Edit tour

Windows Analysis Report
https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=

Overview

General Information

Sample URL:	https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=
Analysis ID:	1390749
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Creates files inside the system directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5348 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5468 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1704,i,7672568953449001636,1025047277016872623,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6536 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc= MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

Acrobat.exe (PID: 6688 cmdline: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\Quote_No_28084 (1).pdf MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 5000 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 6896 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2084 --field-trial-handle=1576,i,959878416068745113,13800187813377707158,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary
• Hooking and other Techniques for Hiding and Protection

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: file:///C:/Users/user/Downloads/Quote_No_28084.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/Quote_No_28084.pdf	HTTP Parser: No favicon
Source: file:///C:/Users/user/Downloads/Quote_No_28084%20(1).pdf	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.47.177.151:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.47.177.151:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.177.151
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.200.159
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc= HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /versions/24.1.2.0.4.0/public/css/common.css HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
Source: global traffic	HTTP traffic detected: GET /ajax/libs/pdf.js/3.4.120/pdf.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dbsltd.simprosuite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /versions/24.1.2.0.4.0/application/quote/public/css/acceptQuote.css HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
Source: global traffic	HTTP traffic detected: GET /versions/24.1.2.0.4.0/Locale/en_AU/LC_MESSAGES/translations.js HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
Source: global traffic	HTTP traffic detected: GET /versions/24.1.2.0.4.0/public/js/common.js?v=4 HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
Source: global traffic	HTTP traffic detected: GET /versions/24.1.2.0.4.0/application/quote/public/js/acceptQuote.js HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
Source: global traffic	HTTP traffic detected: GET /ajax/libs/pdf.js/3.4.120/pdf.worker.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /versions/24.1.2.0.4.0/public/css/fonts/v12-icons.woff HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dbsltd.simprosuite.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://dbsltd.simprosuite.com/versions/24.1.2.0.4.0/public/css/common.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
Source: global traffic	HTTP traffic detected: GET /quote/?action=renderOnlineQuote HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
Source: global traffic	HTTP traffic detected: GET /quote/?action=renderOnlineQuote HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=Accept-Encoding: identityAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2mRange: bytes=0-65535
Source: global traffic	HTTP traffic detected: GET /quote/?action=renderOnlineQuote HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
Source: global traffic	HTTP traffic detected: GET /quote/?action=renderOnlineQuote HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=Accept-Encoding: identityAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2mRange: bytes=262144-283062
Source: global traffic	HTTP traffic detected: GET /quote/?action=renderOnlineQuote HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
Source: global traffic	HTTP traffic detected: GET /quote/?action=renderOnlineQuote HTTP/1.1Host: dbsltd.simprosuite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=0000000000000000000000000000000000000000A85247CBA7 HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: chromecache_166.2.dr	String found in binary or memory: http://bit.ly/mapsapiderive
Source: chromecache_166.2.dr	String found in binary or memory: http://ec.europa.eu/taxation_customs/vies/vieshome.do?selectedLanguage=EN
Source: chromecache_166.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_166.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_166.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_166.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_166.2.dr	String found in binary or memory: http://leafletjs.com
Source: chromecache_166.2.dr	String found in binary or memory: http://malsup.com/jquery/form/
Source: chromecache_166.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_166.2.dr	String found in binary or memory: http://tablesorter.com
Source: chromecache_162.2.dr, chromecache_158.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_166.2.dr	String found in binary or memory: http://www.business.govt.nz/companies/app/ui/pages/companies/search?mode=standard&type=entities&q=
Source: chromecache_166.2.dr	String found in binary or memory: http://www.coolite.com/
Source: chromecache_166.2.dr	String found in binary or memory: http://www.coolite.com/).
Source: chromecache_166.2.dr	String found in binary or memory: http://www.datejs.com/
Source: chromecache_166.2.dr	String found in binary or memory: http://www.datejs.com/license/.
Source: chromecache_166.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_166.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_166.2.dr	String found in binary or memory: http://www.xarg.org/2014/03/rational-numbers-in-javascript/
Source: chromecache_166.2.dr	String found in binary or memory: https://api.locationiq.com/v1/autocomplete.php?normalizecity=true&dedupe=1&limit=20&key=
Source: chromecache_166.2.dr	String found in binary or memory: https://api.tiles.mapbox.com/v4/
Source: chromecache_166.2.dr	String found in binary or memory: https://export.highcharts.com/
Source: chromecache_169.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2RXTr6YS-zF4S-kcSWSVi_szLgiuE.woff2)
Source: chromecache_169.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2RXTr6YS-zF4S-kcSWSVi_szLuiuEViw.woff2)
Source: chromecache_169.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/dancingscript/v25/If2RXTr6YS-zF4S-kcSWSVi_szLviuEViw.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_163.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_166.2.dr	String found in binary or memory: https://github.com/Mottie/tablesorter
Source: chromecache_166.2.dr	String found in binary or memory: https://github.com/jmosbech/StickyTableHeaders
Source: chromecache_166.2.dr	String found in binary or memory: https://github.com/jmosbech/StickyTableHeaders/blob/master/license.txt
Source: chromecache_166.2.dr	String found in binary or memory: https://github.com/josdejong/mathjs
Source: chromecache_166.2.dr	String found in binary or memory: https://github.com/malsup/form
Source: chromecache_166.2.dr	String found in binary or memory: https://github.com/malsup/form#copyright-and-license
Source: chromecache_166.2.dr	String found in binary or memory: https://locationiq.com
Source: chromecache_159.2.dr	String found in binary or memory: https://ourcodeworld.com/articles/read/683/how-to-remove-the-transparent-pixels-that-surrounds-a-can
Source: chromecache_166.2.dr	String found in binary or memory: https://router.project-osrm.org/table/v1/driving/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.abr.business.gov.au/Search/ResultsActive?SearchText=
Source: chromecache_166.2.dr	String found in binary or memory: https://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_166.2.dr	String found in binary or memory: https://www.mapbox.com/
Source: chromecache_166.2.dr	String found in binary or memory: https://www.openstreetmap.org/copyright
Source: chromecache_166.2.dr	String found in binary or memory: https://www.tax.service.gov.uk/check-vat-number/enter-vat-details

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 23.47.177.151:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.47.177.151:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_5348_1371793792

Jump to behavior

Source: classification engine

Classification label: clean0.win@42/72@19/14

Source: 5d7f4f22-33b2-4f93-893d-b4849822a3c8.tmp.0.dr	Initial sample: http:\057\057www.dbsservices.co.uk\057Simproservicereportsamples
Source: 5d7f4f22-33b2-4f93-893d-b4849822a3c8.tmp.0.dr	Initial sample: http:\057\057www.dbs.uk.com
Source: 5d7f4f22-33b2-4f93-893d-b4849822a3c8.tmp.0.dr	Initial sample: http:\057\057www.dbsservices.co.uk\057simproservicereportsamples
Source: 5d7f4f22-33b2-4f93-893d-b4849822a3c8.tmp.0.dr	Initial sample: http:\057\057dbsservices.co.uk\057terms_of_business\057
Source: 5d7f4f22-33b2-4f93-893d-b4849822a3c8.tmp.0.dr	Initial sample: http:\057\057www.dbsservices.co.uk\057

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\e66329c2-55f2-416b-aab6-c0a719bf5955.tmp

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-02-12 13-54-25-731.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1704,i,7672568953449001636,1025047277016872623,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=
Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Downloads\Quote_No_28084 (1).pdf
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2084 --field-trial-handle=1576,i,959878416068745113,13800187813377707158,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1704,i,7672568953449001636,1025047277016872623,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2084 --field-trial-handle=1576,i,959878416068745113,13800187813377707158,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

File opened: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\crash_reporter.cfg

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	Path Interception	1 Process Injection	11 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
http://hammerjs.github.io/	0%	URL Reputation	safe
https://chrome.cloudflare-dns.com/dns-query	0%	URL Reputation	safe
http://www.business.govt.nz/companies/app/ui/pages/companies/search?mode=standard&type=entities&q=	0%	Avira URL Cloud	safe
https://locationiq.com	0%	Avira URL Cloud	safe
https://api.locationiq.com/v1/autocomplete.php?normalizecity=true&dedupe=1&limit=20&key=	0%	Avira URL Cloud	safe
https://locationiq.com	0%	Virustotal		Browse
http://www.datejs.com/license/.	0%	Avira URL Cloud	safe
http://www.datejs.com/	0%	Avira URL Cloud	safe
https://www.abr.business.gov.au/Search/ResultsActive?SearchText=	0%	Avira URL Cloud	safe
http://www.datejs.com/	0%	Virustotal		Browse
https://www.tax.service.gov.uk/check-vat-number/enter-vat-details	0%	Avira URL Cloud	safe
file:///C:/Users/user/Downloads/Quote_No_28084%20(1).pdf	0%	Avira URL Cloud	safe
http://www.coolite.com/).	0%	Avira URL Cloud	safe
http://www.coolite.com/	0%	Avira URL Cloud	safe
https://router.project-osrm.org/table/v1/driving/	0%	Avira URL Cloud	safe
file:///C:/Users/user/Downloads/Quote_No_28084.pdf	0%	Avira URL Cloud	safe
https://www.tax.service.gov.uk/check-vat-number/enter-vat-details	0%	Virustotal		Browse
http://www.datejs.com/license/.	0%	Virustotal		Browse
http://www.coolite.com/	0%	Virustotal		Browse
http://www.coolite.com/).	0%	Virustotal		Browse

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
chrome.cloudflare-dns.com	162.159.61.3	true	false	unknown
accounts.google.com	108.177.122.84	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
www.google.com	74.125.136.147	true	false	high
clients.l.google.com	64.233.185.101	true	false	high
simpro-main-380235008.eu-west-2.elb.amazonaws.com	13.41.119.22	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
clients1.google.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
dbsltd.simprosuite.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://clients1.google.com/tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=0000000000000000000000000000000000000000A85247CBA7	false		high
https://dbsltd.simprosuite.com/favicon.ico	false		high
file:///C:/Users/user/Downloads/Quote_No_28084%20(1).pdf	false	Avira URL Cloud: safe	low
https://dbsltd.simprosuite.com/versions/24.1.2.0.4.0/public/css/common.css	false		high
https://dbsltd.simprosuite.com/tools/csp-report/cspReport.php	false		high
https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=	false		high
https://dbsltd.simprosuite.com/versions/24.1.2.0.4.0/public/js/common.js?v=4	false		high
https://cdnjs.cloudflare.com/ajax/libs/pdf.js/3.4.120/pdf.min.js	false		high
https://dbsltd.simprosuite.com/versions/24.1.2.0.4.0/application/quote/public/css/acceptQuote.css	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
file:///C:/Users/user/Downloads/Quote_No_28084.pdf	false	Avira URL Cloud: safe	low
https://chrome.cloudflare-dns.com/dns-query	false	URL Reputation: safe	unknown
https://dbsltd.simprosuite.com/versions/24.1.2.0.4.0/public/css/fonts/v12-icons.woff	false		high
https://cdnjs.cloudflare.com/ajax/libs/pdf.js/3.4.120/pdf.worker.min.js	false		high
https://dbsltd.simprosuite.com/versions/24.1.2.0.4.0/Locale/en_AU/LC_MESSAGES/translations.js	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false		high
https://dbsltd.simprosuite.com/quote/?action=renderOnlineQuote	false		high
https://dbsltd.simprosuite.com/versions/24.1.2.0.4.0/application/quote/public/js/acceptQuote.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.datejs.com/	chromecache_166.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://jquery.org/license	chromecache_166.2.dr	false		high
https://locationiq.com	chromecache_166.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://sizzlejs.com/	chromecache_166.2.dr	false		high
http://www.datejs.com/license/.	chromecache_166.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://api.locationiq.com/v1/autocomplete.php?normalizecity=true&dedupe=1&limit=20&key=	chromecache_166.2.dr	false	Avira URL Cloud: safe	unknown
http://jqueryui.com	chromecache_166.2.dr	false		high
http://www.business.govt.nz/companies/app/ui/pages/companies/search?mode=standard&type=entities&q=	chromecache_166.2.dr	false	Avira URL Cloud: safe	unknown
http://tablesorter.com	chromecache_166.2.dr	false		high
https://www.abr.business.gov.au/Search/ResultsActive?SearchText=	chromecache_166.2.dr	false	Avira URL Cloud: safe	unknown
https://www.tax.service.gov.uk/check-vat-number/enter-vat-details	chromecache_166.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.mapbox.com/	chromecache_166.2.dr	false		high
https://www.apache.org/licenses/LICENSE-2.0	chromecache_166.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_166.2.dr	false		high
https://github.com/jmosbech/StickyTableHeaders	chromecache_166.2.dr	false		high
http://ec.europa.eu/taxation_customs/vies/vieshome.do?selectedLanguage=EN	chromecache_166.2.dr	false		high
http://www.coolite.com/).	chromecache_166.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_162.2.dr, chromecache_158.2.dr	false		high
http://www.coolite.com/	chromecache_166.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://hammerjs.github.io/	chromecache_166.2.dr	false	URL Reputation: safe	unknown
http://malsup.com/jquery/form/	chromecache_166.2.dr	false		high
http://leafletjs.com	chromecache_166.2.dr	false		high
http://www.xarg.org/2014/03/rational-numbers-in-javascript/	chromecache_166.2.dr	false		high
https://router.project-osrm.org/table/v1/driving/	chromecache_166.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/josdejong/mathjs	chromecache_166.2.dr	false		high
https://www.openstreetmap.org/copyright	chromecache_166.2.dr	false		high
https://ourcodeworld.com/articles/read/683/how-to-remove-the-transparent-pixels-that-surrounds-a-can	chromecache_159.2.dr	false		high
http://bit.ly/mapsapiderive	chromecache_166.2.dr	false		high
https://github.com/malsup/form#copyright-and-license	chromecache_166.2.dr	false		high
https://github.com/jmosbech/StickyTableHeaders/blob/master/license.txt	chromecache_166.2.dr	false		high
http://www.gnu.org/licenses/gpl.html	chromecache_166.2.dr	false		high
https://github.com/malsup/form	chromecache_166.2.dr	false		high
http://jquery.com/	chromecache_166.2.dr	false		high
https://api.tiles.mapbox.com/v4/	chromecache_166.2.dr	false		high
https://github.com/Mottie/tablesorter	chromecache_166.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
74.125.138.102	unknown	United States	15169	GOOGLEUS	false
23.54.200.159	unknown	United States	16625	AKAMAI-ASUS	false
64.233.185.101	clients.l.google.com	United States	15169	GOOGLEUS	false
13.41.119.22	simpro-main-380235008.eu-west-2.elb.amazonaws.com	United States	7018	ATT-INTERNET4US	false
162.159.61.3	chrome.cloudflare-dns.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.179.45.102	unknown	United States	16509	AMAZON-02US	false
74.125.136.147	www.google.com	United States	15169	GOOGLEUS	false
108.177.122.84	accounts.google.com	United States	15169	GOOGLEUS	false
142.250.9.99	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.15
192.168.2.14

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1390749
Start date and time:	2024-02-12 13:52:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@42/72@19/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://dbsltd.simprosuite.com/quote/?action=renderOnlineQuote Browse: https://dbsltd.simprosuite.com/quote/?action=renderOnlineQuote

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.9.94, 34.104.35.123, 64.233.176.95, 74.125.136.94, 74.125.138.95, 173.194.219.95, 172.217.215.95, 108.177.122.95, 64.233.185.95, 142.250.9.95, 64.233.177.95, 172.253.124.95, 142.251.15.95, 142.250.105.95, 74.125.136.95, 20.12.23.50, 23.40.205.26, 23.40.205.81, 23.40.205.34, 23.40.205.18, 192.229.211.108, 20.242.39.171, 20.3.187.198, 172.253.124.94, 23.209.38.123, 23.209.38.120, 23.55.252.138, 54.227.187.23, 23.22.254.206, 52.202.204.11, 52.5.13.197, 23.209.188.151, 23.209.188.149, 172.217.215.94
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, acroipm2.adobe.com, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, fonts.gstatic.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com, p13n.adobe.io, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, geo2.adobe.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.235744586393296
Encrypted:	false
SSDEEP:	6:7uIth+q2Pwkn2nKuAl9OmbnIFUt86uIeuQZmw+6uIeuAVkwOwkn2nKuAl9OmbjLJ:7uI7+vYfHAahFUt86uIeuQ/+6uIeuAVW
MD5:	3FF4B7DE0A7730FADEBCDEF70F04E2AF
SHA1:	3D1F2AB4133B072BCE0412363EAD7789150ABD28
SHA-256:	C898B420EB704BC808DFE7F6B88BF3832D856371607DB4CABD556621C9698A05
SHA-512:	375298DC737B9D51B9044B95B7AB98AE95CD1067BD91148827C09596246961DC5DA5B619BDFC2BA716D2C6729D5C2300D56D53F4EA1BB88ED1C6E8828738DF92
Malicious:	false
Reputation:	low
Preview:	2024/02/12-13:54:22.966 199c Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/02/12-13:54:22.967 199c Recovering log #3.2024/02/12-13:54:22.967 199c Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PDF document, version 1.7, 9 pages
Category:	dropped
Size (bytes):	283063
Entropy (8bit):	7.890250838355217
Encrypted:	false
SSDEEP:	3072:wLbUu8uWK0MSa08QCIj8e4K2c6SM38LbUf2bILbU6fCdhMLbUroLbUVwLbUN1Lba:4ktBCIj8e4KPk8o2M5OyzpaNkp
MD5:	8B9A6D75FF94EF44E5ECC4E3F9B5C080
SHA1:	FBC8E2D8DFBBDE8AFDDE35275F29C1CE57A3ABD9
SHA-256:	95A2BAA433D613560AED12713D56730C4AE87D00CC8A04D7A6FFC1E5471DEAEE
SHA-512:	BDA6FBB90AAF856C01BDB030FE7E92301EBE2E978FE64C5F85FC6957ED80DA8B0B35140062792E5619D3F1AFCF2DAC661019065652F699C2BD842A908AA18905
Malicious:	false
Reputation:	low
Preview:	%PDF-1.7.%....1 0 obj.<<./Metadata 104 0 R./PageLayout /OneColumn./PageMode /UseNone./Pages 2 0 R./Type /Catalog.>>.endobj.2 0 obj.<<./Count 9./Kids [ 4 0 R 30 0 R 41 0 R 58 0 R 65 0 R 72 0 R 79 0 R 86 0 R 97 0 R ]./Type /Pages.>>.endobj.3 0 obj.<<./CreationDate (D:20240212125338+00'00')./Creator (..\000O\000N\000L\000Y\000O\000F\000F\000I\000C\000E\000\057\0007\000.\0004\000.\0000\000.\0001\0006\0003)./ModDate (D:20240212125338+00'00')./Producer (..\000O\000N\000L\000Y\000O\000F\000F\000I\000C\000E\000\057\0007\000.\0004\000.\0000\000.\0001\0006\0003).>>.endobj.4 0 obj.<<./Contents [ 5 0 R ]./MediaBox [ 0 0 595.29999 841.90002 ]./Parent 2 0 R./Resources <<./ExtGState <<./E1 29 0 R.>>./Font <<./F1 11 0 R./F2 20 0 R.>>./Pattern <<./P1 9 0 R.>>./ProcSet [ /PDF /Text /ImageB /ImageC /ImageI ].>>./Type /Page.>>.endobj.5 0 obj.<<./Filter [ /FlateDecode ]./Length 6 0 R.>>.stream..x..\.....?Oq^.........u.^...^..(.&Ea......F.I..].)....oG$E..(.t~.$.f.[J9.... m.....M.n!@.b..G....?.`......

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 12, 2024 13:53:09.054625988 CET	55677	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:53:09.055291891 CET	50882	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:53:09.055932045 CET	55225	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:53:09.056200027 CET	50840	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:53:09.150279999 CET	53	53449	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:09.172095060 CET	53	55677	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:09.172719955 CET	53	50882	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:09.173209906 CET	53	55225	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:09.173844099 CET	53	50840	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:09.831860065 CET	53	52691	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:10.734117985 CET	61482	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:53:10.734483004 CET	64112	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:53:10.854995966 CET	53	61482	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:10.872241974 CET	53	64112	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:11.888605118 CET	55454	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:53:11.888829947 CET	52371	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:53:11.951589108 CET	59527	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:53:11.951955080 CET	52255	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:53:12.002531052 CET	53	54720	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:12.005973101 CET	53	55454	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:12.006326914 CET	53	52371	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:12.069096088 CET	53	59527	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:12.069468021 CET	53	52255	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:12.558113098 CET	53	61945	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:14.966865063 CET	53	60919	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:16.909847975 CET	55262	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:53:16.910054922 CET	63481	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:53:17.028357029 CET	53	55262	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:17.042321920 CET	53	63481	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:27.027025938 CET	53	50208	1.1.1.1	192.168.2.4
Feb 12, 2024 13:53:27.537643909 CET	138	138	192.168.2.4	192.168.2.255
Feb 12, 2024 13:53:45.912767887 CET	53	62647	1.1.1.1	192.168.2.4
Feb 12, 2024 13:54:07.990806103 CET	53	61829	1.1.1.1	192.168.2.4
Feb 12, 2024 13:54:09.061583996 CET	53	60317	1.1.1.1	192.168.2.4
Feb 12, 2024 13:54:12.411894083 CET	52647	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:54:12.412288904 CET	58709	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:54:12.529349089 CET	53	52647	1.1.1.1	192.168.2.4
Feb 12, 2024 13:54:12.529844999 CET	53	58709	1.1.1.1	192.168.2.4
Feb 12, 2024 13:54:14.828145027 CET	49249	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:54:14.828741074 CET	59219	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:54:14.948724031 CET	53	49249	1.1.1.1	192.168.2.4
Feb 12, 2024 13:54:14.964382887 CET	53	59219	1.1.1.1	192.168.2.4
Feb 12, 2024 13:54:31.724915028 CET	59767	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:54:31.842201948 CET	53	59767	1.1.1.1	192.168.2.4
Feb 12, 2024 13:54:32.654025078 CET	54631	443	192.168.2.4	162.159.61.3
Feb 12, 2024 13:54:32.772804022 CET	443	54631	162.159.61.3	192.168.2.4
Feb 12, 2024 13:54:32.772902012 CET	443	54631	162.159.61.3	192.168.2.4
Feb 12, 2024 13:54:32.772939920 CET	443	54631	162.159.61.3	192.168.2.4
Feb 12, 2024 13:54:32.774126053 CET	54631	443	192.168.2.4	162.159.61.3
Feb 12, 2024 13:54:32.784605026 CET	54631	443	192.168.2.4	162.159.61.3
Feb 12, 2024 13:54:32.784785986 CET	54631	443	192.168.2.4	162.159.61.3
Feb 12, 2024 13:54:32.785294056 CET	54631	443	192.168.2.4	162.159.61.3
Feb 12, 2024 13:54:32.901808023 CET	443	54631	162.159.61.3	192.168.2.4
Feb 12, 2024 13:54:32.901820898 CET	443	54631	162.159.61.3	192.168.2.4
Feb 12, 2024 13:54:32.901830912 CET	443	54631	162.159.61.3	192.168.2.4
Feb 12, 2024 13:54:32.901846886 CET	443	54631	162.159.61.3	192.168.2.4
Feb 12, 2024 13:54:32.902390003 CET	54631	443	192.168.2.4	162.159.61.3
Feb 12, 2024 13:54:32.902482033 CET	54631	443	192.168.2.4	162.159.61.3
Feb 12, 2024 13:54:32.903295040 CET	443	54631	162.159.61.3	192.168.2.4
Feb 12, 2024 13:54:32.904202938 CET	443	54631	162.159.61.3	192.168.2.4
Feb 12, 2024 13:54:32.929675102 CET	54631	443	192.168.2.4	162.159.61.3
Feb 12, 2024 13:54:33.019541979 CET	443	54631	162.159.61.3	192.168.2.4
Feb 12, 2024 13:54:33.044956923 CET	54631	443	192.168.2.4	162.159.61.3
Feb 12, 2024 13:54:35.586302042 CET	54631	443	192.168.2.4	162.159.61.3
Feb 12, 2024 13:54:35.704269886 CET	443	54631	162.159.61.3	192.168.2.4
Feb 12, 2024 13:54:35.704763889 CET	443	54631	162.159.61.3	192.168.2.4
Feb 12, 2024 13:54:35.731831074 CET	54631	443	192.168.2.4	162.159.61.3
Feb 12, 2024 13:54:36.953624010 CET	56932	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:54:36.953918934 CET	53840	53	192.168.2.4	1.1.1.1
Feb 12, 2024 13:54:37.071664095 CET	53	56932	1.1.1.1	192.168.2.4
Feb 12, 2024 13:54:37.071921110 CET	53	53840	1.1.1.1	192.168.2.4
Feb 12, 2024 13:54:37.420496941 CET	53	53559	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:09 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-12 12:53:09 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-02-12 12:53:09 UTC	1799	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 12 Feb 2024 12:53:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-JpHvIOGh8HdPgGc3YavvKw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/IdentityListAccountsHttp/web-reports?context=eJzjMtDikmLw1JBiOHxtB5Meyy0mIyCe2_2UaSEQH4x7znQUiHf4eLA4pc9gDQFiIR6OrStXrGMTODB7ymQmALQ5Fx8" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-12 12:53:09 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-02-12 12:53:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:09 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-12 12:53:09 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-ouyJdlDfGchzfOgjymYSAQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 12 Feb 2024 12:53:09 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6251 X-Daystart: 17589 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-12 12:53:09 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 35 31 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 31 37 35 38 39 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6251" elapsed_seconds="17589"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-02-12 12:53:09 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-02-12 12:53:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:11 UTC	776	OUT	GET /quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc= HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-12 12:53:11 UTC	1561	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:11 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 7042 Connection: close Report-To: {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://dbsltd.simprosuite.com/tools/csp-report/cspReport.php"}],"include_subdomains":true} Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' data: wss: blob: .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .googleapis.com .google.com .googletagmanager.com .simprogroup.com .simprocloud.net .simprocloud.com .locationiq.com https://data.resources.simprogroup.com .google-analytics.com https://lookup.simprocloud.com .simprosuite.com; img-src * data: blob: cid: file:; font-src * data:; frame-src ; script-src 'self' 'unsafe-eval' 'unsafe-inline' .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .simprogroup.com .simprocloud.net .simprocloud.com .google.com .googletagmanager.com .cloudfront.net .cloudflare.com https://data.resources.simprogroup.com .pendo.io .google-analytics.com .simprosuite.com; report-uri /tools/csp-report/cspReport.php; report-to csp-endpoint Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m; Domain=dbsltd.simprosuite.com; Path=/; SameSite=None; httpOnly; Secure; Accept-Ranges: bytes Server: lighttpd
2024-02-12 12:53:11 UTC	7042	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 53 4b 59 50 45 5f 54 4f 4f 4c 42 41 52 22 20 63 6f 6e 74 65 6e 74 20 3d 22 53 4b 59 50 45 5f 54 4f 4f 4c 42 41 52 5f 50 41 52 53 45 52 5f 43 4f 4d 50 41 54 49 42 4c 45 22 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8" /> <meta name="format-detection" content="telephone=no" /> <meta name="SKYPE_TOOLBAR" content ="SKYPE_TOOLBAR_PARSER_COMPATIBLE"/> <meta name="viewport" content="width

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:11 UTC	748	OUT	GET /versions/24.1.2.0.4.0/public/css/common.css HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
2024-02-12 12:53:12 UTC	274	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:11 GMT Content-Type: text/css;charset=utf-8 Content-Length: 206506 Connection: close ETag: "963280202" Last-Modified: Sat, 27 Jan 2024 04:37:15 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: lighttpd
2024-02-12 12:53:12 UTC	16110	IN	Data Raw: 2e 6d 73 2d 63 74 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 35 35 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 30 37 35 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 20 6c 69 6e 65 61 72 20 2e 32 73 2c 62 6f 78 2d 73 68 61 64 6f 77 20 6c Data Ascii: .ms-ctn{position:relative;height:28px;padding:0;margin-bottom:0;font-size:14px;line-height:20px;color:#555;border-radius:3px;background-color:#fff;border:1px solid #ccc;box-shadow:inset 0 1px 1px rgba(0,0,0,0.075);transition:border linear .2s,box-shadow l
2024-02-12 12:53:12 UTC	1533	IN	Data Raw: 2e 69 63 6f 6e 2d 75 6e 6c 69 6e 6b 3a 62 65 66 6f 72 65 2c 2e 6d 63 65 49 63 6f 6e 2e 6d 63 65 5f 75 6e 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 35 22 7d 2e 69 63 6f 6e 2d 6f 75 74 64 65 6e 74 3a 62 65 66 6f 72 65 2c 2e 6d 63 65 49 63 6f 6e 2e 6d 63 65 5f 6f 75 74 64 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 36 22 7d 2e 69 63 6f 6e 2d 69 6e 64 65 6e 74 3a 62 65 66 6f 72 65 2c 2e 6d 63 65 49 63 6f 6e 2e 6d 63 65 5f 69 6e 64 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 37 22 7d 2e 69 63 6f 6e 2d 6e 75 6d 6c 69 73 74 3a 62 65 66 6f 72 65 2c 2e 6d 63 65 49 63 6f 6e 2e 6d 63 65 5f 6e 75 6d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 31 38 22 Data Ascii: .icon-unlink:before,.mceIcon.mce_unlink:before{content:"\e915"}.icon-outdent:before,.mceIcon.mce_outdent:before{content:"\e916"}.icon-indent:before,.mceIcon.mce_indent:before{content:"\e917"}.icon-numlist:before,.mceIcon.mce_numlist:before{content:"\e918"
2024-02-12 12:53:12 UTC	16384	IN	Data Raw: 73 6b 73 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 36 22 7d 2e 69 63 6f 6e 2d 64 6f 63 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 37 22 7d 2e 69 63 6f 6e 2d 75 74 69 6c 69 74 69 65 73 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 38 22 7d 2e 69 63 6f 6e 2d 72 65 70 6f 72 74 73 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 39 22 7d 2e 69 63 6f 6e 2d 6c 65 61 64 73 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 61 22 7d 2e 69 63 6f 6e 2d 68 65 6c 70 2d 6f 75 74 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 34 62 22 7d 2e 69 Data Ascii: sks-outline:before{content:"\e946"}.icon-doc-outline:before{content:"\e947"}.icon-utilities-outline:before{content:"\e948"}.icon-reports-outline:before{content:"\e949"}.icon-leads-outline:before{content:"\e94a"}.icon-help-outline:before{content:"\e94b"}.i
2024-02-12 12:53:12 UTC	10463	IN	Data Raw: 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 74 62 6c 47 72 69 64 20 2e 74 72 61 6e 73 70 61 72 65 6e 74 47 72 6f 75 70 65 64 49 6e 70 75 74 3e 73 70 61 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 74 62 6c 47 72 69 64 20 2e 74 72 61 6e 73 70 61 72 65 6e 74 47 72 6f 75 70 65 64 49 6e 70 75 74 3e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 7d 2e 74 62 6c 47 72 69 64 20 2e 74 72 61 6e 73 70 61 72 65 6e 74 47 72 6f 75 70 65 64 49 6e 70 75 74 20 69 6e 70 75 74 2b 73 70 61 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b Data Ascii: und:transparent !important}.tblGrid .transparentGroupedInput>span:first-child{padding-right:4px;padding-left:0}.tblGrid .transparentGroupedInput>span:last-child{padding-right:0;padding-left:4px}.tblGrid .transparentGroupedInput input+span{padding-right:0;
2024-02-12 12:53:12 UTC	16384	IN	Data Raw: 65 63 2d 2d 73 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 37 65 39 65 63 7d 2e 73 61 76 65 42 74 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 32 36 70 78 7d 2e 73 61 76 65 42 74 6e 2e 62 74 6e 50 61 6e 65 6c 53 61 76 65 42 74 6e 7b 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 73 61 76 65 42 74 6e 2e 72 69 67 68 74 4d 61 72 67 69 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 37 70 78 7d 2e 73 61 76 65 42 74 6e 2e 6c 65 66 74 4d 61 72 67 69 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 70 78 7d 2e 73 61 76 65 42 74 6e 2e 74 6f 70 4d 61 72 67 69 6e 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 37 70 78 7d 2e 73 61 76 65 42 74 6e 2e 62 6f 74 74 6f 6d 4d 61 72 67 69 6e 7b 6d Data Ascii: ec--secondaryButton:hover{background-color:#e7e9ec}.saveBtn{font-size:12px;height:26px}.saveBtn.btnPanelSaveBtn{height:24px}.saveBtn.rightMargin{margin-right:7px}.saveBtn.leftMargin{margin-left:7px}.saveBtn.topMargin{margin-top:7px}.saveBtn.bottomMargin{m
2024-02-12 12:53:12 UTC	16384	IN	Data Raw: 69 6f 6e 44 65 73 63 72 69 70 74 69 6f 6e 20 74 65 78 74 61 72 65 61 7b 77 69 64 74 68 3a 34 30 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 30 70 78 7d 2e 73 65 63 74 69 6f 6e 50 61 6e 65 6c 20 2e 74 6f 70 53 6f 72 74 61 62 6c 65 48 61 6e 64 6c 65 2c 2e 62 6c 6f 63 6b 50 61 6e 65 6c 20 2e 74 6f 70 53 6f 72 74 61 62 6c 65 48 61 6e 64 6c 65 7b 68 65 69 67 68 74 3a 33 36 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 31 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 70 61 64 64 69 6e 67 3a 33 70 78 20 30 20 32 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 45 45 45 45 45 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 2e 73 65 63 74 69 6f 6e 50 61 6e 65 6c 20 2e 74 Data Ascii: ionDescription textarea{width:400px;min-height:50px}.sectionPanel .topSortableHandle,.blockPanel .topSortableHandle{height:36px;display:inline-block;width:11px;border:1px solid #ccc;padding:3px 0 2px 0;background:#EEEEEE;margin-right:10px}.sectionPanel .t
2024-02-12 12:53:12 UTC	16384	IN	Data Raw: 6c 69 2e 6c 65 76 65 6c 4f 6e 65 20 61 20 2e 69 63 6f 6e 2d 64 6f 77 6e 2d 61 72 72 6f 77 2c 23 63 4e 61 76 20 6c 69 2e 6c 65 76 65 6c 4f 6e 65 20 61 20 2e 69 6e 70 75 74 41 64 64 20 2e 64 6f 77 6e 20 73 70 61 6e 3a 62 65 66 6f 72 65 2c 2e 69 6e 70 75 74 41 64 64 20 2e 64 6f 77 6e 20 23 63 4e 61 76 20 6c 69 2e 6c 65 76 65 6c 4f 6e 65 20 61 20 73 70 61 6e 3a 62 65 66 6f 72 65 2c 23 63 4e 61 76 20 6c 69 2e 6c 65 76 65 6c 4f 6e 65 20 61 20 2e 75 69 2d 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 32 2d 6e 2d 73 7b 63 6f 6c 6f 72 3a 23 31 39 37 36 44 32 7d 23 63 4e 61 76 20 6c 69 2e 6c 65 76 65 6c 4f 6e 65 20 61 20 5b 63 6c 61 73 73 2a 3d 22 69 63 6f 6e 22 5d 3a 6e 6f 74 28 2e 69 63 6f 6e 2d 64 6f 77 6e 2d 61 72 72 6f 77 29 3a 6e 6f 74 28 2e 75 69 2d 69 63 6f 6e Data Ascii: li.levelOne a .icon-down-arrow,#cNav li.levelOne a .inputAdd .down span:before,.inputAdd .down #cNav li.levelOne a span:before,#cNav li.levelOne a .ui-icon-triangle-2-n-s{color:#1976D2}#cNav li.levelOne a [class*="icon"]:not(.icon-down-arrow):not(.ui-icon
2024-02-12 12:53:12 UTC	16384	IN	Data Raw: 3a 33 70 78 7d 2e 74 62 6c 47 72 69 64 20 74 72 2e 72 6f 77 45 78 70 61 6e 64 61 62 6c 65 20 74 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 7d 2e 74 62 6c 47 72 69 64 20 74 68 2e 68 65 61 64 42 74 6e 7b 77 69 64 74 68 3a 36 25 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 74 62 6c 47 72 69 64 20 2e 6e 6f 77 72 61 70 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 74 62 6c 47 72 69 64 20 2e 74 6f 67 67 6c 65 4e 6f 64 65 2c 2e 74 62 6c 47 72 69 64 20 2e 74 6f 67 67 6c 65 43 68 69 6c 64 4e 6f 64 65 73 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 33 70 78 3b 63 6f 6c 6f 72 3a 23 39 39 39 3b 66 6f Data Ascii: :3px}.tblGrid tr.rowExpandable td{border-bottom:none}.tblGrid th.headBtn{width:6%;cursor:pointer}.tblGrid .nowrap{white-space:nowrap}.tblGrid .toggleNode,.tblGrid .toggleChildNodes{display:inline-block;width:12px;height:12px;line-height:13px;color:#999;fo
2024-02-12 12:53:12 UTC	16384	IN	Data Raw: 7b 72 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 64 61 73 68 62 6f 61 72 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 35 70 78 3b 68 65 69 67 68 74 3a 33 33 35 70 78 7d 2e 64 61 73 68 62 6f 61 72 64 2e 66 69 72 73 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 64 61 73 68 62 6f 61 72 64 49 74 65 6d 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 64 61 73 68 62 6f 61 72 64 49 74 65 6d 20 2e 68 65 61 64 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f Data Ascii: {right:0;position:absolute;font-size:18px !important;transform:rotate(90deg);-webkit-transform:rotate(90deg)}.dashboard{margin-top:25px;height:335px}.dashboard.first{margin-left:0}.dashboardItem{margin-bottom:20px}.dashboardItem .header{overflow:hidden;bo
2024-02-12 12:53:12 UTC	16384	IN	Data Raw: 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 7d 2e 72 42 6f 72 64 65 72 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 7d 2e 74 42 6f 72 64 65 72 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 7d 2e 62 42 6f 72 64 65 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 7d 2e 6e 6f 42 6f 72 64 65 72 7b 62 6f 72 64 65 72 3a 30 7d 2e 64 6f 74 74 65 64 42 6f 72 64 65 72 54 6f 70 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 64 6f 74 74 65 64 20 31 2e 35 70 78 20 23 46 30 46 31 46 32 7d 2e 62 65 74 61 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 Data Ascii: order-left:1px solid #ccc}.rBorder{border-right:1px solid #ccc}.tBorder{border-top:1px solid #ccc}.bBorder{border-bottom:1px solid #ccc}.noBorder{border:0}.dottedBorderTop{border-top:dotted 1.5px #F0F1F2}.beta{border-radius:5px;color:#fff;position:relativ

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:12 UTC	561	OUT	GET /ajax/libs/pdf.js/3.4.120/pdf.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dbsltd.simprosuite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-12 12:53:12 UTC	945	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:12 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63fc24c0-12e38" Last-Modified: Mon, 27 Feb 2023 03:34:24 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Sat, 01 Feb 2025 12:53:12 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cVxxdD0t0Hr3e2IIVJUWbhqNEYpI8DufJYGo9FWT0rSLXi5iN6qaKgE2U4O67BX3j67TDTqXxzdLwSPiQwiyyJUYua%2BiO%2BrPObu77jIVgKtoIq7l5UwRXyWV0ki1gMXZVVShFdym"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8544f9210a6e137b-ATL alt-svc: h3=":443"; ma=86400
2024-02-12 12:53:12 UTC	424	IN	Data Raw: 33 38 63 65 0d 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 73 74 61 72 74 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 73 20 74 68 65 20 65 6e 74 69 72 65 20 6c 69 63 65 6e 73 65 20 6e 6f 74 69 63 65 20 66 6f 72 20 74 68 65 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 63 6f 64 65 20 69 6e 20 74 68 69 73 20 70 61 67 65 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 4d 6f 7a 69 6c 6c 61 20 46 6f 75 6e 64 61 74 69 6f 6e 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 Data Ascii: 38ce/** * @licstart The following is the entire license notice for the * JavaScript code in this page * * Copyright 2023 Mozilla Foundation * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in
2024-02-12 12:53:12 UTC	1369	IN	Data Raw: 67 72 65 65 64 20 74 6f 20 69 6e 20 77 72 69 74 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 0a 20 2a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 6f 6e 20 61 6e 20 22 41 53 20 49 53 22 20 42 41 53 49 53 2c 0a 20 2a 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 0a 20 2a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 0a 20 2a 20 6c 69 6d 69 74 61 Data Ascii: greed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limita
2024-02-12 12:53:12 UTC	1369	IN	Data Raw: 41 6e 6e 6f 74 61 74 69 6f 6e 4d 61 72 6b 65 64 53 74 61 74 65 3d 65 2e 41 6e 6e 6f 74 61 74 69 6f 6e 46 6c 61 67 3d 65 2e 41 6e 6e 6f 74 61 74 69 6f 6e 46 69 65 6c 64 46 6c 61 67 3d 65 2e 41 6e 6e 6f 74 61 74 69 6f 6e 45 64 69 74 6f 72 54 79 70 65 3d 65 2e 41 6e 6e 6f 74 61 74 69 6f 6e 45 64 69 74 6f 72 50 72 65 66 69 78 3d 65 2e 41 6e 6e 6f 74 61 74 69 6f 6e 45 64 69 74 6f 72 50 61 72 61 6d 73 54 79 70 65 3d 65 2e 41 6e 6e 6f 74 61 74 69 6f 6e 42 6f 72 64 65 72 53 74 79 6c 65 54 79 70 65 3d 65 2e 41 6e 6e 6f 74 61 74 69 6f 6e 41 63 74 69 6f 6e 45 76 65 6e 74 54 79 70 65 3d 65 2e 41 62 6f 72 74 45 78 63 65 70 74 69 6f 6e 3d 76 6f 69 64 20 30 3b 65 2e 61 73 73 65 72 74 3d 66 75 6e 63 74 69 6f 6e 20 61 73 73 65 72 74 28 74 2c 65 29 7b 74 7c 7c 75 6e 72 65 Data Ascii: AnnotationMarkedState=e.AnnotationFlag=e.AnnotationFieldFlag=e.AnnotationEditorType=e.AnnotationEditorPrefix=e.AnnotationEditorParamsType=e.AnnotationBorderStyleType=e.AnnotationActionEventType=e.AbortException=void 0;e.assert=function assert(t,e){t\|\|unre
2024-02-12 12:53:12 UTC	1369	IN	Data Raw: 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 65 2e 67 65 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 44 61 74 65 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 4d 6f 64 69 66 69 63 61 74 69 6f 6e 44 61 74 65 28 74 3d 6e 65 77 20 44 61 74 65 29 7b 72 65 74 75 72 6e 5b 74 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2c 28 74 2e 67 65 74 55 54 43 4d 6f 6e 74 68 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 2c 74 2e 67 65 74 55 54 43 44 61 74 65 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 2c 74 2e 67 65 74 55 54 43 48 6f 75 72 73 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 70 61 64 53 74 61 72 74 28 32 2c 22 30 22 29 2c 74 2e 67 Data Ascii: ch(t){}return null};e.getModificationDate=function getModificationDate(t=new Date){return[t.getUTCFullYear().toString(),(t.getUTCMonth()+1).toString().padStart(2,"0"),t.getUTCDate().toString().padStart(2,"0"),t.getUTCHours().toString().padStart(2,"0"),t.g
2024-02-12 12:53:12 UTC	1369	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 73 2e 64 65 63 6f 64 65 28 6e 29 7d 63 61 74 63 68 28 74 29 7b 77 61 72 6e 28 60 73 74 72 69 6e 67 54 6f 50 44 46 53 74 72 69 6e 67 3a 20 22 24 7b 74 7d 22 2e 60 29 7d 7d 63 6f 6e 73 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 73 3d 30 2c 6e 3d 74 2e 6c 65 6e 67 74 68 3b 73 3c 6e 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 6e 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 5d 3b 65 2e 70 75 73 68 28 6e 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 29 3a 74 2e 63 68 61 72 41 74 28 73 29 29 7d 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 22 22 29 7d 3b 65 2e 73 74 72 69 6e 67 54 6f 55 54 46 38 53 74 72 69 6e 67 3d 73 74 72 69 6e 67 54 6f 55 54 46 38 53 74 72 69 6e 67 3b 65 2e 75 6e 72 65 61 63 68 61 62 6c 65 3d 75 Data Ascii: );return s.decode(n)}catch(t){warn(`stringToPDFString: "${t}".`)}}const e=[];for(let s=0,n=t.length;s<n;s++){const n=r[t.charCodeAt(s)];e.push(n?String.fromCharCode(n):t.charAt(s))}return e.join("")};e.stringToUTF8String=stringToUTF8String;e.unreachable=u
2024-02-12 12:53:12 UTC	1369	IN	Data Raw: 50 3a 33 7d 3b 65 2e 41 6e 6e 6f 74 61 74 69 6f 6e 54 79 70 65 3d 7b 54 45 58 54 3a 31 2c 4c 49 4e 4b 3a 32 2c 46 52 45 45 54 45 58 54 3a 33 2c 4c 49 4e 45 3a 34 2c 53 51 55 41 52 45 3a 35 2c 43 49 52 43 4c 45 3a 36 2c 50 4f 4c 59 47 4f 4e 3a 37 2c 50 4f 4c 59 4c 49 4e 45 3a 38 2c 48 49 47 48 4c 49 47 48 54 3a 39 2c 55 4e 44 45 52 4c 49 4e 45 3a 31 30 2c 53 51 55 49 47 47 4c 59 3a 31 31 2c 53 54 52 49 4b 45 4f 55 54 3a 31 32 2c 53 54 41 4d 50 3a 31 33 2c 43 41 52 45 54 3a 31 34 2c 49 4e 4b 3a 31 35 2c 50 4f 50 55 50 3a 31 36 2c 46 49 4c 45 41 54 54 41 43 48 4d 45 4e 54 3a 31 37 2c 53 4f 55 4e 44 3a 31 38 2c 4d 4f 56 49 45 3a 31 39 2c 57 49 44 47 45 54 3a 32 30 2c 53 43 52 45 45 4e 3a 32 31 2c 50 52 49 4e 54 45 52 4d 41 52 4b 3a 32 32 2c 54 52 41 50 4e 45 Data Ascii: P:3};e.AnnotationType={TEXT:1,LINK:2,FREETEXT:3,LINE:4,SQUARE:5,CIRCLE:6,POLYGON:7,POLYLINE:8,HIGHLIGHT:9,UNDERLINE:10,SQUIGGLY:11,STRIKEOUT:12,STAMP:13,CARET:14,INK:15,POPUP:16,FILEATTACHMENT:17,SOUND:18,MOVIE:19,WIDGET:20,SCREEN:21,PRINTERMARK:22,TRAPNE
2024-02-12 12:53:12 UTC	1369	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 41 63 74 69 6f 6e 45 76 65 6e 74 54 79 70 65 3d 7b 57 43 3a 22 57 69 6c 6c 43 6c 6f 73 65 22 2c 57 53 3a 22 57 69 6c 6c 53 61 76 65 22 2c 44 53 3a 22 44 69 64 53 61 76 65 22 2c 57 50 3a 22 57 69 6c 6c 50 72 69 6e 74 22 2c 44 50 3a 22 44 69 64 50 72 69 6e 74 22 7d 3b 65 2e 50 61 67 65 41 63 74 69 6f 6e 45 76 65 6e 74 54 79 70 65 3d 7b 4f 3a 22 50 61 67 65 4f 70 65 6e 22 2c 43 3a 22 50 61 67 65 43 6c 6f 73 65 22 7d 3b 63 6f 6e 73 74 20 73 3d 7b 45 52 52 4f 52 53 3a 30 2c 57 41 52 4e 49 4e 47 53 3a 31 2c 49 4e 46 4f 53 3a 35 7d 3b 65 2e 56 65 72 62 6f 73 69 74 79 4c 65 76 65 6c 3d 73 3b 65 2e 43 4d 61 70 43 6f 6d 70 72 65 73 73 69 6f 6e 54 79 70 65 3d 7b 4e 4f 4e 45 3a 30 2c 42 49 4e 41 52 59 3a 31 7d 3b 65 2e 4f 50 53 3d 7b 64 65 70 Data Ascii: DocumentActionEventType={WC:"WillClose",WS:"WillSave",DS:"DidSave",WP:"WillPrint",DP:"DidPrint"};e.PageActionEventType={O:"PageOpen",C:"PageClose"};const s={ERRORS:0,WARNINGS:1,INFOS:5};e.VerbosityLevel=s;e.CMapCompressionType={NONE:0,BINARY:1};e.OPS={dep
2024-02-12 12:53:12 UTC	1369	IN	Data Raw: 31 2c 62 65 67 69 6e 43 6f 6d 70 61 74 3a 37 32 2c 65 6e 64 43 6f 6d 70 61 74 3a 37 33 2c 70 61 69 6e 74 46 6f 72 6d 58 4f 62 6a 65 63 74 42 65 67 69 6e 3a 37 34 2c 70 61 69 6e 74 46 6f 72 6d 58 4f 62 6a 65 63 74 45 6e 64 3a 37 35 2c 62 65 67 69 6e 47 72 6f 75 70 3a 37 36 2c 65 6e 64 47 72 6f 75 70 3a 37 37 2c 62 65 67 69 6e 41 6e 6e 6f 74 61 74 69 6f 6e 3a 38 30 2c 65 6e 64 41 6e 6e 6f 74 61 74 69 6f 6e 3a 38 31 2c 70 61 69 6e 74 49 6d 61 67 65 4d 61 73 6b 58 4f 62 6a 65 63 74 3a 38 33 2c 70 61 69 6e 74 49 6d 61 67 65 4d 61 73 6b 58 4f 62 6a 65 63 74 47 72 6f 75 70 3a 38 34 2c 70 61 69 6e 74 49 6d 61 67 65 58 4f 62 6a 65 63 74 3a 38 35 2c 70 61 69 6e 74 49 6e 6c 69 6e 65 49 6d 61 67 65 58 4f 62 6a 65 63 74 3a 38 36 2c 70 61 69 6e 74 49 6e 6c 69 6e 65 49 Data Ascii: 1,beginCompat:72,endCompat:73,paintFormXObjectBegin:74,paintFormXObjectEnd:75,beginGroup:76,endGroup:77,beginAnnotation:80,endAnnotation:81,paintImageMaskXObject:83,paintImageMaskXObjectGroup:84,paintImageXObject:85,paintInlineImageXObject:86,paintInlineI
2024-02-12 12:53:12 UTC	1369	IN	Data Raw: 20 73 7d 63 6f 6e 73 74 20 69 3d 66 75 6e 63 74 69 6f 6e 20 42 61 73 65 45 78 63 65 70 74 69 6f 6e 43 6c 6f 73 75 72 65 28 29 7b 66 75 6e 63 74 69 6f 6e 20 42 61 73 65 45 78 63 65 70 74 69 6f 6e 28 74 2c 65 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 42 61 73 65 45 78 63 65 70 74 69 6f 6e 26 26 75 6e 72 65 61 63 68 61 62 6c 65 28 22 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 20 42 61 73 65 45 78 63 65 70 74 69 6f 6e 2e 22 29 3b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 74 3b 74 68 69 73 2e 6e 61 6d 65 3d 65 7d 42 61 73 65 45 78 63 65 70 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 45 72 72 6f 72 3b 42 61 73 65 45 78 63 65 70 74 69 6f 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 42 61 73 65 45 78 63 65 70 74 69 6f 6e 3b 72 Data Ascii: s}const i=function BaseExceptionClosure(){function BaseException(t,e){this.constructor===BaseException&&unreachable("Cannot initialize BaseException.");this.message=t;this.name=e}BaseException.prototype=new Error;BaseException.constructor=BaseException;r
2024-02-12 12:53:12 UTC	1369	IN	Data Raw: 65 45 6e 64 69 61 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 34 29 3b 74 5b 30 5d 3d 31 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 74 2e 62 75 66 66 65 72 2c 30 2c 31 29 5b 30 5d 7d 28 29 29 7d 73 74 61 74 69 63 20 67 65 74 20 69 73 45 76 61 6c 53 75 70 70 6f 72 74 65 64 28 29 7b 72 65 74 75 72 6e 20 73 68 61 64 6f 77 28 74 68 69 73 2c 22 69 73 45 76 61 6c 53 75 70 70 6f 72 74 65 64 22 2c 66 75 6e 63 74 69 6f 6e 20 69 73 45 76 61 6c 53 75 70 70 6f 72 74 65 64 28 29 7b 74 72 79 7b 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 22 29 3b 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 7d 73 74 61 74 69 63 20 67 65 74 20 69 73 4f 66 66 73 63 Data Ascii: eEndian(){const t=new Uint8Array(4);t[0]=1;return 1===new Uint32Array(t.buffer,0,1)[0]}())}static get isEvalSupported(){return shadow(this,"isEvalSupported",function isEvalSupported(){try{new Function("");return!0}catch(t){return!1}}())}static get isOffsc

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:12 UTC	771	OUT	GET /versions/24.1.2.0.4.0/application/quote/public/css/acceptQuote.css HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
2024-02-12 12:53:12 UTC	273	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:12 GMT Content-Type: text/css;charset=utf-8 Content-Length: 5288 Connection: close ETag: "3115774793" Last-Modified: Sat, 27 Jan 2024 04:37:14 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: lighttpd
2024-02-12 12:53:12 UTC	5288	IN	Data Raw: 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 66 66 66 3b 6d 69 6e 2d 77 69 64 74 68 3a 75 6e 73 65 74 7d 2e 68 65 61 64 65 72 2d 6f 71 61 7b 68 65 69 67 68 74 3a 36 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 30 46 31 46 32 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 65 61 64 65 72 54 65 78 74 2d 6f 71 61 7b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 37 37 37 70 78 3b 68 65 69 67 68 74 3a 34 35 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 32 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 Data Ascii: body{background:#ffffff;min-width:unset}.header-oqa{height:60px;background-color:#F0F1F2;position:fixed;width:100%}.headerText-oqa{color:white;margin-left:auto;margin-right:auto;max-width:777px;height:45px;padding-top:12px;display:flex;justify-content:spa

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:12 UTC	753	OUT	GET /versions/24.1.2.0.4.0/Locale/en_AU/LC_MESSAGES/translations.js HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
2024-02-12 12:53:12 UTC	264	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:12 GMT Content-Type: text/javascript Content-Length: 17 Connection: close ETag: "2682254159" Last-Modified: Sat, 27 Jan 2024 04:37:14 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: lighttpd
2024-02-12 12:53:12 UTC	17	IN	Data Raw: 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 3d 20 5b 5d Data Ascii: translations = []

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:12 UTC	736	OUT	GET /versions/24.1.2.0.4.0/public/js/common.js?v=4 HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
2024-02-12 12:53:12 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:12 GMT Content-Type: text/javascript Content-Length: 2282555 Connection: close ETag: "2927279946" Last-Modified: Sat, 27 Jan 2024 04:37:15 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: lighttpd
2024-02-12 12:53:12 UTC	16115	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 31 31 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 Data Ascii: /! jQuery JavaScript Library v1.11.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2014 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * *
2024-02-12 12:53:12 UTC	16384	IN	Data Raw: 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 76 26 26 28 75 3d 28 74 5b 62 5d 7c 7c 28 74 5b 62 5d 3d 7b 7d 29 29 5b 65 5d 29 26 26 75 5b 30 5d 3d 3d 3d 54 29 64 3d 75 5b 31 5d 3b 65 6c 73 65 20 66 6f 72 28 3b 28 66 3d 2b 2b 70 26 26 66 26 26 66 5b 6d 5d 7c 7c 28 64 3d 70 3d 30 29 7c 7c 68 2e 70 6f 70 28 29 29 26 26 28 28 73 3f 66 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 21 3d 3d 79 3a 31 21 3d 3d 66 2e 6e 6f 64 65 54 79 70 65 29 7c 7c 21 2b 2b 64 7c 7c 28 76 26 26 28 28 66 5b 62 5d 7c 7c 28 66 5b 62 5d 3d 7b 7d 29 29 5b 65 5d 3d 5b 54 2c 64 5d 29 2c 66 21 3d 3d 74 29 29 3b 29 3b 72 65 74 75 72 6e 28 64 2d 3d 69 29 3d 3d 3d 72 7c 7c 64 25 72 3d 3d 30 26 26 64 2f 72 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f Data Ascii: break}}else if(v&&(u=(t[b]\|\|(t[b]={}))[e])&&u[0]===T)d=u[1];else for(;(f=++p&&f&&f[m]\|\|(d=p=0)\|\|h.pop())&&((s?f.nodeName.toLowerCase()!==y:1!==f.nodeType)\|\|!++d\|\|(v&&((f[b]\|\|(f[b]={}))[e]=[T,d]),f!==t)););return(d-=i)===r\|\|d%r==0&&d/r>=0}}},PSEUDO:functio
2024-02-12 12:53:12 UTC	19	IN	Data Raw: 74 79 70 65 6f 66 28 6e 3d 65 2e 67 65 74 41 74 74 72 69 Data Ascii: typeof(n=e.getAttri
2024-02-12 12:53:13 UTC	16384	IN	Data Raw: 62 75 74 65 28 72 29 29 29 7b 74 72 79 7b 6e 3d 22 74 72 75 65 22 3d 3d 3d 6e 7c 7c 22 66 61 6c 73 65 22 21 3d 3d 6e 26 26 28 22 6e 75 6c 6c 22 3d 3d 3d 6e 3f 6e 75 6c 6c 3a 2b 6e 2b 22 22 3d 3d 3d 6e 3f 2b 6e 3a 4f 2e 74 65 73 74 28 6e 29 3f 64 2e 70 61 72 73 65 4a 53 4f 4e 28 6e 29 3a 6e 29 7d 63 61 74 63 68 28 65 29 7b 7d 64 2e 64 61 74 61 28 65 2c 74 2c 6e 29 7d 65 6c 73 65 20 6e 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 69 66 28 28 22 64 61 74 61 22 21 3d 3d 74 7c 7c 21 64 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 65 5b 74 5d 29 29 26 26 22 74 6f 4a 53 4f 4e 22 21 3d 3d 74 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 Data Ascii: bute(r))){try{n="true"===n\|\|"false"!==n&&("null"===n?null:+n+""===n?+n:O.test(n)?d.parseJSON(n):n)}catch(e){}d.data(e,t,n)}else n=void 0}return n}function P(e){var t;for(t in e)if(("data"!==t\|\|!d.isEmptyObject(e[t]))&&"toJSON"!==t)return!1;return!0}functi
2024-02-12 12:53:13 UTC	16384	IN	Data Raw: 7c 65 63 6d 61 29 73 63 72 69 70 74 2f 69 2c 70 65 3d 2f 5e 74 72 75 65 5c 2f 28 2e 2a 29 2f 2c 68 65 3d 2f 5e 5c 73 2a 3c 21 28 3f 3a 5c 5b 43 44 41 54 41 5c 5b 7c 2d 2d 29 7c 28 3f 3a 5c 5d 5c 5d 7c 2d 2d 29 3e 5c 73 2a 24 2f 67 2c 6d 65 3d 7b 6f 70 74 69 6f 6e 3a 5b 31 2c 22 3c 73 65 6c 65 63 74 20 6d 75 6c 74 69 70 6c 65 3d 27 6d 75 6c 74 69 70 6c 65 27 3e 22 2c 22 3c 2f 73 65 6c 65 63 74 3e 22 5d 2c 6c 65 67 65 6e 64 3a 5b 31 2c 22 3c 66 69 65 6c 64 73 65 74 3e 22 2c 22 3c 2f 66 69 65 6c 64 73 65 74 3e 22 5d 2c 61 72 65 61 3a 5b 31 2c 22 3c 6d 61 70 3e 22 2c 22 3c 2f 6d 61 70 3e 22 5d 2c 70 61 72 61 6d 3a 5b 31 2c 22 3c 6f 62 6a 65 63 74 3e 22 2c 22 3c 2f 6f 62 6a 65 63 74 3e 22 5d 2c 74 68 65 61 64 3a 5b 31 2c 22 3c 74 61 62 6c 65 3e 22 2c 22 3c 2f Data Ascii: \|ecma)script/i,pe=/^true\/(.)/,he=/^\s<!(?:\[CDATA\[\|--)\|(?:\]\]\|--)>\s*$/g,me={option:[1,"<select multiple='multiple'>","</select>"],legend:[1,"<fieldset>","</fieldset>"],area:[1,"<map>","</map>"],param:[1,"<object>","</object>"],thead:[1,"<table>","</
2024-02-12 12:53:13 UTC	16384	IN	Data Raw: 68 69 73 7d 7d 2c 59 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 59 65 2e 70 72 6f 74 6f 74 79 70 65 2c 59 65 2e 70 72 6f 70 48 6f 6f 6b 73 3d 7b 5f 64 65 66 61 75 6c 74 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 2e 65 6c 65 6d 5b 65 2e 70 72 6f 70 5d 7c 7c 65 2e 65 6c 65 6d 2e 73 74 79 6c 65 26 26 6e 75 6c 6c 21 3d 65 2e 65 6c 65 6d 2e 73 74 79 6c 65 5b 65 2e 70 72 6f 70 5d 3f 28 74 3d 64 2e 63 73 73 28 65 2e 65 6c 65 6d 2c 65 2e 70 72 6f 70 2c 22 22 29 29 26 26 22 61 75 74 6f 22 21 3d 3d 74 3f 74 3a 30 3a 65 2e 65 6c 65 6d 5b 65 2e 70 72 6f 70 5d 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 2e 66 78 2e 73 74 65 70 5b 65 2e 70 72 6f 70 Data Ascii: his}},Ye.prototype.init.prototype=Ye.prototype,Ye.propHooks={_default:{get:function(e){var t;return null==e.elem[e.prop]\|\|e.elem.style&&null!=e.elem.style[e.prop]?(t=d.css(e.elem,e.prop,""))&&"auto"!==t?t:0:e.elem[e.prop]},set:function(e){d.fx.step[e.prop
2024-02-12 12:53:13 UTC	16384	IN	Data Raw: 20 69 5b 73 5d 3d 21 30 2c 64 2e 65 61 63 68 28 65 5b 73 5d 7c 7c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 76 61 72 20 75 3d 73 28 74 2c 6e 2c 72 29 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 75 7c 7c 6f 7c 7c 69 5b 75 5d 3f 6f 3f 21 28 6c 3d 75 29 3a 76 6f 69 64 20 30 3a 28 74 2e 64 61 74 61 54 79 70 65 73 2e 75 6e 73 68 69 66 74 28 75 29 2c 61 28 75 29 2c 21 31 29 7d 29 29 2c 6c 7d 72 65 74 75 72 6e 20 61 28 74 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 7c 7c 21 69 5b 22 2a 22 5d 26 26 61 28 22 2a 22 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 3d 64 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 66 6c 61 74 4f 70 74 69 6f 6e 73 7c 7c 7b 7d 3b 66 6f 72 28 72 20 69 6e 20 74 29 76 Data Ascii: i[s]=!0,d.each(e[s]\|\|[],(function(e,s){var u=s(t,n,r);return"string"!=typeof u\|\|o\|\|i[u]?o?!(l=u):void 0:(t.dataTypes.unshift(u),a(u),!1)})),l}return a(t.dataTypes[0])\|\|!i[""]&&a("")}function Bt(e,t){var n,r,i=d.ajaxSettings.flatOptions\|\|{};for(r in t)v
2024-02-12 12:53:13 UTC	16384	IN	Data Raw: 72 72 65 6e 74 2d 64 61 79 22 2c 74 68 69 73 2e 5f 64 61 79 4f 76 65 72 43 6c 61 73 73 3d 22 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 64 61 79 73 2d 63 65 6c 6c 2d 6f 76 65 72 22 2c 74 68 69 73 2e 72 65 67 69 6f 6e 61 6c 3d 5b 5d 2c 74 68 69 73 2e 72 65 67 69 6f 6e 61 6c 5b 22 22 5d 3d 7b 63 6c 6f 73 65 54 65 78 74 3a 22 44 6f 6e 65 22 2c 70 72 65 76 54 65 78 74 3a 22 50 72 65 76 22 2c 6e 65 78 74 54 65 78 74 3a 22 4e 65 78 74 22 2c 63 75 72 72 65 6e 74 54 65 78 74 3a 22 54 6f 64 61 79 22 2c 6d 6f 6e 74 68 4e 61 6d 65 73 3a 5b 22 4a 61 6e 75 61 72 79 22 2c 22 46 65 62 72 75 61 72 79 22 2c 22 4d 61 72 63 68 22 2c 22 41 70 72 69 6c 22 2c 22 4d 61 79 22 2c 22 4a 75 6e 65 22 2c 22 4a 75 6c 79 22 2c 22 41 75 67 75 73 74 22 2c 22 53 65 70 74 65 6d 62 65 72 22 Data Ascii: rrent-day",this._dayOverClass="ui-datepicker-days-cell-over",this.regional=[],this.regional[""]={closeText:"Done",prevText:"Prev",nextText:"Next",currentText:"Today",monthNames:["January","February","March","April","May","June","July","August","September"
2024-02-12 12:53:13 UTC	16384	IN	Data Raw: 6f 6c 6c 48 65 69 67 68 74 3f 74 2e 70 6f 73 69 74 69 6f 6e 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 3a 30 2c 68 65 69 67 68 74 3a 6e 3f 74 2e 70 6f 73 69 74 69 6f 6e 2e 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 28 29 3a 30 7d 7d 2c 67 65 74 57 69 74 68 69 6e 49 6e 66 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 74 28 65 7c 7c 77 69 6e 64 6f 77 29 2c 73 3d 74 2e 69 73 57 69 6e 64 6f 77 28 69 5b 30 5d 29 2c 6e 3d 21 21 69 5b 30 5d 26 26 39 3d 3d 3d 69 5b 30 5d 2e 6e 6f 64 65 54 79 70 65 3b 72 65 74 75 72 6e 7b 65 6c 65 6d 65 6e 74 3a 69 2c 69 73 57 69 6e 64 6f 77 3a 73 2c 69 73 44 6f 63 75 6d 65 6e 74 3a 6e 2c 6f 66 66 73 65 74 3a 69 2e 6f 66 66 73 65 74 28 29 7c 7c 7b 6c 65 66 74 3a 30 2c 74 6f 70 3a 30 7d 2c 73 63 72 6f 6c 6c 4c Data Ascii: ollHeight?t.position.scrollbarWidth():0,height:n?t.position.scrollbarWidth():0}},getWithinInfo:function(e){var i=t(e\|\|window),s=t.isWindow(i[0]),n=!!i[0]&&9===i[0].nodeType;return{element:i,isWindow:s,isDocument:n,offset:i.offset()\|\|{left:0,top:0},scrollL
2024-02-12 12:53:13 UTC	16384	IN	Data Raw: 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 2e 6b 65 79 43 6f 64 65 29 2c 72 3d 52 65 67 45 78 70 28 22 5e 22 2b 69 28 6f 29 2c 22 69 22 29 2c 73 3d 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 2e 66 69 6e 64 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 69 74 65 6d 73 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 74 65 73 74 28 74 28 74 68 69 73 29 2e 74 65 78 74 28 29 29 7d 29 29 29 2c 73 2e 6c 65 6e 67 74 68 3f 28 74 68 69 73 2e 66 6f 63 75 73 28 65 2c 73 29 2c 73 2e 6c 65 6e 67 74 68 3e 31 3f 28 74 68 69 73 2e 70 72 65 76 69 6f 75 73 46 69 6c 74 65 72 3d 6f 2c 74 68 69 73 2e 66 69 6c 74 65 72 54 69 6d 65 72 3d 74 68 69 73 2e 5f 64 65 6c 61 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 Data Ascii: ring.fromCharCode(e.keyCode),r=RegExp("^"+i(o),"i"),s=this.activeMenu.find(this.options.items).filter((function(){return r.test(t(this).text())}))),s.length?(this.focus(e,s),s.length>1?(this.previousFilter=o,this.filterTimer=this._delay((function(){delete

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:14 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-12 12:53:15 UTC	532	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-MSEdge-Ref: Ref A: 5C3855A5C21A412391C842482B1CC426 Ref B: CHGEDGE1820 Ref C: 2024-02-09T21:05:33Z Cache-Control: public, max-age=29551 Date: Mon, 12 Feb 2024 12:53:14 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:15 UTC	396	OUT	GET /ajax/libs/pdf.js/3.4.120/pdf.worker.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-12 12:53:15 UTC	949	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:15 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63fc24c0-46f41" Last-Modified: Mon, 27 Feb 2023 03:34:24 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Sat, 01 Feb 2025 12:53:15 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X98zWBs%2F6KGzvJGO7IBSfMNoSiy1Zd%2B5I789Mg8m2An5MWrwN7bAe8E1mhVWa%2FiWDu30s7ZBJYhtM8iCN8z%2B9QDZIbLU9S7LddiXSZ3QwMBeYIsKRWRok5OM9BnL8XmQDHVNu5UJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8544f9330b5c1d7a-ATL alt-svc: h3=":443"; ma=86400
2024-02-12 12:53:15 UTC	420	IN	Data Raw: 37 62 66 32 0d 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 73 74 61 72 74 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 73 20 74 68 65 20 65 6e 74 69 72 65 20 6c 69 63 65 6e 73 65 20 6e 6f 74 69 63 65 20 66 6f 72 20 74 68 65 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 63 6f 64 65 20 69 6e 20 74 68 69 73 20 70 61 67 65 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 4d 6f 7a 69 6c 6c 61 20 46 6f 75 6e 64 61 74 69 6f 6e 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 Data Ascii: 7bf2/** * @licstart The following is the entire license notice for the * JavaScript code in this page * * Copyright 2023 Mozilla Foundation * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in
2024-02-12 12:53:15 UTC	1369	IN	Data Raw: 6f 72 20 61 67 72 65 65 64 20 74 6f 20 69 6e 20 77 72 69 74 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 0a 20 2a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 6f 6e 20 61 6e 20 22 41 53 20 49 53 22 20 42 41 53 49 53 2c 0a 20 2a 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 0a 20 2a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 0a 20 2a 20 6c 69 Data Ascii: or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * li
2024-02-12 12:53:15 UTC	1369	IN	Data Raw: 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7d 7d 29 29 3b 65 2e 6f 6e 28 22 63 6f 6e 66 69 67 75 72 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 72 2e 73 65 74 56 65 72 62 6f 73 69 74 79 4c 65 76 65 6c 29 28 65 2e 76 65 72 62 6f 73 69 74 79 29 7d 29 29 3b 65 2e 6f 6e 28 22 47 65 74 44 6f 63 52 65 71 75 65 73 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 57 6f 72 6b 65 72 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 48 61 6e 64 6c 65 72 28 65 2c 74 29 7d 29 29 7d 73 74 61 74 69 63 20 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 48 61 6e 64 6c 65 72 28 65 2c 74 29 7b 6c 65 74 20 61 2c 64 3d 21 31 2c 66 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 67 3d 6e 65 77 20 53 65 74 2c 70 3d 28 Data Ascii: nceof Uint8Array)}}));e.on("configure",(function(e){(0,r.setVerbosityLevel)(e.verbosity)}));e.on("GetDocRequest",(function(e){return WorkerMessageHandler.createDocumentHandler(e,t)}))}static createDocumentHandler(e,t){let a,d=!1,f=null;const g=new Set,p=(
2024-02-12 12:53:15 UTC	1369	IN	Data Raw: 75 72 65 44 6f 63 28 22 69 73 50 75 72 65 58 66 61 22 29 3b 69 66 28 74 29 7b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 57 6f 72 6b 65 72 54 61 73 6b 28 22 6c 6f 61 64 58 66 61 46 6f 6e 74 73 22 29 3b 73 74 61 72 74 57 6f 72 6b 65 72 54 61 73 6b 28 65 29 3b 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 61 2e 6c 6f 61 64 58 66 61 46 6f 6e 74 73 28 78 2c 65 29 2e 63 61 74 63 68 28 28 65 3d 3e 7b 7d 29 29 2e 74 68 65 6e 28 28 28 29 3d 3e 66 69 6e 69 73 68 57 6f 72 6b 65 72 54 61 73 6b 28 65 29 29 29 2c 61 2e 6c 6f 61 64 58 66 61 49 6d 61 67 65 73 28 29 5d 29 7d 63 6f 6e 73 74 5b 72 2c 6e 5d 3d 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 61 2e 65 6e 73 75 72 65 44 6f 63 28 22 6e 75 6d 50 61 67 65 73 22 29 2c 61 2e 65 6e 73 75 72 65 44 6f 63 Data Ascii: ureDoc("isPureXfa");if(t){const e=new WorkerTask("loadXfaFonts");startWorkerTask(e);await Promise.all([a.loadXfaFonts(x,e).catch((e=>{})).then((()=>finishWorkerTask(e))),a.loadXfaImages()])}const[r,n]=await Promise.all([a.ensureDoc("numPages"),a.ensureDoc
2024-02-12 12:53:15 UTC	1369	IN	HTTP length is different from actual");try{d.source=e;p=new s.LocalPdfManager(d);g.resolve(p)}catch(e){g.reject(e)}y=[]}();f=null;return}S+=e.byteLength;w.isStreamingSupported\|\|x.send("DocProgress",{loaded:S,total:Math.max(S,w.contentLength\|\|0)});p?p.sendProgressiveData(e):y.push(e);w.read().then(readChunk,t)}catch(e){t(e)}};w.read().then(readChunk,t)})).catch((function(e){g.reject(e);f=null}));f=function(e){b.cancelAllRequests(e)};return g.promise}x.on("GetPage",(function(e){return a.getPage(e.pageIndex).then((function(e){return Promise.all([a.ensure(e,"rotate"),a.ensure(e,"ref"),a.ensure(e,"userUnit"),a.ensure(e,"view")]).then((function([e,t,a,r]){return{rotate:e,ref:t,userUnit:a,view:r}}))}))}));x.on("GetPageIndex",(function(e){const t=i.Ref.get(e.num,e.gen);return a.ensureCatalog("getPageIndex",[t])}));x.on("GetDestinations",(function(e){return a.ensureCatalog("destinations")}));x.on("GetDestination",(function(e){return a.ensureCatalog("getDestination",[e.id])}));x.on("GetPageLabels",(function(e){return a.ensureCatalog("pageLabels")}));x.on("GetPageLayout",(function(e){return a.ensureCatalog("pageLayout")}));x.on("GetPageMode",(function(e){return a.ensureCatalog("pageMode")}));x.on("GetViewerPreferences",(function(e){return a.ensureCatalog("viewerPreferences")}));x.on("GetOpenAction",(function(e){return a.ensureCatalog("openAction")}));x.on("G
2024-02-12 12:53:15 UTC	1369	IN	Data Raw: 65 74 41 74 74 61 63 68 6d 65 6e 74 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 65 6e 73 75 72 65 43 61 74 61 6c 6f 67 28 22 61 74 74 61 63 68 6d 65 6e 74 73 22 29 7d 29 29 3b 78 2e 6f 6e 28 22 47 65 74 4a 61 76 61 53 63 72 69 70 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 65 6e 73 75 72 65 43 61 74 61 6c 6f 67 28 22 6a 61 76 61 53 63 72 69 70 74 22 29 7d 29 29 3b 78 2e 6f 6e 28 22 47 65 74 44 6f 63 4a 53 41 63 74 69 6f 6e 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 65 6e 73 75 72 65 43 61 74 61 6c 6f 67 28 22 6a 73 41 63 74 69 6f 6e 73 22 29 7d 29 29 3b 78 2e 6f 6e 28 22 47 65 74 50 61 67 65 4a 53 41 63 74 69 6f 6e 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 7b 70 61 Data Ascii: etAttachments",(function(e){return a.ensureCatalog("attachments")}));x.on("GetJavaScript",(function(e){return a.ensureCatalog("javaScript")}));x.on("GetDocJSActions",(function(e){return a.ensureCatalog("jsActions")}));x.on("GetPageJSActions",(function({pa
2024-02-12 12:53:15 UTC	1369	IN	Data Raw: 74 69 6f 6e 4f 72 64 65 72 49 64 73 22 29 7d 29 29 3b 78 2e 6f 6e 28 22 53 61 76 65 44 6f 63 75 6d 65 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 7b 69 73 50 75 72 65 58 66 61 3a 65 2c 6e 75 6d 50 61 67 65 73 3a 74 2c 61 6e 6e 6f 74 61 74 69 6f 6e 53 74 6f 72 61 67 65 3a 73 2c 66 69 6c 65 6e 61 6d 65 3a 6f 7d 29 7b 63 6f 6e 73 74 20 6c 3d 5b 61 2e 72 65 71 75 65 73 74 4c 6f 61 64 65 64 53 74 72 65 61 6d 28 29 2c 61 2e 65 6e 73 75 72 65 43 61 74 61 6c 6f 67 28 22 61 63 72 6f 46 6f 72 6d 22 29 2c 61 2e 65 6e 73 75 72 65 43 61 74 61 6c 6f 67 28 22 61 63 72 6f 46 6f 72 6d 52 65 66 22 29 2c 61 2e 65 6e 73 75 72 65 44 6f 63 28 22 78 72 65 66 22 29 2c 61 2e 65 6e 73 75 72 65 44 6f 63 28 22 73 74 61 72 74 58 52 65 66 22 29 5d 2c 68 3d 65 3f 6e 75 6c 6c 3a 28 30 2c Data Ascii: tionOrderIds")}));x.on("SaveDocument",(function({isPureXfa:e,numPages:t,annotationStorage:s,filename:o}){const l=[a.requestLoadedStream(),a.ensureCatalog("acroForm"),a.ensureCatalog("acroFormRef"),a.ensureDoc("xref"),a.ensureDoc("startXRef")],h=e?null:(0,
2024-02-12 12:53:15 UTC	1369	IN	Data Raw: 73 2e 74 72 61 69 6c 65 72 2e 67 65 74 52 61 77 28 22 45 6e 63 72 79 70 74 22 29 7c 7c 6e 75 6c 6c 2c 6e 65 77 52 65 66 3a 73 2e 67 65 74 4e 65 77 54 65 6d 70 6f 72 61 72 79 52 65 66 28 29 2c 69 6e 66 6f 52 65 66 3a 73 2e 74 72 61 69 6c 65 72 2e 67 65 74 52 61 77 28 22 49 6e 66 6f 22 29 7c 7c 6e 75 6c 6c 2c 69 6e 66 6f 3a 65 2c 66 69 6c 65 49 64 73 3a 73 2e 74 72 61 69 6c 65 72 2e 67 65 74 28 22 49 44 22 29 7c 7c 6e 75 6c 6c 2c 73 74 61 72 74 58 52 65 66 3a 6c 2c 66 69 6c 65 6e 61 6d 65 3a 6f 7d 7d 74 72 79 7b 72 65 74 75 72 6e 28 30 2c 63 2e 69 6e 63 72 65 6d 65 6e 74 61 6c 55 70 64 61 74 65 29 28 7b 6f 72 69 67 69 6e 61 6c 44 61 74 61 3a 74 2e 62 79 74 65 73 2c 78 72 65 66 49 6e 66 6f 3a 62 2c 6e 65 77 52 65 66 73 3a 75 2c 78 72 65 66 3a 73 2c 68 61 73 Data Ascii: s.trailer.getRaw("Encrypt")\|\|null,newRef:s.getNewTemporaryRef(),infoRef:s.trailer.getRaw("Info")\|\|null,info:e,fileIds:s.trailer.get("ID")\|\|null,startXRef:l,filename:o}}try{return(0,c.incrementalUpdate)({originalData:t.bytes,xrefInfo:b,newRefs:u,xref:s,has
2024-02-12 12:53:15 UTC	1369	IN	Data Raw: 29 3b 74 2e 63 6c 6f 73 65 28 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 69 6e 69 73 68 57 6f 72 6b 65 72 54 61 73 6b 28 69 29 3b 69 2e 74 65 72 6d 69 6e 61 74 65 64 7c 7c 74 2e 65 72 72 6f 72 28 65 29 7d 29 29 7d 29 29 7d 29 29 3b 78 2e 6f 6e 28 22 47 65 74 53 74 72 75 63 74 54 72 65 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 50 61 67 65 28 65 2e 70 61 67 65 49 6e 64 65 78 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 65 6e 73 75 72 65 28 65 2c 22 67 65 74 53 74 72 75 63 74 54 72 65 65 22 29 7d 29 29 7d 29 29 3b 78 2e 6f 6e 28 22 46 6f 6e 74 46 61 6c 6c 62 61 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 66 6f 6e 74 46 61 6c 6c 62 Data Ascii: );t.close()}),(function(e){finishWorkerTask(i);i.terminated\|\|t.error(e)}))}))}));x.on("GetStructTree",(function(e){return a.getPage(e.pageIndex).then((function(e){return a.ensure(e,"getStructTree")}))}));x.on("FontFallback",(function(e){return a.fontFallb
2024-02-12 12:53:15 UTC	1369	IN	Data Raw: 72 6f 72 45 78 63 65 70 74 69 6f 6e 28 65 2e 6d 65 73 73 61 67 65 2c 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 70 64 66 4d 61 6e 61 67 65 72 52 65 61 64 79 28 29 7b 65 6e 73 75 72 65 4e 6f 74 54 65 72 6d 69 6e 61 74 65 64 28 29 3b 6c 6f 61 64 44 6f 63 75 6d 65 6e 74 28 21 31 29 2e 74 68 65 6e 28 6f 6e 53 75 63 63 65 73 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 6e 73 75 72 65 4e 6f 74 54 65 72 6d 69 6e 61 74 65 64 28 29 3b 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 2e 58 52 65 66 50 61 72 73 65 45 78 63 65 70 74 69 6f 6e 3f 61 2e 72 65 71 75 65 73 74 4c 6f 61 64 65 64 53 74 72 65 61 6d 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 6e 73 75 72 65 4e 6f 74 54 65 72 6d 69 6e 61 74 65 64 28 29 3b 6c 6f 61 64 Data Ascii: rorException(e.message,e.toString()))}function pdfManagerReady(){ensureNotTerminated();loadDocument(!1).then(onSuccess,(function(e){ensureNotTerminated();e instanceof n.XRefParseException?a.requestLoadedStream().then((function(){ensureNotTerminated();load
2024-02-12 12:53:15 UTC	1369	IN	Data Raw: 6e 3d 74 2e 49 6d 61 67 65 4b 69 6e 64 3d 74 2e 49 44 45 4e 54 49 54 59 5f 4d 41 54 52 49 58 3d 74 2e 46 6f 72 6d 61 74 45 72 72 6f 72 3d 74 2e 46 65 61 74 75 72 65 54 65 73 74 3d 74 2e 46 4f 4e 54 5f 49 44 45 4e 54 49 54 59 5f 4d 41 54 52 49 58 3d 74 2e 44 6f 63 75 6d 65 6e 74 41 63 74 69 6f 6e 45 76 65 6e 74 54 79 70 65 3d 74 2e 43 4d 61 70 43 6f 6d 70 72 65 73 73 69 6f 6e 54 79 70 65 3d 74 2e 42 61 73 65 45 78 63 65 70 74 69 6f 6e 3d 74 2e 42 41 53 45 4c 49 4e 45 5f 46 41 43 54 4f 52 3d 74 2e 41 6e 6e 6f 74 61 74 69 6f 6e 54 79 70 65 3d 74 2e 41 6e 6e 6f 74 61 74 69 6f 6e 53 74 61 74 65 4d 6f 64 65 6c 54 79 70 65 3d 74 2e 41 6e 6e 6f 74 61 74 69 6f 6e 52 65 76 69 65 77 53 74 61 74 65 3d 74 2e 41 6e 6e 6f 74 61 74 69 6f 6e 52 65 70 6c 79 54 79 70 65 3d Data Ascii: n=t.ImageKind=t.IDENTITY_MATRIX=t.FormatError=t.FeatureTest=t.FONT_IDENTITY_MATRIX=t.DocumentActionEventType=t.CMapCompressionType=t.BaseException=t.BASELINE_FACTOR=t.AnnotationType=t.AnnotationStateModelType=t.AnnotationReviewState=t.AnnotationReplyType=

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:15 UTC	359	OUT	POST /tools/csp-report/cspReport.php HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive Content-Length: 1676 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-12 12:53:15 UTC	1676	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 62 6c 6f 63 6b 65 64 55 52 4c 22 3a 22 62 6c 6f 62 22 2c 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 3a 33 34 32 34 33 2c 22 64 69 73 70 6f 73 69 74 69 6f 6e 22 3a 22 72 65 70 6f 72 74 22 2c 22 64 6f 63 75 6d 65 6e 74 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 62 73 6c 74 64 2e 73 69 6d 70 72 6f 73 75 69 74 65 2e 63 6f 6d 2f 71 75 6f 74 65 2f 3f 66 4d 6e 75 7a 51 64 32 33 62 43 33 30 6d 53 5a 64 59 51 46 66 30 77 52 39 68 4a 34 72 42 43 70 2f 7a 48 72 30 2b 57 47 63 55 58 39 66 67 73 33 4c 66 54 55 39 67 76 4b 76 6f 4c 2f 64 58 76 67 45 6f 58 52 51 35 65 4e 51 31 7a 66 66 61 43 61 48 67 50 39 6f 56 6a 61 50 73 41 6c 61 34 63 6b 74 72 7a 4d 62 72 63 3d 22 2c 22 65 66 66 65 63 74 69 76 65 44 69 72 65 Data Ascii: [{"age":0,"body":{"blockedURL":"blob","columnNumber":34243,"disposition":"report","documentURL":"https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=","effectiveDire
2024-02-12 12:53:15 UTC	152	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:15 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: lighttpd

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:15 UTC	711	OUT	GET /versions/24.1.2.0.4.0/public/css/fonts/v12-icons.woff HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dbsltd.simprosuite.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://dbsltd.simprosuite.com/versions/24.1.2.0.4.0/public/css/common.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
2024-02-12 12:53:15 UTC	261	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:15 GMT Content-Type: font/woff Content-Length: 16560 Connection: close ETag: "3284790090" Last-Modified: Sat, 27 Jan 2024 04:37:15 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: lighttpd
2024-02-12 12:53:15 UTC	16123	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 40 b0 00 0b 00 00 00 00 6d d8 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 53 55 42 00 00 01 08 00 00 00 3b 00 00 00 54 20 8b 25 7a 4f 53 2f 32 00 00 01 44 00 00 00 42 00 00 00 56 36 35 6b 57 63 6d 61 70 00 00 01 88 00 00 03 80 00 00 08 ce df 44 0f ba 67 6c 79 66 00 00 05 08 00 00 35 14 00 00 58 34 7f f4 be 79 68 65 61 64 00 00 3a 1c 00 00 00 33 00 00 00 36 39 b5 b4 d4 68 68 65 61 00 00 3a 50 00 00 00 1f 00 00 00 24 1a cf 17 a6 68 6d 74 78 00 00 3a 70 00 00 00 67 00 00 01 fc fa 1e ff ce 6c 6f 63 61 00 00 3a d8 00 00 01 00 00 00 01 00 33 e7 49 20 6d 61 78 70 00 00 3b d8 00 00 00 1f 00 00 00 20 01 a6 03 52 6e 61 6d 65 00 00 3b f8 00 00 01 30 00 00 02 22 de ff 0c 82 70 6f 73 74 00 00 3d 28 00 00 03 Data Ascii: wOFF@mGSUB;T %zOS/2DBV65kWcmapDglyf5X4yhead:369hhea:P$hmtx:pgloca:3I maxp; Rname;0"post=(
2024-02-12 12:53:15 UTC	437	IN	Data Raw: cd 3a f1 41 b8 b4 12 75 4d 6e d8 54 d6 50 52 0b a5 33 65 8e ac 92 3c 4b ad 7c 48 4a a7 8a 49 a0 13 be 68 b5 75 09 17 b1 49 34 85 9d fb e0 d4 8a 42 e5 6c 2c ab 54 05 a1 95 1c f3 3f e4 b4 e2 5a 0b ab 8b ac ca fd 61 14 8e a6 4b 8e c8 e5 b6 21 93 6e f6 13 11 82 90 55 4d 3c 18 55 8b 92 f8 3d b3 9a 37 62 dd a6 7c 07 3c f5 24 a3 a3 f3 a4 e2 b6 b8 1b 53 ec 0b 53 6a ca 0b 1b 17 bc 74 dc ed 5d 93 6a 99 9d 2a b3 b4 b9 54 4e ea 6e a4 5c 7f c4 f4 15 5c 2a e5 1a bc 8c 4c ac db 36 47 8b a8 db 95 29 e2 cb 23 32 5a b8 92 f6 1a e1 44 e9 44 53 e5 07 91 d9 59 ae 77 cf 33 92 af 93 db 3e 4f b4 2f ee 9c 87 1d 26 66 d3 d1 98 d9 97 94 07 51 a6 52 18 49 7a cb 13 8d 45 51 5c ee 06 91 71 4f 2c cc 48 89 67 4d 27 c1 11 cd 64 45 47 8e 49 6e 69 9f f4 41 6c 52 2d a2 91 d5 ae 57 a5 11 81 Data Ascii: :AuMnTPR3e<K\|HJIhuI4Bl,T?ZaK!nUM<U=7b\|<$SSjt]jTNn\\L6G)#2ZDDSYw3>O/&fQRIzEQ\qO,HgM'dEGIniAlR-W

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:15 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-12 12:53:15 UTC	538	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0sVnPYwAAAADGzEIVjwdQRqjbE+0BwJHyTU5aMjIxMDYwNjE0MDA5AGNlZmMyNTgzLWE5YjItNDRhNy05NzU1LWI3NmQxN2UwNWY3Zg== Cache-Control: public, max-age=25368 Date: Mon, 12 Feb 2024 12:53:15 GMT Content-Length: 55 Connection: close X-CID: 2
2024-02-12 12:53:15 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:16 UTC	762	OUT	GET /favicon.ico HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
2024-02-12 12:53:16 UTC	276	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:16 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 23542 Connection: close ETag: "2262947572" Last-Modified: Sun, 11 Feb 2024 01:06:42 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: lighttpd
2024-02-12 12:53:16 UTC	8692	IN	Data Raw: 00 00 01 00 06 00 40 40 00 00 01 00 20 00 28 42 00 00 66 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 42 00 00 10 10 00 00 01 00 20 00 68 04 00 00 36 53 00 00 0c 0c 00 00 01 00 20 00 98 02 00 00 9e 57 00 00 08 08 00 00 01 00 20 00 48 01 00 00 36 5a 00 00 04 04 00 00 01 00 20 00 78 00 00 00 7e 5b 00 00 28 00 00 00 40 00 00 00 80 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 67 22 03 00 87 2f 06 02 87 2f 06 19 87 2f 06 4e 87 2f 06 7e 87 2f 06 a6 87 Data Ascii: @@ (Bf B h6S W H6Z x~[(@ g"///N/~/
2024-02-12 12:53:16 UTC	14850	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 87 2f 06 03 87 2f 06 75 87 2f 06 fe 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 f5 87 2f 06 e5 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 fe 87 2f 06 cc 87 2f 06 7a 87 2f 06 2d 87 2f 06 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: //u///////////////////////////z/-/

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:17 UTC	718	OUT	GET /quote/?action=renderOnlineQuote HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
2024-02-12 12:53:21 UTC	1617	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:21 GMT Content-Type: application/pdf Content-Length: 283063 Connection: close Report-To: {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://dbsltd.simprosuite.com/tools/csp-report/cspReport.php"}],"include_subdomains":true} Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' data: wss: blob: .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .googleapis.com .google.com .googletagmanager.com .simprogroup.com .simprocloud.net .simprocloud.com .locationiq.com https://data.resources.simprogroup.com .google-analytics.com https://lookup.simprocloud.com .simprosuite.com; img-src * data: blob: cid: file:; font-src * data:; frame-src ; script-src 'self' 'unsafe-eval' 'unsafe-inline' .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .simprogroup.com .simprocloud.net .simprocloud.com .google.com .googletagmanager.com .cloudfront.net .cloudflare.com https://data.resources.simprogroup.com .pendo.io .google-analytics.com .simprosuite.com; report-uri /tools/csp-report/cspReport.php; report-to csp-endpoint Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m; Domain=dbsltd.simprosuite.com; Path=/; SameSite=None; httpOnly; Secure; Content-Disposition: attachment;filename="Quote_No_28084.pdf" Accept-Ranges: bytes Server: lighttpd
2024-02-12 12:53:21 UTC	14767	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0d 25 cd ca d2 a9 0d 31 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 4d 65 74 61 64 61 74 61 20 31 30 34 20 30 20 52 0a 2f 50 61 67 65 4c 61 79 6f 75 74 20 2f 4f 6e 65 43 6f 6c 75 6d 6e 0a 2f 50 61 67 65 4d 6f 64 65 20 2f 55 73 65 4e 6f 6e 65 0a 2f 50 61 67 65 73 20 32 20 30 20 52 0a 2f 54 79 70 65 20 2f 43 61 74 61 6c 6f 67 0a 3e 3e 0a 65 6e 64 6f 62 6a 0a 32 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 43 6f 75 6e 74 20 39 0a 2f 4b 69 64 73 20 5b 20 34 20 30 20 52 20 33 30 20 30 20 52 20 34 31 20 30 20 52 20 35 38 20 30 20 52 20 36 35 20 30 20 52 20 37 32 20 30 20 52 20 37 39 20 30 20 52 20 38 36 20 30 20 52 20 39 37 20 30 20 52 20 5d 0a 2f 54 79 70 65 20 2f 50 61 67 65 73 0a 3e 3e 0a 65 6e 64 6f 62 6a 0a 33 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 43 72 65 61 Data Ascii: %PDF-1.7%1 0 obj<</Metadata 104 0 R/PageLayout /OneColumn/PageMode /UseNone/Pages 2 0 R/Type /Catalog>>endobj2 0 obj<</Count 9/Kids [ 4 0 R 30 0 R 41 0 R 58 0 R 65 0 R 72 0 R 79 0 R 86 0 R 97 0 R ]/Type /Pages>>endobj3 0 obj<</Crea
2024-02-12 12:53:21 UTC	1533	IN	Data Raw: a9 56 5f 5a 83 3e f4 99 26 a9 c6 e6 09 d8 b0 d2 2f ad 01 07 53 55 49 e6 ac b3 fc a0 d4 b5 6d 86 9d f7 19 72 e1 14 92 40 00 64 93 d2 be 37 f8 e3 04 5f 10 7c 7b 71 aa cd a8 cf f6 0b 75 16 d6 51 46 a0 05 8d 4f 2d 93 9f bc c4 b7 4e e0 76 af 7a f8 ed e2 f1 a5 68 bf d8 56 52 ff 00 a7 5f a1 12 90 79 8a 1e 87 f1 6e 9f 4c fb 57 cf 72 4c a8 2b 82 a6 7d 8a cb 2b df 05 3e 59 d9 a6 d5 af af 4d 53 b1 fa f7 01 70 76 1b 15 86 78 ec c2 1c ca 5f 02 77 d9 6f 2e 9b ec 8e 62 d3 c1 3a 0d 9c 81 cc 12 ce c3 90 d2 c8 71 f9 0c 54 f7 a1 63 c5 b5 b0 58 a2 c6 36 a0 c0 fc 71 d6 af dc 5c 49 33 88 e3 ea 78 00 56 7d c5 ac c6 eb ca 8f e7 39 00 11 dc d7 9f 3c d7 1f 8f 9f fb 45 69 4b d5 bb 7d da 2f c0 fd 11 e5 98 0c 24 7f d9 a8 c6 3e 69 2b fd fb fe 27 a4 fe cf 7a 37 f6 87 8d d6 f0 a6 e8 6c Data Ascii: V_Z>&/SUImr@d7_\|{quQFO-NvzhVR_ynLWrL+}+>YMSpvx_wo.b:qTcX6q\I3xV}9<EiK}/$>i+'z7l
2024-02-12 12:53:21 UTC	16384	IN	Data Raw: 47 87 64 d7 db c3 f1 eb ba 73 ea cb 9c d9 8b 95 33 0c 0c 91 b7 39 ce 39 c7 5c 73 5b 47 13 8a 84 52 52 69 7c c9 e5 8b 3c d3 fe 19 b3 e1 8f fc fa 6a 9f f8 1c d4 9f f0 cd bf 0c 3f e7 d3 54 ff 00 c0 e6 af 42 ff 00 84 e3 c1 e6 2b 89 7f e1 28 d1 fc bb 68 c4 b3 b7 db 13 11 a1 6d 80 b1 cf 19 61 81 ea 6b 2f c4 1f 13 fc 1d a4 68 d6 1a bf f6 cd 9d e5 9d f5 f4 76 51 c9 6f 73 1b 05 66 60 19 9b 2c 30 a8 18 33 77 03 9c 56 8b 13 8c 6e ca 52 fc 43 92 1d 8e 47 fe 19 b7 e1 87 fc fa 6a 9f f8 1c d4 7f c3 36 fc 31 ff 00 9f 4d 57 ff 00 03 9a bd 02 d3 c5 fa 59 8b 59 bb d4 2e f4 eb 1d 3f 4c b8 58 8d db 5f c6 c8 ea d1 a3 86 6c 1f dd 93 bc 00 ad c9 e0 8e a2 ac 45 e2 ff 00 0b cb a4 45 ab c7 e2 2d 29 b4 f9 65 f2 12 e7 ed 49 e5 99 30 4e cd d9 c6 ec 02 71 d7 8a 9f ad e2 ff 00 99 87 24 Data Ascii: Gds399\s[GRRi\|<j?TB+(hmak/hvQosf`,03wVnRCGj61MWYY.?LX_lEE-)eI0Nq$
2024-02-12 12:53:21 UTC	1514	IN	Data Raw: fb 79 72 39 1a 88 86 93 e7 5b 07 0e e0 d4 5c 6a ed 0d c0 e1 c4 c2 04 49 1c c6 35 a8 80 3c 7f b0 f8 f2 7c ab 84 a5 36 72 8b 61 d5 47 5f 82 f2 ed db ad f9 25 fa 42 30 10 0e e3 5d 28 40 1e 6e ad ee df 23 1f ee 57 50 94 3c 6c 28 e1 72 5c ee ab 9d b4 39 13 9d ec e8 a4 86 5d 7d c7 e9 4e 18 34 c0 b7 e2 8e 8e 7a 90 b0 93 30 5c d5 f5 27 81 3d 33 7a 91 3a b0 2c 86 4d c1 8d 05 73 3c 15 a5 5c 9a 0f 2b fa d9 cb cb 48 7e 34 8f 27 2e a7 9d 2f 0d e7 57 94 8a 22 1f cd cb cf a7 11 ef 0a 3b 8a f4 e5 69 90 95 59 7b 05 71 ec cc f0 37 70 b2 85 f0 b7 5e ba 63 4c dd ce b9 8f fe b8 68 d2 c3 95 79 fb b7 84 8a 72 ca 27 2e 5a f7 74 72 f7 f1 6f 93 ab de 79 07 ff e6 5f 58 c4 57 d7 1e 28 fd 29 f9 d4 3f 3e 4e de 9a fc 69 e0 f8 19 2b f0 8b d8 f8 09 6f 5a 34 ed f5 83 ef 0d 9e e0 34 27 dd Data Ascii: yr9[\jI5<\|6raG_%B0](@n#WP<l(r\9]}N4z0\'=3z:,Ms<\+H~4'./W";iY{q7p^cLhyr'.Ztroy_XW()?>Ni+oZ44'
2024-02-12 12:53:21 UTC	16384	IN	Data Raw: 1e e6 12 e7 de e1 d6 0a 87 77 27 ab 9f 49 9a 77 53 39 02 03 9f 5f 07 7d 50 d0 6d 46 82 f5 e1 0e 30 01 b2 dd 80 2e 3c 18 26 61 8d 10 bf f6 5f b4 db d0 d2 73 58 19 31 4c fe 47 f3 d5 8b a6 74 6b 7e b7 f6 9f 4c bb ce d4 82 fd 75 db 77 72 1f 9d fb 82 b4 74 8e a6 ed 1e b0 bb 73 16 f3 e9 17 80 fc 1f 02 f9 8f 61 87 e1 0f 38 03 2e d2 50 80 af 92 1d d8 ce e5 e7 a3 88 dd 43 62 28 44 98 80 86 69 2b 30 16 3d 21 0b 07 de 9c 82 71 bc 20 96 1f e6 38 e8 59 41 03 0b 38 9e 64 7d 61 3a 38 13 79 fc 80 d1 80 e9 e0 00 fd 3e 59 d4 54 80 0b 72 e2 61 15 ab cc a1 51 7d f1 e9 57 76 89 73 8d 5e 7f 26 d3 23 68 3e 0d 81 74 b9 c9 55 ec 3c 1d 03 ae a4 e6 0f b0 f4 20 3e 1a 08 fa 83 be 20 27 9a e2 7a cc 15 cf 8d cb 31 3e 1e 8d 79 cd 39 11 e4 b6 3a 22 70 b3 d3 11 96 e0 2c 4f 88 45 70 50 03 Data Ascii: w'IwS9_}PmF0.<&a_sX1LGtk~Luwrtsa8.PCb(Di+0=!q 8YA8d}a:8y>YTraQ}Wvs^&#h>tU< > 'z1>y9:"p,OEpP
2024-02-12 12:53:21 UTC	16384	IN	Data Raw: e8 2d 80 33 81 f7 13 80 77 ea e2 87 43 d8 69 36 a0 00 c7 10 77 13 c0 35 00 bf 32 d3 d2 81 cb 3a 52 7c 3a 68 45 03 7b 0e 0b 3f 04 73 0d 00 3e 00 75 38 70 78 9a 90 79 2a ac cb fd 00 47 0d ec e1 00 7d 71 16 07 fd 14 94 67 d9 84 f2 e8 68 88 2f 81 72 83 c2 5a 11 8c a7 87 50 f9 8f e9 f3 63 80 5f 46 b5 c2 86 06 44 d2 eb 68 b6 07 e0 a1 ff 0d 78 3b 0d bb 39 96 73 c3 ff 4a bf ff 09 40 fb 9e 02 b0 52 d8 f7 ef 68 88 d1 87 50 16 7e 7d e0 6d c0 8b f1 eb c8 45 7b a1 0f 02 40 78 1c 84 73 4d 7b 9a ed 04 f1 97 8b f8 41 ed 07 7d 05 51 34 f0 cf c1 f1 83 c3 83 db f5 c7 c2 64 27 5a 95 0e 66 3f 50 fd e1 32 34 99 03 9b 02 f9 01 06 87 ad cf a3 c9 1c f4 67 20 ed 99 1f 86 d9 dd 3f 02 cb 51 15 bd 8e eb 04 7d 70 f4 0f c3 7a 33 1a cd 81 94 83 ae 85 bc 0c 8c 39 00 15 7e 19 7c 04 00 cf Data Ascii: -3wCi6w52:R\|:hE{?s>u8pxy*G}qgh/rZPc_FDhx;9sJ@RhP~}mE{@xsM{A}Q4d'Zf?P24g ?Q}pz39~\|
2024-02-12 12:53:22 UTC	16384	IN	Data Raw: ec 97 cb 52 a3 6c eb 13 bb b2 de f7 8a fa 15 a3 33 ae 65 60 bc 6c 84 d4 8c 99 b0 76 ad 7c c5 b9 6a 50 40 6b d7 56 87 83 d5 6b 9b d6 4e 6a 4f b4 4c 0e 07 95 f0 da 43 64 07 d9 b1 76 de e0 a6 6e 86 b6 27 0e af f3 b7 55 df d5 00 93 98 89 fb 00 58 09 1a b8 3b 8c 57 8f da ad e2 d5 a3 27 d4 1f 52 20 62 5b 3d a6 7e 0f c1 64 50 d3 c0 86 dd 59 70 ae fe 10 b8 22 aa de 4a 2e b5 d2 5a 90 d6 50 0d 06 a0 ef 21 a2 7e ca 7f 48 45 a8 45 3f cb ea 0d 7a 7d 4a 3b 46 7a 9b d8 dd 86 d1 94 76 92 6c 53 f4 36 f8 40 50 44 28 f3 39 f8 82 d5 17 d0 c0 7d 04 6b bc d0 4e 2a 55 3b e2 58 8d 41 b2 c0 6a 18 79 45 9e d3 08 f3 02 8e 20 09 9c 5d 0f f2 c4 94 f3 15 5d 15 23 95 73 15 23 ba 2a 50 25 94 95 8b 70 e8 55 18 b2 86 ac d9 70 c0 e0 40 5c 0c 32 1d 17 55 0e fd 8c 82 6c 07 7d 4c 43 e2 75 fe Data Ascii: Rl3e`lv\|jP@kVkNjOLCdvn'UX;W'R b[=~dPYp"J.ZP!~HEE?z}J;FzvlS6@PD(9}kNU;XAjyE ]]#s#P%pUp@\2Ul}LCu
2024-02-12 12:53:22 UTC	16384	IN	Data Raw: df 21 fe 6d 6e 8f e7 0f f0 c1 ef 1a f6 f8 ff 10 b7 df 25 be c3 55 1e e0 ce f7 b4 a0 a2 77 9f 7f f9 8e 63 73 18 cf 7f 2a fa 14 e8 63 76 ce c0 37 70 a7 74 c8 7b 34 dc 65 e5 9d 5b dc 1f 15 97 f7 ed 97 e4 7d 12 ab cf 14 25 17 77 67 71 7f 15 77 67 71 7f 05 7e ad 7c cf 7b 01 e2 c9 a2 c3 c4 7b be 8c cb 3e 47 8a f6 56 b2 3f 4a 00 8d 52 04 fb 1e aa 03 99 5f 43 3c 9f e0 5b 50 05 be 65 e0 33 b8 5b ae 17 24 ce 36 79 8e 6d 15 7f a3 65 e0 19 e0 15 b0 e7 3e 82 b7 0e 7c 06 fc 39 28 8f 83 b3 ac c4 3e d3 ec bd f5 3b 7b ec 77 cf b4 ff a3 e5 ff f4 8c fc 1f 9c a9 f3 15 25 07 91 5d df ae 68 70 fb 0c 45 fb 0a 1a 7c 16 ff a7 f4 43 67 f7 ff f8 2c ff 9e 33 ba f8 9c fe 6f cb f6 39 6f d3 0f dd 4b 07 df 03 7e a8 fc 43 f6 fe d3 f2 e0 7b 47 51 79 93 a0 7f d1 2e cb 83 ef 25 76 79 30 7d Data Ascii: !mn%Uwcs*cv7pt{4e[}%wgqwgq~\|{{>GV?JR_C<[Pe3[$6yme>\|9(>;{w%]hpE\|Cg,3o9oK~C{GQy.%vy0}
2024-02-12 12:53:22 UTC	16384	IN	Data Raw: 7e 1c 8b 3f c2 ba 68 c7 ea c6 b5 74 ef da 07 e2 ba 90 c3 51 f0 a5 fa f7 12 58 3a e7 f1 49 05 74 4f 83 b3 38 ab b4 be ff 00 f8 07 2c b3 9c 24 7e 29 35 f2 7f e4 7d 97 9a 2b e6 df 0e fe d1 5e 20 21 57 5b f0 c6 91 31 fe 26 b4 bd 78 4f e0 1d 58 7e 6c 2b d3 34 0f 8c 9e 10 d4 51 3e de 6f 74 52 df c7 7d 10 f2 73 ff 00 5d a3 2d 18 1f ef 30 af 27 13 93 63 70 df c4 a6 fe 5a fe 46 94 33 5c 1d 77 cb 4e a2 6f ee fc ec 7a 35 15 0d a5 d5 bd e5 b4 77 36 93 c5 71 04 8b b9 25 89 c3 2b 0f 50 47 06 a6 06 bc c7 a1 e8 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 Data Ascii: ~?htQX:ItO8,$~)5}+^ !W[1&xOX~l+4Q>otR}s]-0'cpZF3\wNoz5w6q%+PGQ@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@
2024-02-12 12:53:22 UTC	16384	IN	Data Raw: 20 2d 33 37 2e 39 32 34 37 32 20 32 31 39 2e 34 38 39 38 31 20 31 31 33 2e 37 37 34 31 37 20 5d 0a 2f 4c 65 6e 67 74 68 20 33 36 20 30 20 52 0a 2f 4d 61 74 72 69 78 20 5b 20 31 20 30 20 30 20 31 20 37 36 2e 39 39 39 39 38 20 37 34 35 2e 31 37 39 30 38 20 5d 0a 2f 50 61 69 6e 74 54 79 70 65 20 31 0a 2f 50 61 74 74 65 72 6e 54 79 70 65 20 31 0a 2f 52 65 73 6f 75 72 63 65 73 20 3c 3c 0a 2f 58 4f 62 6a 65 63 74 20 3c 3c 0a 2f 58 31 20 33 33 20 30 20 52 0a 3e 3e 0a 3e 3e 0a 2f 54 69 6c 69 6e 67 54 79 70 65 20 31 0a 2f 54 79 70 65 20 2f 50 61 74 74 65 72 6e 0a 2f 58 53 74 65 70 20 32 39 32 2e 36 35 33 30 38 0a 2f 59 53 74 65 70 20 31 35 31 2e 36 39 38 39 0a 3e 3e 0a 73 74 72 65 61 6d 0d 0a 31 34 36 2e 33 32 36 35 34 20 30 20 30 20 37 35 2e 38 34 39 34 35 20 30 Data Ascii: -37.92472 219.48981 113.77417 ]/Length 36 0 R/Matrix [ 1 0 0 1 76.99998 745.17908 ]/PaintType 1/PatternType 1/Resources <</XObject <</X1 33 0 R>>>>/TilingType 1/Type /Pattern/XStep 292.65308/YStep 151.6989>>stream146.32654 0 0 75.84945 0

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:17 UTC	408	OUT	GET /favicon.ico HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
2024-02-12 12:53:18 UTC	276	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:17 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 23542 Connection: close ETag: "2262947572" Last-Modified: Sun, 11 Feb 2024 01:06:42 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: lighttpd
2024-02-12 12:53:18 UTC	16108	IN	Data Raw: 00 00 01 00 06 00 40 40 00 00 01 00 20 00 28 42 00 00 66 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 42 00 00 10 10 00 00 01 00 20 00 68 04 00 00 36 53 00 00 0c 0c 00 00 01 00 20 00 98 02 00 00 9e 57 00 00 08 08 00 00 01 00 20 00 48 01 00 00 36 5a 00 00 04 04 00 00 01 00 20 00 78 00 00 00 7e 5b 00 00 28 00 00 00 40 00 00 00 80 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 67 22 03 00 87 2f 06 02 87 2f 06 19 87 2f 06 4e 87 2f 06 7e 87 2f 06 a6 87 Data Ascii: @@ (Bf B h6S W H6Z x~[(@ g"///N/~/
2024-02-12 12:53:18 UTC	7434	IN	Data Raw: 06 d0 87 2f 06 fa 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 ff 87 2f 06 fa 87 2f 06 d1 87 2f 06 88 87 2f 06 36 87 2f 06 03 2e 0a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 87 2f 06 0c 87 2f 06 a6 87 2f 06 5c 87 2f 06 46 87 2f 06 35 87 2f 06 7c 87 2f 06 5d 87 2f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 67 22 03 00 87 Data Ascii: ///////////////////6/.///\/F/5/\|/]/g"

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:22 UTC	731	OUT	GET /quote/?action=renderOnlineQuote HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc= Accept-Encoding: identity Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m Range: bytes=0-65535
2024-02-12 12:53:27 UTC	1666	IN	HTTP/1.1 206 Partial Content Date: Mon, 12 Feb 2024 12:53:26 GMT Content-Type: application/pdf Content-Length: 65536 Connection: close Report-To: {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://dbsltd.simprosuite.com/tools/csp-report/cspReport.php"}],"include_subdomains":true} Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' data: wss: blob: .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .googleapis.com .google.com .googletagmanager.com .simprogroup.com .simprocloud.net .simprocloud.com .locationiq.com https://data.resources.simprogroup.com .google-analytics.com https://lookup.simprocloud.com .simprosuite.com; img-src * data: blob: cid: file:; font-src * data:; frame-src ; script-src 'self' 'unsafe-eval' 'unsafe-inline' .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .simprogroup.com .simprocloud.net .simprocloud.com .google.com .googletagmanager.com .cloudfront.net .cloudflare.com https://data.resources.simprogroup.com .pendo.io .google-analytics.com .simprosuite.com; report-uri /tools/csp-report/cspReport.php; report-to csp-endpoint Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m; Domain=dbsltd.simprosuite.com; Path=/; SameSite=None; httpOnly; Secure; Content-Disposition: attachment;filename="Quote_No_28084.pdf" Accept-Ranges: bytes Content-Range: bytes 0-65535/283063 Server: lighttpd
2024-02-12 12:53:27 UTC	14718	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0d 25 cd ca d2 a9 0d 31 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 4d 65 74 61 64 61 74 61 20 31 30 34 20 30 20 52 0a 2f 50 61 67 65 4c 61 79 6f 75 74 20 2f 4f 6e 65 43 6f 6c 75 6d 6e 0a 2f 50 61 67 65 4d 6f 64 65 20 2f 55 73 65 4e 6f 6e 65 0a 2f 50 61 67 65 73 20 32 20 30 20 52 0a 2f 54 79 70 65 20 2f 43 61 74 61 6c 6f 67 0a 3e 3e 0a 65 6e 64 6f 62 6a 0a 32 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 43 6f 75 6e 74 20 39 0a 2f 4b 69 64 73 20 5b 20 34 20 30 20 52 20 33 30 20 30 20 52 20 34 31 20 30 20 52 20 35 38 20 30 20 52 20 36 35 20 30 20 52 20 37 32 20 30 20 52 20 37 39 20 30 20 52 20 38 36 20 30 20 52 20 39 37 20 30 20 52 20 5d 0a 2f 54 79 70 65 20 2f 50 61 67 65 73 0a 3e 3e 0a 65 6e 64 6f 62 6a 0a 33 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 43 72 65 61 Data Ascii: %PDF-1.7%1 0 obj<</Metadata 104 0 R/PageLayout /OneColumn/PageMode /UseNone/Pages 2 0 R/Type /Catalog>>endobj2 0 obj<</Count 9/Kids [ 4 0 R 30 0 R 41 0 R 58 0 R 65 0 R 72 0 R 79 0 R 86 0 R 97 0 R ]/Type /Pages>>endobj3 0 obj<</Crea
2024-02-12 12:53:27 UTC	1533	IN	Data Raw: 86 d2 f4 f4 17 18 c1 b9 97 e7 94 ff 00 c0 8f 4f a0 c0 ae 83 34 c0 69 c0 d7 a3 0a 51 a6 b9 62 ac 8f 83 c5 63 2b e3 2a 3a b8 89 b9 49 f5 6e e3 d5 88 a9 56 5f 5a 83 3e f4 99 26 a9 c6 e6 09 d8 b0 d2 2f ad 01 07 53 55 49 e6 ac b3 fc a0 d4 b5 6d 86 9d f7 19 72 e1 14 92 40 00 64 93 d2 be 37 f8 e3 04 5f 10 7c 7b 71 aa cd a8 cf f6 0b 75 16 d6 51 46 a0 05 8d 4f 2d 93 9f bc c4 b7 4e e0 76 af 7a f8 ed e2 f1 a5 68 bf d8 56 52 ff 00 a7 5f a1 12 90 79 8a 1e 87 f1 6e 9f 4c fb 57 cf 72 4c a8 2b 82 a6 7d 8a cb 2b df 05 3e 59 d9 a6 d5 af af 4d 53 b1 fa f7 01 70 76 1b 15 86 78 ec c2 1c ca 5f 02 77 d9 6f 2e 9b ec 8e 62 d3 c1 3a 0d 9c 81 cc 12 ce c3 90 d2 c8 71 f9 0c 54 f7 a1 63 c5 b5 b0 58 a2 c6 36 a0 c0 fc 71 d6 af dc 5c 49 33 88 e3 ea 78 00 56 7d c5 ac c6 eb ca 8f e7 39 00 Data Ascii: O4iQbc+*:InV_Z>&/SUImr@d7_\|{quQFO-NvzhVR_ynLWrL+}+>YMSpvx_wo.b:qTcX6q\I3xV}9
2024-02-12 12:53:27 UTC	16384	IN	Data Raw: cd bf 0c 3f e7 d3 54 ff 00 c0 e6 af 44 93 c6 7e 12 8f 56 93 48 93 c4 ba 4a ea 11 c8 b1 3d b1 bb 41 22 bb 30 50 bb 73 9d d9 20 63 ae 48 f5 a9 e3 f1 47 87 64 d7 db c3 f1 eb ba 73 ea cb 9c d9 8b 95 33 0c 0c 91 b7 39 ce 39 c7 5c 73 5b 47 13 8a 84 52 52 69 7c c9 e5 8b 3c d3 fe 19 b3 e1 8f fc fa 6a 9f f8 1c d4 9f f0 cd bf 0c 3f e7 d3 54 ff 00 c0 e6 af 42 ff 00 84 e3 c1 e6 2b 89 7f e1 28 d1 fc bb 68 c4 b3 b7 db 13 11 a1 6d 80 b1 cf 19 61 81 ea 6b 2f c4 1f 13 fc 1d a4 68 d6 1a bf f6 cd 9d e5 9d f5 f4 76 51 c9 6f 73 1b 05 66 60 19 9b 2c 30 a8 18 33 77 03 9c 56 8b 13 8c 6e ca 52 fc 43 92 1d 8e 47 fe 19 b7 e1 87 fc fa 6a 9f f8 1c d4 7f c3 36 fc 31 ff 00 9f 4d 57 ff 00 03 9a bd 02 d3 c5 fa 59 8b 59 bb d4 2e f4 eb 1d 3f 4c b8 58 8d db 5f c6 c8 ea d1 a3 86 6c 1f dd 93 Data Ascii: ?TD~VHJ=A"0Ps cHGds399\s[GRRi\|<j?TB+(hmak/hvQosf`,03wVnRCGj61MWYY.?LX_l
2024-02-12 12:53:27 UTC	16384	IN	Data Raw: 57 46 26 16 4d 1c 56 37 71 a6 77 66 6c 56 d1 32 ff 8a 9c 45 f9 eb bc 6b fd 9b 73 36 45 36 c4 7d 16 7d b4 05 71 e3 a8 6a 53 ad 05 25 da 68 8d 68 92 fb 79 72 39 1a 88 86 93 e7 5b 07 0e e0 d4 5c 6a ed 0d c0 e1 c4 c2 04 49 1c c6 35 a8 80 3c 7f b0 f8 f2 7c ab 84 a5 36 72 8b 61 d5 47 5f 82 f2 ed db ad f9 25 fa 42 30 10 0e e3 5d 28 40 1e 6e ad ee df 23 1f ee 57 50 94 3c 6c 28 e1 72 5c ee ab 9d b4 39 13 9d ec e8 a4 86 5d 7d c7 e9 4e 18 34 c0 b7 e2 8e 8e 7a 90 b0 93 30 5c d5 f5 27 81 3d 33 7a 91 3a b0 2c 86 4d c1 8d 05 73 3c 15 a5 5c 9a 0f 2b fa d9 cb cb 48 7e 34 8f 27 2e a7 9d 2f 0d e7 57 94 8a 22 1f cd cb cf a7 11 ef 0a 3b 8a f4 e5 69 90 95 59 7b 05 71 ec cc f0 37 70 b2 85 f0 b7 5e ba 63 4c dd ce b9 8f fe b8 68 d2 c3 95 79 fb b7 84 8a 72 ca 27 2e 5a f7 74 72 f7 Data Ascii: WF&MV7qwflV2Eks6E6}}qjS%hhyr9[\jI5<\|6raG_%B0](@n#WP<l(r\9]}N4z0\'=3z:,Ms<\+H~4'./W";iY{q7p^cLhyr'.Ztr
2024-02-12 12:53:27 UTC	16384	IN	Data Raw: 38 1f 81 7b d0 72 6b 29 4a 68 8b 07 0e 82 bc ab b4 e7 d0 5a 80 9b 80 be 8d bd 8f ee d1 c3 a8 03 c2 77 40 b9 bd 0c a1 20 cf 03 65 ae d2 ef 43 d7 40 fc 0d 90 de 02 71 37 01 5e 0a e1 5b 81 5e 01 e5 6a 25 6d b3 5c 88 0a 38 06 d0 21 7e 0c f0 39 5f d6 77 34 7d 02 05 58 cf c0 9f a0 2e cb 80 e7 2c 80 b3 40 c6 3c c0 d3 00 66 43 9e 5c c0 0d 00 67 e3 e7 d0 39 f8 b9 81 db 20 1d 30 3a 1d e4 9f cd e3 01 1a 25 9e 01 7c ce 84 f4 29 50 ae 1c c2 a7 03 5d 08 7a e8 80 9d 00 23 00 2a c9 03 08 e6 41 f4 38 e0 1a a8 ff 12 a3 de 00 cf a1 36 5e 67 55 27 d0 5f ea f4 43 30 74 9c 9d 0e 20 f3 e7 00 23 49 78 e0 03 c0 b6 34 dd 06 c3 e9 83 60 26 f5 a2 3e c0 1b 00 8a 00 8e 21 2f a2 0e 76 34 c2 60 af 6b b5 0f 10 e5 00 3d 8f db e9 8f 00 47 b1 56 34 17 c2 18 f4 5c a0 ed 42 d7 f1 30 c0 1c 01 Data Ascii: 8{rk)JhZw@ eC@q7^[^j%m\8!~9_w4}X.,@<fC\g9 0:%\|)P]z#*A86^gU'_C0t #Ix4`&>!/v4`k=GV4\B0
2024-02-12 12:53:27 UTC	133	IN	Data Raw: 70 4c 26 d3 9b 69 66 1e 65 da 98 76 e6 08 f3 05 ab b0 11 b6 27 db 8b ad 65 27 b0 09 e0 4c 11 77 15 37 9a 7b 92 7b 9a 7b 95 3b cb 57 f0 53 f9 79 fc 97 c2 ed c2 0a f1 8f 5d 79 5d 7f d5 90 36 53 6b d3 f6 02 76 45 40 d2 52 a0 c4 6f d1 63 80 fb 7d c0 83 77 80 a2 7f 82 11 9f 42 e7 80 0b 3e 1c c2 51 18 77 39 ae c6 35 78 04 1e 8f af c5 d3 f0 ed 78 15 be 0f 6f c6 0f e3 c7 f0 73 30 03 98 03 11 60 ec 31 32 Data Ascii: pL&ifev'e'Lw7{{{;WSy]y]6SkvE@Roc}wB>Qw95xxos0`12

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:24 UTC	428	OUT	GET /quote/?action=renderOnlineQuote HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
2024-02-12 12:53:34 UTC	1617	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:34 GMT Content-Type: application/pdf Content-Length: 283063 Connection: close Report-To: {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://dbsltd.simprosuite.com/tools/csp-report/cspReport.php"}],"include_subdomains":true} Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' data: wss: blob: .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .googleapis.com .google.com .googletagmanager.com .simprogroup.com .simprocloud.net .simprocloud.com .locationiq.com https://data.resources.simprogroup.com .google-analytics.com https://lookup.simprocloud.com .simprosuite.com; img-src * data: blob: cid: file:; font-src * data:; frame-src ; script-src 'self' 'unsafe-eval' 'unsafe-inline' .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .simprogroup.com .simprocloud.net .simprocloud.com .google.com .googletagmanager.com .cloudfront.net .cloudflare.com https://data.resources.simprogroup.com .pendo.io .google-analytics.com .simprosuite.com; report-uri /tools/csp-report/cspReport.php; report-to csp-endpoint Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m; Domain=dbsltd.simprosuite.com; Path=/; SameSite=None; httpOnly; Secure; Content-Disposition: attachment;filename="Quote_No_28084.pdf" Accept-Ranges: bytes Server: lighttpd
2024-02-12 12:53:34 UTC	14767	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0d 25 cd ca d2 a9 0d 31 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 4d 65 74 61 64 61 74 61 20 31 30 34 20 30 20 52 0a 2f 50 61 67 65 4c 61 79 6f 75 74 20 2f 4f 6e 65 43 6f 6c 75 6d 6e 0a 2f 50 61 67 65 4d 6f 64 65 20 2f 55 73 65 4e 6f 6e 65 0a 2f 50 61 67 65 73 20 32 20 30 20 52 0a 2f 54 79 70 65 20 2f 43 61 74 61 6c 6f 67 0a 3e 3e 0a 65 6e 64 6f 62 6a 0a 32 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 43 6f 75 6e 74 20 39 0a 2f 4b 69 64 73 20 5b 20 34 20 30 20 52 20 33 30 20 30 20 52 20 34 31 20 30 20 52 20 35 38 20 30 20 52 20 36 35 20 30 20 52 20 37 32 20 30 20 52 20 37 39 20 30 20 52 20 38 36 20 30 20 52 20 39 37 20 30 20 52 20 5d 0a 2f 54 79 70 65 20 2f 50 61 67 65 73 0a 3e 3e 0a 65 6e 64 6f 62 6a 0a 33 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 43 72 65 61 Data Ascii: %PDF-1.7%1 0 obj<</Metadata 104 0 R/PageLayout /OneColumn/PageMode /UseNone/Pages 2 0 R/Type /Catalog>>endobj2 0 obj<</Count 9/Kids [ 4 0 R 30 0 R 41 0 R 58 0 R 65 0 R 72 0 R 79 0 R 86 0 R 97 0 R ]/Type /Pages>>endobj3 0 obj<</Crea
2024-02-12 12:53:34 UTC	1533	IN	Data Raw: a9 56 5f 5a 83 3e f4 99 26 a9 c6 e6 09 d8 b0 d2 2f ad 01 07 53 55 49 e6 ac b3 fc a0 d4 b5 6d 86 9d f7 19 72 e1 14 92 40 00 64 93 d2 be 37 f8 e3 04 5f 10 7c 7b 71 aa cd a8 cf f6 0b 75 16 d6 51 46 a0 05 8d 4f 2d 93 9f bc c4 b7 4e e0 76 af 7a f8 ed e2 f1 a5 68 bf d8 56 52 ff 00 a7 5f a1 12 90 79 8a 1e 87 f1 6e 9f 4c fb 57 cf 72 4c a8 2b 82 a6 7d 8a cb 2b df 05 3e 59 d9 a6 d5 af af 4d 53 b1 fa f7 01 70 76 1b 15 86 78 ec c2 1c ca 5f 02 77 d9 6f 2e 9b ec 8e 62 d3 c1 3a 0d 9c 81 cc 12 ce c3 90 d2 c8 71 f9 0c 54 f7 a1 63 c5 b5 b0 58 a2 c6 36 a0 c0 fc 71 d6 af dc 5c 49 33 88 e3 ea 78 00 56 7d c5 ac c6 eb ca 8f e7 39 00 11 dc d7 9f 3c d7 1f 8f 9f fb 45 69 4b d5 bb 7d da 2f c0 fd 11 e5 98 0c 24 7f d9 a8 c6 3e 69 2b fd fb fe 27 a4 fe cf 7a 37 f6 87 8d d6 f0 a6 e8 6c Data Ascii: V_Z>&/SUImr@d7_\|{quQFO-NvzhVR_ynLWrL+}+>YMSpvx_wo.b:qTcX6q\I3xV}9<EiK}/$>i+'z7l
2024-02-12 12:53:34 UTC	16384	IN	Data Raw: 47 87 64 d7 db c3 f1 eb ba 73 ea cb 9c d9 8b 95 33 0c 0c 91 b7 39 ce 39 c7 5c 73 5b 47 13 8a 84 52 52 69 7c c9 e5 8b 3c d3 fe 19 b3 e1 8f fc fa 6a 9f f8 1c d4 9f f0 cd bf 0c 3f e7 d3 54 ff 00 c0 e6 af 42 ff 00 84 e3 c1 e6 2b 89 7f e1 28 d1 fc bb 68 c4 b3 b7 db 13 11 a1 6d 80 b1 cf 19 61 81 ea 6b 2f c4 1f 13 fc 1d a4 68 d6 1a bf f6 cd 9d e5 9d f5 f4 76 51 c9 6f 73 1b 05 66 60 19 9b 2c 30 a8 18 33 77 03 9c 56 8b 13 8c 6e ca 52 fc 43 92 1d 8e 47 fe 19 b7 e1 87 fc fa 6a 9f f8 1c d4 7f c3 36 fc 31 ff 00 9f 4d 57 ff 00 03 9a bd 02 d3 c5 fa 59 8b 59 bb d4 2e f4 eb 1d 3f 4c b8 58 8d db 5f c6 c8 ea d1 a3 86 6c 1f dd 93 bc 00 ad c9 e0 8e a2 ac 45 e2 ff 00 0b cb a4 45 ab c7 e2 2d 29 b4 f9 65 f2 12 e7 ed 49 e5 99 30 4e cd d9 c6 ec 02 71 d7 8a 9f ad e2 ff 00 99 87 24 Data Ascii: Gds399\s[GRRi\|<j?TB+(hmak/hvQosf`,03wVnRCGj61MWYY.?LX_lEE-)eI0Nq$
2024-02-12 12:53:35 UTC	16384	IN	Data Raw: fb 79 72 39 1a 88 86 93 e7 5b 07 0e e0 d4 5c 6a ed 0d c0 e1 c4 c2 04 49 1c c6 35 a8 80 3c 7f b0 f8 f2 7c ab 84 a5 36 72 8b 61 d5 47 5f 82 f2 ed db ad f9 25 fa 42 30 10 0e e3 5d 28 40 1e 6e ad ee df 23 1f ee 57 50 94 3c 6c 28 e1 72 5c ee ab 9d b4 39 13 9d ec e8 a4 86 5d 7d c7 e9 4e 18 34 c0 b7 e2 8e 8e 7a 90 b0 93 30 5c d5 f5 27 81 3d 33 7a 91 3a b0 2c 86 4d c1 8d 05 73 3c 15 a5 5c 9a 0f 2b fa d9 cb cb 48 7e 34 8f 27 2e a7 9d 2f 0d e7 57 94 8a 22 1f cd cb cf a7 11 ef 0a 3b 8a f4 e5 69 90 95 59 7b 05 71 ec cc f0 37 70 b2 85 f0 b7 5e ba 63 4c dd ce b9 8f fe b8 68 d2 c3 95 79 fb b7 84 8a 72 ca 27 2e 5a f7 74 72 f7 f1 6f 93 ab de 79 07 ff e6 5f 58 c4 57 d7 1e 28 fd 29 f9 d4 3f 3e 4e de 9a fc 69 e0 f8 19 2b f0 8b d8 f8 09 6f 5a 34 ed f5 83 ef 0d 9e e0 34 27 dd Data Ascii: yr9[\jI5<\|6raG_%B0](@n#WP<l(r\9]}N4z0\'=3z:,Ms<\+H~4'./W";iY{q7p^cLhyr'.Ztroy_XW()?>Ni+oZ44'
2024-02-12 12:53:35 UTC	16384	IN	Data Raw: fc 0d 90 de 02 71 37 01 5e 0a e1 5b 81 5e 01 e5 6a 25 6d b3 5c 88 0a 38 06 d0 21 7e 0c f0 39 5f d6 77 34 7d 02 05 58 cf c0 9f a0 2e cb 80 e7 2c 80 b3 40 c6 3c c0 d3 00 66 43 9e 5c c0 0d 00 67 e3 e7 d0 39 f8 b9 81 db 20 1d 30 3a 1d e4 9f cd e3 01 1a 25 9e 01 7c ce 84 f4 29 50 ae 1c c2 a7 03 5d 08 7a e8 80 9d 00 23 00 2a c9 03 08 e6 41 f4 38 e0 1a a8 ff 12 a3 de 00 cf a1 36 5e 67 55 27 d0 5f ea f4 43 30 74 9c 9d 0e 20 f3 e7 00 23 49 78 e0 03 c0 b6 34 dd 06 c3 e9 83 60 26 f5 a2 3e c0 1b 00 8a 00 8e 21 2f a2 0e 76 34 c2 60 af 6b b5 0f 10 e5 00 3d 8f db e9 8f 00 47 b1 56 34 17 c2 18 f4 5c a0 ed 42 d7 f1 30 c0 1c 01 3d 03 07 d9 0d e8 16 7a 00 85 20 ed 04 fd 2a a8 47 2b d8 bb 0e e0 6b 54 43 fe 86 c6 e9 a3 d0 29 d0 bf 1a 81 ff a9 00 37 01 cf 0f 45 7f 68 45 0b 41 Data Ascii: q7^[^j%m\8!~9_w4}X.,@<fC\g9 0:%\|)P]z#A86^gU'_C0t #Ix4`&>!/v4`k=GV4\B0=z G+kTC)7EhEA
2024-02-12 12:53:35 UTC	16384	IN	Data Raw: 97 c2 ed c2 0a f1 8f 5d 79 5d 7f d5 90 36 53 6b d3 f6 02 76 45 40 d2 52 a0 c4 6f d1 63 80 fb 7d c0 83 77 80 a2 7f 82 11 9f 42 e7 80 0b 3e 1c c2 51 18 77 39 ae c6 35 78 04 1e 8f af c5 d3 f0 ed 78 15 be 0f 6f c6 0f e3 c7 f0 73 30 03 98 03 11 60 ec 31 32 80 8c 26 93 c8 34 b2 82 ac 22 77 93 7d f0 3d 4c de 26 c7 c9 09 d2 09 23 77 33 61 26 c6 f4 62 86 32 13 98 6b 98 1b 61 0e 37 33 cb 98 15 40 d9 7b 99 9d cc 7b cc 51 e6 0c f3 25 d3 09 5c 73 b3 e9 ec 02 76 29 fb 10 bb 83 dd c7 be cf 0d e7 6e 80 ef 63 dc cb 5c 07 f7 3e 77 91 bb c8 13 de c7 a7 f1 05 fc 6c fe 49 fe 33 81 17 7a 0b 75 c2 1a e1 03 e1 df e2 3c 9c 86 f3 60 e4 41 74 d9 87 78 41 06 d3 c9 4e e2 60 97 e3 4e 68 08 60 16 f4 cc bd 28 06 7c 18 0d 52 f1 6f 54 c9 68 c0 17 33 3d 0f 63 73 12 2f 6b a7 57 f2 2a 0b ba Data Ascii: ]y]6SkvE@Roc}wB>Qw95xxos0`12&4"w}=L&#w3a&b2ka73@{{Q%\sv)nc\>wlI3zu<`AtxAN`Nh`(\|RoTh3=cs/kW*
2024-02-12 12:53:35 UTC	16384	IN	Data Raw: 97 55 51 1f 4e 45 a5 6c 07 aa 64 9d 48 05 3a 65 43 fb 58 fe 2a 5d ef 6e 80 fb bf 89 bf 41 77 03 bf 56 0a 4e 14 66 be 02 dd 08 cf 22 c7 c1 3e 40 a2 f7 87 7c c4 65 38 ba 02 73 bf c6 52 77 de 8d d7 5f e7 14 33 54 ef 42 ce 41 ee 05 b9 3b 0c e9 79 48 1f a5 d2 df 20 7d 06 78 bc 51 97 5f b0 0d 54 3f eb f6 01 74 34 a4 bb 93 78 4d 74 5e c2 e7 db 68 2b e4 f7 74 e3 f3 57 38 cd fb 15 3e 85 5f e3 f2 d7 39 b5 2d 54 bf eb b6 05 e4 14 c6 71 77 f7 fc a9 7e a4 3a 8e ea 48 aa e7 a8 ed eb ee ff eb fc b2 eb 1f 04 dd f1 a1 ae 87 df 45 13 52 72 9d 0b a9 10 52 01 dc e3 85 94 1e 79 1e 02 82 73 20 a3 5f f2 47 13 cf 0b 95 89 e7 99 77 12 cf f3 0f 25 b6 0b 73 12 6f f1 fb 12 5b 61 de b9 97 6c 6a 47 52 97 51 79 ea b6 a5 94 4e d4 2e 76 db 51 2e 82 a6 a7 f4 d9 16 bd 2f 3c 5f b7 a3 e3 74 Data Ascii: UQNEldH:eCX*]nAwVNf">@\|e8sRw_3TBA;yH }xQ_T?t4xMt^h+tW8>_9-Tqw~:HERrRys _Gw%so[aljGRQyN.vQ./<_t
2024-02-12 12:53:35 UTC	16384	IN	Data Raw: 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 41 02 6c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 Data Ascii: !"$"$CAl"}!1AQa"q2#BR$3br%&'()*456789:CDEFGHIJSTU
2024-02-12 12:53:35 UTC	16384	IN	Data Raw: 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 11 5c db c1 75 03 db dc c3 1c d0 c8 36 bc 72 28 65 61 e8 41 eb 5e 77 e2 5f 84 5a 35 eb 3d c7 87 b5 2b ef 0e 5d 37 20 db 62 48 73 ef 1b f4 1e ca 56 bd 26 8a de 86 2a b6 1d de 94 9a fe bb 6d f8 13 28 46 7a 49 1f 36 78 9b e1 cf c7 8b 04 65 d1 7c 51 a4 ea f0 0e 81 63 5b 79 88 ff 00 81 29 1f 93 57 92 78 a3 c0 ff 00 19 1e 73 26 b9 e1 7d 7e f9 97 f8 d5 be d0 07 d3 69 3f a5 7d db 8a 5c 57 d0 60 78 b3 19 83 77 8c 62 df 7b 24 ff 00 03 27 86 a5 2d d1 f9 da de 1c f1 cc 44 a9 f0 6f 88 93 3d 41 d3 66 e7 ff 00 1d a9 2d 7c 11 f1 0a f9 f6 db 78 1f c4 0c 4f f7 ac 24 41 f9 b0 02 bf 43 a8 af 5d f8 85 8f b6 90 Data Ascii: Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@Q@\u6r(eaA^w_Z5=+]7 bHsV&*m(FzI6xe\|Qc[y)Wxs&}~i?}\W`xwb{$'-Do=Af-\|xO$AC]
2024-02-12 12:53:35 UTC	16384	IN	Data Raw: f4 b4 83 68 4d 45 ee 70 7f f0 cd bf 0c 3f e7 d3 54 ff 00 c0 e6 a3 fe 19 b7 e1 87 fc fa 6a 9f f8 1c d5 e8 d0 78 cb c2 93 ea d1 69 30 f8 93 49 92 fe 57 64 8e d9 6e d0 c8 cc a4 ab 28 5c e7 20 ab 0c 75 e0 fa 52 4b e3 4f 09 45 aa cb a4 c9 e2 6d 21 2f e2 91 62 7b 73 76 82 45 76 60 a1 71 9c ee 24 81 8e b9 23 d6 b4 fa de 2f f9 a5 f8 8b 92 1d 8f 3a ff 00 86 6d f8 61 ff 00 3e 9a a7 fe 07 35 1f f0 cd bf 0c 3f e7 d3 54 ff 00 c0 e6 af 45 d6 fc 46 ba 4f 8a 74 3d 1e e6 d0 f9 1a c1 9a 28 ae b7 f0 93 a2 ef 58 ca e3 f8 94 39 07 3d 53 1d e8 f0 6f 88 97 c4 10 ea 2b 25 a1 b3 bc d3 75 09 ac 6e ad cb ef da c8 72 ac 0e 06 43 a1 47 1c 74 6a 7f 5b c5 f2 f3 73 bb 7a 87 24 3b 1e 75 ff 00 0c db f0 c3 fe 7d 35 4f fc 0e 6a b9 a5 7e cf 5f 0b ac 2e 96 e1 b4 5b 8b d2 a7 2a 97 57 92 3a 7e Data Ascii: hMEp?Tjxi0IWdn(\ uRKOEm!/b{svEv`q$#/:ma>5?TEFOt=(X9=So+%unrCGtj[sz$;u}5Oj~_.[*W:~

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-240212125428Z-209.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Windows Analysis Report
https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:27 UTC	737	OUT	GET /quote/?action=renderOnlineQuote HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc= Accept-Encoding: identity Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m Range: bytes=262144-283062
2024-02-12 12:53:30 UTC	1672	IN	HTTP/1.1 206 Partial Content Date: Mon, 12 Feb 2024 12:53:30 GMT Content-Type: application/pdf Content-Length: 20919 Connection: close Report-To: {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://dbsltd.simprosuite.com/tools/csp-report/cspReport.php"}],"include_subdomains":true} Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' data: wss: blob: .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .googleapis.com .google.com .googletagmanager.com .simprogroup.com .simprocloud.net .simprocloud.com .locationiq.com https://data.resources.simprogroup.com .google-analytics.com https://lookup.simprocloud.com .simprosuite.com; img-src * data: blob: cid: file:; font-src * data:; frame-src ; script-src 'self' 'unsafe-eval' 'unsafe-inline' .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .simprogroup.com .simprocloud.net .simprocloud.com .google.com .googletagmanager.com .cloudfront.net .cloudflare.com https://data.resources.simprogroup.com .pendo.io .google-analytics.com .simprosuite.com; report-uri /tools/csp-report/cspReport.php; report-to csp-endpoint Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m; Domain=dbsltd.simprosuite.com; Path=/; SameSite=None; httpOnly; Secure; Content-Disposition: attachment;filename="Quote_No_28084.pdf" Accept-Ranges: bytes Content-Range: bytes 262144-283062/283063 Server: lighttpd
2024-02-12 12:53:30 UTC	14712	IN	Data Raw: 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 Data Ascii: br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXY
2024-02-12 12:53:30 UTC	1533	IN	Data Raw: 2d ed 9a 78 85 dd da 5b ca 8e fe 6b ab 18 c1 c0 21 06 ee 9d 4f 34 6a be 0a d6 35 1b 7f 89 d7 ff 00 d8 11 c5 7f af e9 f1 c3 a6 09 25 84 c8 7f d0 f6 18 f7 06 21 30 e4 83 92 01 eb 92 30 6b d8 28 a9 58 99 25 65 fa f9 7f 90 f9 51 e3 47 c3 9e 26 d2 2e 7c 43 0a f8 2e d3 c4 8b af d9 59 c5 1c 97 17 10 88 6d cc 70 2c 4f 0d c0 66 0c 63 04 17 1e 58 6c ee 23 ad 64 fc 47 f0 7f 8e 35 44 f1 56 9b 67 a0 c9 22 5f 47 02 d9 49 a7 cb 69 05 b4 a9 1c 68 31 31 7f df b3 82 ac 14 67 6e 36 8c 81 93 5e f7 45 54 71 52 8c b9 ac 81 c4 e2 7e 1b 69 3a ad 86 b3 e2 dd 43 53 b0 6b 24 d5 75 48 ee ed 91 e5 47 6d 9f 66 85 0e 76 31 00 86 56 1f 87 19 18 35 e7 17 5e 16 f1 e4 ba ae 9b 24 fe 1d bb 26 c3 c5 4b a9 cc b6 b3 d9 43 64 f0 09 98 ef 89 01 12 34 85 58 16 32 10 73 bb a9 c0 af 7d a2 a6 38 99 Data Ascii: -x[k!O4j5%!00k(X%eQG&.\|C.Ymp,OfcXl#dG5DVg"_GIih11gn6^ETqR~i:CSk$uHGmfv1V5^$&KCd4X2s}8
2024-02-12 12:53:30 UTC	4674	IN	Data Raw: 5a 35 eb 3d c7 87 b5 2b ef 0e 5d 37 20 db 62 48 73 ef 1b f4 1e ca 56 bd 26 8a de 86 2a b6 1d de 94 9a fe bb 6d f8 13 28 46 7a 49 1f 36 78 9b e1 cf c7 8b 04 65 d1 7c 51 a4 ea f0 0e 81 63 5b 79 88 ff 00 81 29 1f 93 57 92 78 a3 c0 ff 00 19 1e 73 26 b9 e1 7d 7e f9 97 f8 d5 be d0 07 d3 69 3f a5 7d db 8a 5c 57 d0 60 78 b3 19 83 77 8c 62 df 7b 24 ff 00 03 27 86 a5 2d d1 f9 da de 1c f1 cc 44 a9 f0 6f 88 93 3d 41 d3 66 e7 ff 00 1d a9 2d 7c 11 f1 0a f9 f6 db 78 1f c4 0c 4f f7 ac 24 41 f9 b0 02 bf 43 a8 af 5d f8 85 8f b6 90 89 1f 52 a3 d9 fd e7 c2 fa 1f c0 9f 8b 3a a3 29 fe c0 87 4b 43 fc 77 97 48 98 fc 14 96 fd 2b d3 3c 25 fb 2c b9 91 26 f1 8f 8b 65 99 47 2d 6d a6 a1 50 7f ed a3 f6 ff 00 80 8f ad 7d 37 8a 5c 57 89 8f e2 ac c7 1b a4 e4 92 f2 5f e7 73 7a 74 d5 3f 86 Data Ascii: Z5=+]7 bHsV&*m(FzI6xe\|Qc[y)Wxs&}~i?}\W`xwb{$'-Do=Af-\|xO$AC]R:)KCwH+<%,&eG-mP}7\W_szt?

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:31 UTC	727	OUT	GET /quote/?action=renderOnlineQuote HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
2024-02-12 12:53:40 UTC	1617	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:39 GMT Content-Type: application/pdf Content-Length: 283063 Connection: close Report-To: {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://dbsltd.simprosuite.com/tools/csp-report/cspReport.php"}],"include_subdomains":true} Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' data: wss: blob: .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .googleapis.com .google.com .googletagmanager.com .simprogroup.com .simprocloud.net .simprocloud.com .locationiq.com https://data.resources.simprogroup.com .google-analytics.com https://lookup.simprocloud.com .simprosuite.com; img-src * data: blob: cid: file:; font-src * data:; frame-src ; script-src 'self' 'unsafe-eval' 'unsafe-inline' .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .simprogroup.com .simprocloud.net .simprocloud.com .google.com .googletagmanager.com .cloudfront.net .cloudflare.com https://data.resources.simprogroup.com .pendo.io .google-analytics.com .simprosuite.com; report-uri /tools/csp-report/cspReport.php; report-to csp-endpoint Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m; Domain=dbsltd.simprosuite.com; Path=/; SameSite=None; httpOnly; Secure; Content-Disposition: attachment;filename="Quote_No_28084.pdf" Accept-Ranges: bytes Server: lighttpd
2024-02-12 12:53:40 UTC	14767	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0d 25 cd ca d2 a9 0d 31 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 4d 65 74 61 64 61 74 61 20 31 30 34 20 30 20 52 0a 2f 50 61 67 65 4c 61 79 6f 75 74 20 2f 4f 6e 65 43 6f 6c 75 6d 6e 0a 2f 50 61 67 65 4d 6f 64 65 20 2f 55 73 65 4e 6f 6e 65 0a 2f 50 61 67 65 73 20 32 20 30 20 52 0a 2f 54 79 70 65 20 2f 43 61 74 61 6c 6f 67 0a 3e 3e 0a 65 6e 64 6f 62 6a 0a 32 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 43 6f 75 6e 74 20 39 0a 2f 4b 69 64 73 20 5b 20 34 20 30 20 52 20 33 30 20 30 20 52 20 34 31 20 30 20 52 20 35 38 20 30 20 52 20 36 35 20 30 20 52 20 37 32 20 30 20 52 20 37 39 20 30 20 52 20 38 36 20 30 20 52 20 39 37 20 30 20 52 20 5d 0a 2f 54 79 70 65 20 2f 50 61 67 65 73 0a 3e 3e 0a 65 6e 64 6f 62 6a 0a 33 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 43 72 65 61 Data Ascii: %PDF-1.7%1 0 obj<</Metadata 104 0 R/PageLayout /OneColumn/PageMode /UseNone/Pages 2 0 R/Type /Catalog>>endobj2 0 obj<</Count 9/Kids [ 4 0 R 30 0 R 41 0 R 58 0 R 65 0 R 72 0 R 79 0 R 86 0 R 97 0 R ]/Type /Pages>>endobj3 0 obj<</Crea
2024-02-12 12:53:40 UTC	10482	IN	Data Raw: a9 56 5f 5a 83 3e f4 99 26 a9 c6 e6 09 d8 b0 d2 2f ad 01 07 53 55 49 e6 ac b3 fc a0 d4 b5 6d 86 9d f7 19 72 e1 14 92 40 00 64 93 d2 be 37 f8 e3 04 5f 10 7c 7b 71 aa cd a8 cf f6 0b 75 16 d6 51 46 a0 05 8d 4f 2d 93 9f bc c4 b7 4e e0 76 af 7a f8 ed e2 f1 a5 68 bf d8 56 52 ff 00 a7 5f a1 12 90 79 8a 1e 87 f1 6e 9f 4c fb 57 cf 72 4c a8 2b 82 a6 7d 8a cb 2b df 05 3e 59 d9 a6 d5 af af 4d 53 b1 fa f7 01 70 76 1b 15 86 78 ec c2 1c ca 5f 02 77 d9 6f 2e 9b ec 8e 62 d3 c1 3a 0d 9c 81 cc 12 ce c3 90 d2 c8 71 f9 0c 54 f7 a1 63 c5 b5 b0 58 a2 c6 36 a0 c0 fc 71 d6 af dc 5c 49 33 88 e3 ea 78 00 56 7d c5 ac c6 eb ca 8f e7 39 00 11 dc d7 9f 3c d7 1f 8f 9f fb 45 69 4b d5 bb 7d da 2f c0 fd 11 e5 98 0c 24 7f d9 a8 c6 3e 69 2b fd fb fe 27 a4 fe cf 7a 37 f6 87 8d d6 f0 a6 e8 6c Data Ascii: V_Z>&/SUImr@d7_\|{quQFO-NvzhVR_ynLWrL+}+>YMSpvx_wo.b:qTcX6q\I3xV}9<EiK}/$>i+'z7l
2024-02-12 12:53:40 UTC	16384	IN	Data Raw: df ba ea 10 b2 6c 44 68 e9 bd 73 66 4e 9b f1 ee 40 a7 07 a1 b5 61 f8 7e bf 39 50 61 2f 75 08 70 5e 0b e7 f9 73 16 2c b9 a1 f0 e3 c9 93 e0 7c 25 42 7e e3 9a eb a6 4f 23 5f 8d ed 89 d0 c3 47 e0 7c d0 82 69 37 2c d4 6a 84 97 10 3a 04 b7 a3 f0 b5 d3 16 cc dc b4 31 59 00 e7 f0 3c f5 f5 85 d7 2d 5e 72 f7 ac 8f 6f 44 e8 f7 df 21 74 d9 45 0b 17 cd 5c 38 36 79 ec 1b 84 c5 42 b8 9e 42 98 db 88 b7 20 01 c9 c2 fd 42 29 b4 3a 90 3e 72 7f 46 b3 88 5d 16 88 26 f2 84 fe f1 08 ad d8 d0 84 d8 9f 4c 77 e3 6b 06 86 91 81 c2 a9 73 c2 5b c9 31 b8 54 ba 04 ef 33 10 4e a5 52 e9 9b 10 46 98 1d 4d 48 44 3b d3 15 f0 57 8c 46 a0 21 e8 72 34 06 4d 44 7d d0 58 64 43 41 e4 42 5e e4 43 4e 54 80 06 a1 3a 34 14 c5 d0 28 34 12 4d 41 fd d0 04 34 09 f5 47 01 14 47 b5 c8 8a 06 a0 61 c8 83 fc Data Ascii: lDhsfN@a~9Pa/up^s,\|%B~O#_G\|i7,j:1Y<-^roD!tE\86yBB B):>rF]&Lwks[1T3NRFMHD;WF!r4MD}XdCAB^CNT:4(4MA4GGa
2024-02-12 12:53:40 UTC	16384	IN	Data Raw: b3 f0 c7 bb ea 1f 7b b0 73 2a d9 b1 e1 c6 71 b7 af ea 7c 1e 64 72 23 10 aa 8a e5 08 4a e8 b8 71 95 d2 8f f6 60 94 b2 45 d9 ae b4 28 ed ca 27 ca 29 45 42 4a ae b2 50 69 52 b6 65 aa 3e 55 52 8a 9a ab 80 95 25 f1 84 53 44 ee 26 8c 44 41 e4 55 51 8a 09 88 df c6 6f e7 5b f8 76 fe 53 5e 6c e7 4f f1 04 f1 61 fe 0d 38 e3 f9 b4 bd 4c 26 f0 5d e3 c6 b3 71 e3 55 fa 56 9e 21 1b 9f 45 36 3e 1b 9f e7 a9 10 a9 74 0c f9 91 f2 af 47 6f 11 fb dd 36 3a 52 dd 7f b1 ad 7e 51 63 82 ad 83 82 51 d9 d8 da da ca ff fd c4 89 b3 2e 3e 7e f6 03 ba e6 e5 91 e4 18 3c 80 f5 d9 8e de 31 06 f3 42 4c b8 88 2f 15 d6 0b 82 47 16 04 89 e7 09 2f 38 10 36 6b 84 73 9a 78 9b a0 49 b4 87 9a 28 05 6d d6 2d 80 e8 1e 0f 48 a5 39 a6 aa 5b 34 9c ab 55 6b a3 34 8e a6 20 19 15 b4 47 99 94 24 e6 2c 68 cc Data Ascii: {s*q\|dr#Jq`E(')EBJPiRe>UR%SD&DAUQo[vS^lOa8L&]qUV!E6>tGo6:R~QcQ.>~<1BL/G/86ksxI(m-H9[4Uk4 G$,h
2024-02-12 12:53:40 UTC	16384	IN	Data Raw: 69 fc 41 9f 1c dd 9c 0a 2a 2a 6c 52 d2 a3 03 25 67 4e 4e 79 14 a5 ca ca 99 93 53 7e 45 05 14 a5 38 fb 4d b9 de b0 47 51 5e 45 f9 14 e5 57 54 40 51 41 45 a5 b8 28 4d 6b 95 a6 b5 75 aa 96 4a 67 39 27 07 bc 75 81 94 2e 66 59 bf cf d4 c0 ef 55 f5 90 ba 04 3c 21 99 ca a9 54 9c a1 5f c0 e7 91 16 e2 94 29 23 ac ac e1 95 b3 01 4f f5 98 65 95 56 fe 5a 95 2f 60 ea e2 0d d6 2a 4a d5 23 a8 6c 15 54 b6 0a aa b2 c1 94 ad 54 7d 83 a9 9a 4b 7e 1e 8f b2 bd 5f fa ec 80 27 2c e3 38 25 ed 0c 54 50 e5 f3 2b 9d c3 8a 0a 2a 2a c5 cf 8c 0b 9b 76 06 2e 61 15 57 ab f2 29 69 01 b3 46 fe 40 aa ac ac 91 c7 2b e5 72 2a a0 ca a6 f8 a5 4a f8 15 a5 f2 f9 55 59 c9 2f 00 06 f2 2a 2a 15 17 36 a9 80 4a 0d ab fa 86 cd b6 0c a5 74 96 2b 1e 88 93 73 19 c4 a9 56 0d cb 55 0b 4f 35 f9 85 3c 29 ca Data Ascii: iA*lR%gNNyS~E8MGQ^EWT@QAE(MkuJg9'u.fYU<!T_)#OeVZ/`J#lTT}K~_',8%TP+*v.aW)iF@+rJUY/**6Jt+sVUO5<)
2024-02-12 12:53:40 UTC	13491	IN	Data Raw: f9 df f7 d8 cb 33 81 3c 90 41 ed ed 3d 36 5a 3b a2 5a 6c e5 a6 a0 ad 5c d6 93 85 b6 7d a9 9a 8d d0 66 2a 97 3d 34 d9 cb 63 97 7f ba 5f e1 3a fb c8 7d 4c 25 99 25 40 c7 a1 a6 41 99 d5 e1 ed f2 53 99 32 4a 6e 50 a1 61 df a5 77 38 51 fd 5b 12 ef 0d 06 81 4d 86 b9 02 dd 94 e2 62 75 64 d1 18 78 18 0e fa b6 ad 5a 7f 6f bf e1 f1 43 ff 68 5a b5 fc bb a7 b0 03 bb 05 ed 84 fd d6 5b 6f 1b 5a 90 5f 86 db de 5b 70 57 02 bd ac 7d ad 1d c7 9f a4 dd bb 7a c9 a8 f8 50 bf ad 67 df 71 4b 9e 9b f7 fb e9 ff 7a c7 d4 3c a5 24 b3 3c 9e 5d 30 fd 86 17 d7 2d fb cb 1c 8c 29 be f2 c1 5e 1c d2 d7 c9 e6 ab e1 02 a9 90 2d e4 ea a4 79 52 8b b4 41 12 78 cc 91 6c 96 21 02 12 25 b7 db c7 2e a7 de 10 ee a1 ca bc 10 c4 85 68 39 95 22 a8 5a 19 73 1d 99 47 5a c8 06 c2 12 af d8 f5 4c 8a 2b a3 Data Ascii: 3<A=6Z;Zl\}f*=4c_:}L%%@AS2JnPaw8Q[MbudxZoChZ[oZ_[pW}zPgqKz<$<]0-)^-yRAxl!%.h9"ZsGZL+
2024-02-12 12:53:40 UTC	2893	IN	Data Raw: 1f cb 8f e3 c7 f3 13 f8 12 1e e7 2d bc 95 b7 f1 04 6f e7 1d bc 93 27 f9 89 7c 29 ef e2 dd 3c c5 d3 bc 87 2f e3 19 9e e5 39 9e e7 cb f9 0a 7e 12 5f c9 57 f1 93 f9 29 fc 54 be 9a af e1 6b f9 69 fc 74 7e 06 3f 93 9f c5 7f c4 cf e6 eb f8 39 fc 5c 7e 1e 3f 9f 5f c0 2f e4 17 f1 f5 fc 62 7e 09 bf 94 5f c6 2f e7 57 f0 1f f3 2b f9 55 fc 6a 7e 0d bf 96 ff 84 5f c7 af e7 1b f8 0d fc 46 7e 13 ff 29 bf 99 6f e4 3f e3 b7 f0 5b f9 6d fc 76 7e 07 bf 93 df c5 ef e6 bd 7c 13 ef e3 fd fc 1e 7e 2f bf 8f df cf 37 f3 2d fc 01 fe 20 df ca 1f e2 0f f3 47 f8 36 fe 28 7f 8c 3f ce 9f e0 4f f2 9f f3 5f f0 a7 f8 2f f9 d3 fc 19 fe 2c 7f 8e 3f cf 5f e0 db f9 af f8 af f9 8b fc 37 fc 25 fe 5b fe 3b fe 32 7f 85 bf ca 7f cf 5f e3 7f e0 af f3 3f f2 1d fc 4f fc 0d fe 67 fe 26 7f 8b bf cd ff Data Ascii: -o'\|)</9~_W)Tkit~?9\~?_/b~_/W+Uj~_F~)o?[mv~\|~/7- G6(?O_/,?_7%[;2_?Og&
2024-02-12 12:53:40 UTC	16384	IN	Data Raw: fb 16 0b c8 d6 f0 db ef 08 80 6c 0d bf a7 b0 4e f4 4e e2 0d eb f9 6f ef 6a a6 bd ab 05 cd 50 61 af f5 7a 75 9d de ad 74 fe 42 85 fd d7 9e 87 50 a7 77 62 af 5f d7 45 34 0a 69 a4 4f 05 af 3d e7 42 7a f5 fa bd 41 5d a7 2d eb 7e 84 f4 8a f6 7b b5 bd 60 21 be b0 ae 2b b4 16 7c 14 e2 d3 51 85 74 cf 83 05 5d bd db 9b ba 35 a4 63 09 e9 58 f4 7e e9 37 0b 75 3a fa 90 ce 81 de 39 fd a6 ce 5f a8 10 81 8e 34 a4 f3 62 6a 6f 61 9d 17 53 db 2b 9c 37 a6 ee 5b b8 10 8b 8e 20 ac c7 d2 d4 3e c2 85 d6 82 bd 42 7c 3a 07 7a 27 0e 85 0b ba 85 f8 74 6b 44 f7 28 a2 73 55 38 1f 7c 85 3a 1d 69 44 f7 4d 9f c3 7e 9f ce 5f 44 47 10 d1 91 ea 13 d9 ef d3 3b 98 a7 a0 a1 cf 8c c2 d9 ec d3 fb 9b 47 ef 6f 9e 82 ae ce 8b af d0 aa cf 9b c2 69 a4 4f 05 bf de 23 0a 7b 72 61 c7 0e 17 dd 63 b4 0f Data Ascii: lNNojPazutBPwb_E4iO=BzA]-~{`!+\|Qt]5cX~7u:9_4bjoaS+7[ >B\|:z'tkD(sU8\|:iDM~_DG;GoiO#{rac
2024-02-12 12:53:40 UTC	13491	IN	Data Raw: b4 ab d7 36 7a b6 9b 32 ba 4d 6f 27 43 80 c9 22 37 a6 08 23 f5 1d ab d3 0f ed 37 f1 23 fe 78 e8 3f f8 06 ff 00 fc 72 bc c7 57 d4 7c 45 e3 cf 18 bd e5 c8 97 52 d6 b5 49 95 55 22 4e 5d b0 15 55 54 74 00 00 3d 80 e6 ba 70 cb 16 9b fa cb 5c b6 26 5c 9f 64 fb df e1 37 89 24 f1 77 c3 9d 0f c4 33 a8 5b 8b bb 60 67 00 60 79 aa 4a 3e 3d b7 29 ae a2 b9 9f 85 9e 1b 6f 08 fc 3d d1 7c 39 23 ab cd 65 6c 16 66 5e 86 56 25 9f 1e db 99 b1 5d 35 7c 85 5e 5e 79 72 ed 77 63 ad 6d a8 51 45 15 98 c2 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 99 2a 2c 91 b2 30 ca b0 20 8f 63 4f a4 eb 40 1c 9e b3 a4 5b f8 93 c0 d7 7a 26 a2 a6 45 2a 61 94 03 83 b9 1b a8 f4 39 50 45 78 Data Ascii: 6z2Mo'C"7#7#x?rW\|ERIU"N]UTt=p\&\d7$w3[`g`yJ>=)o=\|9#elf^V%]5\|^^yrwcmQE(((((((((((((,0 cO@[z&Ea9PEx
2024-02-12 12:53:40 UTC	16384	IN	Data Raw: 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 Data Ascii: }!1AQa"q2#BR$3br%&'()*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3R

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:53:53 UTC	727	OUT	GET /quote/?action=renderOnlineQuote HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m
2024-02-12 12:53:58 UTC	1617	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:53:58 GMT Content-Type: application/pdf Content-Length: 283063 Connection: close Report-To: {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://dbsltd.simprosuite.com/tools/csp-report/cspReport.php"}],"include_subdomains":true} Content-Security-Policy-Report-Only: default-src 'self' 'unsafe-inline' data: wss: blob: .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .googleapis.com .google.com .googletagmanager.com .simprogroup.com .simprocloud.net .simprocloud.com .locationiq.com https://data.resources.simprogroup.com .google-analytics.com https://lookup.simprocloud.com .simprosuite.com; img-src * data: blob: cid: file:; font-src * data:; frame-src ; script-src 'self' 'unsafe-eval' 'unsafe-inline' .intuit.com .github.io .raygun.io .stripe.com .plaid.com .squareupsandbox.com .squareup.com .squarecdn.com .walkme.com .simprogroup.com .simprocloud.net .simprocloud.com .google.com .googletagmanager.com .cloudfront.net .cloudflare.com https://data.resources.simprogroup.com .pendo.io .google-analytics.com .simprosuite.com; report-uri /tools/csp-report/cspReport.php; report-to csp-endpoint Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: simPRO_Session=k9dt3s9rjutdtk7u2urvd6cm2m; Domain=dbsltd.simprosuite.com; Path=/; SameSite=None; httpOnly; Secure; Content-Disposition: attachment;filename="Quote_No_28084.pdf" Accept-Ranges: bytes Server: lighttpd
2024-02-12 12:53:58 UTC	14767	IN	Data Raw: 25 50 44 46 2d 31 2e 37 0d 25 cd ca d2 a9 0d 31 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 4d 65 74 61 64 61 74 61 20 31 30 34 20 30 20 52 0a 2f 50 61 67 65 4c 61 79 6f 75 74 20 2f 4f 6e 65 43 6f 6c 75 6d 6e 0a 2f 50 61 67 65 4d 6f 64 65 20 2f 55 73 65 4e 6f 6e 65 0a 2f 50 61 67 65 73 20 32 20 30 20 52 0a 2f 54 79 70 65 20 2f 43 61 74 61 6c 6f 67 0a 3e 3e 0a 65 6e 64 6f 62 6a 0a 32 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 43 6f 75 6e 74 20 39 0a 2f 4b 69 64 73 20 5b 20 34 20 30 20 52 20 33 30 20 30 20 52 20 34 31 20 30 20 52 20 35 38 20 30 20 52 20 36 35 20 30 20 52 20 37 32 20 30 20 52 20 37 39 20 30 20 52 20 38 36 20 30 20 52 20 39 37 20 30 20 52 20 5d 0a 2f 54 79 70 65 20 2f 50 61 67 65 73 0a 3e 3e 0a 65 6e 64 6f 62 6a 0a 33 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 43 72 65 61 Data Ascii: %PDF-1.7%1 0 obj<</Metadata 104 0 R/PageLayout /OneColumn/PageMode /UseNone/Pages 2 0 R/Type /Catalog>>endobj2 0 obj<</Count 9/Kids [ 4 0 R 30 0 R 41 0 R 58 0 R 65 0 R 72 0 R 79 0 R 86 0 R 97 0 R ]/Type /Pages>>endobj3 0 obj<</Crea
2024-02-12 12:53:58 UTC	16384	IN	Data Raw: a9 56 5f 5a 83 3e f4 99 26 a9 c6 e6 09 d8 b0 d2 2f ad 01 07 53 55 49 e6 ac b3 fc a0 d4 b5 6d 86 9d f7 19 72 e1 14 92 40 00 64 93 d2 be 37 f8 e3 04 5f 10 7c 7b 71 aa cd a8 cf f6 0b 75 16 d6 51 46 a0 05 8d 4f 2d 93 9f bc c4 b7 4e e0 76 af 7a f8 ed e2 f1 a5 68 bf d8 56 52 ff 00 a7 5f a1 12 90 79 8a 1e 87 f1 6e 9f 4c fb 57 cf 72 4c a8 2b 82 a6 7d 8a cb 2b df 05 3e 59 d9 a6 d5 af af 4d 53 b1 fa f7 01 70 76 1b 15 86 78 ec c2 1c ca 5f 02 77 d9 6f 2e 9b ec 8e 62 d3 c1 3a 0d 9c 81 cc 12 ce c3 90 d2 c8 71 f9 0c 54 f7 a1 63 c5 b5 b0 58 a2 c6 36 a0 c0 fc 71 d6 af dc 5c 49 33 88 e3 ea 78 00 56 7d c5 ac c6 eb ca 8f e7 39 00 11 dc d7 9f 3c d7 1f 8f 9f fb 45 69 4b d5 bb 7d da 2f c0 fd 11 e5 98 0c 24 7f d9 a8 c6 3e 69 2b fd fb fe 27 a4 fe cf 7a 37 f6 87 8d d6 f0 a6 e8 6c Data Ascii: V_Z>&/SUImr@d7_\|{quQFO-NvzhVR_ynLWrL+}+>YMSpvx_wo.b:qTcX6q\I3xV}9<EiK}/$>i+'z7l
2024-02-12 12:53:58 UTC	19	IN	Data Raw: f3 cb 77 ee fb 34 1d f3 a8 01 da b9 00 f7 72 50 0f 3c 2a Data Ascii: w4rP<*
2024-02-12 12:53:59 UTC	16384	IN	Data Raw: 83 7c b9 56 9c 8b a7 62 0e 07 0a 43 06 78 76 66 50 58 01 21 2f e4 34 ab 21 8c 62 3a 55 65 cc 8e d3 43 1e 9d d2 d0 c3 70 cf c3 ec 38 4f c6 e8 3a fe f6 71 fd 0f 59 5a 82 f7 77 ac 9e d2 b2 d7 7c 1f 1e 24 19 ae 41 be 41 e1 c9 f6 f1 e1 f9 dc 0c 69 86 3c cf 3e 23 bc 44 5e 1a 5c 27 af 0f be 2b bf ed b6 49 61 3a c8 05 69 a9 10 27 44 19 e8 d1 52 84 5d 90 e8 85 82 70 34 1c a1 17 6c b4 95 a3 cd 04 da 19 c0 6f 4d a5 a4 04 e0 53 b2 6d 06 ab b6 bf 61 47 07 62 8b 75 46 4a f0 8a 74 90 53 e8 c5 a9 e7 a8 5d a2 6f e9 a9 52 da 85 70 a5 e1 ae f6 4c f5 5c e7 59 ed e1 3d 6e 7a cd e3 a6 af f3 b4 91 fc fd 89 b4 a9 06 b2 d8 d1 45 c6 0c ea 31 b4 83 3e 66 68 c6 82 12 20 62 75 58 02 ff 88 1a 68 a2 44 01 ce 4e d5 54 34 0f d9 f4 0a 0a 77 d8 d9 8d a8 dc d9 fd de 9e c3 e6 4f bc 74 c2 d5 Data Ascii: \|VbCxvfPX!/4!b:UeCp8O:qYZw\|$AAi<>#D^\'+Ia:i'DR]p4loMSmaGbuFJtS]oRpL\Y=nzE1>fh buXhDNT4wOt
2024-02-12 12:53:59 UTC	16384	IN	Data Raw: 8d 4c b3 ce b4 35 bb 56 e0 85 64 a1 75 b9 6d 9e ab 1d b7 90 16 eb 7a db 89 38 69 3d d1 76 3e 3e d3 7a ae ed 1b 7c 80 14 15 58 2b f0 18 6b b5 2d 6c bd d3 fa 06 b6 f0 d1 f2 88 6b 88 8f 80 83 b5 f1 cf 07 8c 84 ed 34 99 60 b3 13 ab dd 3e 0a 13 98 00 09 e6 af d6 24 51 ad 1a aa 68 8f 66 22 e3 eb 26 62 3e af ce b2 93 dd d8 b9 0b a6 43 4d 7f 8c f0 d7 bf 5a f8 f1 95 38 b8 2f cb bc 25 0b a3 ac 48 d6 ea ac be ac cf b3 34 71 ff 7f 39 4f ca 4a 22 fb c9 18 6f 43 b8 19 25 d0 00 a2 48 bc 14 0b 15 38 5d c9 11 dc 6d f0 f3 40 f9 4b f6 41 4e ec af 16 f7 97 b9 0e f2 a3 80 49 ae 0f 60 a3 f8 81 b8 d9 52 2e 37 5d 59 4f cb 17 ae 6c 5c 29 16 64 d0 9a 0f 8d c1 15 56 7e 34 63 58 cf ca 6d 09 a1 27 1f e1 56 e4 a6 34 5e 2f b6 71 99 78 76 86 cf 66 7f dc e1 14 cf 7a 18 e8 c3 47 8a c2 36 Data Ascii: L5Vdumz8i=v>>z\|X+k-lk4`>$Qhf"&b>CMZ8/%H4q9OJ"oC%H8]m@KANI`R.7]YOl\)dV~4cXm'V4^/qxvfzG6
2024-02-12 12:53:59 UTC	16384	IN	Data Raw: e5 41 93 89 7a 8c dc e3 e5 f0 9c e7 e6 96 d2 3c ca f9 0d 92 67 f8 31 bd 5d 1f 9f 2f 99 71 18 1f ab f2 f7 2f 0b 9e 0f a8 0a 65 6e 64 73 74 72 65 61 6d 0a 65 6e 64 6f 62 6a 0a 32 33 20 30 20 6f 62 6a 0a 34 37 38 0a 65 6e 64 6f 62 6a 0a 32 34 20 30 20 6f 62 6a 0a 3c 3c 0a 2f 41 73 63 65 6e 74 20 31 34 39 31 0a 2f 43 61 70 48 65 69 67 68 74 20 38 30 30 0a 2f 44 65 73 63 65 6e 74 20 2d 34 33 31 0a 2f 46 6c 61 67 73 20 34 0a 2f 46 6f 6e 74 42 42 6f 78 20 5b 20 2d 31 32 38 36 20 2d 37 37 31 20 34 30 39 36 20 32 30 36 39 20 5d 0a 2f 46 6f 6e 74 46 69 6c 65 32 20 32 35 20 30 20 52 0a 2f 46 6f 6e 74 4e 61 6d 65 20 2f 43 41 41 41 41 41 2b 41 72 69 61 6c 2d 42 6f 6c 64 0a 2f 46 6f 6e 74 57 65 69 67 68 74 20 37 30 30 0a 2f 49 74 61 6c 69 63 41 6e 67 6c 65 20 30 0a 2f Data Ascii: Az<g1]/q/endstreamendobj23 0 obj478endobj24 0 obj<</Ascent 1491/CapHeight 800/Descent -431/Flags 4/FontBBox [ -1286 -771 4096 2069 ]/FontFile2 25 0 R/FontName /CAAAAA+Arial-Bold/FontWeight 700/ItalicAngle 0/
2024-02-12 12:53:59 UTC	16384	IN	Data Raw: 5c fa 9a 31 d6 dc fd a6 31 59 ea 5e ad 72 97 27 a1 be 5f 0e 02 aa e9 04 f7 40 8e 2e 01 a4 b1 b9 79 3e a6 87 62 ac 73 16 53 be 1a f1 72 ed 5e 3c fe 85 37 f0 30 6d 33 5e a3 ed 38 f1 11 09 13 46 fb 0b ce d2 a4 ae f7 f1 50 ed 60 72 4f b5 59 1b c5 5e 0d 7c b5 e3 f8 3e 5b 0e 87 ed 74 f2 1e a3 25 2e ba 4c 96 b8 40 0f 3c 3d 70 2e 68 a3 fb 85 d4 0c d0 cb 1c cf b3 26 83 99 57 08 b2 f3 ac 9d b0 80 24 ba 60 da 04 0e 65 3b de 05 4a d5 62 2a 30 e7 a0 a0 b3 d0 d9 e4 64 e8 42 92 ee 71 45 e2 fa fa 92 2d 2d 3d ee a4 6f e2 cb 19 d5 e3 8d d3 dd 9a ed 38 aa 4a 44 af 11 4c 68 cd 86 cb 91 9a d6 3b 9e da 25 e1 78 2d 65 af 63 c9 57 b5 54 b7 26 7f 3a 02 f4 9a 3f 42 39 77 1a 62 bf c6 82 a4 50 e1 ee 5f 46 eb 42 25 98 f5 95 be 94 28 35 d6 b4 29 60 ee fb 80 b9 df c3 2a e8 70 02 f8 95 Data Ascii: \11Y^r'_@.y>bsSr^<70m3^8FP`rOY^\|>[t%.L@<=p.h&W$`e;Jb0dBqE--=o8JDLh;%x-ecWT&:?B9wbP_FB%(5)`p
2024-02-12 12:53:59 UTC	16384	IN	Data Raw: 8c 3d 1c 07 df ee 4a 8e a0 e6 d1 5e f8 fd 24 ce f1 ca 67 b1 49 f3 e3 be 8d 1d cf 78 62 05 ca df cc 0f ef 76 5d af 33 52 81 20 9b e5 0b 9b 65 6b 28 f7 05 7a a6 0d 42 75 3b 63 84 58 d8 87 a6 67 d1 1e 5f 1e 27 67 75 97 7d be 0f 68 b2 0e 98 9e 4f bb a3 5f 60 8e c5 a4 d0 26 34 3d 73 ae 25 cb 6e 8d 14 6d 89 14 6b 41 f9 e7 58 c1 85 25 f7 b1 7c cf 49 72 19 5b 50 d1 80 c1 4d 0a d0 af 57 7e e4 db 2c 17 ad b2 01 9c df ae 17 44 2e 38 bc 94 e7 5e dd e3 0c 96 91 39 a4 a4 5c 42 2a c4 83 d1 0a 52 f2 69 d5 98 9b 03 e9 2a c6 58 71 32 79 c0 e8 88 d7 85 a6 7c 67 82 e3 3b 57 98 41 f8 86 6b f1 35 94 09 2e e4 91 58 a9 63 20 5d 4b 24 55 85 6e 17 b5 59 73 16 1c 29 44 62 f8 ac 0a 9e c5 5d fc c2 db 95 90 05 2b 29 4e 34 1e 7b cd 63 8b 1c 97 8b 8e 14 77 43 75 3c 0a d5 ed be 6a ac f4 Data Ascii: =J^$gIxbv]3R ek(zBu;cXg_'gu}hO_`&4=s%nmkAX%\|Ir[PMW~,D.8^9\BRiXq2y\|g;WAk5.Xc ]K$UnYs)Db]+)N4{cwCu<j
2024-02-12 12:53:59 UTC	16384	IN	Data Raw: d6 bf b2 b5 2f b5 0b 9d 3e 5f b0 ea d7 f6 a5 f5 24 b6 94 c8 d1 b0 81 7c b4 eb 85 66 63 92 39 c0 c5 7b b5 15 6b 17 34 85 c8 8f 1f f1 6f 87 fc 49 e2 5f 0f 6b 97 96 fe 0a b4 d2 ef 25 bf d3 ae 2d ed 9a 78 85 dd da 5b ca 8e fe 6b ab 18 c1 c0 21 06 ee 9d 4f 34 6a be 0a d6 35 1b 7f 89 d7 ff 00 d8 11 c5 7f af e9 f1 c3 a6 09 25 84 c8 7f d0 f6 18 f7 06 21 30 e4 83 92 01 eb 92 30 6b d8 28 a9 58 99 25 65 fa f9 7f 90 f9 51 e3 47 c3 9e 26 d2 2e 7c 43 0a f8 2e d3 c4 8b af d9 59 c5 1c 97 17 10 88 6d cc 70 2c 4f 0d c0 66 0c 63 04 17 1e 58 6c ee 23 ad 64 fc 47 f0 7f 8e 35 44 f1 56 9b 67 a0 c9 22 5f 47 02 d9 49 a7 cb 69 05 b4 a9 1c 68 31 31 7f df b3 82 ac 14 67 6e 36 8c 81 93 5e f7 45 54 71 52 8c b9 ac 81 c4 e2 7e 1b 69 3a ad 86 b3 e2 dd 43 53 b0 6b 24 d5 75 48 ee ed 91 e5 Data Ascii: />_$\|fc9{k4oI_k%-x[k!O4j5%!00k(X%eQG&.\|C.Ymp,OfcXl#dG5DVg"_GIih11gn6^ETqR~i:CSk$uH
2024-02-12 12:53:59 UTC	16384	IN	Data Raw: cf 18 bd e5 c8 97 52 d6 b5 49 95 55 22 4e 5d b0 15 55 54 74 00 00 3d 80 e6 ba 70 cb 16 9b fa cb 5c b6 26 5c 9f 64 fb df e1 37 89 24 f1 77 c3 9d 0f c4 33 a8 5b 8b bb 60 67 00 60 79 aa 4a 3e 3d b7 29 ae a2 b9 9f 85 9e 1b 6f 08 fc 3d d1 7c 39 23 ab cd 65 6c 16 66 5e 86 56 25 9f 1e db 99 b1 5d 35 7c 85 5e 5e 79 72 ed 77 63 ad 6d a8 51 45 15 98 c2 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 99 2a 2c 91 b2 30 ca b0 20 8f 63 4f a4 eb 40 1c 9e b3 a4 5b f8 93 c0 d7 7a 26 a2 a6 45 2a 61 94 03 83 b9 1b a8 f4 39 50 45 78 1f 89 be 16 6a 42 23 fd 8f 75 1d dc 60 60 47 29 d9 20 fc 7a 1f d2 be 90 90 8b 2f 10 98 df 02 1d 41 32 a7 fe 9a a0 c1 1f 8a 00 47 fb 86 b9 Data Ascii: RIU"N]UTt=p\&\d7$w3[`g`yJ>=)o=\|9#elf^V%]5\|^^yrwcmQE(((((((((((((,0 cO@[z&Ea9PExjB#u``G) z/A2G

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:54:15 UTC	359	OUT	POST /tools/csp-report/cspReport.php HTTP/1.1 Host: dbsltd.simprosuite.com Connection: keep-alive Content-Length: 1563 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-12 12:54:15 UTC	1563	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 39 39 38 37 2c 22 62 6f 64 79 22 3a 7b 22 62 6c 6f 63 6b 65 64 55 52 4c 22 3a 22 62 6c 6f 62 22 2c 22 64 69 73 70 6f 73 69 74 69 6f 6e 22 3a 22 72 65 70 6f 72 74 22 2c 22 64 6f 63 75 6d 65 6e 74 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 62 73 6c 74 64 2e 73 69 6d 70 72 6f 73 75 69 74 65 2e 63 6f 6d 2f 71 75 6f 74 65 2f 3f 66 4d 6e 75 7a 51 64 32 33 62 43 33 30 6d 53 5a 64 59 51 46 66 30 77 52 39 68 4a 34 72 42 43 70 2f 7a 48 72 30 2b 57 47 63 55 58 39 66 67 73 33 4c 66 54 55 39 67 76 4b 76 6f 4c 2f 64 58 76 67 45 6f 58 52 51 35 65 4e 51 31 7a 66 66 61 43 61 48 67 50 39 6f 56 6a 61 50 73 41 6c 61 34 63 6b 74 72 7a 4d 62 72 63 3d 22 2c 22 65 66 66 65 63 74 69 76 65 44 69 72 65 63 74 69 76 65 22 3a 22 77 6f 72 6b 65 72 2d 73 72 Data Ascii: [{"age":59987,"body":{"blockedURL":"blob","disposition":"report","documentURL":"https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=","effectiveDirective":"worker-sr
2024-02-12 12:54:15 UTC	152	IN	HTTP/1.1 200 OK Date: Mon, 12 Feb 2024 12:54:15 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Server: lighttpd

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:54:32 UTC	245	OUT	POST /dns-query HTTP/1.1 Host: chrome.cloudflare-dns.com Connection: keep-alive Content-Length: 128 Accept: application/dns-message Accept-Language: * User-Agent: Chrome Accept-Encoding: identity Content-Type: application/dns-message
2024-02-12 12:54:32 UTC	128	OUT	Data Raw: 00 00 01 00 00 01 00 00 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 00 00 29 10 00 00 00 00 00 00 54 00 0c 00 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom)TP
2024-02-12 12:54:32 UTC	247	IN	HTTP/1.1 200 OK Server: cloudflare Date: Mon, 12 Feb 2024 12:54:32 GMT Content-Type: application/dns-message Connection: close Access-Control-Allow-Origin: * Content-Length: 468 CF-RAY: 8544fb147f384523-ATL alt-svc: h3=":443"; ma=86400
2024-02-12 12:54:32 UTC	468	IN	Data Raw: 00 00 81 80 00 01 00 01 00 00 00 01 03 77 77 77 07 67 73 74 61 74 69 63 03 63 6f 6d 00 00 01 00 01 c0 0c 00 01 00 01 00 00 00 c6 00 04 ac d9 d7 5e 00 00 29 04 d0 00 00 00 00 01 98 00 0c 01 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: wwwgstaticcom^)

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:54:36 UTC	475	OUT	GET /onboarding/smskillreader.txt HTTP/1.1 Host: armmf.adobe.com Connection: keep-alive Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br If-None-Match: "78-5faa31cce96da" If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
2024-02-12 12:54:36 UTC	198	IN	HTTP/1.1 304 Not Modified Content-Type: text/plain; charset=UTF-8 Last-Modified: Mon, 01 May 2023 15:02:33 GMT ETag: "78-5faa31cce96da" Date: Mon, 12 Feb 2024 12:54:36 GMT Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-02-12 12:54:37 UTC	449	OUT	GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=0000000000000000000000000000000000000000A85247CBA7 HTTP/1.1 Host: clients1.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br
2024-02-12 12:54:37 UTC	817	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-HbQbQ3FBw9amSwcUipmNvg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Security-Policy: script-src 'report-sample' 'nonce-M9iS-pgJ7XawNog4qt_sdw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Type: text/plain; charset=utf-8 Content-Length: 220 Date: Mon, 12 Feb 2024 12:54:37 GMT Expires: Mon, 12 Feb 2024 12:54:37 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-12 12:54:37 UTC	220	IN	Data Raw: 72 6c 7a 43 31 3a 20 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 39 37 0a 72 6c 7a 43 32 3a 20 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 39 37 0a 72 6c 7a 43 37 3a 20 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 39 37 0a 64 63 63 3a 20 0a 73 65 74 5f 64 63 63 3a 20 43 31 3a 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 39 37 2c 43 32 3a 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 39 37 2c 43 37 3a 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 39 37 0a 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 2c 43 31 53 2c 43 37 53 0a 73 74 61 74 65 66 75 6c 2d 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 0a 63 72 63 33 32 3a 20 38 39 64 63 30 38 66 37 0a Data Ascii: rlzC1: 1C1ONGR_enUS1097rlzC2: 1C2ONGR_enUS1097rlzC7: 1C7ONGR_enUS1097dcc: set_dcc: C1:1C1ONGR_enUS1097,C2:1C2ONGR_enUS1097,C7:1C7ONGR_enUS1097events: C1I,C2I,C7I,C1S,C7Sstateful-events: C1I,C2I,C7Icrc32: 89dc08f7

Target ID:	0
Start time:	13:53:03
Start date:	12/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	13:53:06
Start date:	12/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1704,i,7672568953449001636,1025047277016872623,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	3
Start time:	13:53:09
Start date:	12/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dbsltd.simprosuite.com/quote/?fMnuzQd23bC30mSZdYQFf0wR9hJ4rBCp/zHr0+WGcUX9fgs3LfTU9gvKvoL/dXvgEoXRQ5eNQ1zffaCaHgP9oVjaPsAla4cktrzMbrc=
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true