 00 01 88 00 00 00 48 00 00 00 5c 06 29 04 e1 47 50 4f 53 00 00 01 d0 00 00 03 72 00 00 07 44 55 b9 84 44 47 53 55 42 00 00 05 44 00 00 00 32 00 00 00 40 35 ce 4e b0 4f 53 2f 32 00 00 05 78 00 00 00 60 00 00 00 60 77 d9 be e3 63 6d 61 70 00 00 05 d8 00 00 01 81 00 00 01 da de d2 28 7a 67 61 73 70 00 00 07 5c 00 00 00 10 00 00 00 10 00 16 00 23 67 6c 79 66 00 00 07 6c 00 00 28 09 00 00 39 34 58 fa 98 58 68 65 61 64 00 00 2f 78 00 00 00 32 00 00 00 36 0d 8a 83 9b 68 68 65 61 00 00 2f ac 00 00 00 1f 00 00 00 24 0e b7 05 00 68 6d 74 78 00 00 2f cc 00 00 02 Data Ascii: wOFF6NFFTMlouGDEFH\)GPOSrDUDGSUBD2@5NOS/2x``wcmap(zgasp\#glyfl(94XXhead/x26hhea/$hmtx/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49809	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:13 UTC	611	OUT	GET /sdk/fonts/elevio-noto-sans-700.woff HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://knowledgebase.campaignagent.com.au sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:14 UTC	713	IN	HTTP/1.1 200 OK Content-Type: application/font-woff Content-Length: 13744 Connection: close Date: Wed, 30 Oct 2024 16:10:14 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT Last-Modified: Tue, 07 Jul 2020 06:02:44 GMT Etag: "d0f1cc11f68556411a88c400c8e199ed" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method Via: 1.1 eb6e5773d654b9aeadbed8169564506c.cloudfront.net (CloudFront) Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: Tvru61xBvJ041qTip5AuKgXLAuCBxn-lHsaPP0y-TcM1aKlUi5Ar_A==
2024-10-30 16:10:14 UTC	13744	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 35 b0 00 10 00 00 00 00 4e 58 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 6f 9c c9 7e 47 44 45 46 00 00 01 88 00 00 00 48 00 00 00 5c 06 29 04 e1 47 50 4f 53 00 00 01 d0 00 00 03 72 00 00 07 44 55 b9 84 44 47 53 55 42 00 00 05 44 00 00 00 32 00 00 00 40 35 ce 4e b0 4f 53 2f 32 00 00 05 78 00 00 00 60 00 00 00 60 79 05 c2 12 63 6d 61 70 00 00 05 d8 00 00 01 81 00 00 01 da de d2 28 7a 67 61 73 70 00 00 07 5c 00 00 00 10 00 00 00 10 00 11 00 23 67 6c 79 66 00 00 07 6c 00 00 27 24 00 00 38 fc b4 1b f6 d3 68 65 61 64 00 00 2e 90 00 00 00 34 00 00 00 36 0d bc 2a 95 68 68 65 61 00 00 2e c4 00 00 00 1f 00 00 00 24 0e c3 04 fe 68 6d 74 78 00 00 2e e4 00 00 02 Data Ascii: wOFF5NXFFTMlo~GDEFH\)GPOSrDUDGSUBD2@5NOS/2x``ycmap(zgasp\#glyfl'$8head.46*hhea.$hmtx.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49807	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:13 UTC	602	OUT	GET /sdk/icons/v9/envelope.svg HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://knowledgebase.campaignagent.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:13 UTC	754	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 239 Connection: close Date: Wed, 30 Oct 2024 16:10:14 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT Last-Modified: Mon, 18 May 2020 08:36:54 GMT Etag: "8a826e037d34c2ede8cc6f360c1cce0a" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=6048000, immutable X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method Via: 1.1 7be6cb2d0156b563b6b1c8f2595ddd52.cloudfront.net (CloudFront) Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: AUVyFBZfoyGs7-9F37W-otBN4QDo8C5dy80JtVWkWxEy_NYU-ZwE8g==
2024-10-30 16:10:13 UTC	239	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 30 20 37 48 34 63 2d 31 2e 31 30 33 20 30 2d 32 20 2e 38 39 37 2d 32 20 32 76 39 63 30 20 31 2e 31 30 33 2e 38 39 37 20 32 20 32 20 32 68 31 36 63 31 2e 31 30 33 20 30 20 32 2d 2e 38 39 37 20 32 2d 32 56 39 63 30 2d 31 2e 31 30 33 2d 2e 38 39 37 2d 32 2d 32 2d 32 7a 6d 2d 31 2e 38 38 37 20 32 4c 31 32 20 31 32 2e 38 32 20 35 2e 38 38 37 20 39 68 31 32 2e 32 32 36 7a 4d 34 20 31 38 76 2d 37 2e 38 32 31 6c 37 2e 34 37 20 34 2e 36 36 39 61 31 2e 30 30 32 20 31 2e 30 30 32 20 30 20 30 20 30 20 31 2e 30 36 20 30 6c 37 2e 34 37 2d 34 2e 36 37 2e 30 30 31 20 37 2e 38 32 32 48 34 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg viewBox="0 0 24 24"><path d="M20 7H4c-1.103 0-2 .897-2 2v9c0 1.103.897 2 2 2h16c1.103 0 2-.897 2-2V9c0-1.103-.897-2-2-2zm-1.887 2L12 12.82 5.887 9h12.226zM4 18v-7.821l7.47 4.669a1.002 1.002 0 0 0 1.06 0l7.47-4.67.001 7.822H4z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49810	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:13 UTC	599	OUT	GET /sdk/icons/v9/money.svg HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://knowledgebase.campaignagent.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:13 UTC	697	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 867 Connection: close Date: Wed, 30 Oct 2024 16:10:14 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT Last-Modified: Thu, 17 Nov 2016 04:22:10 GMT Etag: "a26448da25793bb07ccf10fab4a8f5b4" Cache-Control: max-age=2592000 X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method Via: 1.1 ab985bb6f3435d42701015dfa6015878.cloudfront.net (CloudFront) Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: nCp-_aMZkqbKHXhZmFhNH6xYqyymDO_fggqb3kevStbPGG1Ll0rIig==
2024-10-30 16:10:13 UTC	867	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 20 31 30 2e 35 63 31 2e 39 33 20 30 20 33 2e 35 2d 31 2e 35 37 20 33 2e 35 2d 33 2e 35 53 31 35 2e 39 33 20 33 2e 35 20 31 34 20 33 2e 35 20 31 30 2e 35 20 35 2e 30 37 20 31 30 2e 35 20 37 73 31 2e 35 37 20 33 2e 35 20 33 2e 35 20 33 2e 35 7a 6d 30 2d 35 63 2e 38 32 37 20 30 20 31 2e 35 2e 36 37 33 20 31 2e 35 20 31 2e 35 73 2d 2e 36 37 33 20 31 2e 35 2d 31 2e 35 20 31 2e 35 2d 31 2e 35 2d 2e 36 37 33 2d 31 2e 35 2d 31 2e 35 2e 36 37 33 2d 31 2e 35 20 31 2e 35 2d 31 2e 35 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 33 20 30 48 35 61 31 20 31 20 30 20 30 20 30 2d 31 20 31 76 31 31 2e 30 38 63 2e 33 32 38 2d 2e 30 34 37 2e 36 36 2d 2e 30 38 20 31 Data Ascii: <svg viewBox="0 0 24 24"><path d="M14 10.5c1.93 0 3.5-1.57 3.5-3.5S15.93 3.5 14 3.5 10.5 5.07 10.5 7s1.57 3.5 3.5 3.5zm0-5c.827 0 1.5.673 1.5 1.5s-.673 1.5-1.5 1.5-1.5-.673-1.5-1.5.673-1.5 1.5-1.5z"/><path d="M23 0H5a1 1 0 0 0-1 1v11.08c.328-.047.66-.08 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49811	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:13 UTC	612	OUT	GET /sdk/icons/v9/arrow-circle-right.svg HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://knowledgebase.campaignagent.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:13 UTC	754	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 147 Connection: close Date: Wed, 30 Oct 2024 16:10:14 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT Last-Modified: Mon, 18 May 2020 08:36:52 GMT Etag: "9ecb59d4c122c91cc69bdc20ae2eeed1" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=6048000, immutable X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method Via: 1.1 eb6e5773d654b9aeadbed8169564506c.cloudfront.net (CloudFront) Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: 1XKdX9fvPt-OOVtWjLQw47HtYDBx9CB3rsRbqyRsfGLU770HXDEDYQ==
2024-10-30 16:10:13 UTC	147	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 36 20 32 30 2e 34 31 35 4c 34 2e 35 38 36 20 31 39 6c 37 2d 37 2d 37 2d 37 4c 36 20 33 2e 35 38 36 20 31 34 2e 34 31 34 20 31 32 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 20 32 30 2e 34 31 35 4c 39 2e 35 38 36 20 31 39 6c 37 2d 37 2d 37 2d 37 4c 31 31 20 33 2e 35 38 36 20 31 39 2e 34 31 34 20 31 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg viewBox="0 0 24 24"><path d="M6 20.415L4.586 19l7-7-7-7L6 3.586 14.414 12z"/><path d="M11 20.415L9.586 19l7-7-7-7L11 3.586 19.414 12z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49813	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:13 UTC	598	OUT	GET /sdk/icons/v9/book.svg HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://knowledgebase.campaignagent.com.au Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:13 UTC	754	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 187 Connection: close Date: Wed, 30 Oct 2024 16:10:14 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, PUT Last-Modified: Mon, 18 May 2020 08:36:52 GMT Etag: "e6f130fdabc50710b7bf204829b45e60" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=6048000, immutable X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method Via: 1.1 edffe6978db53d114a80cda421e0b6b8.cloudfront.net (CloudFront) Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: bN2A7j9WrgirnVEl16xfMUUapnskii5iZJ-8_8UQm3fJGAuPvnrA0A==
2024-10-30 16:10:13 UTC	187	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 39 20 32 2e 30 30 31 48 35 61 31 20 31 20 30 20 30 20 30 2d 31 20 31 76 31 38 61 31 20 31 20 30 20 30 20 30 20 31 20 31 68 31 34 61 31 20 31 20 30 20 30 20 30 20 31 2d 31 76 2d 31 38 61 31 20 31 20 30 20 30 20 30 2d 31 2d 31 7a 6d 2d 31 33 20 32 68 32 76 31 36 48 36 76 2d 31 36 7a 6d 31 32 20 31 36 68 2d 38 76 2d 31 36 68 38 76 31 36 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 20 36 2e 30 30 31 68 36 76 33 68 2d 36 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg viewBox="0 0 24 24"><path d="M19 2.001H5a1 1 0 0 0-1 1v18a1 1 0 0 0 1 1h14a1 1 0 0 0 1-1v-18a1 1 0 0 0-1-1zm-13 2h2v16H6v-16zm12 16h-8v-16h8v16z"/><path d="M11 6.001h6v3h-6z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.6	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:13 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:14 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161014Z-16849878b78j7llf5vkyvvcehs0000000970000000010738 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:14 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.6	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:13 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:14 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161014Z-16849878b785jrf8dn0d2rczaw000000099g00000000xc89 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:14 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:13 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:14 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 4900665d-501e-0029-5111-29d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161014Z-15b8d89586flspj6y6m5fk442w0000000e4g00000000cuph x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:14 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:13 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:14 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e113be9f-801e-0035-547f-2a752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161014Z-r197bdfb6b4cnxt4mv5f3apubw00000000vg00000000fk65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:14 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:13 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:14 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:14 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 6d7cc6e8-501e-007b-43e6-2a5ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161014Z-15b8d89586fmhkw429ba5n22m800000009n000000000k3hm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-30 16:10:14 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49820	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:14 UTC	418	OUT	GET /kb/v2/deployed/5de5c1e688134/4db52de3-999b-4de9-a518-4952820c5cb9/script-snippet.js HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:14 UTC	654	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 0 Connection: close Date: Wed, 30 Oct 2024 16:10:11 GMT Last-Modified: Fri, 25 Nov 2022 04:06:20 GMT Etag: "d41d8cd98f00b204e9800998ecf8427e" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=31550000, immutable X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 f952757fdddf3c9caa357164f2d464d8.cloudfront.net (CloudFront) Age: 4 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: gy1NOSbnW9GYQarjGRV3tYfkcXaumjebei4x8koDbqjfSPsribLQrg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49822	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:14 UTC	457	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/OsOFUPxmwvAhgpYBuNj_megWSBxvENU2DZ1s34TBiFk/1699504624427-AFU.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:14 UTC	621	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 58544 Connection: close Date: Wed, 30 Oct 2024 16:10:11 GMT Last-Modified: Thu, 09 Nov 2023 04:37:07 GMT Etag: "49398d51cf1396af8b1a383c67003e49" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: xgHBIN2qBC9m5uHz5zAAvzdA8HChkIO. Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 3a21078459f955a33f79dacf082781c4.cloudfront.net (CloudFront) Age: 4 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: mtaWlMapYU2JE3JQwFyzleH1AsP0WM3gqnbEml7WVfEvffjTy34bCg==
2024-10-30 16:10:14 UTC	15763	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 36 00 00 02 42 08 06 00 00 00 d3 05 8d e2 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 e4 45 49 44 41 54 78 5e ec 9d 09 40 16 c5 fb c7 bf dc f7 21 08 88 20 22 8a 17 88 8a 37 4a 62 1e 98 96 e7 5f 4d 33 b5 bc ca 4c 4b 7f 59 56 66 66 65 5a 59 6a 59 5e 79 e6 99 77 1e 18 de a2 a2 88 88 e2 85 20 20 88 80 20 20 d7 cb f9 9f d9 dd 17 de 17 5e e0 45 01 01 9f 8f 2e bb 3b b3 ef ee ec ee ec cc 77 9f 79 76 46 a3 41 e3 8e 05 20 08 82 20 08 82 a8 03 68 4a 73 82 20 08 82 20 88 5a 0f 09 1b 82 20 08 82 20 ea 0c 24 6c 08 82 20 08 82 a8 33 90 b0 21 08 82 20 08 a2 ce 40 ce c3 44 09 34 34 00 2d 4d 0d 36 e7 93 14 Data Ascii: PNGIHDR6BsRGBgAMAapHYsodEIDATx^@! "7Jb_M3LKYVffeZYjY^yw ^E.;wyvFA hJs Z $l 3! @D44-M6
2024-10-30 16:10:14 UTC	2135	IN	Data Raw: ec 47 8c 8d 1b 7a b9 db c1 3c 87 55 d0 5b 97 e3 fd 6f b6 23 c4 82 87 39 a2 5e 4e 12 0b db 82 93 4f a4 1f c8 6e 61 fd 67 cb b1 fe 7a 26 9a f0 e6 32 77 1b a4 5f 3f 8c b9 df 1d 46 7c be b4 0d 87 55 8c 4b 8f 64 a2 79 07 77 74 b7 d5 46 46 cc 39 2c dc c8 0b b0 26 e8 35 75 2c a6 b8 9b 08 9b b9 f4 19 8b 4f df 6c 03 ae bd e2 0f ad c4 57 ac 12 49 6f e2 c5 0a be 41 e8 67 91 0a bf bd cb f1 c3 a1 9a 6e a2 36 81 73 4b 76 bd c3 22 70 5f 0a 49 f6 5d 8e 19 ab 82 61 d4 77 32 96 fd b2 00 8b de 76 44 cc 7e 76 2e 0a e6 f6 f8 83 ec 7c 77 46 a3 c9 db b3 b1 ee 97 2f 31 af af 21 fc 56 fd 8c f5 41 15 b4 fc b0 6b bd fe ae 33 a6 2f 58 80 65 5f 0c 42 fb 14 7f 2c fe 66 3e e6 6e cf 40 af 99 9f 61 dd 0f ef 63 94 6d 12 f6 2e db 82 4b ac 02 10 c8 60 15 ea 37 5b e0 a7 df 0b f3 7e 60 bf 9b Data Ascii: Gz<U[o#9^NOnagz&2w_?F\|UKdywtFF9,&5u,OlWIoAgn6sKv"p_I]aw2vD~v.\|wF/1!VAk3/Xe_B,f>n@acm.K`7[~`
2024-10-30 16:10:14 UTC	16384	IN	Data Raw: a9 78 fe fa cd 06 4d 9a 1a 20 26 24 14 69 f2 4f d7 85 49 1b d9 f9 06 90 fc d3 d5 26 47 c1 98 90 73 79 0b 66 ce de 82 20 29 cd 3a f5 59 25 3d a2 17 9c f3 43 c5 26 b8 3a 4d 1c 42 ae 31 81 db 8a 3d 77 ec 39 91 5b e3 32 9e aa 6f 72 ac ad d7 cf f9 cd b1 e8 67 18 21 7c a1 54 84 0d 9a 37 37 40 7c 60 30 62 14 05 fc 93 60 5c 8a 02 da 39 2b bf 08 29 e6 23 fe 7c b8 80 95 5b 61 ac 2c 28 cc 9f 6c e2 71 86 fc 25 2f 0e c7 be 9b 8f 6f 0f 4a 4e d9 3a 06 82 3f d3 a8 0e ec 39 bb 7d 4f 3d 7f 26 82 a8 03 d4 21 61 63 cf 0a 0c 3e 0f c6 fa 45 1b b0 7e ed 06 2c fe 64 25 f6 96 a8 fd 4d d0 be ab d4 de cc 9b a1 da 88 8b cf 83 dd eb 83 d0 cf 18 08 da fe 03 e6 fe b2 85 1d 7b 0b 7e fb 62 3e be 5a bb 1d 7b 24 07 63 75 30 36 10 7d 7b 4e ee fc 03 eb 77 df 42 86 4e 6b b4 6f 95 8b f8 d0 03 Data Ascii: xM &$iOI&Gsyf ):Y%=C&:MB1=w9[2org!\|T77@\|`0b`\9+)#\|[a,(lq%/oJN:?9}O=&!ac>E~,d%M{~b>Z{$cu06}{NwBNko
2024-10-30 16:10:14 UTC	16384	IN	Data Raw: 82 20 4a 25 1b e9 a9 69 c8 95 d6 88 4a 46 96 82 74 19 7d e1 49 54 2e 24 6c 88 1a 05 1f 23 4b ec ac b0 d8 b4 ee ac 38 74 45 55 12 7b 1e ab 57 f0 e3 ed 84 4f 95 1f ac 2a e0 23 bf 6f c4 d6 eb d2 6a 19 f0 eb ac ce 76 55 85 e0 9f b6 27 58 5a 53 97 3c 64 25 85 c3 cf f7 20 56 ff b6 bb d4 7b 54 a9 e7 f6 38 00 7f af f7 2d ea 94 f3 85 c2 ef 6f d5 e6 cd 67 bb 2f cf 4e c8 d1 7d 58 75 52 de 35 7c ed a2 f2 af 55 e5 dc 5f d5 f9 bf b2 f3 4e d5 e7 c5 e7 81 84 0d 51 a3 28 ea ac 91 77 84 a8 d0 1b 74 b9 e3 7b 3d 3f 21 97 42 91 d9 ca 8b 1d 4f 71 30 54 a2 c6 10 e7 8f 4d fb 43 90 6c 6a 02 ad 9c 6a 7a cb af ef 81 29 33 87 a0 8b 7c d8 16 a2 52 71 19 3c 1e b3 fa 3b 49 6b 04 51 39 bc 30 e7 e1 84 03 93 d1 de a7 1f ae fe 3e 02 56 52 58 6d 24 f5 c6 61 a4 ac 49 81 c1 b2 d1 28 de fd 4e Data Ascii: J%iJFt}IT.$l#K8tEU{WO*#ojvU'XZS<d% V{T8-og/N}XuR5\|U_NQ(wt{=?!BOq0TMCljjz)3\|Rq<;IkQ90>VRXm$aI(N
2024-10-30 16:10:14 UTC	7878	IN	Data Raw: 36 a7 ec f3 d2 cf c7 9e 85 2f aa fd ca 71 a7 96 77 e6 2e 75 19 36 3f 63 b6 8e 3b f1 9e c6 fb bf 59 bc 43 1e 4f e2 18 de 3a 79 7c f1 cc 04 65 6b 5a b0 28 77 d9 cf c4 16 b3 ef 03 b3 ed 95 b6 c6 ac 2c df bf 27 3e 2b ef 15 a7 29 7d 75 83 fc ee 95 df c1 f2 bb 58 7e 27 cb ef 66 b2 8d 35 36 54 bb 14 15 96 9c 91 5a 93 f1 b5 11 19 7f 0f c4 10 4f 47 c0 c1 05 6d 87 f5 c5 90 cd 66 6d 81 04 0e 2c 1d 77 bf 2b 12 4e 6a 99 b8 2d 38 c2 77 ec 72 44 0e 51 db 73 71 f1 ed 04 ff 43 6a 86 e6 8c 64 71 76 fb 6c 3f 18 dc d4 65 74 0e 5d 80 d5 01 77 29 d3 d9 d4 b1 1b c6 9e 38 88 e4 1c 71 c6 f9 ef 83 88 1b d4 05 be 0d 4e c3 b8 e3 02 c6 8e 1d 0c 2f d9 8c 7f 63 35 37 d5 ca 84 4a 1a 64 93 0c 7e 08 68 67 a3 75 1d 43 5f 3c ed 2b c7 39 c2 6b d0 40 3c 7f ec 30 d2 e5 99 75 cb 00 ac fe bf d1 Data Ascii: 6/qw.u6?c;YCO:y\|ekZ(w,'>+)}uX~'f56TZOGmfm,w+Nj-8wrDQsqCjdqvl?et]w)8qN/c57Jd~hguC_<+9k@<0u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49821	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:14 UTC	463	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/yvX_Qddf0AGmj1Pknk_iDCLGt8hEYZCPdUh1RVh8pZA/2023-11-09_14-10-13-xWg.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:14 UTC	621	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 46009 Connection: close Date: Wed, 30 Oct 2024 16:10:11 GMT Last-Modified: Thu, 09 Nov 2023 03:10:47 GMT Etag: "61948fd7507335de723b56753824501c" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: yvzdyRsUg2F9O6zFnIB0RnBvUfX7o26Y Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 fc562aab29280948aa0691960bee3d6a.cloudfront.net (CloudFront) Age: 4 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: lkEssg_ggbjEI7_Tw1Zduub9LLnHyFqs9YLjFH78E_4QaVVxbXTFig==
2024-10-30 16:10:14 UTC	15763	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 3a 00 00 02 58 08 06 00 00 00 6b 74 4c 91 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 00 07 74 49 4d 45 07 e7 0b 09 03 0a 14 2f 3e 7d af 00 00 20 00 49 44 41 54 78 9c ec dd 79 5c d4 75 fe c0 f1 d7 1c 30 dc 22 67 88 72 29 2a a2 88 07 1e 29 79 60 59 d1 a5 6d 5a fd 52 2b dd 0e b3 2c db d5 6c 73 ab 75 b7 56 77 d7 2e b3 cd b4 43 dd 0c 3b 2c 4b d3 d2 b2 50 f3 96 10 44 c0 03 50 44 54 90 1b 06 e6 f8 fd 31 c3 30 dc a0 80 80 ef e7 e3 c1 63 66 be 9f cf f7 fb f9 7c 67 86 99 f7 7c ae af e2 06 ff a1 46 84 10 42 08 21 3a 21 e5 b5 ae 80 10 42 08 21 44 6b 91 40 47 08 21 84 10 9d 96 04 3a 42 08 21 84 e8 b4 24 d0 11 42 08 21 44 a7 25 81 8e 10 42 08 21 3a 2d 09 74 84 10 42 08 d1 69 49 a0 23 84 Data Ascii: PNGIHDR:XktLpHYs+tIME/>} IDATxy\u0"gr)*)y`YmZR+,lsuVw.C;,KPDPDT10cf\|g\|FB!:!B!Dk@G!:B!$B!D%B!:-tBiI#
2024-10-30 16:10:14 UTC	227	IN	Data Raw: 77 c4 9b ce b5 24 05 dd de 9f 4d 41 05 40 c9 61 53 90 d3 52 4a 0e 60 b8 64 75 0e 8d d5 47 9f 8e 6e 9f 55 7d 8a 0e 98 03 52 21 84 10 d7 b3 0e 1f e8 a0 af a7 a5 06 c0 c9 c1 3c ee c3 19 9c 1a c8 d7 d0 31 6a 66 cd 4c 31 dd 71 0d 42 e5 ee 6b ba 5f 74 0c 83 65 88 50 31 86 13 c7 4c 77 bb 4c 40 3d 79 1e aa 1e e6 11 be 19 07 60 c8 54 6c fb 05 99 f3 ba a3 1c f5 14 36 c1 75 14 54 72 0c 43 5a b6 39 db 1d a8 27 3f 85 d2 cd 3c 2b e9 74 2c ba 6a 03 83 34 28 42 9e 42 7d f7 54 14 e6 2c c6 bc f4 06 27 9f 81 0e 63 69 31 86 bc 62 f4 71 7b 4c ad 39 80 c2 cd 74 4e fa a4 fd e6 43 0f 46 75 f7 3c d4 a1 bd 4d 8f f3 e3 31 e4 81 31 fd 18 46 bd b9 ec d0 a7 b0 99 3c 03 85 5d 83 05 36 5f 97 08 94 bd 46 Data Ascii: w$MA@aSRJ`duGnU}R!<1jfL1qBk_teP1LwL@=y`Tl6uTrCZ9'?<+t,j4(BB}T,'ci1bq{L9tNCFu<M11F<]6_F
2024-10-30 16:10:14 UTC	16384	IN	Data Raw: a2 f0 6c 42 7d 52 8e 60 d4 59 d5 e7 ee 56 a8 8f 10 42 88 0e a7 e3 07 3a 0d 31 6a c0 06 b0 71 42 51 d7 18 9e e6 d2 9f c2 68 0e 68 14 6e be 28 02 83 cc 81 d4 39 8c e9 95 c1 52 36 c6 ca de 9f ae fe 28 6d d4 a8 ba 9b 03 1b fd 25 cb fe 8d 3a 97 61 0e 54 ba a0 ec d7 0f a5 8d 23 ea 3e 61 e6 c4 4c 8c 99 d6 99 9d 50 78 39 a2 b4 f3 47 51 d9 5b 57 92 5f ad 95 a9 b6 7c 8c fb df 45 b7 ed 5d f3 f8 1c c0 21 12 e5 40 47 e0 1c 86 cb 5a d3 36 cf 7e a8 ec d4 28 fb f7 ab 3a d7 2c 30 14 54 b6 2a f5 44 d1 df 11 85 8d 37 8a 96 1c 43 6d 13 81 ea d6 71 a8 87 f4 43 a5 ba 82 fa d8 b5 70 7d 84 10 42 74 48 1d 7e 8c 4e 83 53 75 0c 2e 28 fc 87 00 6e 28 0c 0d 7c ed 37 75 ba cf e9 14 73 2b 46 17 70 01 43 a1 3b 0a 17 30 16 80 f1 7c 0a 86 81 fd 50 52 d5 3a a4 70 32 b7 e4 f8 8d c3 d6 6f 5c Data Ascii: lB}R`YVB:1jqBQhhn(9R6(m%:aT#>aLPx9GQ[W_\|E]!@GZ6~(:,0T*D7CmqCp}BtH~NSu.(n(\|7us+FpC;0\|PR:p2o\
2024-10-30 16:10:14 UTC	13635	IN	Data Raw: 22 4e 11 9d d9 94 21 fa 0d f0 4a 36 0b 67 ed 67 46 fc 6d fe d1 fd 79 86 94 0c 46 2a 5a 7e 57 43 3c df ac c7 8c cf b3 d8 93 dd 14 5f 2b dd d7 0f 9e e1 4b 6a 33 ce b5 01 b5 01 ae e7 12 be e6 10 0b a2 cf f0 3b 4a 7c df 6c cb a7 03 1a 62 01 da 5e 88 91 e9 8c 9b e4 44 fe ce c3 2c d1 6d 73 f5 f8 16 b4 ae 03 70 9b df 7f 48 c6 6f c5 09 7e 37 6f 4c d0 1b f5 4a e4 e1 36 bf ef 4c e1 e3 b0 d3 44 67 c0 3f dc 9a 32 3e 50 83 6f 73 13 e0 06 e1 53 b6 f2 f6 ed e7 99 dd f8 02 4b c2 1b f2 f5 2f 1a da 97 b2 27 16 cd 1b d2 d5 b9 b6 f6 3f ce 56 fc c3 e4 1a ed 42 d2 89 1e 6a c3 10 db 9b ec 8b 48 61 c1 a6 74 a2 33 6b f3 0f b7 a6 4c 19 d3 0a 9f c6 37 89 9c 1b 89 5f bc 86 9f b6 3c af 4d 37 f3 04 de 03 f6 c3 f8 1e 44 d9 9f 46 39 32 9d a0 f1 ad 20 26 a5 68 df de b7 e6 f7 6f 0e 31 63 Data Ascii: "N!J6ggFmyF*Z~WC<_+Kj3;J\|lb^D,mspHo~7oLJ6LDg?2>PosSK/'?VBjHat3kL7_<M7DF92 &ho1c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49819	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:14 UTC	476	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/i-dOFdRu-5Z6K058LnScNrFMZJjVPBk9NionMQyJwuE/Screenshot%202023-11-09%20135049-cbc.png HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:14 UTC	622	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 128184 Connection: close Date: Wed, 30 Oct 2024 16:10:11 GMT Last-Modified: Thu, 09 Nov 2023 03:09:45 GMT Etag: "8e8b82a397dda53745f966f5a640eb24" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: ADtBQhcII107e2BvtX1vnIgd66MVTKLy Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 fc562aab29280948aa0691960bee3d6a.cloudfront.net (CloudFront) Age: 4 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: 8WAGW3jO3MVHu3LfJqLx814tvW4AeZHwKD9kKM7TwOZmmKThO94iqg==
2024-10-30 16:10:14 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 ac 00 00 03 04 08 06 00 00 00 92 4f bd 44 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec 9d 05 7c 15 c7 16 c6 bf 08 31 82 14 77 97 e2 50 dc dd a1 14 87 b6 b8 43 71 77 f7 16 f7 52 28 ee 56 bc 38 2d 14 77 27 b8 bb 84 78 72 f7 dd 6f 73 e7 b2 b9 84 08 84 12 fa ce ff fd e6 ed de d9 91 33 b3 7b d3 3b 1f 67 ce da 69 66 20 08 82 20 08 82 20 08 82 20 08 82 20 08 d1 04 7b cb 51 10 04 41 10 04 41 10 04 41 10 04 41 10 a2 05 22 58 09 82 20 08 82 20 08 82 20 08 82 20 08 d1 0a 11 ac 04 41 10 04 41 10 04 41 10 04 41 10 84 68 85 08 56 82 20 08 82 20 08 82 20 08 82 20 08 42 b4 42 04 Data Ascii: PNGIHDRODsRGBgAMAapHYsodIDATx^\|1wPCqwR(V8-w'xros3{;gif {QAAAA"X AAAAhV BB
2024-10-30 16:10:14 UTC	16384	IN	Data Raw: 13 5e 62 65 c7 1a 98 e9 d2 0b db c6 97 c7 a1 11 75 30 e0 56 6d ac 98 d5 04 c9 2c a2 8c ff 85 39 f8 b1 e5 56 94 98 b1 1c df df 1a 88 ea e3 bc d0 77 d3 34 54 fb ca d2 be e9 29 96 74 a8 8d df e3 f6 c1 26 dd ae 50 08 7c 86 33 bb 77 e2 d8 6d 1f c4 c9 50 18 a5 33 9c 42 af 06 cb 90 73 ca 0a 34 be 3f 34 1c bb aa ea 6d fa dc d8 82 11 3d c6 e0 80 63 19 f4 1b db 07 15 d2 b8 04 17 0d 85 e7 1b 7a 45 ca ce a0 27 6b d1 fe bb 59 48 3d 7a 3d fa 95 30 6e e9 f4 83 c7 c6 31 e8 35 76 17 9c 2b f6 c6 d8 de 55 90 ca 29 fa ad 4b 22 8a 78 58 45 33 b8 c8 e5 22 d9 78 54 0b df 0f 59 00 db b6 a3 12 f3 e8 81 43 8f 13 7a 93 d0 e3 aa 4d 9b 36 68 dc b8 b1 1e e8 9a 81 d0 b9 78 67 b9 f7 d5 57 e7 46 8c 65 6c 13 eb d0 43 ab 4c 99 32 68 d0 a0 01 5a b7 6e ad f7 c9 2d 75 55 ab 56 d5 bd 61 8c 65 Data Ascii: ^beu0Vm,9Vw4T)t&P\|3wmP3Bs4?4m=czE'kYH=z=0n15v+U)K"xXE3"xTYCzM6hxgWFelCL2hZn-uUVae
2024-10-30 16:10:14 UTC	16384	IN	Data Raw: 0d ae ae 95 ef b1 5e 7b 1e e2 e7 bb af b6 7b 68 55 ad 70 fd c9 da 45 dd be 97 da e6 be 95 b5 c2 df 0d d3 fe 79 65 b3 0e 0a 7a ac ad ef 59 59 2b 58 69 80 f6 97 65 0e 8c bc d9 3f 46 ab 54 bc 91 b6 e0 9a bf 25 c7 8c d9 ce 09 75 8a 6a d5 86 ef d5 fc cc f5 97 b5 2f a5 55 1a b0 dd 3c c3 16 82 9e 6a ab 3a 95 d1 ca 9a e7 fd b5 79 74 17 e7 34 d3 0a 57 1a a8 fd e5 f5 b6 7d bf 73 b3 b4 3a 85 aa 6b 13 8f fa 68 7e 57 e7 6b 0d 0b 57 d4 46 ec 79 6d b9 6a 26 e0 82 36 a9 7e 51 ad d6 b8 43 9a 61 06 bf 18 c4 c3 ea 33 63 be 07 56 45 99 e7 44 7d 56 1e 19 cc 57 d7 e8 4d 65 5e 4c eb d7 54 5e 64 f9 10 2f 0f f6 17 1a 46 db 42 6b 57 d9 6f 7b 2d ac 3a 91 c5 d6 36 b6 fd 3e 7b 89 ea 3b 34 68 8f b2 49 d9 fe a1 a8 71 87 65 8b 2d c6 f9 08 ad 9e ba 1e 5a db c6 ba 51 85 ea 87 c9 78 4e 22 Data Ascii: ^{{hUpEyezYY+Xie?FT%uj/U<j:yt4W}s:kh~WkWFymj&6~QCa3cVED}VWMe^LT^d/FBkWo{-:6>{;4hIqe-ZQxN"
2024-10-30 16:10:14 UTC	16384	IN	Data Raw: 59 9b c6 25 a2 5b af 0b 79 f2 65 8f 34 00 bc 81 14 15 1b 53 2d 75 74 ef 87 3b d9 b3 a5 09 7f fd c6 07 be 84 f4 c2 8d e4 e9 fe d5 ac bf 68 8b 86 2c e5 b1 7a c7 f6 14 7e ae b5 d4 cb 9c d2 d5 a0 6d 9d b0 2b 27 9a b8 b1 75 0d 7b c3 fb 12 46 c5 91 7c f5 9b 51 f4 15 eb b5 4f 56 9c 12 d9 22 ae 66 e8 e7 7b 87 b0 0b 7d 8a 88 88 fc db 29 b0 12 11 91 f7 4c 10 67 37 fe c2 8c 19 33 a2 9d 7e 9e 3d 8f a5 6b b6 71 e4 e2 dd e7 06 3f 36 b8 65 e6 c3 81 c3 69 92 e3 c5 d6 0c 8e e4 6f f9 0d 73 96 ae 61 eb ce 3f 58 fb 43 3b b2 bf 36 2c 32 e0 1e cf 3d 3c 8c b2 ee 57 f0 4b 83 83 3b 90 bd aa 27 59 6c 15 73 fc 8e b3 65 db cd 28 5b d7 3c 39 b8 99 9d b7 c3 5a a9 e4 a0 92 67 86 48 eb 7e f7 1c 52 55 a7 47 e7 b2 c4 0f 7b 99 41 97 98 37 e6 7b 0e 87 f4 5f 8c 39 e3 bd 43 1c f0 0a 6b f3 61 Data Ascii: Y%[ye4S-ut;h,z~m+'u{F\|QOV"f{})Lg73~=kq?6eiosa?XC;6,2=<WK;'Ylse([<9ZgH~RUG{A7{_9Cka
2024-10-30 16:10:14 UTC	10463	IN	Data Raw: d6 8a 13 b2 00 00 f4 9c 49 44 41 54 a5 a3 f5 d0 7e 34 2c 5d 80 42 1e 4d 19 34 b4 09 e9 42 06 a7 7c 43 a6 a7 18 93 97 a2 f5 17 bd 69 e5 59 80 ec d9 72 53 ba 7e 07 ea e6 71 e2 c6 d5 ab 98 0c 2e c4 8f ef 8a 83 9d 01 97 b8 89 48 18 c7 fc 9a fd 7b c0 9f cb 57 73 23 e3 27 0c ea d3 88 12 f9 0b e2 d9 f2 6b 7a d7 49 1f 3b c6 10 10 11 11 11 91 f7 83 21 3e 85 5b 8e e5 d7 19 5f f3 49 b9 ec 24 0a e9 22 18 15 07 12 66 2e 4b 8b 41 3f 32 7b 4c 73 72 85 b4 f6 89 9d 9e eb 1a f8 d6 4c dc 3d 77 9e 3b 51 0e dc 1e 53 ef 62 1d 61 0c a4 ac f8 25 3f 4e ef 47 ed fc c9 71 b6 cc 31 f9 df e5 b2 d7 19 ce 5d f1 c5 df 04 76 2e c9 28 dc a0 2f d3 bf ef 4d 99 64 91 df 9f 77 b9 1f ef 90 e9 31 8f 9e 84 b6 44 b0 4f 90 84 77 90 31 c6 4a 76 66 0b db ed 58 c3 fc 70 2b 7d 1b f5 e3 48 fa 9a d4 2f Data Ascii: IDAT~4,]BM4B\|CiYrS~q.H{Ws#'kzI;!>[_I$"f.KA?2{LsrL=w;QSba%?NGq1]v.(/Mdw1DOw1JvfXp+}H/
2024-10-30 16:10:15 UTC	16384	IN	Data Raw: 9d 80 5b 50 3c 4c ed 5d 50 a1 51 17 b8 62 3f e6 5c 2b 8d 75 bf 8f 46 09 23 25 de 1c 9f 87 b1 4b 4f e1 ad b2 1a 16 9c 58 82 fa 66 ef 71 67 d7 2a ac 3f 78 1d ee c1 b1 90 58 e7 42 d9 06 3d 30 6a 68 0b b8 a4 1a e2 a2 47 19 89 47 07 36 62 e3 de d3 78 f8 e6 c3 c7 de 46 46 56 ce a8 d8 a8 23 fa f4 6b 87 32 0e c9 73 cf c8 c3 1e 60 e7 8a 75 38 74 f3 05 42 e2 44 b0 c9 5d 1a 8d 7a 8e c4 e0 e6 85 34 13 1b 47 1e 9d 80 a6 4b 94 98 73 66 b1 50 9e e4 73 c6 9c 98 8c 86 f3 13 71 f3 c6 32 cd 7b 28 c2 bf 58 ce b0 43 63 d1 72 95 14 0b 4e 2e 44 6d ed 31 20 7b 83 13 4b 17 62 fd e9 27 08 4e 30 86 43 fe 72 68 d2 b5 31 92 f6 cc c5 dd 4a 2b b0 73 64 39 88 fc 4e 61 c6 e8 25 b8 f0 46 86 fa b3 8f 63 5e 63 eb af 96 17 f2 60 5c dd bc 5c b8 19 bd 85 57 1f a4 c8 55 be 19 ca 2a 4e e2 46 b6 Data Ascii: [P<L]PQb?\+uF#%KOXfqg?xXB=0jhGG6bxFFV#k2s`u8tBD]z4GKsfPsq2{(XCcrN.Dm1 {Kb'N0Crh1J+sd9Na%Fc^c`\\WUNF
2024-10-30 16:10:15 UTC	6056	IN	Data Raw: 93 7a d2 ed 34 28 62 e0 e7 e9 83 08 a3 ec 28 54 c0 11 ea fe 3b 9f 93 23 e2 b5 07 5e 47 8a e1 e8 52 00 39 ad d5 dd e3 04 ca 58 04 be f2 45 e0 07 39 4c ed 73 a3 40 5e 7b cd a4 6c 9f a4 b5 9f 12 71 21 3e f0 f4 4f 84 83 4b 61 e4 b2 d1 1e eb 2f 92 7d f0 83 87 6f 24 ac f3 16 16 7e 4c 7f ef 58 1f 29 23 70 f7 e0 41 bc 90 d9 21 47 b1 ea a8 5f 5a 3d fc 30 09 37 7f e9 8c 51 fb 02 50 7c c0 36 6c 1d 50 44 bb f1 df f1 d7 ea 42 19 1f 0a 2f 0f 3f c8 ed f3 a1 70 6e 5b fd 80 f1 9b 25 21 fc b5 17 de 86 cb 60 99 23 3f 5c b2 5b 09 d7 aa 4f 11 1b 0c 1f 6f 7f c4 4a 1d 90 bf 90 33 52 be 7e 22 22 22 22 22 22 fa 17 51 be c7 fe d1 ed b1 f0 86 1c 55 46 2c 42 f9 1b d3 e0 d5 7a 2f 9a 3f 1d 84 51 fb 23 d0 72 f1 31 4c ab ea 81 f9 1d 86 e0 60 a0 39 1a cc d8 8d 79 cd 9d 20 f7 dd 85 01 dd Data Ascii: z4(b(T;#^GR9XE9Ls@^{lq!>OKa/}o$~LX)#pA!G_Z=07QP\|6lPDB/?pn[%!`#?\[OoJ3R~""""""QUF,Bz/?Q#r1L`9y
2024-10-30 16:10:15 UTC	16384	IN	Data Raw: 92 07 04 22 58 e7 78 46 8e 15 d0 ac 69 39 e4 b4 d2 fe a2 35 e5 e8 8e 59 53 3a a1 70 76 67 14 2e 55 11 b5 1a b4 40 cb ca 39 21 4b 7b 84 2c 11 11 11 11 11 51 a6 93 46 e4 92 f9 29 a3 9f 63 eb f8 be 18 bf ee aa 70 e3 a7 5d f9 25 8a 00 dc 3a 7c 10 07 0f 6a 97 c3 47 70 fc cc 25 dc 7a ec 83 88 a4 d4 37 a2 22 d8 55 ea 83 fe f5 f5 6f 80 93 25 e1 f1 89 b3 78 ad fb 68 7e e1 c6 b8 7e c3 92 9f c2 23 71 36 b8 36 aa a8 3f a9 b4 fa 29 6b c7 9f a5 31 77 52 5a 24 70 6e 39 0c 7d 2a d9 e9 05 12 1f 19 17 c0 4f 63 7b a2 d0 77 9f 80 59 81 77 77 8e 7c aa a3 83 87 71 e4 f8 19 5c ba f9 08 be ef 3f 0f 55 c4 36 e5 d1 77 a0 2b 6c 53 2a c9 c8 05 4d 07 4f c0 cc 85 cb b0 6e db ef 38 74 6c 0b fa 96 d0 0f 79 e2 82 dc 70 f5 ae 2f 12 75 e3 37 55 02 e2 e3 53 de 4b 90 ab 81 2b 4a 9b eb d4 7c Data Ascii: "XxFi95YS:pvg.U@9!K{,QF)cp]%:\|jGp%z7"Uo%xh~~#q66?)k1wRZ$pn9}Oc{wYww\|q\?U6w+lSMOn8tlyp/u7USK+J\|
2024-10-30 16:10:16 UTC	13361	IN	Data Raw: ea 9d 97 08 b7 de 26 e4 9a 2b 74 89 ad 1f 9d 83 97 6c 1c 9d 31 9e c1 5b ad 54 eb d8 9a da 19 62 7f be d8 23 f5 bf 1a c1 be 0d 7b b8 e8 99 87 8e 5f 35 a0 65 bb b6 74 2a 6b 54 e6 01 61 2c 1d d2 97 b7 1d 21 54 cc d7 7b df 30 7c db a3 23 e2 e2 6a 57 b4 28 96 0d fa 8c ca 75 3f a5 71 bf f5 44 e5 ae 42 cf 16 39 f1 e0 26 8b 66 6d 20 38 69 21 6a 96 49 4d d5 ea 05 f1 b9 b0 81 29 cb ef 8e 8f 32 93 a1 56 33 3e 29 e1 c1 b5 db 29 69 d9 a3 2e f9 3d 8d 3e b5 46 10 e1 ee 89 af a3 7b 6d d7 d8 32 63 02 5f ae c9 c0 e7 ed 8c 6d 9a 3d f1 31 47 10 cb 98 3d 11 11 11 11 11 11 91 78 ed e5 0d ac 6c e1 dc 0e b7 73 e7 d8 66 86 8f 9a ce cf 7b bc a8 50 3e 33 fe ae c5 4e 4f 58 c7 ec e6 8e a7 63 c2 e2 8d 9f b7 09 7b a4 2b ec 32 79 e2 eb 13 7d 4b 9e bb 9b d1 85 76 3b 36 7b 38 77 22 6c 78 Data Ascii: &+tl1[Tb#{_5et*kTa,!T{0\|#jW(u?qDB9&fm 8i!jIM)2V3>))i.=>F{m2c_m=1G=xlsf{P>3NOXc{+2y}Kv;6{8w"lx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49823	54.152.108.239	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:14 UTC	545	OUT	GET /api/settings/5de5c1e688134/en?is_init_load=true&loggedin_only=false&first_name=null&last_name=null&registered_at=null&previewMode=false&url=https%3A%2F%2Fknowledgebase.campaignagent.com.au%2Fen%2Farticles%2F481 HTTP/1.1 Host: ipa.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:14 UTC	129	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:14 GMT Content-Type: application/json Content-Length: 2128 Connection: close
2024-10-30 16:10:14 UTC	2128	IN	Data Raw: 7b 22 6c 61 6e 67 22 3a 22 65 6e 22 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 63 6f 6d 70 61 6e 79 49 64 22 3a 31 33 35 36 36 2c 22 66 6f 6e 74 22 3a 22 48 65 6c 76 65 74 69 63 61 22 2c 22 74 61 62 5f 63 6f 6c 6f 72 22 3a 22 23 30 36 31 39 33 33 22 2c 22 74 61 62 5f 74 65 78 74 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 63 6f 6e 74 65 78 74 75 61 6c 5f 63 6f 6c 6f 72 22 3a 22 23 31 61 62 62 39 63 22 2c 22 73 69 64 65 22 3a 22 72 69 67 68 74 22 2c 22 74 61 62 5f 74 65 61 73 65 72 22 3a 22 53 65 6c 66 20 2d 20 48 65 6c 70 22 2c 22 74 68 65 6d 65 22 3a 22 6c 69 67 68 74 22 2c 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 6f 63 6b 65 64 5f 70 6f 73 69 74 69 6f 6e 22 3a 22 77 61 6c 6c 22 2c 22 70 75 73 68 5f 69 6e 5f 6d 61 72 67 69 6e 22 3a Data Ascii: {"lang":"en","settings":{"companyId":13566,"font":"Helvetica","tab_color":"#061933","tab_text_color":"#ffffff","contextual_color":"#1abb9c","side":"right","tab_teaser":"Self - Help","theme":"light","enabled":true,"docked_position":"wall","push_in_margin":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49824	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:14 UTC	463	OUT	GET /file/uploads/HvQhBOyr72mpK2VvyKtr67myVynjVUpnDH5gpBvLwtk/rgcyKZcN1PvxWAPgFPXL1ZupNFF8O1lPQwRLMchKsts/2023-11-09_12-34-21-5T8.gif HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:14 UTC	623	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 2880201 Connection: close Date: Wed, 30 Oct 2024 16:10:06 GMT Last-Modified: Thu, 09 Nov 2023 01:39:18 GMT Etag: "40e036f818f03bdb8f1f68ee353f6f97" X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: EQqP.sVZ6y36qp5oYOAEK.ZQw4s.c1pg Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 0a624670dff351af866d2f19bde4a312.cloudfront.net (CloudFront) Age: 8 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: qEeux_7TxP4IR1h0gP3uh6uMN3ZbpqrQR2torf6b1zJdR2Md0Y_v6Q==
2024-10-30 16:10:14 UTC	16384	IN	Data Raw: 47 49 46 38 39 61 7a 07 c0 03 77 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1d 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 00 21 f9 04 05 0a 00 ff 00 2c 00 00 00 00 7a 07 c0 03 87 16 1a 1a 02 13 24 26 22 24 04 12 1c 0a 0e 15 16 12 14 0a 0e 0c 2e 2a 1c 22 22 1c 12 15 26 16 27 34 0b 15 24 2a 2a 24 2e 32 2c 14 1a 24 0e 16 1b 1a 11 14 22 1a 15 1a 2a 34 2a 22 18 1a 1e 24 0e 0e 14 16 08 06 0d 1f 2c 27 18 0c 1e 16 14 16 0e 09 22 2e 2c 0a 12 18 27 1a 15 06 1b 27 1f 12 05 26 1e 18 26 2a 34 02 06 09 1f 1a 24 26 2e 2c 32 24 24 1a 1e 1c 22 2a 34 12 1e 29 22 2a 2c 06 06 19 0d 1a 25 06 0a 15 1e 29 34 22 32 34 2e 22 16 0a 0a 14 32 2b 1b 1a 07 0c 1a 1a 24 0e 02 04 06 0e 15 16 22 27 2a 26 1c 2a 22 24 18 Data Ascii: GIF89azw!NETSCAPE2.0! !,z$&"$.""&'4$$.2,$"4"$,'".,''&&4$&.,2$$"4)",%)4"24."2+$"'&"$
2024-10-30 16:10:15 UTC	16384	IN	Data Raw: 22 14 52 4e 4d 1e 46 5c 5e 5a 59 3e 66 64 0a 32 44 42 46 43 38 39 4c 02 06 08 5a 5e 5c 21 03 04 32 3a 3a 4a 4e 4f 52 56 54 49 39 3c 36 5e 64 4e 3e 3c 3e 42 43 2f 26 2c 56 52 62 0a 02 1c 4a 46 4c 26 23 14 3a 46 44 3a 36 3e 06 0a 0c 0e 0a 06 28 3a 10 52 6a 7c 46 56 70 20 2c 20 1a 2e c0 60 60 9c 22 3a 28 0e 50 2c 0e 3a 14 5e 9c 58 2c 48 74 18 24 70 40 6c 7c 7e 5a 1c 40 4c 94 58 d8 80 28 50 18 40 54 1c d8 80 80 60 6c 44 74 7a 1c 78 40 74 52 66 58 60 6e 6c 9c 72 58 16 06 18 40 76 44 74 3e 1c 52 6a 44 52 70 60 54 1a 74 66 52 78 72 72 d8 1a 86 80 60 60 7c 6e 66 44 6e 66 6c 7e 6a 74 12 0c 60 26 38 6c 4a 74 1c 64 1a 2c 16 1e 08 72 1a c8 44 0c 44 46 70 60 60 7e 74 40 76 9c 52 56 78 28 0a 30 5a 40 68 40 7e 6c 16 2a 14 92 1a 48 5a 40 94 62 66 64 66 62 64 4a 4a 4c 52 Data Ascii: "RNMF\^ZY>fd2DBFC89LZ^\!2::JNORVTI9<6^dN><>BC/&,VRbJFL&#:FD:6>(:Rj\|FVp , .``":(P,:^X,Ht$p@l\|~Z@LX(P@T`lDtzx@tRfX`nlrX@vDt>RjDRp`TtfRxrr``\|nfDnfl~jt`&8lJtd,rDDFp``~t@vRVx(0Z@h@~l*HZ@bfdfbdJJLR
2024-10-30 16:10:15 UTC	16384	IN	Data Raw: cd a7 40 ae 44 fd a0 df fc d3 0b fc 36 20 8b ee 82 c8 52 58 bd 3a a0 48 d4 73 c4 d0 f3 e7 cf b3 41 72 0c 7a bd df 3b b7 8d bd cc a7 0b 48 ac bd cc ef 3c dd b7 69 cf 23 fc 36 14 a4 0e 7f c0 52 6c 8a 14 48 41 13 5c c0 36 2c 42 12 2c 41 11 c8 03 12 84 80 62 23 c0 41 9a c0 1b 68 8b c2 27 82 10 e0 81 03 98 a1 36 5c ff c0 23 c3 c3 72 9a 43 1a 2c 42 04 ec 30 28 b4 86 ee b6 a0 11 88 83 41 e6 41 3c 54 81 14 e0 01 3e 44 c2 13 24 41 04 e8 ee 73 3c 41 0a 70 04 03 48 81 23 d0 81 09 e4 41 08 fc f1 39 1c be 03 c4 00 b7 f5 c0 0e 88 83 4d 6e d1 f6 54 7e 0a 10 fa 07 4c 7e 11 84 40 dd 47 ff 97 de fd 52 ac 40 12 3c 40 08 74 87 19 82 4f 25 74 83 0c c8 00 6b f8 80 0c 28 40 08 4c 80 0c 2c 85 f5 8d c0 07 4c 8b a0 3f 41 23 d6 83 02 38 40 22 7c 11 12 e8 80 21 e0 80 14 70 89 16 04 Data Ascii: @D6 RX:HsArz;H<i#6RlHA\6,B,Ab#Ah'6\#rC,B0(AA<T>D$As<ApH#A9MnT~L~@GR@<@tO%tk(@L,L?A#8@"\|!p
2024-10-30 16:10:15 UTC	16384	IN	Data Raw: e8 48 29 ce 71 92 b3 9c e6 3c 27 3a 6f a5 1d 08 65 07 95 b1 7c 27 3c 33 e2 ca 78 d2 b3 88 b3 9c 60 16 14 c0 86 1e 44 60 1e 94 5c 27 3e 4a 60 02 0a 44 e0 9a c2 d4 a2 ca 28 96 42 34 6c 20 04 18 b0 80 03 6e 80 00 2b 5a 32 91 52 d4 87 39 70 e0 00 1c 64 01 00 01 08 80 3e 06 c0 83 28 20 40 06 d7 04 e7 12 d3 a9 d2 95 b2 b4 a5 2e 25 e7 3a 4f 39 91 7a d2 f4 95 f3 ac 29 4e 33 78 4f 31 6e 41 9f 63 e8 a7 39 b6 b3 47 81 5e e0 00 90 64 27 c5 14 7a 8e 0f 6c 20 03 07 08 80 12 16 e0 81 6c ea c3 99 57 c4 e8 00 5a 10 80 2c c4 c1 01 2e 08 e9 48 4b 7a d2 73 60 f2 a5 66 3d 2b 5a d3 ea ff d2 98 b6 73 a6 39 7d 2b 1b 6f 0a d7 b9 4a 4a 4c 3b 11 93 39 c0 b2 53 04 fa 53 9f 3d 48 c3 3c 86 70 4c 21 c4 e3 00 32 10 a8 07 24 a0 82 11 44 e0 00 0a 88 42 06 72 d0 88 1c 34 76 0b e6 b8 66 14 Data Ascii: H)q<':oe\|'<3x`D`\'>J`D(B4l n+Z2R9pd>( @.%:O9z)N3xO1nAc9G^d'zl lWZ,.HKzs`f=+Zs9}+oJJL;9SS=H<pL!2$DBr4vf
2024-10-30 16:10:16 UTC	16384	IN	Data Raw: 1d 49 51 ea 95 93 ae f4 75 2a 75 e9 56 5a 1a 53 d4 c1 94 a6 58 99 e9 4d 43 67 53 9d b2 e8 a1 3d 85 24 4f 81 fa 94 9c 0e d5 72 42 35 2a 53 8a 9a d4 c7 21 95 a9 e8 fa e9 53 f7 e8 54 a9 1a 65 a9 55 15 1c 55 b1 1a 94 ab 6e 75 6f 5a f5 aa 4f ba 1a 56 ba 81 95 ac 3b 19 eb 59 db 66 56 b5 e2 24 ad 6d 35 1b 5b e1 5a 93 b7 ce f5 6b 72 b5 ab 4c ea 9a 57 ac e1 95 af 2f d9 eb 5f a3 e6 57 c1 9e 24 b0 85 55 1a 61 11 4b 92 c3 2e 76 68 8a 75 ec c0 a2 1a 59 52 52 b6 92 93 b5 ac 2a 33 eb 9b c6 6e 96 66 90 f5 2c 93 30 1b 5a 1a 82 96 b4 82 19 ed 69 5b 68 5a d5 52 a4 b3 ad 1d 19 6b 61 f8 1b 91 d7 ce 96 63 b2 b5 ad 43 6a 9b db 8b e1 96 b7 15 4b ed 6f 35 e8 5b e1 c6 27 b8 c5 9d 20 71 91 5b 90 dd 2e 57 61 ca 75 6e c7 8e 1b 5d 04 42 d7 b9 cd a5 ae c0 ac bb 5c ec 66 d7 5f db 45 6e Data Ascii: IQuuVZSXMCgS=$OrB5S!STeUUnuoZOV;YfV$m5[ZkrLW/_W$UaK.vhuYRR*3nf,0Zi[hZRkacCjKo5[' q[.Waun]B\f_En
2024-10-30 16:10:16 UTC	16384	IN	Data Raw: 0f c4 80 19 38 2f 08 9c c1 1f a4 33 09 40 00 08 48 82 1a 0c c1 3a f4 43 2b 40 80 20 d4 80 26 38 81 10 a4 c3 10 80 81 4c b0 ed 1b 00 80 0e 40 c0 10 e8 80 13 bc 47 19 74 b3 d1 ea 03 05 38 81 29 90 41 9b 3d ef 02 04 c1 13 e8 c3 0a 2c 40 7b b4 19 0b 88 81 0e 20 da 2a a3 c0 52 13 db 13 38 41 00 04 00 12 6e e4 16 87 81 0c a4 03 09 d8 d9 0a a0 40 01 fa c3 56 c3 81 0b 10 81 dc d5 58 15 90 c0 0a 94 40 01 92 69 93 9e 2a 3f 97 9f 3f 0b f4 41 05 b4 5c a7 cd 6a 50 80 a8 f6 68 d5 16 41 20 4c a6 59 a1 12 02 e7 00 08 68 22 00 38 41 0e 60 34 2a 44 35 0e fb 43 20 fc 41 0c a8 43 2b 88 02 dd ba 41 2b 90 80 4a ff 41 2e d3 ff c0 3a 20 b0 04 bc c1 22 50 80 cc 09 18 be ee 85 53 1e b0 0e f8 98 0e 40 01 00 ac 81 82 ac 40 04 14 b6 e9 45 c0 0a c4 ad 04 a0 02 09 48 82 f3 52 74 54 4b Data Ascii: 8/3@H:C+@ &8L@Gt8)A=,@{ R8An@VX@i??A\jPhA LYh"8A`4*D5C AC+A+JA.: "PS@@EHRtTK
2024-10-30 16:10:16 UTC	16384	IN	Data Raw: ea aa b6 ea ab c6 ea ac d6 ea a6 16 38 c1 2d 67 11 fc 61 20 f6 ea af 7e c1 b0 d6 e1 ed 20 6b 66 bb 68 ad 7c 87 7c a0 87 b7 86 eb b8 96 eb b9 a6 eb ba b6 eb bb c6 eb bc d6 eb bd e6 eb be f6 eb bf 06 ec c0 16 ec c1 26 ec c2 36 ec c3 46 ec c4 56 ec c5 66 ec c6 76 ec c7 86 ec c8 96 ec c9 a6 ec ca b6 ec cb c6 ec cc d6 ec cd e6 ec ce f6 ec cf 06 ed d0 16 ed d1 26 ed d2 36 ed d3 46 ed d4 56 6d c1 0e 84 40 08 08 00 21 f9 04 05 0a 00 ff 00 2c 00 00 00 00 7a 07 c0 03 87 90 59 10 61 4a 3f 24 32 6a 83 73 6a f5 e6 db 5c 5e 61 f5 e2 b1 8e 8e 8c 2d 4c 69 23 2a 91 e4 d2 c2 86 98 a8 45 5c 73 20 28 31 32 29 13 74 75 75 c5 b3 a5 0b 65 a2 41 3d 3d c8 74 48 67 31 20 73 bc e8 4b 74 9c 74 85 8a 9a 87 68 e5 e5 e5 58 56 4e cd 9a 2f ae ab ac 2a 28 2c 72 8f b1 b3 8f 6a 11 29 3a 26 Data Ascii: 8-ga ~ kfh\|\|&6FVfv&6FVm@!,zYaJ?$2jsj\^a-Li#E\s (12)tuueA==tHg1 sKtthXVN/(,rj):&
2024-10-30 16:10:16 UTC	16384	IN	Data Raw: 40 09 b0 00 0d 32 c1 f8 d0 e5 06 f1 c0 73 c3 e5 2a a4 40 14 cc 20 27 02 01 10 08 33 25 f8 f6 62 d2 25 04 04 80 04 70 01 22 70 62 39 98 01 1f 08 c2 02 6c 81 0c 52 02 07 64 c8 25 04 05 f1 8e 75 69 9b f6 a3 ae b6 e6 49 aa 82 e7 99 5c 8c c0 3f 98 ee 3f bc f6 1d f3 43 16 c0 44 6d 48 99 42 00 36 54 0b e6 1a 7a 41 10 60 4a 45 97 25 07 fc f6 72 d7 20 27 a2 54 0f 48 36 5c aa 41 28 f4 01 30 a8 c1 25 b8 c1 5a 96 61 06 a8 c1 03 c4 4e 85 99 83 0f 74 b7 29 a0 83 39 d4 02 1a 20 ff c1 16 e8 82 29 64 40 2b 44 01 01 04 cb 89 46 01 88 c9 82 39 b0 f7 9b 11 00 1c f8 b6 07 e9 42 0d 04 00 18 98 c1 5a a9 03 3d 84 01 16 70 80 0f 14 c0 e3 d2 c3 1d 18 c1 22 2c 02 09 18 70 81 1f f8 44 9e 76 83 ab 9d 6a c7 b9 f5 8c 18 84 ff c3 13 dc 03 1e c3 36 3f 98 d5 5f b8 05 a0 ab 44 26 43 01 06 Data Ascii: @2s*@ '3%b%p"pb9lRd%uiI\??CDmHB6TzA`JE%r 'TH6\A(0%ZaNt)9 )d@+DF9BZ=p",pDvj6?_D&C
2024-10-30 16:10:16 UTC	16384	IN	Data Raw: 7b 4d b5 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d 6b d3 43 bf 7f 49 b3 7a f8 47 83 ad dd bb 78 f3 ea dd cb b7 af df 91 1a 7e c4 cd 0a 42 c3 bc bf 88 13 2b 5e cc b8 b1 e3 c7 90 23 4b 9e 4c b9 b2 e5 cb 98 33 6b de cc b9 b3 e7 cf a0 43 8b 1e 4d ba b4 e9 d3 a8 53 ab 5e cd ba b5 eb d7 b0 63 cb 9e 4d bb b6 ed db b8 73 eb de cd bb b7 ef df c0 83 0b 1f 4e bc b8 f1 e3 c8 93 2b 5f ce 9c 35 08 1e 03 06 9c a4 31 8f 1e bd e6 d8 b3 6b df 8e dc c3 bd 23 61 49 f6 ff 03 81 82 bb f9 f3 e8 d3 c3 0e 4f 92 e9 bd 0d 87 d5 cb 9f 4f ff 29 81 16 11 81 08 a8 ff b1 29 fb 90 5f f1 c0 df 80 04 16 68 13 01 22 44 44 c4 7e 06 36 e8 e0 83 10 a6 c5 d4 84 14 56 68 61 85 70 45 e8 d0 7f 1a 76 e8 e1 87 29 39 71 e1 88 24 52 08 e2 89 28 a6 a8 62 7b 16 ae e8 e2 8b 30 c6 28 23 45 fe cd 68 e3 8d 38 6e 14 Data Ascii: {MKh]kCIzGx~B+^#KL3kCMS^cMsN+_51k#aIOO))_h"DD~6VhapEv)9q$R(b{0(#Eh8n
2024-10-30 16:10:16 UTC	1649	IN	Data Raw: 87 2e 98 6f 7e e3 34 51 b4 88 5f 33 38 36 44 35 5f 93 8d f8 b0 3c 91 f8 08 8f 60 43 dd 88 46 df 58 6b f1 e0 0e f6 c0 3a 95 34 36 85 68 43 f6 e0 8d e5 d8 20 48 88 23 ec f0 00 f3 20 0a 48 16 8a f3 a0 09 58 00 01 58 e0 03 a7 d0 0f dd b8 4b fa 95 89 a4 e2 8a 10 41 8c d0 08 8c b5 28 8c 0f c9 90 11 89 8c cb 38 91 cd 68 91 cf 88 91 d1 d8 90 c6 a8 91 0e a9 8c 10 09 92 12 29 92 14 19 92 15 49 92 17 89 92 19 09 92 d3 f8 37 05 71 23 d6 e8 09 d8 68 8e 02 c1 0e ff b0 8d df ff d8 8d 4e 03 8e 36 22 8e e4 a8 93 39 39 0a 37 b9 8e 58 c5 0f b7 73 94 47 29 8f dd e8 2b ac 73 89 1d 74 8f f9 d8 84 a2 e0 0f f3 d0 8f a8 a0 09 a8 30 0f 86 20 85 5f 63 90 06 41 8d 87 a2 90 07 98 92 27 59 96 26 79 96 23 69 96 69 89 96 25 b9 96 6e d9 96 70 49 96 6c 29 97 6f 49 97 71 b9 92 6a 79 97 1b Data Ascii: .o~4Q_386D5_<`CFXk:46hC H# HXXKA(8h)I7q#hN6"997XsG)+st0 _cA'Y&y#ii%npIl)oIqjy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49827	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:14 UTC	356	OUT	GET /sdk/icons/v9/book.svg HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:16 UTC	645	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 187 Connection: close Last-Modified: Mon, 18 May 2020 08:36:52 GMT X-Amz-Server-Side-Encryption: AES256 X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 30 Oct 2024 16:10:16 GMT Cache-Control: public, max-age=6048000, immutable Etag: "e6f130fdabc50710b7bf204829b45e60" Via: 1.1 fb49d852ca52c03c834ce98098b51516.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: RefreshHit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: 9gpUmiwROX1sMpAGZKQI1AlJyaiop8ctRdEftlbGifbJYxUoha6pQA==
2024-10-30 16:10:16 UTC	187	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 39 20 32 2e 30 30 31 48 35 61 31 20 31 20 30 20 30 20 30 2d 31 20 31 76 31 38 61 31 20 31 20 30 20 30 20 30 20 31 20 31 68 31 34 61 31 20 31 20 30 20 30 20 30 20 31 2d 31 76 2d 31 38 61 31 20 31 20 30 20 30 20 30 2d 31 2d 31 7a 6d 2d 31 33 20 32 68 32 76 31 36 48 36 76 2d 31 36 7a 6d 31 32 20 31 36 68 2d 38 76 2d 31 36 68 38 76 31 36 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 20 36 2e 30 30 31 68 36 76 33 68 2d 36 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg viewBox="0 0 24 24"><path d="M19 2.001H5a1 1 0 0 0-1 1v18a1 1 0 0 0 1 1h14a1 1 0 0 0 1-1v-18a1 1 0 0 0-1-1zm-13 2h2v16H6v-16zm12 16h-8v-16h8v16z"/><path d="M11 6.001h6v3h-6z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:15 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:15 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161015Z-16849878b787bfsh7zgp804my400000006yg00000000w136 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:10:15 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:15 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:15 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 5926a802-601e-0032-207f-2aeebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161015Z-16849878b78g2m84h2v9sta290000000076000000000d41r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:15 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:15 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:15 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 809859d7-601e-00ab-6828-2666f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161015Z-17c5cb586f6f8m6jnehy0z65x400000007pg000000001x54 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:15 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.6	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:15 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:15 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 0697abc8-001e-00ad-714f-28554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161015Z-15b8d89586fmc8ck21zz2rtg1w00000005cg00000000k4bq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:15 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49836	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:16 UTC	360	OUT	GET /sdk/icons/v9/envelope.svg HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:16 UTC	650	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 239 Connection: close Date: Wed, 30 Oct 2024 09:04:13 GMT Last-Modified: Mon, 18 May 2020 08:36:54 GMT Etag: "8a826e037d34c2ede8cc6f360c1cce0a" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=6048000, immutable X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 3517ce13630d84c5b14e88de469985cc.cloudfront.net (CloudFront) Age: 25564 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: viLxlToWCSAJoruXESbyZPrynjoPax_5VNiA6G4OPrH38aVzpAoZWA==
2024-10-30 16:10:16 UTC	239	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 30 20 37 48 34 63 2d 31 2e 31 30 33 20 30 2d 32 20 2e 38 39 37 2d 32 20 32 76 39 63 30 20 31 2e 31 30 33 2e 38 39 37 20 32 20 32 20 32 68 31 36 63 31 2e 31 30 33 20 30 20 32 2d 2e 38 39 37 20 32 2d 32 56 39 63 30 2d 31 2e 31 30 33 2d 2e 38 39 37 2d 32 2d 32 2d 32 7a 6d 2d 31 2e 38 38 37 20 32 4c 31 32 20 31 32 2e 38 32 20 35 2e 38 38 37 20 39 68 31 32 2e 32 32 36 7a 4d 34 20 31 38 76 2d 37 2e 38 32 31 6c 37 2e 34 37 20 34 2e 36 36 39 61 31 2e 30 30 32 20 31 2e 30 30 32 20 30 20 30 20 30 20 31 2e 30 36 20 30 6c 37 2e 34 37 2d 34 2e 36 37 2e 30 30 31 20 37 2e 38 32 32 48 34 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg viewBox="0 0 24 24"><path d="M20 7H4c-1.103 0-2 .897-2 2v9c0 1.103.897 2 2 2h16c1.103 0 2-.897 2-2V9c0-1.103-.897-2-2-2zm-1.887 2L12 12.82 5.887 9h12.226zM4 18v-7.821l7.47 4.669a1.002 1.002 0 0 0 1.06 0l7.47-4.67.001 7.822H4z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49837	18.172.112.53	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:16 UTC	370	OUT	GET /CA_LinkedIn_Banner.png HTTP/1.1 Host: cdn.campaignagent.com.au Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:16 UTC	557	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5105578 Connection: close Date: Wed, 30 Oct 2024 16:10:07 GMT x-amz-replication-status: COMPLETED Last-Modified: Fri, 25 Nov 2022 04:02:55 GMT ETag: "7c4c98385a7132f9762c5a03acd5566c" x-amz-server-side-encryption: AES256 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 284574e4f15389d93bfcb84d196a92f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: O2TJB0TeNJaGhCpxMPNgjYeqobyt0Lopv88iUU83hmHt86sJiOHGkA== Age: 10
2024-10-30 16:10:16 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 12 5c 00 00 03 1c 08 06 00 00 00 2b c5 bf a3 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 20 00 49 44 41 54 78 da dc bd 49 8f 64 59 96 df f7 3b e7 de f7 cc 7c 88 c8 88 c8 a9 ab b2 ba ba aa 87 aa 46 93 dd 20 40 4a 22 24 68 80 24 50 82 36 02 37 5a 68 a3 cf a0 0f a0 a5 d6 fa 00 5a f1 13 08 5a 68 c7 0d 25 51 03 04 36 45 8a e8 a1 58 5d 59 c5 1a 32 b3 32 66 1f cc ec bd 7b cf d1 e2 dc 37 98 b9 7b 64 56 b1 bb 05 c8 13 99 19 e1 6e 6e f6 de 7d f7 9e f1 ff ff 1f f9 1f fe bb ff c6 11 10 57 70 c7 39 f9 72 40 da bf 0e 18 88 80 0b 88 08 00 62 8e 09 f1 03 00 77 68 3f f7 e9 0d a7 3f 1c bd 46 da 6b 7c f9 f9 fa 35 f3 87 03 e8 ea 7b ed af 0e 98 c7 1f ac fd 9e f0 ee 2f f7 b8 f8 dc de da da fb ba 1d Data Ascii: PNGIHDR\+pHYs.#.#x?v IDATxIdY;\|F @J"$h$P67ZhZZh%Q6EX]Y22f{7{dVnn}Wp9r@bwh??Fk\|5{/
2024-10-30 16:10:16 UTC	16384	IN	Data Raw: ed 33 40 6a 9f 39 ab 03 ba 4d 38 3b 01 9a ec fa b3 43 88 24 40 34 f8 3b 1c 36 21 6e 7f 0f c8 40 f9 ed f7 09 6e 45 a7 0a ae 56 27 b6 2c dd f8 32 e0 36 04 bc 56 c1 fb 53 c6 af ce 8f d0 47 60 9a 18 69 8a 98 38 80 43 e9 50 12 ce dd 3e 28 00 00 20 00 49 44 41 54 8a 6c f0 15 de e6 79 02 f5 f3 5e ea a9 a9 d0 4d d7 d0 45 e8 1c 86 d9 4a 33 e1 ef 57 03 22 71 51 21 0f e0 46 13 e4 22 04 70 0f fd db 84 dc ea 7a 12 69 89 b8 9e 14 4b c1 0d c2 c4 e0 69 c2 dd c7 af f1 e3 3f fd 53 13 ef e1 6f f0 cd af de 20 d2 84 78 3c 9a 39 a6 18 78 89 83 bd 2b 35 17 5c f2 05 6b 2e be ce 55 4c 31 20 85 09 81 19 d3 7c c0 5c 2a 8e 3a 61 29 2b 1e 97 33 1e 15 78 7f b9 e0 ab 9c 71 fb 70 8f bb 34 e1 ee 78 c0 cb 17 2f 90 6e 8e 38 de dd e1 ee 78 83 cb ba 60 59 0c 7a 74 59 2e c8 cb 82 58 33 e6 c3 Data Ascii: 3@j9M8;C$@4;6!n@nEV',26VSG`i8CP>( IDATly^MEJ3W"qQ!F"pziKi?So x<9x+5\k.UL1 \|\*:a)+3xqp4x/n8x`YztY.X3
2024-10-30 16:10:16 UTC	16384	IN	Data Raw: 22 a6 58 21 b5 80 3c f8 a9 ed 91 55 0c ac 66 fd 64 76 e4 08 99 0f 89 ac 5e f4 dd c2 fa e3 4c 40 ce 16 1c 45 56 b3 44 35 3f 90 8a fd 3c e9 0d 75 9f 83 09 5d 79 a8 7d 3d f5 75 b9 d6 da e7 8d ec da a0 40 6c e0 d7 10 51 1c 68 86 2c 1e f8 a6 1b c8 2c 60 78 e7 af e5 73 2d 78 46 fb ef d5 e6 87 a3 5e 5c b0 be a0 00 00 20 00 49 44 41 54 8f fb da 05 f7 8e fa 33 ad 34 94 44 3e bd 92 4d c7 4b ba 61 46 88 b6 99 a8 5e f7 5a a0 5d e7 d5 c7 c8 be 2e 30 91 6b a5 75 b0 80 f8 5e 32 86 db ea 9e 73 04 69 73 bd 7d 5a 48 d7 70 d3 16 1e 1a 9e 0b 86 57 ed f0 3b ed ac 88 6b 02 77 e3 07 5c cf 81 f7 f3 45 1e 95 a6 3c 84 68 8e ca f1 e7 02 6b b7 3c d4 7d 2a 8b 6e fe 4f d9 64 58 08 d1 fb 58 3e 9b 6a 7b 0e 3b ec 4b 1b d0 8b d9 f7 f5 0d 72 d5 3c ac bb 29 5b 0f 59 dd a7 e2 b4 da 44 fd fa Data Ascii: "X!<Ufdv^L@EVD5?<u]y}=u@lQh,,`xs-xF^\ IDAT34D>MKaF^Z].0ku^2sis}ZHpW;kw\E<hk<}*nOdXX>j{;Kr<)[YD
2024-10-30 16:10:17 UTC	16384	IN	Data Raw: 28 72 a9 26 42 f6 47 76 a2 a6 a5 5a c1 08 57 30 69 43 2a c0 6d cd 84 14 82 85 bc 31 7b 36 c9 42 31 0f c1 84 5f 1c 08 4c 15 3b 14 5c c2 80 09 c0 5c aa 99 dd fc 35 67 11 54 26 5c a4 20 ce 15 bb c2 18 62 45 9a 66 8c 31 60 d8 ef 20 22 18 86 11 c1 01 17 06 ef b1 84 ed 10 23 d2 50 21 3e 37 93 52 4d 8b 00 0b 21 08 31 f6 70 0d 33 67 32 72 4b ba 77 93 df 54 2b a6 32 9b 89 28 4a 16 08 00 00 20 00 49 44 41 54 33 44 84 cb 05 fb cb 19 87 fd 0d 6e 6e 0e 08 29 21 ee 46 84 61 40 c9 19 35 67 e4 dc ae 55 33 c6 57 c8 6c 6b 95 0e 06 27 24 26 7b 3d b6 3e 79 37 38 ce 19 01 b6 97 db f3 ea fb f4 30 e0 c3 87 f7 38 9d 2f b8 38 d4 29 e6 08 4d 05 b4 13 68 4d 76 8f 51 4f 63 b9 ca 98 72 9d 8c 60 19 54 ae 69 30 8b 98 70 a3 ea ec 6a 41 ff 66 62 de 0a 72 d7 87 45 dd ea 66 b1 6e 73 ae b8 Data Ascii: (r&BGvZW0iC*m1{6B1_L;\\5gT&\ bEf1` "#P!>7RM!1p3g2rKwT+2(J IDAT3Dnn)!Fa@5gU3Wlk'$&{=>y7808/8)MhMvQOcr`Ti0pjAfbrEfns
2024-10-30 16:10:17 UTC	16384	IN	Data Raw: 28 95 60 bc 3a 0c 8f 4c 35 b1 5d 0c 84 44 e4 64 78 27 67 fa c4 40 54 51 17 6b f0 88 02 b1 02 94 ac 97 00 52 1c ef 0c 7c 73 7c 61 b0 25 9a 81 52 7c 48 e8 55 eb fd 9b 84 aa c0 69 05 1e 2f 82 af df 44 9c 72 c5 a5 0a 82 14 3c 2c 15 1f 82 a0 08 70 ce 36 87 74 59 2f aa 0e c6 8b 86 54 a6 4d a0 8c c1 0a f1 04 50 32 98 44 7e e8 32 ac d8 a1 7f fb d7 cb 40 02 22 07 eb 48 13 ef 54 6b f6 07 4a 60 4f 9e 89 24 98 b8 82 34 a2 0a 81 61 83 8e 97 53 c4 af 76 90 f7 00 00 20 00 49 44 41 54 a4 c0 c3 5a b0 d6 82 a5 56 20 14 08 82 09 b9 55 40 d5 0f ef ad 01 d1 10 cc d2 0c 99 6e 28 c0 a8 df b0 ff b1 8a 8b c2 b5 a7 f8 f5 44 37 3f 28 1a 5d 53 7a a3 83 da c1 79 28 a2 1a 89 f5 e9 5e 37 2e b8 ea 80 3f 81 64 71 fd b6 76 71 18 74 13 a7 a8 78 b3 a3 d4 4d 84 53 fc 7d 15 1a 0a c5 ad c8 da Data Ascii: (`:L5]Ddx'g@TQkR\|s\|a%R\|HUi/Dr<,p6tY/TMP2D~2@"HTkJ`O$4aSv IDATZV U@n(D7?(]Szy(^7.?dqvqtxMS}
2024-10-30 16:10:17 UTC	16384	IN	Data Raw: 91 f6 86 78 83 43 e1 47 4e 7e d4 be 8f ea 8b f1 89 ee 00 51 af b7 a2 f4 55 0d f1 a6 b3 90 d1 a2 4e ba 83 72 d3 8b 33 ed ed 07 7c e5 df 0d df 40 c7 da 6d bb 61 37 cf c0 36 c9 6a e7 12 1d 44 bf 0a ba 19 73 0c d7 b9 81 3f fb ec ec 25 68 77 0f 77 52 bc cc 22 76 07 9a 6e fa d9 16 56 db de 9b db 16 d2 06 5a d2 a1 88 34 03 75 4f 4d 27 dd 8d c5 5a af 97 ba ee ce eb 01 da 4c 90 b6 b7 b4 f9 9f f8 49 91 b7 e6 58 0b 57 f5 9a 9c 29 42 54 3c a4 68 e8 45 28 59 5f 87 65 d3 34 bb ba 9d 88 41 b1 82 e7 00 e4 ec 81 2e 5b 9f ce 33 21 32 00 00 20 00 49 44 41 54 84 02 20 79 c5 77 bf f9 1a e7 cb 19 31 26 bb 0e 2d 65 83 5b 5e ae 74 13 5f d6 da 4f bf 54 2b 0a 17 70 10 08 87 8d 0d 1f a5 e7 3a 6b 0b 2a ea da c4 ad 8f 66 06 31 b6 43 55 02 2e 9a 6d 1f ad da 0d 30 f6 b3 37 73 5e 5b bb Data Ascii: xCGN~QUNr3\|@ma76jDs?%hwwR"vnVZ4uOM'ZLIXW)BT<hE(Y_e4A.[3!2 IDAT yw1&-e[^t_OT+p:k*f1CU.m07s^[
2024-10-30 16:10:17 UTC	16384	IN	Data Raw: db 5e a2 2e 78 2b b9 60 9a 12 78 72 71 5d 17 34 e5 e4 c9 1e 87 b3 f8 30 3b 25 40 39 0a e0 02 62 e0 e5 33 2f 46 4e 8b 0c 23 61 66 7f 3e 6a 5d 60 66 f8 b3 2f 9f 7b 43 9d 72 50 69 1b 3e 83 37 2d 8f 67 6f b8 bc 59 04 4c 84 db 39 c7 f7 4e 38 2d 82 e3 b9 79 5a 8d 09 7e 71 b8 8f a4 91 8c 4c 82 69 03 bc 28 ec f7 ca bf f8 ec 85 9f 8f 16 4f 46 3f 99 e0 a6 4c f8 72 bf c3 0f 9e f9 b3 7c 97 5d 1c 61 54 b0 88 e1 eb 0f f7 d1 20 06 7e fd 70 c2 eb 73 f5 26 9b 1a 4e da 02 3a 95 43 54 b0 15 cc 04 fd 9d d3 6a 88 d5 6d 62 fd 00 29 42 24 52 37 78 35 3b da 06 00 73 91 5e 66 5d 32 ad b0 ef b4 72 cb b3 b3 96 72 00 00 20 00 49 44 41 54 d8 17 65 40 98 bd 91 77 e2 e6 c2 5d ce 48 ca f8 56 0c 39 06 9d 29 4c 99 7f 74 04 0a 13 7e b6 cf 98 88 b0 14 6f 02 65 66 cc f3 ec 82 e8 54 fa 1d 18 Data Ascii: ^.x+`xrq]40;%@9b3/FN#af>j]`f/{CrPi>7-goYL9N8-yZ~qLi(OF?Lr\|]aT ~ps&N:CTjmb)B$R7x5;s^f]2rr IDATe@w]HV9)Lt~oefT
2024-10-30 16:10:17 UTC	16384	IN	Data Raw: e9 83 d8 35 02 3d 1b 40 cd 04 c3 21 20 0c 09 e3 7e 87 5c 33 96 f3 8c 65 59 1c 12 31 82 b8 82 b8 b8 d1 cc 8c 46 21 46 c4 6a 7b 5a ae 15 b9 54 8c 31 22 b2 41 0a d2 40 a8 c3 70 d1 a3 21 ff 9e 9a b8 fd 02 34 b9 11 2a 5e 9f 8f 57 6e b6 8b f8 15 ef 30 87 9f 62 f8 be d3 28 da fe 21 5e 7f a3 d6 d2 c1 43 54 14 48 d4 83 20 6d 2f b6 b5 c2 e0 c4 76 3e 51 97 c7 90 7a 2c 69 30 f7 9c 19 75 68 d5 09 92 d7 fd e2 d0 0d e6 ee 35 31 98 c4 65 30 53 83 2f ab 6b 95 6c 6f 95 ae f5 30 97 de 1a 7c 49 b4 85 db 3b 18 f5 a2 2f 42 1b e1 b2 9f 7b 5c bb 62 7a 20 c5 05 e3 67 db 56 21 de 08 7d a9 17 d6 6b 4a 29 6f ea df 26 3a a1 6b fa 11 de 55 eb 6e 01 a3 ba 42 fb 19 ab de e4 52 ac 74 b0 de 00 00 20 00 49 44 41 54 69 fc c4 17 48 ef 4f fd bc 3e db e9 96 15 25 7e 2e d9 a4 b6 f6 d0 19 dd c8 Data Ascii: 5=@! ~\3eY1F!Fj{ZT1"A@p!4*^Wn0b(!^CTH m/v>Qz,i0uh51e0S/klo0\|I;/B{\bz gV!}kJ)o&:kUnBRt IDATiHO>%~.
2024-10-30 16:10:17 UTC	16384	IN	Data Raw: 3b b1 f2 b6 1f 7e 92 3a db 1f 6c eb 03 de 69 a3 9d 94 b9 bd 4e bc 21 71 e0 68 14 69 44 fc 0c b6 b4 2e af a3 72 a1 44 2f 9b 57 56 13 b1 ad 89 11 2f f9 21 56 a1 b6 6d 42 64 7c 9b e6 78 7f 03 7c 4b 0a ef 96 40 13 04 c2 68 24 3a d5 94 56 dc fa 26 80 a5 bd 91 67 27 5a 58 3f 4f d5 28 d0 05 ca 0b b8 1d bc 09 0a a0 7c cc 01 b6 c3 86 ec 05 47 8d bd 60 ea da 81 59 34 92 5f 76 c4 c7 67 1a 70 02 b4 79 33 98 0f ba 1a 07 78 15 bb 04 c4 c6 36 e2 f2 0a b5 8a 43 68 bb f9 f4 b9 87 74 f7 9e f6 42 78 d5 21 c6 fb d7 69 cd b4 4b fa 7a f6 f9 7f 8b 80 f9 3f d5 5f 03 39 d0 26 67 46 06 61 92 86 25 9a 92 cc 09 b7 64 f8 c1 71 c0 eb 43 c1 e1 66 c0 78 28 eb 34 a2 cd 0d d4 08 2a 73 80 b5 12 54 9b 1f 33 8b 17 ab 2a 7e 00 c9 22 2e 38 93 06 8b d4 99 a3 34 82 59 00 00 20 00 49 44 41 54 7a Data Ascii: ;~:liN!qhiD.rD/WV/!VmBd\|x\|K@h$:V&g'ZX?O(\|G`Y4_vgpy3x6ChtBx!iKz?_9&gFa%dqCfx(4sT3~".84Y IDATz
2024-10-30 16:10:17 UTC	16384	IN	Data Raw: a7 f7 df e2 34 2f a0 08 0b 57 21 82 44 da d4 63 da 85 bc 14 bd 9f d4 86 d9 9e a2 d9 40 23 e2 29 e9 a2 84 38 8e d8 1d ee 31 ec f6 f6 9a e7 d9 1b 2e 09 1a 2a 58 0d 9e a4 2e 6a a5 b4 33 03 2a 07 7f 36 7d 52 24 02 cb a1 64 17 ef f3 5a 07 b6 3d 36 24 1c 5e bf c6 af 7e fe 13 3c 7c fb 09 ff e9 3f ff 16 e7 62 b3 f2 31 06 90 08 16 21 64 12 cc 3e b7 ad 22 98 99 40 a5 40 03 63 20 87 b7 b0 cd 89 e6 92 21 4f 4f 50 02 ee 5f bf 42 1a 07 c4 70 30 18 59 4a 78 ff f0 88 8f c5 8c 0a 27 32 3d 45 76 f8 cc 4e 2c 65 31 38 e8 8a fa ad ae c8 f3 8c d3 f1 09 14 19 21 05 84 21 42 67 37 de 8b a0 2c 15 97 f3 c5 4d d6 b1 f7 e7 f2 bc 20 9f cf 90 92 01 62 a4 71 44 da 1f 30 ed f7 38 2c 0b 3e 3c 3e e2 f1 74 42 7d 7c 42 4a 09 87 69 c2 69 18 fd b9 aa d8 1d 26 9f 91 da 1c 3d 72 80 68 c5 f1 72 Data Ascii: 4/W!Dc@#)81.X.j36}R$dZ=6$^~<\|?b1!d>"@@c !OOP_Bp0YJx'2=EvN,e18!!Bg7,M bqD08,><>tB}\|BJii&=rhr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49834	18.66.112.64	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:16 UTC	659	OUT	GET /kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/assets/favicon.ico HTTP/1.1 Host: cdn.elev.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://knowledgebase.campaignagent.com.au/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:17 UTC	680	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 1077 Connection: close Date: Wed, 30 Oct 2024 16:10:17 GMT Last-Modified: Thu, 02 May 2024 23:50:28 GMT Etag: "00d41eb4b8d463c922876361c48e734d" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=31550000, immutable X-Amz-Version-Id: rd89sUdCxeWZbZeatlLVrwLCjE3Y_FFk Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 fb49d852ca52c03c834ce98098b51516.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: Jo2SneEALELhLdmLKITDcVGjszdD_aSw5SBMqt4tLBUtv3GYyPTM-w==
2024-10-30 16:10:17 UTC	1077	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 f0 50 4c 54 45 48 b3 7d 48 b3 7d 47 b3 7c 46 b2 7c 4b b4 7f 59 ba 89 5a ba 8a 4d b5 80 47 b3 7d 73 c5 9c c3 e6 d4 e0 f2 e9 e1 f2 e9 c7 e8 d7 7a c8 a1 e8 f6 ef cc ea db 86 cd a9 84 cc a7 c5 e7 d6 ed f7 f2 7e c9 a3 4c b5 80 d8 ef e4 44 b1 7a 53 b7 85 ce ea dc d0 eb de 50 b6 83 57 b9 88 e3 f3 eb aa dc c2 45 b2 7b 9c d6 b9 ec f7 f1 60 bd 8e 54 b8 85 dd f1 e7 b5 e0 cb 47 b2 7c a7 db c1 e7 f5 ee 5b bb 8b a9 db c2 eb f7 f1 77 c6 9e 6e c3 98 Data Ascii: PNGIHDR(-SgAMAasRGB cHRMz&u0`:pQ<PLTEH}H}G\|F\|KYZMG}sz~LDzSPWE{`TG\|[wn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49833	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:16 UTC	357	OUT	GET /sdk/icons/v9/money.svg HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:17 UTC	582	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 867 Connection: close Date: Wed, 30 Oct 2024 16:10:17 GMT Last-Modified: Thu, 17 Nov 2016 04:22:10 GMT Etag: "a26448da25793bb07ccf10fab4a8f5b4" Cache-Control: max-age=2592000 X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 0162e02b2d0212054988a68716227daa.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: n88KbJJlaa6OmE-6WvSMSIZSct8Wg52JHBoxMwBAUkyheJIAasUniA==
2024-10-30 16:10:17 UTC	867	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 20 31 30 2e 35 63 31 2e 39 33 20 30 20 33 2e 35 2d 31 2e 35 37 20 33 2e 35 2d 33 2e 35 53 31 35 2e 39 33 20 33 2e 35 20 31 34 20 33 2e 35 20 31 30 2e 35 20 35 2e 30 37 20 31 30 2e 35 20 37 73 31 2e 35 37 20 33 2e 35 20 33 2e 35 20 33 2e 35 7a 6d 30 2d 35 63 2e 38 32 37 20 30 20 31 2e 35 2e 36 37 33 20 31 2e 35 20 31 2e 35 73 2d 2e 36 37 33 20 31 2e 35 2d 31 2e 35 20 31 2e 35 2d 31 2e 35 2d 2e 36 37 33 2d 31 2e 35 2d 31 2e 35 2e 36 37 33 2d 31 2e 35 20 31 2e 35 2d 31 2e 35 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 33 20 30 48 35 61 31 20 31 20 30 20 30 20 30 2d 31 20 31 76 31 31 2e 30 38 63 2e 33 32 38 2d 2e 30 34 37 2e 36 36 2d 2e 30 38 20 31 Data Ascii: <svg viewBox="0 0 24 24"><path d="M14 10.5c1.93 0 3.5-1.57 3.5-3.5S15.93 3.5 14 3.5 10.5 5.07 10.5 7s1.57 3.5 3.5 3.5zm0-5c.827 0 1.5.673 1.5 1.5s-.673 1.5-1.5 1.5-1.5-.673-1.5-1.5.673-1.5 1.5-1.5z"/><path d="M23 0H5a1 1 0 0 0-1 1v11.08c.328-.047.66-.08 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49835	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:16 UTC	370	OUT	GET /sdk/icons/v9/arrow-circle-right.svg HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:16 UTC	639	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 147 Connection: close Date: Wed, 30 Oct 2024 16:10:17 GMT Last-Modified: Mon, 18 May 2020 08:36:52 GMT Etag: "9ecb59d4c122c91cc69bdc20ae2eeed1" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=6048000, immutable X-Amz-Version-Id: null Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 3a21078459f955a33f79dacf082781c4.cloudfront.net (CloudFront) Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Miss from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: 5FQxrWBPAt8X1ugdJS0jPKhGL7ksYhlXVtikNk6P2A8X0baLwjaP7Q==
2024-10-30 16:10:16 UTC	147	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 36 20 32 30 2e 34 31 35 4c 34 2e 35 38 36 20 31 39 6c 37 2d 37 2d 37 2d 37 4c 36 20 33 2e 35 38 36 20 31 34 2e 34 31 34 20 31 32 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 31 20 32 30 2e 34 31 35 4c 39 2e 35 38 36 20 31 39 6c 37 2d 37 2d 37 2d 37 4c 31 31 20 33 2e 35 38 36 20 31 39 2e 34 31 34 20 31 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg viewBox="0 0 24 24"><path d="M6 20.415L4.586 19l7-7-7-7L6 3.586 14.414 12z"/><path d="M11 20.415L9.586 19l7-7-7-7L11 3.586 19.414 12z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:16 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:16 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161016Z-16849878b78tg5n42kspfr0x48000000086000000000tpqd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:16 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:17 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161017Z-15b8d89586flzzksdx5d6q7g1000000003b000000000ex42 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.6	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:17 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: e5751b3d-f01e-0099-0a8e-299171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161017Z-r197bdfb6b4gx6v9pg74w9f47s0000000ah00000000018a4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.6	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:17 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 6c6fa777-201e-003c-1958-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161017Z-17c5cb586f67hfgj2durhqcxk8000000075000000000b978 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.6	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:17 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161017Z-16849878b78qfbkc5yywmsbg0c00000007y000000000e1zp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.6	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:17 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161017Z-16849878b78qwx7pmw9x5fub1c000000068g000000010223 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49843	18.66.112.115	443	3792	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:17 UTC	405	OUT	GET /kb/v2/themes/1/eef78d3a-df68-42c1-afb8-da64d7169aed/assets/favicon.ico HTTP/1.1 Host: cdn.elev.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:10:18 UTC	687	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 1077 Connection: close Date: Wed, 30 Oct 2024 16:10:17 GMT Last-Modified: Thu, 02 May 2024 23:50:28 GMT Etag: "00d41eb4b8d463c922876361c48e734d" X-Amz-Server-Side-Encryption: AES256 Cache-Control: public, max-age=31550000, immutable X-Amz-Version-Id: rd89sUdCxeWZbZeatlLVrwLCjE3Y_FFk Accept-Ranges: bytes Server: AmazonS3 Via: 1.1 da9380f22ff2303fc2fd4652bf7ec7ba.cloudfront.net (CloudFront) Age: 2 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P5 X-Amz-Cf-Id: _I2NOucEbEZvrJ-M8bPTgSh38_D6W02oJbF3HzQ0d_OomFhtVKyf1A==
2024-10-30 16:10:18 UTC	1077	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 f0 50 4c 54 45 48 b3 7d 48 b3 7d 47 b3 7c 46 b2 7c 4b b4 7f 59 ba 89 5a ba 8a 4d b5 80 47 b3 7d 73 c5 9c c3 e6 d4 e0 f2 e9 e1 f2 e9 c7 e8 d7 7a c8 a1 e8 f6 ef cc ea db 86 cd a9 84 cc a7 c5 e7 d6 ed f7 f2 7e c9 a3 4c b5 80 d8 ef e4 44 b1 7a 53 b7 85 ce ea dc d0 eb de 50 b6 83 57 b9 88 e3 f3 eb aa dc c2 45 b2 7b 9c d6 b9 ec f7 f1 60 bd 8e 54 b8 85 dd f1 e7 b5 e0 cb 47 b2 7c a7 db c1 e7 f5 ee 5b bb 8b a9 db c2 eb f7 f1 77 c6 9e 6e c3 98 Data Ascii: PNGIHDR(-SgAMAasRGB cHRMz&u0`:pQ<PLTEH}H}G\|F\|KYZMG}sz~LDzSPWE{`TG\|[wn

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:17 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 5b2d2bb9-d01e-0028-519c-277896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161018Z-15b8d89586fvk4kmbg8pf84y88000000092g00000000k7hp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.6	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:18 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:18 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: e574f622-301e-0052-4beb-2565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161018Z-16849878b78fssff8btnns3b1400000008mg0000000054k5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:18 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.6	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:18 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:18 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161018Z-16849878b782d4lwcu6h6gmxnw00000007x000000000mnws x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:18 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:18 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:18 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: d24b0423-701e-0098-2b81-2a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161018Z-r197bdfb6b4cnxt4mv5f3apubw00000000yg000000002ws7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:18 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:18 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:18 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: c1ca1df0-401e-0029-1e3a-269b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161018Z-17c5cb586f6z6tq2xr35mhd5x000000000ug00000000edet x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:18 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:18 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:18 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161018Z-16849878b78bcpfn2qf7sm6hsn00000009ug00000000n6ew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:10:19 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49849	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:19 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 37 59 6a 4e 30 71 6a 6a 33 55 43 43 4d 34 71 38 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 33 63 64 65 34 66 64 31 36 65 33 65 33 34 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 7YjN0qjj3UCCM4q8.1Context: 33cde4fd16e3e345
2024-10-30 16:10:19 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-30 16:10:19 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 37 59 6a 4e 30 71 6a 6a 33 55 43 43 4d 34 71 38 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 33 63 64 65 34 66 64 31 36 65 33 65 33 34 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 56 75 70 70 69 5a 57 4c 6c 76 62 5a 71 4f 45 54 4a 36 57 74 66 62 4d 41 58 54 7a 32 4e 65 44 44 37 66 7a 47 4a 33 47 37 54 65 4b 4a 6c 68 70 46 50 34 5a 79 63 67 33 45 65 50 72 36 76 59 64 39 62 4a 32 4f 4e 38 43 59 5a 57 71 62 43 35 69 64 56 32 4c 71 7a 53 43 4c 6e 66 71 34 74 74 32 46 2f 44 68 34 4b 67 68 48 42 39 78 74 30 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 7YjN0qjj3UCCM4q8.2Context: 33cde4fd16e3e345<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAVuppiZWLlvbZqOETJ6WtfbMAXTz2NeDD7fzGJ3G7TeKJlhpFP4Zycg3EePr6vYd9bJ2ON8CYZWqbC5idV2LqzSCLnfq4tt2F/Dh4KghHB9xt0
2024-10-30 16:10:19 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 37 59 6a 4e 30 71 6a 6a 33 55 43 43 4d 34 71 38 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 33 63 64 65 34 66 64 31 36 65 33 65 33 34 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 7YjN0qjj3UCCM4q8.3Context: 33cde4fd16e3e345<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-30 16:10:19 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-30 16:10:19 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 77 44 37 46 65 78 6b 34 55 4b 5a 7a 45 4f 74 2f 77 66 66 6d 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +wD7Fexk4UKZzEOt/wffmg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:19 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 055e5760-501e-00a0-45eb-289d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161019Z-17c5cb586f626sn8grcgm1gf8000000006p000000000m7c4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:19 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 3281a84b-401e-0029-700c-289b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161019Z-17c5cb586f6gkqkwd0x1ge8t0400000008z0000000000g92 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:19 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 78dfd7f1-001e-0034-02ca-2add04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161019Z-16849878b78j5kdg3dndgqw0vg00000009yg00000000hzba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:10:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.6	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:19 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:19 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161019Z-16849878b78q9m8bqvwuva4svc00000006r000000000rym8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:19 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.6	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:19 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161019Z-16849878b786fl7gm2qg4r5y7000000008k000000000bn2h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.6	49157	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:20 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bf07d5f0-e01e-0020-6ed9-2ade90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161020Z-r197bdfb6b4cxj4bmw6ag8gees00000001100000000008ht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.6	49159	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:20 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:20 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 8e6218f7-d01e-0066-7d57-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161020Z-16849878b78tg5n42kspfr0x48000000088g00000000gr2q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	49158	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:20 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:20 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161020Z-16849878b78km6fmmkbenhx76n00000007qg00000000185v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:20 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	49160	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:20 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: fe6c1954-001e-0082-5f6d-285880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161020Z-17c5cb586f6wnfhvhw6gvetfh400000007r000000000cs1x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.6	49161	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:20 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e6885a93-401e-0078-5ec2-2a4d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161020Z-17c5cb586f6zcqf8r7the4ske000000000p0000000005hd7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49162	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:21 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9f581369-601e-00ab-15c9-2a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161021Z-16849878b7898p5f6vryaqvp58000000090000000000vx4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:10:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49163	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:21 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dbd91de3-001e-002b-2827-2799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161021Z-17c5cb586f6z6tq2xr35mhd5x000000000yg000000000naz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49164	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:21 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:21 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161021Z-16849878b78qfbkc5yywmsbg0c00000007v000000000ug04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:21 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	49165	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:21 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:21 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: af2b1dc9-001e-0066-0d6c-27561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161021Z-16849878b78bjkl8dpep89pbgg00000006ug00000000zn0f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49166	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:21 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:21 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 79ba3cde-d01e-002b-6b10-2925fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161021Z-r197bdfb6b46kmj4701qkq602400000007hg000000000wax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:21 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.6	49167	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:22 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:22 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:22 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161022Z-16849878b78bjkl8dpep89pbgg00000006yg00000000gvu6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:22 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.6	49168	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:22 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:22 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161022Z-16849878b786lft2mu9uftf3y400000009h000000000cgwt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:22 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.6	49169	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:22 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:22 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 170621ef-f01e-003f-351f-28d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161022Z-15b8d89586f42m673h1quuee4s0000000c8g00000000k70p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:22 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	49171	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:22 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:22 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:22 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161022Z-16849878b787bfsh7zgp804my400000006y000000000xcpx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:10:22 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	49172	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:23 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:23 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:23 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161023Z-16849878b787bfsh7zgp804my400000006zg00000000sa8z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:23 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	49173	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:23 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:23 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:23 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 97090380-701e-0032-52b4-2aa540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161023Z-16849878b78sx229w7g7at4nkg00000006e000000000stxy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:10:23 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.6	49174	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:23 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:23 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 5925f4c0-501e-00a3-7895-29c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161023Z-17c5cb586f672xmrz843mf85fn000000072g00000000g00w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:23 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.6	49170	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:23 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:23 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:23 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 6768b437-a01e-00ab-174d-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161023Z-16849878b78fssff8btnns3b1400000008g000000000nc1x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:23 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.6	49175	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:23 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:23 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:23 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b981dc60-601e-0097-7636-29f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161023Z-15b8d89586fdmfsg1u7xrpfws00000000cg000000000a64d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:23 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.6	49176	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:24 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:24 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:24 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161024Z-16849878b78p8hrf1se7fucxk8000000091000000000vmnt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:24 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.6	49177	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:24 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:24 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:24 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161024Z-16849878b7898p5f6vryaqvp58000000091g00000000p0hf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:10:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49178	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:24 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:24 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: d8669f86-801e-0083-53a9-29f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161024Z-17c5cb586f62vrfquq10qybcuw00000001ag000000003k7p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:24 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	49179	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:10:24 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:10:24 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:10:24 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T161024Z-16849878b786fl7gm2qg4r5y7000000008kg000000008xz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:10:24 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Target ID:	0
Start time:	12:09:48
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:09:55
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1916,i,13547063157224830196,10157729876826573636,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:09:57
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://knowledgebase.campaignagent.com.au/en/articles/481"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://knowledgebase.campaignagent.com.au/en/articles/481	HTTP Parser: Title: Understanding Pay Now Campaigns - does not match URL
Source: https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request	HTTP Parser: Title: How to Create a VPAPay Payment Request - does not match URL

Source: https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request	HTTP Parser: No favicon
Source: https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request	HTTP Parser: No favicon
Source: https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request	HTTP Parser: No favicon
Source: https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request	HTTP Parser: No favicon
Source: https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request	HTTP Parser: No favicon
Source: https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request	HTTP Parser: No favicon
Source: https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request	HTTP Parser: No favicon
Source: https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request	HTTP Parser: No favicon

Source: https://knowledgebase.campaignagent.com.au/en/articles/481	HTTP Parser: No <meta name="author".. found
Source: https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request	HTTP Parser: No <meta name="author".. found

Source: https://knowledgebase.campaignagent.com.au/en/articles/481	HTTP Parser: No <meta name="copyright".. found
Source: https://knowledgebase.campaignagent.com.au/en/articles/419-how-to-create-a-vpapay-payment-request	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.6:59220 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:49155 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	DNS traffic detected: DNS query: knowledgebase.campaignagent.com.au
Source: global traffic	DNS traffic detected: DNS query: cdn.elev.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.campaignagent.com.au
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: events.elev.io
Source: global traffic	DNS traffic detected: DNS query: ipa.elev.io
Source: global traffic	DNS traffic detected: DNS query: player.vimeo.com
Source: global traffic	DNS traffic detected: DNS query: fresnel.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: i.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: f.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: player-telemetry.vimeo.com
Source: global traffic	DNS traffic detected: DNS query: vimeo.com

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://knowledgebase.campaignagent.com.au/en/articles/481

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Windows Analysis Report
https://knowledgebase.campaignagent.com.au/en/articles/481